shinjuku-shielded 0.3.173 → 0.3.174

package/README.md

@@ -6,13 +6,13 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.173. The npm packages `shinjuku-shield` and
+This is version 0.3.174. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files. The command is `shinjuku`.
 
 ## Set up
 
 ```sh
-npx -y shinjuku@0.3.173 setup
+npx -y shinjuku@0.3.174 setup
 ```
 
 Setup offers to install the `shinjuku` command and, on Windows, adds npm's
@@ -35,13 +35,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.173 mcp
+claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.174 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.173", "mcp"] } } }
+{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.174", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and
@@ -54,7 +54,7 @@ Codex (the Codex app and Codex CLI read the same file, `~/.codex/config.toml`):
 ```toml
 [mcp_servers.shinjuku]
 command = "npx"
-args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.173", "mcp"]
+args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.174", "mcp"]
 startup_timeout_sec = 120
 tool_timeout_sec = 300
 ```

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "190dcbc3bb63059691cef5a801d8c249f403dff69a2e45c031da5f5edbde9f29",
-  "bytes": 9389003,
-  "sourceCommit": "1e7c5e1a6635c6b454956b060b7f5d6706b7e115",
+  "sha256": "1018a5346c79bc828bd3200c8c6c7d741cac55e279d5b88a70f895f44cc105c6",
+  "bytes": 9392332,
+  "sourceCommit": "1629d7280f4cef53ec8b06e6f303e11c2c8ac3fe",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1038,5 +1038,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-11-05T13:06:18.056Z"
+  "publishedAt": "2026-11-05T13:40:19.887Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.173",
+  "version": "0.3.174",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "190dcbc3",
-  "shinjukuSha256": "190dcbc3bb63059691cef5a801d8c249f403dff69a2e45c031da5f5edbde9f29",
+  "shinjukuRelease": "1018a534",
+  "shinjukuSha256": "1018a5346c79bc828bd3200c8c6c7d741cac55e279d5b88a70f895f44cc105c6",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-shield#readme",

package/shinjuku-wallet.mjs

@@ -54246,6 +54246,7 @@ import { execFileSync as execFileSync2, spawnSync as spawnSync3 } from "node:chi
 import { randomBytes as randomBytes7 } from "node:crypto";
 import { homedir } from "node:os";
 import { basename as basename4, dirname as dirname6, isAbsolute as isAbsolute2, join as join9, relative as relative3, resolve as resolve6 } from "node:path";
+import { fileURLToPath as fileURLToPath4, pathToFileURL } from "node:url";
 function retiredPoolText(pool2, npmVersion) {
   const next = RETIRED_POOLS[pool2];
   if (!next) return void 0;
@@ -54460,6 +54461,29 @@ function mcpFlagsFromConfig(home, config) {
     ["--unshield-to", config.unshieldTo ? [...config.unshieldTo] : void 0]
   ].filter(([, value2]) => value2 !== void 0);
 }
+function hostEntry(target, entry, platform = process.platform) {
+  const typed = ["vscode", "cline", "continue"].includes(target) ? { type: "stdio", ...entry } : entry;
+  const folder = hostStartFolder(target, entry);
+  if (target === "hermes" || folder === void 0) return typed;
+  return { ...typed, cwd: target === "continue" && platform === "win32" ? pathToFileURL(folder).href : folder };
+}
+function hostStartFolder(target, entry) {
+  const home = typeof entry?.env?.SHIELDED_WALLET_HOME === "string" ? resolve6(entry.env.SHIELDED_WALLET_HOME) : void 0;
+  if (home === void 0 || !CWD_HOSTS.includes(target)) return void 0;
+  return target === "hermes" || !hasPrefix(entry) ? home : void 0;
+}
+function noStartFolderWords(target, entry) {
+  if (hasPrefix(entry) || hostStartFolder(target, entry) !== void 0) return "";
+  return ` Your wallet folder path has a character that Windows reads as code (% & | < > ^ ! or "), so ${HOST_NAMES[target]} starts the wallet in a folder of its own: a settings file there (.npmrc) can stop the wallet. If the wallet does not start there, set up the wallet again in a folder without these characters.`;
+}
+function cwdFolder(cwd) {
+  if (typeof cwd !== "string" || !cwd) return void 0;
+  try {
+    return resolve6(cwd.startsWith("file://") ? fileURLToPath4(cwd) : cwd);
+  } catch {
+    return void 0;
+  }
+}
 function npxPackageWord(npmVersion) {
   const version3 = knownNpmVersion(npmVersion);
   return version3 ? `${NPX_PACKAGE}@${version3}` : NPX_PACKAGE;
@@ -54507,12 +54531,16 @@ function terminalUseLines(npmVersion) {
   return ["To type shinjuku balance and the other commands in a terminal, install the shinjuku command once:", `  ${installCommandText(npmVersion)}`];
 }
 function mcpServerEntry({ home, platform = process.platform, npmVersion, path, tor } = {}) {
-  const npx = ["npx", "-y", ...NPX_INSTALL_FLAGS, npxPackageWord(npmVersion), "mcp"];
+  const npx = ["npx", "-y", ...NPX_INSTALL_FLAGS, ...npmPrefixArgs(home, platform), npxPackageWord(npmVersion), "mcp"];
   return {
     ...platform === "win32" ? { command: "cmd", args: ["/c", ...npx] } : { command: "npx", args: npx.slice(1) },
     env: { SHIELDED_WALLET_HOME: resolve6(home), ...path ? { PATH: path } : {}, ...npmStartEnvironment(tor ?? homeTorOn(home)) }
   };
 }
+function npmPrefixArgs(home, platform = process.platform) {
+  const folder = resolve6(home);
+  return platform === "win32" && CMD_ARG_CODE.test(folder) ? [] : [`--prefix=${folder}`];
+}
 function homeTorOn(home) {
   try {
     return readSetupConfig(home)?.tor === true;
@@ -54548,7 +54576,11 @@ function walletEntryShape(entry, defaultHome) {
   delete env.SHIELDED_WALLET_HOME;
   delete env.PATH;
   for (const key of NPM_START_KEYS) delete env[key];
-  return { home, args, env };
+  const word2 = args.findIndex(isPackageWord);
+  const own = (arg, index) => index < word2 && typeof arg === "string" && arg.startsWith("--prefix=");
+  if (args.some((arg, index) => own(arg, index) && resolve6(arg.slice("--prefix=".length)) !== home)) return void 0;
+  if (entry.cwd !== void 0 && cwdFolder(entry.cwd) !== home) return void 0;
+  return { home, args: args.filter((arg, index) => !own(arg, index)), env };
 }
 function walletEntryHomeOf(existing, entry, { defaultHome = defaultWalletHome() } = {}) {
   const was = walletEntryShape(existing, defaultHome);
@@ -54705,11 +54737,11 @@ function hostConfigText({ home, env = process.env, platform = process.platform,
   const entry = mcpServerEntry({ home, platform, npmVersion });
   const more = ["vscode", "devin", "cline", "continue", "gemini", "antigravity"].filter((target) => !skip.has(target)).flatMap((target) => {
     const file = hostConfigFile(target, { platform, env, home: userHome });
-    if (target === "continue") return [`${HOST_NAMES[target]}: save these lines as ${file}:`, ...continueBlockText(hostEntry(target, entry)).trimEnd().split("\n").map((line) => `  ${line}`)];
+    if (target === "continue") return [`${HOST_NAMES[target]}: save these lines as ${file}:`, ...continueBlockText(hostEntry(target, entry, platform)).trimEnd().split("\n").map((line) => `  ${line}`)];
     const key = hostServersKey(target);
     return [
       `${HOST_NAMES[target]} (${file}): in that file, add these lines inside the { } after "${key}" (put a comma after the entry before them; a file with no "${key}" gets "${key}": { } first):`,
-      ...`${JSON.stringify(MCP_SERVER_NAME)}: ${JSON.stringify(hostEntry(target, entry), null, 2)}`.split("\n").map((line) => `  ${line}`)
+      ...`${JSON.stringify(MCP_SERVER_NAME)}: ${JSON.stringify(hostEntry(target, entry, platform), null, 2)}`.split("\n").map((line) => `  ${line}`)
     ];
   });
   const member = `${JSON.stringify(MCP_SERVER_NAME)}: ${JSON.stringify(entry, null, 2)}`;
@@ -54725,11 +54757,11 @@ function hostConfigText({ home, env = process.env, platform = process.platform,
     ] : [],
     ...skip.has("codex") ? [] : [
       "Codex (the Codex side of the ChatGPT desktop app, and Codex CLI), at the end of ~/.codex/config.toml:",
-      ...codexTomlBlock(entry).trimEnd().split("\n").map((line) => `  ${line}`)
+      ...codexTomlBlock(hostEntry("codex", entry, platform)).trimEnd().split("\n").map((line) => `  ${line}`)
     ],
     ...skip.has("grok") ? [] : [
       `Grok Build (the grok command), at the end of ${hostConfigFile("grok", { platform, env, home: userHome })}:`,
-      ...codexTomlBlock(entry).trimEnd().split("\n").map((line) => `  ${line}`)
+      ...codexTomlBlock(hostEntry("grok", entry, platform)).trimEnd().split("\n").map((line) => `  ${line}`)
     ],
     ...skip.has("hermes") ? [] : [
       `Hermes Agent, at the end of ${(() => {
@@ -54787,6 +54819,7 @@ function codexTomlBlock(entry, extra = []) {
     `[mcp_servers.${tomlKey(MCP_SERVER_NAME)}]`,
     `command = ${tomlString(entry.command)}`,
     `args = [${entry.args.map(tomlString).join(", ")}]`,
+    ...typeof entry.cwd === "string" ? [`cwd = ${tomlString(entry.cwd)}`] : [],
     `startup_timeout_sec = ${CODEX_STARTUP_TIMEOUT_SEC}`,
     `tool_timeout_sec = ${CODEX_TOOL_TIMEOUT_SEC}`,
     ...extra
@@ -54992,6 +55025,7 @@ function codexServersIn(text3, names) {
       const value2 = tomlValue(found.text);
       if (rel.length === 1 && rel[0] === "command") server.command = value2;
       else if (rel.length === 1 && rel[0] === "args") server.args = value2;
+      else if (rel.length === 1 && rel[0] === "cwd") server.cwd = value2;
       else if (rel.length === 1 && rel[0] === "env" && isPlainObject(value2)) server.env = { ...server.env, ...value2 };
       else if (rel.length === 2 && rel[0] === "env") server.env[rel[1]] = value2;
       else if (table.length === 2 && !(rel.length === 1 && (rel[0] === "startup_timeout_sec" || rel[0] === "tool_timeout_sec"))) {
@@ -55403,6 +55437,7 @@ function addToHermesHost(file, entry, { now = /* @__PURE__ */ new Date(), force
   if (basename4(dirname6(dirname6(file))) === "profiles" && !existsSync(dirname6(file))) {
     throw new Error(`setup_host_config_unreadable: Hermes' profile folder ${dirname6(file)} does not exist, so setup wrote nothing; pick a profile with hermes profile use, then run this setup line again, or add the printed entry by hand`);
   }
+  entry = { ...entry, ...hermesCwd(entry) ? { cwd: hermesCwd(entry) } : {} };
   let replaced = [];
   const result = changeJsonFile(file, (text3) => {
     const names = [MCP_SERVER_NAME, ...OLD_MCP_SERVER_NAMES];
@@ -55477,10 +55512,13 @@ function isOlderSetupEntry(existing, entry, options) {
   const home = walletEntryHomeOf(existing, entry, options);
   return home !== void 0 && home === walletEntryShape(entry, home)?.home;
 }
+function isPackageWord(arg) {
+  return typeof arg === "string" && (PINNED_PACKAGE.test(arg) || LAUNCHER_PACKAGE.test(arg) || NPM_PACKAGE_NAMES.includes(arg) || arg === COMMAND_PACKAGE);
+}
 function isOlderArgs(was, now) {
   const pinned = (args) => args.some((arg) => PINNED_PACKAGE.test(arg));
   if (pinned(was) && !pinned(now)) return false;
-  const plain = (args) => args.map((arg) => typeof arg === "string" && (PINNED_PACKAGE.test(arg) || LAUNCHER_PACKAGE.test(arg) || NPM_PACKAGE_NAMES.includes(arg) || arg === COMMAND_PACKAGE) ? NPX_PACKAGE : arg);
+  const plain = (args) => args.map((arg) => isPackageWord(arg) ? NPX_PACKAGE : arg);
   return sameJson(plain(was), plain(now)) || sameJson(plain(was), plain(now).filter((arg) => !NPX_INSTALL_FLAGS.includes(arg)));
 }
 function isOlderClaudeCodeEntry(existing, options = {}) {
@@ -55774,7 +55812,7 @@ function changeFileOnce(file, change, { now, platform, restrict, codec = JSON_CO
   }
   return { changed: true, ...backup ? { backup } : {} };
 }
-var import_web396, CONFIG_SCHEMA, CONFIG_FILE, NPM_PACKAGE_NAMES, COMMAND_PACKAGE, NPX_PACKAGE, NPX_INSTALL_FLAGS, MCP_SERVER_NAME, OLD_MCP_SERVER_NAMES, P03_BINDING, PRODUCTION, RETIRED_POOLS, NO_LIMIT_ATOMIC, DEFAULT_CAPS, OLD_DEFAULT_SETUP_CAPS, OLD_DEFAULT_WALLET_BUDGETS, capText, POSITIVE_ATOMIC, HOME_FOLDER, OLDER_HOME_FOLDER, defaultHomeWords, configPath, homeWalletPath, invalid, isPubkey, MAX_OWN_ADDRESSES, isOwnAddressText, salvagePath, clearConfigSalvage, HOST_TARGETS, HOST_NAMES, hostServersKey, hostEntry, CODEX_STARTUP_TIMEOUT_SEC, CODEX_TOOL_TIMEOUT_SEC, PINNED_PACKAGE, LAUNCHER_PACKAGE, NPM_VERSION, knownNpmVersion, RECOVERY_WORDS, NPX_WALLET_LINE, RELEASES_URL, npmStartEnvironment, NPM_START_KEYS, defaultWalletHome, CMD_UNSAFE, programOf, claudeLineDiffers, WINDOWS_SHELL_CODE, CLAUDE_DESKTOP_FILE, claudeDataDirsCache, CONTINUE_HEADER, tomlString, tomlKey, codexEntryOf, HERMES_TRUST, HERMES_TOOL_TIMEOUT_SEC, hermesCwd, HERMES_OWN_KEYS, HERMES_RESERVED_PROFILES, yamlString, hermesEntryOf, isPlainObject, sameJson, claudeCodeEntry, READ_ONLY_TOOL_NAMES, claudeCodeAllowRules, claudeCodeSettingsFile, UNREADABLE_JSON, JSON_CODEC, indentAt, TEXT_CODEC, RACED;
+var import_web396, CONFIG_SCHEMA, CONFIG_FILE, NPM_PACKAGE_NAMES, COMMAND_PACKAGE, NPX_PACKAGE, NPX_INSTALL_FLAGS, MCP_SERVER_NAME, OLD_MCP_SERVER_NAMES, P03_BINDING, PRODUCTION, RETIRED_POOLS, NO_LIMIT_ATOMIC, DEFAULT_CAPS, OLD_DEFAULT_SETUP_CAPS, OLD_DEFAULT_WALLET_BUDGETS, capText, POSITIVE_ATOMIC, HOME_FOLDER, OLDER_HOME_FOLDER, defaultHomeWords, configPath, homeWalletPath, invalid, isPubkey, MAX_OWN_ADDRESSES, isOwnAddressText, salvagePath, clearConfigSalvage, HOST_TARGETS, HOST_NAMES, hostServersKey, CWD_HOSTS, hasPrefix, CODEX_STARTUP_TIMEOUT_SEC, CODEX_TOOL_TIMEOUT_SEC, PINNED_PACKAGE, LAUNCHER_PACKAGE, NPM_VERSION, knownNpmVersion, RECOVERY_WORDS, NPX_WALLET_LINE, RELEASES_URL, npmStartEnvironment, CMD_ARG_CODE, NPM_START_KEYS, defaultWalletHome, CMD_UNSAFE, programOf, claudeLineDiffers, WINDOWS_SHELL_CODE, CLAUDE_DESKTOP_FILE, claudeDataDirsCache, CONTINUE_HEADER, tomlString, tomlKey, codexEntryOf, HERMES_TRUST, HERMES_TOOL_TIMEOUT_SEC, hermesCwd, HERMES_OWN_KEYS, HERMES_RESERVED_PROFILES, yamlString, hermesEntryOf, isPlainObject, sameJson, claudeCodeEntry, READ_ONLY_TOOL_NAMES, claudeCodeAllowRules, claudeCodeSettingsFile, UNREADABLE_JSON, JSON_CODEC, indentAt, TEXT_CODEC, RACED;
 var init_config = __esm({
   "wallet/src/setup/config.mjs"() {
     "use strict";
@@ -55851,7 +55889,8 @@ var init_config = __esm({
       hermes: "Hermes Agent"
     });
     hostServersKey = (target) => target === "vscode" ? "servers" : "mcpServers";
-    hostEntry = (target, entry) => ["vscode", "cline", "continue"].includes(target) ? { type: "stdio", ...entry } : entry;
+    CWD_HOSTS = Object.freeze(["vscode", "codex", "grok", "gemini", "cline", "continue", "hermes"]);
+    hasPrefix = (entry) => Array.isArray(entry?.args) && entry.args.some((arg) => typeof arg === "string" && arg.startsWith("--prefix="));
     CODEX_STARTUP_TIMEOUT_SEC = 120;
     CODEX_TOOL_TIMEOUT_SEC = 300;
     PINNED_PACKAGE = /^shinjuku(?:-shield(?:ed)?)?@(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/;
@@ -55862,6 +55901,7 @@ var init_config = __esm({
     NPX_WALLET_LINE = /npx (?:--(?:prefer-)?offline )?-y ((?:--no-audit --no-fund )?(?:shinjuku-shield|shinjuku)@(\d+\.\d+\.\d+))((?: (?:setup|restore))(?=\s|$|[^\w-]))?/g;
     RELEASES_URL = "https://github.com/ShinjukuStaition/shinjuku-shield#releases";
     npmStartEnvironment = (tor) => tor ? { npm_config_offline: "true" } : { npm_config_prefer_offline: "true" };
+    CMD_ARG_CODE = /[%&|<>^!"\r\n]/;
     NPM_START_KEYS = ["npm_config_offline", "npm_config_prefer_offline"];
     defaultWalletHome = (home = homedir()) => setupHome({}, home);
     CMD_UNSAFE = /[%"\r\n]/;
@@ -55875,6 +55915,7 @@ var init_config = __esm({
     codexEntryOf = (server) => ({
       command: server.command,
       args: server.args,
+      ...server.cwd !== void 0 ? { cwd: server.cwd } : {},
       ...isPlainObject(server.env) && Object.keys(server.env).length ? { env: server.env } : {}
     });
     HERMES_TRUST = "untrusted";
@@ -55886,6 +55927,7 @@ var init_config = __esm({
     hermesEntryOf = (server) => ({
       command: server.command,
       args: server.args,
+      ...server.cwd != null ? { cwd: server.cwd } : {},
       ...isPlainObject(server.env) && Object.keys(server.env).length ? { env: server.env } : {}
     });
     isPlainObject = (value2) => Boolean(value2) && typeof value2 === "object" && !Array.isArray(value2);
@@ -65146,7 +65188,7 @@ var init_witness = __esm({
 });
 
 // wallet/src/deposit/deposit.mjs
-import { fileURLToPath as fileURLToPath4 } from "node:url";
+import { fileURLToPath as fileURLToPath5 } from "node:url";
 function relayOwnerKeypair(store, relay) {
   if (relay.own === true) return import_web3102.Keypair.fromSecretKey(Uint8Array.from(store.state.solanaSecretKey));
   if (relay.pocket === void 0) return depositKeypair(store.state, relay.index, relay.keyPool ?? store.state.pool);
@@ -65158,7 +65200,7 @@ function fail12(reason) {
 }
 function pinnedGenerator() {
   const url = new URL("../../vendor/shielded-x402-model/vectors/rust-vectors.json", new URL("__bundled_source__/wallet/src/deposit/deposit.mjs", import.meta.url).href);
-  return JSON.parse(readFileSync(fileURLToPath4(url), "utf8")).payerKeys.generator;
+  return JSON.parse(readFileSync(fileURLToPath5(url), "utf8")).payerKeys.generator;
 }
 function assertDepositId(depositId) {
   if (!/^[0-9a-zA-Z_-]{1,64}$/.test(depositId ?? "")) fail12("id_invalid");
@@ -67428,7 +67470,7 @@ var init_successorHistories = __esm({
 import { createHash as createHash16 } from "node:crypto";
 import { join as join14, resolve as resolve11 } from "node:path";
 import { performance as performance4 } from "node:perf_hooks";
-import { fileURLToPath as fileURLToPath5 } from "node:url";
+import { fileURLToPath as fileURLToPath6 } from "node:url";
 function pinnedGenerator2(profileVector) {
   if (profileVector?.payerKeys?.generator) return profileVector.payerKeys.generator;
   if (!committedGenerator) {
@@ -68007,7 +68049,7 @@ var init_recover = __esm({
     init_successorHistories();
     FIELD_MODULUS6 = BigInt("21888242871839275222246405745257275088548364400416034343698204186575808495617");
     MODEL_DIR = resolve11(
-      fileURLToPath5(new URL("../../vendor/shielded-x402-model/", new URL("__bundled_source__/wallet/src/recovery/recover.mjs", import.meta.url).href))
+      fileURLToPath6(new URL("../../vendor/shielded-x402-model/", new URL("__bundled_source__/wallet/src/recovery/recover.mjs", import.meta.url).href))
     );
     seedBytes3 = (state2) => Uint8Array.from(Buffer.from(state2.seedHex, "hex"));
     REPLAY_VALUES = /* @__PURE__ */ new Map();
@@ -76000,7 +76042,7 @@ var init_solana_ed255192 = __esm({
 // spikes/shielded-x402-solana/scripts/verify-production-parameter-bundle.mjs
 import { createHash as createHash17 } from "node:crypto";
 import { dirname as dirname13, isAbsolute as isAbsolute5, relative as relative6, resolve as resolve12 } from "node:path";
-import { fileURLToPath as fileURLToPath6 } from "node:url";
+import { fileURLToPath as fileURLToPath7 } from "node:url";
 function fail14(message) {
   throw new Error(`production parameter bundle rejected: ${message}`);
 }
@@ -76382,7 +76424,7 @@ var init_verify_production_parameter_bundle2 = __esm({
     FAWKES_VERSION2 = "4.7.0";
     FAWKES_CHECKSUM2 = "3f221a5c9ba1e17e60bbbf87022f317b02c41218024ae20ac4ab19eca74ea2a5";
     FIELD_BYTES5 = 32;
-    isMain = process.argv[1] && resolve12(process.argv[1]) === resolve12(fileURLToPath6(new URL("__bundled_source__/spikes/shielded-x402-solana/scripts/verify-production-parameter-bundle.mjs", import.meta.url).href));
+    isMain = process.argv[1] && resolve12(process.argv[1]) === resolve12(fileURLToPath7(new URL("__bundled_source__/spikes/shielded-x402-solana/scripts/verify-production-parameter-bundle.mjs", import.meta.url).href));
     if (isMain) {
       const args = parseArgs(process.argv.slice(2));
       if (!args.bundle) fail14("--bundle is required");
@@ -76878,7 +76920,7 @@ var init_p03_recovered_exit = __esm({
 // spikes/shielded-x402-wallet/bin/shielded-wallet.mjs
 import { createHash as createHash19 } from "node:crypto";
 import { join as join16, resolve as resolve15 } from "node:path";
-import { fileURLToPath as fileURLToPath7 } from "node:url";
+import { fileURLToPath as fileURLToPath8 } from "node:url";
 function walletHome() {
   return setupHome(process.env);
 }
@@ -78885,7 +78927,7 @@ var init_shielded_wallet = __esm({
     MAINNET_CONFIRMATION = "I_UNDERSTAND_MAINNET_USDC_SPEND";
     FIELD_MODULUS7 = BigInt("21888242871839275222246405745257275088548364400416034343698204186575808495617");
     MODEL_DIR2 = resolve15(
-      fileURLToPath7(new URL("../../shielded-x402-model/", new URL("__bundled_source__/spikes/shielded-x402-wallet/bin/shielded-wallet.mjs", import.meta.url).href))
+      fileURLToPath8(new URL("../../shielded-x402-model/", new URL("__bundled_source__/spikes/shielded-x402-wallet/bin/shielded-wallet.mjs", import.meta.url).href))
     );
     WALLET_SCHEMA = "carbon-shielded-wallet/state/v1";
     passphrase = () => {
@@ -78927,7 +78969,7 @@ var init_shielded_wallet = __esm({
       return value2;
     };
     BROADCASTER_KEY_FILE_INVALID = "broadcaster_key_file_invalid: --broadcaster-key-file must be a solana-keygen JSON keypair file (a JSON array of 64 byte values)";
-    invokedDirectly = process.argv[1] && fileURLToPath7(new URL("__bundled_source__/spikes/shielded-x402-wallet/bin/shielded-wallet.mjs", import.meta.url).href) === resolve15(process.argv[1]);
+    invokedDirectly = process.argv[1] && fileURLToPath8(new URL("__bundled_source__/spikes/shielded-x402-wallet/bin/shielded-wallet.mjs", import.meta.url).href) === resolve15(process.argv[1]);
     if (invokedDirectly) {
       main().catch((error) => {
         printFailure(error);
@@ -104755,7 +104797,7 @@ var init_balance = __esm({
 // wallet/src/pay/floatPay.mjs
 import { createHash as createHash26, createHmac as createHmac8, randomBytes as randomBytes16, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 import { dirname as dirname21, join as join20 } from "node:path";
-import { fileURLToPath as fileURLToPath8 } from "node:url";
+import { fileURLToPath as fileURLToPath9 } from "node:url";
 function refundEtaLeft(dueAtMs, now = Date.now()) {
   if (!Number.isSafeInteger(dueAtMs) || now > dueAtMs + 6e4) return void 0;
   return Math.max(60, Math.ceil((dueAtMs - now) / 1e3));
@@ -106714,7 +106756,7 @@ var init_floatPay = __esm({
     poolDomainReads = /* @__PURE__ */ new Map();
     poolDomainWarmFailedAt = /* @__PURE__ */ new Map();
     WARM_RETRY_MS = 3e4;
-    loadPayerGenerator = () => payerGenerator ??= JSON.parse(readFileSync(fileURLToPath8(new URL(
+    loadPayerGenerator = () => payerGenerator ??= JSON.parse(readFileSync(fileURLToPath9(new URL(
       "../../vendor/shielded-x402-model/vectors/rust-vectors.json",
       new URL("__bundled_source__/wallet/src/pay/floatPay.mjs", import.meta.url).href
     )), "utf8")).payerKeys.generator;
@@ -106762,13 +106804,13 @@ var init_floatPay = __esm({
 // wallet/src/unshield/selfPay.mjs
 import { randomBytes as randomBytes17 } from "node:crypto";
 import { join as join21 } from "node:path";
-import { fileURLToPath as fileURLToPath9 } from "node:url";
+import { fileURLToPath as fileURLToPath10 } from "node:url";
 function fail22(reason) {
   throw new Error(`p03_self_pay_${reason}`);
 }
 function pinnedGenerator4() {
   const url = new URL("../../vendor/shielded-x402-model/vectors/rust-vectors.json", new URL("__bundled_source__/wallet/src/unshield/selfPay.mjs", import.meta.url).href);
-  return generator ??= Object.freeze(JSON.parse(readFileSync(fileURLToPath9(url), "utf8")).payerKeys.generator);
+  return generator ??= Object.freeze(JSON.parse(readFileSync(fileURLToPath10(url), "utf8")).payerKeys.generator);
 }
 function abandonedMergeUnsent(store, id) {
   if (!MERGE_ID.test(id) || store.readWal(`self-pay-${id}`)?.state !== "abandoned") return false;
@@ -107390,7 +107432,7 @@ var init_privateSend = __esm({
 
 // wallet/src/pay/prepareRecoveredPayment.mjs
 import { join as join22, resolve as resolve17 } from "node:path";
-import { fileURLToPath as fileURLToPath10 } from "node:url";
+import { fileURLToPath as fileURLToPath11 } from "node:url";
 function fail24(reason) {
   throw new Error(`p03_merchant_respend_${reason}`);
 }
@@ -108157,7 +108199,7 @@ var init_prepareRecoveredPayment = __esm({
     init_accountSelection();
     init_phaseTiming();
     init_privateSend();
-    MODEL_DIR3 = resolve17(fileURLToPath10(new URL("../../vendor/shielded-x402-model/", new URL("__bundled_source__/wallet/src/pay/prepareRecoveredPayment.mjs", import.meta.url).href)));
+    MODEL_DIR3 = resolve17(fileURLToPath11(new URL("../../vendor/shielded-x402-model/", new URL("__bundled_source__/wallet/src/pay/prepareRecoveredPayment.mjs", import.meta.url).href)));
     seedBytes5 = (state2) => Uint8Array.from(Buffer.from(state2.seedHex, "hex"));
     EARLY_CHAIN_TIME_MAX_AGE_MS = 3e4;
     settledNoteExits = /* @__PURE__ */ new Map();
@@ -108510,7 +108552,7 @@ var init_anchorWait = __esm({
 
 // wallet/src/pay/payResource.mjs
 import { join as join24, resolve as resolvePath } from "node:path";
-import { fileURLToPath as fileURLToPath11 } from "node:url";
+import { fileURLToPath as fileURLToPath12 } from "node:url";
 function assertOwnerUnshieldRequest(requestId, url) {
   const id = OWNER_UNSHIELD_REQUEST.exec(requestId)?.[1];
   if (!id || url !== `${OWNER_UNSHIELD_ORIGIN}/unshield/${id}`) fail25("owner_unshield_not_self_pay");
@@ -108542,7 +108584,7 @@ function recordedKind(record) {
   return void 0;
 }
 function assertOwnerUnshieldPayee(store, requirement) {
-  const generator2 = JSON.parse(readFileSync(fileURLToPath11(new URL(
+  const generator2 = JSON.parse(readFileSync(fileURLToPath12(new URL(
     "../../vendor/shielded-x402-model/vectors/rust-vectors.json",
     new URL("__bundled_source__/wallet/src/pay/payResource.mjs", import.meta.url).href
   )), "utf8")).payerKeys.generator;
@@ -115783,7 +115825,7 @@ var init_floatRefundCheck = __esm({
 // wallet/src/unshield/cli.mjs
 import { randomBytes as randomBytes20 } from "node:crypto";
 import { resolve as resolve20 } from "node:path";
-import { fileURLToPath as fileURLToPath12 } from "node:url";
+import { fileURLToPath as fileURLToPath13 } from "node:url";
 function facilitatorAnchor(origin, fetchImpl = fetch, { sleep: sleep5 = (ms) => new Promise((resolve43) => setTimeout(resolve43, ms)) } = {}) {
   noteAnchorOrigin(origin);
   const url = `${String(origin).replace(/\/+$/, "")}/api/x402/anchor`;
@@ -116287,7 +116329,7 @@ var init_cli = __esm({
     EXPIRED_PROOF_CLOCK_WAITS = 8;
     EXPIRED_PROOF_CLOCK_WAIT_MS = 15e3;
     EXIT_LEASE_WAIT_MS = 6e4;
-    if (process.argv[1] && resolve20(process.argv[1]) === fileURLToPath12(new URL("__bundled_source__/wallet/src/unshield/cli.mjs", import.meta.url).href)) {
+    if (process.argv[1] && resolve20(process.argv[1]) === fileURLToPath13(new URL("__bundled_source__/wallet/src/unshield/cli.mjs", import.meta.url).href)) {
       main2().catch((error) => {
         console.error(describeCliErrorWithHint(error));
         process.exitCode = 1;
@@ -117017,7 +117059,7 @@ var init_migration = __esm({
 
 // wallet/src/pocket/cli.mjs
 import { resolve as resolve21 } from "node:path";
-import { fileURLToPath as fileURLToPath13 } from "node:url";
+import { fileURLToPath as fileURLToPath14 } from "node:url";
 function parse3(command, args) {
   const spec = SPECS[command];
   const options = {};
@@ -117502,7 +117544,7 @@ var init_cli2 = __esm({
       } catch {
       }
     };
-    if (process.argv[1] && resolve21(process.argv[1]) === fileURLToPath13(new URL("__bundled_source__/wallet/src/pocket/cli.mjs", import.meta.url).href)) {
+    if (process.argv[1] && resolve21(process.argv[1]) === fileURLToPath14(new URL("__bundled_source__/wallet/src/pocket/cli.mjs", import.meta.url).href)) {
       main3().catch((error) => {
         console.error(describeCliErrorWithHint(error, { fallback: "p03_pocket_cli_failed" }));
         process.exitCode = 1;
@@ -117836,7 +117878,7 @@ var init_autoPockets = __esm({
 });
 
 // wallet/src/move/job.mjs
-import { fileURLToPath as fileURLToPath14 } from "node:url";
+import { fileURLToPath as fileURLToPath15 } from "node:url";
 import { randomBytes as randomBytes21 } from "node:crypto";
 function moveLegs(store, fromPool) {
   const prefix = moveWalPrefix(fromPool);
@@ -117951,7 +117993,7 @@ function moveBody({ amountAtomic, refundTo, fromPool, n, toPool }) {
   return { bodyText, moveId: hash10(bodyText) };
 }
 function walletEta2(store) {
-  const generator2 = JSON.parse(readFileSync(fileURLToPath14(new URL(
+  const generator2 = JSON.parse(readFileSync(fileURLToPath15(new URL(
     "../../vendor/shielded-x402-model/vectors/rust-vectors.json",
     new URL("__bundled_source__/wallet/src/move/job.mjs", import.meta.url).href
   )), "utf8")).payerKeys.generator;
@@ -120408,7 +120450,7 @@ var init_leg = __esm({
 // wallet/src/succession/scheduler.mjs
 import { randomInt as cryptoRandomInt } from "node:crypto";
 import { dirname as dirname26, resolve as resolve23 } from "node:path";
-import { fileURLToPath as fileURLToPath15 } from "node:url";
+import { fileURLToPath as fileURLToPath16 } from "node:url";
 function pocketCarryReason(carry) {
   if (carry && CARRY_DONE.has(carry.state)) return { done: true, waits: false, code: null, reason: "" };
   if (carry?.state !== "refused") return { done: false, waits: true, code: null, reason: "the wallet has not finished its check of the pool switch" };
@@ -121293,7 +121335,7 @@ var init_scheduler = __esm({
       const record = store.readWal(successionNoticeName(fromPool));
       return record?.schema === SUCCESSION_NOTICE_SCHEMA && record.from === fromPool && record.shown && typeof record.shown === "object" ? record.shown : {};
     };
-    MODEL_VECTORS = fileURLToPath15(new URL("../../vendor/shielded-x402-model/vectors/rust-vectors.json", new URL("__bundled_source__/wallet/src/succession/scheduler.mjs", import.meta.url).href));
+    MODEL_VECTORS = fileURLToPath16(new URL("../../vendor/shielded-x402-model/vectors/rust-vectors.json", new URL("__bundled_source__/wallet/src/succession/scheduler.mjs", import.meta.url).href));
     pinnedGenerator6 = () => JSON.parse(readFileSync(MODEL_VECTORS, "utf8")).payerKeys.generator;
     yieldTurn3 = () => new Promise((resolveTurn) => {
       setImmediate(resolveTurn);
@@ -131792,7 +131834,7 @@ var init_jupiter = __esm({
 // wallet/src/mcp/tools.mjs
 import { randomBytes as randomBytes26, randomInt as randomInt7 } from "node:crypto";
 import { basename as basename9, dirname as dirname30, join as join34, resolve as resolve27 } from "node:path";
-import { fileURLToPath as fileURLToPath16 } from "node:url";
+import { fileURLToPath as fileURLToPath17 } from "node:url";
 async function readReleasePoolsTwice(args) {
   try {
     return await readReleasePools(args);
@@ -133101,7 +133143,7 @@ function capHeldAtomic(one) {
   return parts.reduce((total, part) => total + BigInt(part), 0n);
 }
 function walletViewingEta(store) {
-  receiveGenerator ??= JSON.parse(readFileSync(fileURLToPath16(new URL(
+  receiveGenerator ??= JSON.parse(readFileSync(fileURLToPath17(new URL(
     "../../vendor/shielded-x402-model/vectors/rust-vectors.json",
     new URL("__bundled_source__/wallet/src/mcp/tools.mjs", import.meta.url).href
   )), "utf8")).payerKeys.generator;
@@ -144302,7 +144344,7 @@ __export(stdioServer_exports, {
 });
 import { createHash as createHash33 } from "node:crypto";
 import { dirname as dirname31, join as join35, resolve as resolve28, sep as sep4 } from "node:path";
-import { fileURLToPath as fileURLToPath17 } from "node:url";
+import { fileURLToPath as fileURLToPath18 } from "node:url";
 function createClientBridge() {
   const bridge = {
     capabilities: void 0,
@@ -144585,7 +144627,7 @@ function serveStdio({ input, output: output2, dispatch, log = () => {
 function runningBundleFile({ moduleUrl = new URL("__bundled_source__/wallet/src/mcp/stdioServer.mjs", import.meta.url).href, script = process.argv[1] } = {}) {
   let here3;
   try {
-    here3 = fileURLToPath17(moduleUrl);
+    here3 = fileURLToPath18(moduleUrl);
   } catch {
     return void 0;
   }
@@ -147238,7 +147280,7 @@ var init_serveRunner = __esm({
 // wallet/src/pay/cli.mjs
 import { createHash as createHash34 } from "node:crypto";
 import { resolve as resolve30 } from "node:path";
-import { fileURLToPath as fileURLToPath18 } from "node:url";
+import { fileURLToPath as fileURLToPath19 } from "node:url";
 async function main4(args = process.argv.slice(2)) {
   if (args.length === 1 && args[0] === "--help") {
     console.log(USAGE2);
@@ -147418,7 +147460,7 @@ var init_cli3 = __esm({
     init_errorLine();
     USAGE2 = "node --import tsx wallet/src/pay/cli.mjs --wallet <encrypted-file> --passphrase-file <file> [--rpc-file <file>] --proof-tools <manifest> --program <address> --url <seller-url> --request-id <stable-id> --maximum-atomic <amount> --memo-service <url> [--method GET|POST] [--body-file <private-file>] [--headers-file <private-json-object>] [--account-file <recovered-account-json>] [--out <private-file>] [--history-rpc <own|url>]";
     REQUIRED2 = ["wallet", "passphrase-file", "proof-tools", "program", "url", "request-id", "maximum-atomic", "memo-service"];
-    if (process.argv[1] && resolve30(process.argv[1]) === fileURLToPath18(new URL("__bundled_source__/wallet/src/pay/cli.mjs", import.meta.url).href)) {
+    if (process.argv[1] && resolve30(process.argv[1]) === fileURLToPath19(new URL("__bundled_source__/wallet/src/pay/cli.mjs", import.meta.url).href)) {
       main4().catch((error) => {
         console.error(describeCliErrorWithHint(error));
         process.exitCode = 1;
@@ -151078,7 +151120,7 @@ __export(cli_exports, {
   startSeller: () => startSeller
 });
 import { join as join47, resolve as resolve40 } from "node:path";
-import { fileURLToPath as fileURLToPath21 } from "node:url";
+import { fileURLToPath as fileURLToPath22 } from "node:url";
 async function startSeller(config, { fetchImpl = fetch, rpcFetch: rpcFetch2 } = {}) {
   let release;
   try {
@@ -151330,7 +151372,7 @@ var init_cli4 = __esm({
         return "?";
       }
     };
-    if (process.argv[1] && resolve40(process.argv[1]) === fileURLToPath21(new URL("__bundled_source__/wallet/src/seller/cli.mjs", import.meta.url).href)) {
+    if (process.argv[1] && resolve40(process.argv[1]) === fileURLToPath22(new URL("__bundled_source__/wallet/src/seller/cli.mjs", import.meta.url).href)) {
       main7().catch(() => {
         console.error("p03_seller_start_failed");
         process.exitCode = 1;
@@ -151363,7 +151405,7 @@ init_timing();
 import { randomBytes as randomBytes34 } from "node:crypto";
 import { dirname as dirname37, join as join48, resolve as resolve41 } from "node:path";
 import { spawn as spawn13 } from "node:child_process";
-import { fileURLToPath as fileURLToPath22 } from "node:url";
+import { fileURLToPath as fileURLToPath23 } from "node:url";
 
 // wallet/src/fetch/index.mjs
 init_session();
@@ -152423,7 +152465,7 @@ init_secretFile();
 init_usdcWords();
 init_commandName();
 import { resolve as resolve34 } from "node:path";
-import { fileURLToPath as fileURLToPath19 } from "node:url";
+import { fileURLToPath as fileURLToPath20 } from "node:url";
 var usage = () => commandLine("prepare --wallet <encrypted-file> --passphrase-file <file> --program <address> [--dry-run] [--rpc-file <file>] --proof-tools <manifest> --profile <public-profile.json> --facilitator <https-origin> [--history-rpc <own|url>]");
 var VALUED = ["wallet", "passphrase-file", "program", "rpc-file", "proof-tools", "profile", "facilitator", "history-rpc"];
 var ALWAYS = ["wallet", "passphrase-file", "program"];
@@ -152568,7 +152610,7 @@ async function main5(args = process.argv.slice(2), { output: output2 = (result)
     await release();
   }
 }
-if (process.argv[1] && resolve34(process.argv[1]) === fileURLToPath19(new URL("__bundled_source__/wallet/src/merge/cli.mjs", import.meta.url).href)) {
+if (process.argv[1] && resolve34(process.argv[1]) === fileURLToPath20(new URL("__bundled_source__/wallet/src/merge/cli.mjs", import.meta.url).href)) {
   main5().catch((error) => {
     console.error(describeCliErrorWithHint(error));
     process.exitCode = 1;
@@ -153158,7 +153200,7 @@ init_deposit();
 import { createPrivateKey as createPrivateKey3, sign as sign2 } from "node:crypto";
 import { createRequire } from "node:module";
 import { dirname as dirname35, join as join40, resolve as resolve36 } from "node:path";
-import { fileURLToPath as fileURLToPath20, pathToFileURL as pathToFileURL2 } from "node:url";
+import { fileURLToPath as fileURLToPath21, pathToFileURL as pathToFileURL3 } from "node:url";
 
 // wallet/src/deposit/privacyCashLocal.mjs
 var import_web3136 = __toESM(require_index_cjs(), 1);
@@ -153166,7 +153208,7 @@ init_esm2();
 init_chain2();
 import { randomInt as randomInt9 } from "node:crypto";
 import { dirname as dirname34, join as join39 } from "node:path";
-import { pathToFileURL } from "node:url";
+import { pathToFileURL as pathToFileURL2 } from "node:url";
 var PRIVACY_CASH_RELAY_SCHEMA = "carbon-shielded-x402/privacy-cash-relay/v1";
 var PRIVACY_CASH_RELAY_CONFIG_SCHEMA = "carbon-shielded-x402/privacy-cash-relay-config/v1";
 var MAX_TRANSACTION_BYTES = 1232;
@@ -153194,7 +153236,7 @@ var zeroPath = () => Array.from({ length: TREE_DEPTH2 }, () => "0");
 var toBeBytes = (decimal5) => Buffer.from(BigInt(decimal5).toString(16).padStart(64, "0"), "hex");
 async function loadPrivacyCashInternals(sdk, ids) {
   const dist = join39(dirname34(dirname34(sdk.keyBasePath)), "dist");
-  const load = (path) => import(pathToFileURL(join39(dist, path)).href);
+  const load = (path) => import(pathToFileURL2(join39(dist, path)).href);
   const [{ Utxo }, { Keypair: UtxoKeypair }, prover, utils, encryption, constants2, { MerkleTree }] = await Promise.all([
     load("models/utxo.js"),
     load("models/keypair.js"),
@@ -154277,7 +154319,7 @@ async function quietly(operation) {
 }
 function sdkFolders(sdkDir) {
   if (sdkDir) return [resolve36(sdkDir)];
-  const folders = [fileURLToPath20(new URL("../../privacy-cash/", new URL("__bundled_source__/wallet/src/deposit/privacyCash.mjs", import.meta.url).href))];
+  const folders = [fileURLToPath21(new URL("../../privacy-cash/", new URL("__bundled_source__/wallet/src/deposit/privacyCash.mjs", import.meta.url).href))];
   if (process.argv[1]) folders.push(resolve36(dirname35(process.argv[1]), "..", "privacy-cash"));
   return folders;
 }
@@ -154285,7 +154327,7 @@ function esmEntry(fromPackageDir, name) {
   const manifestPath3 = createRequire(join40(fromPackageDir, "package.json")).resolve(`${name}/package.json`);
   const entry = JSON.parse(readFileSync(manifestPath3, "utf8")).exports?.["."]?.import;
   if (typeof entry !== "string") fail45("sdk_missing");
-  return pathToFileURL2(join40(dirname35(manifestPath3), entry)).href;
+  return pathToFileURL3(join40(dirname35(manifestPath3), entry)).href;
 }
 async function loadPrivacyCashSdk({ sdkDir } = {}) {
   if (!(Number(process.versions.node.split(".")[0]) >= 24)) fail45("node_too_old");
@@ -154303,7 +154345,7 @@ async function loadPrivacyCashSdk({ sdkDir } = {}) {
   if (!existsSync(`${keyBasePath}.wasm`) || !existsSync(`${keyBasePath}.zkey`)) fail45("sdk_circuit_missing");
   try {
     return await quietly(async () => {
-      const utils = await import(pathToFileURL2(join40(packageDir, "dist", "exportUtils.js")).href);
+      const utils = await import(pathToFileURL3(join40(packageDir, "dist", "exportUtils.js")).href);
       const { WasmFactory } = await import(esmEntry(packageDir, "@lightprotocol/hasher.rs"));
       utils.setLogger(() => {
       });
@@ -157191,6 +157233,12 @@ var npmProxyEnvironment = (url) => ({
   NO_PROXY: "",
   no_proxy: ""
 });
+function withNoProxyArg(entry) {
+  const at = entry.args.indexOf("npx");
+  const index = entry.command === "npx" ? 0 : at + 1;
+  if (entry.command !== "npx" && at < 0) return entry;
+  return { ...entry, args: [...entry.args.slice(0, index), "--noproxy=", ...entry.args.slice(index)] };
+}
 var NPM_ONLINE_ENVIRONMENT = Object.freeze({ npm_config_offline: "false", npm_config_prefer_offline: "false", npm_config_prefer_online: "true" });
 var NPM_OFFLINE_ENVIRONMENT = Object.freeze({ npm_config_offline: "true" });
 var NPM_CACHE_KEYS = /* @__PURE__ */ new Set(["npm_config_cache", "npm_config_userconfig", "npm_config_globalconfig", "npm_config_prefix"]);
@@ -160363,7 +160411,7 @@ function validateMcp(values, env) {
 function requireMcpCaps(values) {
   for (const name of ["--max-payment", "--max-session"]) if (!values.has(name)) values.set(name, NO_LIMIT_ATOMIC);
 }
-var CLI_FILE = fileURLToPath22(new URL("__bundled_source__/wallet/src/cli/shinjukuWallet.mjs", import.meta.url).href);
+var CLI_FILE = fileURLToPath23(new URL("__bundled_source__/wallet/src/cli/shinjukuWallet.mjs", import.meta.url).href);
 var cliEntry2;
 var setCliEntry = (file) => {
   cliEntry2 = typeof file === "string" && file ? file : void 0;
@@ -161688,7 +161736,7 @@ function hostStartCheck(app, options, deps, { terminal, noTor = false, cwd }) {
 `);
       const start = async (entry) => {
         if (!net4.url) return check(entry, { platform, env, terminal, extraEnv: NPM_ONLINE_ENVIRONMENT, ...at });
-        const filled = await check(entry, { platform, env, terminal, extraEnv: npmProxyEnvironment(net4.url), ...at });
+        const filled = await check(withNoProxyArg(entry), { platform, env, terminal, extraEnv: npmProxyEnvironment(net4.url), ...at });
         if (!filled.ok) return filled;
         return check(entry, { platform, env, terminal, extraEnv: NPM_OFFLINE_ENVIRONMENT, ...at });
       };
@@ -161791,7 +161839,7 @@ ${claudeCodeLines({ ...claudeOptions, claudeProgram }).map((line) => `  ${line}`
       if (removed && status !== 0) status = runClaudeCli(claudeCodeArgs(options));
       if (status === 0) done.add(target);
       const homeNow = replacedOther ? ` Claude Code now uses the wallet in ${home}; the wallet in ${otherHome} is unchanged.` : "";
-      io.out(status === 0 ? `${removed ? "Replaced the wallet in" : "Added the wallet to"} Claude Code, for all your folders.${homeNow} ${allowWalletChecks(deps).say} ${RESTART_APP("Claude Code")}
+      io.out(status === 0 ? `${removed ? "Replaced the wallet in" : "Added the wallet to"} Claude Code, for all your folders.${homeNow} ${allowWalletChecks(deps).say} ${RESTART_APP("Claude Code")}${noStartFolderWords(target, mcpServerEntry(options))}
 ` : `Claude Code did not take the server; its message is above. Run this yourself:
 ${claudeCodeLines({ ...claudeOptions, claudeProgram }).map((line) => `  ${line}`).join("\n")}
 ` + (removed ? `Setup removed the old ${MCP_SERVER_NAME} entry first, so Claude Code has none until that line runs.
@@ -161815,19 +161863,22 @@ ${claudeRemoveLines(claudeProgram, options.platform)}
 `);
       continue;
     }
-    const check = await hostStartCheck(app, options, deps, { terminal: false, noTor, ...target === "hermes" ? { cwd: resolve41(home) } : {} });
+    const startFolder = hostStartFolder(target, mcpServerEntry(options));
+    const check = await hostStartCheck(app, options, deps, { terminal: false, noTor, ...startFolder ? { cwd: startFolder } : {} });
     if (!check.ok) {
       io.out(`Not added to ${app}: ${hostCheckWords(app, check)}
 `);
       continue;
     }
     try {
-      const write = (entry, writeForce) => target === "codex" || target === "grok" ? addToCodexHost(file, entry, { force: writeForce, app }) : target === "hermes" ? addToHermesHost(file, entry, { force: writeForce }) : target === "continue" ? addToContinueHost(file, hostEntry(target, entry), { force: writeForce }) : addToJsonHost(file, hostEntry(target, entry), { force: writeForce, key: hostServersKey(target) });
-      const added = write(mcpServerEntry({ ...options, ...check.path ? { path: check.path } : {} }), force);
+      const write = (entry, writeForce) => target === "codex" || target === "grok" ? addToCodexHost(file, hostEntry(target, entry, options.platform), { force: writeForce, app }) : target === "hermes" ? addToHermesHost(file, entry, { force: writeForce }) : target === "continue" ? addToContinueHost(file, hostEntry(target, entry, options.platform), { force: writeForce }) : addToJsonHost(file, hostEntry(target, entry, options.platform), { force: writeForce, key: hostServersKey(target) });
+      const written = mcpServerEntry({ ...options, ...check.path ? { path: check.path } : {} });
+      const added = write(written, force);
+      const folderWords = noStartFolderWords(target, written);
       for (const old of added.replaced ?? []) io.out(`Replaced the old ${old} entry in ${app}.
 `);
-      io.out(!added.changed ? `${app} already has the wallet: ${file} (nothing changed). The wallet starts with this entry (checked). If ${app} does not show the wallet yet: ${hostAddedNext(target, app, options.platform)}
-` : `Added the wallet to ${app}: ${file}${added.backup ? ` (the old file was copied to ${added.backup}, readable by you alone)` : ""}. The wallet starts with this entry (checked). ${hostAddedNext(target, app, options.platform)}
+      io.out(!added.changed ? `${app} already has the wallet: ${file} (nothing changed). The wallet starts with this entry (checked). If ${app} does not show the wallet yet: ${hostAddedNext(target, app, options.platform)}${folderWords}
+` : `Added the wallet to ${app}: ${file}${added.backup ? ` (the old file was copied to ${added.backup}, readable by you alone)` : ""}. The wallet starts with this entry (checked). ${hostAddedNext(target, app, options.platform)}${folderWords}
 `);
       done.add(target);
     } catch (error) {
@@ -165317,7 +165368,7 @@ async function runTransferTokenCli(values, deps, io) {
 `);
 }
 function sellerIdentityOf(store) {
-  const generator2 = JSON.parse(readFileSync(fileURLToPath22(new URL(
+  const generator2 = JSON.parse(readFileSync(fileURLToPath23(new URL(
     "../../vendor/shielded-x402-model/vectors/rust-vectors.json",
     new URL("__bundled_source__/wallet/src/cli/shinjukuWallet.mjs", import.meta.url).href
   )), "utf8")).payerKeys.generator;