diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..4db4d7c
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,3 @@
+; npm supply-chain cooldown — added 2026-05-13 (Shai-Hulud / TanStack incident)
+minimum-release-age=10080
+save-exact=true
diff --git a/emblemai.js b/emblemai.js
index 89492c8..3c2b55e 100755
--- a/emblemai.js
+++ b/emblemai.js
@@ -22,6 +22,7 @@
 import fs from 'fs';
 import path from 'path';
 import os from 'os';
+import { fileURLToPath } from 'url';
 import readline from 'readline';
 import chalk from 'chalk';
 import { loadSessionPreferences, saveSession, saveSessionPreferences } from './src/session-store.js';
@@ -534,6 +535,7 @@ function buildMessages(msgs, pluginManager) {
 async function showSplash() {
   try {
     const { execFileSync } = await import('child_process');
+    const scriptDir = path.dirname(fileURLToPath(import.meta.url));
     execFileSync(process.execPath, ['-e', `
       const blessed = require('blessed');
       const screen = blessed.screen({ smartCSR: false, fullUnicode: false, warnings: false });
@@ -552,7 +554,11 @@ async function showSplash() {
       });
       screen.render();
       setTimeout(() => { screen.destroy(); process.exit(0); }, 2000);
-    `], { stdio: 'inherit', timeout: 5000 });
+    `], {
+      cwd: scriptDir,
+      stdio: ['inherit', 'inherit', 'ignore'],
+      timeout: 5000,
+    });
   } catch {
     // blessed not available or timed out — skip
   }
diff --git a/package-lock.json b/package-lock.json
index 2e14ccb..9abf332 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,33 +1,33 @@
 {
   "name": "@emblemvault/agentwallet",
-  "version": "3.3.0",
+  "version": "3.3.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@emblemvault/agentwallet",
-      "version": "3.3.0",
+      "version": "3.3.1",
       "license": "MIT",
       "dependencies": {
-        "@dotenvx/dotenvx": "^1.52.0",
+        "@dotenvx/dotenvx": "1.52.0",
         "@emblemvault/auth-sdk": "^2.3.18",
-        "@x402/core": "^2.8.0",
-        "@x402/evm": "^2.8.0",
-        "@x402/svm": "^2.8.0",
-        "blessed": "^0.1.81",
-        "chalk": "^5.3.0",
-        "dotenv": "^16.3.1",
-        "hustle-incognito": "^1.1.2",
-        "mppx": "^0.5.0",
-        "viem": "^2.47.6"
+        "@x402/core": "2.9.0",
+        "@x402/evm": "2.9.0",
+        "@x402/svm": "2.9.0",
+        "blessed": "0.1.81",
+        "chalk": "5.6.2",
+        "dotenv": "16.6.1",
+        "hustle-incognito": "1.1.2",
+        "mppx": "0.5.0",
+        "viem": "2.47.6"
       },
       "bin": {
         "emblemai": "emblemai.js"
       },
       "devDependencies": {
-        "@types/node": "^24.0.0",
-        "c8": "^11.0.0",
-        "typescript": "^5.7.0"
+        "@types/node": "24.12.0",
+        "c8": "11.0.0",
+        "typescript": "5.9.3"
       },
       "engines": {
         "node": ">=20.18.0"
diff --git a/package.json b/package.json
index 3245686..daec19e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emblemvault/agentwallet",
-  "version": "3.3.0",
+  "version": "3.3.1",
   "description": "CLI for EmblemAI - autonomous crypto wallet management with browser auth, streaming, and plugins",
   "main": "emblemai.js",
   "type": "module",
@@ -17,22 +17,22 @@
     "typecheck": "tsc --project tsconfig.json"
   },
   "devDependencies": {
-    "@types/node": "^24.0.0",
-    "c8": "^11.0.0",
-    "typescript": "^5.7.0"
+    "@types/node": "24.12.0",
+    "c8": "11.0.0",
+    "typescript": "5.9.3"
   },
   "dependencies": {
-    "@dotenvx/dotenvx": "^1.52.0",
+    "@dotenvx/dotenvx": "1.52.0",
     "@emblemvault/auth-sdk": "^2.3.18",
-    "@x402/core": "^2.8.0",
-    "@x402/evm": "^2.8.0",
-    "@x402/svm": "^2.8.0",
-    "blessed": "^0.1.81",
-    "chalk": "^5.3.0",
-    "dotenv": "^16.3.1",
-    "hustle-incognito": "^1.1.2",
-    "mppx": "^0.5.0",
-    "viem": "^2.47.6"
+    "@x402/core": "2.9.0",
+    "@x402/evm": "2.9.0",
+    "@x402/svm": "2.9.0",
+    "blessed": "0.1.81",
+    "chalk": "5.6.2",
+    "dotenv": "16.6.1",
+    "hustle-incognito": "1.1.2",
+    "mppx": "0.5.0",
+    "viem": "2.47.6"
   },
   "keywords": [
     "ai",