Add default_vault_settings_json() to the hand-written wasm.d.ts declarations, then use it in attachStep3New to encrypt and push settings.enc after manifest.enc during new-vault creation. Wizard- created vaults now have all four files the SW expects (salt, params.json, manifest.enc, settings.enc), preventing the get_vault_settings 404 on first unlock. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>