shinjuku-shielded 0.3.14 → 0.3.16

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "db079e3700b17388873252fb91358d1918801ff69d1ee26f4e3e9f21bccbab34",
-  "bytes": 11121670,
-  "sourceCommit": "181724d44e72d6b49f062fb641761811e66e23a6",
+  "sha256": "b32bffc727e1e7e33fb134a3918638006259033511e1a2aaf455d037da1f70b3",
+  "bytes": 11124201,
+  "sourceCommit": "4b3c69bd892409a11b931e3a01f254a8b2f4af0f",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.14",
+  "version": "0.3.16",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "db079e37",
-  "shinjukuSha256": "db079e3700b17388873252fb91358d1918801ff69d1ee26f4e3e9f21bccbab34",
+  "shinjukuRelease": "b32bffc7",
+  "shinjukuSha256": "b32bffc727e1e7e33fb134a3918638006259033511e1a2aaf455d037da1f70b3",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-mcp#readme",

package/shinjuku-wallet.mjs

@@ -58607,9 +58607,6 @@ async function prepareRelayedDepositLeased({ store, connection, programId, proof
   const minimum = closing ? config.closingSourceMinimumAtomic : pocketIndex !== void 0 && config.pocketMinimumAtomic !== void 0 ? config.pocketMinimumAtomic : config.minimumAtomic;
   if (legacySource && amount < minimum) throw legacyBelowMinimum(legacySource, amount, minimum);
   if (amount < minimum) fail11(pocketIndex !== void 0 && config.pocketMinimumAtomic === void 0 ? "relay_pocket_reshield_not_offered" : "relay_amount_below_facilitator_minimum");
-  if (!record && pocketIndex === void 0 && !legacySource && config.depositUnitAtomic !== void 0 && amount % config.depositUnitAtomic !== 0n) {
-    fail11("relay_amount_not_whole_unit");
-  }
   const pool = await poolState(connection, id);
   if (amount > pool.maxDepositValue) fail11("amount_above_pool_deposit_cap");
   if (BigInt(pool.depositCount) >= BigInt(pool.maxDeposits)) fail11("pool_at_deposit_cap");
@@ -58713,7 +58710,6 @@ async function readRelayConfig({ serviceUrl: serviceUrl2, fetchImpl, id }) {
     minimumAtomic: BigInt(config.minimumAtomic),
     closesSource: config.sourceCloseAuthority !== void 0,
     ...config.pocketMinimumAtomic === void 0 ? {} : { pocketMinimumAtomic: BigInt(config.pocketMinimumAtomic) },
-    ...config.depositUnitAtomic === void 0 ? {} : { depositUnitAtomic: BigInt(config.depositUnitAtomic) },
     ...config.closingSourceMinimumAtomic === void 0 ? {} : { closingSourceMinimumAtomic: BigInt(config.closingSourceMinimumAtomic) }
   };
 }
@@ -61876,6 +61872,8 @@ var init_errorCodes = __esm({
       "mcp_unshield_to_not_allowed",
       "mcp_unshield_to_invalid",
       "mcp_shield_cap_exceeded",
+      "mcp_shield_above_balance_cap",
+      "mcp_balance_unknown",
       "mcp_unshield_cap_exceeded",
       "mcp_request_id_reused",
       "mcp_shield_failed",
@@ -62362,6 +62360,7 @@ var init_errorCodes = __esm({
       "float_not_ready",
       "float_seller_uses_our_facilitator",
       "float_payment_in_flight",
+      "float_quote_open",
       "float_already_paid",
       "float_paid",
       "p03_payer_float_wallet_pool_mismatch",
@@ -90984,9 +90983,9 @@ async function payViaFloat({
         });
       } catch (error) {
         if (seen.refusal) {
-          if (seen.refusal.code === "float_payment_in_flight" && !regenerated && innerUnsent()) {
+          if (REGENERATE_CODES.has(seen.refusal.code) && !regenerated && innerUnsent()) {
             regenerated = true;
-            const refundTo = await ownRefundAddress(store, connection);
+            const refundTo = await (deps.ownRefundAddress ?? ownRefundAddress)(store, connection);
             const body = canonicalBody({ requestId, resourceUrl: record.url, requirement: record.requirement, refundTo });
             record = { ...record, floatId: body.floatId, bodyBase64: body.bodyBase64, refundTo };
             store.writeWal(walName2, record);
@@ -91090,7 +91089,7 @@ function paidResult(record, replayed) {
     float: { floatId: record.floatId }
   };
 }
-var import_web3109, FLOAT_PAYMENT_SCHEMA, FLOAT_PAYMENT_WAL_PREFIX, FLOAT_CONFIG_SCHEMA, FLOAT_PAY_PATH, MAX_BODY_BYTES, FLOAT_REFUND_ETA_SECONDS, REFUND_SETTLED_AFTER_MS, FINISHING_POLL_MS, FINISHING_LIMIT_MS, SELLER_TIMEOUT_MS, CONFIG_TIMEOUT_MS, DECIMAL3, POSITIVE, PENDING_CODES, hash9, fail18, floatPaymentWalName, plainText;
+var import_web3109, FLOAT_PAYMENT_SCHEMA, REGENERATE_CODES, FLOAT_PAYMENT_WAL_PREFIX, FLOAT_CONFIG_SCHEMA, FLOAT_PAY_PATH, MAX_BODY_BYTES, FLOAT_REFUND_ETA_SECONDS, REFUND_SETTLED_AFTER_MS, FINISHING_POLL_MS, FINISHING_LIMIT_MS, SELLER_TIMEOUT_MS, CONFIG_TIMEOUT_MS, DECIMAL3, POSITIVE, PENDING_CODES, hash9, fail18, floatPaymentWalName, plainText;
 var init_floatPay = __esm({
   "wallet/src/pay/floatPay.mjs"() {
     "use strict";
@@ -91107,6 +91106,7 @@ var init_floatPay = __esm({
     init_proxy();
     init_payResource();
     FLOAT_PAYMENT_SCHEMA = "carbon-shielded-wallet/float-payment/v1";
+    REGENERATE_CODES = /* @__PURE__ */ new Set(["float_payment_in_flight", "float_quote_open"]);
     FLOAT_PAYMENT_WAL_PREFIX = "float-";
     FLOAT_CONFIG_SCHEMA = "carbon-shielded-x402/float-config/v1";
     FLOAT_PAY_PATH = "/api/x402/float/pay/";
@@ -118735,6 +118735,8 @@ function snapshotFromRecovery({ state, programId, recovery, history, walStates,
   });
   const slot3 = history?.finalizedPoolSnapshot?.slot;
   if (slot3 === void 0 || !canonicalAtomic(String(slot3))) throw new Error("balance_snapshot_slot_invalid");
+  const anchorIndexes = Array.isArray(history?.finalizedPoolSnapshot?.anchors) ? history.finalizedPoolSnapshot.anchors.map((anchor) => BigInt(anchor.index)) : [];
+  const anchorIndex = anchorIndexes.length ? anchorIndexes.reduce((a, b) => b > a ? b : a).toString() : void 0;
   return {
     schema: BALANCE_SNAPSHOT_SCHEMA,
     pool: state.pool,
@@ -118742,6 +118744,7 @@ function snapshotFromRecovery({ state, programId, recovery, history, walStates,
     refreshedAt: new Date(now).toISOString(),
     slot: String(slot3),
     poolIndex: String(recovery.poolIndex),
+    ...anchorIndex === void 0 ? {} : { anchorIndex },
     fresh: fresh === true,
     walStates: { ...walStates },
     outputs
@@ -119021,7 +119024,8 @@ function computeBalance({ store, snapshotRead, source = "local", now = Date.now(
   const reservedAtomic = unknownInputs ? unspentAtomic : sum2([...reserved].filter((commitment) => unspent.has(commitment)).map((commitment) => unspent.get(commitment).valueAtomic));
   detail.reservedAtomic = reservedAtomic.toString();
   const spendable = unspentAtomic - reservedAtomic;
-  detail.fundedAccounts = unknownInputs ? 0 : [...unspent.values()].filter((output2) => output2.kind === "account" && BigInt(output2.valueAtomic) > 0n && !reserved.has(output2.commitment)).length;
+  const anchorIndex = canonicalAtomic(snapshot.anchorIndex) ? BigInt(snapshot.anchorIndex) : void 0;
+  detail.fundedAccounts = unknownInputs ? 0 : [...unspent.values()].filter((output2) => output2.kind === "account" && BigInt(output2.valueAtomic) > 0n && !reserved.has(output2.commitment) && (anchorIndex === void 0 || BigInt(output2.leafIndex) < anchorIndex)).length;
   const next = detail.inFlight.length ? "finish or cancel the work in detail.inFlight; the wallet runs one payment at a time" : pendingDeposits.length ? `deposit ${pendingDeposits[0].depositId} is not finished: rerun the same deposit command with --submit --service <facilitator URL>` : pocketsUnscanned ? scanPockets2 : unspentAtomic === 0n && successionMovableAtomic > 0n ? "this pool was succeeded by a new pool: its value moves there (a move per account, the facilitator pays the fee) and counts in this balance until then" : unspentAtomic === 0n ? "nothing to spend: deposit (shinjuku-wallet help deposit), or run balance --refresh if a payment to this wallet settled" : void 0;
   return report("current", spendable + successionMovableAtomic, next);
 }
@@ -124142,6 +124146,7 @@ function writeCache(key, record, ctx) {
 // wallet/src/mcp/tools.mjs
 init_pool_denomination();
 init_serviceUrl();
+init_anchorClock();
 var shownCaps = (caps) => Object.fromEntries(Object.entries(caps).map(([name, value]) => [name, String(value) === NO_LIMIT_ATOMIC2 ? "none" : value]));
 var RESOURCE_PAYMENT_WAL_PREFIX2 = "resource-payment-";
 var SELF_PAY_ORIGIN3 = "https://self-pay.invalid/";
@@ -124406,7 +124411,7 @@ async function readOwnPublicBalance({ session, store }) {
     solLamports: String(solAccount?.lamports ?? 0)
   };
 }
-async function runShield({ session, depositId, amountAtomic, unitAtomic, onStage, steps = {} }) {
+async function runShield({ session, depositId, amountAtomic, onStage, steps = {} }) {
   const store = session.openStore();
   const existing = store.readWal(`deposit-${depositId}`);
   if (existing && !existing.relay) return runSelfBroadcastShield({ session, depositId, onStage });
@@ -124424,9 +124429,8 @@ async function runShield({ session, depositId, amountAtomic, unitAtomic, onStage
       ...common,
       amountAtomic,
       ownKey: true,
-      // The CLI deposit's own admission check (shielded-wallet.mjs runSelfCustodyDeposit), with the pool's deposit unit.
+      // The CLI deposit's own admission check (shielded-wallet.mjs runSelfCustodyDeposit); any amount (no deposit unit).
       checkAmount: ({ amount, pool, sourceAmount, vaultAmount }) => resolveAgentDepositAmount({
-        denominationAtomic: unitAtomic,
         requestedAtomic: amount,
         walletBalanceAtomic: sourceAmount,
         maxDepositValueAtomic: pool.maxDepositValue,
@@ -124469,7 +124473,7 @@ var usdcText = (atomic3, decimals = 6) => {
   const text3 = formatAtomic(BigInt(atomic3), decimals);
   return text3.includes(".") ? text3.replace(/0+$/, "").replace(/\.$/, "") : text3;
 };
-async function runShieldFromElsewhere({ session, depositId, amountAtomic, unitAtomic, onStage, steps = {} }) {
+async function runShieldFromElsewhere({ session, depositId, amountAtomic, onStage, steps = {} }) {
   const store = session.openStore();
   const common = {
     store,
@@ -124486,9 +124490,8 @@ async function runShieldFromElsewhere({ session, depositId, amountAtomic, unitAt
       await (steps.prepare ?? prepareRelayedDeposit)({
         ...common,
         amountAtomic,
-        // The CLI deposit --relay admission check, with the pool's deposit unit; the source is the one-time address.
+        // The CLI deposit --relay admission check (any amount, no deposit unit); the source is the one-time address.
         checkAmount: ({ amount, pool, sourceAmount, vaultAmount }) => resolveAgentDepositAmount({
-          denominationAtomic: unitAtomic,
           requestedAtomic: amount,
           walletBalanceAtomic: sourceAmount,
           maxDepositValueAtomic: pool.maxDepositValue,
@@ -124716,10 +124719,13 @@ function localBalance(session) {
     return null;
   }
 }
+var CAP_BALANCE_WAIT_MS = 35e3;
+var CAP_BALANCE_RETRY_MS = 5e3;
 var REFRESH_RETRY_MS = 6e4;
 var SWITCH_WAIT_MS = 4e4;
 var ELICIT_TIMEOUT_MS = 5 * 6e4;
 var POLL_SECONDS2 = 30;
+var MAX_SHIELDED_BALANCE_ATOMIC = 5000000n;
 function createWalletTools({
   session,
   policy,
@@ -124731,7 +124737,9 @@ function createWalletTools({
   client,
   exportBackup,
   balanceRefreshWaitMs = BALANCE_REFRESH_WAIT_MS,
-  elicitTimeoutMs = ELICIT_TIMEOUT_MS
+  elicitTimeoutMs = ELICIT_TIMEOUT_MS,
+  capBalanceWaitMs = CAP_BALANCE_WAIT_MS,
+  capBalanceRetryMs = CAP_BALANCE_RETRY_MS
 }) {
   const outDir = join26(dirname23(session.walletPath), "mcp-out");
   const knownIds = /* @__PURE__ */ new Map();
@@ -125565,6 +125573,19 @@ function createWalletTools({
   const again = (kind, job) => `call ${KINDS[kind].tool} again with request_id "${job.requestId}", amount_atomic "${job.amountAtomic}"${job.to ? `, and to "${job.to}"` : ""}`;
   const unboundNext = (requestId, amountAtomic) => `Nothing was signed. Do not retry this request_id. Tell your owner: the self-payment of this unshield has no recipient bound to it, so this server will not choose one. The owner finishes it with the CLI: shinjuku-wallet unshield (the same --wallet, proof tools, --profile, --program, --facilitator) --unshield-id ${moneyId(requestId)} --amount ${amountAtomic} --to <recipient USDC account> --recipient-owner <recipient owner>`;
   const preApproved = () => [...new Set(unshieldTo)];
+  async function anchorWaitAfterDeposit() {
+    try {
+      const read = await underLease((store) => readBalanceSnapshot(store));
+      const anchorIndex = read.snapshot?.anchorIndex;
+      if (anchorIndex === void 0) return {};
+      const waiting = read.snapshot.outputs.some((output2) => output2.kind === "account" && output2.spendStatus === "unspent" && BigInt(output2.leafIndex) >= BigInt(anchorIndex));
+      if (!waiting) return {};
+      noteAnchorOrigin(session.memoServiceUrl);
+      return { spendableAtMs: Date.now() + nextAnchorWaitMs(Date.now(), 0) };
+    } catch {
+      return {};
+    }
+  }
   function doneNext(kind, job) {
     if (kind === "unshield") {
       return `the USDC was sent to ${job.to}; tell the user (exitTransaction). wallet_balance shows the new shielded balance${job.result?.backupPath ? `. An encrypted backup of the wallet was saved at ${job.result.backupPath}` : ""}`;
@@ -125574,6 +125595,9 @@ function createWalletTools({
       return `the deposit landed. The wallet now reads it from the chain so it becomes spendable: call wallet_balance in ${POLL_SECONDS2} s (x402_pay and wallet_unshield also wait for it by themselves)`;
     }
     if (!post.refreshed) return `the deposit landed; reading it from the chain failed (${post.refreshError}): call wallet_balance in a minute, it retries by itself`;
+    if (post.spendableAtMs !== void 0 && post.spendableAtMs > Date.now()) {
+      return `the deposit landed and is in the shielded balance. It is spendable after the next pool anchor, in about ${Math.ceil((post.spendableAtMs - Date.now()) / 1e3)} s: x402_pay and wallet_unshield wait for it by themselves, so call them now if the user wants to${post.backupPath ? `. An encrypted backup of the wallet was saved at ${post.backupPath}` : ""}`;
+    }
     return `the deposit landed and is in the shielded balance: x402_pay and wallet_unshield can spend it now${post.backupPath ? `. An encrypted backup of the wallet was saved at ${post.backupPath}` : ""}`;
   }
   const ELSEWHERE_PRIVACY = "the chain shows the other wallet paying this new one-time address, and that address depositing this amount into the pool (both public; the facilitator also sees the amount and time). Later payments from the shielded balance do not show which deposit paid them. With few depositors in the pool, an amount few other deposits share, or a payment soon after the deposit, is easier to pair";
@@ -125691,8 +125715,6 @@ function createWalletTools({
     else if (/another_deposit_unresolved/.test(code)) {
       const waiting = waitingElsewhereIds();
       next = waiting.length > 0 ? `Nothing new was moved. A wallet_shield_from_elsewhere address of this wallet still waits for its USDC (request_id ${waiting.map((id) => `"${id}"`).join(", ")}), and the wallet runs one deposit at a time. Either fund it and call wallet_shield_from_elsewhere again with that request_id until it is done, or, if nothing was sent to it, close it: call wallet_shield_from_elsewhere with action "cancel" and request_id "${waiting[0]}" (it refuses when any USDC or any transaction already reached the address; then only the owner's CLI deposit-reclaim frees it). Then call this one again` : `Nothing new was moved. Another deposit of this wallet is not finished (a wallet_shield, or a wallet_shield_from_elsewhere): call that tool again with its request_id until it is done, then call this one again. If no tool knows it, tell your owner: ${code} (the CLI's deposit records show which one)`;
-    } else if (/relay_amount_not_whole_unit/.test(code)) {
-      next = `Nothing was moved and no address was made. This pool takes deposits in whole units of its pocket size (the facilitator's /api/x402/deposit shows depositUnitAtomic): call ${KINDS[kind].tool} with a NEW request_id and amount_atomic a whole multiple of it`;
     } else if (kind === "shield" && /relay_amount_below_facilitator_minimum/.test(code)) {
       next = "Nothing was moved. The facilitator does not relay a deposit this small: call wallet_shield with a NEW request_id and a larger amount_atomic";
     } else if (kind === "shield" && /relay_not_offered|relay_config_mismatch|relay_config_invalid|relay_service_required|proof_tools_missing/.test(code)) {
@@ -125730,13 +125752,6 @@ function createWalletTools({
     if (typeof amount !== "string" || !POSITIVE_ATOMIC4.test(amount)) {
       return { refusal: ["mcp_argument_invalid", "amount_atomic must be a positive whole number of atomic units (USDC: 1000000 = 1 USDC)", 'pass amount_atomic as a string, like "1000000"'] };
     }
-    if (kind !== "unshield" && money.depositUnitAtomic && BigInt(amount) % BigInt(money.depositUnitAtomic) !== 0n) {
-      return { refusal: [
-        "mcp_argument_invalid",
-        `amount_atomic must be a whole multiple of ${money.depositUnitAtomic} on this pool (whole deposit units); nothing was moved`,
-        `pass a multiple of ${money.depositUnitAtomic}, like ${money.depositUnitAtomic}`
-      ] };
-    }
     if (kind === "unshield") {
       let canonical5 = false;
       try {
@@ -125902,6 +125917,41 @@ function createWalletTools({
         const detail = `this MCP session already moved ${total} of its ${spec.capFlag} ${max}; ${amount} more is above it`;
         return refuse9(spec.capCode, `${detail}; nothing ${record ? "more " : ""}was moved`, ownerNext(detail), { requestId: request.requestId });
       }
+      if (kind !== "unshield" && !record) {
+        let stale;
+        try {
+          stale = shieldedUnknown(session.openStore());
+        } catch {
+          stale = true;
+        }
+        let one = stale ? null : localBalance(session);
+        const unknown = () => one?.balanceAtomic === null || one?.balanceAtomic === void 0;
+        for (const deadline = Date.now() + capBalanceWaitMs; unknown(); ) {
+          await refreshShared().catch(() => {
+          });
+          one = localBalance(session);
+          if (!unknown() || Date.now() + capBalanceRetryMs > deadline) break;
+          await new Promise((resolve36) => setTimeout(resolve36, capBalanceRetryMs));
+        }
+        if (unknown()) {
+          return refuse9(
+            "mcp_balance_unknown",
+            `the shielded balance could not be read just now (a payment from moments ago is not final yet, the chain read failed, or another wallet command holds this wallet), so the wallet cannot check the ${usdcText(MAX_SHIELDED_BALANCE_ATOMIC)} USDC balance cap; nothing was moved`,
+            `call ${spec.tool} again with the same request_id and amount_atomic in ${POLL_SECONDS2} s`,
+            { requestId: request.requestId }
+          );
+        }
+        const room = MAX_SHIELDED_BALANCE_ATOMIC - BigInt(one.balanceAtomic);
+        if (BigInt(request.amountAtomic) > room) {
+          const left = room > 0n ? room : 0n;
+          return refuse9(
+            "mcp_shield_above_balance_cap",
+            `the shielded balance may hold at most ${usdcText(MAX_SHIELDED_BALANCE_ATOMIC)} USDC; it holds ${usdcText(one.balanceAtomic)} USDC, so at most ${usdcText(left)} USDC more can be shielded now; nothing was moved`,
+            left > 0n ? `Tell the user the cap. Call ${spec.tool} with a NEW request_id and amount_atomic at most "${left}"` : "Tell the user the shielded balance is at its cap: spend some with x402_pay, or send some out with wallet_unshield, before shielding more",
+            { requestId: request.requestId, balanceAtomic: one.balanceAtomic, maxBalanceAtomic: MAX_SHIELDED_BALANCE_ATOMIC.toString(), roomAtomic: left.toString() }
+          );
+        }
+      }
       if (!deferCount) {
         moved[spec.counter] += amount;
         counted.set(key, amount);
@@ -126007,7 +126057,6 @@ function createWalletTools({
       session,
       depositId: moneyId(job.requestId),
       amountAtomic: job.amountAtomic,
-      unitAtomic: money.depositUnitAtomic,
       onStage,
       steps: { prepare: ops.prepareOwnRelayed, submit: ops.submitOwnRelayed }
     });
@@ -126017,14 +126066,16 @@ function createWalletTools({
       session,
       depositId: elsewhereId(job.requestId),
       amountAtomic: job.amountAtomic,
-      unitAtomic: money.depositUnitAtomic,
       onStage,
       steps: { prepare: ops.prepareRelayed, submit: ops.submitRelayed }
     });
   }
   function afterShield(job) {
     job.post = { state: "running" };
-    job.postPromise = refreshShared().then(() => ({ refreshed: true }), (error) => ({ refreshed: false, refreshError: errorCode2(error, "mcp_refresh_failed") })).then((refresh) => underLease((store) => backupNow(store)).catch((error) => typeof exportBackup === "function" ? { backupPath: null, backupError: errorCode2(error, "wallet_locked") } : {}).then((backup) => {
+    job.postPromise = refreshShared().then(
+      () => anchorWaitAfterDeposit().then((wait2) => ({ refreshed: true, ...wait2 })),
+      (error) => ({ refreshed: false, refreshError: errorCode2(error, "mcp_refresh_failed") })
+    ).then((refresh) => underLease((store) => backupNow(store)).catch((error) => typeof exportBackup === "function" ? { backupPath: null, backupError: errorCode2(error, "wallet_locked") } : {}).then((backup) => {
       job.post = { state: "done", ...refresh, ...backup };
     })).finally(() => {
       if (money.autoPockets === true) autoPockets.onShielded();
@@ -126158,11 +126209,11 @@ function createWalletTools({
   const shield = {
     name: "wallet_shield",
     title: "Shield USDC (make it private)",
-    description: `Use this when the user says "shield 5 USDC", "make my USDC private", or "add funds to my shielded balance": it moves amount_atomic of the plain public USDC on this wallet's own Solana key (wallet_balance unshieldedAtomic) into the SHIELDED balance, which x402_pay and wallet_unshield spend. The USDC stays the user's. Cost: no SOL. The wallet's key only signs an approval of the amount; the facilitator's relayer submits the deposit and pays every network fee and rent. The facilitator relays deposits of at least its minimum (1 USDC by default). Privacy: the chain shows this key depositing this amount; later payments from the shielded balance do not show this wallet. It takes a few minutes: the first call starts it and answers stage (proving, submitting, done); call wallet_shield again with the SAME request_id and amount_atomic in ${POLL_SECONDS2} s for the status. When the deposit lands, the wallet reads it from the chain by itself (refreshing: true until it is spendable) and writes an encrypted backup (backupPath). The same request_id never deposits twice, also after a restart. One deposit at a time. An optional owner cap (--max-shield) may bound each call and this session (mcp_shield_cap_exceeded: tell the owner). Refusals: mcp_argument_invalid, mcp_request_id_reused, wallet_locked, mcp_tool_disabled, mcp_shield_failed, and the deposit's own p03_deposit_* codes.`,
+    description: `Use this when the user says "shield 5 USDC", "make my USDC private", or "add funds to my shielded balance": it moves amount_atomic of the plain public USDC on this wallet's own Solana key (wallet_balance unshieldedAtomic) into the SHIELDED balance, which x402_pay and wallet_unshield spend. The USDC stays the user's. Cost: no SOL. The wallet's key only signs an approval of the amount; the facilitator's relayer submits the deposit and pays every network fee and rent. Any amount from 0.01 USDC (amount_atomic 10000; the facilitator's minimum) works, cents included, while the shielded balance stays at most 5 USDC (mcp_shield_above_balance_cap says how much more fits). Privacy: the chain shows this key depositing this amount; later payments from the shielded balance do not show this wallet. It takes a few minutes: the first call starts it and answers stage (proving, submitting, done); call wallet_shield again with the SAME request_id and amount_atomic in ${POLL_SECONDS2} s for the status. When the deposit lands, the wallet reads it from the chain by itself (refreshing: true until it is spendable) and writes an encrypted backup (backupPath). The same request_id never deposits twice, also after a restart. One deposit at a time. An optional owner cap (--max-shield) may bound each call and this session (mcp_shield_cap_exceeded: tell the owner). Refusals: mcp_argument_invalid, mcp_request_id_reused, wallet_locked, mcp_tool_disabled, mcp_shield_failed, and the deposit's own p03_deposit_* codes.`,
     inputSchema: {
       type: "object",
       properties: {
-        amount_atomic: { type: "string", pattern: "^[1-9][0-9]*$", description: "USDC to shield, in atomic units (1000000 = 1 USDC). A whole number of USDC on this service's pools." },
+        amount_atomic: { type: "string", pattern: "^[1-9][0-9]*$", description: "USDC to shield, in atomic units (1000000 = 1 USDC, 370000 = 0.37 USDC): any amount from 10000 (0.01 USDC) while the balance stays at most 5 USDC." },
         request_id: { type: "string", pattern: "^[A-Za-z0-9_-]{1,44}$", description: "Your stable name for this deposit, like shield-1; pass it again to read the status." }
       },
       required: ["amount_atomic", "request_id"],
@@ -126195,7 +126246,7 @@ function createWalletTools({
     inputSchema: {
       type: "object",
       properties: {
-        amount_atomic: { type: "string", pattern: "^[1-9][0-9]*$", description: "USDC to shield, in atomic units (1000000 = 1 USDC). A whole number of USDC on this service's pools. Required unless action is cancel." },
+        amount_atomic: { type: "string", pattern: "^[1-9][0-9]*$", description: "USDC to shield, in atomic units (1000000 = 1 USDC, 370000 = 0.37 USDC): any amount from 10000 (0.01 USDC) while the balance stays at most 5 USDC. Required unless action is cancel." },
         request_id: { type: "string", pattern: "^[A-Za-z0-9_-]{1,44}$", description: "Your stable name for this deposit, like from-phantom-1; pass it again (with the same amount_atomic) to read the status." },
         action: { type: "string", enum: ["deposit", "cancel"], description: "deposit (the default): start or read this deposit. cancel: close this request's one-time address while nothing at all reached it (no amount_atomic needed)." }
       },
@@ -126772,8 +126823,7 @@ function moneyOptions({
   exitProofToolsPath,
   profilePath,
   proofToolsPath,
-  memoServiceUrl,
-  depositUnitAtomic
+  memoServiceUrl
 }, asText = (value) => value === void 0 || value === null ? "" : String(value)) {
   if (noShield === true && allowShield === true) setupInvalid("--no-shield and --allow-shield contradict each other; pass one");
   const shieldCap = asText(maxShieldAtomic);
@@ -126828,8 +126878,7 @@ function moneyOptions({
     ...shieldOn && shieldCap ? { maxShieldAtomic: shieldCap } : {},
     allowUnshield: unshieldOn,
     unshieldTo: Object.freeze([...new Set(addresses)]),
-    ...unshieldOn ? { ...unshieldCap ? { maxUnshieldAtomic: unshieldCap } : {}, exitProofTools, profile, facilitatorOrigin: facilitatorOrigin2 } : {},
-    ...depositUnitAtomic ? { depositUnitAtomic: asText(depositUnitAtomic) } : {}
+    ...unshieldOn ? { ...unshieldCap ? { maxUnshieldAtomic: unshieldCap } : {}, exitProofTools, profile, facilitatorOrigin: facilitatorOrigin2 } : {}
   });
 }
 async function runMcpServer({ input = process.stdin, output: output2 = process.stdout, errorOutput = process.stderr, updateCheck, ...options } = {}) {
@@ -126876,7 +126925,6 @@ async function openWalletServer({
   maxUnshieldAtomic,
   exitProofToolsPath,
   profilePath,
-  depositUnitAtomic,
   autoPockets = true,
   readyPockets,
   discoverWarmup = false,
@@ -126904,8 +126952,7 @@ async function openWalletServer({
     exitProofToolsPath,
     profilePath,
     proofToolsPath,
-    memoServiceUrl,
-    depositUnitAtomic
+    memoServiceUrl
   }, asText);
   const live = {
     ...proofToolsPath ? { proofToolsPath: resolve23(proofToolsPath) } : {},
@@ -131995,8 +132042,6 @@ function mcpServerOptions(values, deps) {
     ...values.has("--max-unshield") ? { maxUnshieldAtomic: values.get("--max-unshield") } : {},
     ...values.has("--exit-proof-tools") ? { exitProofToolsPath: values.get("--exit-proof-tools") } : {},
     ...values.has("--profile") ? { profilePath: values.get("--profile") } : {},
-    // A wallet_shield deposit takes whole units of this service's pools, as a relayed deposit does.
-    ...!values.has("--no-shield") && RELAYED_DEPOSIT_UNIT[pool] ? { depositUnitAtomic: RELAYED_DEPOSIT_UNIT[pool] } : {},
     // Automatic pockets: on by default (they fill with the unshield inputs, which config.json from setup holds).
     autoPockets: !values.has("--no-auto-pockets"),
     ...values.has("--ready-pockets") ? { readyPockets: values.get("--ready-pockets") } : {},
@@ -134491,9 +134536,6 @@ function relayDepositFailureHint(reason) {
   if (/p03_deposit_token_balance_unreadable/.test(reason)) {
     return "the RPC did not answer a USDC balance read (after 5 tries), so the wallet stopped: it never reads a failed read as 0. Do NOT send more USDC because of this; nothing was sent. Rerun the same command later, or use another --rpc";
   }
-  if (/p03_deposit_relay_amount_not_whole_unit/.test(reason)) {
-    return "this pool takes deposits in whole units of its pocket size (GET <facilitator>/api/x402/deposit shows depositUnitAtomic), so no amount marks one depositor; nothing was recorded or sent. Rerun with --amount a whole multiple of it";
-  }
   if (/p03_deposit_relay_amount_below_facilitator_minimum/.test(reason)) {
     return "the facilitator relays deposits of at least its minimum (GET <facilitator>/api/x402/deposit shows minimumAtomic); nothing was recorded. Rerun with a larger --amount";
   }