shinjuku-shielded 0.3.69 → 0.3.71

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "c6cbe0a61037f0a435f7ce448d6ff6fc6a4a97a9b7336fea33c9e7a1e56c11e7",
-  "bytes": 12194855,
-  "sourceCommit": "6325678a822487e65a0bccf3f398ba32fab563e8",
+  "sha256": "61674c4e8c6309ae6c93338211bf57a674837f572e498215300031a65b9aa743",
+  "bytes": 12200396,
+  "sourceCommit": "ec62139d8d55db9f55e17c488d052b6c8248acda",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1282,5 +1282,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-10-22T14:42:59.608Z"
+  "publishedAt": "2026-10-22T16:40:39.055Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.69",
+  "version": "0.3.71",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "c6cbe0a6",
-  "shinjukuSha256": "c6cbe0a61037f0a435f7ce448d6ff6fc6a4a97a9b7336fea33c9e7a1e56c11e7",
+  "shinjukuRelease": "61674c4e",
+  "shinjukuSha256": "61674c4e8c6309ae6c93338211bf57a674837f572e498215300031a65b9aa743",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-mcp#readme",

package/shinjuku-wallet.mjs

@@ -51938,13 +51938,7 @@ function createCompactHistoryCacheStore({ path, hmacKey, now }) {
         accounts: [...state.initialization.accounts],
         data: Buffer.from(state.initialization.data).toString("hex")
       },
-      ...state.attestation ? {
-        attestation: {
-          key: state.attestation.key,
-          newestSignature: state.attestation.newestSignature,
-          coverage: encodeTagged(state.attestation.coverage)
-        }
-      } : {},
+      ...state.attestation ? { attestation: serializeAttestation(state.attestation) } : {},
       // 2026-10-16: the append root after each served record (hex, count 1..n) and the empty
       // tree's root, a fold hint for a new process (compact.mjs hintCompactFold). Optional: an
       // older build reads the file and drops it; a file without it folds as before.
@@ -51986,7 +51980,7 @@ function createCompactHistoryCacheStore({ path, hmacKey, now }) {
     }
   });
 }
-var P03_HISTORY_CACHE_SCHEMA, positionOrNull, encodeTagged, decodeTagged, deserializeAttestation, serializeState, deserializeState, P03_COMPACT_HISTORY_CACHE_SCHEMA;
+var P03_HISTORY_CACHE_SCHEMA, positionOrNull, encodeTagged, decodeTagged, deserializeAttestation, serializeAttestation, serializeState, deserializeState, P03_COMPACT_HISTORY_CACHE_SCHEMA;
 var init_cacheStore = __esm({
   "wallet/src/history/cacheStore.mjs"() {
     "use strict";
@@ -52019,8 +52013,22 @@ var init_cacheStore = __esm({
       if (coverage.complete !== true || typeof coverage.programDataAddress !== "string" || typeof coverage.programDataSha256 !== "string" || typeof coverage.deployedAtSlot !== "bigint" || typeof coverage.throughFinalizedSlot !== "bigint") {
         throw new Error("p03_history_cache_attestation_invalid");
       }
-      return { key: value.key, newestSignature: value.newestSignature, coverage };
+      if (value.newestSignatureSlot !== void 0 && (!Number.isSafeInteger(value.newestSignatureSlot) || value.newestSignatureSlot < 0 || BigInt(value.newestSignatureSlot) > coverage.throughFinalizedSlot)) {
+        throw new Error("p03_history_cache_attestation_invalid");
+      }
+      return {
+        key: value.key,
+        newestSignature: value.newestSignature,
+        ...value.newestSignatureSlot === void 0 ? {} : { newestSignatureSlot: value.newestSignatureSlot },
+        coverage
+      };
     };
+    serializeAttestation = (attestation) => ({
+      key: attestation.key,
+      newestSignature: attestation.newestSignature,
+      ...Number.isSafeInteger(attestation.newestSignatureSlot) ? { newestSignatureSlot: attestation.newestSignatureSlot } : {},
+      coverage: encodeTagged(attestation.coverage)
+    });
     serializeState = (state) => ({
       schema: P03_HISTORY_CACHE_SCHEMA,
       programId: state.programId,
@@ -52028,13 +52036,7 @@ var init_cacheStore = __esm({
       cursor: { ...state.cursor },
       snapshot: { ...state.snapshot },
       transactions: state.transactions.map(serializeTransactionEntry),
-      ...state.attestation ? {
-        attestation: {
-          key: state.attestation.key,
-          newestSignature: state.attestation.newestSignature,
-          coverage: encodeTagged(state.attestation.coverage)
-        }
-      } : {}
+      ...state.attestation ? { attestation: serializeAttestation(state.attestation) } : {}
     });
     deserializeState = (value) => {
       if (!value || value.schema !== P03_HISTORY_CACHE_SCHEMA || typeof value.programId !== "string" || typeof value.pool !== "string" || !value.cursor || typeof value.cursor.lastPoolSignature !== "string" || !Number.isSafeInteger(value.cursor.lastSlot) || !value.snapshot || !Number.isSafeInteger(value.snapshot.slot) || typeof value.snapshot.terminal !== "boolean" || typeof value.snapshot.currentIndex !== "string" || typeof value.snapshot.currentRoot !== "string" || !Array.isArray(value.transactions)) {
@@ -53662,6 +53664,11 @@ function finalizedPoolStateOf(report, { programId, pool: pool2 }) {
   if (entry === void 0 || entry.programId !== String(programId) || entry.pool !== String(pool2)) return void 0;
   return entry.state;
 }
+function poolReadAtOf(report) {
+  if (!report || !AUTHENTICATED_HISTORY_REPORTS.has(report)) return void 0;
+  const readAt = REPORT_POOL_STATES.get(report)?.readAt;
+  return Number.isFinite(readAt) ? readAt : void 0;
+}
 function p03SettlementConsumesBuffer(tag2) {
   return P03_SETTLEMENT_TAGS.includes(tag2) && !P03_INLINE_SETTLEMENT_TAGS.includes(tag2);
 }
@@ -53843,13 +53850,34 @@ async function refreshFinalizedP03HistorySnapshot({
   history,
   paymentSettler
 }) {
+  const { authenticated, program, poolKey } = refreshBinding(history, programId, pool2);
+  const snapshot = await readFinalizedPoolForRefresh(connection, program, poolKey);
+  return refreshedFromSnapshot({ connection, program, poolKey, authenticated, snapshot, paymentSettler });
+}
+async function refreshFinalizedP03HistoryFromSliced({ connection, programId, pool: pool2, history, snapshot }) {
+  const { authenticated, program, poolKey } = refreshBinding(history, programId, pool2);
+  if (snapshot === null || typeof snapshot !== "object" || snapshot.programDataReuse === void 0) return void 0;
+  let view2 = snapshot;
+  if (snapshot.replayStore === REPLAY_STORE_INDEXED) {
+    const slices = snapshot.e1TreeSlices;
+    if (!slices || slices.slot !== snapshot.slot || !(slices.header instanceof Uint8Array)) return void 0;
+    view2 = withPoolStateOf(snapshot, Object.freeze({
+      ...snapshot,
+      e1TreeHeader: Object.freeze({ address: slices.address, ownerProgramId: slices.ownerProgramId, data: Buffer.from(slices.header) })
+    }));
+  }
+  return refreshedFromSnapshot({ connection, program, poolKey, authenticated, snapshot: view2, reuseAnswer: snapshot.programDataReuse });
+}
+function refreshBinding(history, programId, pool2) {
   const authenticated = assertAuthenticatedFinalizedP03History(history);
   const program = canonicalKey(programId, "program_id");
   const poolKey = canonicalKey(pool2, "pool");
   if (authenticated.programId !== b58(program) || authenticated.pool !== poolKey.toBase58()) {
     throw new Error("p03_history_refresh_binding_invalid");
   }
-  const snapshot = await readFinalizedPoolForRefresh(connection, program, poolKey);
+  return { authenticated, program, poolKey };
+}
+async function refreshedFromSnapshot({ connection, program, poolKey, authenticated, snapshot, paymentSettler, reuseAnswer }) {
   if (snapshot.terminal !== authenticated.finalizedPoolSnapshot.terminal || snapshot.currentIndex !== authenticated.finalizedPoolSnapshot.currentIndex || snapshot.currentRoot !== authenticated.finalizedPoolSnapshot.currentRoot || !sameP03PoolPolicy(snapshot, authenticated.finalizedPoolSnapshot.policy) || !sameE1TreeHeader(snapshot, authenticated.finalizedPoolSnapshot.e1Tree, program, poolKey) || paymentSettler !== void 0 && snapshot.paymentSettler?.toBase58() !== paymentSettler) {
     throw Object.assign(
       new Error("p03_history_refresh_transition_detected"),
@@ -53869,7 +53897,8 @@ async function refreshFinalizedP03HistorySnapshot({
       programDataSha256: priorCoverage.programDataSha256,
       ...priorCoverage.programHistory ? { programHistory: priorCoverage.programHistory } : {}
     },
-    prior: HISTORY_ATTESTATIONS.get(authenticated)
+    prior: HISTORY_ATTESTATIONS.get(authenticated),
+    ...reuseAnswer !== void 0 ? { reuseAnswer } : {}
   });
   const deploymentCoverage = refreshedCoverage.coverage;
   if (!hasExecutableEvidence(deploymentCoverage)) throw new Error("p03_history_executable_evidence_required");
@@ -54034,7 +54063,8 @@ function slicedSnapshot(result, program, pool2, tree, programData) {
       owner: value.owner,
       executable: value.executable,
       data,
-      newestSignature: newest.signature
+      newestSignature: newest.signature,
+      newestSignatureSlot: newest.slot
     })
   }));
 }
@@ -54162,7 +54192,8 @@ function parseFinalizedPool(response, program, pool2) {
     SNAPSHOT_POOL_STATES.set(snapshot, Object.freeze({
       programId: b58(program),
       pool: pool2.toBase58(),
-      state: Object.freeze({ ...state, owner })
+      state: Object.freeze({ ...state, owner }),
+      readAt: Date.now()
     }));
   }
   return snapshot;
@@ -54298,12 +54329,21 @@ async function programDataCoverageFor(args) {
   let priorRefused = false;
   let cause;
   const key = coverageKey({ program, initialization, deploymentIdentity });
+  if (key !== void 0 && prior?.key === key && typeof prior.newestSignature === "string" && Number.isSafeInteger(prior.newestSignatureSlot) && typeof prior.coverage?.throughFinalizedSlot === "bigint" && BigInt(prior.newestSignatureSlot) <= BigInt(snapshotSlot) && prior.coverage.throughFinalizedSlot > BigInt(snapshotSlot)) {
+    markPhase("attest-reuse-older-snapshot");
+    return { coverage: Object.freeze({ ...prior.coverage, throughFinalizedSlot: BigInt(snapshotSlot) }), attestation: prior, reused: true };
+  }
   if (key !== void 0 && prior?.key === key && typeof prior.newestSignature === "string" && prior.coverage?.throughFinalizedSlot <= BigInt(snapshotSlot)) {
     const address5 = new import_web396.PublicKey(prior.coverage.programDataAddress);
     const deployedAtSlot = BigInt(prior.coverage.deployedAtSlot);
-    const reuse = (signature2) => {
+    const reuse = (signature2, signatureSlot) => {
       const coverage = Object.freeze({ ...prior.coverage, throughFinalizedSlot: BigInt(snapshotSlot) });
-      return { coverage, attestation: { key, newestSignature: signature2, coverage }, reused: true };
+      return { coverage, attestation: {
+        key,
+        newestSignature: signature2,
+        ...Number.isSafeInteger(signatureSlot) && signatureSlot <= snapshotSlot ? { newestSignatureSlot: signatureSlot } : {},
+        coverage
+      }, reused: true };
     };
     const pooled = reuseAnswer !== void 0 && reuseAnswer.slot === snapshotSlot && reuseAnswer.address === address5.toBase58() ? reuseAnswer : void 0;
     if (pooled !== void 0) {
@@ -54311,7 +54351,7 @@ async function programDataCoverageFor(args) {
         assertProgramDataHeader(pooled.slot, pooled, { snapshotSlot, deployedAtSlot });
         if (pooled.newestSignature === prior.newestSignature) {
           markPhase("attest-reuse-in-pool-read");
-          return reuse(pooled.newestSignature);
+          return reuse(pooled.newestSignature, pooled.newestSignatureSlot);
         }
         cause = "programdata_newest_signature_changed";
       } catch (error) {
@@ -54329,7 +54369,7 @@ async function programDataCoverageFor(args) {
             }),
             newestSignature(reuseConnection, address5, snapshotSlot)
           ]);
-          if (newest.signature === prior.newestSignature) return reuse(newest.signature);
+          if (newest.signature === prior.newestSignature) return reuse(newest.signature, newest.slot);
           cause = "programdata_newest_signature_changed";
           break;
         } catch (error) {
@@ -54375,7 +54415,7 @@ async function programDataCoverageFor(args) {
     const newest = await newestSignature(connection, new import_web396.PublicKey(coverage.programDataAddress), snapshotSlot);
     return {
       coverage,
-      attestation: key !== void 0 && newest.slot <= snapshotSlot ? { key, newestSignature: newest.signature, coverage } : void 0,
+      attestation: key !== void 0 && newest.slot <= snapshotSlot ? { key, newestSignature: newest.signature, newestSignatureSlot: newest.slot, coverage } : void 0,
       reused: false
     };
   })();
@@ -57401,7 +57441,7 @@ function withBoundedOwnReads(connection) {
       if (typeof value !== "function") return value;
       if (BOUNDED_OWN_METHODS.has(property)) return (...args) => boundedOwnRead(() => value.apply(target, args));
       if (property === "_rpcRequest") {
-        return (...args) => args[0] === P03_POOL_SLICES_METHOD ? boundedOwnRead(() => value.apply(target, args)) : value.apply(target, args);
+        return (...args) => args[0] === P03_POOL_SLICES_METHOD ? boundedOwnRead((stalled) => hedgedOwnPoolSlicesRead(target, args[1], { stalled })) : value.apply(target, args);
       }
       return value.bind(target);
     }
@@ -57452,8 +57492,15 @@ async function readPages(history, pool2, needed, first, { wakeSlot } = {}) {
   }
   return { records: records.slice(0, needed), imports, initialization, syncedSlot };
 }
-async function readCompactPoolSnapshot({ connection, programId, pool: pool2 }) {
-  return readFinalizedPool(withBoundedOwnReads(connection), new import_web397.PublicKey(programId), new import_web397.PublicKey(pool2), { treeSlices: true });
+function startCompactPoolSnapshot({ connection, programId, pool: pool2 }) {
+  const own = withBoundedOwnReads(connection);
+  const program = new import_web397.PublicKey(programId);
+  const poolKey = new import_web397.PublicKey(pool2);
+  const sliced = readFinalizedPoolSliced(own, program, poolKey).catch(() => void 0);
+  const full = sliced.then((snapshot) => snapshot ?? readFinalizedPool(own, program, poolKey));
+  full.catch(() => {
+  });
+  return { sliced, full };
 }
 function requestCompactFirstPage({ history, pool: pool2 }) {
   try {
@@ -57521,15 +57568,40 @@ async function ownTransaction(own, signature2) {
 }
 async function hedgedOwnTransactionRead(own, signature2, { stalled, hedge = inTorRun, afterMs = SPOT_HEDGE_AFTER_MS } = {}) {
   const params = [signature2, { commitment: "finalized", maxSupportedTransactionVersion: 1, encoding: "base64" }];
-  if (typeof own.abortableRpcRequest !== "function") return own._rpcRequest("getTransaction", params);
-  const id = `spot-${spotReadId += 1}`;
+  return hedgedOwnRead(own, "getTransaction", params, {
+    stalled,
+    hedge,
+    afterMs,
+    id: `spot-${spotReadId += 1}`,
+    lane: SPOT_HEDGE_LANE,
+    mark: "spot-hedge",
+    passes: (response) => {
+      checkedOwnTransaction(response, signature2);
+    }
+  });
+}
+function hedgedOwnPoolSlicesRead(own, params, { stalled, hedge = inTorRun, afterMs = POOL_HEDGE_AFTER_MS } = {}) {
+  return hedgedOwnRead(own, P03_POOL_SLICES_METHOD, params, {
+    stalled,
+    hedge,
+    afterMs,
+    id: `pool-${poolReadId += 1}`,
+    lane: POOL_HEDGE_LANE,
+    mark: "pool-hedge",
+    passes: (response) => {
+      if (response === null || typeof response !== "object" || !("result" in response || "error" in response)) throw new Error("no answer");
+    }
+  });
+}
+async function hedgedOwnRead(own, method, params, { stalled, hedge, afterMs, id, lane: hedgeLane, mark, passes: check }) {
+  if (typeof own.abortableRpcRequest !== "function") return own._rpcRequest(method, params);
   const copies = [];
   const send3 = (lane) => {
     const controller = new AbortController();
     const signal = stalled === void 0 ? controller.signal : AbortSignal.any([stalled, controller.signal]);
     const copy = { controller, lane, outcome: void 0 };
     copy.read = own.abortableRpcRequest(
-      "getTransaction",
+      method,
       params,
       signal,
       void 0,
@@ -57556,14 +57628,14 @@ async function hedgedOwnTransactionRead(own, signature2, { stalled, hedge = inTo
     const follow = (copy, which) => copy.read.then((response) => {
       let passes = false;
       try {
-        checkedOwnTransaction(response, signature2);
+        check(response);
         passes = true;
       } catch {
         passes = false;
       }
       copy.outcome = { response, passes };
       if (passes && !done) {
-        if (copies.length > 1) markPhase(`spot-hedge-won-${which}`);
+        if (copies.length > 1) markPhase(`${mark}-won-${which}`);
         finish(() => resolve38(response));
         return;
       }
@@ -57580,8 +57652,8 @@ async function hedgedOwnTransactionRead(own, signature2, { stalled, hedge = inTo
       clearTimeout(timer);
       timer = void 0;
       if (done || copies.length > 1) return;
-      markPhase("spot-hedge-sent");
-      follow(send3(SPOT_HEDGE_LANE), "hedge");
+      markPhase(`${mark}-sent`);
+      follow(send3(hedgeLane), "hedge");
     };
     follow(send3(void 0), "first");
     timer = hedging ? setTimeout(sendHedge, afterMs) : void 0;
@@ -58234,7 +58306,7 @@ async function tryCompactP03HistoryReport(options) {
     return { ok: false, reason, ...detail ? { detail } : {}, error };
   }
 }
-var import_web397, P03_COMPACT_HISTORY_SOURCE_MODEL, P03_COMPACT_PAGE, P03_COMPACT_SPOT_CHECKS, FIELD_MODULUS5, SUBTREE_LEAVES3, LOCAL_DEPTH2, OUTER_DEPTH2, PRIMARY_PROOF_BYTES2, FIELD_BYTES3, ED25519_SPKI_PREFIX2, VERSION_1_PREFIX2, HEX64, BASE58, REPLAY_STORE_INDEXED2, PROFILES2, MOVE_HEAD_BYTES2, MOVE_INSERTED_VALUES2, refuse3, hash4, bitAt, zeroRootsMemo, lastFolds, PRE_FOLD_SLICE_MS, preFolds, hex64, droppedPools, verifyQuietMs, VERIFY_SLICE_MS, VERIFY_POLL_MS, verifying, unrefTurn, isSignature, isIndex, IMPORT_KEYS, IMPORT_MAX_VALUES, LIST_ATTEMPTS, pageZeroInFlight, OWN_READ_TIMEOUT_MS, BOUNDED_OWN_METHODS, SPOT_HEDGE_AFTER_MS, SPOT_HEDGE_LANE, spotReadId, compactReportsRunning, compactHistoryReadsRunning;
+var import_web397, P03_COMPACT_HISTORY_SOURCE_MODEL, P03_COMPACT_PAGE, P03_COMPACT_SPOT_CHECKS, FIELD_MODULUS5, SUBTREE_LEAVES3, LOCAL_DEPTH2, OUTER_DEPTH2, PRIMARY_PROOF_BYTES2, FIELD_BYTES3, ED25519_SPKI_PREFIX2, VERSION_1_PREFIX2, HEX64, BASE58, REPLAY_STORE_INDEXED2, PROFILES2, MOVE_HEAD_BYTES2, MOVE_INSERTED_VALUES2, refuse3, hash4, bitAt, zeroRootsMemo, lastFolds, PRE_FOLD_SLICE_MS, preFolds, hex64, droppedPools, verifyQuietMs, VERIFY_SLICE_MS, VERIFY_POLL_MS, verifying, unrefTurn, isSignature, isIndex, IMPORT_KEYS, IMPORT_MAX_VALUES, LIST_ATTEMPTS, pageZeroInFlight, OWN_READ_TIMEOUT_MS, BOUNDED_OWN_METHODS, SPOT_HEDGE_AFTER_MS, SPOT_HEDGE_LANE, spotReadId, POOL_HEDGE_AFTER_MS, POOL_HEDGE_LANE, poolReadId, compactReportsRunning, compactHistoryReadsRunning;
 var init_compact = __esm({
   "wallet/src/history/compact.mjs"() {
     "use strict";
@@ -58370,6 +58442,9 @@ var init_compact = __esm({
     SPOT_HEDGE_AFTER_MS = 4e3;
     SPOT_HEDGE_LANE = "spot-hedge";
     spotReadId = 0;
+    POOL_HEDGE_AFTER_MS = 5e3;
+    POOL_HEDGE_LANE = "pool-hedge";
+    poolReadId = 0;
     compactReportsRunning = 0;
     compactHistoryReadsRunning = () => compactReportsRunning;
   }
@@ -58988,7 +59063,7 @@ async function loadWalletP03History(args) {
   }
   if (runKey !== void 0 && recentScope.getStore() !== void 0 && strictScope.getStore() !== true && args.forceRead !== true) {
     const recent = recentLoads.get(runKey);
-    if (recent !== void 0 && Date.now() - recent.startedAt <= HISTORY_PREWARM_JOIN_MS) {
+    if (recent !== void 0 && Date.now() - recentAgeStart(recent) <= HISTORY_PREWARM_JOIN_MS) {
       PREWARMED_REPORTS.add(recent.report);
       PAYMENT_TAKEN_REPORTS.add(recent.report);
       markPhase("walk-recent");
@@ -59022,7 +59097,7 @@ function recentBeforePrewarm(runKey, prewarm) {
   const accept = recentScope.getStore()?.accept;
   if (typeof accept !== "function" || prewarm.settled) return void 0;
   const recent = recentLoads.get(runKey);
-  if (recent === void 0 || Date.now() - recent.startedAt > HISTORY_PREWARM_JOIN_MS) return void 0;
+  if (recent === void 0 || Date.now() - recentAgeStart(recent) > HISTORY_PREWARM_JOIN_MS) return void 0;
   let accepted = false;
   try {
     accepted = accept(recent.report) === true;
@@ -59167,11 +59242,11 @@ async function walkWalletP03HistoryNow({ store, connection: given, programId, po
     if (typeof index === "bigint") movedIndex = index + SUBTREE_LEAVES4;
   } else if (earlier !== void 0) {
     markPhase("refresh-start");
-    const refreshing = refreshFinalizedP03HistorySnapshot({ connection, programId, pool: pool2, history: earlier });
+    let slicedPreRead;
     if (compactNext) {
-      poolPreRead = readCompactPoolSnapshot({ connection, programId, pool: pool2 });
-      poolPreRead.catch(() => {
-      });
+      const started = startCompactPoolSnapshot({ connection, programId, pool: pool2 });
+      slicedPreRead = started.sliced;
+      poolPreRead = started.full;
       markPhase("compact-pool-prestarted");
       if (!inTorRun() && Date.now() - remembered.at > PAGE0_PREREAD_AFTER_MS) {
         firstPreRead = requestCompactFirstPage({ history: connection.historyRpcSource, pool: pool2 });
@@ -59184,11 +59259,24 @@ async function walkWalletP03HistoryNow({ store, connection: given, programId, po
       } catch {
       }
     }
+    let fromSliced = false;
+    const refreshing = (async () => {
+      if (slicedPreRead !== void 0) {
+        const decided = await refreshFinalizedP03HistoryFromSliced({ connection, programId, pool: pool2, history: earlier, snapshot: await slicedPreRead });
+        if (decided !== void 0) {
+          fromSliced = true;
+          markPhase("refresh-from-sliced");
+          return decided;
+        }
+        markPhase("refresh-sliced-undecided");
+      }
+      return refreshFinalizedP03HistorySnapshot({ connection, programId, pool: pool2, history: earlier });
+    })();
     try {
       const refreshed = await refreshing;
       markPhase("walk-refreshed");
       rememberRunReport(runKey, refreshed);
-      writeStderr("history: the pool made no transition since this run's last walk; that history was moved to the current pool account (your own RPC read the pool account and the program's deployment account; the history source answered one signature read)\n");
+      writeStderr("history: the pool made no transition since this run's last walk; that history was moved to the current pool account " + (fromSliced ? "(your own RPC read the pool account and the program's deployment account in one request)\n" : "(your own RPC read the pool account and the program's deployment account; the history source answered one signature read)\n"));
       return refreshed;
     } catch (error) {
       markPhase("refresh-missed");
@@ -59411,7 +59499,7 @@ function reportHistoryRpc(split5, source, result, crossChecked) {
   writeStderr(`history: ${who} answered ${list(split5.history)}; your own RPC answered ${list(split5.own)} (the pool account the history must match, and the cross-check)${window2}${integrity}
 `);
 }
-var prepareReport, strictScope, withStrictHistorySource, recentScope, withRecentWalletHistory, recentLoads, forgetRecentWalletHistory, proofBuiltAt, historyCacheKey, latestPrewarm, HOME_MARKS_SETTLED_MS, HISTORY_PREWARM_JOIN_MS, SHARED_WALK_WAIT_MS, PAGE0_PREREAD_AFTER_MS, SUBTREE_LEAVES4, prewarmedWalks, sharedWalks, PREWARMED_REPORTS, PAYMENT_TAKEN_REPORTS, isPrewarmedWalletHistory, REPORT_STARTED_AT, walkStartedAtOf, COMPACT_BEHIND_POLL_MS, COMPACT_BEHIND_READ_MS, COMPACT_BEHIND_TOR_READ_MS, COMPACT_BEHIND_REFUSAL_MAX_BYTES, COMPACT_BEHIND_PAGE_BODY_MS, COMPACT_BEHIND_RETRY_MS, lastRunReports, writeStderr, announcedSources;
+var prepareReport, strictScope, withStrictHistorySource, recentScope, withRecentWalletHistory, recentLoads, recentAgeStart, forgetRecentWalletHistory, proofBuiltAt, historyCacheKey, latestPrewarm, HOME_MARKS_SETTLED_MS, HISTORY_PREWARM_JOIN_MS, SHARED_WALK_WAIT_MS, PAGE0_PREREAD_AFTER_MS, SUBTREE_LEAVES4, prewarmedWalks, sharedWalks, PREWARMED_REPORTS, PAYMENT_TAKEN_REPORTS, isPrewarmedWalletHistory, REPORT_STARTED_AT, walkStartedAtOf, COMPACT_BEHIND_POLL_MS, COMPACT_BEHIND_READ_MS, COMPACT_BEHIND_TOR_READ_MS, COMPACT_BEHIND_REFUSAL_MAX_BYTES, COMPACT_BEHIND_PAGE_BODY_MS, COMPACT_BEHIND_RETRY_MS, lastRunReports, writeStderr, announcedSources;
 var init_walletHistory = __esm({
   "wallet/src/history/walletHistory.mjs"() {
     "use strict";
@@ -59433,6 +59521,7 @@ var init_walletHistory = __esm({
     recentScope = new AsyncLocalStorage2();
     withRecentWalletHistory = (fn, { accept } = {}) => recentScope.run({ accept }, fn);
     recentLoads = /* @__PURE__ */ new Map();
+    recentAgeStart = (recent) => poolReadAtOf(recent.report) ?? recent.startedAt;
     forgetRecentWalletHistory = () => {
       recentLoads.clear();
       proofBuiltAt = Date.now();
@@ -73847,6 +73936,7 @@ async function runRecoveredP03NoteExit({
         pool: pool2,
         history
       });
+      markPhase("exit-anchor-refreshed");
       timestamp = await readChainTime();
       epoch = BigInt(Math.floor(timestamp / 300));
     }
@@ -73988,6 +74078,7 @@ async function runRecoveredP03NoteExit({
     epoch = BigInt(Math.floor(timestamp / 300));
   }
   await ensureCurrentAnchor();
+  markPhase("exit-anchor-current");
   const buildRecoveryPath = deps.buildRecoveryPath ?? buildFinalizedP03RecoveryPath;
   const prepareFold = deps.buildRecoveryPath === void 0 ? prepareFinalizedP03RecoveryFold : async () => {
   };
@@ -74070,8 +74161,10 @@ async function runRecoveredP03NoteExit({
     store.writeWal(walName2, wal);
   }
   let proved = wal.proved;
+  markPhase("exit-request-built");
   if (!proved) {
     proved = await proveExit(request);
+    markPhase("exit-proved");
     assertProvedExitBinding(proved, request);
     wal = {
       ...wal,
@@ -74099,6 +74192,7 @@ async function runRecoveredP03NoteExit({
     memoBundleHex: proved.output.memoBundleHex,
     recipientTokenAccount: recipient.toBase58()
   }) : await selfBroadcastExit();
+  markPhase(relaySubmit ? "exit-relay-answered" : "exit-sent");
   async function selfBroadcastExit() {
     if (poolState2.replayStore === REPLAY_STORE.indexedTree) return selfBroadcastE1Exit();
     const replayValues = [proved.primary.publicInputBytesHex[3]];
@@ -74195,6 +74289,7 @@ async function runRecoveredP03NoteExit({
   store.writeWal(walName2, wal);
   for (let attempt = 1; ; attempt += 1) {
     history = await walkHistory();
+    markPhase("exit-post-walk");
     poolState2 = await readPool2(connection, pool2, "finalized");
     if (!poolState2 || !poolState2.owner.equals(chainProgramId) || poolState2.version !== 3) {
       throw new Error("finalized note-exit pool postcondition invalid");
@@ -74990,6 +75085,7 @@ var init_shielded_wallet = __esm({
     init_settlement_receipt();
     init_safe_exit();
     init_walletHistory();
+    init_phaseTiming();
     init_chain2();
     init_compressedReplay();
     init_e1Exit();
@@ -108644,7 +108740,7 @@ function balanceLine(a) {
   const pub = usdcText(a.unshieldedAtomic);
   const landing = usdcText(a.landingAtomic);
   if (positive(landing) && !a.refreshError) {
-    const line = `${landing} USDC you added landed and is being counted. Ask again in about 30 seconds.`;
+    const line = `${landing} USDC you added landed and is being counted. It needs no step from you.`;
     return balance !== void 0 && a.refreshing !== true ? `You have ${balance} USDC private; ${line}` : line;
   }
   const arriving = addFundsHeldSay(a.addFunds);
@@ -119278,7 +119374,7 @@ ${canonical5}`;
   const balance = {
     name: "wallet_balance",
     title: "Balance",
-    description: `Use this when the user asks "what is my balance" or "how much USDC do I have": it answers ONE balance (balanceAtomic, what x402_pay can spend) and the public (unshielded) USDC. Pays nothing and signs nothing. balanceAtomic is one number; breakdown names its parts (breakdown.shieldedAtomic is what wallet_unshield can send; privateSendPendingAtomic is the part of a running private send (wallet_unshield with parts or max_delay_minutes) not sent yet, already taken off shieldedAtomic; refundsInFlightAtomic is a Shinjuku refund on its way back; setAsideAtomic (only when not 0) is value an older version of this wallet set aside to pay sellers; during a pool move, pools lists each pool's part and movingAtomic is value on its way from the old pool to the new one; the move field shows the move, poolSwitches each switch). UNSHIELDED (unshieldedAtomic) is the plain public USDC on the wallet's own Solana key (ownAddress), the USDC wallet_shield makes private; unshieldedSolLamports is that key's SOL, information only: wallet_shield needs none (the facilitator's relayer pays every fee and rent). When the local balance is stale (a new deposit, a received payment), it reads the chain by itself first; when that takes longer than about 20 s it answers the last balance with refreshing: true and finishes in the background (call wallet_balance again in 30 s). A balance with refreshing: true and refreshReason is exact (payment_settling: a payment settles and the number counts it; account_join: the wallet joins its own balance parts and the number counts them; pool_move: value from the old pool arrives and the number counts it; first_check: a new wallet's first history check, the number is its own landed deposits). status reading (balanceAtomic null): the first balance read of a wallet that may hold money is not done; call wallet_balance again in 30 s. If the public read fails, unshieldedAtomic is null with unshieldedReason; the rest still answers. ownKeyTokens (only when there are any): the other tokens on ownAddress (not its USDC), each { mint, amountAtomic, decimals, amount }, at most 10 (ownKeyTokensMore counts the rest); a token is its mint, never a name or symbol; wallet_transfer_token with that mint as token_mint sells one and sends the USDC privately. earlierDeposits (only when there are any): USDC found at a one-time deposit address of an earlier pool, each with a notice line to tell the user; the wallet moves it into the current pool by itself. addFunds (only when there are any): each wallet_add_funds address still open, with its state and the USDC known to wait there (heldAtomic; null with heldNote when the address was not checked yet). landingAtomic (only when not 0): USDC you added whose deposit landed on chain and that balanceAtomic does not count yet; this call finishes it and waits about 20 s for it, past that it is being counted: call wallet_balance again in 30 s. session shows the spending limits (null or "none": no limit), what is left, where the limits come from, and how to change them (session.summary). verbose: true adds \`internal\` (accounts, notes, and other engineering numbers); the default answer leaves them out. To add money, use wallet_add_funds. Amounts are atomic units (USDC: 1000000 = 1 USDC); say and usdc give them in USDC.`,
+    description: `Use this when the user asks "what is my balance" or "how much USDC do I have": it answers ONE balance (balanceAtomic, what x402_pay can spend) and the public (unshielded) USDC. Pays nothing and signs nothing. balanceAtomic is one number; breakdown names its parts (breakdown.shieldedAtomic is what wallet_unshield can send; privateSendPendingAtomic is the part of a running private send (wallet_unshield with parts or max_delay_minutes) not sent yet, already taken off shieldedAtomic; refundsInFlightAtomic is a Shinjuku refund on its way back; setAsideAtomic (only when not 0) is value an older version of this wallet set aside to pay sellers; during a pool move, pools lists each pool's part and movingAtomic is value on its way from the old pool to the new one; the move field shows the move, poolSwitches each switch). UNSHIELDED (unshieldedAtomic) is the plain public USDC on the wallet's own Solana key (ownAddress), the USDC wallet_shield makes private; unshieldedSolLamports is that key's SOL, information only: wallet_shield needs none (the facilitator's relayer pays every fee and rent). When the local balance is stale (a new deposit, a received payment), it reads the chain by itself first; when that takes longer than about 20 s it answers the last balance with refreshing: true and finishes in the background (call wallet_balance again in 30 s). A balance with refreshing: true and refreshReason is exact (payment_settling: a payment settles and the number counts it; account_join: the wallet joins its own balance parts and the number counts them; pool_move: value from the old pool arrives and the number counts it; first_check: a new wallet's first history check, the number is its own landed deposits). status reading (balanceAtomic null): the first balance read of a wallet that may hold money is not done; call wallet_balance again in 30 s. If the public read fails, unshieldedAtomic is null with unshieldedReason; the rest still answers. ownKeyTokens (only when there are any): the other tokens on ownAddress (not its USDC), each { mint, amountAtomic, decimals, amount }, at most 10 (ownKeyTokensMore counts the rest); a token is its mint, never a name or symbol; wallet_transfer_token with that mint as token_mint sells one and sends the USDC privately. earlierDeposits (only when there are any): USDC found at a one-time deposit address of an earlier pool, each with a notice line to tell the user; the wallet moves it into the current pool by itself. addFunds (only when there are any): each wallet_add_funds address still open, with its state and the USDC known to wait there (heldAtomic; null with heldNote when the address was not checked yet). landingAtomic (only when not 0): USDC you added whose deposit landed on chain and that balanceAtomic does not count yet; this call finishes it and waits about 20 s for it, past that it is being counted: call wallet_balance again as next says (at once in the same turn when this call waited its 20 s, else in 30 s). session shows the spending limits (null or "none": no limit), what is left, where the limits come from, and how to change them (session.summary). verbose: true adds \`internal\` (accounts, notes, and other engineering numbers); the default answer leaves them out. To add money, use wallet_add_funds. Amounts are atomic units (USDC: 1000000 = 1 USDC); say and usdc give them in USDC.`,
     inputSchema: { type: "object", properties: {
       verbose: { type: "boolean", description: "Optional. true adds `internal`: the engineering numbers (funded accounts, notes, payments without waiting, a 0 set-aside value). Default false." }
     }, additionalProperties: false },
@@ -119479,7 +119575,8 @@ ${canonical5}`;
           if (typeof amount === "bigint" && amount > 0n) landingAtomic += amount;
         }
       }
-      const landedNext = landingAtomic > 0n && !refresh.refreshError ? `${usdcText2(landingAtomic)} USDC you added landed on chain and is being counted (landingAtomic, not in balanceAtomic yet): call wallet_balance again in ${POLL_SECONDS3} s; that call waits up to ${waitSeconds} s for it. Tell the user it needs no step from them` : void 0;
+      const landedWaitedFull = Date.now() - balanceStartedAt >= balanceRefreshWaitMs;
+      const landedNext = landingAtomic > 0n && !refresh.refreshError ? landedWaitedFull ? `${usdcText2(landingAtomic)} USDC you added landed on chain and is being counted (landingAtomic, not in balanceAtomic yet): call wallet_balance again now, in this same turn; that call waits up to ${waitSeconds} s for it. Do not end the turn or ask the user: it needs no step from them` : `${usdcText2(landingAtomic)} USDC you added landed on chain and is being counted (landingAtomic, not in balanceAtomic yet): call wallet_balance again in ${POLL_SECONDS3} s; that call waits up to ${waitSeconds} s for it. Tell the user it needs no step from them` : void 0;
       if (landedNext) next = landedNext;
       const stalled = [...resumeRefusals].map(([requestId, error2]) => `"${requestId}" (${error2})`);
       if (stalled.length && one.breakdown?.privateSendPendingAtomic !== "0") {