shinjuku-shielded 0.3.70 → 0.3.71

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "ae568c800e9c2e6ccaf4cad6958cf133aa07469a93428827e679d3a1be89505f",
-  "bytes": 12197454,
-  "sourceCommit": "dc07c3b2f68a0358fc8137b8ba3773c533856117",
+  "sha256": "61674c4e8c6309ae6c93338211bf57a674837f572e498215300031a65b9aa743",
+  "bytes": 12200396,
+  "sourceCommit": "ec62139d8d55db9f55e17c488d052b6c8248acda",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1282,5 +1282,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-10-22T15:46:57.559Z"
+  "publishedAt": "2026-10-22T16:40:39.055Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.70",
+  "version": "0.3.71",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "ae568c80",
-  "shinjukuSha256": "ae568c800e9c2e6ccaf4cad6958cf133aa07469a93428827e679d3a1be89505f",
+  "shinjukuRelease": "61674c4e",
+  "shinjukuSha256": "61674c4e8c6309ae6c93338211bf57a674837f572e498215300031a65b9aa743",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-mcp#readme",

package/shinjuku-wallet.mjs

@@ -51938,13 +51938,7 @@ function createCompactHistoryCacheStore({ path, hmacKey, now }) {
         accounts: [...state.initialization.accounts],
         data: Buffer.from(state.initialization.data).toString("hex")
       },
-      ...state.attestation ? {
-        attestation: {
-          key: state.attestation.key,
-          newestSignature: state.attestation.newestSignature,
-          coverage: encodeTagged(state.attestation.coverage)
-        }
-      } : {},
+      ...state.attestation ? { attestation: serializeAttestation(state.attestation) } : {},
       // 2026-10-16: the append root after each served record (hex, count 1..n) and the empty
       // tree's root, a fold hint for a new process (compact.mjs hintCompactFold). Optional: an
       // older build reads the file and drops it; a file without it folds as before.
@@ -51986,7 +51980,7 @@ function createCompactHistoryCacheStore({ path, hmacKey, now }) {
     }
   });
 }
-var P03_HISTORY_CACHE_SCHEMA, positionOrNull, encodeTagged, decodeTagged, deserializeAttestation, serializeState, deserializeState, P03_COMPACT_HISTORY_CACHE_SCHEMA;
+var P03_HISTORY_CACHE_SCHEMA, positionOrNull, encodeTagged, decodeTagged, deserializeAttestation, serializeAttestation, serializeState, deserializeState, P03_COMPACT_HISTORY_CACHE_SCHEMA;
 var init_cacheStore = __esm({
   "wallet/src/history/cacheStore.mjs"() {
     "use strict";
@@ -52019,8 +52013,22 @@ var init_cacheStore = __esm({
       if (coverage.complete !== true || typeof coverage.programDataAddress !== "string" || typeof coverage.programDataSha256 !== "string" || typeof coverage.deployedAtSlot !== "bigint" || typeof coverage.throughFinalizedSlot !== "bigint") {
         throw new Error("p03_history_cache_attestation_invalid");
       }
-      return { key: value.key, newestSignature: value.newestSignature, coverage };
+      if (value.newestSignatureSlot !== void 0 && (!Number.isSafeInteger(value.newestSignatureSlot) || value.newestSignatureSlot < 0 || BigInt(value.newestSignatureSlot) > coverage.throughFinalizedSlot)) {
+        throw new Error("p03_history_cache_attestation_invalid");
+      }
+      return {
+        key: value.key,
+        newestSignature: value.newestSignature,
+        ...value.newestSignatureSlot === void 0 ? {} : { newestSignatureSlot: value.newestSignatureSlot },
+        coverage
+      };
     };
+    serializeAttestation = (attestation) => ({
+      key: attestation.key,
+      newestSignature: attestation.newestSignature,
+      ...Number.isSafeInteger(attestation.newestSignatureSlot) ? { newestSignatureSlot: attestation.newestSignatureSlot } : {},
+      coverage: encodeTagged(attestation.coverage)
+    });
     serializeState = (state) => ({
       schema: P03_HISTORY_CACHE_SCHEMA,
       programId: state.programId,
@@ -52028,13 +52036,7 @@ var init_cacheStore = __esm({
       cursor: { ...state.cursor },
       snapshot: { ...state.snapshot },
       transactions: state.transactions.map(serializeTransactionEntry),
-      ...state.attestation ? {
-        attestation: {
-          key: state.attestation.key,
-          newestSignature: state.attestation.newestSignature,
-          coverage: encodeTagged(state.attestation.coverage)
-        }
-      } : {}
+      ...state.attestation ? { attestation: serializeAttestation(state.attestation) } : {}
     });
     deserializeState = (value) => {
       if (!value || value.schema !== P03_HISTORY_CACHE_SCHEMA || typeof value.programId !== "string" || typeof value.pool !== "string" || !value.cursor || typeof value.cursor.lastPoolSignature !== "string" || !Number.isSafeInteger(value.cursor.lastSlot) || !value.snapshot || !Number.isSafeInteger(value.snapshot.slot) || typeof value.snapshot.terminal !== "boolean" || typeof value.snapshot.currentIndex !== "string" || typeof value.snapshot.currentRoot !== "string" || !Array.isArray(value.transactions)) {
@@ -54061,7 +54063,8 @@ function slicedSnapshot(result, program, pool2, tree, programData) {
       owner: value.owner,
       executable: value.executable,
       data,
-      newestSignature: newest.signature
+      newestSignature: newest.signature,
+      newestSignatureSlot: newest.slot
     })
   }));
 }
@@ -54326,12 +54329,21 @@ async function programDataCoverageFor(args) {
   let priorRefused = false;
   let cause;
   const key = coverageKey({ program, initialization, deploymentIdentity });
+  if (key !== void 0 && prior?.key === key && typeof prior.newestSignature === "string" && Number.isSafeInteger(prior.newestSignatureSlot) && typeof prior.coverage?.throughFinalizedSlot === "bigint" && BigInt(prior.newestSignatureSlot) <= BigInt(snapshotSlot) && prior.coverage.throughFinalizedSlot > BigInt(snapshotSlot)) {
+    markPhase("attest-reuse-older-snapshot");
+    return { coverage: Object.freeze({ ...prior.coverage, throughFinalizedSlot: BigInt(snapshotSlot) }), attestation: prior, reused: true };
+  }
   if (key !== void 0 && prior?.key === key && typeof prior.newestSignature === "string" && prior.coverage?.throughFinalizedSlot <= BigInt(snapshotSlot)) {
     const address5 = new import_web396.PublicKey(prior.coverage.programDataAddress);
     const deployedAtSlot = BigInt(prior.coverage.deployedAtSlot);
-    const reuse = (signature2) => {
+    const reuse = (signature2, signatureSlot) => {
       const coverage = Object.freeze({ ...prior.coverage, throughFinalizedSlot: BigInt(snapshotSlot) });
-      return { coverage, attestation: { key, newestSignature: signature2, coverage }, reused: true };
+      return { coverage, attestation: {
+        key,
+        newestSignature: signature2,
+        ...Number.isSafeInteger(signatureSlot) && signatureSlot <= snapshotSlot ? { newestSignatureSlot: signatureSlot } : {},
+        coverage
+      }, reused: true };
     };
     const pooled = reuseAnswer !== void 0 && reuseAnswer.slot === snapshotSlot && reuseAnswer.address === address5.toBase58() ? reuseAnswer : void 0;
     if (pooled !== void 0) {
@@ -54339,7 +54351,7 @@ async function programDataCoverageFor(args) {
         assertProgramDataHeader(pooled.slot, pooled, { snapshotSlot, deployedAtSlot });
         if (pooled.newestSignature === prior.newestSignature) {
           markPhase("attest-reuse-in-pool-read");
-          return reuse(pooled.newestSignature);
+          return reuse(pooled.newestSignature, pooled.newestSignatureSlot);
         }
         cause = "programdata_newest_signature_changed";
       } catch (error) {
@@ -54357,7 +54369,7 @@ async function programDataCoverageFor(args) {
             }),
             newestSignature(reuseConnection, address5, snapshotSlot)
           ]);
-          if (newest.signature === prior.newestSignature) return reuse(newest.signature);
+          if (newest.signature === prior.newestSignature) return reuse(newest.signature, newest.slot);
           cause = "programdata_newest_signature_changed";
           break;
         } catch (error) {
@@ -54403,7 +54415,7 @@ async function programDataCoverageFor(args) {
     const newest = await newestSignature(connection, new import_web396.PublicKey(coverage.programDataAddress), snapshotSlot);
     return {
       coverage,
-      attestation: key !== void 0 && newest.slot <= snapshotSlot ? { key, newestSignature: newest.signature, coverage } : void 0,
+      attestation: key !== void 0 && newest.slot <= snapshotSlot ? { key, newestSignature: newest.signature, newestSignatureSlot: newest.slot, coverage } : void 0,
       reused: false
     };
   })();
@@ -57429,7 +57441,7 @@ function withBoundedOwnReads(connection) {
       if (typeof value !== "function") return value;
       if (BOUNDED_OWN_METHODS.has(property)) return (...args) => boundedOwnRead(() => value.apply(target, args));
       if (property === "_rpcRequest") {
-        return (...args) => args[0] === P03_POOL_SLICES_METHOD ? boundedOwnRead(() => value.apply(target, args)) : value.apply(target, args);
+        return (...args) => args[0] === P03_POOL_SLICES_METHOD ? boundedOwnRead((stalled) => hedgedOwnPoolSlicesRead(target, args[1], { stalled })) : value.apply(target, args);
       }
       return value.bind(target);
     }
@@ -57556,15 +57568,40 @@ async function ownTransaction(own, signature2) {
 }
 async function hedgedOwnTransactionRead(own, signature2, { stalled, hedge = inTorRun, afterMs = SPOT_HEDGE_AFTER_MS } = {}) {
   const params = [signature2, { commitment: "finalized", maxSupportedTransactionVersion: 1, encoding: "base64" }];
-  if (typeof own.abortableRpcRequest !== "function") return own._rpcRequest("getTransaction", params);
-  const id = `spot-${spotReadId += 1}`;
+  return hedgedOwnRead(own, "getTransaction", params, {
+    stalled,
+    hedge,
+    afterMs,
+    id: `spot-${spotReadId += 1}`,
+    lane: SPOT_HEDGE_LANE,
+    mark: "spot-hedge",
+    passes: (response) => {
+      checkedOwnTransaction(response, signature2);
+    }
+  });
+}
+function hedgedOwnPoolSlicesRead(own, params, { stalled, hedge = inTorRun, afterMs = POOL_HEDGE_AFTER_MS } = {}) {
+  return hedgedOwnRead(own, P03_POOL_SLICES_METHOD, params, {
+    stalled,
+    hedge,
+    afterMs,
+    id: `pool-${poolReadId += 1}`,
+    lane: POOL_HEDGE_LANE,
+    mark: "pool-hedge",
+    passes: (response) => {
+      if (response === null || typeof response !== "object" || !("result" in response || "error" in response)) throw new Error("no answer");
+    }
+  });
+}
+async function hedgedOwnRead(own, method, params, { stalled, hedge, afterMs, id, lane: hedgeLane, mark, passes: check }) {
+  if (typeof own.abortableRpcRequest !== "function") return own._rpcRequest(method, params);
   const copies = [];
   const send3 = (lane) => {
     const controller = new AbortController();
     const signal = stalled === void 0 ? controller.signal : AbortSignal.any([stalled, controller.signal]);
     const copy = { controller, lane, outcome: void 0 };
     copy.read = own.abortableRpcRequest(
-      "getTransaction",
+      method,
       params,
       signal,
       void 0,
@@ -57591,14 +57628,14 @@ async function hedgedOwnTransactionRead(own, signature2, { stalled, hedge = inTo
     const follow = (copy, which) => copy.read.then((response) => {
       let passes = false;
       try {
-        checkedOwnTransaction(response, signature2);
+        check(response);
         passes = true;
       } catch {
         passes = false;
       }
       copy.outcome = { response, passes };
       if (passes && !done) {
-        if (copies.length > 1) markPhase(`spot-hedge-won-${which}`);
+        if (copies.length > 1) markPhase(`${mark}-won-${which}`);
         finish(() => resolve38(response));
         return;
       }
@@ -57615,8 +57652,8 @@ async function hedgedOwnTransactionRead(own, signature2, { stalled, hedge = inTo
       clearTimeout(timer);
       timer = void 0;
       if (done || copies.length > 1) return;
-      markPhase("spot-hedge-sent");
-      follow(send3(SPOT_HEDGE_LANE), "hedge");
+      markPhase(`${mark}-sent`);
+      follow(send3(hedgeLane), "hedge");
     };
     follow(send3(void 0), "first");
     timer = hedging ? setTimeout(sendHedge, afterMs) : void 0;
@@ -58269,7 +58306,7 @@ async function tryCompactP03HistoryReport(options) {
     return { ok: false, reason, ...detail ? { detail } : {}, error };
   }
 }
-var import_web397, P03_COMPACT_HISTORY_SOURCE_MODEL, P03_COMPACT_PAGE, P03_COMPACT_SPOT_CHECKS, FIELD_MODULUS5, SUBTREE_LEAVES3, LOCAL_DEPTH2, OUTER_DEPTH2, PRIMARY_PROOF_BYTES2, FIELD_BYTES3, ED25519_SPKI_PREFIX2, VERSION_1_PREFIX2, HEX64, BASE58, REPLAY_STORE_INDEXED2, PROFILES2, MOVE_HEAD_BYTES2, MOVE_INSERTED_VALUES2, refuse3, hash4, bitAt, zeroRootsMemo, lastFolds, PRE_FOLD_SLICE_MS, preFolds, hex64, droppedPools, verifyQuietMs, VERIFY_SLICE_MS, VERIFY_POLL_MS, verifying, unrefTurn, isSignature, isIndex, IMPORT_KEYS, IMPORT_MAX_VALUES, LIST_ATTEMPTS, pageZeroInFlight, OWN_READ_TIMEOUT_MS, BOUNDED_OWN_METHODS, SPOT_HEDGE_AFTER_MS, SPOT_HEDGE_LANE, spotReadId, compactReportsRunning, compactHistoryReadsRunning;
+var import_web397, P03_COMPACT_HISTORY_SOURCE_MODEL, P03_COMPACT_PAGE, P03_COMPACT_SPOT_CHECKS, FIELD_MODULUS5, SUBTREE_LEAVES3, LOCAL_DEPTH2, OUTER_DEPTH2, PRIMARY_PROOF_BYTES2, FIELD_BYTES3, ED25519_SPKI_PREFIX2, VERSION_1_PREFIX2, HEX64, BASE58, REPLAY_STORE_INDEXED2, PROFILES2, MOVE_HEAD_BYTES2, MOVE_INSERTED_VALUES2, refuse3, hash4, bitAt, zeroRootsMemo, lastFolds, PRE_FOLD_SLICE_MS, preFolds, hex64, droppedPools, verifyQuietMs, VERIFY_SLICE_MS, VERIFY_POLL_MS, verifying, unrefTurn, isSignature, isIndex, IMPORT_KEYS, IMPORT_MAX_VALUES, LIST_ATTEMPTS, pageZeroInFlight, OWN_READ_TIMEOUT_MS, BOUNDED_OWN_METHODS, SPOT_HEDGE_AFTER_MS, SPOT_HEDGE_LANE, spotReadId, POOL_HEDGE_AFTER_MS, POOL_HEDGE_LANE, poolReadId, compactReportsRunning, compactHistoryReadsRunning;
 var init_compact = __esm({
   "wallet/src/history/compact.mjs"() {
     "use strict";
@@ -58405,6 +58442,9 @@ var init_compact = __esm({
     SPOT_HEDGE_AFTER_MS = 4e3;
     SPOT_HEDGE_LANE = "spot-hedge";
     spotReadId = 0;
+    POOL_HEDGE_AFTER_MS = 5e3;
+    POOL_HEDGE_LANE = "pool-hedge";
+    poolReadId = 0;
     compactReportsRunning = 0;
     compactHistoryReadsRunning = () => compactReportsRunning;
   }
@@ -73896,6 +73936,7 @@ async function runRecoveredP03NoteExit({
         pool: pool2,
         history
       });
+      markPhase("exit-anchor-refreshed");
       timestamp = await readChainTime();
       epoch = BigInt(Math.floor(timestamp / 300));
     }
@@ -74037,6 +74078,7 @@ async function runRecoveredP03NoteExit({
     epoch = BigInt(Math.floor(timestamp / 300));
   }
   await ensureCurrentAnchor();
+  markPhase("exit-anchor-current");
   const buildRecoveryPath = deps.buildRecoveryPath ?? buildFinalizedP03RecoveryPath;
   const prepareFold = deps.buildRecoveryPath === void 0 ? prepareFinalizedP03RecoveryFold : async () => {
   };
@@ -74119,8 +74161,10 @@ async function runRecoveredP03NoteExit({
     store.writeWal(walName2, wal);
   }
   let proved = wal.proved;
+  markPhase("exit-request-built");
   if (!proved) {
     proved = await proveExit(request);
+    markPhase("exit-proved");
     assertProvedExitBinding(proved, request);
     wal = {
       ...wal,
@@ -74148,6 +74192,7 @@ async function runRecoveredP03NoteExit({
     memoBundleHex: proved.output.memoBundleHex,
     recipientTokenAccount: recipient.toBase58()
   }) : await selfBroadcastExit();
+  markPhase(relaySubmit ? "exit-relay-answered" : "exit-sent");
   async function selfBroadcastExit() {
     if (poolState2.replayStore === REPLAY_STORE.indexedTree) return selfBroadcastE1Exit();
     const replayValues = [proved.primary.publicInputBytesHex[3]];
@@ -74244,6 +74289,7 @@ async function runRecoveredP03NoteExit({
   store.writeWal(walName2, wal);
   for (let attempt = 1; ; attempt += 1) {
     history = await walkHistory();
+    markPhase("exit-post-walk");
     poolState2 = await readPool2(connection, pool2, "finalized");
     if (!poolState2 || !poolState2.owner.equals(chainProgramId) || poolState2.version !== 3) {
       throw new Error("finalized note-exit pool postcondition invalid");
@@ -75039,6 +75085,7 @@ var init_shielded_wallet = __esm({
     init_settlement_receipt();
     init_safe_exit();
     init_walletHistory();
+    init_phaseTiming();
     init_chain2();
     init_compressedReplay();
     init_e1Exit();
@@ -108693,7 +108740,7 @@ function balanceLine(a) {
   const pub = usdcText(a.unshieldedAtomic);
   const landing = usdcText(a.landingAtomic);
   if (positive(landing) && !a.refreshError) {
-    const line = `${landing} USDC you added landed and is being counted. Ask again in about 30 seconds.`;
+    const line = `${landing} USDC you added landed and is being counted. It needs no step from you.`;
     return balance !== void 0 && a.refreshing !== true ? `You have ${balance} USDC private; ${line}` : line;
   }
   const arriving = addFundsHeldSay(a.addFunds);
@@ -119327,7 +119374,7 @@ ${canonical5}`;
   const balance = {
     name: "wallet_balance",
     title: "Balance",
-    description: `Use this when the user asks "what is my balance" or "how much USDC do I have": it answers ONE balance (balanceAtomic, what x402_pay can spend) and the public (unshielded) USDC. Pays nothing and signs nothing. balanceAtomic is one number; breakdown names its parts (breakdown.shieldedAtomic is what wallet_unshield can send; privateSendPendingAtomic is the part of a running private send (wallet_unshield with parts or max_delay_minutes) not sent yet, already taken off shieldedAtomic; refundsInFlightAtomic is a Shinjuku refund on its way back; setAsideAtomic (only when not 0) is value an older version of this wallet set aside to pay sellers; during a pool move, pools lists each pool's part and movingAtomic is value on its way from the old pool to the new one; the move field shows the move, poolSwitches each switch). UNSHIELDED (unshieldedAtomic) is the plain public USDC on the wallet's own Solana key (ownAddress), the USDC wallet_shield makes private; unshieldedSolLamports is that key's SOL, information only: wallet_shield needs none (the facilitator's relayer pays every fee and rent). When the local balance is stale (a new deposit, a received payment), it reads the chain by itself first; when that takes longer than about 20 s it answers the last balance with refreshing: true and finishes in the background (call wallet_balance again in 30 s). A balance with refreshing: true and refreshReason is exact (payment_settling: a payment settles and the number counts it; account_join: the wallet joins its own balance parts and the number counts them; pool_move: value from the old pool arrives and the number counts it; first_check: a new wallet's first history check, the number is its own landed deposits). status reading (balanceAtomic null): the first balance read of a wallet that may hold money is not done; call wallet_balance again in 30 s. If the public read fails, unshieldedAtomic is null with unshieldedReason; the rest still answers. ownKeyTokens (only when there are any): the other tokens on ownAddress (not its USDC), each { mint, amountAtomic, decimals, amount }, at most 10 (ownKeyTokensMore counts the rest); a token is its mint, never a name or symbol; wallet_transfer_token with that mint as token_mint sells one and sends the USDC privately. earlierDeposits (only when there are any): USDC found at a one-time deposit address of an earlier pool, each with a notice line to tell the user; the wallet moves it into the current pool by itself. addFunds (only when there are any): each wallet_add_funds address still open, with its state and the USDC known to wait there (heldAtomic; null with heldNote when the address was not checked yet). landingAtomic (only when not 0): USDC you added whose deposit landed on chain and that balanceAtomic does not count yet; this call finishes it and waits about 20 s for it, past that it is being counted: call wallet_balance again in 30 s. session shows the spending limits (null or "none": no limit), what is left, where the limits come from, and how to change them (session.summary). verbose: true adds \`internal\` (accounts, notes, and other engineering numbers); the default answer leaves them out. To add money, use wallet_add_funds. Amounts are atomic units (USDC: 1000000 = 1 USDC); say and usdc give them in USDC.`,
+    description: `Use this when the user asks "what is my balance" or "how much USDC do I have": it answers ONE balance (balanceAtomic, what x402_pay can spend) and the public (unshielded) USDC. Pays nothing and signs nothing. balanceAtomic is one number; breakdown names its parts (breakdown.shieldedAtomic is what wallet_unshield can send; privateSendPendingAtomic is the part of a running private send (wallet_unshield with parts or max_delay_minutes) not sent yet, already taken off shieldedAtomic; refundsInFlightAtomic is a Shinjuku refund on its way back; setAsideAtomic (only when not 0) is value an older version of this wallet set aside to pay sellers; during a pool move, pools lists each pool's part and movingAtomic is value on its way from the old pool to the new one; the move field shows the move, poolSwitches each switch). UNSHIELDED (unshieldedAtomic) is the plain public USDC on the wallet's own Solana key (ownAddress), the USDC wallet_shield makes private; unshieldedSolLamports is that key's SOL, information only: wallet_shield needs none (the facilitator's relayer pays every fee and rent). When the local balance is stale (a new deposit, a received payment), it reads the chain by itself first; when that takes longer than about 20 s it answers the last balance with refreshing: true and finishes in the background (call wallet_balance again in 30 s). A balance with refreshing: true and refreshReason is exact (payment_settling: a payment settles and the number counts it; account_join: the wallet joins its own balance parts and the number counts them; pool_move: value from the old pool arrives and the number counts it; first_check: a new wallet's first history check, the number is its own landed deposits). status reading (balanceAtomic null): the first balance read of a wallet that may hold money is not done; call wallet_balance again in 30 s. If the public read fails, unshieldedAtomic is null with unshieldedReason; the rest still answers. ownKeyTokens (only when there are any): the other tokens on ownAddress (not its USDC), each { mint, amountAtomic, decimals, amount }, at most 10 (ownKeyTokensMore counts the rest); a token is its mint, never a name or symbol; wallet_transfer_token with that mint as token_mint sells one and sends the USDC privately. earlierDeposits (only when there are any): USDC found at a one-time deposit address of an earlier pool, each with a notice line to tell the user; the wallet moves it into the current pool by itself. addFunds (only when there are any): each wallet_add_funds address still open, with its state and the USDC known to wait there (heldAtomic; null with heldNote when the address was not checked yet). landingAtomic (only when not 0): USDC you added whose deposit landed on chain and that balanceAtomic does not count yet; this call finishes it and waits about 20 s for it, past that it is being counted: call wallet_balance again as next says (at once in the same turn when this call waited its 20 s, else in 30 s). session shows the spending limits (null or "none": no limit), what is left, where the limits come from, and how to change them (session.summary). verbose: true adds \`internal\` (accounts, notes, and other engineering numbers); the default answer leaves them out. To add money, use wallet_add_funds. Amounts are atomic units (USDC: 1000000 = 1 USDC); say and usdc give them in USDC.`,
     inputSchema: { type: "object", properties: {
       verbose: { type: "boolean", description: "Optional. true adds `internal`: the engineering numbers (funded accounts, notes, payments without waiting, a 0 set-aside value). Default false." }
     }, additionalProperties: false },
@@ -119528,7 +119575,8 @@ ${canonical5}`;
           if (typeof amount === "bigint" && amount > 0n) landingAtomic += amount;
         }
       }
-      const landedNext = landingAtomic > 0n && !refresh.refreshError ? `${usdcText2(landingAtomic)} USDC you added landed on chain and is being counted (landingAtomic, not in balanceAtomic yet): call wallet_balance again in ${POLL_SECONDS3} s; that call waits up to ${waitSeconds} s for it. Tell the user it needs no step from them` : void 0;
+      const landedWaitedFull = Date.now() - balanceStartedAt >= balanceRefreshWaitMs;
+      const landedNext = landingAtomic > 0n && !refresh.refreshError ? landedWaitedFull ? `${usdcText2(landingAtomic)} USDC you added landed on chain and is being counted (landingAtomic, not in balanceAtomic yet): call wallet_balance again now, in this same turn; that call waits up to ${waitSeconds} s for it. Do not end the turn or ask the user: it needs no step from them` : `${usdcText2(landingAtomic)} USDC you added landed on chain and is being counted (landingAtomic, not in balanceAtomic yet): call wallet_balance again in ${POLL_SECONDS3} s; that call waits up to ${waitSeconds} s for it. Tell the user it needs no step from them` : void 0;
       if (landedNext) next = landedNext;
       const stalled = [...resumeRefusals].map(([requestId, error2]) => `"${requestId}" (${error2})`);
       if (stalled.length && one.breakdown?.privateSendPendingAtomic !== "0") {