shinjuku-shielded 0.3.72 → 0.3.74

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "07990722e8c34815b7af576fe293f456c602895b74cbe6f75d5ea3d8b5a1d578",
-  "bytes": 12201104,
-  "sourceCommit": "1fbac7a5425ed727041cc29b69fd7b31e8fba117",
+  "sha256": "bf5ad0c16095110ed0258b16525e55dc743dbaa36b6ba0e0738d4ab9c185ce90",
+  "bytes": 12226842,
+  "sourceCommit": "48cab6600f17f6d97cd27fcb657eaf344c1257ef",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1282,5 +1282,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-10-22T17:29:13.245Z"
+  "publishedAt": "2026-10-22T19:31:45.493Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.72",
+  "version": "0.3.74",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "07990722",
-  "shinjukuSha256": "07990722e8c34815b7af576fe293f456c602895b74cbe6f75d5ea3d8b5a1d578",
+  "shinjukuRelease": "bf5ad0c1",
+  "shinjukuSha256": "bf5ad0c16095110ed0258b16525e55dc743dbaa36b6ba0e0738d4ab9c185ce90",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-mcp#readme",

package/shinjuku-wallet.mjs

@@ -42600,6 +42600,11 @@ var init_rpcDefault = __esm({
 });
 
 // wallet/src/net/facilitatorOnion.mjs
+function takeSiteOnionRaces() {
+  if (siteRacesTaken) return Promise.resolve([]);
+  siteRacesTaken = true;
+  return Promise.all(siteRaces);
+}
 function onionInit(init = {}) {
   if (init.dispatcher) return init;
   try {
@@ -42637,7 +42642,8 @@ function raceOnions(onions, {
   onNone,
   spares = [],
   spareAfterMs = SPARE_AFTER_MS,
-  onSpares
+  onSpares,
+  onProbe
 } = {}) {
   const controller = new AbortController();
   const signal = AbortSignal.any([controller.signal, AbortSignal.timeout(timeoutMs)]);
@@ -42667,9 +42673,22 @@ function raceOnions(onions, {
       if (!controller.signal.aborted) onNone?.();
       settle(onions[0]);
     };
+    const told = (onion, event) => {
+      try {
+        onProbe?.(onion, event);
+      } catch {
+      }
+    };
     const start = (onion) => {
       open3 += 1;
-      probe(onion).then(settle, failed);
+      told(onion, "start");
+      probe(onion).then((won) => {
+        told(onion, "answered");
+        settle(won);
+      }, () => {
+        told(onion, controller.signal.aborted ? "stopped" : signal.aborted ? "timeout" : "failed");
+        failed();
+      });
     };
     startSpares = (cause) => {
       if (sparesStarted || done || signal.aborted) return;
@@ -42790,6 +42809,33 @@ async function routeFacilitatorsOverOnion(argv2, {
   const race = (group, onions, options) => {
     let unanswered2 = false;
     const onNone = options.onNone;
+    const first = firstRaces.has(group.label) ? void 0 : { startedAt: Date.now() };
+    if (first) firstRaces.set(group.label, first);
+    let site;
+    let ended;
+    if (first && !group.path) {
+      site = { startedAt: first.startedAt, probes: [] };
+      siteRaces.push(new Promise((resolve38) => {
+        ended = resolve38;
+      }));
+      const pinned = group.onions.length - (group.spares?.length ?? 0);
+      const role = (onion) => {
+        const index = group.onions.indexOf(onion);
+        return index < pinned ? `pinned${index + 1}` : `spare${index - pinned + 1}`;
+      };
+      const note = (entry) => {
+        if (site.endedAt === void 0) site.probes.push({ ...entry, at: Date.now() });
+      };
+      const onSpares = options.onSpares;
+      options = {
+        ...options,
+        onProbe: (onion, event) => note({ role: role(onion), event }),
+        ...onSpares ? { onSpares: (info) => {
+          note({ role: "spares", event: "join" });
+          onSpares(info);
+        } } : {}
+      };
+    }
     const raced = raceOnions(onions, {
       fetchImpl,
       timeoutMs: raceTimeoutMs,
@@ -42800,10 +42846,18 @@ async function routeFacilitatorsOverOnion(argv2, {
         onNone?.();
       }
     });
-    const first = firstRaces.has(group.label) ? void 0 : { startedAt: Date.now() };
-    if (first) firstRaces.set(group.label, first);
     group.pending = raced.winner.then((onion) => {
       if (first) Object.assign(first, { endedAt: Date.now(), answered: !unanswered2 });
+      if (site) {
+        const open3 = /* @__PURE__ */ new Set();
+        for (const probe of site.probes) {
+          if (probe.event === "start") open3.add(probe.role);
+          else open3.delete(probe.role);
+        }
+        for (const role of open3) site.probes.push({ role, event: "stopped", at: first.endedAt });
+        Object.assign(site, { endedAt: first.endedAt, answered: !unanswered2 });
+        ended(site);
+      }
       group.winner = onion;
       group.pending = void 0;
       if (!unanswered2 && !raced.stopped) err(`tor: the onion ${hostOf(onion)} of ${group.label} answered first; it serves this run's requests to it
@@ -42904,18 +42958,18 @@ async function routeFacilitatorsOverOnion(argv2, {
     }
   };
 }
-var SITE_ONIONS, SITE_SPARE_ONIONS, PINNED_FACILITATOR_ONIONS, PINNED_SPARE_ONIONS, HISTORY_ONIONS, PINNED_HISTORY_ONIONS, HISTORY_PROBE_PATH, FACILITATOR_FLAGS, V3_ONION, DISCOVERY_TIMEOUT_MS, WARM_TIMEOUT_MS, RACE_TIMEOUT_MS, ROUTE_WAIT_MS, SPARE_AFTER_MS, SPARE_CAUSE, routedGroups, liveOnions, hostOf, noAnswer, routedOnions, routedOrigins, onionsOfOrigin, routesOverOnion, firstRaces, firstOnionRace, GLOBAL_DISPATCHER, onionDispatchers;
+var SITE_ONIONS, SITE_SPARE_ONIONS, PINNED_FACILITATOR_ONIONS, PINNED_SPARE_ONIONS, HISTORY_ONIONS, PINNED_HISTORY_ONIONS, HISTORY_PROBE_PATH, FACILITATOR_FLAGS, V3_ONION, DISCOVERY_TIMEOUT_MS, WARM_TIMEOUT_MS, RACE_TIMEOUT_MS, ROUTE_WAIT_MS, SPARE_AFTER_MS, SPARE_CAUSE, routedGroups, liveOnions, hostOf, noAnswer, routedOnions, routedOrigins, onionsOfOrigin, routesOverOnion, firstRaces, siteRaces, siteRacesTaken, firstOnionRace, GLOBAL_DISPATCHER, onionDispatchers;
 var init_facilitatorOnion = __esm({
   "wallet/src/net/facilitatorOnion.mjs"() {
     "use strict";
     init_rpcDefault();
     SITE_ONIONS = Object.freeze([
       "http://2kfhlfuyuwvhmibjrpxqsg4nrbcxasjgjq7kmnfzgfwzptkhhznz3dad.onion",
-      "http://chhgw7nfggqhhjawz54bpsiihdow66s2yvkh6ccnugpcdmhhww6xkkqd.onion"
+      "http://vofhhl336r4bnwn7hid2uvqaa72wx66xkdu2yt4n54xljsxwn2yds6qd.onion"
     ]);
     SITE_SPARE_ONIONS = Object.freeze([
       "http://ntr5qkdfgff4gspwderjnqtkzekyhb5a4j76ov4dqncxmcb53gdsmmid.onion",
-      "http://vofhhl336r4bnwn7hid2uvqaa72wx66xkdu2yt4n54xljsxwn2yds6qd.onion"
+      "http://chhgw7nfggqhhjawz54bpsiihdow66s2yvkh6ccnugpcdmhhww6xkkqd.onion"
     ]);
     PINNED_FACILITATOR_ONIONS = Object.freeze({
       "https://shinjukustaition.com": SITE_ONIONS,
@@ -42955,6 +43009,8 @@ var init_facilitatorOnion = __esm({
     onionsOfOrigin = (origin) => routedOrigins.get(origin) ?? PINNED_FACILITATOR_ONIONS[origin] ?? [];
     routesOverOnion = (origin) => routedOrigins.has(origin);
     firstRaces = /* @__PURE__ */ new Map();
+    siteRaces = [];
+    siteRacesTaken = false;
     firstOnionRace = (origin) => {
       const race = firstRaces.get(origin);
       return race === void 0 ? void 0 : { ...race };
@@ -46739,6 +46795,16 @@ function markPhase(phase, outcome) {
   } catch {
   }
 }
+function poolReadOutcome(slot3, moved) {
+  let text3;
+  try {
+    text3 = BigInt(slot3).toString();
+  } catch {
+    return void 0;
+  }
+  if (!/^\d{1,20}$/.test(text3)) return void 0;
+  return `slot${text3}${Number.isSafeInteger(moved) && moved >= 0 ? `_moved${moved}` : ""}`;
+}
 var scope, phaseScopeActive;
 var init_phaseTiming = __esm({
   "wallet/src/pay/phaseTiming.mjs"() {
@@ -53881,7 +53947,7 @@ async function refreshedFromSnapshot({ connection, program, poolKey, authenticat
   if (snapshot.terminal !== authenticated.finalizedPoolSnapshot.terminal || snapshot.currentIndex !== authenticated.finalizedPoolSnapshot.currentIndex || snapshot.currentRoot !== authenticated.finalizedPoolSnapshot.currentRoot || !sameP03PoolPolicy(snapshot, authenticated.finalizedPoolSnapshot.policy) || !sameE1TreeHeader(snapshot, authenticated.finalizedPoolSnapshot.e1Tree, program, poolKey) || paymentSettler !== void 0 && snapshot.paymentSettler?.toBase58() !== paymentSettler) {
     throw Object.assign(
       new Error("p03_history_refresh_transition_detected"),
-      { currentIndex: snapshot.currentIndex, snapshotBinding: { programId: b58(program), pool: poolKey.toBase58() } }
+      { currentIndex: snapshot.currentIndex, snapshotSlot: snapshot.slot, snapshotBinding: { programId: b58(program), pool: poolKey.toBase58() } }
     );
   }
   const priorCoverage = authenticated.deploymentCoverage;
@@ -54131,7 +54197,8 @@ async function readFinalizedPoolSliced(connection, program, pool2) {
   } catch {
     snapshot = void 0;
   }
-  markPhase(snapshot === void 0 ? "pool-sliced-fallback-answer" : "pool-sliced");
+  if (snapshot === void 0) markPhase("pool-sliced-fallback-answer");
+  else markPhase("pool-sliced", poolReadOutcome(snapshot.slot));
   return snapshot;
 }
 async function readFinalizedPoolForRefresh(connection, program, pool2) {
@@ -57150,6 +57217,16 @@ function rewriteFoldRoots(pool2, cache, next) {
   })().catch(() => {
   });
 }
+function dropCompactCacheRecords(pool2, cache) {
+  if (cache === void 0 || cache === null) return Promise.resolve();
+  return (async () => {
+    const current = await cache.load();
+    if (!current || current.pool !== pool2) return;
+    const { foldRoots, savedAt, served, ...rest } = current;
+    await cache.save({ ...rest, served: servedWithoutRecords(served) }, { savedAt });
+  })().catch(() => {
+  });
+}
 function markFoldRootsVerified(pool2, cache) {
   rewriteFoldRoots(pool2, cache, (foldRoots) => {
     const hashed = lastFolds.get(pool2);
@@ -57224,12 +57301,12 @@ function canonicalAddress(value, label) {
   }
   throw refuse3("p03_compact_history_record_invalid");
 }
-function validateImport(raw, from) {
+function validateImport(raw, from, size = P03_COMPACT_PAGE) {
   const invalid5 = () => refuse3("p03_compact_history_source_answer_invalid");
   if (raw === null || typeof raw !== "object" || Array.isArray(raw) || Object.keys(raw).sort().join(",") !== IMPORT_KEYS.join(",")) throw invalid5();
   const { afterOrdinal, record, values, signature: signature2, slot: slot3, transactionIndex, instructionIndex } = raw;
   if (!isIndex(afterOrdinal) || !isSignature(signature2) || !isIndex(slot3) || !isIndex(transactionIndex) || !isIndex(instructionIndex)) throw invalid5();
-  if (from !== void 0 && !(afterOrdinal > from && afterOrdinal <= from + P03_COMPACT_PAGE || from === 0 && afterOrdinal === 0)) {
+  if (from !== void 0 && !(afterOrdinal > from && afterOrdinal <= from + size || from === 0 && afterOrdinal === 0)) {
     throw invalid5();
   }
   if (!Array.isArray(values) || values.length > IMPORT_MAX_VALUES) throw invalid5();
@@ -57509,8 +57586,70 @@ function requestCompactFirstPage({ history, pool: pool2, signal }) {
     return Promise.resolve({ error });
   }
 }
-function pageShapeValid(result, pool2, from) {
-  return Boolean(result) && typeof result === "object" && result.pool === pool2 && result.fromOrdinal === from && isIndex(result.total) && isIndex(result.syncedSlot) && Array.isArray(result.records) && result.records.length === Math.max(0, Math.min(result.total, from + P03_COMPACT_PAGE) - from) && Boolean(result.initialization) && isSignature(result.initialization.signature) && isIndex(result.initialization.slot);
+function pageShapeValid(result, pool2, from, size = P03_COMPACT_PAGE) {
+  return Boolean(result) && typeof result === "object" && result.pool === pool2 && result.fromOrdinal === from && isIndex(result.total) && isIndex(result.syncedSlot) && Array.isArray(result.records) && result.records.length === Math.max(0, Math.min(result.total, from + size) - from) && Boolean(result.initialization) && isSignature(result.initialization.signature) && isIndex(result.initialization.slot);
+}
+function requestTailPage(history, pool2, from, grid) {
+  return Promise.resolve().then(() => history._rpcRequest("getP03Transitions", [pool2, { commitment: "finalized", fromOrdinal: from, toOrdinal: from + grid }])).then((response) => ({ response }), (error) => ({ error }));
+}
+function requestCompactTailPage({ history, pool: pool2, currentIndex }) {
+  try {
+    const count2 = Number(BigInt(currentIndex) / SUBTREE_LEAVES3);
+    if (!Number.isSafeInteger(count2) || count2 === 0) return Promise.resolve({ error: new Error("no records") });
+    const source = typeof history === "string" ? connect2(history, "finalized", { timeoutMs: HISTORY_RPC_REQUEST_TIMEOUT_MS }) : history;
+    if (!source || typeof source._rpcRequest !== "function") return Promise.resolve({ error: refuse3("p03_compact_history_connection_invalid") });
+    return requestTailPage(source, new import_web397.PublicKey(pool2).toBase58(), tailFrom(count2, P03_COMPACT_TAIL_GRID), P03_COMPACT_TAIL_GRID);
+  } catch (error) {
+    return Promise.resolve({ error });
+  }
+}
+function combineCompactTail(prefix, answer, { pool: pool2, from, count: count2, grid }) {
+  if (answer.error !== void 0) return { miss: "fetch-failed" };
+  const { response } = answer;
+  if (response === null || typeof response !== "object" || "error" in response) return { miss: "fetch-failed" };
+  const result = response.result;
+  if (!pageShapeValid(result, pool2, from, grid)) return { miss: "shape-invalid" };
+  if (result.total < count2) return { miss: "behind" };
+  if (result.initialization.signature !== prefix.initialization.signature || result.initialization.slot !== prefix.initialization.slot) {
+    return { miss: "init-mismatch" };
+  }
+  if (isIndex(prefix.syncedSlot) && result.syncedSlot < prefix.syncedSlot) return { miss: "synced-older" };
+  let tailImports = [];
+  if (result.imports !== void 0) {
+    if (!Array.isArray(result.imports)) return { miss: "import-invalid" };
+    try {
+      for (const entry of result.imports) validateImport(entry, from, grid);
+    } catch {
+      return { miss: "import-invalid" };
+    }
+    tailImports = result.imports;
+  }
+  const cachedImports = Array.isArray(prefix.imports) ? prefix.imports : [];
+  const held = Math.min(prefix.records.length, count2);
+  for (let ordinal = from; ordinal < held; ordinal += 1) {
+    if (!sameJson(prefix.records[ordinal], result.records[ordinal - from])) return { miss: "overlap-mismatch" };
+  }
+  const between = (entry) => entry?.afterOrdinal > from && entry.afterOrdinal < held;
+  if (!sameJson(cachedImports.filter(between), tailImports.filter(between))) return { miss: "overlap-mismatch" };
+  return { page: {
+    records: [...prefix.records.slice(0, from), ...result.records.slice(0, count2 - from)],
+    imports: [...from === 0 ? [] : cachedImports.filter((entry) => entry?.afterOrdinal <= from), ...tailImports],
+    initialization: result.initialization,
+    syncedSlot: result.syncedSlot
+  } };
+}
+function comparePageZero(first, prefix, { pool: pool2, from }) {
+  return first.then((answer) => {
+    const result = answer?.response?.result;
+    if (answer?.error !== void 0 || !pageShapeValid(result, pool2, 0)) return "unavailable";
+    const upTo = Math.min(from, result.records.length);
+    for (let ordinal = 0; ordinal < upTo; ordinal += 1) {
+      if (!sameJson(prefix.records[ordinal], result.records[ordinal])) return "mismatch";
+    }
+    const reach = result.total > upTo ? upTo : upTo - 1;
+    const imports = (list) => (Array.isArray(list) ? list : []).filter((entry) => entry?.afterOrdinal <= reach);
+    return sameJson(imports(prefix.imports), imports(result.imports)) ? "match" : "mismatch";
+  }, () => "unavailable");
 }
 function isCompactPageZeroAnswer(response, pool2) {
   if (response === null || typeof response !== "object" || "error" in response) return false;
@@ -57882,7 +58021,19 @@ async function readCompactP03HistoryNow({
   // check: they are NOT verified yet. A payment asks the memo service for their memos here
   // (payAndFetch.mjs), and uses an answer only for a context the verified report names. Its
   // result and any throw are ignored.
-  onList
+  onList,
+  // compactP03HistoryReport: the records of a compact cache that is not warm (cached.served). When the
+  // list is read (no knownSnapshot), these records (or `served`'s, when the pool outgrew them) that pass
+  // the start of the pool's last grid page take that page instead of every page (3b, combineCompactTail);
+  // page 0 still goes out and is read to its end.
+  prefix,
+  // The tail page's size; P03_COMPACT_TAIL_GRID outside tests.
+  tailGrid = P03_COMPACT_TAIL_GRID,
+  // false: no tail request (compactP03HistoryReport's read again after a refused tail hit; it sent its tail already).
+  tail = true,
+  // compactP03HistoryReport: called on a tail hit with { first (page 0's answer promise), snapshot (the pool
+  // account read) }, so a refused list can be read again from that same page 0 and pool read.
+  onTailHit
 }) {
   const program = new import_web397.PublicKey(programId);
   const poolKey = new import_web397.PublicKey(pool2);
@@ -57909,24 +58060,63 @@ async function readCompactP03HistoryNow({
     }
   }
   snapshot ??= await readFinalizedPool(own, program, poolKey, { treeSlices: true });
-  markPhase(knownSnapshot !== void 0 ? "compact-pool-reused" : "compact-pool");
+  markPhase(knownSnapshot !== void 0 ? "compact-pool-reused" : "compact-pool", poolReadOutcome(snapshot.slot));
   if (snapshot.terminal) throw refuse3("p03_compact_history_pool_terminal");
   if (snapshot.currentIndex % SUBTREE_LEAVES3 !== 0n) throw refuse3("p03_compact_history_snapshot_invalid");
   const count2 = Number(snapshot.currentIndex / SUBTREE_LEAVES3);
   if (!Number.isSafeInteger(count2)) throw refuse3("p03_compact_history_snapshot_invalid");
   const anchors = freezeFinalizedAnchors(snapshot);
-  const readServedPages = () => {
+  const readServedPages = (zero = first) => {
     if (reusedFirst !== void 0) markPhase("compact-behind-page0-reused");
     if (first === void 0 && preFirst !== void 0) markPhase("compact-page0-handed-over");
-    return readPages(source, poolString, count2, first ?? preFirst, { wakeSlot: snapshot.slot });
+    return readPages(source, poolString, count2, zero ?? preFirst, { wakeSlot: snapshot.slot });
+  };
+  let prefixCheck;
+  const readTailOrPages = async () => {
+    if (knownSnapshot !== void 0 || !tail) return readServedPages();
+    const zero = first ?? preFirst ?? requestPage(source, poolString, 0);
+    if (first === void 0 && preFirst === void 0) markPhase("compact-page0-sent");
+    const from = tailFrom(count2, tailGrid);
+    const tailRead = requestTailPage(source, poolString, from, tailGrid);
+    markPhase("compact-tail-sent");
+    const cachedRecords = served ?? prefix;
+    if (!Array.isArray(cachedRecords?.records) || !cachedRecords.initialization) {
+      markPhase("compact-tail-miss-no-cache");
+      return readServedPages(zero);
+    }
+    if (cachedRecords.records.length <= from) {
+      markPhase("compact-tail-miss-k-not-above-from");
+      return readServedPages(zero);
+    }
+    if (await Promise.race([zero.then((answer) => answer.error === void 0), tailRead.then(() => false)])) {
+      markPhase("compact-tail-miss-page0-first");
+      return readServedPages(zero);
+    }
+    const combined = combineCompactTail(cachedRecords, await tailRead, { pool: poolString, from, count: count2, grid: tailGrid });
+    if (combined.miss !== void 0) {
+      markPhase(`compact-tail-miss-${combined.miss}`);
+      return readServedPages(zero);
+    }
+    markPhase("compact-tail-hit");
+    prefixCheck = comparePageZero(zero, cachedRecords, { pool: poolString, from });
+    try {
+      onTailHit?.({ first: zero, snapshot, check: prefixCheck });
+    } catch {
+    }
+    return combined.page;
   };
-  const page = count2 === 0 ? { records: [], imports: [], initialization: void 0, syncedSlot: void 0 } : served !== void 0 && Array.isArray(served.records) && served.records.length >= count2 && served.initialization ? {
+  const servedReaches = count2 > 0 && served !== void 0 && Array.isArray(served.records) && served.records.length >= count2 && Boolean(served.initialization);
+  if (servedReaches && knownSnapshot === void 0 && tail && (first !== void 0 || preFirst !== void 0)) {
+    requestTailPage(source, poolString, tailFrom(count2, tailGrid), tailGrid);
+    markPhase("compact-tail-sent-unused");
+  }
+  const page = count2 === 0 ? { records: [], imports: [], initialization: void 0, syncedSlot: void 0 } : servedReaches ? {
     records: served.records.slice(0, count2),
     imports: Array.isArray(served.imports) ? served.imports : [],
     initialization: served.initialization,
     syncedSlot: served.syncedSlot,
     cached: true
-  } : await readServedPages().catch((error) => {
+  } : await readTailOrPages().catch((error) => {
     if (error?.compactHistoryRefusal === "p03_compact_history_source_behind") error.behindSnapshot = snapshot;
     throw error;
   });
@@ -58085,7 +58275,9 @@ async function readCompactP03HistoryNow({
       ...page.imports.length > 0 ? { imports: page.imports } : {},
       initialization: page.initialization,
       syncedSlot: page.syncedSlot
-    })
+    }),
+    // 3b, a tail hit only: resolves "match", "mismatch" or "unavailable" when page 0 has come in full (comparePageZero).
+    ...prefixCheck !== void 0 ? { prefixCheck } : {}
   });
 }
 function refusalReason(error) {
@@ -58116,7 +58308,8 @@ async function compactP03HistoryReportRun({
   knownFirst,
   poolPreRead,
   firstPreRead,
-  onList
+  onList,
+  tailGrid
 }) {
   if (deploymentIdentity === void 0) throw new Error("p03_history_deployment_identity_required");
   const program = new import_web397.PublicKey(programId);
@@ -58189,7 +58382,7 @@ async function compactP03HistoryReportRun({
   };
   const preFold = cached ? startCompactPreFold(poolKey.toBase58(), cached) : void 0;
   const e1Ahead = cached ? startCompactE1Candidate(program.toBase58(), poolKey.toBase58(), cached, preFold) : void 0;
-  const compact = await readCompactP03History({
+  const readOnce = (extra) => readCompactP03History({
     history,
     own: connection,
     programId,
@@ -58203,8 +58396,48 @@ async function compactP03HistoryReportRun({
     ...firstPreRead !== void 0 ? { firstPreRead } : {},
     ...onList !== void 0 ? { onList } : {},
     ...warm ? { served: cached.served } : {},
-    ...cached ? { initialization: cached.initialization } : {}
+    ...cached ? { initialization: cached.initialization } : {},
+    ...tailGrid !== void 0 ? { tailGrid } : {},
+    ...extra
   });
+  let pageZeroMismatch = false;
+  let readAgain = false;
+  let replaced = false;
+  let saving;
+  let dropping;
+  const watchPageZero = (check) => check.then((result) => {
+    markPhase(`compact-page0-compare-${result}`);
+    if (result !== "mismatch") return;
+    try {
+      process.stderr.write("history: WARNING the history source's page 0 differs from this wallet's cached records before the pool's last page; the cache's records are replaced or dropped so the next read takes every page\n");
+    } catch {
+    }
+    pageZeroMismatch = true;
+    if (replaced) return;
+    if (!readAgain) lastFolds.delete(poolKey.toBase58());
+    const drop = () => replaced ? void 0 : dropCompactCacheRecords(poolKey.toBase58(), cache);
+    dropping = (saving ?? Promise.resolve()).then(drop, drop);
+  }).catch(() => {
+  });
+  let tailHit;
+  let compact;
+  try {
+    compact = await readOnce(cached ? { ...warm ? {} : { prefix: cached.served }, onTailHit: (hit) => {
+      tailHit = hit;
+      watchPageZero(hit.check);
+    } } : {});
+  } catch (error) {
+    if (tailHit === void 0 || !TAIL_RETRY_REFUSALS.has(error?.compactHistoryRefusal)) throw error;
+    markPhase("compact-tail-refused-page0");
+    readAgain = true;
+    lastFolds.delete(poolKey.toBase58());
+    try {
+      process.stderr.write(`history: WARNING this wallet's cached records with the pool's last page failed a check (${error.compactHistoryRefusal}); reading every page again
+`);
+    } catch {
+    }
+    compact = await readOnce({ firstPreRead: tailHit.first, poolPreRead: Promise.resolve(tailHit.snapshot), tail: false });
+  }
   const initialization = compact.verifiedInitialization;
   if (initialization === void 0) throw refuse3("p03_compact_history_pool_empty");
   const snapshot = compact.poolSnapshot;
@@ -58267,8 +58500,9 @@ async function compactP03HistoryReportRun({
     });
   }
   if (cache) {
+    if (dropping !== void 0) await dropping;
     try {
-      await cache.save({
+      await (saving = Promise.resolve().then(() => cache.save({
         programId: program.toBase58(),
         pool: poolKey.toBase58(),
         snapshot: {
@@ -58280,10 +58514,12 @@ async function compactP03HistoryReportRun({
           // pre-fold hashes their roots ahead. Counts only: every root is checked live again.
           anchorCounts: [...new Set(compact.finalizedPoolSnapshot.anchors.map((anchor) => Number(anchor.index / SUBTREE_LEAVES3)))]
         },
-        served: compact.served,
+        served: pageZeroMismatch && !readAgain ? servedWithoutRecords(compact.served) : compact.served,
         initialization,
         attestation: attested.attestation
-      });
+      })).then(() => {
+        if (readAgain) replaced = true;
+      }));
     } catch {
     }
   }
@@ -58304,7 +58540,7 @@ async function tryCompactP03HistoryReport(options) {
     return { ok: false, reason, ...detail ? { detail } : {}, error };
   }
 }
-var import_web397, P03_COMPACT_HISTORY_SOURCE_MODEL, P03_COMPACT_PAGE, P03_COMPACT_SPOT_CHECKS, FIELD_MODULUS5, SUBTREE_LEAVES3, LOCAL_DEPTH2, OUTER_DEPTH2, PRIMARY_PROOF_BYTES2, FIELD_BYTES3, ED25519_SPKI_PREFIX2, VERSION_1_PREFIX2, HEX64, BASE58, REPLAY_STORE_INDEXED2, PROFILES2, MOVE_HEAD_BYTES2, MOVE_INSERTED_VALUES2, refuse3, hash4, bitAt, zeroRootsMemo, lastFolds, PRE_FOLD_SLICE_MS, preFolds, hex64, droppedPools, verifyQuietMs, VERIFY_SLICE_MS, VERIFY_POLL_MS, verifying, unrefTurn, isSignature, isIndex, IMPORT_KEYS, IMPORT_MAX_VALUES, LIST_ATTEMPTS, pageZeroInFlight, OWN_READ_TIMEOUT_MS, BOUNDED_OWN_METHODS, SPOT_HEDGE_AFTER_MS, SPOT_HEDGE_LANE, spotReadId, POOL_HEDGE_AFTER_MS, POOL_HEDGE_LANE, poolReadId, compactReportsRunning, compactHistoryReadsRunning;
+var import_web397, P03_COMPACT_HISTORY_SOURCE_MODEL, P03_COMPACT_PAGE, P03_COMPACT_SPOT_CHECKS, FIELD_MODULUS5, SUBTREE_LEAVES3, LOCAL_DEPTH2, OUTER_DEPTH2, PRIMARY_PROOF_BYTES2, FIELD_BYTES3, ED25519_SPKI_PREFIX2, VERSION_1_PREFIX2, HEX64, BASE58, REPLAY_STORE_INDEXED2, PROFILES2, MOVE_HEAD_BYTES2, MOVE_INSERTED_VALUES2, refuse3, hash4, bitAt, zeroRootsMemo, lastFolds, PRE_FOLD_SLICE_MS, preFolds, hex64, droppedPools, servedWithoutRecords, verifyQuietMs, VERIFY_SLICE_MS, VERIFY_POLL_MS, verifying, unrefTurn, isSignature, isIndex, IMPORT_KEYS, IMPORT_MAX_VALUES, LIST_ATTEMPTS, pageZeroInFlight, OWN_READ_TIMEOUT_MS, BOUNDED_OWN_METHODS, P03_COMPACT_TAIL_GRID, TAIL_RETRY_REFUSALS, tailFrom, sameJson, SPOT_HEDGE_AFTER_MS, SPOT_HEDGE_LANE, spotReadId, POOL_HEDGE_AFTER_MS, POOL_HEDGE_LANE, poolReadId, compactReportsRunning, compactHistoryReadsRunning;
 var init_compact = __esm({
   "wallet/src/history/compact.mjs"() {
     "use strict";
@@ -58421,6 +58657,11 @@ var init_compact = __esm({
     preFolds = /* @__PURE__ */ new Map();
     hex64 = (value) => value.toString(16).padStart(64, "0");
     droppedPools = /* @__PURE__ */ new Set();
+    servedWithoutRecords = (served) => ({
+      records: [],
+      initialization: served.initialization,
+      ...served.syncedSlot !== void 0 ? { syncedSlot: served.syncedSlot } : {}
+    });
     verifyQuietMs = 3e3;
     VERIFY_SLICE_MS = 20;
     VERIFY_POLL_MS = 250;
@@ -58437,6 +58678,17 @@ var init_compact = __esm({
     pageZeroInFlight = /* @__PURE__ */ new Map();
     OWN_READ_TIMEOUT_MS = HISTORY_RPC_REQUEST_TIMEOUT_MS;
     BOUNDED_OWN_METHODS = /* @__PURE__ */ new Set(["getAccountInfo", "getAccountInfoAndContext", "getMultipleAccountsInfo", "getMultipleAccountsInfoAndContext"]);
+    P03_COMPACT_TAIL_GRID = 512;
+    TAIL_RETRY_REFUSALS = /* @__PURE__ */ new Set([
+      "p03_compact_history_root_mismatch",
+      "p03_compact_history_kind_count_mismatch",
+      "p03_compact_history_record_order_invalid",
+      "p03_compact_history_record_invalid",
+      "p03_compact_history_record_after_snapshot",
+      "p03_compact_history_source_answer_invalid"
+    ]);
+    tailFrom = (count2, grid) => Math.floor((count2 - 1) / grid) * grid;
+    sameJson = (left, right) => JSON.stringify(left) === JSON.stringify(right);
     SPOT_HEDGE_AFTER_MS = 4e3;
     SPOT_HEDGE_LANE = "spot-hedge";
     spotReadId = 0;
@@ -59241,7 +59493,7 @@ async function walkWalletP03HistoryNow({ store, connection: given, programId, po
   } else if (earlier !== void 0) {
     markPhase("refresh-start");
     let slicedPreRead;
-    let page0Stop;
+    let page0Asked = false;
     let page0Answered = false;
     if (compactNext) {
       const started = startCompactPoolSnapshot({ connection, programId, pool: pool2 });
@@ -59249,8 +59501,8 @@ async function walkWalletP03HistoryNow({ store, connection: given, programId, po
       poolPreRead = started.full;
       markPhase("compact-pool-prestarted");
       if (inTorRun() || Date.now() - remembered.at > PAGE0_PREREAD_AFTER_MS) {
-        page0Stop = inTorRun() ? new AbortController() : void 0;
-        firstPreRead = requestCompactFirstPage({ history: connection.historyRpcSource, pool: pool2, signal: page0Stop?.signal });
+        page0Asked = true;
+        firstPreRead = requestCompactFirstPage({ history: connection.historyRpcSource, pool: pool2 });
         firstPreRead.then(() => {
           page0Answered = true;
         });
@@ -59278,19 +59530,23 @@ async function walkWalletP03HistoryNow({ store, connection: given, programId, po
     })();
     try {
       const refreshed = await refreshing;
-      markPhase("walk-refreshed");
-      if (page0Stop !== void 0) {
-        markPhase(page0Answered ? "compact-page0-answered-before-hit" : "compact-page0-stopped-on-hit");
-        page0Stop.abort();
+      markPhase("walk-refreshed", poolReadOutcome(refreshed?.finalizedPoolSnapshot?.slot));
+      if (page0Asked) {
+        markPhase(page0Answered ? "compact-page0-answered-before-hit" : "compact-page0-read-on-after-hit");
+        const currentIndex = refreshed?.finalizedPoolSnapshot?.currentIndex;
+        if (typeof currentIndex === "bigint" && currentIndex > 0n) {
+          requestCompactTailPage({ history: connection.historyRpcSource, pool: pool2, currentIndex });
+          markPhase("compact-tail-sent-on-hit");
+        }
       }
       rememberRunReport(runKey, refreshed);
       writeStderr("history: the pool made no transition since this run's last walk; that history was moved to the current pool account " + (fromSliced ? "(your own RPC read the pool account and the program's deployment account in one request)\n" : "(your own RPC read the pool account and the program's deployment account; the history source answered one signature read)\n"));
       return refreshed;
     } catch (error) {
-      markPhase("refresh-missed");
-      if (error?.message === "p03_history_refresh_transition_detected" && typeof error.currentIndex === "bigint" && error.snapshotBinding?.programId === String(programId) && error.snapshotBinding?.pool === String(pool2)) {
-        movedIndex = error.currentIndex;
-      }
+      const moved = error?.message === "p03_history_refresh_transition_detected" && typeof error.currentIndex === "bigint" && error.snapshotBinding?.programId === String(programId) && error.snapshotBinding?.pool === String(pool2);
+      const earlierIndex = earlier.finalizedPoolSnapshot?.currentIndex;
+      markPhase("refresh-missed", moved ? poolReadOutcome(error.snapshotSlot, typeof earlierIndex === "bigint" ? Number((error.currentIndex - earlierIndex) / SUBTREE_LEAVES4) : void 0) : void 0);
+      if (moved) movedIndex = error.currentIndex;
       floor?.reset();
       if (strict) floor?.strict();
     }
@@ -73866,6 +74122,10 @@ async function runRecoveredP03NoteExit({
   photonUrl,
   // Parsed --recovered-note-file (recoveredNotesFromFile): notes the walk cannot find.
   recoveredNoteFile,
+  // Relay path only (realSpeed3 2026-10-22, mcp55 Part 1): return once the relay answered (it answers only after the
+  // exit is finalized) and the "confirmed" record holds the signature, with `settled: false` and `finish`, the post-exit
+  // walk and postcondition below. The caller runs `finish` after its own answer; a rerun of this exit resumes the same way.
+  answerAtRelay = false,
   deps = {}
 }) {
   const state = store.state;
@@ -74295,39 +74555,46 @@ async function runRecoveredP03NoteExit({
   }
   wal = { ...wal, state: "confirmed", signature: signature2 };
   store.writeWal(walName2, wal);
-  for (let attempt = 1; ; attempt += 1) {
-    history = await walkHistory();
-    markPhase("exit-post-walk");
-    poolState2 = await readPool2(connection, pool2, "finalized");
-    if (!poolState2 || !poolState2.owner.equals(chainProgramId) || poolState2.version !== 3) {
-      throw new Error("finalized note-exit pool postcondition invalid");
+  const preExitHistory = history;
+  const finish = async () => {
+    for (let attempt = 1; ; attempt += 1) {
+      history = await walkHistory();
+      markPhase("exit-post-walk");
+      poolState2 = await readPool2(connection, pool2, "finalized");
+      if (!poolState2 || !poolState2.owner.equals(chainProgramId) || poolState2.version !== 3) {
+        throw new Error("finalized note-exit pool postcondition invalid");
+      }
+      if (attempt >= 4 || history.finalizedPoolSnapshot.currentIndex === poolState2.currentIndex && history.finalizedPoolSnapshot.currentRoot === poolState2.currentRoot) break;
     }
-    if (attempt >= 4 || history.finalizedPoolSnapshot.currentIndex === poolState2.currentIndex && history.finalizedPoolSnapshot.currentRoot === poolState2.currentRoot) break;
-  }
-  await prepareFold(history);
-  const spentPath = buildRecoveryPath({
-    history,
-    recoveredOutput: recoveredForPath,
-    circuitSource: p03CircuitSource,
-    anchor: recoveryPath.anchor
-  });
-  if (spentPath.spendStatus !== "spent" || poolState2.currentIndex < frontier.nextIndex + 128n || history.finalizedPoolSnapshot.currentIndex !== poolState2.currentIndex || history.finalizedPoolSnapshot.currentRoot !== poolState2.currentRoot) {
-    throw new Error("finalized note-exit postcondition failed");
+    await prepareFold(history);
+    const spentPath = buildRecoveryPath({
+      history,
+      recoveredOutput: recoveredForPath,
+      circuitSource: p03CircuitSource,
+      anchor: recoveryPath.anchor
+    });
+    if (spentPath.spendStatus !== "spent" || poolState2.currentIndex < frontier.nextIndex + 128n || history.finalizedPoolSnapshot.currentIndex !== poolState2.currentIndex || history.finalizedPoolSnapshot.currentRoot !== poolState2.currentRoot) {
+      throw new Error("finalized note-exit postcondition failed");
+    }
+    store.writeWal(walName2, { ...wal, state: "settled" });
+    return Object.freeze({
+      signature: signature2,
+      replayed: false,
+      noteCommitment: selected.commitment,
+      amountAtomic: amount,
+      poolIndex: poolState2.currentIndex,
+      manifestSha256: proved.manifestSha256,
+      ...denomination.record ? { denominationPolicy: denomination.record } : {},
+      ...denominationWarnings.length > 0 ? { denominationWarnings } : {},
+      ...foreignRecipient ? { recipientOwner: expectedRecipientOwner.toBase58() } : {},
+      ...relayed ? { broadcaster: broadcasterKey } : {},
+      ...relaySubmit ? { facilitatorRelay: true } : {}
+    });
+  };
+  if (answerAtRelay === true && relaySubmit) {
+    return Object.freeze({ signature: signature2, settled: false, noteCommitment: selected.commitment, amountAtomic: amount, preExitHistory, finish });
   }
-  store.writeWal(walName2, { ...wal, state: "settled" });
-  return Object.freeze({
-    signature: signature2,
-    replayed: false,
-    noteCommitment: selected.commitment,
-    amountAtomic: amount,
-    poolIndex: poolState2.currentIndex,
-    manifestSha256: proved.manifestSha256,
-    ...denomination.record ? { denominationPolicy: denomination.record } : {},
-    ...denominationWarnings.length > 0 ? { denominationWarnings } : {},
-    ...foreignRecipient ? { recipientOwner: expectedRecipientOwner.toBase58() } : {},
-    ...relayed ? { broadcaster: broadcasterKey } : {},
-    ...relaySubmit ? { facilitatorRelay: true } : {}
-  });
+  return finish();
 }
 function loadBroadcasterKeypairFile(path) {
   let text3;
@@ -95809,11 +96076,11 @@ function dropFloatConfigs() {
   configCache.clear();
   configReads.clear();
 }
-function warmFloatConfig({ origin, fetchImpl = fetch } = {}) {
+function warmFloatConfig({ origin, fetchImpl = fetch, timing } = {}) {
   try {
     const kept = configCache.get(origin);
     if (kept && Date.now() - kept.readAtMs < CONFIG_CACHE_MS && floatPoolRecentlyUsed(FLOAT_POOL_WARM_MS) || configReads.has(origin)) return;
-    const read = readFloatConfig({ origin, fetchImpl });
+    const read = timedConfigRead({ origin, fetchImpl, timing, route: "warm" });
     configReads.set(origin, read);
     read.then(
       () => {
@@ -95826,6 +96093,18 @@ function warmFloatConfig({ origin, fetchImpl = fetch } = {}) {
   } catch {
   }
 }
+function timedConfigRead({ origin, fetchImpl, timing, route }) {
+  const mark = (phase) => {
+    try {
+      timing?.(phase);
+    } catch {
+    }
+  };
+  mark("float-config-start");
+  const read = readFloatConfig({ origin, fetchImpl });
+  read.then(() => mark(`float-config-answered-${route}`), () => mark(`float-config-failed-${route}`));
+  return read;
+}
 function refreshFloatConfig(origin, fetchImpl) {
   try {
     if (configRefreshes.has(origin) || configReads.has(origin)) return;
@@ -95842,19 +96121,32 @@ function refreshKeptFloatConfig({ origin, fetchImpl = fetch } = {}) {
   } catch {
   }
 }
-async function readFloatOffer({ origin, paymentRequired, store, resourceUrl, fetchImpl = fetch }) {
+async function readFloatOffer({ origin, paymentRequired, store, resourceUrl, fetchImpl = fetch, timing }) {
+  const mark = (phase) => {
+    try {
+      timing?.(phase);
+    } catch {
+    }
+  };
   const inFlight = configReads.get(origin);
   if (inFlight) await inFlight.catch(() => void 0);
   const kept = configCache.get(origin);
   if (kept && Date.now() - kept.readAtMs < CONFIG_CACHE_MS) {
     try {
-      return { offer: floatOffer({ paymentRequired, store, config: kept.config, resourceUrl }), config: kept.config };
+      const offer = floatOffer({ paymentRequired, store, config: kept.config, resourceUrl });
+      mark(inFlight ? "float-config-joined-warm" : "float-config-joined-kept");
+      return { offer, config: kept.config };
     } catch {
       configCache.delete(origin);
     }
   }
   const warm = configReads.get(origin);
-  const config = (warm ? await warm.catch(() => void 0) : void 0) ?? await readFloatConfig({ origin, fetchImpl });
+  let config = warm ? await warm.catch(() => void 0) : void 0;
+  if (config !== void 0) mark("float-config-joined-warm");
+  else {
+    config = await timedConfigRead({ origin, fetchImpl, timing, route: "read" });
+    mark("float-config-joined-read");
+  }
   return { offer: floatOffer({ paymentRequired, store, config, resourceUrl }), config };
 }
 function keepSellerTerms(origin, url, paymentRequired) {
@@ -98572,6 +98864,15 @@ async function openPayerSession({
   notePayHost(memoService);
   const connection = connectRelay(rpc2, "finalized");
   const timingLog = createTimingLog(`${path}.timing.log`, { component: "payer" });
+  takeSiteOnionRaces().then((races) => {
+    for (const race of races) {
+      const mark = timingLog.start({ startedAt: race.startedAt });
+      mark("onion:race-start", void 0, race.startedAt);
+      for (const probe of race.probes) mark(`onion:${probe.role}-${probe.event}`, void 0, probe.at);
+      mark("onion:race-end", race.answered ? "answered" : "none", race.endedAt);
+    }
+  }).catch(() => {
+  });
   let closed = false;
   let queue = Promise.resolve();
   const session = {
@@ -98631,6 +98932,7 @@ var init_session = __esm({
     init_processLease();
     init_proxy();
     init_keepAlive();
+    init_facilitatorOnion();
     RELAY_READ_TIMEOUT_MS = 3e4;
     READ_ONLY_METHOD = /^(get[A-Za-z]+|simulateTransaction|isBlockhashValid|minimumLedgerSlot)$/;
     connectRelay = (rpcUrl, commitment = "finalized") => connect2(rpcUrl, commitment, { wrapFetch: (fetch2) => relayRpcFetch(fetch2) });
@@ -103892,7 +104194,7 @@ function hostConfigText({ home, env = process.env, platform = process.platform }
 function isOlderSetupEntry(existing, entry) {
   if (!isPlainObject3(existing) || entry.command !== "npx" || !Array.isArray(entry.args)) return false;
   const older = { ...entry, args: entry.args.filter((arg) => !NPX_INSTALL_FLAGS.includes(arg)) };
-  return older.args.length !== entry.args.length && sameJson(existing, older);
+  return older.args.length !== entry.args.length && sameJson2(existing, older);
 }
 function restrictToOwnerWindows(file, { run: run5 = execFileSync2 } = {}) {
   const system32 = join18(process.env.SystemRoot || "C:/Windows", "System32");
@@ -103925,7 +104227,7 @@ function addToJsonHost(file, entry, { now = /* @__PURE__ */ new Date(), force =
     }
     const existing = current.mcpServers?.[MCP_SERVER_NAME];
     if (existing !== void 0) {
-      if (sameJson(existing, entry)) return { file, changed: false };
+      if (sameJson2(existing, entry)) return { file, changed: false };
       if (!force && !isOlderSetupEntry(existing, entry)) {
         throw new Error(`setup_host_config_conflict: the host's config file already has a different "${MCP_SERVER_NAME}" server, so setup left it alone; rerun setup with --force to replace it (the old file is backed up first), or edit it by hand`);
       }
@@ -103973,7 +104275,7 @@ function addToJsonHost(file, entry, { now = /* @__PURE__ */ new Date(), force =
   }
   return { file, changed: true, ...backup ? { backup } : {} };
 }
-var import_web3118, CONFIG_SCHEMA, CONFIG_FILE, NPX_PACKAGE, NPX_INSTALL_FLAGS, MCP_SERVER_NAME, P03_BINDING2, PRODUCTION, RETIRED_POOLS, NO_LIMIT_ATOMIC2, DEFAULT_CAPS, OLD_DEFAULT_SETUP_CAPS, OLD_DEFAULT_WALLET_BUDGETS, capText, POSITIVE_ATOMIC2, configPath, homeWalletPath, invalid3, isPubkey, HOST_TARGETS, WINDOWS_SHELL_CODE, isPlainObject3, sameJson;
+var import_web3118, CONFIG_SCHEMA, CONFIG_FILE, NPX_PACKAGE, NPX_INSTALL_FLAGS, MCP_SERVER_NAME, P03_BINDING2, PRODUCTION, RETIRED_POOLS, NO_LIMIT_ATOMIC2, DEFAULT_CAPS, OLD_DEFAULT_SETUP_CAPS, OLD_DEFAULT_WALLET_BUDGETS, capText, POSITIVE_ATOMIC2, configPath, homeWalletPath, invalid3, isPubkey, HOST_TARGETS, WINDOWS_SHELL_CODE, isPlainObject3, sameJson2;
 var init_config2 = __esm({
   "wallet/src/setup/config.mjs"() {
     "use strict";
@@ -104024,7 +104326,7 @@ var init_config2 = __esm({
     HOST_TARGETS = Object.freeze(["claude-code", "claude-desktop", "cursor"]);
     WINDOWS_SHELL_CODE = /[%$`"\r\n]/;
     isPlainObject3 = (value) => Boolean(value) && typeof value === "object" && !Array.isArray(value);
-    sameJson = (a, b) => {
+    sameJson2 = (a, b) => {
       const canonical5 = (value) => Array.isArray(value) ? value.map(canonical5) : isPlainObject3(value) ? Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonical5(value[key])])) : value;
       return JSON.stringify(canonical5(a)) === JSON.stringify(canonical5(b));
     };
@@ -104399,6 +104701,20 @@ function computeBalance({ store, snapshotRead, source = "local", now = Date.now(
     const inputs = provenInputs(byName.get(`resource-proof-${entry.name.slice("resource-payment-".length)}`)?.record);
     return Boolean(digest2) && snapshotDigests.has(digest2) && inputs !== void 0 && inputs.length > 0 && inputs.every((commitment) => spentInSnapshot.has(commitment));
   };
+  const answeredExits = /* @__PURE__ */ new Map();
+  for (const entry of records) {
+    if (entry.type !== "unshield" || entry.name.startsWith(POCKET_FILL_RECORD) || entry.name.startsWith(MERGE_RECORD) || !Number.isSafeInteger(entry.record.exitAnsweredAtMs) || typeof entry.record.exitTransaction !== "string" || !canonicalAtomic(String(entry.record.noteCommitment ?? ""))) continue;
+    answeredExits.set(String(entry.record.noteCommitment), {
+      changeAtomic: canonicalAtomic(entry.record.changeAtomic) ? BigInt(entry.record.changeAtomic) : 0n,
+      unconfirmed: entry.record.exitUnconfirmed === true
+    });
+  }
+  const answeredSettling = (note, answered) => {
+    const output2 = unspent.get(note);
+    if (output2 === void 0) return void 0;
+    const exited = BigInt(output2.valueAtomic) - answered.changeAtomic;
+    return exited > 0n ? { inputs: [note], amountAtomic: exited, join: false } : void 0;
+  };
   for (const entry of records) {
     const before = Object.hasOwn(snapshot.walStates, entry.name) ? snapshot.walStates[entry.name] : void 0;
     const beforePhase = before === void 0 ? "absent" : entry.type === "payment-proof" ? entry.phase : classify(entry.name, { ...entry.record, state: before }).phase;
@@ -104406,6 +104722,18 @@ function computeBalance({ store, snapshotRead, source = "local", now = Date.now(
     const join37 = entry.type === "payment" && joinedAccountOf(entry, byName) !== void 0;
     if (entry.phase === "done" && beforePhase !== "done") {
       if (join37 && snapshotDigests.has(digestKey(entry.record.memoDigest))) continue;
+      const answeredExit = ["unshield", "note-exit"].includes(entry.type) ? answeredExits.get(String(entry.record.noteCommitment)) : void 0;
+      if (answeredExit !== void 0) {
+        const note = String(entry.record.noteCommitment);
+        if (spentInSnapshot.has(note) || entry.type === "note-exit" && unspent.has(note)) continue;
+        const exiting = answeredSettling(note, answeredExit);
+        if (exiting) {
+          settling.push(exiting);
+          noteSettling(entry.name);
+          settlingReasons.push(`unshield record ${entry.name} was answered after the last refresh: its exit is final on chain and the balance counts it as sent; refresh again in a minute`);
+          continue;
+        }
+      }
       const paying = settlingPayment(entry);
       if (paying) {
         settling.push(paying);
@@ -104483,6 +104811,24 @@ function computeBalance({ store, snapshotRead, source = "local", now = Date.now(
       listedNotes.add(note);
       const fill = entry.name.startsWith(POCKET_FILL_RECORD);
       const merge = entry.name.startsWith(MERGE_RECORD);
+      const answered = answeredExits.get(note);
+      if (answered !== void 0) {
+        const exiting = answered.changeAtomic > 0n && !spentInWalk.has(note) ? answeredSettling(note, answered) : void 0;
+        if (exiting) {
+          settling.push(exiting);
+          noteSettling(entry.name);
+          settlingReasons.push(`unshield record ${entry.name} was answered: its exit is final on chain and the balance counts it as sent; its change becomes spendable at the next refresh`);
+        }
+        detail.inFlight.push({
+          kind: "unshield-exit",
+          state: entry.state,
+          amountAtomic: entry.record.amountAtomic ?? null,
+          answered: true,
+          inputs: exiting ? "settling" : reserve([note], `unshield ${entry.name}`),
+          next: answered.unconfirmed ? "rerun the same unshield command; it resumes the exit (the pool history has not shown this exit as spent for 10 minutes)" : "nothing to do: the exit is final on chain and this wallet checks it against the pool history by itself"
+        });
+        continue;
+      }
       const inputs = reserve(
         [note],
         `unshield ${entry.name}`,
@@ -104526,7 +104872,8 @@ function computeBalance({ store, snapshotRead, source = "local", now = Date.now(
   }
   const anchorIndex = canonicalAtomic(snapshot.anchorIndex) ? BigInt(snapshot.anchorIndex) : void 0;
   detail.fundedAccounts = unknownInputs ? 0 : [...unspent.values()].filter((output2) => output2.kind === "account" && BigInt(output2.valueAtomic) > 0n && !reserved.has(output2.commitment) && !joining.has(output2.commitment) && !settlingInputs.has(output2.commitment) && (anchorIndex === void 0 || BigInt(output2.leafIndex) < anchorIndex)).length;
-  const next = detail.inFlight.length ? "finish or cancel the work in detail.inFlight; the wallet runs one payment at a time" : pendingDeposits.length ? `deposit ${pendingDeposits[0].depositId} is not finished: rerun the same deposit command with --submit --service <facilitator URL>` : pocketsUnscanned ? scanPockets2 : unspentAtomic === 0n && successionMovableAtomic > 0n ? "this pool was succeeded by a new pool: its value moves there (a move per account, the facilitator pays the fee) and counts in this balance until then" : unspentAtomic === 0n ? "nothing to spend: deposit (shinjuku-wallet help deposit), or run balance --refresh if a payment to this wallet settled" : void 0;
+  const answeredOnly = detail.inFlight.length > 0 && detail.inFlight.every((item) => item.answered === true);
+  const next = answeredOnly ? detail.inFlight.find((item) => item.next.startsWith("rerun"))?.next ?? "nothing to do: an answered unshield finishes its check by itself" : detail.inFlight.length ? "finish or cancel the work in detail.inFlight; the wallet runs one payment at a time" : pendingDeposits.length ? `deposit ${pendingDeposits[0].depositId} is not finished: rerun the same deposit command with --submit --service <facilitator URL>` : pocketsUnscanned ? scanPockets2 : unspentAtomic === 0n && successionMovableAtomic > 0n ? "this pool was succeeded by a new pool: its value moves there (a move per account, the facilitator pays the fee) and counts in this balance until then" : unspentAtomic === 0n ? "nothing to spend: deposit (shinjuku-wallet help deposit), or run balance --refresh if a payment to this wallet settled" : void 0;
   if (movedInAtomic > 0n) {
     settlingReasons.push(`${formatAtomic(movedInAtomic, decimals)} moved into this pool from the old pool after the last refresh: the balance counts it; refresh again in a minute`);
   }
@@ -104661,7 +105008,7 @@ function requestBody(method, body) {
   if (bytes2.length > 1024 * 1024) fail24("fetch_options_invalid", "the body is over 1 MiB");
   return bytes2;
 }
-async function offeredPrice(paymentRequired, store, serviceUrl2, target) {
+async function offeredPrice(paymentRequired, store, serviceUrl2, target, timing) {
   let rail = paymentRail(paymentRequired);
   if (rail === "confidential" && paymentRequired.accepts.some((offer) => offer?.scheme === "exact")) rail = "exact";
   if (rail === "none") {
@@ -104672,7 +105019,7 @@ async function offeredPrice(paymentRequired, store, serviceUrl2, target) {
   }
   if (rail === "exact" && store) {
     const origin = new URL(serviceUrl2).origin;
-    const { offer, config } = await readFloatOffer({ origin, paymentRequired, store, resourceUrl: target });
+    const { offer, config } = await readFloatOffer({ origin, paymentRequired, store, resourceUrl: target, timing });
     return { rail, amountAtomic: offer.paidAtomic, priceAtomic: offer.priceAtomic, floatConfig: { origin, config } };
   }
   let highest;
@@ -104782,7 +105129,7 @@ async function payAndFetch(session, url, init = {}, opts = {}) {
         if (ahead) {
           mark("leg1-ahead");
         } else {
-          warmFloatConfig({ origin: new URL(session.memoServiceUrl).origin });
+          warmFloatConfig({ origin: new URL(session.memoServiceUrl).origin, timing: mark });
         }
         startRecoveredPaymentTools(lazyProofTools(session));
       }
@@ -104806,7 +105153,7 @@ async function payAndFetch(session, url, init = {}, opts = {}) {
       }
       challenge3 = { encoded, atMs: Date.now() };
       mark("fetch-challenge");
-      price = await offeredPrice(paymentRequired, store ?? session.openStore(), session.memoServiceUrl, target);
+      price = await offeredPrice(paymentRequired, store ?? session.openStore(), session.memoServiceUrl, target, mark);
       mark("fetch-price");
       if (maxPrice !== void 0 && BigInt(price.priceAtomic) > BigInt(maxPrice)) {
         fail24(
@@ -108908,7 +109255,8 @@ function build(a, tool) {
     if (a.stage === "confirming") return "Waiting for you to confirm the send in your app.";
     const amount = usdcText(a.done === true ? a.sentAtomic ?? a.amountAtomic : a.amountAtomic);
     const what = amount ? `${amount} USDC` : "the USDC";
-    return a.done === true ? `Sent ${what} to ${a.to}.` : `Sending ${what} privately to ${a.to}.`;
+    if (a.done !== true) return `Sending ${what} privately to ${a.to}.`;
+    return typeof a.exitTransaction === "string" && a.privateSend === void 0 ? `Sent ${what} to ${a.to} (transaction ${a.exitTransaction}). Your private balance shows it in a few seconds; nothing to do.` : `Sent ${what} to ${a.to}.`;
   }
   if (typeof a.address === "string" && a.address && typeof a.stage === "string") return linkSay(a);
   if (a.stage === "waiting_for_funds" && typeof a.depositAddress === "string") {
@@ -117403,7 +117751,9 @@ async function runUnshield({
   profile,
   facilitatorOrigin: facilitatorOrigin2,
   onStage,
-  selfPayStep = selfPay
+  selfPayStep = selfPay,
+  onAnswered,
+  onCheckPending
 }) {
   const owner = new import_web3133.PublicKey(recipientOwner);
   const mint = new import_web3133.PublicKey(store.state.asset);
@@ -117460,7 +117810,9 @@ async function runUnshield({
       onStage,
       walk,
       mark,
-      scoped
+      scoped,
+      onAnswered,
+      onCheckPending
     });
   }
   if (record?.mode !== void 0) throw new Error("mcp_unshield_failed: this unshield's record names an exit mode this version does not know; nothing new was signed. Update the wallet");
@@ -117503,12 +117855,50 @@ async function runUnshield({
     allowForeignRecipient: true,
     relaySubmit: facilitatorExitRelay(facilitatorOrigin2),
     requestAnchor: markedAnchorRequest(facilitatorAnchor(facilitatorOrigin2)),
+    answerAtRelay: true,
     deps: { walkHistory: walk(exitProofTools.deploymentIdentity) }
   }), { ring: { connection: session.connection, pool: store.state.pool } }));
+  const answer = { selfPayTransaction: paid.transaction ?? null, exitTransaction: exit.signature ?? null };
+  if (exit.settled === false && !await finishAnsweredExit({ session, store, name, exit, answer, onAnswered, onCheckPending, mark, scoped })) return answer;
   mark("unshield-exited");
   const exited = store.readWal(`self-pay-${unshieldId}`);
   store.writeWal(`self-pay-${unshieldId}`, { ...exited, state: "exited", exitTransaction: exit.signature, exitedAtMs: exited?.exitedAtMs ?? Date.now() });
-  return { selfPayTransaction: paid.transaction ?? null, exitTransaction: exit.signature ?? null };
+  return answer;
+}
+async function finishAnsweredExit({ session, store, name, exit, answer, changeAtomic, onAnswered, onCheckPending, mark, scoped }) {
+  if (typeof onAnswered !== "function") {
+    await scoped("unshield-exit", () => exit.finish());
+    return true;
+  }
+  const record = store.readWal(name);
+  store.writeWal(name, {
+    ...record,
+    exitTransaction: exit.signature,
+    exitAnsweredAtMs: record?.exitAnsweredAtMs ?? Date.now(),
+    ...changeAtomic !== void 0 ? { changeAtomic } : {}
+  });
+  try {
+    await scoped("unshield-exit", () => refreshWallet({ session, store, history: exit.preExitHistory }));
+  } catch {
+    mark("unshield-exit-snapshot-failed");
+  }
+  mark("unshield-exit-answered");
+  try {
+    onAnswered(answer);
+  } catch {
+  }
+  try {
+    await scoped("unshield-exit", () => exit.finish());
+    return true;
+  } catch (error) {
+    mark("unshield-exit-check-pending");
+    store.writeWal(name, { ...store.readWal(name), exitCheckPendingAtMs: Date.now() });
+    try {
+      onCheckPending?.(error);
+    } catch {
+    }
+    return false;
+  }
 }
 async function runDirectExit({
   session,
@@ -117525,7 +117915,9 @@ async function runDirectExit({
   walk,
   mark = () => {
   },
-  scoped = (_prefix, fn) => fn()
+  scoped = (_prefix, fn) => fn(),
+  onAnswered,
+  onCheckPending
 }) {
   const name = `self-pay-${unshieldId}`;
   if (record.amountAtomic !== String(amountAtomic) || record.exitAmountAtomic !== String(amountAtomic)) {
@@ -117563,6 +117955,7 @@ async function runDirectExit({
       allowForeignRecipient: true,
       relaySubmit: facilitatorExitRelay(facilitatorOrigin2),
       requestAnchor: markedAnchorRequest(facilitatorAnchor(facilitatorOrigin2)),
+      answerAtRelay: true,
       deps: { walkHistory: walk(exitProofTools.deploymentIdentity), proveExit }
     }), { ring: { connection: session.connection, pool: store.state.pool } }));
   } catch (error) {
@@ -117571,10 +117964,13 @@ async function runDirectExit({
     }
     throw error;
   }
+  const answer = { selfPayTransaction: null, exitTransaction: exit.signature ?? null };
+  const changeAtomic = exitAmountAtomic === void 0 ? void 0 : (BigInt(record.noteValueAtomic) - BigInt(record.exitAmountAtomic)).toString();
+  if (exit.settled === false && !await finishAnsweredExit({ session, store, name, exit, answer, changeAtomic, onAnswered, onCheckPending, mark, scoped })) return answer;
   mark("unshield-exited");
   const exited = store.readWal(name);
   store.writeWal(name, { ...exited, state: "exited", exitTransaction: exit.signature, exitedAtMs: exited?.exitedAtMs ?? Date.now() });
-  return { selfPayTransaction: null, exitTransaction: exit.signature ?? null };
+  return answer;
 }
 function movingAtomic(store) {
   let moving = 0n;
@@ -119394,6 +119790,12 @@ ${canonical5}`;
         watcher?.kick?.();
       } catch {
       }
+      if (resumeSends) {
+        try {
+          finishAnsweredExits();
+        } catch {
+        }
+      }
       let store;
       try {
         store = session.openStore();
@@ -119907,7 +120309,7 @@ ${canonical5}`;
           amountAtomic: typeof record.amountAtomic === "string" ? record.amountAtomic : null,
           to: record.mcpTo,
           // One word per state (real-user pass F3): "sent" as wallet_cancel and openSendState say, never the record's "exited".
-          state: retry ? "retrying" : joining ? "joining" : record.state === "exited" ? "sent" : live === "sending" ? "sending" : idle ?? record.state,
+          state: retry ? "retrying" : joining ? "joining" : record.state === "exited" || live === "sent" ? "sent" : live === "sending" ? "sending" : idle ?? record.state,
           transaction: sigOrNull(record.exitTransaction),
           at,
           ...record.state === "exited" && started !== void 0 ? { startedAt: isoOf(started) } : {},
@@ -120353,7 +120755,8 @@ ${canonical5}`;
       return sendDoneNext(job.to, job.result.privateSend) + `${job.result?.backupPath ? `. An encrypted backup of the wallet was saved at ${job.result.backupPath}` : ""}`;
     }
     if (kind === "unshield") {
-      return `the USDC was sent to ${job.to}; tell the user (exitTransaction). wallet_balance shows the new shielded balance${job.result?.backupPath ? `. An encrypted backup of the wallet was saved at ${job.result.backupPath}` : ""}`;
+      const tx = job.result?.exitTransaction;
+      return `Sent ${usdcText2(job.amountAtomic)} USDC to ${job.to}${typeof tx === "string" ? ` (transaction ${tx})` : ""}. Tell the user; nothing to do: the private balance shows it in a few seconds (wallet_balance)${job.result?.backupPath ? `. An encrypted backup of the wallet was saved at ${job.result.backupPath}` : ""}`;
     }
     const post = job.post;
     if (!post || post.state === "running") {
@@ -120806,7 +121209,9 @@ ${canonical5}`;
   }
   function singleSendState(store, requestId, intent) {
     const unshieldId = moneyId(requestId);
-    if (store.readWal(`self-pay-${unshieldId}`)?.state === "exited") return "sent";
+    const record = store.readWal(`self-pay-${unshieldId}`);
+    if (record?.state === "exited") return "sent";
+    if (Number.isSafeInteger(record?.exitAnsweredAtMs) && typeof record.exitTransaction === "string" && record.exitUnconfirmed !== true) return "sent";
     if (jobs.get(`unshield:${toRecordId(requestId)}`)?.state === "running" || selfPayMayHaveSigned(store, unshieldId)) return "sending";
     return intent ? "joining" : void 0;
   }
@@ -121289,7 +121694,7 @@ ${canonical5}`;
       if (known && known.state !== "failed" && known.state !== "waiting" && sameRequest(known, request)) {
         const wait3 = waitFor();
         if (known.state === "running" && wait3 > 0) {
-          const ends = (kind === "shield" || kind === "unshield") && known.stage !== "confirming" ? [known.promise] : [known.promise, stageChanged(known)];
+          const ends = (kind === "shield" || kind === "unshield") && known.stage !== "confirming" ? [known.answered ?? known.promise] : [known.promise, stageChanged(known)];
           await statusWait(
             ends,
             wait3,
@@ -121664,6 +122069,10 @@ ${canonical5}`;
         if (kind !== "unshield") afterShield(job);
         else refreshAtFinality();
       }, async (error) => {
+        if (job.answeredEarly) {
+          log(`MCP_UNSHIELD_AFTER_ANSWER_FAILED requestId=${job.requestId} cause=${JSON.stringify(String(error?.message ?? error ?? "").split("\n", 1)[0].slice(0, 240))}`);
+          return;
+        }
         const linkHeld = /* @__PURE__ */ new Map();
         if (kind === "unshield" && /p03_merchant_respend_no_spendable_account|insufficient_recovered_value|insufficient_value/.test(String(error?.message ?? error))) {
           try {
@@ -121707,7 +122116,14 @@ ${canonical5}`;
           recorded = true;
         }
         if (!recorded) uncount(kind, key);
-      }).finally(() => signalStage(job));
+      }).finally(() => {
+        job.finishing = false;
+        signalStage(job);
+      });
+      job.answered = new Promise((resolve38) => {
+        job.answerNow = resolve38;
+        job.promise.then(resolve38, resolve38);
+      });
       if (needsConfirm) {
         await statusWait([confirmation], fullWait ? Infinity : budgetLeft(startedAt), progress3, "waiting for the user to confirm the send");
         if (job.stage === "confirming" || job.state === "failed") return jobAnswer(kind, job);
@@ -121716,7 +122132,7 @@ ${canonical5}`;
       if (wait2 === Infinity) await job.promise.catch(() => {
       });
       else if (wait2 > 0) {
-        await statusWait([job.promise], wait2, progress3, kind === "unshield" ? "sending privately; it takes a few minutes" : kind === "elsewhere" ? "checking the one-time address; a deposit takes a few minutes" : "making the USDC private; it takes a few minutes");
+        await statusWait([job.answered], wait2, progress3, kind === "unshield" ? "sending privately; it takes a few minutes" : kind === "elsewhere" ? "checking the one-time address; a deposit takes a few minutes" : "making the USDC private; it takes a few minutes");
       }
       return jobAnswer(kind, job);
     }
@@ -121774,9 +122190,10 @@ ${canonical5}`;
     }
     return session.openStore();
   }
-  async function unshieldPart(opened, job, unshieldId, amountAtomic, onStage) {
+  async function unshieldPart(opened, job, unshieldId, amountAtomic, onStage, onAnswered) {
     const store = await refreshStaleBeforeUnshield(opened, onStage);
     bindUnshieldRecipient(store, unshieldId, amountAtomic, job.to, unshieldId === moneyId(job.requestId) ? job.requestId : void 0);
+    let backup;
     const result = await (ops.unshield ?? runUnshield)({
       session,
       store,
@@ -121787,17 +122204,40 @@ ${canonical5}`;
       profile: money.profile,
       facilitatorOrigin: money.facilitatorOrigin,
       onStage,
-      ...ops.selfPay ? { selfPayStep: ops.selfPay } : {}
+      ...ops.selfPay ? { selfPayStep: ops.selfPay } : {},
+      ...typeof onAnswered === "function" ? { onAnswered: (answer) => {
+        backup = backupNow(session.openStore());
+        onAnswered({ ...answer, ...backup });
+      } } : {},
+      onCheckPending: (error) => {
+        log(`MCP_UNSHIELD_CHECK_PENDING requestId=${job.requestId} cause=${JSON.stringify(String(error?.message ?? error ?? "").split("\n", 1)[0].slice(0, 240))}`);
+        answeredExitTries.set(`self-pay-${unshieldId}`, { running: false, atMs: Date.now() });
+        armAnsweredExitRetry();
+      }
     });
-    return { ...result, ...backupNow(session.openStore()) };
+    return { ...result, ...backup ?? backupNow(session.openStore()) };
   }
   function runUnshieldJob(job, onStage) {
     if (isSplitSend(job)) return runPrivateSendJob(job, onStage);
     return underLease((opened) => {
       if (!opened.readWal(`self-pay-${moneyId(job.requestId)}`)) assertUnshieldNotPromised(opened, job.amountAtomic);
-      return unshieldPart(opened, job, moneyId(job.requestId), job.amountAtomic, onStage);
+      return unshieldPart(opened, job, moneyId(job.requestId), job.amountAtomic, onStage, (answer) => answerUnshieldEarly(job, answer));
     });
   }
+  function answerUnshieldEarly(job, answer) {
+    job.state = "done";
+    job.doneAtMs = Date.now();
+    job.result = answer;
+    job.answeredEarly = true;
+    job.finishing = true;
+    try {
+      closeJoinIntent(session.openStore(), job.requestId, "done");
+    } catch {
+    }
+    log(`MCP_UNSHIELD_ANSWERED requestId=${job.requestId}`);
+    signalStage(job);
+    job.answerNow?.();
+  }
   async function runPrivateSendJob(job, onStage) {
     const sendId = moneyId(job.requestId);
     let store;
@@ -122009,6 +122449,89 @@ ${canonical5}`;
     }
   }
   const resumeRefusals = /* @__PURE__ */ new Map();
+  const answeredExitTries = /* @__PURE__ */ new Map();
+  let answeredExitRetryTimer;
+  function finishAnsweredExits() {
+    if (!unshieldEnabled || finalityClosed || session.closed === true) return;
+    let store;
+    try {
+      store = session.openStore();
+    } catch {
+      return;
+    }
+    let names = [];
+    try {
+      names = store.listWal().filter((name) => name.startsWith("self-pay-") && !name.startsWith("self-pay-merge-") && !name.startsWith("self-pay-pocket-"));
+    } catch {
+      return;
+    }
+    for (const name of names) {
+      let record;
+      try {
+        record = store.readWal(name);
+      } catch {
+        continue;
+      }
+      if (record?.schema !== SELF_PAY_WAL_SCHEMA || record.state === "exited" || record.exitUnconfirmed === true || typeof record.exitTransaction !== "string" || typeof record.mcpTo !== "string" || !ATOMIC_TEXT.test(String(record.amountAtomic))) continue;
+      const tried = answeredExitTries.get(name);
+      if (tried !== void 0 && (tried.running || Date.now() - tried.atMs < ANSWERED_EXIT_RETRY_MS)) continue;
+      const attempt = { running: true, atMs: Date.now() };
+      answeredExitTries.set(name, attempt);
+      const unshieldId = name.slice("self-pay-".length);
+      log(`MCP_UNSHIELD_CHECK_RESUME unshieldId=${unshieldId}`);
+      underLease((opened) => {
+        const current = opened.readWal(name);
+        if (current?.state === "exited" || current?.exitUnconfirmed === true || typeof current?.exitTransaction !== "string") return void 0;
+        return (ops.unshield ?? runUnshield)({
+          session,
+          store: opened,
+          unshieldId,
+          amountAtomic: current.amountAtomic,
+          recipientOwner: current.mcpTo,
+          exitProofTools: money.exitProofTools,
+          profile: money.profile,
+          facilitatorOrigin: money.facilitatorOrigin,
+          onStage: () => {
+          },
+          ...ops.selfPay ? { selfPayStep: ops.selfPay } : {}
+        });
+      }, { orClosed: ANSWERED_EXIT_CLOSED }).then((result) => {
+        if (result === ANSWERED_EXIT_CLOSED) return;
+        const now = session.openStore().readWal(name);
+        log(now?.state === "exited" ? `MCP_UNSHIELD_CHECK_DONE unshieldId=${unshieldId}` : `MCP_UNSHIELD_CHECK_PENDING unshieldId=${unshieldId}`);
+        if (now?.state === "exited") refreshAtFinality();
+      }, (error) => {
+        const cause = String(error?.message ?? error ?? "").split("\n", 1)[0];
+        attempt.provenUnspent = /confirmed note-exit is not finalized spent/.test(cause);
+        log(`MCP_UNSHIELD_CHECK_PENDING unshieldId=${unshieldId} cause=${JSON.stringify(cause.slice(0, 240))}`);
+      }).then(() => underLease((opened) => {
+        const now = opened.readWal(name);
+        if (attempt.provenUnspent === true && now?.state !== "exited" && now?.exitUnconfirmed !== true && Number.isSafeInteger(now?.exitAnsweredAtMs) && Date.now() - now.exitAnsweredAtMs > ANSWERED_EXIT_UNCONFIRMED_MS) {
+          opened.writeWal(name, { ...now, exitUnconfirmed: true });
+          log(`MCP_UNSHIELD_UNCONFIRMED unshieldId=${unshieldId}`);
+        }
+      }, { orClosed: ANSWERED_EXIT_CLOSED })).catch(() => {
+      }).finally(() => {
+        attempt.running = false;
+        let now;
+        try {
+          now = session.openStore().readWal(name);
+        } catch {
+          now = void 0;
+        }
+        if (now?.state === "exited" || now?.exitUnconfirmed === true || !Number.isSafeInteger(now?.exitAnsweredAtMs) || Date.now() - now.exitAnsweredAtMs > ANSWERED_EXIT_RETRY_WINDOW_MS) return;
+        armAnsweredExitRetry();
+      });
+    }
+  }
+  function armAnsweredExitRetry() {
+    if (finalityClosed || session.closed === true || answeredExitRetryTimer !== void 0) return;
+    answeredExitRetryTimer = setTimeout(() => {
+      answeredExitRetryTimer = void 0;
+      finishAnsweredExits();
+    }, ANSWERED_EXIT_RETRY_MS + 100);
+    answeredExitRetryTimer.unref?.();
+  }
   async function cancelElsewhere(args) {
     const spec = KINDS.elsewhere;
     if (!spec.enabled()) return refuse11("mcp_tool_disabled", `${spec.tool} is off: the owner did not enable it when starting this MCP server`, spec.disabledNext);
@@ -124032,6 +124555,8 @@ ${JSON.stringify(args ?? {})}`;
   ));
   const resumeTimer = resumeSends ? setTimeout(resumePrivateSends, 0) : void 0;
   resumeTimer?.unref?.();
+  const answeredExitTimer = resumeSends ? setTimeout(finishAnsweredExits, 0) : void 0;
+  answeredExitTimer?.unref?.();
   const tempCleanTimer = typeof session.walletPath === "string" ? setTimeout(() => {
     const pool2 = dirname24(session.walletPath);
     removeStaleTemporaryFiles([pool2, join28(pool2, "wal"), join28(pool2, "move-counts")]).then((removed) => {
@@ -124057,6 +124582,8 @@ ${JSON.stringify(args ?? {})}`;
       for (const timer of joinTimers) clearTimeout(timer);
       joinTimers.clear();
       clearTimeout(resumeTimer);
+      clearTimeout(answeredExitTimer);
+      clearTimeout(answeredExitRetryTimer);
       clearTimeout(tempCleanTimer);
       clearTimeout(intentStartTimer);
       clearTimeout(intentTimer);
@@ -124080,6 +124607,7 @@ ${JSON.stringify(args ?? {})}`;
      */
     moving: { value: () => {
       if (moneyCallsInFlight - joinWaitingCalls > 0 || [...jobs.values()].some((job) => job.state === "running")) return true;
+      if ([...jobs.values()].some((job) => job.finishing === true) || [...answeredExitTries.values()].some((attempt) => attempt.running)) return true;
       try {
         return mover.running?.() === true || successionRunning() || transferRuns.size > 0 || Boolean(joiner.status().running) || adopter.busy?.() === true || autoPockets.busy?.() === true || watcher?.depositing?.() === true;
       } catch {
@@ -124388,7 +124916,7 @@ function createSetupTools({
   };
   return { tools: [setupTool, statusTool, ...MCP_TOOL_NAMES.map((name) => name === "x402_discover" ? discoverTool(discoverCacheDir) : notSetUp(name))], doneTool };
 }
-var import_web3133, shownCaps, RELEASE_RETRY_MS, STAGE_WORDS, stageWords, INTERNAL_BALANCE_DETAIL, shownBreakdown, sessionLeftShown, TOKEN_UNIT_TOOLS, RESOURCE_PAYMENT_WAL_PREFIX2, POOL_LAYOUT_CODE, POOL_LAYOUT_UPDATE, USEPOD_VIA_INFERENCE_CHAT, SELF_PAY_ORIGIN3, REQUEST_ID4, POSITIVE_ATOMIC6, PRIVATE_HOST3, FORBIDDEN_HEADERS3, MAX_BODY_BYTES2, PREVIEW_TIMEOUT_MS, PREVIEW_SELLER_READ_MS, CALL_BUDGET_MS, budgetLeft, MONEY_FIRST_ANSWER_MS, JOIN_CALL_MAX_MS, JOIN_STEP_MS, sleep2, PROGRESS_EVERY_MS2, READ_BUDGET_MS, UNPAID_TOR_TRY_MS, UNPAID_CLEAR_MS, READ_BUDGET_TOOLS, FLOAT_BUSY_CODES, RETRY_MARGIN_MS, ASK_PAY_CODES, limitNext, SAFE_TEXT, MCP_TOOL_ALIASES, POOL_SWITCH_WHY, POOL_SWITCH_NEXT, SWITCH_STATES, quietSwitch, switchKey, ATOMIC_TEXT, switchAmount, switchEta, switchRows, OWNER_CAP_CODES, JOIN_END_MCP, JOIN_END_TERMINAL_LIBRARY, JOIN_RETRY_BACKOFF_MS, WALLET_CAP_FIX, capFix, ownerOnlyNext, mcpNext, CONFIDENTIAL_RETIRED, json2, answerResult, discoverTool, refuse11, publicOffer, FLOAT_PAID_CODES, floatStillSettling, MONEY_ID2, toRecordId, linkKindOf, moneyId, REFUSED_CODES, refusedCodeOf, PLAIN_REASONS, plainReason, KEPT_SEND_TRIES, shownId, isSplitSend, sendPartId, PROMISED_NEXT, PUBLIC_READ_TIMEOUT_MS, withTimeout, ownKey, readFailure, OWN_KEY_TOKENS_MAX, OWN_TOKENS_GRACE_MS, tokenAmountText, elsewhereId, AGENT_ID_SCHEMA, agentIdName, minutesText2, DEPOSIT_SENT_STATES, depositLanded, usdcText2, walkWalletHistory, REFRESH_LEASE_WALK_MS, HOME_MARKS_SETTLED_MS2, AUTO_BACKUPS_KEPT, AUTO_BACKUP_NAME, AUTO_BACKUP_VERIFIED, FRONTED_SETTLE_MARGIN_SLOTS, BALANCE_REFRESH_WAIT_MS, BALANCE_REFRESH_GRACE_MS, BALANCE_REFRESH_LONG_MS, INBOUND_REFRESH_AGE_MS, CAP_BALANCE_WAIT_MS, CAP_BALANCE_RETRY_MS, REFRESH_RETRY_MS, FINALITY_POLL_MS, FINALITY_WAIT_MS, FINALITY_REFRESH_LIMIT_MS, POOL_WATCH_MS, POOL_WATCH_POLL_MS, EARLY_BALANCE_DELAY_MS, FINALITY_SETTLE_WINDOW_SLOTS, PUBLIC_READ_ANSWER_MS, SWITCH_WAIT_MS, UNSHIELD_TO_NO_USDC_DETAIL, UNSHIELD_TO_INVALID_NEXT, INFERENCE_MIN_MAX_TOKENS, ELICIT_TIMEOUT_MS, ELICIT_UNSHOWN_MS, elicitUnshown, POLL_SECONDS3, TEMP_CLEAN_DELAY_MS, KEPT_ON_DISK, MAX_SHIELDED_BALANCE_ATOMIC, receiveGenerator, MCP_TOOL_NAMES, MCP_HIDDEN_TOOL_NAMES, SETUP_TERMINAL_NEXT, SETUP_POLL_NEXT, PRIVATE_INFERENCE_WHY, PRIVATE_INFERENCE_NEXT;
+var import_web3133, shownCaps, RELEASE_RETRY_MS, STAGE_WORDS, stageWords, INTERNAL_BALANCE_DETAIL, shownBreakdown, sessionLeftShown, TOKEN_UNIT_TOOLS, RESOURCE_PAYMENT_WAL_PREFIX2, POOL_LAYOUT_CODE, POOL_LAYOUT_UPDATE, USEPOD_VIA_INFERENCE_CHAT, SELF_PAY_ORIGIN3, REQUEST_ID4, POSITIVE_ATOMIC6, PRIVATE_HOST3, FORBIDDEN_HEADERS3, MAX_BODY_BYTES2, PREVIEW_TIMEOUT_MS, PREVIEW_SELLER_READ_MS, CALL_BUDGET_MS, budgetLeft, MONEY_FIRST_ANSWER_MS, JOIN_CALL_MAX_MS, JOIN_STEP_MS, sleep2, PROGRESS_EVERY_MS2, READ_BUDGET_MS, UNPAID_TOR_TRY_MS, UNPAID_CLEAR_MS, READ_BUDGET_TOOLS, FLOAT_BUSY_CODES, RETRY_MARGIN_MS, ASK_PAY_CODES, limitNext, SAFE_TEXT, MCP_TOOL_ALIASES, POOL_SWITCH_WHY, POOL_SWITCH_NEXT, SWITCH_STATES, quietSwitch, switchKey, ATOMIC_TEXT, ANSWERED_EXIT_RETRY_MS, ANSWERED_EXIT_UNCONFIRMED_MS, ANSWERED_EXIT_RETRY_WINDOW_MS, ANSWERED_EXIT_CLOSED, switchAmount, switchEta, switchRows, OWNER_CAP_CODES, JOIN_END_MCP, JOIN_END_TERMINAL_LIBRARY, JOIN_RETRY_BACKOFF_MS, WALLET_CAP_FIX, capFix, ownerOnlyNext, mcpNext, CONFIDENTIAL_RETIRED, json2, answerResult, discoverTool, refuse11, publicOffer, FLOAT_PAID_CODES, floatStillSettling, MONEY_ID2, toRecordId, linkKindOf, moneyId, REFUSED_CODES, refusedCodeOf, PLAIN_REASONS, plainReason, KEPT_SEND_TRIES, shownId, isSplitSend, sendPartId, PROMISED_NEXT, PUBLIC_READ_TIMEOUT_MS, withTimeout, ownKey, readFailure, OWN_KEY_TOKENS_MAX, OWN_TOKENS_GRACE_MS, tokenAmountText, elsewhereId, AGENT_ID_SCHEMA, agentIdName, minutesText2, DEPOSIT_SENT_STATES, depositLanded, usdcText2, walkWalletHistory, REFRESH_LEASE_WALK_MS, HOME_MARKS_SETTLED_MS2, AUTO_BACKUPS_KEPT, AUTO_BACKUP_NAME, AUTO_BACKUP_VERIFIED, FRONTED_SETTLE_MARGIN_SLOTS, BALANCE_REFRESH_WAIT_MS, BALANCE_REFRESH_GRACE_MS, BALANCE_REFRESH_LONG_MS, INBOUND_REFRESH_AGE_MS, CAP_BALANCE_WAIT_MS, CAP_BALANCE_RETRY_MS, REFRESH_RETRY_MS, FINALITY_POLL_MS, FINALITY_WAIT_MS, FINALITY_REFRESH_LIMIT_MS, POOL_WATCH_MS, POOL_WATCH_POLL_MS, EARLY_BALANCE_DELAY_MS, FINALITY_SETTLE_WINDOW_SLOTS, PUBLIC_READ_ANSWER_MS, SWITCH_WAIT_MS, UNSHIELD_TO_NO_USDC_DETAIL, UNSHIELD_TO_INVALID_NEXT, INFERENCE_MIN_MAX_TOKENS, ELICIT_TIMEOUT_MS, ELICIT_UNSHOWN_MS, elicitUnshown, POLL_SECONDS3, TEMP_CLEAN_DELAY_MS, KEPT_ON_DISK, MAX_SHIELDED_BALANCE_ATOMIC, receiveGenerator, MCP_TOOL_NAMES, MCP_HIDDEN_TOOL_NAMES, SETUP_TERMINAL_NEXT, SETUP_POLL_NEXT, PRIVATE_INFERENCE_WHY, PRIVATE_INFERENCE_NEXT;
 var init_tools = __esm({
   "wallet/src/mcp/tools.mjs"() {
     "use strict";
@@ -124523,6 +125051,10 @@ var init_tools = __esm({
     quietSwitch = (item) => item.state === "done" && item.tellUser !== true;
     switchKey = (item) => `${item.from}:${item.state}`;
     ATOMIC_TEXT = /^[0-9]{1,31}$/;
+    ANSWERED_EXIT_RETRY_MS = 3e4;
+    ANSWERED_EXIT_UNCONFIRMED_MS = 10 * 6e4;
+    ANSWERED_EXIT_RETRY_WINDOW_MS = 30 * 6e4;
+    ANSWERED_EXIT_CLOSED = /* @__PURE__ */ Symbol("answered-exit-closed");
     switchAmount = (atomic4, decimals) => {
       try {
         return ATOMIC_TEXT.test(String(atomic4)) ? formatAtomic(BigInt(atomic4), decimals) : null;