shinjuku-shielded 0.3.73 → 0.3.74

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "ff6f25bccfd2a50929a8dc82137b4fb42172790f9d71a6c07f166bda3e052d22",
-  "bytes": 12210958,
-  "sourceCommit": "0e33e750c294c38e85c041b105e87cf864edd5db",
+  "sha256": "bf5ad0c16095110ed0258b16525e55dc743dbaa36b6ba0e0738d4ab9c185ce90",
+  "bytes": 12226842,
+  "sourceCommit": "48cab6600f17f6d97cd27fcb657eaf344c1257ef",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1282,5 +1282,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-10-22T18:10:20.059Z"
+  "publishedAt": "2026-10-22T19:31:45.493Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.73",
+  "version": "0.3.74",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "ff6f25bc",
-  "shinjukuSha256": "ff6f25bccfd2a50929a8dc82137b4fb42172790f9d71a6c07f166bda3e052d22",
+  "shinjukuRelease": "bf5ad0c1",
+  "shinjukuSha256": "bf5ad0c16095110ed0258b16525e55dc743dbaa36b6ba0e0738d4ab9c185ce90",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-mcp#readme",

package/shinjuku-wallet.mjs

@@ -42600,6 +42600,11 @@ var init_rpcDefault = __esm({
 });
 
 // wallet/src/net/facilitatorOnion.mjs
+function takeSiteOnionRaces() {
+  if (siteRacesTaken) return Promise.resolve([]);
+  siteRacesTaken = true;
+  return Promise.all(siteRaces);
+}
 function onionInit(init = {}) {
   if (init.dispatcher) return init;
   try {
@@ -42637,7 +42642,8 @@ function raceOnions(onions, {
   onNone,
   spares = [],
   spareAfterMs = SPARE_AFTER_MS,
-  onSpares
+  onSpares,
+  onProbe
 } = {}) {
   const controller = new AbortController();
   const signal = AbortSignal.any([controller.signal, AbortSignal.timeout(timeoutMs)]);
@@ -42667,9 +42673,22 @@ function raceOnions(onions, {
       if (!controller.signal.aborted) onNone?.();
       settle(onions[0]);
     };
+    const told = (onion, event) => {
+      try {
+        onProbe?.(onion, event);
+      } catch {
+      }
+    };
     const start = (onion) => {
       open3 += 1;
-      probe(onion).then(settle, failed);
+      told(onion, "start");
+      probe(onion).then((won) => {
+        told(onion, "answered");
+        settle(won);
+      }, () => {
+        told(onion, controller.signal.aborted ? "stopped" : signal.aborted ? "timeout" : "failed");
+        failed();
+      });
     };
     startSpares = (cause) => {
       if (sparesStarted || done || signal.aborted) return;
@@ -42790,6 +42809,33 @@ async function routeFacilitatorsOverOnion(argv2, {
   const race = (group, onions, options) => {
     let unanswered2 = false;
     const onNone = options.onNone;
+    const first = firstRaces.has(group.label) ? void 0 : { startedAt: Date.now() };
+    if (first) firstRaces.set(group.label, first);
+    let site;
+    let ended;
+    if (first && !group.path) {
+      site = { startedAt: first.startedAt, probes: [] };
+      siteRaces.push(new Promise((resolve38) => {
+        ended = resolve38;
+      }));
+      const pinned = group.onions.length - (group.spares?.length ?? 0);
+      const role = (onion) => {
+        const index = group.onions.indexOf(onion);
+        return index < pinned ? `pinned${index + 1}` : `spare${index - pinned + 1}`;
+      };
+      const note = (entry) => {
+        if (site.endedAt === void 0) site.probes.push({ ...entry, at: Date.now() });
+      };
+      const onSpares = options.onSpares;
+      options = {
+        ...options,
+        onProbe: (onion, event) => note({ role: role(onion), event }),
+        ...onSpares ? { onSpares: (info) => {
+          note({ role: "spares", event: "join" });
+          onSpares(info);
+        } } : {}
+      };
+    }
     const raced = raceOnions(onions, {
       fetchImpl,
       timeoutMs: raceTimeoutMs,
@@ -42800,10 +42846,18 @@ async function routeFacilitatorsOverOnion(argv2, {
         onNone?.();
       }
     });
-    const first = firstRaces.has(group.label) ? void 0 : { startedAt: Date.now() };
-    if (first) firstRaces.set(group.label, first);
     group.pending = raced.winner.then((onion) => {
       if (first) Object.assign(first, { endedAt: Date.now(), answered: !unanswered2 });
+      if (site) {
+        const open3 = /* @__PURE__ */ new Set();
+        for (const probe of site.probes) {
+          if (probe.event === "start") open3.add(probe.role);
+          else open3.delete(probe.role);
+        }
+        for (const role of open3) site.probes.push({ role, event: "stopped", at: first.endedAt });
+        Object.assign(site, { endedAt: first.endedAt, answered: !unanswered2 });
+        ended(site);
+      }
       group.winner = onion;
       group.pending = void 0;
       if (!unanswered2 && !raced.stopped) err(`tor: the onion ${hostOf(onion)} of ${group.label} answered first; it serves this run's requests to it
@@ -42904,18 +42958,18 @@ async function routeFacilitatorsOverOnion(argv2, {
     }
   };
 }
-var SITE_ONIONS, SITE_SPARE_ONIONS, PINNED_FACILITATOR_ONIONS, PINNED_SPARE_ONIONS, HISTORY_ONIONS, PINNED_HISTORY_ONIONS, HISTORY_PROBE_PATH, FACILITATOR_FLAGS, V3_ONION, DISCOVERY_TIMEOUT_MS, WARM_TIMEOUT_MS, RACE_TIMEOUT_MS, ROUTE_WAIT_MS, SPARE_AFTER_MS, SPARE_CAUSE, routedGroups, liveOnions, hostOf, noAnswer, routedOnions, routedOrigins, onionsOfOrigin, routesOverOnion, firstRaces, firstOnionRace, GLOBAL_DISPATCHER, onionDispatchers;
+var SITE_ONIONS, SITE_SPARE_ONIONS, PINNED_FACILITATOR_ONIONS, PINNED_SPARE_ONIONS, HISTORY_ONIONS, PINNED_HISTORY_ONIONS, HISTORY_PROBE_PATH, FACILITATOR_FLAGS, V3_ONION, DISCOVERY_TIMEOUT_MS, WARM_TIMEOUT_MS, RACE_TIMEOUT_MS, ROUTE_WAIT_MS, SPARE_AFTER_MS, SPARE_CAUSE, routedGroups, liveOnions, hostOf, noAnswer, routedOnions, routedOrigins, onionsOfOrigin, routesOverOnion, firstRaces, siteRaces, siteRacesTaken, firstOnionRace, GLOBAL_DISPATCHER, onionDispatchers;
 var init_facilitatorOnion = __esm({
   "wallet/src/net/facilitatorOnion.mjs"() {
     "use strict";
     init_rpcDefault();
     SITE_ONIONS = Object.freeze([
       "http://2kfhlfuyuwvhmibjrpxqsg4nrbcxasjgjq7kmnfzgfwzptkhhznz3dad.onion",
-      "http://chhgw7nfggqhhjawz54bpsiihdow66s2yvkh6ccnugpcdmhhww6xkkqd.onion"
+      "http://vofhhl336r4bnwn7hid2uvqaa72wx66xkdu2yt4n54xljsxwn2yds6qd.onion"
     ]);
     SITE_SPARE_ONIONS = Object.freeze([
       "http://ntr5qkdfgff4gspwderjnqtkzekyhb5a4j76ov4dqncxmcb53gdsmmid.onion",
-      "http://vofhhl336r4bnwn7hid2uvqaa72wx66xkdu2yt4n54xljsxwn2yds6qd.onion"
+      "http://chhgw7nfggqhhjawz54bpsiihdow66s2yvkh6ccnugpcdmhhww6xkkqd.onion"
     ]);
     PINNED_FACILITATOR_ONIONS = Object.freeze({
       "https://shinjukustaition.com": SITE_ONIONS,
@@ -42955,6 +43009,8 @@ var init_facilitatorOnion = __esm({
     onionsOfOrigin = (origin) => routedOrigins.get(origin) ?? PINNED_FACILITATOR_ONIONS[origin] ?? [];
     routesOverOnion = (origin) => routedOrigins.has(origin);
     firstRaces = /* @__PURE__ */ new Map();
+    siteRaces = [];
+    siteRacesTaken = false;
     firstOnionRace = (origin) => {
       const race = firstRaces.get(origin);
       return race === void 0 ? void 0 : { ...race };
@@ -46739,6 +46795,16 @@ function markPhase(phase, outcome) {
   } catch {
   }
 }
+function poolReadOutcome(slot3, moved) {
+  let text3;
+  try {
+    text3 = BigInt(slot3).toString();
+  } catch {
+    return void 0;
+  }
+  if (!/^\d{1,20}$/.test(text3)) return void 0;
+  return `slot${text3}${Number.isSafeInteger(moved) && moved >= 0 ? `_moved${moved}` : ""}`;
+}
 var scope, phaseScopeActive;
 var init_phaseTiming = __esm({
   "wallet/src/pay/phaseTiming.mjs"() {
@@ -53881,7 +53947,7 @@ async function refreshedFromSnapshot({ connection, program, poolKey, authenticat
   if (snapshot.terminal !== authenticated.finalizedPoolSnapshot.terminal || snapshot.currentIndex !== authenticated.finalizedPoolSnapshot.currentIndex || snapshot.currentRoot !== authenticated.finalizedPoolSnapshot.currentRoot || !sameP03PoolPolicy(snapshot, authenticated.finalizedPoolSnapshot.policy) || !sameE1TreeHeader(snapshot, authenticated.finalizedPoolSnapshot.e1Tree, program, poolKey) || paymentSettler !== void 0 && snapshot.paymentSettler?.toBase58() !== paymentSettler) {
     throw Object.assign(
       new Error("p03_history_refresh_transition_detected"),
-      { currentIndex: snapshot.currentIndex, snapshotBinding: { programId: b58(program), pool: poolKey.toBase58() } }
+      { currentIndex: snapshot.currentIndex, snapshotSlot: snapshot.slot, snapshotBinding: { programId: b58(program), pool: poolKey.toBase58() } }
     );
   }
   const priorCoverage = authenticated.deploymentCoverage;
@@ -54131,7 +54197,8 @@ async function readFinalizedPoolSliced(connection, program, pool2) {
   } catch {
     snapshot = void 0;
   }
-  markPhase(snapshot === void 0 ? "pool-sliced-fallback-answer" : "pool-sliced");
+  if (snapshot === void 0) markPhase("pool-sliced-fallback-answer");
+  else markPhase("pool-sliced", poolReadOutcome(snapshot.slot));
   return snapshot;
 }
 async function readFinalizedPoolForRefresh(connection, program, pool2) {
@@ -57993,7 +58060,7 @@ async function readCompactP03HistoryNow({
     }
   }
   snapshot ??= await readFinalizedPool(own, program, poolKey, { treeSlices: true });
-  markPhase(knownSnapshot !== void 0 ? "compact-pool-reused" : "compact-pool");
+  markPhase(knownSnapshot !== void 0 ? "compact-pool-reused" : "compact-pool", poolReadOutcome(snapshot.slot));
   if (snapshot.terminal) throw refuse3("p03_compact_history_pool_terminal");
   if (snapshot.currentIndex % SUBTREE_LEAVES3 !== 0n) throw refuse3("p03_compact_history_snapshot_invalid");
   const count2 = Number(snapshot.currentIndex / SUBTREE_LEAVES3);
@@ -59463,7 +59530,7 @@ async function walkWalletP03HistoryNow({ store, connection: given, programId, po
     })();
     try {
       const refreshed = await refreshing;
-      markPhase("walk-refreshed");
+      markPhase("walk-refreshed", poolReadOutcome(refreshed?.finalizedPoolSnapshot?.slot));
       if (page0Asked) {
         markPhase(page0Answered ? "compact-page0-answered-before-hit" : "compact-page0-read-on-after-hit");
         const currentIndex = refreshed?.finalizedPoolSnapshot?.currentIndex;
@@ -59476,10 +59543,10 @@ async function walkWalletP03HistoryNow({ store, connection: given, programId, po
       writeStderr("history: the pool made no transition since this run's last walk; that history was moved to the current pool account " + (fromSliced ? "(your own RPC read the pool account and the program's deployment account in one request)\n" : "(your own RPC read the pool account and the program's deployment account; the history source answered one signature read)\n"));
       return refreshed;
     } catch (error) {
-      markPhase("refresh-missed");
-      if (error?.message === "p03_history_refresh_transition_detected" && typeof error.currentIndex === "bigint" && error.snapshotBinding?.programId === String(programId) && error.snapshotBinding?.pool === String(pool2)) {
-        movedIndex = error.currentIndex;
-      }
+      const moved = error?.message === "p03_history_refresh_transition_detected" && typeof error.currentIndex === "bigint" && error.snapshotBinding?.programId === String(programId) && error.snapshotBinding?.pool === String(pool2);
+      const earlierIndex = earlier.finalizedPoolSnapshot?.currentIndex;
+      markPhase("refresh-missed", moved ? poolReadOutcome(error.snapshotSlot, typeof earlierIndex === "bigint" ? Number((error.currentIndex - earlierIndex) / SUBTREE_LEAVES4) : void 0) : void 0);
+      if (moved) movedIndex = error.currentIndex;
       floor?.reset();
       if (strict) floor?.strict();
     }
@@ -74055,6 +74122,10 @@ async function runRecoveredP03NoteExit({
   photonUrl,
   // Parsed --recovered-note-file (recoveredNotesFromFile): notes the walk cannot find.
   recoveredNoteFile,
+  // Relay path only (realSpeed3 2026-10-22, mcp55 Part 1): return once the relay answered (it answers only after the
+  // exit is finalized) and the "confirmed" record holds the signature, with `settled: false` and `finish`, the post-exit
+  // walk and postcondition below. The caller runs `finish` after its own answer; a rerun of this exit resumes the same way.
+  answerAtRelay = false,
   deps = {}
 }) {
   const state = store.state;
@@ -74484,39 +74555,46 @@ async function runRecoveredP03NoteExit({
   }
   wal = { ...wal, state: "confirmed", signature: signature2 };
   store.writeWal(walName2, wal);
-  for (let attempt = 1; ; attempt += 1) {
-    history = await walkHistory();
-    markPhase("exit-post-walk");
-    poolState2 = await readPool2(connection, pool2, "finalized");
-    if (!poolState2 || !poolState2.owner.equals(chainProgramId) || poolState2.version !== 3) {
-      throw new Error("finalized note-exit pool postcondition invalid");
+  const preExitHistory = history;
+  const finish = async () => {
+    for (let attempt = 1; ; attempt += 1) {
+      history = await walkHistory();
+      markPhase("exit-post-walk");
+      poolState2 = await readPool2(connection, pool2, "finalized");
+      if (!poolState2 || !poolState2.owner.equals(chainProgramId) || poolState2.version !== 3) {
+        throw new Error("finalized note-exit pool postcondition invalid");
+      }
+      if (attempt >= 4 || history.finalizedPoolSnapshot.currentIndex === poolState2.currentIndex && history.finalizedPoolSnapshot.currentRoot === poolState2.currentRoot) break;
     }
-    if (attempt >= 4 || history.finalizedPoolSnapshot.currentIndex === poolState2.currentIndex && history.finalizedPoolSnapshot.currentRoot === poolState2.currentRoot) break;
-  }
-  await prepareFold(history);
-  const spentPath = buildRecoveryPath({
-    history,
-    recoveredOutput: recoveredForPath,
-    circuitSource: p03CircuitSource,
-    anchor: recoveryPath.anchor
-  });
-  if (spentPath.spendStatus !== "spent" || poolState2.currentIndex < frontier.nextIndex + 128n || history.finalizedPoolSnapshot.currentIndex !== poolState2.currentIndex || history.finalizedPoolSnapshot.currentRoot !== poolState2.currentRoot) {
-    throw new Error("finalized note-exit postcondition failed");
+    await prepareFold(history);
+    const spentPath = buildRecoveryPath({
+      history,
+      recoveredOutput: recoveredForPath,
+      circuitSource: p03CircuitSource,
+      anchor: recoveryPath.anchor
+    });
+    if (spentPath.spendStatus !== "spent" || poolState2.currentIndex < frontier.nextIndex + 128n || history.finalizedPoolSnapshot.currentIndex !== poolState2.currentIndex || history.finalizedPoolSnapshot.currentRoot !== poolState2.currentRoot) {
+      throw new Error("finalized note-exit postcondition failed");
+    }
+    store.writeWal(walName2, { ...wal, state: "settled" });
+    return Object.freeze({
+      signature: signature2,
+      replayed: false,
+      noteCommitment: selected.commitment,
+      amountAtomic: amount,
+      poolIndex: poolState2.currentIndex,
+      manifestSha256: proved.manifestSha256,
+      ...denomination.record ? { denominationPolicy: denomination.record } : {},
+      ...denominationWarnings.length > 0 ? { denominationWarnings } : {},
+      ...foreignRecipient ? { recipientOwner: expectedRecipientOwner.toBase58() } : {},
+      ...relayed ? { broadcaster: broadcasterKey } : {},
+      ...relaySubmit ? { facilitatorRelay: true } : {}
+    });
+  };
+  if (answerAtRelay === true && relaySubmit) {
+    return Object.freeze({ signature: signature2, settled: false, noteCommitment: selected.commitment, amountAtomic: amount, preExitHistory, finish });
   }
-  store.writeWal(walName2, { ...wal, state: "settled" });
-  return Object.freeze({
-    signature: signature2,
-    replayed: false,
-    noteCommitment: selected.commitment,
-    amountAtomic: amount,
-    poolIndex: poolState2.currentIndex,
-    manifestSha256: proved.manifestSha256,
-    ...denomination.record ? { denominationPolicy: denomination.record } : {},
-    ...denominationWarnings.length > 0 ? { denominationWarnings } : {},
-    ...foreignRecipient ? { recipientOwner: expectedRecipientOwner.toBase58() } : {},
-    ...relayed ? { broadcaster: broadcasterKey } : {},
-    ...relaySubmit ? { facilitatorRelay: true } : {}
-  });
+  return finish();
 }
 function loadBroadcasterKeypairFile(path) {
   let text3;
@@ -95998,11 +96076,11 @@ function dropFloatConfigs() {
   configCache.clear();
   configReads.clear();
 }
-function warmFloatConfig({ origin, fetchImpl = fetch } = {}) {
+function warmFloatConfig({ origin, fetchImpl = fetch, timing } = {}) {
   try {
     const kept = configCache.get(origin);
     if (kept && Date.now() - kept.readAtMs < CONFIG_CACHE_MS && floatPoolRecentlyUsed(FLOAT_POOL_WARM_MS) || configReads.has(origin)) return;
-    const read = readFloatConfig({ origin, fetchImpl });
+    const read = timedConfigRead({ origin, fetchImpl, timing, route: "warm" });
     configReads.set(origin, read);
     read.then(
       () => {
@@ -96015,6 +96093,18 @@ function warmFloatConfig({ origin, fetchImpl = fetch } = {}) {
   } catch {
   }
 }
+function timedConfigRead({ origin, fetchImpl, timing, route }) {
+  const mark = (phase) => {
+    try {
+      timing?.(phase);
+    } catch {
+    }
+  };
+  mark("float-config-start");
+  const read = readFloatConfig({ origin, fetchImpl });
+  read.then(() => mark(`float-config-answered-${route}`), () => mark(`float-config-failed-${route}`));
+  return read;
+}
 function refreshFloatConfig(origin, fetchImpl) {
   try {
     if (configRefreshes.has(origin) || configReads.has(origin)) return;
@@ -96031,19 +96121,32 @@ function refreshKeptFloatConfig({ origin, fetchImpl = fetch } = {}) {
   } catch {
   }
 }
-async function readFloatOffer({ origin, paymentRequired, store, resourceUrl, fetchImpl = fetch }) {
+async function readFloatOffer({ origin, paymentRequired, store, resourceUrl, fetchImpl = fetch, timing }) {
+  const mark = (phase) => {
+    try {
+      timing?.(phase);
+    } catch {
+    }
+  };
   const inFlight = configReads.get(origin);
   if (inFlight) await inFlight.catch(() => void 0);
   const kept = configCache.get(origin);
   if (kept && Date.now() - kept.readAtMs < CONFIG_CACHE_MS) {
     try {
-      return { offer: floatOffer({ paymentRequired, store, config: kept.config, resourceUrl }), config: kept.config };
+      const offer = floatOffer({ paymentRequired, store, config: kept.config, resourceUrl });
+      mark(inFlight ? "float-config-joined-warm" : "float-config-joined-kept");
+      return { offer, config: kept.config };
     } catch {
       configCache.delete(origin);
     }
   }
   const warm = configReads.get(origin);
-  const config = (warm ? await warm.catch(() => void 0) : void 0) ?? await readFloatConfig({ origin, fetchImpl });
+  let config = warm ? await warm.catch(() => void 0) : void 0;
+  if (config !== void 0) mark("float-config-joined-warm");
+  else {
+    config = await timedConfigRead({ origin, fetchImpl, timing, route: "read" });
+    mark("float-config-joined-read");
+  }
   return { offer: floatOffer({ paymentRequired, store, config, resourceUrl }), config };
 }
 function keepSellerTerms(origin, url, paymentRequired) {
@@ -98761,6 +98864,15 @@ async function openPayerSession({
   notePayHost(memoService);
   const connection = connectRelay(rpc2, "finalized");
   const timingLog = createTimingLog(`${path}.timing.log`, { component: "payer" });
+  takeSiteOnionRaces().then((races) => {
+    for (const race of races) {
+      const mark = timingLog.start({ startedAt: race.startedAt });
+      mark("onion:race-start", void 0, race.startedAt);
+      for (const probe of race.probes) mark(`onion:${probe.role}-${probe.event}`, void 0, probe.at);
+      mark("onion:race-end", race.answered ? "answered" : "none", race.endedAt);
+    }
+  }).catch(() => {
+  });
   let closed = false;
   let queue = Promise.resolve();
   const session = {
@@ -98820,6 +98932,7 @@ var init_session = __esm({
     init_processLease();
     init_proxy();
     init_keepAlive();
+    init_facilitatorOnion();
     RELAY_READ_TIMEOUT_MS = 3e4;
     READ_ONLY_METHOD = /^(get[A-Za-z]+|simulateTransaction|isBlockhashValid|minimumLedgerSlot)$/;
     connectRelay = (rpcUrl, commitment = "finalized") => connect2(rpcUrl, commitment, { wrapFetch: (fetch2) => relayRpcFetch(fetch2) });
@@ -104588,6 +104701,20 @@ function computeBalance({ store, snapshotRead, source = "local", now = Date.now(
     const inputs = provenInputs(byName.get(`resource-proof-${entry.name.slice("resource-payment-".length)}`)?.record);
     return Boolean(digest2) && snapshotDigests.has(digest2) && inputs !== void 0 && inputs.length > 0 && inputs.every((commitment) => spentInSnapshot.has(commitment));
   };
+  const answeredExits = /* @__PURE__ */ new Map();
+  for (const entry of records) {
+    if (entry.type !== "unshield" || entry.name.startsWith(POCKET_FILL_RECORD) || entry.name.startsWith(MERGE_RECORD) || !Number.isSafeInteger(entry.record.exitAnsweredAtMs) || typeof entry.record.exitTransaction !== "string" || !canonicalAtomic(String(entry.record.noteCommitment ?? ""))) continue;
+    answeredExits.set(String(entry.record.noteCommitment), {
+      changeAtomic: canonicalAtomic(entry.record.changeAtomic) ? BigInt(entry.record.changeAtomic) : 0n,
+      unconfirmed: entry.record.exitUnconfirmed === true
+    });
+  }
+  const answeredSettling = (note, answered) => {
+    const output2 = unspent.get(note);
+    if (output2 === void 0) return void 0;
+    const exited = BigInt(output2.valueAtomic) - answered.changeAtomic;
+    return exited > 0n ? { inputs: [note], amountAtomic: exited, join: false } : void 0;
+  };
   for (const entry of records) {
     const before = Object.hasOwn(snapshot.walStates, entry.name) ? snapshot.walStates[entry.name] : void 0;
     const beforePhase = before === void 0 ? "absent" : entry.type === "payment-proof" ? entry.phase : classify(entry.name, { ...entry.record, state: before }).phase;
@@ -104595,6 +104722,18 @@ function computeBalance({ store, snapshotRead, source = "local", now = Date.now(
     const join37 = entry.type === "payment" && joinedAccountOf(entry, byName) !== void 0;
     if (entry.phase === "done" && beforePhase !== "done") {
       if (join37 && snapshotDigests.has(digestKey(entry.record.memoDigest))) continue;
+      const answeredExit = ["unshield", "note-exit"].includes(entry.type) ? answeredExits.get(String(entry.record.noteCommitment)) : void 0;
+      if (answeredExit !== void 0) {
+        const note = String(entry.record.noteCommitment);
+        if (spentInSnapshot.has(note) || entry.type === "note-exit" && unspent.has(note)) continue;
+        const exiting = answeredSettling(note, answeredExit);
+        if (exiting) {
+          settling.push(exiting);
+          noteSettling(entry.name);
+          settlingReasons.push(`unshield record ${entry.name} was answered after the last refresh: its exit is final on chain and the balance counts it as sent; refresh again in a minute`);
+          continue;
+        }
+      }
       const paying = settlingPayment(entry);
       if (paying) {
         settling.push(paying);
@@ -104672,6 +104811,24 @@ function computeBalance({ store, snapshotRead, source = "local", now = Date.now(
       listedNotes.add(note);
       const fill = entry.name.startsWith(POCKET_FILL_RECORD);
       const merge = entry.name.startsWith(MERGE_RECORD);
+      const answered = answeredExits.get(note);
+      if (answered !== void 0) {
+        const exiting = answered.changeAtomic > 0n && !spentInWalk.has(note) ? answeredSettling(note, answered) : void 0;
+        if (exiting) {
+          settling.push(exiting);
+          noteSettling(entry.name);
+          settlingReasons.push(`unshield record ${entry.name} was answered: its exit is final on chain and the balance counts it as sent; its change becomes spendable at the next refresh`);
+        }
+        detail.inFlight.push({
+          kind: "unshield-exit",
+          state: entry.state,
+          amountAtomic: entry.record.amountAtomic ?? null,
+          answered: true,
+          inputs: exiting ? "settling" : reserve([note], `unshield ${entry.name}`),
+          next: answered.unconfirmed ? "rerun the same unshield command; it resumes the exit (the pool history has not shown this exit as spent for 10 minutes)" : "nothing to do: the exit is final on chain and this wallet checks it against the pool history by itself"
+        });
+        continue;
+      }
       const inputs = reserve(
         [note],
         `unshield ${entry.name}`,
@@ -104715,7 +104872,8 @@ function computeBalance({ store, snapshotRead, source = "local", now = Date.now(
   }
   const anchorIndex = canonicalAtomic(snapshot.anchorIndex) ? BigInt(snapshot.anchorIndex) : void 0;
   detail.fundedAccounts = unknownInputs ? 0 : [...unspent.values()].filter((output2) => output2.kind === "account" && BigInt(output2.valueAtomic) > 0n && !reserved.has(output2.commitment) && !joining.has(output2.commitment) && !settlingInputs.has(output2.commitment) && (anchorIndex === void 0 || BigInt(output2.leafIndex) < anchorIndex)).length;
-  const next = detail.inFlight.length ? "finish or cancel the work in detail.inFlight; the wallet runs one payment at a time" : pendingDeposits.length ? `deposit ${pendingDeposits[0].depositId} is not finished: rerun the same deposit command with --submit --service <facilitator URL>` : pocketsUnscanned ? scanPockets2 : unspentAtomic === 0n && successionMovableAtomic > 0n ? "this pool was succeeded by a new pool: its value moves there (a move per account, the facilitator pays the fee) and counts in this balance until then" : unspentAtomic === 0n ? "nothing to spend: deposit (shinjuku-wallet help deposit), or run balance --refresh if a payment to this wallet settled" : void 0;
+  const answeredOnly = detail.inFlight.length > 0 && detail.inFlight.every((item) => item.answered === true);
+  const next = answeredOnly ? detail.inFlight.find((item) => item.next.startsWith("rerun"))?.next ?? "nothing to do: an answered unshield finishes its check by itself" : detail.inFlight.length ? "finish or cancel the work in detail.inFlight; the wallet runs one payment at a time" : pendingDeposits.length ? `deposit ${pendingDeposits[0].depositId} is not finished: rerun the same deposit command with --submit --service <facilitator URL>` : pocketsUnscanned ? scanPockets2 : unspentAtomic === 0n && successionMovableAtomic > 0n ? "this pool was succeeded by a new pool: its value moves there (a move per account, the facilitator pays the fee) and counts in this balance until then" : unspentAtomic === 0n ? "nothing to spend: deposit (shinjuku-wallet help deposit), or run balance --refresh if a payment to this wallet settled" : void 0;
   if (movedInAtomic > 0n) {
     settlingReasons.push(`${formatAtomic(movedInAtomic, decimals)} moved into this pool from the old pool after the last refresh: the balance counts it; refresh again in a minute`);
   }
@@ -104850,7 +105008,7 @@ function requestBody(method, body) {
   if (bytes2.length > 1024 * 1024) fail24("fetch_options_invalid", "the body is over 1 MiB");
   return bytes2;
 }
-async function offeredPrice(paymentRequired, store, serviceUrl2, target) {
+async function offeredPrice(paymentRequired, store, serviceUrl2, target, timing) {
   let rail = paymentRail(paymentRequired);
   if (rail === "confidential" && paymentRequired.accepts.some((offer) => offer?.scheme === "exact")) rail = "exact";
   if (rail === "none") {
@@ -104861,7 +105019,7 @@ async function offeredPrice(paymentRequired, store, serviceUrl2, target) {
   }
   if (rail === "exact" && store) {
     const origin = new URL(serviceUrl2).origin;
-    const { offer, config } = await readFloatOffer({ origin, paymentRequired, store, resourceUrl: target });
+    const { offer, config } = await readFloatOffer({ origin, paymentRequired, store, resourceUrl: target, timing });
     return { rail, amountAtomic: offer.paidAtomic, priceAtomic: offer.priceAtomic, floatConfig: { origin, config } };
   }
   let highest;
@@ -104971,7 +105129,7 @@ async function payAndFetch(session, url, init = {}, opts = {}) {
         if (ahead) {
           mark("leg1-ahead");
         } else {
-          warmFloatConfig({ origin: new URL(session.memoServiceUrl).origin });
+          warmFloatConfig({ origin: new URL(session.memoServiceUrl).origin, timing: mark });
         }
         startRecoveredPaymentTools(lazyProofTools(session));
       }
@@ -104995,7 +105153,7 @@ async function payAndFetch(session, url, init = {}, opts = {}) {
       }
       challenge3 = { encoded, atMs: Date.now() };
       mark("fetch-challenge");
-      price = await offeredPrice(paymentRequired, store ?? session.openStore(), session.memoServiceUrl, target);
+      price = await offeredPrice(paymentRequired, store ?? session.openStore(), session.memoServiceUrl, target, mark);
       mark("fetch-price");
       if (maxPrice !== void 0 && BigInt(price.priceAtomic) > BigInt(maxPrice)) {
         fail24(
@@ -109097,7 +109255,8 @@ function build(a, tool) {
     if (a.stage === "confirming") return "Waiting for you to confirm the send in your app.";
     const amount = usdcText(a.done === true ? a.sentAtomic ?? a.amountAtomic : a.amountAtomic);
     const what = amount ? `${amount} USDC` : "the USDC";
-    return a.done === true ? `Sent ${what} to ${a.to}.` : `Sending ${what} privately to ${a.to}.`;
+    if (a.done !== true) return `Sending ${what} privately to ${a.to}.`;
+    return typeof a.exitTransaction === "string" && a.privateSend === void 0 ? `Sent ${what} to ${a.to} (transaction ${a.exitTransaction}). Your private balance shows it in a few seconds; nothing to do.` : `Sent ${what} to ${a.to}.`;
   }
   if (typeof a.address === "string" && a.address && typeof a.stage === "string") return linkSay(a);
   if (a.stage === "waiting_for_funds" && typeof a.depositAddress === "string") {
@@ -117592,7 +117751,9 @@ async function runUnshield({
   profile,
   facilitatorOrigin: facilitatorOrigin2,
   onStage,
-  selfPayStep = selfPay
+  selfPayStep = selfPay,
+  onAnswered,
+  onCheckPending
 }) {
   const owner = new import_web3133.PublicKey(recipientOwner);
   const mint = new import_web3133.PublicKey(store.state.asset);
@@ -117649,7 +117810,9 @@ async function runUnshield({
       onStage,
       walk,
       mark,
-      scoped
+      scoped,
+      onAnswered,
+      onCheckPending
     });
   }
   if (record?.mode !== void 0) throw new Error("mcp_unshield_failed: this unshield's record names an exit mode this version does not know; nothing new was signed. Update the wallet");
@@ -117692,12 +117855,50 @@ async function runUnshield({
     allowForeignRecipient: true,
     relaySubmit: facilitatorExitRelay(facilitatorOrigin2),
     requestAnchor: markedAnchorRequest(facilitatorAnchor(facilitatorOrigin2)),
+    answerAtRelay: true,
     deps: { walkHistory: walk(exitProofTools.deploymentIdentity) }
   }), { ring: { connection: session.connection, pool: store.state.pool } }));
+  const answer = { selfPayTransaction: paid.transaction ?? null, exitTransaction: exit.signature ?? null };
+  if (exit.settled === false && !await finishAnsweredExit({ session, store, name, exit, answer, onAnswered, onCheckPending, mark, scoped })) return answer;
   mark("unshield-exited");
   const exited = store.readWal(`self-pay-${unshieldId}`);
   store.writeWal(`self-pay-${unshieldId}`, { ...exited, state: "exited", exitTransaction: exit.signature, exitedAtMs: exited?.exitedAtMs ?? Date.now() });
-  return { selfPayTransaction: paid.transaction ?? null, exitTransaction: exit.signature ?? null };
+  return answer;
+}
+async function finishAnsweredExit({ session, store, name, exit, answer, changeAtomic, onAnswered, onCheckPending, mark, scoped }) {
+  if (typeof onAnswered !== "function") {
+    await scoped("unshield-exit", () => exit.finish());
+    return true;
+  }
+  const record = store.readWal(name);
+  store.writeWal(name, {
+    ...record,
+    exitTransaction: exit.signature,
+    exitAnsweredAtMs: record?.exitAnsweredAtMs ?? Date.now(),
+    ...changeAtomic !== void 0 ? { changeAtomic } : {}
+  });
+  try {
+    await scoped("unshield-exit", () => refreshWallet({ session, store, history: exit.preExitHistory }));
+  } catch {
+    mark("unshield-exit-snapshot-failed");
+  }
+  mark("unshield-exit-answered");
+  try {
+    onAnswered(answer);
+  } catch {
+  }
+  try {
+    await scoped("unshield-exit", () => exit.finish());
+    return true;
+  } catch (error) {
+    mark("unshield-exit-check-pending");
+    store.writeWal(name, { ...store.readWal(name), exitCheckPendingAtMs: Date.now() });
+    try {
+      onCheckPending?.(error);
+    } catch {
+    }
+    return false;
+  }
 }
 async function runDirectExit({
   session,
@@ -117714,7 +117915,9 @@ async function runDirectExit({
   walk,
   mark = () => {
   },
-  scoped = (_prefix, fn) => fn()
+  scoped = (_prefix, fn) => fn(),
+  onAnswered,
+  onCheckPending
 }) {
   const name = `self-pay-${unshieldId}`;
   if (record.amountAtomic !== String(amountAtomic) || record.exitAmountAtomic !== String(amountAtomic)) {
@@ -117752,6 +117955,7 @@ async function runDirectExit({
       allowForeignRecipient: true,
       relaySubmit: facilitatorExitRelay(facilitatorOrigin2),
       requestAnchor: markedAnchorRequest(facilitatorAnchor(facilitatorOrigin2)),
+      answerAtRelay: true,
       deps: { walkHistory: walk(exitProofTools.deploymentIdentity), proveExit }
     }), { ring: { connection: session.connection, pool: store.state.pool } }));
   } catch (error) {
@@ -117760,10 +117964,13 @@ async function runDirectExit({
     }
     throw error;
   }
+  const answer = { selfPayTransaction: null, exitTransaction: exit.signature ?? null };
+  const changeAtomic = exitAmountAtomic === void 0 ? void 0 : (BigInt(record.noteValueAtomic) - BigInt(record.exitAmountAtomic)).toString();
+  if (exit.settled === false && !await finishAnsweredExit({ session, store, name, exit, answer, changeAtomic, onAnswered, onCheckPending, mark, scoped })) return answer;
   mark("unshield-exited");
   const exited = store.readWal(name);
   store.writeWal(name, { ...exited, state: "exited", exitTransaction: exit.signature, exitedAtMs: exited?.exitedAtMs ?? Date.now() });
-  return { selfPayTransaction: null, exitTransaction: exit.signature ?? null };
+  return answer;
 }
 function movingAtomic(store) {
   let moving = 0n;
@@ -119583,6 +119790,12 @@ ${canonical5}`;
         watcher?.kick?.();
       } catch {
       }
+      if (resumeSends) {
+        try {
+          finishAnsweredExits();
+        } catch {
+        }
+      }
       let store;
       try {
         store = session.openStore();
@@ -120096,7 +120309,7 @@ ${canonical5}`;
           amountAtomic: typeof record.amountAtomic === "string" ? record.amountAtomic : null,
           to: record.mcpTo,
           // One word per state (real-user pass F3): "sent" as wallet_cancel and openSendState say, never the record's "exited".
-          state: retry ? "retrying" : joining ? "joining" : record.state === "exited" ? "sent" : live === "sending" ? "sending" : idle ?? record.state,
+          state: retry ? "retrying" : joining ? "joining" : record.state === "exited" || live === "sent" ? "sent" : live === "sending" ? "sending" : idle ?? record.state,
           transaction: sigOrNull(record.exitTransaction),
           at,
           ...record.state === "exited" && started !== void 0 ? { startedAt: isoOf(started) } : {},
@@ -120542,7 +120755,8 @@ ${canonical5}`;
       return sendDoneNext(job.to, job.result.privateSend) + `${job.result?.backupPath ? `. An encrypted backup of the wallet was saved at ${job.result.backupPath}` : ""}`;
     }
     if (kind === "unshield") {
-      return `the USDC was sent to ${job.to}; tell the user (exitTransaction). wallet_balance shows the new shielded balance${job.result?.backupPath ? `. An encrypted backup of the wallet was saved at ${job.result.backupPath}` : ""}`;
+      const tx = job.result?.exitTransaction;
+      return `Sent ${usdcText2(job.amountAtomic)} USDC to ${job.to}${typeof tx === "string" ? ` (transaction ${tx})` : ""}. Tell the user; nothing to do: the private balance shows it in a few seconds (wallet_balance)${job.result?.backupPath ? `. An encrypted backup of the wallet was saved at ${job.result.backupPath}` : ""}`;
     }
     const post = job.post;
     if (!post || post.state === "running") {
@@ -120995,7 +121209,9 @@ ${canonical5}`;
   }
   function singleSendState(store, requestId, intent) {
     const unshieldId = moneyId(requestId);
-    if (store.readWal(`self-pay-${unshieldId}`)?.state === "exited") return "sent";
+    const record = store.readWal(`self-pay-${unshieldId}`);
+    if (record?.state === "exited") return "sent";
+    if (Number.isSafeInteger(record?.exitAnsweredAtMs) && typeof record.exitTransaction === "string" && record.exitUnconfirmed !== true) return "sent";
     if (jobs.get(`unshield:${toRecordId(requestId)}`)?.state === "running" || selfPayMayHaveSigned(store, unshieldId)) return "sending";
     return intent ? "joining" : void 0;
   }
@@ -121478,7 +121694,7 @@ ${canonical5}`;
       if (known && known.state !== "failed" && known.state !== "waiting" && sameRequest(known, request)) {
         const wait3 = waitFor();
         if (known.state === "running" && wait3 > 0) {
-          const ends = (kind === "shield" || kind === "unshield") && known.stage !== "confirming" ? [known.promise] : [known.promise, stageChanged(known)];
+          const ends = (kind === "shield" || kind === "unshield") && known.stage !== "confirming" ? [known.answered ?? known.promise] : [known.promise, stageChanged(known)];
           await statusWait(
             ends,
             wait3,
@@ -121853,6 +122069,10 @@ ${canonical5}`;
         if (kind !== "unshield") afterShield(job);
         else refreshAtFinality();
       }, async (error) => {
+        if (job.answeredEarly) {
+          log(`MCP_UNSHIELD_AFTER_ANSWER_FAILED requestId=${job.requestId} cause=${JSON.stringify(String(error?.message ?? error ?? "").split("\n", 1)[0].slice(0, 240))}`);
+          return;
+        }
         const linkHeld = /* @__PURE__ */ new Map();
         if (kind === "unshield" && /p03_merchant_respend_no_spendable_account|insufficient_recovered_value|insufficient_value/.test(String(error?.message ?? error))) {
           try {
@@ -121896,7 +122116,14 @@ ${canonical5}`;
           recorded = true;
         }
         if (!recorded) uncount(kind, key);
-      }).finally(() => signalStage(job));
+      }).finally(() => {
+        job.finishing = false;
+        signalStage(job);
+      });
+      job.answered = new Promise((resolve38) => {
+        job.answerNow = resolve38;
+        job.promise.then(resolve38, resolve38);
+      });
       if (needsConfirm) {
         await statusWait([confirmation], fullWait ? Infinity : budgetLeft(startedAt), progress3, "waiting for the user to confirm the send");
         if (job.stage === "confirming" || job.state === "failed") return jobAnswer(kind, job);
@@ -121905,7 +122132,7 @@ ${canonical5}`;
       if (wait2 === Infinity) await job.promise.catch(() => {
       });
       else if (wait2 > 0) {
-        await statusWait([job.promise], wait2, progress3, kind === "unshield" ? "sending privately; it takes a few minutes" : kind === "elsewhere" ? "checking the one-time address; a deposit takes a few minutes" : "making the USDC private; it takes a few minutes");
+        await statusWait([job.answered], wait2, progress3, kind === "unshield" ? "sending privately; it takes a few minutes" : kind === "elsewhere" ? "checking the one-time address; a deposit takes a few minutes" : "making the USDC private; it takes a few minutes");
       }
       return jobAnswer(kind, job);
     }
@@ -121963,9 +122190,10 @@ ${canonical5}`;
     }
     return session.openStore();
   }
-  async function unshieldPart(opened, job, unshieldId, amountAtomic, onStage) {
+  async function unshieldPart(opened, job, unshieldId, amountAtomic, onStage, onAnswered) {
     const store = await refreshStaleBeforeUnshield(opened, onStage);
     bindUnshieldRecipient(store, unshieldId, amountAtomic, job.to, unshieldId === moneyId(job.requestId) ? job.requestId : void 0);
+    let backup;
     const result = await (ops.unshield ?? runUnshield)({
       session,
       store,
@@ -121976,17 +122204,40 @@ ${canonical5}`;
       profile: money.profile,
       facilitatorOrigin: money.facilitatorOrigin,
       onStage,
-      ...ops.selfPay ? { selfPayStep: ops.selfPay } : {}
+      ...ops.selfPay ? { selfPayStep: ops.selfPay } : {},
+      ...typeof onAnswered === "function" ? { onAnswered: (answer) => {
+        backup = backupNow(session.openStore());
+        onAnswered({ ...answer, ...backup });
+      } } : {},
+      onCheckPending: (error) => {
+        log(`MCP_UNSHIELD_CHECK_PENDING requestId=${job.requestId} cause=${JSON.stringify(String(error?.message ?? error ?? "").split("\n", 1)[0].slice(0, 240))}`);
+        answeredExitTries.set(`self-pay-${unshieldId}`, { running: false, atMs: Date.now() });
+        armAnsweredExitRetry();
+      }
     });
-    return { ...result, ...backupNow(session.openStore()) };
+    return { ...result, ...backup ?? backupNow(session.openStore()) };
   }
   function runUnshieldJob(job, onStage) {
     if (isSplitSend(job)) return runPrivateSendJob(job, onStage);
     return underLease((opened) => {
       if (!opened.readWal(`self-pay-${moneyId(job.requestId)}`)) assertUnshieldNotPromised(opened, job.amountAtomic);
-      return unshieldPart(opened, job, moneyId(job.requestId), job.amountAtomic, onStage);
+      return unshieldPart(opened, job, moneyId(job.requestId), job.amountAtomic, onStage, (answer) => answerUnshieldEarly(job, answer));
     });
   }
+  function answerUnshieldEarly(job, answer) {
+    job.state = "done";
+    job.doneAtMs = Date.now();
+    job.result = answer;
+    job.answeredEarly = true;
+    job.finishing = true;
+    try {
+      closeJoinIntent(session.openStore(), job.requestId, "done");
+    } catch {
+    }
+    log(`MCP_UNSHIELD_ANSWERED requestId=${job.requestId}`);
+    signalStage(job);
+    job.answerNow?.();
+  }
   async function runPrivateSendJob(job, onStage) {
     const sendId = moneyId(job.requestId);
     let store;
@@ -122198,6 +122449,89 @@ ${canonical5}`;
     }
   }
   const resumeRefusals = /* @__PURE__ */ new Map();
+  const answeredExitTries = /* @__PURE__ */ new Map();
+  let answeredExitRetryTimer;
+  function finishAnsweredExits() {
+    if (!unshieldEnabled || finalityClosed || session.closed === true) return;
+    let store;
+    try {
+      store = session.openStore();
+    } catch {
+      return;
+    }
+    let names = [];
+    try {
+      names = store.listWal().filter((name) => name.startsWith("self-pay-") && !name.startsWith("self-pay-merge-") && !name.startsWith("self-pay-pocket-"));
+    } catch {
+      return;
+    }
+    for (const name of names) {
+      let record;
+      try {
+        record = store.readWal(name);
+      } catch {
+        continue;
+      }
+      if (record?.schema !== SELF_PAY_WAL_SCHEMA || record.state === "exited" || record.exitUnconfirmed === true || typeof record.exitTransaction !== "string" || typeof record.mcpTo !== "string" || !ATOMIC_TEXT.test(String(record.amountAtomic))) continue;
+      const tried = answeredExitTries.get(name);
+      if (tried !== void 0 && (tried.running || Date.now() - tried.atMs < ANSWERED_EXIT_RETRY_MS)) continue;
+      const attempt = { running: true, atMs: Date.now() };
+      answeredExitTries.set(name, attempt);
+      const unshieldId = name.slice("self-pay-".length);
+      log(`MCP_UNSHIELD_CHECK_RESUME unshieldId=${unshieldId}`);
+      underLease((opened) => {
+        const current = opened.readWal(name);
+        if (current?.state === "exited" || current?.exitUnconfirmed === true || typeof current?.exitTransaction !== "string") return void 0;
+        return (ops.unshield ?? runUnshield)({
+          session,
+          store: opened,
+          unshieldId,
+          amountAtomic: current.amountAtomic,
+          recipientOwner: current.mcpTo,
+          exitProofTools: money.exitProofTools,
+          profile: money.profile,
+          facilitatorOrigin: money.facilitatorOrigin,
+          onStage: () => {
+          },
+          ...ops.selfPay ? { selfPayStep: ops.selfPay } : {}
+        });
+      }, { orClosed: ANSWERED_EXIT_CLOSED }).then((result) => {
+        if (result === ANSWERED_EXIT_CLOSED) return;
+        const now = session.openStore().readWal(name);
+        log(now?.state === "exited" ? `MCP_UNSHIELD_CHECK_DONE unshieldId=${unshieldId}` : `MCP_UNSHIELD_CHECK_PENDING unshieldId=${unshieldId}`);
+        if (now?.state === "exited") refreshAtFinality();
+      }, (error) => {
+        const cause = String(error?.message ?? error ?? "").split("\n", 1)[0];
+        attempt.provenUnspent = /confirmed note-exit is not finalized spent/.test(cause);
+        log(`MCP_UNSHIELD_CHECK_PENDING unshieldId=${unshieldId} cause=${JSON.stringify(cause.slice(0, 240))}`);
+      }).then(() => underLease((opened) => {
+        const now = opened.readWal(name);
+        if (attempt.provenUnspent === true && now?.state !== "exited" && now?.exitUnconfirmed !== true && Number.isSafeInteger(now?.exitAnsweredAtMs) && Date.now() - now.exitAnsweredAtMs > ANSWERED_EXIT_UNCONFIRMED_MS) {
+          opened.writeWal(name, { ...now, exitUnconfirmed: true });
+          log(`MCP_UNSHIELD_UNCONFIRMED unshieldId=${unshieldId}`);
+        }
+      }, { orClosed: ANSWERED_EXIT_CLOSED })).catch(() => {
+      }).finally(() => {
+        attempt.running = false;
+        let now;
+        try {
+          now = session.openStore().readWal(name);
+        } catch {
+          now = void 0;
+        }
+        if (now?.state === "exited" || now?.exitUnconfirmed === true || !Number.isSafeInteger(now?.exitAnsweredAtMs) || Date.now() - now.exitAnsweredAtMs > ANSWERED_EXIT_RETRY_WINDOW_MS) return;
+        armAnsweredExitRetry();
+      });
+    }
+  }
+  function armAnsweredExitRetry() {
+    if (finalityClosed || session.closed === true || answeredExitRetryTimer !== void 0) return;
+    answeredExitRetryTimer = setTimeout(() => {
+      answeredExitRetryTimer = void 0;
+      finishAnsweredExits();
+    }, ANSWERED_EXIT_RETRY_MS + 100);
+    answeredExitRetryTimer.unref?.();
+  }
   async function cancelElsewhere(args) {
     const spec = KINDS.elsewhere;
     if (!spec.enabled()) return refuse11("mcp_tool_disabled", `${spec.tool} is off: the owner did not enable it when starting this MCP server`, spec.disabledNext);
@@ -124221,6 +124555,8 @@ ${JSON.stringify(args ?? {})}`;
   ));
   const resumeTimer = resumeSends ? setTimeout(resumePrivateSends, 0) : void 0;
   resumeTimer?.unref?.();
+  const answeredExitTimer = resumeSends ? setTimeout(finishAnsweredExits, 0) : void 0;
+  answeredExitTimer?.unref?.();
   const tempCleanTimer = typeof session.walletPath === "string" ? setTimeout(() => {
     const pool2 = dirname24(session.walletPath);
     removeStaleTemporaryFiles([pool2, join28(pool2, "wal"), join28(pool2, "move-counts")]).then((removed) => {
@@ -124246,6 +124582,8 @@ ${JSON.stringify(args ?? {})}`;
       for (const timer of joinTimers) clearTimeout(timer);
       joinTimers.clear();
       clearTimeout(resumeTimer);
+      clearTimeout(answeredExitTimer);
+      clearTimeout(answeredExitRetryTimer);
       clearTimeout(tempCleanTimer);
       clearTimeout(intentStartTimer);
       clearTimeout(intentTimer);
@@ -124269,6 +124607,7 @@ ${JSON.stringify(args ?? {})}`;
      */
     moving: { value: () => {
       if (moneyCallsInFlight - joinWaitingCalls > 0 || [...jobs.values()].some((job) => job.state === "running")) return true;
+      if ([...jobs.values()].some((job) => job.finishing === true) || [...answeredExitTries.values()].some((attempt) => attempt.running)) return true;
       try {
         return mover.running?.() === true || successionRunning() || transferRuns.size > 0 || Boolean(joiner.status().running) || adopter.busy?.() === true || autoPockets.busy?.() === true || watcher?.depositing?.() === true;
       } catch {
@@ -124577,7 +124916,7 @@ function createSetupTools({
   };
   return { tools: [setupTool, statusTool, ...MCP_TOOL_NAMES.map((name) => name === "x402_discover" ? discoverTool(discoverCacheDir) : notSetUp(name))], doneTool };
 }
-var import_web3133, shownCaps, RELEASE_RETRY_MS, STAGE_WORDS, stageWords, INTERNAL_BALANCE_DETAIL, shownBreakdown, sessionLeftShown, TOKEN_UNIT_TOOLS, RESOURCE_PAYMENT_WAL_PREFIX2, POOL_LAYOUT_CODE, POOL_LAYOUT_UPDATE, USEPOD_VIA_INFERENCE_CHAT, SELF_PAY_ORIGIN3, REQUEST_ID4, POSITIVE_ATOMIC6, PRIVATE_HOST3, FORBIDDEN_HEADERS3, MAX_BODY_BYTES2, PREVIEW_TIMEOUT_MS, PREVIEW_SELLER_READ_MS, CALL_BUDGET_MS, budgetLeft, MONEY_FIRST_ANSWER_MS, JOIN_CALL_MAX_MS, JOIN_STEP_MS, sleep2, PROGRESS_EVERY_MS2, READ_BUDGET_MS, UNPAID_TOR_TRY_MS, UNPAID_CLEAR_MS, READ_BUDGET_TOOLS, FLOAT_BUSY_CODES, RETRY_MARGIN_MS, ASK_PAY_CODES, limitNext, SAFE_TEXT, MCP_TOOL_ALIASES, POOL_SWITCH_WHY, POOL_SWITCH_NEXT, SWITCH_STATES, quietSwitch, switchKey, ATOMIC_TEXT, switchAmount, switchEta, switchRows, OWNER_CAP_CODES, JOIN_END_MCP, JOIN_END_TERMINAL_LIBRARY, JOIN_RETRY_BACKOFF_MS, WALLET_CAP_FIX, capFix, ownerOnlyNext, mcpNext, CONFIDENTIAL_RETIRED, json2, answerResult, discoverTool, refuse11, publicOffer, FLOAT_PAID_CODES, floatStillSettling, MONEY_ID2, toRecordId, linkKindOf, moneyId, REFUSED_CODES, refusedCodeOf, PLAIN_REASONS, plainReason, KEPT_SEND_TRIES, shownId, isSplitSend, sendPartId, PROMISED_NEXT, PUBLIC_READ_TIMEOUT_MS, withTimeout, ownKey, readFailure, OWN_KEY_TOKENS_MAX, OWN_TOKENS_GRACE_MS, tokenAmountText, elsewhereId, AGENT_ID_SCHEMA, agentIdName, minutesText2, DEPOSIT_SENT_STATES, depositLanded, usdcText2, walkWalletHistory, REFRESH_LEASE_WALK_MS, HOME_MARKS_SETTLED_MS2, AUTO_BACKUPS_KEPT, AUTO_BACKUP_NAME, AUTO_BACKUP_VERIFIED, FRONTED_SETTLE_MARGIN_SLOTS, BALANCE_REFRESH_WAIT_MS, BALANCE_REFRESH_GRACE_MS, BALANCE_REFRESH_LONG_MS, INBOUND_REFRESH_AGE_MS, CAP_BALANCE_WAIT_MS, CAP_BALANCE_RETRY_MS, REFRESH_RETRY_MS, FINALITY_POLL_MS, FINALITY_WAIT_MS, FINALITY_REFRESH_LIMIT_MS, POOL_WATCH_MS, POOL_WATCH_POLL_MS, EARLY_BALANCE_DELAY_MS, FINALITY_SETTLE_WINDOW_SLOTS, PUBLIC_READ_ANSWER_MS, SWITCH_WAIT_MS, UNSHIELD_TO_NO_USDC_DETAIL, UNSHIELD_TO_INVALID_NEXT, INFERENCE_MIN_MAX_TOKENS, ELICIT_TIMEOUT_MS, ELICIT_UNSHOWN_MS, elicitUnshown, POLL_SECONDS3, TEMP_CLEAN_DELAY_MS, KEPT_ON_DISK, MAX_SHIELDED_BALANCE_ATOMIC, receiveGenerator, MCP_TOOL_NAMES, MCP_HIDDEN_TOOL_NAMES, SETUP_TERMINAL_NEXT, SETUP_POLL_NEXT, PRIVATE_INFERENCE_WHY, PRIVATE_INFERENCE_NEXT;
+var import_web3133, shownCaps, RELEASE_RETRY_MS, STAGE_WORDS, stageWords, INTERNAL_BALANCE_DETAIL, shownBreakdown, sessionLeftShown, TOKEN_UNIT_TOOLS, RESOURCE_PAYMENT_WAL_PREFIX2, POOL_LAYOUT_CODE, POOL_LAYOUT_UPDATE, USEPOD_VIA_INFERENCE_CHAT, SELF_PAY_ORIGIN3, REQUEST_ID4, POSITIVE_ATOMIC6, PRIVATE_HOST3, FORBIDDEN_HEADERS3, MAX_BODY_BYTES2, PREVIEW_TIMEOUT_MS, PREVIEW_SELLER_READ_MS, CALL_BUDGET_MS, budgetLeft, MONEY_FIRST_ANSWER_MS, JOIN_CALL_MAX_MS, JOIN_STEP_MS, sleep2, PROGRESS_EVERY_MS2, READ_BUDGET_MS, UNPAID_TOR_TRY_MS, UNPAID_CLEAR_MS, READ_BUDGET_TOOLS, FLOAT_BUSY_CODES, RETRY_MARGIN_MS, ASK_PAY_CODES, limitNext, SAFE_TEXT, MCP_TOOL_ALIASES, POOL_SWITCH_WHY, POOL_SWITCH_NEXT, SWITCH_STATES, quietSwitch, switchKey, ATOMIC_TEXT, ANSWERED_EXIT_RETRY_MS, ANSWERED_EXIT_UNCONFIRMED_MS, ANSWERED_EXIT_RETRY_WINDOW_MS, ANSWERED_EXIT_CLOSED, switchAmount, switchEta, switchRows, OWNER_CAP_CODES, JOIN_END_MCP, JOIN_END_TERMINAL_LIBRARY, JOIN_RETRY_BACKOFF_MS, WALLET_CAP_FIX, capFix, ownerOnlyNext, mcpNext, CONFIDENTIAL_RETIRED, json2, answerResult, discoverTool, refuse11, publicOffer, FLOAT_PAID_CODES, floatStillSettling, MONEY_ID2, toRecordId, linkKindOf, moneyId, REFUSED_CODES, refusedCodeOf, PLAIN_REASONS, plainReason, KEPT_SEND_TRIES, shownId, isSplitSend, sendPartId, PROMISED_NEXT, PUBLIC_READ_TIMEOUT_MS, withTimeout, ownKey, readFailure, OWN_KEY_TOKENS_MAX, OWN_TOKENS_GRACE_MS, tokenAmountText, elsewhereId, AGENT_ID_SCHEMA, agentIdName, minutesText2, DEPOSIT_SENT_STATES, depositLanded, usdcText2, walkWalletHistory, REFRESH_LEASE_WALK_MS, HOME_MARKS_SETTLED_MS2, AUTO_BACKUPS_KEPT, AUTO_BACKUP_NAME, AUTO_BACKUP_VERIFIED, FRONTED_SETTLE_MARGIN_SLOTS, BALANCE_REFRESH_WAIT_MS, BALANCE_REFRESH_GRACE_MS, BALANCE_REFRESH_LONG_MS, INBOUND_REFRESH_AGE_MS, CAP_BALANCE_WAIT_MS, CAP_BALANCE_RETRY_MS, REFRESH_RETRY_MS, FINALITY_POLL_MS, FINALITY_WAIT_MS, FINALITY_REFRESH_LIMIT_MS, POOL_WATCH_MS, POOL_WATCH_POLL_MS, EARLY_BALANCE_DELAY_MS, FINALITY_SETTLE_WINDOW_SLOTS, PUBLIC_READ_ANSWER_MS, SWITCH_WAIT_MS, UNSHIELD_TO_NO_USDC_DETAIL, UNSHIELD_TO_INVALID_NEXT, INFERENCE_MIN_MAX_TOKENS, ELICIT_TIMEOUT_MS, ELICIT_UNSHOWN_MS, elicitUnshown, POLL_SECONDS3, TEMP_CLEAN_DELAY_MS, KEPT_ON_DISK, MAX_SHIELDED_BALANCE_ATOMIC, receiveGenerator, MCP_TOOL_NAMES, MCP_HIDDEN_TOOL_NAMES, SETUP_TERMINAL_NEXT, SETUP_POLL_NEXT, PRIVATE_INFERENCE_WHY, PRIVATE_INFERENCE_NEXT;
 var init_tools = __esm({
   "wallet/src/mcp/tools.mjs"() {
     "use strict";
@@ -124712,6 +125051,10 @@ var init_tools = __esm({
     quietSwitch = (item) => item.state === "done" && item.tellUser !== true;
     switchKey = (item) => `${item.from}:${item.state}`;
     ATOMIC_TEXT = /^[0-9]{1,31}$/;
+    ANSWERED_EXIT_RETRY_MS = 3e4;
+    ANSWERED_EXIT_UNCONFIRMED_MS = 10 * 6e4;
+    ANSWERED_EXIT_RETRY_WINDOW_MS = 30 * 6e4;
+    ANSWERED_EXIT_CLOSED = /* @__PURE__ */ Symbol("answered-exit-closed");
     switchAmount = (atomic4, decimals) => {
       try {
         return ATOMIC_TEXT.test(String(atomic4)) ? formatAtomic(BigInt(atomic4), decimals) : null;