Within one pull: one payment covers the whole image. The paywall issues a realm-scoped macaroon (realm blossom-read, ~10 min, reusable), so payblob pays the first 402, caches the token in memory, and reuses it for the manifest, config and every layer. One settlement, not one per blob.
Across separate pulls (two CI runs, or the same digest twice) it re-pays today: the token isn't persisted to disk yet, so each process starts cold.
The server already supports what you want though. The macaroon is realm-scoped and valid for the whole window, so persisting it (plus a local sha256 cache) makes a repeat pull settle once, or zero if the blobs are already cached. That's the next step.
npub1qn…d9r6h
2026-08-18 17:41:54 UTC
in reply to nevent1q…00vq
Author Public Key
npub1qnw27f2jsqvn05wzpd56m7ykgmepk57p0yrzw8fzc7lfhjkmjmqqmd9r6hPublished at
2026-08-18 17:41:54 UTCEvent JSON
{
"id": "31122f9647e17ebaf37dd928e3e3a08a9773a74e2e10cfca9f28407c3fd6307e",
"pubkey": "04dcaf2552801937d1c20b69adf89646f21b53c17906271d22c7be9bcadb96c0",
"created_at": 1787074914,
"kind": 1,
"tags": [
[
"p",
"04dcaf2552801937d1c20b69adf89646f21b53c17906271d22c7be9bcadb96c0",
"",
"mention"
],
[
"p",
"0461fcbecc4c3374439932d6b8f11269ccdb7cc973ad7a50ae362db135a474dd",
"wss://relay.ditto.pub",
"mention"
],
[
"p",
"32637475ec0256fbd754571aeaa52c5454c9bd79fb7ac5b99f53b86cfcb9527a"
],
[
"e",
"c543ae619d9ccc60ec424de9745c1d12a42c7a17ad220c1295af585774423cba",
"",
"root",
"32637475ec0256fbd754571aeaa52c5454c9bd79fb7ac5b99f53b86cfcb9527a"
],
[
"client",
"Primal Android"
]
],
"content": "Within one pull: one payment covers the whole image. The paywall issues a realm-scoped macaroon (realm blossom-read, ~10 min, reusable), so payblob pays the first 402, caches the token in memory, and reuses it for the manifest, config and every layer. One settlement, not one per blob.\n\nAcross separate pulls (two CI runs, or the same digest twice) it re-pays today: the token isn't persisted to disk yet, so each process starts cold.\n\nThe server already supports what you want though. The macaroon is realm-scoped and valid for the whole window, so persisting it (plus a local sha256 cache) makes a repeat pull settle once, or zero if the blobs are already cached. That's the next step. \n\n",
"sig": "f6eabd5d21a27b26549f49875ac3b3fe1269dc61e44d092042a1dcd6ccea324ba97301769730c97e0fa09d02818639bea9ea44faabee96e25c36759849542d2b"
}