shinjuku-shielded 0.3.185 → 0.3.186

package/README.md

@@ -6,13 +6,13 @@ answers privately, in a terminal chat or for your agent app. Its `mcp`
 command runs a local MCP server (stdio) for your agent. Your keys never
 leave your machine.
 
-This is version 0.3.185. The npm packages `shinjuku-shield` and
+This is version 0.3.186. The npm packages `shinjuku-shield` and
 `shinjuku-shielded` hold the same files. The command is `shinjuku`.
 
 ## Set up
 
 ```sh
-npx -y shinjuku@0.3.185 setup
+npx -y shinjuku@0.3.186 setup
 ```
 
 Setup offers to install the `shinjuku` command and, on Windows, adds npm's
@@ -35,13 +35,13 @@ Every wallet command works after `shinjuku`, for example `shinjuku balance`,
 Claude Code:
 
 ```sh
-claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.185 mcp
+claude mcp add --scope user shinjuku -- npx -y --no-audit --no-fund shinjuku-shield@0.3.186 mcp
 ```
 
 Claude Desktop (`claude_desktop_config.json`) or Cursor (`~/.cursor/mcp.json`):
 
 ```json
-{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.185", "mcp"] } } }
+{ "mcpServers": { "shinjuku": { "command": "npx", "args": ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.186", "mcp"] } } }
 ```
 
 On native Windows, if the host cannot find `npx`, use `"command": "cmd"` and
@@ -54,7 +54,7 @@ Codex (the Codex app and Codex CLI read the same file, `~/.codex/config.toml`):
 ```toml
 [mcp_servers.shinjuku]
 command = "npx"
-args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.185", "mcp"]
+args = ["-y", "--no-audit", "--no-fund", "shinjuku-shield@0.3.186", "mcp"]
 startup_timeout_sec = 120
 tool_timeout_sec = 300
 ```

package/manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "carbon-shielded-wallet/bundle-manifest/v1",
   "file": "shinjuku-wallet.mjs",
-  "sha256": "cab378d1d911f907711de448e5c6525febcd0e73ff8988efcb4ae7d1fa82e961",
-  "bytes": 9351549,
-  "sourceCommit": "0e77401ed1e90cd6fa9035028ac5098ae6abbb6e",
+  "sha256": "80d2ed100a8e4a1f0c3926c4572c20f71ed5c333ff510dd0e291065480fe2d98",
+  "bytes": 9360488,
+  "sourceCommit": "cb04124afb5e7deb6c6e7132dcb0175a1bc0eb2c",
   "sourceDirty": false,
   "installRecordMatchesLockfile": true,
   "releaseRule": "valid only when two fresh npm ci --ignore-scripts builds on different OSes give the same sha256; installRecordMatchesLockfile true means every entry npm installed equals its package-lock.json entry and every entry not marked optional, devOptional included, is installed: an optional entry (a package for another platform) may be absent",
@@ -1038,5 +1038,5 @@
       "version": "1.8.0"
     }
   ],
-  "publishedAt": "2026-11-06T17:17:10.158Z"
+  "publishedAt": "2026-11-06T17:55:56.110Z"
 }

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "shinjuku-shielded",
-  "version": "0.3.185",
+  "version": "0.3.186",
   "mcpName": "io.github.ShinjukuStaition/shinjuku-mcp",
   "description": "Shinjuku Shielded, the private x402 facilitator on Solana: the self-custody wallet CLI and its MCP server. Shield, pay, and unshield USDC from any MCP agent, under caps you set.",
-  "shinjukuRelease": "cab378d1",
-  "shinjukuSha256": "cab378d1d911f907711de448e5c6525febcd0e73ff8988efcb4ae7d1fa82e961",
+  "shinjukuRelease": "80d2ed10",
+  "shinjukuSha256": "80d2ed100a8e4a1f0c3926c4572c20f71ed5c333ff510dd0e291065480fe2d98",
   "license": "SEE LICENSE IN LICENSE.txt",
   "author": "Shinjuku Shielded",
   "homepage": "https://github.com/ShinjukuStaition/shinjuku-shield#readme",

package/shinjuku-wallet.mjs

@@ -48786,6 +48786,15 @@ function torOwnCircuitInit(lane, init = {}) {
   const made = torLaneInit(lane, init);
   return made !== init && made?.dispatcher !== void 0 ? made : void 0;
 }
+function freshTorCircuitProxy() {
+  if (!inTorRun() || runEnded()) return void 0;
+  try {
+    if (globalThis[GLOBAL_DISPATCHER4]?.constructor?.name !== "EnvHttpProxyAgent") return void 0;
+    return withRunTag(`http://${new URL(process.env[MARK].split(" ")[1]).host}`);
+  } catch {
+    return void 0;
+  }
+}
 function onCurrentCircuit(init) {
   const lane = laneOfDispatcher.get(init?.dispatcher);
   return lane === void 0 || laneDispatchers.get(lane) === init.dispatcher ? init : torLaneInit(lane, init);
@@ -104928,7 +104937,7 @@ function floatOutcomeWords(code2, error, t) {
       const why = code2 === "p03_float_paid_finishing_retry_same_request" ? `Shinjuku is still signing the transfer to ${p.the}` : error?.transferLanded === true ? `Shinjuku's transfer to ${p.the} landed (${p.the} has the payment), and ${answer}` : `${answer}. Not known yet whether ${p.the} takes it`;
       return [
         code2,
-        `PAID ${totalText(error)} to Shinjuku (${t.privateLeg}); ${why}`,
+        `PAID ${totalText(error)} to Shinjuku (${t.privateLeg}); ${why}${stallResentWords(p, error)}`,
         `${t.again}: it resends the same payment and never pays twice`
       ];
     }
@@ -104998,7 +105007,7 @@ function floatOutcomeWords(code2, error, t) {
     case "p03_float_seller_unanswered_paid_retry_same_request":
       return [
         code2,
-        `PAID ${totalText(error)}: the transfer to ${p.the} landed${withTransaction(error)}, but ${p.the} did not answer` + (typeof error?.httpStatus === "number" ? ` (it answered HTTP ${error.httpStatus}${typeof error?.sellerReason === "string" ? `: ${JSON.stringify(error.sellerReason)}` : ""})` : ""),
+        `PAID ${totalText(error)}: the transfer to ${p.the} landed${withTransaction(error)}, but ${p.the} did not answer` + (typeof error?.httpStatus === "number" ? ` (it answered HTTP ${error.httpStatus}${typeof error?.sellerReason === "string" ? `: ${JSON.stringify(error.sellerReason)}` : ""})` : "") + stallResentWords(p, error),
         `${t.again}: it resends the same proof of payment and never pays twice`
       ];
     case "p03_float_seller_kept_payment": {
@@ -105098,6 +105107,12 @@ function floatOutcomeWords(code2, error, t) {
       return void 0;
   }
 }
+function stallResentWords(p, error) {
+  return error?.stallResent === true ? `; the Tor connection to ${p?.the ?? "the seller"} stalled, so the wallet sent this same payment once more on a new Tor route: it is still one payment, not a second one` : "";
+}
+function stallResentLine(payee = "the seller") {
+  return `The Tor connection to ${payee} stalled, so the wallet sent this same payment once more on a new Tor route: it is still one payment, not a second one.`;
+}
 var ATOMIC4, TRANSFER_DEAD_WORDS, payeeOf, floatSellerCanBeFixed, withoutProviderText, floatSeller4xx, answeredInstead, floatStillSettling, floatChargeTooLate, amountText, withTransaction, PAID_SELLER_FAILED_CODE, stillWants, AI_SERVER_WRONG, QUOTE_REFUSED_WHY;
 var init_floatWords = __esm({
   "wallet/src/pay/floatWords.mjs"() {
@@ -106112,6 +106127,138 @@ function sellerAnswerInit(url, init, ms) {
   if (target() === void 0) return init;
   return { ...init, dispatcher: { dispatch: (options, handler) => target().dispatch({ ...options, headersTimeout: ms, bodyTimeout: ms }, handler) } };
 }
+async function sendWatchingStall(fetchImpl, url, init, waitMs, { mark = () => {
+}, onResend = () => {
+}, resentBefore = false } = {}) {
+  const global2 = globalThis[GLOBAL_DISPATCHER5];
+  const proxy = process.env.HTTPS_PROXY;
+  const watched = !resentBefore && inTorRun() && init.dispatcher === void 0 && routeDispatcherOf(url) === void 0 && global2?.constructor?.name === "EnvHttpProxyAgent" && typeof proxy === "string" && proxy !== "";
+  if (!watched) return { response: await fetchImpl(url, sellerAnswerInit(url, init, waitMs)), stallResent: false };
+  const sameCircuit = () => {
+    try {
+      return proxyDispatcher(global2.constructor, proxy);
+    } catch {
+      return void 0;
+    }
+  };
+  const first = new AbortController();
+  let ended2 = false;
+  let timer;
+  let checkStop;
+  const stalled = new Promise((resolve43) => {
+    let misses = 0;
+    const check = async () => {
+      const startedAtMs = Date.now();
+      mark("seller-stall-check");
+      checkStop = new AbortController();
+      const dispatcher = sameCircuit();
+      let alive2 = false;
+      try {
+        if (dispatcher === void 0) throw new Error("no dispatcher");
+        const answer = await fetchImpl(new URL(url).origin, {
+          method: "HEAD",
+          redirect: "manual",
+          dispatcher,
+          signal: AbortSignal.any([AbortSignal.timeout(SELLER_STALL_CHECK_TIMEOUT_MS), checkStop.signal, ...init.signal ? [init.signal] : []])
+        });
+        alive2 = true;
+        answer.body?.cancel?.().catch?.(() => {
+        });
+      } catch {
+        alive2 = false;
+      }
+      dispatcher?.destroy().catch(() => {
+      });
+      if (ended2) return;
+      misses = alive2 ? 0 : misses + 1;
+      mark("seller-stall-check-done", alive2 ? "answered" : `missed_${misses}`);
+      if (misses >= SELLER_STALL_MISSES) {
+        resolve43(true);
+        return;
+      }
+      timer = setTimeout(check, Math.max(0, startedAtMs + SELLER_STALL_CHECK_EVERY_MS - Date.now()));
+    };
+    timer = setTimeout(check, SELLER_STALL_CHECK_AFTER_MS);
+  });
+  const firstSend = fetchImpl(url, sellerAnswerInit(url, { ...init, signal: AbortSignal.any([...init.signal ? [init.signal] : [], first.signal]) }, waitMs)).then((response) => ({ response }), (error) => ({ error }));
+  let outcome;
+  try {
+    outcome = await Promise.race([firstSend, stalled.then(() => ({ stalled: true }))]);
+  } finally {
+    ended2 = true;
+    clearTimeout(timer);
+    checkStop?.abort();
+  }
+  if (outcome.stalled !== true) {
+    if (outcome.error !== void 0) throw outcome.error;
+    return { response: outcome.response, stallResent: false };
+  }
+  const replacementProxy = freshTorCircuitProxy();
+  let fresh;
+  try {
+    fresh = replacementProxy === void 0 ? void 0 : proxyDispatcher(global2.constructor, replacementProxy);
+  } catch {
+    fresh = void 0;
+  }
+  if (fresh === void 0) {
+    const kept3 = await firstSend;
+    if (kept3.error !== void 0) throw kept3.error;
+    return { response: kept3.response, stallResent: false };
+  }
+  onResend(replacementProxy);
+  mark("seller-stall-resend");
+  const second = new AbortController();
+  const resend = fetchImpl(url, sellerAnswerInit(url, {
+    ...init,
+    dispatcher: fresh,
+    signal: AbortSignal.any([...init.signal ? [init.signal] : [], second.signal])
+  }, waitMs)).then((response) => ({ response, from: "resend" }), (error) => ({ error, from: "resend" }));
+  const whole = (side) => side.then((one) => one.error !== void 0 ? one : wholeAnswer(one.response).then((response) => ({ response, from: one.from }), (error) => ({ error, from: one.from })));
+  const firstWhole = whole(firstSend.then((one) => ({ ...one, from: "first" })));
+  const resendWhole = whole(resend);
+  const ok = (one) => one.response !== void 0 && one.response.status >= 200 && one.response.status <= 299;
+  try {
+    const earlier = await Promise.race([firstWhole, resendWhole]);
+    let winner = earlier;
+    if (!ok(earlier)) {
+      const other = await (earlier.from === "first" ? resendWhole : firstWhole);
+      winner = ok(other) ? other : earlier.response !== void 0 ? earlier : other.response !== void 0 ? other : void 0;
+      if (winner === void 0) {
+        if (init.signal?.aborted) throw init.signal.reason;
+        throw (earlier.from === "resend" ? earlier : other).error;
+      }
+    }
+    (winner.from === "first" ? second : first).abort();
+    mark("seller-stall-answer", winner.from);
+    return { response: winner.response, stallResent: true, replacementProxy };
+  } finally {
+    fresh.close().catch(() => {
+    });
+  }
+}
+async function wholeAnswer(response) {
+  const nullBody = [101, 103, 204, 205, 304].includes(response.status);
+  if (!response.body || nullBody) {
+    await response.body?.cancel?.().catch?.(() => {
+    });
+    return new Response(null, { status: response.status, statusText: response.statusText, headers: response.headers });
+  }
+  const reader = response.body.getReader();
+  const chunks = [];
+  let size = 0;
+  while (size <= RESULT_LIMIT_BYTES) {
+    const { done, value: value2 } = await reader.read();
+    if (done) break;
+    size += value2.byteLength;
+    chunks.push(Buffer.from(value2));
+  }
+  if (size > RESULT_LIMIT_BYTES) await reader.cancel().catch(() => {
+  });
+  return new Response(
+    Buffer.concat(chunks).subarray(0, RESULT_LIMIT_BYTES + 1),
+    { status: response.status, statusText: response.statusText, headers: response.headers }
+  );
+}
 async function sellerRefusalText(response) {
   let text3 = "";
   let reader;
@@ -106167,9 +106314,10 @@ function x402HeaderText(response, name, field4) {
   const value2 = x402Header(response, name)?.[field4];
   return typeof value2 === "string" && value2.trim() !== "" ? value2 : void 0;
 }
-function newConnectionDispatcher() {
+function newConnectionDispatcher(stallProxy) {
   try {
     const Dispatcher = globalThis[GLOBAL_DISPATCHER5]?.constructor;
+    if (stallProxy !== void 0) return Dispatcher?.name === "EnvHttpProxyAgent" ? proxyDispatcher(Dispatcher, stallProxy) : void 0;
     if (Dispatcher?.name === "Agent") return new Dispatcher();
     const proxy = String(process.env.SHINJUKU_WALLET_PROXIED ?? "").startsWith("tor ") ? process.env.HTTPS_PROXY : void 0;
     return Dispatcher?.name === "EnvHttpProxyAgent" && proxy ? proxyDispatcher(Dispatcher, proxy) : void 0;
@@ -107518,6 +107666,10 @@ async function payViaFloat({
     for (const dispatcher of resendDispatchers) dispatcher.close().catch(() => {
     });
   }
+  function stallResent() {
+    record = { ...record, sellerStallResent: true };
+    store.writeWal(walName2, record);
+  }
   function unanswered2(error) {
     if (wasKept) keptAgain();
     const verdict = watch.verdict();
@@ -107535,6 +107687,7 @@ async function payViaFloat({
       refundPendingAnswer(record);
     }
     if (verdict?.state === "cancelled") byVerdict(verdict, {}, { cause: error });
+    const resentNow = record.sellerStallResent === true ? { stallResent: true } : {};
     if (verdict?.state === "final") {
       fail22("p03_float_seller_unanswered_paid_retry_same_request", {
         cause: error,
@@ -107542,7 +107695,8 @@ async function payViaFloat({
         ...verdict.transaction ? { transaction: verdict.transaction } : {},
         paidAtomic: record.paidAtomic,
         priceAtomic: record.priceAtomic,
-        feeAtomic: record.feeAtomic
+        feeAtomic: record.feeAtomic,
+        ...resentNow
       });
     }
     fail22("p03_float_seller_unanswered_retry_same_request", {
@@ -107551,7 +107705,8 @@ async function payViaFloat({
       paidAtomic: record.paidAtomic,
       priceAtomic: record.priceAtomic,
       feeAtomic: record.feeAtomic,
-      ...verdict?.state === "landed" ? { transferLanded: true } : {}
+      ...verdict?.state === "landed" ? { transferLanded: true } : {},
+      ...resentNow
     });
   }
   async function finalAfterLanded() {
@@ -107578,6 +107733,7 @@ async function payViaFloat({
     let resendUntilMs;
     let answeredAtMs;
     let dispatcher;
+    let stallProxy;
     const waitMs = sellerWaitMs(record);
     const sellerTimeout = AbortSignal.timeout(waitMs);
     const stopResends = () => Date.now() > resendUntilMs || ["landed", "dead", "final", "cancelled"].includes(watch.verdict()?.state);
@@ -107591,7 +107747,16 @@ async function payViaFloat({
       };
       const socketWatch = resend === 0 ? watchRequestSocket(record.url) : void 0;
       try {
-        response = await fetchImpl(record.url, sellerAnswerInit(record.url, dispatcher === void 0 ? keepAliveInit(init) : { ...init, dispatcher }, waitMs));
+        ({ response } = await sendWatchingStall(
+          fetchImpl,
+          record.url,
+          dispatcher === void 0 ? keepAliveInit(init) : { ...init, dispatcher },
+          waitMs,
+          { mark, resentBefore: record.sellerStallResent === true, onResend: (proxy) => {
+            stallProxy ??= proxy;
+            stallResent();
+          } }
+        ));
       } catch (error) {
         unanswered2(error);
       } finally {
@@ -107604,7 +107769,7 @@ async function payViaFloat({
       mark(resend === 0 ? "seller-answered" : `seller-answered-resend-${resend}`);
       resendUntilMs ??= Date.now() + FEE_PAYER_RESEND_MS;
       if (wasKept || resend >= FEE_PAYER_RESENDS || stopResends() || !(feePayerRotated(response, accepted) || feePayerNotManaged(response))) break;
-      dispatcher = newConnectionDispatcher();
+      dispatcher = newConnectionDispatcher(stallProxy);
       if (dispatcher === void 0) break;
       resendDispatchers.push(dispatcher);
       await drainBody(response);
@@ -107877,6 +108042,8 @@ async function selfBroadcastLeg({ store, walName: walName2, record, sendRequest,
     fail22("p03_float_seller_kept_payment", landed);
   }
   let unanswered2 = 0;
+  let stallProxy;
+  let stallDeadline;
   const resendUnanswered = async () => {
     const wait2 = SELF_BROADCAST_UNANSWERED_RESEND_MS[unanswered2];
     if (wait2 === void 0 || Date.now() + wait2 >= record.selfBroadcast.expiresAtMs) return false;
@@ -107892,22 +108059,38 @@ async function selfBroadcastLeg({ store, walName: walName2, record, sendRequest,
     }
     mark("seller-sent");
     let response;
+    const onStallTag = stallProxy === void 0 ? void 0 : newConnectionDispatcher(stallProxy);
+    const sendDeadline = stallDeadline ?? AbortSignal.timeout(sellerWaitMs(record));
     try {
-      response = await fetchImpl(record.url, sellerAnswerInit(record.url, keepAliveInit({
+      ({ response } = await sendWatchingStall(fetchImpl, record.url, keepAliveInit({
         method: sendRequest.method,
         headers: { ...Object.fromEntries(sendRequest.headers), "PAYMENT-SIGNATURE": header },
         ...sendRequest.method === "POST" ? { body: Buffer.from(sendRequest.bodyBase64, "base64") } : {},
         redirect: "error",
-        signal: AbortSignal.timeout(sellerWaitMs(record))
-      }), sellerWaitMs(record)));
+        signal: sendDeadline,
+        ...onStallTag !== void 0 ? { dispatcher: onStallTag } : {}
+      }), sellerWaitMs(record), { mark, resentBefore: record.sellerStallResent === true, onResend: (proxy) => {
+        stallProxy ??= proxy;
+        stallDeadline ??= sendDeadline;
+        record = { ...record, sellerStallResent: true };
+        store.writeWal(walName2, record);
+      } }));
     } catch (error) {
+      onStallTag?.close().catch(() => {
+      });
       const timedOut = error?.name === "TimeoutError" || error?.cause?.name === "TimeoutError";
       if (!timedOut && !proxyRefusedConnection(error) && await resendUnanswered()) {
         attempt -= 1;
         continue;
       }
-      fail22("p03_float_seller_unanswered_paid_retry_same_request", { cause: error, ...landed });
+      fail22("p03_float_seller_unanswered_paid_retry_same_request", {
+        cause: error,
+        ...landed,
+        ...record.sellerStallResent === true ? { stallResent: true } : {}
+      });
     }
+    onStallTag?.close().catch(() => {
+    });
     mark("seller-answered");
     if (response.ok && response.status !== 202) {
       let settled;
@@ -108019,6 +108202,9 @@ function paidResult(record, replayed) {
     replayed,
     scheme: "exact",
     status: record.status ?? 200,
+    // AB32: the paid request went once more on a new Tor circuit after a stall (sendWatchingStall); every paid line says
+    // it is still one payment (Codex round 1 on aa3927fc item 3).
+    ...!replayed && record.sellerStallResent === true ? { stallResent: true } : {},
     // A record written before headers were kept has none.
     sellerHeaders: Array.isArray(record.sellerHeaders) ? record.sellerHeaders : [],
     receipt: { ...record.receipt, float: { floatId: record.floatId, settleTransaction: record.floatSettleTransaction ?? null } },
@@ -108030,7 +108216,7 @@ function paidResult(record, replayed) {
     float: { floatId: record.floatId }
   };
 }
-var import_web3115, FLOAT_PAYMENT_SCHEMA2, REGENERATE_CODES, FLOAT_PAYMENT_WAL_PREFIX2, FLOAT_CONFIG_SCHEMA, FLOAT_PAY_PATH, FLOAT_MEMO_PATH, FLOAT_STATUS_PATH, MAX_BODY_BYTES, FLOAT_REFUND_ETA_SECONDS, REFUND_READ_EARLY_MS, REFUND_ETA_MAX_SECONDS, refundDueOf, REFUND_SETTLED_AFTER_MS, REFUND_OUTCOME_NEWS_MS, FINISHING_POLL_MS, FINISHING_LIMIT_MS, SELLER_TIMEOUT_MS, SELLER_TIMEOUT_ABSURD_SECONDS, FLOAT_STATUS_START_MS, FLOAT_STATUS_POLL_MS, FLOAT_STATUS_TIMEOUT_MS, FLOAT_TRANSFER_DEAD, FLOAT_PAYMENT_REVERTED, VERDICT_POLL_MS, SELLER_ANSWER_VERDICT_MS, TRANSFER_MIN_BLOCKS_LEFT, TRANSFER_FRESH_MS, BLOCK_HEIGHT_TIMEOUT_MS, CONFIG_TIMEOUT_MS, MEMO_UPLOAD_TIMEOUT_MS, CONFIG_CACHE_MS, FLOAT_POOL_WARM_MS, DECIMAL3, POSITIVE, PENDING_CODES, FLOAT_FRONT_HEADER, hash7, fail22, GENERIC_REASON, SELLER_REASON_MAX, SELLER_REASON_READ_BYTES, FEE_PAYER_RESENDS, FEE_PAYER_RESEND_MS, GLOBAL_DISPATCHER5, sortedJson, MODEL_ID, floatPaymentWalName, floatRecordName, FLOAT_KEEP_BYTES_MS, memoryOnlyNeedsScrub, FLOAT_KEEP_OPEN_REQUEST_MS, configCache, configGeneration, configReadSequence, configReads, configRefreshes, SPECULATED_MAX_AGE_MS, speculatedQuotes, poolDomains, FLOAT_FACTS_SCHEMA, floatFacts, floatFactsKey, floatFactsMac, poolDomainReads, poolDomainWarmFailedAt, WARM_RETRY_MS, payerGenerator, etaEntry, loadPayerGenerator, plainText, BROADCAST_REFUSED, BROADCAST_REFUSED_STANDARD, BROADCAST_DEAD, TRANSFER_LANDING_WINDOW_MS, PROOF_DELIVERY_MS, SELF_BROADCAST_LEG1_LEFT_MS, BROADCAST_UNSIGNED, BROADCAST_NO_LOOKUP, BROADCAST_LANDED, BROADCAST_LIMIT_MS, BROADCAST_QUOTE_MARGIN_MS, SELF_BROADCAST_RESEND_MS, SELF_BROADCAST_UNANSWERED_RESEND_MS, SELLER_HEADERS_MAX_COUNT, SELLER_HEADERS_MAX_BYTES, FINAL_AFTER_202_MS, SELLER_HEADERS_KEPT;
+var import_web3115, FLOAT_PAYMENT_SCHEMA2, REGENERATE_CODES, FLOAT_PAYMENT_WAL_PREFIX2, FLOAT_CONFIG_SCHEMA, FLOAT_PAY_PATH, FLOAT_MEMO_PATH, FLOAT_STATUS_PATH, MAX_BODY_BYTES, FLOAT_REFUND_ETA_SECONDS, REFUND_READ_EARLY_MS, REFUND_ETA_MAX_SECONDS, refundDueOf, REFUND_SETTLED_AFTER_MS, REFUND_OUTCOME_NEWS_MS, FINISHING_POLL_MS, FINISHING_LIMIT_MS, SELLER_TIMEOUT_MS, SELLER_TIMEOUT_ABSURD_SECONDS, SELLER_STALL_CHECK_AFTER_MS, SELLER_STALL_CHECK_EVERY_MS, SELLER_STALL_CHECK_TIMEOUT_MS, SELLER_STALL_MISSES, RESULT_LIMIT_BYTES, FLOAT_STATUS_START_MS, FLOAT_STATUS_POLL_MS, FLOAT_STATUS_TIMEOUT_MS, FLOAT_TRANSFER_DEAD, FLOAT_PAYMENT_REVERTED, VERDICT_POLL_MS, SELLER_ANSWER_VERDICT_MS, TRANSFER_MIN_BLOCKS_LEFT, TRANSFER_FRESH_MS, BLOCK_HEIGHT_TIMEOUT_MS, CONFIG_TIMEOUT_MS, MEMO_UPLOAD_TIMEOUT_MS, CONFIG_CACHE_MS, FLOAT_POOL_WARM_MS, DECIMAL3, POSITIVE, PENDING_CODES, FLOAT_FRONT_HEADER, hash7, fail22, GENERIC_REASON, SELLER_REASON_MAX, SELLER_REASON_READ_BYTES, FEE_PAYER_RESENDS, FEE_PAYER_RESEND_MS, GLOBAL_DISPATCHER5, sortedJson, MODEL_ID, floatPaymentWalName, floatRecordName, FLOAT_KEEP_BYTES_MS, memoryOnlyNeedsScrub, FLOAT_KEEP_OPEN_REQUEST_MS, configCache, configGeneration, configReadSequence, configReads, configRefreshes, SPECULATED_MAX_AGE_MS, speculatedQuotes, poolDomains, FLOAT_FACTS_SCHEMA, floatFacts, floatFactsKey, floatFactsMac, poolDomainReads, poolDomainWarmFailedAt, WARM_RETRY_MS, payerGenerator, etaEntry, loadPayerGenerator, plainText, BROADCAST_REFUSED, BROADCAST_REFUSED_STANDARD, BROADCAST_DEAD, TRANSFER_LANDING_WINDOW_MS, PROOF_DELIVERY_MS, SELF_BROADCAST_LEG1_LEFT_MS, BROADCAST_UNSIGNED, BROADCAST_NO_LOOKUP, BROADCAST_LANDED, BROADCAST_LIMIT_MS, BROADCAST_QUOTE_MARGIN_MS, SELF_BROADCAST_RESEND_MS, SELF_BROADCAST_UNANSWERED_RESEND_MS, SELLER_HEADERS_MAX_COUNT, SELLER_HEADERS_MAX_BYTES, FINAL_AFTER_202_MS, SELLER_HEADERS_KEPT;
 var init_floatPay = __esm({
   "wallet/src/pay/floatPay.mjs"() {
     "use strict";
@@ -108078,6 +108264,11 @@ var init_floatPay = __esm({
     FINISHING_LIMIT_MS = 6e4;
     SELLER_TIMEOUT_MS = 12e4;
     SELLER_TIMEOUT_ABSURD_SECONDS = 86400;
+    SELLER_STALL_CHECK_AFTER_MS = 3e4;
+    SELLER_STALL_CHECK_EVERY_MS = 3e4;
+    SELLER_STALL_CHECK_TIMEOUT_MS = 15e3;
+    SELLER_STALL_MISSES = 2;
+    RESULT_LIMIT_BYTES = 1024 * 1024;
     FLOAT_STATUS_START_MS = 45e3;
     FLOAT_STATUS_POLL_MS = 5e3;
     FLOAT_STATUS_TIMEOUT_MS = 5e3;
@@ -114454,7 +114645,9 @@ async function paidCall({ session, target, method, headers, body, cap, maxPrice,
         amountAtomic: amountAtomic ?? null,
         requestId,
         replayed: result.replayed === true,
-        receiptFinality: result.receiptFinality ?? null
+        receiptFinality: result.receiptFinality ?? null,
+        // AB32 (pay/floatPay.mjs sendWatchingStall): the paid request went once more on a new Tor circuit; still one payment.
+        ...result.stallResent === true ? { stallResent: true } : {}
       };
       const status = Number.isInteger(result.status) && result.status >= 200 && result.status <= 299 ? result.status : 200;
       return new Response(
@@ -134744,7 +134937,7 @@ ${canonical5}`;
         ...floatPaid ? { via: "shinjuku", shinjukuTransaction } : {},
         ...balanceAnswer(one),
         ...notices,
-        next: (unpaid ? "nothing was paid: this request id's payment never landed (the pool's public history proves it), and the answer it got came back again; nothing new was paid. Tell the user nothing was paid for it" : receipt.replayed === true ? "this request id was already paid: the stored receipt came back and nothing new was paid" : floatPaid ? floatPaidNext({ transaction: unpaid ? null : transaction, shinjukuTransaction }) : "paid; tell the user what was paid (amountAtomic, transaction). wallet_receipts lists this payment, wallet_balance shows the new balance") + noticesStep(notices)
+        next: (unpaid ? "nothing was paid: this request id's payment never landed (the pool's public history proves it), and the answer it got came back again; nothing new was paid. Tell the user nothing was paid for it" : receipt.replayed === true ? "this request id was already paid: the stored receipt came back and nothing new was paid" : floatPaid ? floatPaidNext({ transaction: unpaid ? null : transaction, shinjukuTransaction }) + (receipt.stallResent === true || float?.sellerStallResent === true ? `. Tell the user too: ${stallResentLine()}` : "") : "paid; tell the user what was paid (amountAtomic, transaction). wallet_receipts lists this payment, wallet_balance shows the new balance") + noticesStep(notices)
       }, "pay_for_service")
     }));
   }
@@ -135056,6 +135249,8 @@ ${canonical5}`;
         ...!ambiguous && floatSellerCanBeFixed(error) ? { sellerFixable: true } : {},
         ...error?.transferLanded === true ? { transferLanded: true } : {},
         ...error?.resent === true ? { resent: true } : {},
+        // AB32: this payment went once more on a new Tor circuit after a stall (floatPay.mjs sendWatchingStall).
+        ...error?.stallResent === true ? { stallResent: true } : {},
         ...error?.pruned === true ? { pruned: true } : {},
         ...typeof error?.floatCode === "string" ? { floatCode: error.floatCode } : {},
         // AB164: the seller's own code beside its error after it took the payment (floatWords.mjs PAID_SELLER_FAILED_CODE).
@@ -149470,6 +149665,7 @@ The next question uses it${state2.mode === "talk" ? ", with the conversation so
       else if (plainPaid && reader?.terminal && unsureAtomic() === 0n && !dayRoom2) {
         if (cut2) say2(cut2.trim());
       } else say2(`${cut2}${paidText}. ${tail}`);
+      if (plainPaid && result.receipt?.stallResent === true) say2(stallResentLine("the AI provider"));
       if (state2.mode === "each" && !state2.eachHinted) {
         state2.eachHinted = true;
         say2(paint([["Each question goes alone: the AI does not see your earlier questions. For follow-ups, /mode 2 picks a conversation.", "mute"]], color));
@@ -159225,7 +159421,8 @@ async function curlOutput(response, values, deps, requestId) {
   const person = values.get(PERSON_LINK);
   const said = (text4) => person ? personWords(text4, { homeJob: person.homeJob }) : text4;
   io.err(said(unpaid ? `the same answer as before; nothing was paid: the earlier payment for request-id ${requestId} never went through
-` : paid ? `paid ${usdcOr(paid.amountAtomic)} from your private balance${route} (the chain does not show who paid); request-id ${requestId}${paid.replayed ? " (replayed: this request was paid before; nothing new was paid)" : ""}
+` : paid ? `paid ${usdcOr(paid.amountAtomic)} from your private balance${route} (the chain does not show who paid); request-id ${requestId}${paid.replayed ? " (replayed: this request was paid before; nothing new was paid)" : ""}${paid.stallResent === true && !paid.replayed ? `
+${stallResentLine()}` : ""}
 ` : `free (no 402): HTTP ${response.status}; nothing was paid
 `));
   if (values.has("--out")) {
@@ -159672,6 +159869,8 @@ function inferOutput(result, { values, io, model: model2, quiet, requestId, held
 `);
   if (plainPaid) {
     io.err(`${paidLine(BigInt(result.paidAtomic), { color: brandColor(process.stderr, process.env) })}${quiet ? "" : ` request-id ${result.requestId ?? requestId}`}${stopped}
+`);
+    if (result.receipt?.stallResent === true) io.err(`${stallResentLine("the AI provider")}
 `);
   }
 }