stellarium-ts 0.15.0 → 0.17.0

package/dist/client/operatorAuth.d.ts

@@ -0,0 +1,19 @@
+/** The scheme of the `Authorization` header on node requests to the operator. */
+export declare const OPERATOR_AUTH_SCHEME = "Stellarium";
+/**
+ * The object a node signs to authenticate one operator request. `path` is the URL path without the
+ * query string, and `bodyHash` is `hashData` of the parsed JSON body (`{}` when there is none).
+ * Key order is part of the signed bytes. The operator rebuilds this in apps/operator/src/auth/nodeAuth.ts.
+ */
+export declare function operatorRequestPayload(method: string, path: string, body: unknown, timestamp: string): {
+    method: string;
+    path: string;
+    bodyHash: string;
+    timestamp: string;
+};
+/**
+ * `Authorization` header value for a request to `url`: the scheme, then base64url JSON of
+ * `{ publicKey, timestamp, signature }`. The operator accepts timestamps within a few minutes of its clock.
+ */
+export declare function operatorAuthorization(method: string, url: string, body: unknown, publicKey: string, privateKey: string): string;
+//# sourceMappingURL=operatorAuth.d.ts.map

package/dist/client/operatorAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operatorAuth.d.ts","sourceRoot":"","sources":["../../src/client/operatorAuth.ts"],"names":[],"mappings":"AAEA,iFAAiF;AACjF,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM;;;;;EAEpG;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAK/H"}

package/dist/client/operatorAuth.js

@@ -0,0 +1,21 @@
+import { hashData, signData } from "../crypto/utils.js";
+/** The scheme of the `Authorization` header on node requests to the operator. */
+export const OPERATOR_AUTH_SCHEME = 'Stellarium';
+/**
+ * The object a node signs to authenticate one operator request. `path` is the URL path without the
+ * query string, and `bodyHash` is `hashData` of the parsed JSON body (`{}` when there is none).
+ * Key order is part of the signed bytes. The operator rebuilds this in apps/operator/src/auth/nodeAuth.ts.
+ */
+export function operatorRequestPayload(method, path, body, timestamp) {
+    return { method: method.toUpperCase(), path, bodyHash: hashData(body ?? {}), timestamp };
+}
+/**
+ * `Authorization` header value for a request to `url`: the scheme, then base64url JSON of
+ * `{ publicKey, timestamp, signature }`. The operator accepts timestamps within a few minutes of its clock.
+ */
+export function operatorAuthorization(method, url, body, publicKey, privateKey) {
+    const timestamp = new Date().toISOString();
+    const signature = signData(operatorRequestPayload(method, new URL(url).pathname, body, timestamp), privateKey);
+    const credentials = Buffer.from(JSON.stringify({ publicKey, timestamp, signature })).toString('base64url');
+    return `${OPERATOR_AUTH_SCHEME} ${credentials}`;
+}

package/dist/client/operatorClient.d.ts

@@ -1,26 +1,85 @@
-export interface PaymentSubmission {
-    voucher: {
-        requestId: string;
-        invocationId: string;
-        amount: number;
-        recipientAddress: string;
-        signature: string;
-        expiresAt: string;
-        invocationHash: string;
-        publicKey: string;
+export type PaymentSubmission = FixedPaymentSubmission | InferencePaymentSubmission;
+export interface FixedPaymentVoucher {
+    kind?: undefined;
+    requestId: string;
+    invocationId: string;
+    amount: number;
+    recipientOrganizationId: string;
+    signature: string;
+    expiresAt: string;
+    invocationHash: string;
+    publicKey: string;
+}
+export interface InferenceVoucher {
+    kind: 'inference';
+    requestId: string;
+    invocationId: string;
+    maxAmount: number;
+    inputCostMicroUsdPerMillionTokens: number;
+    outputCostMicroUsdPerMillionTokens: number;
+    maxTokens: number;
+    recipientOrganizationId: string;
+    signature: string;
+    expiresAt: string;
+    invocationHash: string;
+    publicKey: string;
+}
+export interface FixedPaymentSubmission {
+    voucher: FixedPaymentVoucher;
+}
+/** The provider reports the call's usage; the operator charges it at the voucher's rates, up to the held `maxAmount`. */
+export interface InferencePaymentSubmission {
+    voucher: InferenceVoucher;
+    usage: {
+        inputTokens: number;
+        outputTokens: number;
     };
 }
-export declare const SETTLE_PAYMENT_MAX_RETRIES = 5;
-export declare const SETTLE_PAYMENT_BASE_DELAY_MS = 1000;
+/** Whether the operator placed a hold for a voucher. A refusal carries the operator's status and error. */
+export type AuthorizeResult = {
+    ok: true;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+};
+export declare const OPERATOR_MAX_RETRIES = 5;
+/** Authorization runs while the caller waits, so it gives up much sooner than capture and release. */
+export declare const AUTHORIZE_MAX_RETRIES = 2;
+export declare const OPERATOR_BASE_DELAY_MS = 1000;
+export declare const AUTHORIZE_BASE_DELAY_MS = 200;
 /** Per attempt. A timed-out attempt is retried like a network error. */
-export declare const SETTLE_PAYMENT_TIMEOUT_MS = 10000;
+export declare const OPERATOR_TIMEOUT_MS = 10000;
+/** Talks to the operator as this node. Every request is signed with the node's key. */
 export declare class OperatorClient {
     private readonly url;
-    constructor(url: string | undefined);
+    private readonly publicKey;
+    private readonly privateKey;
+    constructor(url: string | undefined, publicKey: string, privateKey: string);
     /**
-     * Retries `RETRYABLE_STATUSES` and network errors up to `SETTLE_PAYMENT_MAX_RETRIES` times.
+     * POSTs `body`, retrying `RETRYABLE_STATUSES` and network errors up to `retries` times.
+     * Each attempt is signed afresh, since the operator only accepts recent timestamps.
      * Throws the last network error if the operator could not be reached, or if no operator URL is configured.
      */
-    settlePayment(payment: PaymentSubmission): Promise<void>;
+    private post;
+    /**
+     * Returns the organization this node is enrolled in. With an `enrollmentToken` from the dashboard,
+     * enrolls the node first; a node that is already enrolled ignores the token. Throws if the node is
+     * not enrolled or the operator refuses.
+     */
+    session(enrollmentToken?: string): Promise<{
+        organizationId: string;
+    }>;
+    /**
+     * Asks the operator to hold the voucher's amount (or `maxAmount`) on the payer's balance, before
+     * running the paid function. An unreachable operator is reported as a 503 refusal.
+     */
+    authorize(voucher: FixedPaymentVoucher | InferenceVoucher): Promise<AuthorizeResult>;
+    /** Charges a held voucher: its amount, or for inference the reported usage capped at the hold. */
+    capture(payment: PaymentSubmission): Promise<void>;
+    /** Releases a held voucher without charging it, for a call that failed or cost nothing. */
+    release(voucher: FixedPaymentVoucher | InferenceVoucher): Promise<void>;
+    /** Logs a refusal instead of throwing: nothing waits on capture or release. Throws only if the operator can't be reached. */
+    private settle;
 }
 //# sourceMappingURL=operatorClient.d.ts.map

package/dist/client/operatorClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operatorClient.d.ts","sourceRoot":"","sources":["../../src/client/operatorClient.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAC9B,OAAO,EAAE;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;KACrB,CAAA;CACJ;AAED,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,4BAA4B,OAAO,CAAC;AACjD,wEAAwE;AACxE,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAmBhD,qBAAa,cAAc;IACX,OAAO,CAAC,QAAQ,CAAC,GAAG;IAAhC,YAA6B,GAAG,EAAE,MAAM,GAAG,SAAS,EAAI;IAExD;;;OAGG;IACG,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+B7D;CACJ"}
+{"version":3,"file":"operatorClient.d.ts","sourceRoot":"","sources":["../../src/client/operatorClient.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,iBAAiB,GAAG,sBAAsB,GAAG,0BAA0B,CAAC;AAEpF,MAAM,WAAW,mBAAmB;IAChC,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC,EAAE,MAAM,CAAC;IAC1C,kCAAkC,EAAE,MAAM,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,mBAAmB,CAAC;CAChC;AAED,yHAAyH;AACzH,MAAM,WAAW,0BAA0B;IACvC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,EAAE;QACH,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACxB,CAAC;CACL;AAED,2GAA2G;AAC3G,MAAM,MAAM,eAAe,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,sGAAsG;AACtG,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAC3C,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAC3C,wEAAwE;AACxE,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAwB1C,uFAAuF;AACvF,qBAAa,cAAc;IACX,OAAO,CAAC,QAAQ,CAAC,GAAG;IAAsB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAU,OAAO,CAAC,QAAQ,CAAC,UAAU;IAArH,YAA6B,GAAG,EAAE,MAAM,GAAG,SAAS,EAAmB,SAAS,EAAE,MAAM,EAAmB,UAAU,EAAE,MAAM,EAAI;IAEjI;;;;OAIG;YACW,IAAI;IA+BlB;;;;OAIG;IACG,OAAO,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAM3E;IAED;;;OAGG;IACG,SAAS,CAAC,OAAO,EAAE,mBAAmB,GAAG,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAczF;IAED,kGAAkG;IAC5F,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEvD;IAED,2FAA2F;IACrF,OAAO,CAAC,OAAO,EAAE,mBAAmB,GAAG,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5E;IAED,6HAA6H;YAC/G,MAAM;CAMvB"}

package/dist/client/operatorClient.js

@@ -1,62 +1,121 @@
-export const SETTLE_PAYMENT_MAX_RETRIES = 5;
-export const SETTLE_PAYMENT_BASE_DELAY_MS = 1000;
+import { operatorAuthorization } from "./operatorAuth.js";
+export const OPERATOR_MAX_RETRIES = 5;
+/** Authorization runs while the caller waits, so it gives up much sooner than capture and release. */
+export const AUTHORIZE_MAX_RETRIES = 2;
+export const OPERATOR_BASE_DELAY_MS = 1000;
+export const AUTHORIZE_BASE_DELAY_MS = 200;
 /** Per attempt. A timed-out attempt is retried like a network error. */
-export const SETTLE_PAYMENT_TIMEOUT_MS = 10_000;
+export const OPERATOR_TIMEOUT_MS = 10_000;
 /**
- * Transient failures. Resending is safe even if an earlier attempt reached the operator: it stores a
- * unique receipt per (requestId, invocationId) before paying, so a repeat is rejected with 409.
- * Rejections (400, 401, 404, 409, 422) are not retried because they won't change.
+ * Transient failures. Resending is safe even if an earlier attempt reached the operator: every payment
+ * request is idempotent per voucher (requestId, invocationId).
+ * Rejections (400, 401, 402, 403, 404, 409, 422) are not retried because they won't change.
  */
 const RETRYABLE_STATUSES = new Set([408, 429, 500, 502, 503, 504]);
 /**
- * Delay before retry `attempt` (0-based): exponential backoff (1s, 2s, 4s, 8s, 16s),
+ * Delay before retry `attempt` (0-based): exponential backoff from `baseDelayMs`,
  * or the operator's `Retry-After` seconds when that is longer.
  */
-function retryDelayMs(response, attempt) {
-    const backoff = SETTLE_PAYMENT_BASE_DELAY_MS * 2 ** attempt;
+function retryDelayMs(response, attempt, baseDelayMs) {
+    const backoff = baseDelayMs * 2 ** attempt;
     const retryAfterSeconds = Number(response?.headers.get('retry-after') ?? NaN);
     return Number.isFinite(retryAfterSeconds) ? Math.max(backoff, retryAfterSeconds * 1000) : backoff;
 }
+async function errorMessage(response) {
+    const body = await response.json().catch(() => undefined);
+    return typeof body?.error === 'string' ? body.error : `${response.status} ${response.statusText}`.trim();
+}
+/** Talks to the operator as this node. Every request is signed with the node's key. */
 export class OperatorClient {
     url;
-    constructor(url) {
+    publicKey;
+    privateKey;
+    constructor(url, publicKey, privateKey) {
         this.url = url;
+        this.publicKey = publicKey;
+        this.privateKey = privateKey;
     }
     /**
-     * Retries `RETRYABLE_STATUSES` and network errors up to `SETTLE_PAYMENT_MAX_RETRIES` times.
+     * POSTs `body`, retrying `RETRYABLE_STATUSES` and network errors up to `retries` times.
+     * Each attempt is signed afresh, since the operator only accepts recent timestamps.
      * Throws the last network error if the operator could not be reached, or if no operator URL is configured.
      */
-    async settlePayment(payment) {
+    async post(path, body, retries, baseDelayMs) {
         if (!this.url) {
-            throw new Error('Cannot settle payment: no operator URL is configured');
+            throw new Error('No operator URL is configured');
         }
-        const body = JSON.stringify(payment);
-        let response;
+        const url = `${this.url}${path}`;
+        const serialized = JSON.stringify(body);
         for (let attempt = 0;; attempt++) {
             let retryable;
             try {
-                response = await fetch(`${this.url}/payment`, {
+                const response = await fetch(url, {
                     method: 'POST',
-                    body,
+                    body: serialized,
                     headers: {
                         'Content-Type': 'application/json',
+                        Authorization: operatorAuthorization('POST', url, body, this.publicKey, this.privateKey),
                     },
-                    signal: AbortSignal.timeout(SETTLE_PAYMENT_TIMEOUT_MS),
+                    signal: AbortSignal.timeout(OPERATOR_TIMEOUT_MS),
                 });
-                if (!RETRYABLE_STATUSES.has(response.status) || attempt >= SETTLE_PAYMENT_MAX_RETRIES) {
-                    break;
+                if (!RETRYABLE_STATUSES.has(response.status) || attempt >= retries) {
+                    return response;
                 }
                 retryable = response;
             }
             catch (error) {
-                if (attempt >= SETTLE_PAYMENT_MAX_RETRIES) {
+                if (attempt >= retries) {
                     throw error;
                 }
             }
-            await new Promise(resolve => setTimeout(resolve, retryDelayMs(retryable, attempt)));
+            await new Promise(resolve => setTimeout(resolve, retryDelayMs(retryable, attempt, baseDelayMs)));
         }
+    }
+    /**
+     * Returns the organization this node is enrolled in. With an `enrollmentToken` from the dashboard,
+     * enrolls the node first; a node that is already enrolled ignores the token. Throws if the node is
+     * not enrolled or the operator refuses.
+     */
+    async session(enrollmentToken) {
+        const response = await this.post('/nodes/session', enrollmentToken ? { enrollmentToken } : {}, OPERATOR_MAX_RETRIES, OPERATOR_BASE_DELAY_MS);
+        if (!response.ok) {
+            throw new Error(`Operator refused this node's session: ${await errorMessage(response)}`);
+        }
+        return await response.json();
+    }
+    /**
+     * Asks the operator to hold the voucher's amount (or `maxAmount`) on the payer's balance, before
+     * running the paid function. An unreachable operator is reported as a 503 refusal.
+     */
+    async authorize(voucher) {
+        let response;
+        try {
+            response = await this.post('/payments/authorize', { voucher }, AUTHORIZE_MAX_RETRIES, AUTHORIZE_BASE_DELAY_MS);
+        }
+        catch (error) {
+            console.error('Failed to reach the operator to authorize a payment', error);
+            return { ok: false, status: 503, error: 'Payment operator is unavailable' };
+        }
+        if (response.ok) {
+            return { ok: true };
+        }
+        // Retries ran out on a transient failure: the caller may try again later.
+        const status = RETRYABLE_STATUSES.has(response.status) ? 503 : response.status;
+        return { ok: false, status, error: await errorMessage(response) };
+    }
+    /** Charges a held voucher: its amount, or for inference the reported usage capped at the hold. */
+    async capture(payment) {
+        await this.settle('/payments/capture', payment);
+    }
+    /** Releases a held voucher without charging it, for a call that failed or cost nothing. */
+    async release(voucher) {
+        await this.settle('/payments/release', { voucher });
+    }
+    /** Logs a refusal instead of throwing: nothing waits on capture or release. Throws only if the operator can't be reached. */
+    async settle(path, body) {
+        const response = await this.post(path, body, OPERATOR_MAX_RETRIES, OPERATOR_BASE_DELAY_MS);
         if (!response.ok) {
-            console.error(`Failed to settle payment: ${response.statusText} body: ${await response.text()}`);
+            console.error(`Operator refused ${path}: ${await errorMessage(response)}`);
         }
     }
 }

package/dist/db/db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/db/db.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,KAAK,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAE7C,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAW1D,wGAAwG;AACxG,wBAAsB,YAAY,CAAC,QAAQ,GAAE,MAA8B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAI9F;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,QAAQ,iBA0I9C"}
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/db/db.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,KAAK,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAE7C,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAc1D,wGAAwG;AACxG,wBAAsB,YAAY,CAAC,QAAQ,GAAE,MAA8B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAI9F;AAED,wBAAsB,YAAY,CAAC,EAAE,EAAE,QAAQ,iBA+I9C"}

package/dist/db/db.js

@@ -7,8 +7,11 @@ export const DEFAULT_DATABASE_PATH = './requestscript.db';
  * Version 2 added `resource_function.restricted`.
  * Version 3 added `resource.website` and the `description` columns of the resource tables.
  * Version 4 renamed `resource_function_payment_manifest.cost_lamports` to `cost_micro_usdc` (payments moved to USDC).
+ * Version 5 added `resource_function.kind` and per-token inference pricing, which made `cost_micro_usdc` nullable.
+ * Version 6 moved payments to Stripe: `*_micro_usdc` columns became `*_micro_usd`, and `recipient_address`
+ * became `recipient_organization_id`.
  */
-const SCHEMA_VERSION = 4;
+const SCHEMA_VERSION = 6;
 /** Opens (or creates) the node database and brings its schema up to date. Pass ':memory:' for tests. */
 export async function openDatabase(filename = DEFAULT_DATABASE_PATH) {
     const db = await open({ filename, driver: sqlite3.Database });
@@ -64,6 +67,7 @@ export async function createTables(db) {
             return_type TEXT NOT NULL,
             description TEXT,
             restricted INTEGER NOT NULL DEFAULT 0,
+            kind TEXT NOT NULL DEFAULT 'fixed',
             created_at TEXT NOT NULL,
             updated_at TEXT NOT NULL,
 
@@ -89,8 +93,12 @@ export async function createTables(db) {
         CREATE TABLE IF NOT EXISTS resource_function_payment_manifest (
             id INTEGER PRIMARY KEY AUTOINCREMENT,
             resource_function_id INTEGER NOT NULL,
-            cost_micro_usdc INTEGER NOT NULL,
-            recipient_address TEXT NOT NULL,
+            -- Null for inference functions, which are priced per million tokens instead.
+            cost_micro_usd INTEGER,
+            input_cost_micro_usd_per_million_tokens INTEGER,
+            output_cost_micro_usd_per_million_tokens INTEGER,
+            -- The hosting node's organization. Null only if a peer advertised the manifest without one.
+            recipient_organization_id TEXT,
             created_at TEXT NOT NULL,
             updated_at TEXT NOT NULL,
 

package/dist/index.d.ts

@@ -1,7 +1,10 @@
 export { StellariumNode, resolveConfig, type StellariumNodeOptions } from './server.js';
 export type { NodeConfig } from './service.js';
-export type { StellariumResource, StellariumResourceFunction, StellariumResourceFunctionParameter, StellariumResourceFunctionPaymentManifest } from './resource/repository.js';
-export { CombinationResourceInvoker, invocationHash, paymentVoucherPayload, type PaymentVoucher } from './resource/invoker.js';
+export type { StellariumFixedPaymentManifest, StellariumInferencePaymentManifest, StellariumResource, StellariumResourceFunction, StellariumResourceFunctionKind, StellariumResourceFunctionParameter, StellariumResourceFunctionPaymentManifest, } from './resource/repository.js';
+export { CombinationResourceInvoker, inferenceVoucherPayload, invocationHash, paymentVoucherPayload, type InferenceEstimate, type InferencePaymentVoucher, type PaymentVoucher, } from './resource/invoker.js';
+export { inferenceCharge, MAX_TOKENS_PARAMETER, type InferenceResult, type InferenceUsage } from './resource/inference.js';
+export type { FixedPaymentVoucher, InferencePaymentSubmission, InferenceVoucher, PaymentSubmission } from './client/operatorClient.js';
+export { OPERATOR_AUTH_SCHEME, operatorAuthorization, operatorRequestPayload } from './client/operatorAuth.js';
 export { grantHash, grantPayload, grantRenewalPayload, grantRequestPayload, grantsHash, CLOCK_SKEW_TOLERANCE_MS, invocationAuthorizationPayload, MAX_AUTHORIZATION_LIFETIME_MS, MAX_GRANT_CHAIN_LENGTH, MAX_GRANT_LIFETIME_MS, type Capability, type Grant, type GrantRenewalRequest, type GrantRequest, type InvocationAuthorization, } from './grant/grant.js';
 export type { ApproveGrant, GrantApproval, GrantOptions } from './grant/service.js';
 export type { GrantKey } from './grant/repository.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACxF,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,mCAAmC,EAAE,yCAAyC,EAAE,MAAM,0BAA0B,CAAC;AAE/K,OAAO,EAAE,0BAA0B,EAAE,cAAc,EAAE,qBAAqB,EAAE,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE/H,OAAO,EACH,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,uBAAuB,EACvB,8BAA8B,EAC9B,6BAA6B,EAC7B,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,UAAU,EACf,KAAK,KAAK,EACV,KAAK,mBAAmB,EACxB,KAAK,YAAY,EACjB,KAAK,uBAAuB,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACpF,YAAY,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACxF,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EACR,8BAA8B,EAC9B,kCAAkC,EAClC,kBAAkB,EAClB,0BAA0B,EAC1B,8BAA8B,EAC9B,mCAAmC,EACnC,yCAAyC,GAC5C,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACH,0BAA0B,EAC1B,uBAAuB,EACvB,cAAc,EACd,qBAAqB,EACrB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,cAAc,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC3H,YAAY,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEvI,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAE/G,OAAO,EACH,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,uBAAuB,EACvB,8BAA8B,EAC9B,6BAA6B,EAC7B,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,UAAU,EACf,KAAK,KAAK,EACV,KAAK,mBAAmB,EACxB,KAAK,YAAY,EACjB,KAAK,uBAAuB,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACpF,YAAY,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -1,5 +1,8 @@
 export { StellariumNode, resolveConfig } from './server.js';
 // The voucher wire format, so the operator and other settlers can test against the real signer.
-export { CombinationResourceInvoker, invocationHash, paymentVoucherPayload } from './resource/invoker.js';
+export { CombinationResourceInvoker, inferenceVoucherPayload, invocationHash, paymentVoucherPayload, } from './resource/invoker.js';
+export { inferenceCharge, MAX_TOKENS_PARAMETER } from './resource/inference.js';
+// The operator request signature, so the operator can test against the real signer.
+export { OPERATOR_AUTH_SCHEME, operatorAuthorization, operatorRequestPayload } from './client/operatorAuth.js';
 // Grant wire format, so other implementations can test against the real signer.
 export { grantHash, grantPayload, grantRenewalPayload, grantRequestPayload, grantsHash, CLOCK_SKEW_TOLERANCE_MS, invocationAuthorizationPayload, MAX_AUTHORIZATION_LIFETIME_MS, MAX_GRANT_CHAIN_LENGTH, MAX_GRANT_LIFETIME_MS, } from './grant/grant.js';

package/dist/resource/inference.d.ts

@@ -0,0 +1,38 @@
+import type { ResourceFunctionCallParameter } from "requestscript";
+import type { StellariumInferencePaymentManifest, StellariumResourceFunction, StellariumResourceFunctionPaymentManifest } from "./repository.js";
+/** The parameter every inference function takes: the most output tokens the caller allows. */
+export declare const MAX_TOKENS_PARAMETER = "maxTokens";
+/** Token counts an inference function reports for one call. */
+export interface InferenceUsage {
+    inputTokens: number;
+    outputTokens: number;
+}
+/** What an inference function's `exec` returns. Callers' scripts see only `value`. */
+export interface InferenceResult {
+    value: unknown;
+    usage: InferenceUsage;
+}
+/** The per-million-token rates a charge is computed from. */
+export interface InferenceRates {
+    inputCostMicroUsdPerMillionTokens: number;
+    outputCostMicroUsdPerMillionTokens: number;
+}
+export declare function isInferenceManifest(manifest: StellariumResourceFunctionPaymentManifest | undefined): manifest is StellariumInferencePaymentManifest;
+export declare function isInferenceFunction(fn: Pick<StellariumResourceFunction, 'kind'>): boolean;
+/**
+ * Micro-USD owed for `inputTokens` and `outputTokens` at `rates`, rounded up.
+ * Computed exactly in BigInt. Throws if the charge isn't a safe integer.
+ * The operator keeps a copy (apps/operator/src/inference.ts) that must stay in sync.
+ */
+export declare function inferenceCharge(rates: InferenceRates, inputTokens: number, outputTokens: number): number;
+/** The call's `maxTokens` value, or undefined unless it is a positive int32. */
+export declare function parseMaxTokens(parameters: ResourceFunctionCallParameter[]): number | undefined;
+/** The usage an inference `exec` reported, or undefined if it isn't two nonnegative safe integers. */
+export declare function parseInferenceResult(result: unknown): InferenceResult | undefined;
+/**
+ * Throws unless an inference function declares an int32 `maxTokens` parameter and, when paid,
+ * an inference payment manifest with nonnegative integer rates and an `estimateInputTokens` function.
+ * A function that isn't an inference function may not carry an inference manifest.
+ */
+export declare function validateInferenceFunction(fn: StellariumResourceFunction): void;
+//# sourceMappingURL=inference.d.ts.map

package/dist/resource/inference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference.d.ts","sourceRoot":"","sources":["../../src/resource/inference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,KAAK,EAAE,kCAAkC,EAAE,0BAA0B,EAAE,yCAAyC,EAAE,MAAM,iBAAiB,CAAC;AAEjJ,8FAA8F;AAC9F,eAAO,MAAM,oBAAoB,cAAc,CAAC;AAIhD,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,sFAAsF;AACtF,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,cAAc,CAAC;CACzB;AAED,6DAA6D;AAC7D,MAAM,WAAW,cAAc;IAC3B,iCAAiC,EAAE,MAAM,CAAC;IAC1C,kCAAkC,EAAE,MAAM,CAAC;CAC9C;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,yCAAyC,GAAG,SAAS,GAAG,QAAQ,IAAI,kCAAkC,CAEnJ;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,0BAA0B,EAAE,MAAM,CAAC,GAAG,OAAO,CAEzF;AAMD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAQxG;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,UAAU,EAAE,6BAA6B,EAAE,GAAG,MAAM,GAAG,SAAS,CAG9F;AAED,sGAAsG;AACtG,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CAajF;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,0BAA0B,GAAG,IAAI,CAsB9E"}

package/dist/resource/inference.js

@@ -0,0 +1,74 @@
+/** The parameter every inference function takes: the most output tokens the caller allows. */
+export const MAX_TOKENS_PARAMETER = 'maxTokens';
+const INT32_MAX = 2_147_483_647;
+export function isInferenceManifest(manifest) {
+    return typeof manifest === 'object' && manifest !== null && 'inputCostMicroUsdPerMillionTokens' in manifest;
+}
+export function isInferenceFunction(fn) {
+    return fn.kind === 'inference';
+}
+function isNonnegativeSafeInteger(value) {
+    return Number.isSafeInteger(value) && value >= 0;
+}
+/**
+ * Micro-USD owed for `inputTokens` and `outputTokens` at `rates`, rounded up.
+ * Computed exactly in BigInt. Throws if the charge isn't a safe integer.
+ * The operator keeps a copy (apps/operator/src/inference.ts) that must stay in sync.
+ */
+export function inferenceCharge(rates, inputTokens, outputTokens) {
+    const micros = BigInt(inputTokens) * BigInt(rates.inputCostMicroUsdPerMillionTokens)
+        + BigInt(outputTokens) * BigInt(rates.outputCostMicroUsdPerMillionTokens);
+    const charge = (micros + 999999n) / 1000000n;
+    if (charge > BigInt(Number.MAX_SAFE_INTEGER)) {
+        throw new Error('Inference charge exceeds the largest safe integer');
+    }
+    return Number(charge);
+}
+/** The call's `maxTokens` value, or undefined unless it is a positive int32. */
+export function parseMaxTokens(parameters) {
+    const value = parameters.find(parameter => parameter.name === MAX_TOKENS_PARAMETER)?.value;
+    return Number.isInteger(value) && value > 0 && value <= INT32_MAX ? value : undefined;
+}
+/** The usage an inference `exec` reported, or undefined if it isn't two nonnegative safe integers. */
+export function parseInferenceResult(result) {
+    if (typeof result !== 'object' || result === null || !('usage' in result)) {
+        return undefined;
+    }
+    const { value, usage } = result;
+    if (typeof usage !== 'object' || usage === null) {
+        return undefined;
+    }
+    const { inputTokens, outputTokens } = usage;
+    if (!isNonnegativeSafeInteger(inputTokens) || !isNonnegativeSafeInteger(outputTokens)) {
+        return undefined;
+    }
+    return { value, usage: { inputTokens, outputTokens } };
+}
+/**
+ * Throws unless an inference function declares an int32 `maxTokens` parameter and, when paid,
+ * an inference payment manifest with nonnegative integer rates and an `estimateInputTokens` function.
+ * A function that isn't an inference function may not carry an inference manifest.
+ */
+export function validateInferenceFunction(fn) {
+    if (!isInferenceFunction(fn)) {
+        if (isInferenceManifest(fn.paymentManifest)) {
+            throw new Error(`Function ${fn.name} has per-token pricing but is not declared with kind 'inference'`);
+        }
+        return;
+    }
+    const maxTokens = fn.parameters.find(parameter => parameter.name === MAX_TOKENS_PARAMETER);
+    if (maxTokens?.type !== 'int32') {
+        throw new Error(`Inference function ${fn.name} must take a '${MAX_TOKENS_PARAMETER}: int32' parameter`);
+    }
+    if (!fn.paymentManifest) {
+        return;
+    }
+    if (!isInferenceManifest(fn.paymentManifest)
+        || !isNonnegativeSafeInteger(fn.paymentManifest.inputCostMicroUsdPerMillionTokens)
+        || !isNonnegativeSafeInteger(fn.paymentManifest.outputCostMicroUsdPerMillionTokens)) {
+        throw new Error(`Inference function ${fn.name} must price input and output tokens as nonnegative integer micro-USD per million tokens`);
+    }
+    if (typeof fn.estimateInputTokens !== 'function') {
+        throw new Error(`Paid inference function ${fn.name} must declare estimateInputTokens`);
+    }
+}

package/dist/resource/invoker.d.ts

@@ -1,16 +1,41 @@
 import { Resource, ResourceFunctionCallParameter, ResourceInvoker } from "requestscript";
 import type { GrantService } from "../grant/service.js";
-import { ResourceRepository } from "./repository.js";
+import { type InferenceUsage } from "./inference.js";
+import { ResourceRepository, type StellariumInferencePaymentManifest } from "./repository.js";
 export interface PaymentVoucher {
     requestId: string;
     invocationId: string;
     amount: number;
-    recipientAddress: string;
+    recipientOrganizationId: string;
     signature: string;
     expiresAt: string;
     invocationHash: string;
     publicKey: string;
 }
+/**
+ * A voucher for an inference function. It signs the provider's per-million-token rates and the call's
+ * `maxTokens` instead of an amount: the operator charges the usage the provider reports at those rates,
+ * up to `maxAmount`.
+ */
+export interface InferencePaymentVoucher {
+    kind: 'inference';
+    requestId: string;
+    invocationId: string;
+    maxAmount: number;
+    inputCostMicroUsdPerMillionTokens: number;
+    outputCostMicroUsdPerMillionTokens: number;
+    maxTokens: number;
+    recipientOrganizationId: string;
+    signature: string;
+    expiresAt: string;
+    invocationHash: string;
+    publicKey: string;
+}
+/** What a provider's `POST /v1/run/resource/estimate` answers. */
+export interface InferenceEstimate {
+    inputTokens: number;
+    maxAmount: number;
+}
 /**
  * Hash binding a voucher to one function call. Providers recompute it from the
  * request they receive and compare it to `voucher.invocationHash`.
@@ -25,29 +50,57 @@ export declare function paymentVoucherPayload(voucher: Omit<PaymentVoucher, "sig
     requestId: string;
     invocationId: string;
     amount: number;
-    recipientAddress: string;
+    recipientOrganizationId: string;
     expiresAt: string;
     invocationHash: string;
     publicKey: string;
 };
+/**
+ * The object `createInferenceVoucher` signs: every inference voucher field except `signature`.
+ * Key order is part of the signed bytes.
+ */
+export declare function inferenceVoucherPayload(voucher: Omit<InferencePaymentVoucher, "signature">): {
+    kind: "inference";
+    requestId: string;
+    invocationId: string;
+    maxAmount: number;
+    inputCostMicroUsdPerMillionTokens: number;
+    outputCostMicroUsdPerMillionTokens: number;
+    maxTokens: number;
+    recipientOrganizationId: string;
+    expiresAt: string;
+    invocationHash: string;
+    publicKey: string;
+};
+export declare function isInferenceVoucher(voucher: PaymentVoucher | InferencePaymentVoucher): voucher is InferencePaymentVoucher;
+export declare const PAYMENT_VOUCHER_LIFETIME_MS: number;
+/** Inference can run for minutes, and the operator refuses a voucher that expired before the provider settled it. */
+export declare const INFERENCE_VOUCHER_LIFETIME_MS: number;
 export declare const EXTERNAL_INVOKE_MAX_RETRIES = 3;
 export declare const EXTERNAL_INVOKE_BASE_DELAY_MS = 500;
 /** Per attempt. A timed-out attempt is retried like a network error. */
 export declare const EXTERNAL_INVOKE_TIMEOUT_MS = 30000;
+/** Per attempt, for calls to inference functions. Every attempt fits within `INFERENCE_VOUCHER_LIFETIME_MS`. */
+export declare const INFERENCE_INVOKE_TIMEOUT_MS = 120000;
 export declare class CombinationResourceInvoker implements ResourceInvoker {
     private readonly resourceRepository;
-    private readonly costLimitMicroUsdc;
+    private readonly costLimitMicroUsd;
     private readonly publicKey;
     private readonly privateKey;
     private readonly grantService?;
-    /** Without a `grantService`, calls to restricted remote functions fail. */
-    constructor(resourceRepository: ResourceRepository, costLimitMicroUsdc: number, publicKey: string, privateKey: string, grantService?: GrantService | undefined);
+    private readonly inferenceCostLimitMicroUsd;
+    /**
+     * Without a `grantService`, calls to restricted remote functions fail.
+     * `inferenceCostLimitMicroUsd` caps an inference voucher's `maxAmount`, and defaults to `costLimitMicroUsd`.
+     */
+    constructor(resourceRepository: ResourceRepository, costLimitMicroUsd: number, publicKey: string, privateKey: string, grantService?: GrantService | undefined, inferenceCostLimitMicroUsd?: number);
     /**
      * Invoke a function on a resource.
      * If the resource has a baseUrl, it will be invoked as a remote function.
      * If the function is restricted, it attaches an authorization from a held grant.
      * If the resource has a paymentManifest, it will create a payment voucher and pass it to the resource.
-     * Otherwise, it will be invoked as a local function.
+     * A paid inference function is first priced by the provider's estimate endpoint.
+     * Otherwise, it will be invoked as a local function. A local inference function's usage is returned beside its value.
      *
      * @param resource - The resource to invoke
      * @param functionName - The name of the function to invoke
@@ -59,7 +112,11 @@ export declare class CombinationResourceInvoker implements ResourceInvoker {
         error: {
             message: string;
         } | null;
+        usage?: InferenceUsage;
     }>;
-    createPaymentVoucher(recipientAddress: string, amount: number, resourcePath: string, resourceName: string, functionName: string, parameters: ResourceFunctionCallParameter[]): PaymentVoucher;
+    /** Asks the provider what a call to a paid inference function will cost at most. */
+    private estimate;
+    createPaymentVoucher(recipientOrganizationId: string, amount: number, resourcePath: string, resourceName: string, functionName: string, parameters: ResourceFunctionCallParameter[]): PaymentVoucher;
+    createInferenceVoucher(manifest: StellariumInferencePaymentManifest, maxAmount: number, maxTokens: number, resourcePath: string, resourceName: string, functionName: string, parameters: ResourceFunctionCallParameter[]): InferencePaymentVoucher;
 }
 //# sourceMappingURL=invoker.d.ts.map

package/dist/resource/invoker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoker.d.ts","sourceRoot":"","sources":["../../src/resource/invoker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,6BAA6B,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEzF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,WAAW,cAAc;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC1B,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,6BAA6B,EAAE,GAC5C,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;;;;;;;;EAG/E;AAED,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAC7C,eAAO,MAAM,6BAA6B,MAAM,CAAC;AACjD,wEAAwE;AACxE,eAAO,MAAM,0BAA0B,QAAS,CAAC;AA2BjD,qBAAa,0BAA2B,YAAW,eAAe;IAGlD,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAAsB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAAU,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAU,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAU,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IADzN,2EAA2E;IAC3E,YAA6B,kBAAkB,EAAE,kBAAkB,EAAmB,kBAAkB,EAAE,MAAM,EAAmB,SAAS,EAAE,MAAM,EAAmB,UAAU,EAAE,MAAM,EAAmB,YAAY,CAAC,EAAE,YAAY,YAAA,EAAI;IAC3O;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAC,CAAC,CAgE7J;IAED,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,cAAc,CAQ5L;CACJ"}
+{"version":3,"file":"invoker.d.ts","sourceRoot":"","sources":["../../src/resource/invoker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,6BAA6B,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEzF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAmB,KAAK,cAAc,EAAkF,MAAM,gBAAgB,CAAC;AACtJ,OAAO,EAAE,kBAAkB,EAAE,KAAK,kCAAkC,EAAmC,MAAM,iBAAiB,CAAC;AAE/H,MAAM,WAAW,cAAc;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC,EAAE,MAAM,CAAC;IAC1C,kCAAkC,EAAE,MAAM,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,kEAAkE;AAClE,MAAM,WAAW,iBAAiB;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC1B,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,6BAA6B,EAAE,GAC5C,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;;;;;;;;EAG/E;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC;;;;;;;;;;;;EAG1F;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,uBAAuB,GAAG,OAAO,IAAI,uBAAuB,CAExH;AAED,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AACzD,qHAAqH;AACrH,eAAO,MAAM,6BAA6B,QAAiB,CAAC;AAE5D,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAC7C,eAAO,MAAM,6BAA6B,MAAM,CAAC;AACjD,wEAAwE;AACxE,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,gHAAgH;AAChH,eAAO,MAAM,2BAA2B,SAAU,CAAC;AA2BnD,qBAAa,0BAA2B,YAAW,eAAe;IAO1D,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,0BAA0B;IAV/C;;;OAGG;IACH,YACqB,kBAAkB,EAAE,kBAAkB,EACtC,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,YAAY,YAAA,EAC3B,0BAA0B,GAAE,MAA0B,EACvE;IACJ;;;;;;;;;;;;OAYG;IACG,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,cAAc,CAAA;KAAE,CAAC,CAoGtL;IAED,oFAAoF;YACtE,QAAQ;IAuBtB,oBAAoB,CAAC,uBAAuB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,cAAc,CAOnM;IAED,sBAAsB,CAAC,QAAQ,EAAE,kCAAkC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,uBAAuB,CAejP;CACJ"}