stellarium-ts 0.16.0 → 0.17.0

package/dist/resource/invoker.js

@@ -13,16 +13,16 @@ export function invocationHash(resourcePath, resourceName, functionName, paramet
  * Key order is part of the signed bytes.
  */
 export function paymentVoucherPayload(voucher) {
-    const { requestId, invocationId, amount, recipientAddress, expiresAt, invocationHash, publicKey } = voucher;
-    return { requestId, invocationId, amount, recipientAddress, expiresAt, invocationHash, publicKey };
+    const { requestId, invocationId, amount, recipientOrganizationId, expiresAt, invocationHash, publicKey } = voucher;
+    return { requestId, invocationId, amount, recipientOrganizationId, expiresAt, invocationHash, publicKey };
 }
 /**
  * The object `createInferenceVoucher` signs: every inference voucher field except `signature`.
  * Key order is part of the signed bytes.
  */
 export function inferenceVoucherPayload(voucher) {
-    const { kind, requestId, invocationId, maxAmount, inputCostMicroUsdcPerMillionTokens, outputCostMicroUsdcPerMillionTokens, maxTokens, recipientAddress, expiresAt, invocationHash, publicKey } = voucher;
-    return { kind, requestId, invocationId, maxAmount, inputCostMicroUsdcPerMillionTokens, outputCostMicroUsdcPerMillionTokens, maxTokens, recipientAddress, expiresAt, invocationHash, publicKey };
+    const { kind, requestId, invocationId, maxAmount, inputCostMicroUsdPerMillionTokens, outputCostMicroUsdPerMillionTokens, maxTokens, recipientOrganizationId, expiresAt, invocationHash, publicKey } = voucher;
+    return { kind, requestId, invocationId, maxAmount, inputCostMicroUsdPerMillionTokens, outputCostMicroUsdPerMillionTokens, maxTokens, recipientOrganizationId, expiresAt, invocationHash, publicKey };
 }
 export function isInferenceVoucher(voucher) {
     return voucher.kind === 'inference';
@@ -63,22 +63,22 @@ async function fetchWithRetry(url, init, timeoutMs = EXTERNAL_INVOKE_TIMEOUT_MS)
 }
 export class CombinationResourceInvoker {
     resourceRepository;
-    costLimitMicroUsdc;
+    costLimitMicroUsd;
     publicKey;
     privateKey;
     grantService;
-    inferenceCostLimitMicroUsdc;
+    inferenceCostLimitMicroUsd;
     /**
      * Without a `grantService`, calls to restricted remote functions fail.
-     * `inferenceCostLimitMicroUsdc` caps an inference voucher's `maxAmount`, and defaults to `costLimitMicroUsdc`.
+     * `inferenceCostLimitMicroUsd` caps an inference voucher's `maxAmount`, and defaults to `costLimitMicroUsd`.
      */
-    constructor(resourceRepository, costLimitMicroUsdc, publicKey, privateKey, grantService, inferenceCostLimitMicroUsdc = costLimitMicroUsdc) {
+    constructor(resourceRepository, costLimitMicroUsd, publicKey, privateKey, grantService, inferenceCostLimitMicroUsd = costLimitMicroUsd) {
         this.resourceRepository = resourceRepository;
-        this.costLimitMicroUsdc = costLimitMicroUsdc;
+        this.costLimitMicroUsd = costLimitMicroUsd;
         this.publicKey = publicKey;
         this.privateKey = privateKey;
         this.grantService = grantService;
-        this.inferenceCostLimitMicroUsdc = inferenceCostLimitMicroUsdc;
+        this.inferenceCostLimitMicroUsd = inferenceCostLimitMicroUsd;
     }
     /**
      * Invoke a function on a resource.
@@ -117,11 +117,14 @@ export class CombinationResourceInvoker {
             }
             const manifest = resourceFunction.paymentManifest;
             const inference = isInferenceFunction(resourceFunction);
+            if (manifest && !manifest.recipientOrganizationId) {
+                return { value: null, error: { message: `Failed to invoke ${resource.name}.${functionName}: its payment manifest names no recipient organization` } };
+            }
             if (manifest && inference) {
                 console.log(`Resource function ${resource.name}.${functionName} is a paid inference function, creating payment voucher...`);
                 // Peers' manifests aren't validated on receipt.
-                if (!isInferenceManifest(manifest) || !Number.isSafeInteger(manifest.inputCostMicroUsdcPerMillionTokens) || manifest.inputCostMicroUsdcPerMillionTokens < 0
-                    || !Number.isSafeInteger(manifest.outputCostMicroUsdcPerMillionTokens) || manifest.outputCostMicroUsdcPerMillionTokens < 0) {
+                if (!isInferenceManifest(manifest) || !Number.isSafeInteger(manifest.inputCostMicroUsdPerMillionTokens) || manifest.inputCostMicroUsdPerMillionTokens < 0
+                    || !Number.isSafeInteger(manifest.outputCostMicroUsdPerMillionTokens) || manifest.outputCostMicroUsdPerMillionTokens < 0) {
                     return { value: null, error: { message: `Failed to invoke ${resource.name}.${functionName}: its payment manifest has no valid per-token pricing` } };
                 }
                 const maxTokens = parseMaxTokens(parameters);
@@ -136,8 +139,8 @@ export class CombinationResourceInvoker {
                 if (inferenceCharge(manifest, estimate.inputTokens, maxTokens) !== estimate.maxAmount) {
                     return { value: null, error: { message: `Failed to invoke ${resource.name}.${functionName}: the provider's estimate doesn't match its advertised rates` } };
                 }
-                if (estimate.maxAmount > this.inferenceCostLimitMicroUsdc) {
-                    throw new Error(`Function ${functionName} may cost up to ${estimate.maxAmount} micro-USDC, which exceeds the inference cost limit of ${this.inferenceCostLimitMicroUsdc} micro-USDC`);
+                if (estimate.maxAmount > this.inferenceCostLimitMicroUsd) {
+                    throw new Error(`Function ${functionName} may cost up to ${estimate.maxAmount} micro-USD, which exceeds the inference cost limit of ${this.inferenceCostLimitMicroUsd} micro-USD`);
                 }
                 requestBody.paymentVoucher = this.createInferenceVoucher(manifest, estimate.maxAmount, maxTokens, resource.path, resource.name, functionName, parameters);
             }
@@ -146,10 +149,10 @@ export class CombinationResourceInvoker {
                 if (isInferenceManifest(manifest)) {
                     return { value: null, error: { message: `Failed to invoke ${resource.name}.${functionName}: it has per-token pricing but isn't an inference function` } };
                 }
-                if (manifest.costMicroUsdc > this.costLimitMicroUsdc) {
-                    throw new Error(`Function ${functionName} cost ${manifest.costMicroUsdc} micro-USDC, which exceeds the cost limit of ${this.costLimitMicroUsdc} micro-USDC`);
+                if (manifest.costMicroUsd > this.costLimitMicroUsd) {
+                    throw new Error(`Function ${functionName} cost ${manifest.costMicroUsd} micro-USD, which exceeds the cost limit of ${this.costLimitMicroUsd} micro-USD`);
                 }
-                requestBody.paymentVoucher = this.createPaymentVoucher(manifest.recipientAddress, manifest.costMicroUsdc, resource.path, resource.name, functionName, parameters);
+                requestBody.paymentVoucher = this.createPaymentVoucher(manifest.recipientOrganizationId, manifest.costMicroUsd, resource.path, resource.name, functionName, parameters);
             }
             // The voucher is created once and reused on every attempt, so the operator's
             // requestId/invocationId check prevents a retried call from being settled twice.
@@ -210,13 +213,13 @@ export class CombinationResourceInvoker {
         }
         return { inputTokens: inputTokens, maxAmount: maxAmount };
     }
-    createPaymentVoucher(recipientAddress, amount, resourcePath, resourceName, functionName, parameters) {
+    createPaymentVoucher(recipientOrganizationId, amount, resourcePath, resourceName, functionName, parameters) {
         const requestId = crypto.randomUUID();
         const invocationId = crypto.randomUUID();
         const expiresAt = new Date(Date.now() + PAYMENT_VOUCHER_LIFETIME_MS).toISOString();
         const hash = invocationHash(resourcePath, resourceName, functionName, parameters);
-        const signature = signData(paymentVoucherPayload({ requestId, invocationId, amount, recipientAddress, expiresAt, invocationHash: hash, publicKey: this.publicKey }), this.privateKey);
-        return { requestId, invocationId, amount, recipientAddress, signature, expiresAt, invocationHash: hash, publicKey: this.publicKey };
+        const signature = signData(paymentVoucherPayload({ requestId, invocationId, amount, recipientOrganizationId, expiresAt, invocationHash: hash, publicKey: this.publicKey }), this.privateKey);
+        return { requestId, invocationId, amount, recipientOrganizationId, signature, expiresAt, invocationHash: hash, publicKey: this.publicKey };
     }
     createInferenceVoucher(manifest, maxAmount, maxTokens, resourcePath, resourceName, functionName, parameters) {
         const unsigned = {
@@ -224,10 +227,10 @@ export class CombinationResourceInvoker {
             requestId: crypto.randomUUID(),
             invocationId: crypto.randomUUID(),
             maxAmount,
-            inputCostMicroUsdcPerMillionTokens: manifest.inputCostMicroUsdcPerMillionTokens,
-            outputCostMicroUsdcPerMillionTokens: manifest.outputCostMicroUsdcPerMillionTokens,
+            inputCostMicroUsdPerMillionTokens: manifest.inputCostMicroUsdPerMillionTokens,
+            outputCostMicroUsdPerMillionTokens: manifest.outputCostMicroUsdPerMillionTokens,
             maxTokens,
-            recipientAddress: manifest.recipientAddress,
+            recipientOrganizationId: manifest.recipientOrganizationId,
             expiresAt: new Date(Date.now() + INFERENCE_VOUCHER_LIFETIME_MS).toISOString(),
             invocationHash: invocationHash(resourcePath, resourceName, functionName, parameters),
             publicKey: this.publicKey,

package/dist/resource/repository.d.ts

@@ -1,18 +1,21 @@
 import { Resource, ResourceFunction, ResourceFunctionCallParameter, ResourceFunctionParameter } from "requestscript";
 import { Database } from "sqlite";
 import type { StoredPeer } from "../peer/repository.js";
-/** A flat price per call. */
+/**
+ * A flat price per call. `recipientOrganizationId` is filled in by the hosting node when it advertises
+ * the function, from the organization it is enrolled in; resource authors leave it out.
+ */
 export interface StellariumFixedPaymentManifest {
     id?: number;
-    costMicroUsdc: number;
-    recipientAddress: string;
+    costMicroUsd: number;
+    recipientOrganizationId?: string;
 }
 /** Per-token pricing for an inference function. Either rate may be 0. */
 export interface StellariumInferencePaymentManifest {
     id?: number;
-    inputCostMicroUsdcPerMillionTokens: number;
-    outputCostMicroUsdcPerMillionTokens: number;
-    recipientAddress: string;
+    inputCostMicroUsdPerMillionTokens: number;
+    outputCostMicroUsdPerMillionTokens: number;
+    recipientOrganizationId?: string;
 }
 export type StellariumResourceFunctionPaymentManifest = StellariumFixedPaymentManifest | StellariumInferencePaymentManifest;
 /** Fixed functions return one value. Inference functions run AI inference and are priced per token. */
@@ -61,8 +64,10 @@ export declare class ResourceRepository {
     private readonly db;
     private resources;
     private readonly baseUrl;
+    private readonly organizationId?;
     private writes;
-    constructor(db: Database, resources?: StellariumResource[], baseUrl?: string);
+    /** `organizationId` is the operator organization this node is enrolled in, which is paid for its functions. */
+    constructor(db: Database, resources?: StellariumResource[], baseUrl?: string, organizationId?: string | undefined);
     private serialize;
     private transaction;
     private isInternal;
@@ -84,6 +89,7 @@ export declare class ResourceRepository {
     private deleteFunctions;
     getInternalResource(path: string, name: string): Promise<StellariumResource | undefined>;
     getResource(key: string): Promise<Resource | undefined>;
+    /** This node's resources, with its base URL and its organization as the recipient of every paid function. */
     getInternalResources(): Promise<StellariumResource[]>;
     /** Learned resources in insertion order. A negative `limit` means no limit. */
     getExternalResources(offset?: number, limit?: number): Promise<StellariumResource[]>;

package/dist/resource/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/resource/repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AACrH,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD,6BAA6B;AAC7B,MAAM,WAAW,8BAA8B;IAC3C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC5B;AAED,yEAAyE;AACzE,MAAM,WAAW,kCAAkC;IAC/C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,kCAAkC,EAAE,MAAM,CAAC;IAC3C,mCAAmC,EAAE,MAAM,CAAC;IAC5C,gBAAgB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,yCAAyC,GAAG,8BAA8B,GAAG,kCAAkC,CAAC;AAE5H,uGAAuG;AACvG,MAAM,MAAM,8BAA8B,GAAG,OAAO,GAAG,WAAW,CAAC;AAEnE,MAAM,WAAW,mCAAoC,SAAQ,yBAAyB;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAChE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,mCAAmC,EAAE,CAAC;IAClD,eAAe,CAAC,EAAE,yCAAyC,CAAC;IAC5D,0FAA0F;IAC1F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kIAAkI;IAClI,IAAI,CAAC,EAAE,8BAA8B,CAAC;IACtC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,6BAA6B,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,kBAAmB,SAAQ,QAAQ;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,0BAA0B,EAAE,CAAC;CAC3C;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM;;;EAE1F;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC;AA4B7E,qBAAa,kBAAkB;IAIf,OAAO,CAAC,QAAQ,CAAC,EAAE;IAAY,OAAO,CAAC,SAAS;IAA6B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFjH,OAAO,CAAC,MAAM,CAAuC;IAErD,YAA6B,EAAE,EAAE,QAAQ,EAAU,SAAS,GAAE,kBAAkB,EAAO,EAAmB,OAAO,GAAE,MAAW,EAAI;IAElI,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,UAAU;IAIlB;;;OAGG;IACG,KAAK,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUvD;IAED;;;;;;OAMG;IACG,OAAO,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAoC1H;YAEa,MAAM;YAcN,eAAe;YAoCf,eAAe;IAOvB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAE7F;IAEK,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CA6B5D;IAEK,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAE1D;IAED,+EAA+E;IACzE,oBAAoB,CAAC,MAAM,SAAI,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAgBhF;IAEK,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAsB3I;IAEK,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAapF;IAEK,qBAAqB,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,mCAAmC,EAAE,CAAC,CAMtG;IAEK,kCAAkC,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,yCAAyC,GAAG,SAAS,CAAC,CAkBnI;IAED;;;OAGG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQ/E;CACJ"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/resource/repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AACrH,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC3C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,yEAAyE;AACzE,MAAM,WAAW,kCAAkC;IAC/C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,iCAAiC,EAAE,MAAM,CAAC;IAC1C,kCAAkC,EAAE,MAAM,CAAC;IAC3C,uBAAuB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,MAAM,yCAAyC,GAAG,8BAA8B,GAAG,kCAAkC,CAAC;AAE5H,uGAAuG;AACvG,MAAM,MAAM,8BAA8B,GAAG,OAAO,GAAG,WAAW,CAAC;AAEnE,MAAM,WAAW,mCAAoC,SAAQ,yBAAyB;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAChE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,mCAAmC,EAAE,CAAC;IAClD,eAAe,CAAC,EAAE,yCAAyC,CAAC;IAC5D,0FAA0F;IAC1F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kIAAkI;IAClI,IAAI,CAAC,EAAE,8BAA8B,CAAC;IACtC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,6BAA6B,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,kBAAmB,SAAQ,QAAQ;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,0BAA0B,EAAE,CAAC;CAC3C;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM;;;EAE1F;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC;AA4B7E,qBAAa,kBAAkB;IAKf,OAAO,CAAC,QAAQ,CAAC,EAAE;IAAY,OAAO,CAAC,SAAS;IAA6B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAe,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAHhK,OAAO,CAAC,MAAM,CAAuC;IAErD,+GAA+G;IAC/G,YAA6B,EAAE,EAAE,QAAQ,EAAU,SAAS,GAAE,kBAAkB,EAAO,EAAmB,OAAO,GAAE,MAAW,EAAmB,cAAc,CAAC,EAAE,MAAM,YAAA,EAAI;IAE5K,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,UAAU;IAIlB;;;OAGG;IACG,KAAK,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUvD;IAED;;;;;;OAMG;IACG,OAAO,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAoC1H;YAEa,MAAM;YAcN,eAAe;YAoCf,eAAe;IAOvB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAE7F;IAEK,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CA6B5D;IAED,6GAA6G;IACvG,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQ1D;IAED,+EAA+E;IACzE,oBAAoB,CAAC,MAAM,SAAI,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAgBhF;IAEK,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAsB3I;IAEK,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAapF;IAEK,qBAAqB,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,mCAAmC,EAAE,CAAC,CAMtG;IAEK,kCAAkC,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,yCAAyC,GAAG,SAAS,CAAC,CAkBnI;IAED;;;OAGG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQ/E;CACJ"}

package/dist/resource/repository.js

@@ -24,12 +24,15 @@ export class ResourceRepository {
     db;
     resources;
     baseUrl;
+    organizationId;
     // The connection is shared, so transactions are serialized to keep them from nesting.
     writes = Promise.resolve();
-    constructor(db, resources = [], baseUrl = '') {
+    /** `organizationId` is the operator organization this node is enrolled in, which is paid for its functions. */
+    constructor(db, resources = [], baseUrl = '', organizationId) {
         this.db = db;
         this.resources = resources;
         this.baseUrl = baseUrl;
+        this.organizationId = organizationId;
     }
     serialize(work) {
         const run = this.writes.then(work, work);
@@ -123,12 +126,12 @@ export class ResourceRepository {
             const manifest = fn.paymentManifest;
             if (manifest) {
                 const inference = isInferenceManifest(manifest);
-                await this.db.run('INSERT INTO resource_function_payment_manifest (resource_function_id, cost_micro_usdc, input_cost_micro_usdc_per_million_tokens, output_cost_micro_usdc_per_million_tokens, recipient_address, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)', [
+                await this.db.run('INSERT INTO resource_function_payment_manifest (resource_function_id, cost_micro_usd, input_cost_micro_usd_per_million_tokens, output_cost_micro_usd_per_million_tokens, recipient_organization_id, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)', [
                     functionId,
-                    inference ? null : manifest.costMicroUsdc,
-                    inference ? manifest.inputCostMicroUsdcPerMillionTokens : null,
-                    inference ? manifest.outputCostMicroUsdcPerMillionTokens : null,
-                    manifest.recipientAddress,
+                    inference ? null : manifest.costMicroUsd,
+                    inference ? manifest.inputCostMicroUsdPerMillionTokens : null,
+                    inference ? manifest.outputCostMicroUsdPerMillionTokens : null,
+                    manifest.recipientOrganizationId ?? null,
                     createdAt,
                     createdAt,
                 ]);
@@ -167,8 +170,15 @@ export class ResourceRepository {
             }
         };
     }
+    /** This node's resources, with its base URL and its organization as the recipient of every paid function. */
     async getInternalResources() {
-        return this.resources.map(r => ({ ...r, baseUrl: this.baseUrl }));
+        return this.resources.map(r => ({
+            ...r,
+            baseUrl: this.baseUrl,
+            functions: r.functions.map((fn) => fn.paymentManifest
+                ? { ...fn, paymentManifest: { ...fn.paymentManifest, recipientOrganizationId: this.organizationId } }
+                : fn),
+        }));
     }
     /** Learned resources in insertion order. A negative `limit` means no limit. */
     async getExternalResources(offset = 0, limit = -1) {
@@ -231,18 +241,18 @@ export class ResourceRepository {
         if (!result) {
             return undefined;
         }
-        if (result.cost_micro_usdc === null) {
+        if (result.cost_micro_usd === null) {
             return {
                 id: result.id,
-                inputCostMicroUsdcPerMillionTokens: result.input_cost_micro_usdc_per_million_tokens,
-                outputCostMicroUsdcPerMillionTokens: result.output_cost_micro_usdc_per_million_tokens,
-                recipientAddress: result.recipient_address,
+                inputCostMicroUsdPerMillionTokens: result.input_cost_micro_usd_per_million_tokens,
+                outputCostMicroUsdPerMillionTokens: result.output_cost_micro_usd_per_million_tokens,
+                recipientOrganizationId: result.recipient_organization_id ?? undefined,
             };
         }
         return {
             id: result.id,
-            costMicroUsdc: result.cost_micro_usdc,
-            recipientAddress: result.recipient_address,
+            costMicroUsd: result.cost_micro_usd,
+            recipientOrganizationId: result.recipient_organization_id ?? undefined,
         };
     }
     /**

package/dist/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAgC,MAAM,SAAS,CAAC;AAMhF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAK5C,MAAM,WAAW,eAAe;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,oDAAoD;IACpD,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;CAC/B;AAED,UAAU,YAAY;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,eAAe,CAAC;CAC/B;AAoDD,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,aAAa,MAAM,CAAC;AA4LjC;;;;GAIG;AACH,QAAA,MAAM,MAAM,EAAE,kBAAkB,CAAC,YAAY,CAuX5C,CAAC;eAGa,MAAM"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAgC,MAAM,SAAS,CAAC;AAMhF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAM5C,MAAM,WAAW,eAAe;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,oDAAoD;IACpD,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;CAC/B;AAED,UAAU,YAAY;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,eAAe,CAAC;CAC/B;AAoDD,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,aAAa,MAAM,CAAC;AA4LjC;;;;GAIG;AACH,QAAA,MAAM,MAAM,EAAE,kBAAkB,CAAC,YAAY,CAgY5C,CAAC;eAGa,MAAM"}

package/dist/routes.js

@@ -62,12 +62,12 @@ const resourceCallProperties = {
 };
 const fixedVoucherSchema = {
     type: 'object',
-    required: ['requestId', 'invocationId', 'amount', 'recipientAddress', 'signature', 'expiresAt', 'invocationHash', 'publicKey'],
+    required: ['requestId', 'invocationId', 'amount', 'recipientOrganizationId', 'signature', 'expiresAt', 'invocationHash', 'publicKey'],
     properties: {
         requestId: { type: 'string' },
         invocationId: { type: 'string' },
         amount: { type: 'integer' },
-        recipientAddress: { type: 'string' },
+        recipientOrganizationId: { type: 'string' },
         signature: { type: 'string' },
         expiresAt: { type: 'string' },
         invocationHash: { type: 'string' },
@@ -76,16 +76,16 @@ const fixedVoucherSchema = {
 };
 const inferenceVoucherSchema = {
     type: 'object',
-    required: ['kind', 'requestId', 'invocationId', 'maxAmount', 'inputCostMicroUsdcPerMillionTokens', 'outputCostMicroUsdcPerMillionTokens', 'maxTokens', 'recipientAddress', 'signature', 'expiresAt', 'invocationHash', 'publicKey'],
+    required: ['kind', 'requestId', 'invocationId', 'maxAmount', 'inputCostMicroUsdPerMillionTokens', 'outputCostMicroUsdPerMillionTokens', 'maxTokens', 'recipientOrganizationId', 'signature', 'expiresAt', 'invocationHash', 'publicKey'],
     properties: {
         kind: { const: 'inference' },
         requestId: { type: 'string' },
         invocationId: { type: 'string' },
         maxAmount: { type: 'integer', minimum: 0 },
-        inputCostMicroUsdcPerMillionTokens: { type: 'integer', minimum: 0 },
-        outputCostMicroUsdcPerMillionTokens: { type: 'integer', minimum: 0 },
+        inputCostMicroUsdPerMillionTokens: { type: 'integer', minimum: 0 },
+        outputCostMicroUsdPerMillionTokens: { type: 'integer', minimum: 0 },
         maxTokens: { type: 'integer', minimum: 1 },
-        recipientAddress: { type: 'string' },
+        recipientOrganizationId: { type: 'string' },
         signature: { type: 'string' },
         expiresAt: { type: 'string' },
         invocationHash: { type: 'string' },
@@ -131,16 +131,16 @@ function secretsEqual(a, b) {
 }
 /**
  * A voucher is valid when it is bound to this exact call, signed by its public key, unexpired,
- * and pays the function's recipient. A fixed voucher must pay at least the function's cost. An inference
+ * and pays this node's organization. A fixed voucher must pay at least the function's cost. An inference
  * voucher must be for an inference function, carry its rates, and sign the call's `maxTokens`.
  * Whether its `maxAmount` covers the call is checked separately, against the function's estimator.
  */
-function isValidPaymentVoucher(voucher, resourceFunction, manifest, request) {
+function isValidPaymentVoucher(voucher, resourceFunction, manifest, request, organizationId) {
     const expectedHash = invocationHash(request.resourcePath, request.resourceName, request.functionName, request.parameters);
     if (voucher.invocationHash !== expectedHash) {
         return false;
     }
-    if (voucher.recipientAddress !== manifest.recipientAddress) {
+    if (!organizationId || voucher.recipientOrganizationId !== organizationId) {
         return false;
     }
     const expiresAt = Date.parse(voucher.expiresAt);
@@ -151,8 +151,8 @@ function isValidPaymentVoucher(voucher, resourceFunction, manifest, request) {
         if (!isInferenceFunction(resourceFunction) || !isInferenceManifest(manifest)) {
             return false;
         }
-        if (voucher.inputCostMicroUsdcPerMillionTokens !== manifest.inputCostMicroUsdcPerMillionTokens
-            || voucher.outputCostMicroUsdcPerMillionTokens !== manifest.outputCostMicroUsdcPerMillionTokens) {
+        if (voucher.inputCostMicroUsdPerMillionTokens !== manifest.inputCostMicroUsdPerMillionTokens
+            || voucher.outputCostMicroUsdPerMillionTokens !== manifest.outputCostMicroUsdPerMillionTokens) {
             return false;
         }
         if (voucher.maxTokens !== parseMaxTokens(request.parameters)) {
@@ -163,7 +163,7 @@ function isValidPaymentVoucher(voucher, resourceFunction, manifest, request) {
     if (isInferenceFunction(resourceFunction) || isInferenceManifest(manifest)) {
         return false;
     }
-    if (voucher.amount < manifest.costMicroUsdc) {
+    if (voucher.amount < manifest.costMicroUsd) {
         return false;
     }
     return safeVerifyData(paymentVoucherPayload(voucher), voucher.publicKey, voucher.signature);
@@ -178,7 +178,7 @@ async function estimateInputTokens(resourceFunction, request) {
         return undefined;
     }
 }
-/** What the operator will accrue for `usage`: its charge at the voucher's rates, capped at `maxAmount`. */
+/** What the operator will capture for `usage`: its charge at the voucher's rates, capped at `maxAmount`. */
 function cappedInferenceCharge(voucher, usage) {
     try {
         return Math.min(inferenceCharge(voucher, usage.inputTokens, usage.outputTokens), voucher.maxAmount);
@@ -255,12 +255,12 @@ const routes = async (fastify, options) => {
                         description: parameter.description,
                     })),
                     paymentManifest: !fn.paymentManifest ? undefined : isInferenceManifest(fn.paymentManifest) ? {
-                        inputCostMicroUsdcPerMillionTokens: fn.paymentManifest.inputCostMicroUsdcPerMillionTokens,
-                        outputCostMicroUsdcPerMillionTokens: fn.paymentManifest.outputCostMicroUsdcPerMillionTokens,
-                        recipientAddress: fn.paymentManifest.recipientAddress,
+                        inputCostMicroUsdPerMillionTokens: fn.paymentManifest.inputCostMicroUsdPerMillionTokens,
+                        outputCostMicroUsdPerMillionTokens: fn.paymentManifest.outputCostMicroUsdPerMillionTokens,
+                        recipientOrganizationId: fn.paymentManifest.recipientOrganizationId,
                     } : {
-                        costMicroUsdc: fn.paymentManifest.costMicroUsdc,
-                        recipientAddress: fn.paymentManifest.recipientAddress,
+                        costMicroUsd: fn.paymentManifest.costMicroUsd,
+                        recipientOrganizationId: fn.paymentManifest.recipientOrganizationId,
                     },
                     restricted: fn.restricted || undefined,
                     kind: isInferenceFunction(fn) ? 'inference' : undefined,
@@ -398,7 +398,7 @@ const routes = async (fastify, options) => {
             if (!paymentVoucher) {
                 return reply.status(402).send({ error: 'Payment voucher is required' });
             }
-            if (!isValidPaymentVoucher(paymentVoucher, resourceFunction, paymentManifest, resourceRequest)) {
+            if (!isValidPaymentVoucher(paymentVoucher, resourceFunction, paymentManifest, resourceRequest, options.service.config.organizationId)) {
                 return reply.status(400).send({ error: 'Invalid payment voucher' });
             }
             if (await options.service.grantService.isBlocked(paymentVoucher.publicKey)) {
@@ -412,37 +412,46 @@ const routes = async (fastify, options) => {
                 }
                 const requiredMaxAmount = inferenceCharge(paymentVoucher, inputTokens, paymentVoucher.maxTokens);
                 if (paymentVoucher.maxAmount < requiredMaxAmount) {
-                    return reply.status(402).send({ error: `Payment voucher maxAmount ${paymentVoucher.maxAmount} is below the estimated ${requiredMaxAmount} micro-USDC`, requiredMaxAmount });
+                    return reply.status(402).send({ error: `Payment voucher maxAmount ${paymentVoucher.maxAmount} is below the estimated ${requiredMaxAmount} micro-USD`, requiredMaxAmount });
                 }
             }
         }
+        // Hold the call's price on the payer's balance before running it, so a paid function never runs unpaid.
+        const paid = paymentManifest && paymentVoucher ? paymentVoucher : undefined;
+        if (paid) {
+            const authorization = await options.service.operatorClient.authorize(paid);
+            if (!authorization.ok) {
+                return reply.status(authorization.status).send({ error: authorization.error });
+            }
+        }
         const result = await options.service.resourceInvoker.invoke(resource, resourceRequest.functionName, resourceRequest.parameters);
-        let settlement;
-        if (paymentManifest && paymentVoucher && !result.error) {
-            if (!isInferenceVoucher(paymentVoucher)) {
-                settlement = { voucher: paymentVoucher };
+        if (paid) {
+            let capture;
+            if (!result.error && !isInferenceVoucher(paid)) {
+                capture = { voucher: paid };
             }
-            else if (result.usage) {
+            else if (!result.error && result.usage && isInferenceVoucher(paid)) {
                 // The function may report more output than it was allowed; the caller only signed for maxTokens.
-                const usage = { inputTokens: result.usage.inputTokens, outputTokens: Math.min(result.usage.outputTokens, paymentVoucher.maxTokens) };
+                const usage = { inputTokens: result.usage.inputTokens, outputTokens: Math.min(result.usage.outputTokens, paid.maxTokens) };
                 result.usage = usage;
-                // A free call has nothing to settle, and the operator refuses an empty receipt.
-                if (cappedInferenceCharge(paymentVoucher, usage) > 0) {
-                    settlement = { voucher: paymentVoucher, usage };
+                // A free call has nothing to charge, so its hold is released instead.
+                if (cappedInferenceCharge(paid, usage) > 0) {
+                    capture = { voucher: paid, usage };
                 }
             }
-        }
-        // Settle only verified vouchers, and only after a successful invoke. A voucher sent to a free function is ignored.
-        // Run this on a separate thread to avoid blocking the main thread.
-        if (settlement) {
-            const payment = settlement;
+            // A failed or free call releases its hold. Nothing awaits this, so it doesn't delay the response,
+            // and an uncaught error here would be an unhandled rejection.
             setTimeout(async () => {
-                // Nothing awaits this callback, so an uncaught error here would be an unhandled rejection.
                 try {
-                    await options.service.operatorClient.settlePayment(payment);
+                    if (capture) {
+                        await options.service.operatorClient.capture(capture);
+                    }
+                    else {
+                        await options.service.operatorClient.release(paid);
+                    }
                 }
                 catch (error) {
-                    fastify.log.error(error, 'Failed to settle payment');
+                    fastify.log.error(error, capture ? 'Failed to capture payment' : 'Failed to release payment');
                 }
             }, 0);
         }

package/dist/server.d.ts

@@ -6,7 +6,7 @@ import type { ApproveGrant, GrantOptions } from './grant/service.js';
 import { StellariumResource } from './resource/repository.js';
 import { RateLimitConfig } from './routes.js';
 import { type NodeConfig } from './service.js';
-export declare const DEFAULT_COST_LIMIT_MICRO_USDC = 10000;
+export declare const DEFAULT_COST_LIMIT_MICRO_USD = 10000;
 export declare const DEFAULT_GRANT_REFRESH_INTERVAL_MS: number;
 export interface StellariumNodeOptions {
     port?: number;
@@ -24,13 +24,18 @@ export interface StellariumNodeOptions {
     apiKey?: string;
     /** Defaults to `OPERATOR_URL`. */
     operatorUrl?: string;
-    /** Most this node pays for one remote call. Defaults to `COST_LIMIT_MICRO_USDC`, then 10,000 ($0.01). */
-    costLimitMicroUsdc?: number;
+    /**
+     * One-time token from the dashboard that enrolls this node in an organization. Defaults to
+     * `ENROLLMENT_TOKEN`. Only needed on a node's first start; an enrolled node ignores it.
+     */
+    enrollmentToken?: string;
+    /** Most this node pays for one remote call. Defaults to `COST_LIMIT_MICRO_USD`, then 10,000 ($0.01). */
+    costLimitMicroUsd?: number;
     /**
      * Most this node signs for in one remote inference call (the voucher's `maxAmount`).
-     * Defaults to `INFERENCE_COST_LIMIT_MICRO_USDC`, then to the resolved `costLimitMicroUsdc`.
+     * Defaults to `INFERENCE_COST_LIMIT_MICRO_USD`, then to the resolved `costLimitMicroUsd`.
      */
-    inferenceCostLimitMicroUsdc?: number;
+    inferenceCostLimitMicroUsd?: number;
     /** SQLite file. Defaults to `./requestscript.db`; use ':memory:' for tests. */
     databasePath?: string;
     /**

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAErE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAiB,KAAK,UAAU,EAAgB,MAAM,cAAc,CAAC;AAG5E,eAAO,MAAM,6BAA6B,QAAS,CAAC;AACpD,eAAO,MAAM,iCAAiC,QAAgB,CAAC;AAE/D,MAAM,WAAW,qBAAqB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yGAAyG;IACzG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;IACnB,yFAAyF;IACzF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;CAC/B;AAaD,wBAAgB,aAAa,CAAC,OAAO,EAAE,qBAAqB,EAAE,SAAS,GAAE,kBAAkB,EAAO,GAAG,UAAU,CAwB9G;AAED,qBAAa,cAAc;IACvB,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,OAAO,CAAC,CAAU;IAEpB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1D;IAED;;;OAGG;IACG,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoDnF;IAED,8FAA8F;IACxF,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAEtG;IAED;;;OAGG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAEvI;IAED,wFAAwF;IAClF,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAE3H;IAED,mDAAmD;IAC7C,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5C;IAED;;;OAGG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzD;IAED,4FAA4F;IACtF,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnE;IAED,yCAAyC;IACnC,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEvD;IAED,OAAO,CAAC,OAAO;CAMlB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAErE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAiB,KAAK,UAAU,EAAgB,MAAM,cAAc,CAAC;AAI5E,eAAO,MAAM,4BAA4B,QAAS,CAAC;AACnD,eAAO,MAAM,iCAAiC,QAAgB,CAAC;AAE/D,MAAM,WAAW,qBAAqB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wGAAwG;IACxG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;IACnB,yFAAyF;IACzF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;CAC/B;AAaD,wBAAgB,aAAa,CAAC,OAAO,EAAE,qBAAqB,EAAE,SAAS,GAAE,kBAAkB,EAAO,GAAG,UAAU,CAwB9G;AAED,qBAAa,cAAc;IACvB,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,OAAO,CAAC,CAAU;IAEpB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1D;IAED;;;OAGG;IACG,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+DnF;IAED,8FAA8F;IACxF,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAEtG;IAED;;;OAGG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAEvI;IAED,wFAAwF;IAClF,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAE3H;IAED,mDAAmD;IAC7C,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5C;IAED;;;OAGG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzD;IAED,4FAA4F;IACtF,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnE;IAED,yCAAyC;IACnC,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEvD;IAED,OAAO,CAAC,OAAO;CAMlB"}

package/dist/server.js

@@ -4,7 +4,8 @@ import { validateInferenceFunction } from './resource/inference.js';
 import routes from './routes.js';
 import { createService } from './service.js';
 import { StartupService } from './startup.js';
-export const DEFAULT_COST_LIMIT_MICRO_USDC = 10_000;
+import { OperatorClient } from './client/operatorClient.js';
+export const DEFAULT_COST_LIMIT_MICRO_USD = 10_000;
 export const DEFAULT_GRANT_REFRESH_INTERVAL_MS = 1000 * 60 * 5;
 function required(name, value) {
     if (!value) {
@@ -16,13 +17,13 @@ function hostsPaidFunctions(resources) {
     return resources.some(resource => resource.functions.some(fn => fn.paymentManifest));
 }
 export function resolveConfig(options, resources = []) {
-    const costLimit = options.costLimitMicroUsdc ?? (process.env.COST_LIMIT_MICRO_USDC ? Number(process.env.COST_LIMIT_MICRO_USDC) : DEFAULT_COST_LIMIT_MICRO_USDC);
+    const costLimit = options.costLimitMicroUsd ?? (process.env.COST_LIMIT_MICRO_USD ? Number(process.env.COST_LIMIT_MICRO_USD) : DEFAULT_COST_LIMIT_MICRO_USD);
     if (!Number.isSafeInteger(costLimit) || costLimit < 0) {
-        throw new Error('costLimitMicroUsdc must be a nonnegative integer');
+        throw new Error('costLimitMicroUsd must be a nonnegative integer');
     }
-    const inferenceCostLimit = options.inferenceCostLimitMicroUsdc ?? (process.env.INFERENCE_COST_LIMIT_MICRO_USDC ? Number(process.env.INFERENCE_COST_LIMIT_MICRO_USDC) : costLimit);
+    const inferenceCostLimit = options.inferenceCostLimitMicroUsd ?? (process.env.INFERENCE_COST_LIMIT_MICRO_USD ? Number(process.env.INFERENCE_COST_LIMIT_MICRO_USD) : costLimit);
     if (!Number.isSafeInteger(inferenceCostLimit) || inferenceCostLimit < 0) {
-        throw new Error('inferenceCostLimitMicroUsdc must be a nonnegative integer');
+        throw new Error('inferenceCostLimitMicroUsd must be a nonnegative integer');
     }
     for (const resource of resources) {
         resource.functions.forEach(validateInferenceFunction);
@@ -36,8 +37,8 @@ export function resolveConfig(options, resources = []) {
         operatorUrl: hostsPaidFunctions(resources)
             ? required('OPERATOR_URL', options.operatorUrl ?? process.env.OPERATOR_URL)
             : options.operatorUrl ?? process.env.OPERATOR_URL,
-        costLimitMicroUsdc: costLimit,
-        inferenceCostLimitMicroUsdc: inferenceCostLimit,
+        costLimitMicroUsd: costLimit,
+        inferenceCostLimitMicroUsd: inferenceCostLimit,
     };
 }
 export class StellariumNode {
@@ -52,6 +53,18 @@ export class StellariumNode {
      */
     async start(fastify, options) {
         const config = resolveConfig(options, this.resources);
+        const enrollmentToken = options.enrollmentToken ?? process.env.ENROLLMENT_TOKEN;
+        // Paid functions are paid to the node's organization, so a provider must be enrolled before it serves them.
+        // A node that only calls paid functions enrolls the same way, so its vouchers draw on its organization's balance.
+        if (hostsPaidFunctions(this.resources) || enrollmentToken) {
+            try {
+                ({ organizationId: config.organizationId } = await new OperatorClient(config.operatorUrl, config.publicKey, config.privateKey).session(enrollmentToken));
+            }
+            catch (error) {
+                const hint = enrollmentToken ? '' : '. Create an enrollment token for it at https://platform.stellarium.sh and set ENROLLMENT_TOKEN';
+                throw new Error(`${error instanceof Error ? error.message : String(error)}${hint}`, { cause: error });
+            }
+        }
         const db = await openDatabase(options.databasePath ?? DEFAULT_DATABASE_PATH);
         fastify.addHook('onClose', async () => db.close());
         const service = createService(db, this.resources, config, { approveGrant: options.approveGrant });

package/dist/service.d.ts

@@ -16,10 +16,15 @@ export interface NodeConfig {
     apiKey?: string;
     /** Operator base URL, including `/v1`. Required when the node hosts paid functions. */
     operatorUrl?: string;
+    /**
+     * The operator organization this node is enrolled in, which is paid for its functions.
+     * `StellariumNode.start` asks the operator for it when the node hosts paid functions.
+     */
+    organizationId?: string;
     /** Most this node will pay for one remote call. */
-    costLimitMicroUsdc: number;
+    costLimitMicroUsd: number;
     /** Most this node will sign for in one remote inference call. */
-    inferenceCostLimitMicroUsdc: number;
+    inferenceCostLimitMicroUsd: number;
 }
 export interface Service {
     config: NodeConfig;

package/dist/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEvF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAErE,4GAA4G;AAC5G,MAAM,WAAW,UAAU;IACvB,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,2BAA2B,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,OAAO;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,eAAe,EAAE,eAAe,CAAC;IACjC,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC3B,+EAA+E;IAC/E,YAAY,CAAC,EAAE,YAAY,CAAC;CAC/B;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAoBtI"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEvF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAErE,4GAA4G;AAC5G,MAAM,WAAW,UAAU;IACvB,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mDAAmD;IACnD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,0BAA0B,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,OAAO;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,eAAe,EAAE,eAAe,CAAC;IACjC,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC3B,+EAA+E;IAC/E,YAAY,CAAC,EAAE,YAAY,CAAC;CAC/B;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAoBtI"}

package/dist/service.js

@@ -6,11 +6,11 @@ import { OperatorClient } from "./client/operatorClient.js";
 import { GrantRepository } from "./grant/repository.js";
 import { GrantService } from "./grant/service.js";
 export function createService(db, resources, config, options = {}) {
-    const resourceRepository = new ResourceRepository(db, resources, config.baseUrl);
+    const resourceRepository = new ResourceRepository(db, resources, config.baseUrl, config.organizationId);
     const resourceResolver = new CombinationResourceResolver(resourceRepository);
     const grantService = new GrantService(new GrantRepository(db), config, options.approveGrant);
-    const resourceInvoker = new CombinationResourceInvoker(resourceRepository, config.costLimitMicroUsdc, config.publicKey, config.privateKey, grantService, config.inferenceCostLimitMicroUsdc);
-    const operatorClient = new OperatorClient(config.operatorUrl);
+    const resourceInvoker = new CombinationResourceInvoker(resourceRepository, config.costLimitMicroUsd, config.publicKey, config.privateKey, grantService, config.inferenceCostLimitMicroUsd);
+    const operatorClient = new OperatorClient(config.operatorUrl, config.publicKey, config.privateKey);
     return {
         config,
         peerRepository: new PeerRepository(db),