stellarium-ts 0.16.0 → 0.18.0

package/dist/resource/invoker.d.ts

@@ -1,4 +1,5 @@
 import { Resource, ResourceFunctionCallParameter, ResourceInvoker } from "requestscript";
+import type { OperatorClient } from "../client/operatorClient.js";
 import type { GrantService } from "../grant/service.js";
 import { type InferenceUsage } from "./inference.js";
 import { ResourceRepository, type StellariumInferencePaymentManifest } from "./repository.js";
@@ -6,11 +7,13 @@ export interface PaymentVoucher {
     requestId: string;
     invocationId: string;
     amount: number;
-    recipientAddress: string;
+    recipientOrganizationId: string;
     signature: string;
     expiresAt: string;
     invocationHash: string;
     publicKey: string;
+    /** Set for a call made by a script run billed to an API client: the run's hold pays instead of this node's organization. */
+    runId?: string;
 }
 /**
  * A voucher for an inference function. It signs the provider's per-million-token rates and the call's
@@ -22,14 +25,16 @@ export interface InferencePaymentVoucher {
     requestId: string;
     invocationId: string;
     maxAmount: number;
-    inputCostMicroUsdcPerMillionTokens: number;
-    outputCostMicroUsdcPerMillionTokens: number;
+    inputCostMicroUsdPerMillionTokens: number;
+    outputCostMicroUsdPerMillionTokens: number;
     maxTokens: number;
-    recipientAddress: string;
+    recipientOrganizationId: string;
     signature: string;
     expiresAt: string;
     invocationHash: string;
     publicKey: string;
+    /** Set for a call made by a script run billed to an API client: the run's hold pays instead of this node's organization. */
+    runId?: string;
 }
 /** What a provider's `POST /v1/run/resource/estimate` answers. */
 export interface InferenceEstimate {
@@ -50,24 +55,26 @@ export declare function paymentVoucherPayload(voucher: Omit<PaymentVoucher, "sig
     requestId: string;
     invocationId: string;
     amount: number;
-    recipientAddress: string;
+    recipientOrganizationId: string;
     expiresAt: string;
     invocationHash: string;
     publicKey: string;
+    runId?: string;
 };
 /**
  * The object `createInferenceVoucher` signs: every inference voucher field except `signature`.
  * Key order is part of the signed bytes.
  */
 export declare function inferenceVoucherPayload(voucher: Omit<InferencePaymentVoucher, "signature">): {
+    runId?: string;
     kind: "inference";
     requestId: string;
     invocationId: string;
     maxAmount: number;
-    inputCostMicroUsdcPerMillionTokens: number;
-    outputCostMicroUsdcPerMillionTokens: number;
+    inputCostMicroUsdPerMillionTokens: number;
+    outputCostMicroUsdPerMillionTokens: number;
     maxTokens: number;
-    recipientAddress: string;
+    recipientOrganizationId: string;
     expiresAt: string;
     invocationHash: string;
     publicKey: string;
@@ -82,18 +89,36 @@ export declare const EXTERNAL_INVOKE_BASE_DELAY_MS = 500;
 export declare const EXTERNAL_INVOKE_TIMEOUT_MS = 30000;
 /** Per attempt, for calls to inference functions. Every attempt fits within `INFERENCE_VOUCHER_LIFETIME_MS`. */
 export declare const INFERENCE_INVOKE_TIMEOUT_MS = 120000;
+/** A script run billed to another organization's API client. Its paid calls draw on the run's hold. */
+export interface RunContext {
+    runId: string;
+}
+/** How a node settles its own paid functions when a billed run calls them. */
+export interface LocalSettlement {
+    operatorClient: OperatorClient;
+    /** The organization this node's functions pay. */
+    organizationId?: string;
+}
 export declare class CombinationResourceInvoker implements ResourceInvoker {
     private readonly resourceRepository;
-    private readonly costLimitMicroUsdc;
+    private readonly costLimitMicroUsd;
     private readonly publicKey;
     private readonly privateKey;
     private readonly grantService?;
-    private readonly inferenceCostLimitMicroUsdc;
+    private readonly inferenceCostLimitMicroUsd;
+    private readonly localSettlement?;
     /**
      * Without a `grantService`, calls to restricted remote functions fail.
-     * `inferenceCostLimitMicroUsdc` caps an inference voucher's `maxAmount`, and defaults to `costLimitMicroUsdc`.
+     * `inferenceCostLimitMicroUsd` caps an inference voucher's `maxAmount`, and defaults to `costLimitMicroUsd`.
+     * Without `localSettlement`, a billed run can't call this node's own paid functions.
+     */
+    constructor(resourceRepository: ResourceRepository, costLimitMicroUsd: number, publicKey: string, privateKey: string, grantService?: GrantService | undefined, inferenceCostLimitMicroUsd?: number, localSettlement?: LocalSettlement | undefined);
+    /**
+     * An invoker for one billed run. Its paid calls, remote or to this node's own paid functions, carry
+     * the run's id, so the run's hold pays for them. The run's hold limits what they cost, in place of the
+     * cost limits.
      */
-    constructor(resourceRepository: ResourceRepository, costLimitMicroUsdc: number, publicKey: string, privateKey: string, grantService?: GrantService | undefined, inferenceCostLimitMicroUsdc?: number);
+    forRun(run: RunContext): ResourceInvoker;
     /**
      * Invoke a function on a resource.
      * If the resource has a baseUrl, it will be invoked as a remote function.
@@ -114,9 +139,18 @@ export declare class CombinationResourceInvoker implements ResourceInvoker {
         } | null;
         usage?: InferenceUsage;
     }>;
+    private invokeIn;
+    private execLocal;
+    /**
+     * Calls one of this node's paid functions for a billed run: signs a voucher with the run's id that pays
+     * this node's organization, then authorizes, runs and settles it as `POST /v1/run/resource` would.
+     */
+    private invokeLocalPaid;
     /** Asks the provider what a call to a paid inference function will cost at most. */
     private estimate;
-    createPaymentVoucher(recipientAddress: string, amount: number, resourcePath: string, resourceName: string, functionName: string, parameters: ResourceFunctionCallParameter[]): PaymentVoucher;
-    createInferenceVoucher(manifest: StellariumInferencePaymentManifest, maxAmount: number, maxTokens: number, resourcePath: string, resourceName: string, functionName: string, parameters: ResourceFunctionCallParameter[]): InferencePaymentVoucher;
+    /** With `runId`, the voucher is paid from that run's hold. */
+    createPaymentVoucher(recipientOrganizationId: string, amount: number, resourcePath: string, resourceName: string, functionName: string, parameters: ResourceFunctionCallParameter[], runId?: string): PaymentVoucher;
+    /** With `runId`, the voucher is paid from that run's hold. */
+    createInferenceVoucher(manifest: StellariumInferencePaymentManifest, maxAmount: number, maxTokens: number, resourcePath: string, resourceName: string, functionName: string, parameters: ResourceFunctionCallParameter[], runId?: string): InferencePaymentVoucher;
 }
 //# sourceMappingURL=invoker.d.ts.map

package/dist/resource/invoker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoker.d.ts","sourceRoot":"","sources":["../../src/resource/invoker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,6BAA6B,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEzF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAmB,KAAK,cAAc,EAAkF,MAAM,gBAAgB,CAAC;AACtJ,OAAO,EAAE,kBAAkB,EAAE,KAAK,kCAAkC,EAAmC,MAAM,iBAAiB,CAAC;AAE/H,MAAM,WAAW,cAAc;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC,EAAE,MAAM,CAAC;IAC3C,mCAAmC,EAAE,MAAM,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,kEAAkE;AAClE,MAAM,WAAW,iBAAiB;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC1B,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,6BAA6B,EAAE,GAC5C,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;;;;;;;;EAG/E;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC;;;;;;;;;;;;EAG1F;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,uBAAuB,GAAG,OAAO,IAAI,uBAAuB,CAExH;AAED,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AACzD,qHAAqH;AACrH,eAAO,MAAM,6BAA6B,QAAiB,CAAC;AAE5D,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAC7C,eAAO,MAAM,6BAA6B,MAAM,CAAC;AACjD,wEAAwE;AACxE,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,gHAAgH;AAChH,eAAO,MAAM,2BAA2B,SAAU,CAAC;AA2BnD,qBAAa,0BAA2B,YAAW,eAAe;IAO1D,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,2BAA2B;IAVhD;;;OAGG;IACH,YACqB,kBAAkB,EAAE,kBAAkB,EACtC,kBAAkB,EAAE,MAAM,EAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,YAAY,YAAA,EAC3B,2BAA2B,GAAE,MAA2B,EACzE;IACJ;;;;;;;;;;;;OAYG;IACG,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,cAAc,CAAA;KAAE,CAAC,CAiGtL;IAED,oFAAoF;YACtE,QAAQ;IAuBtB,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,cAAc,CAO5L;IAED,sBAAsB,CAAC,QAAQ,EAAE,kCAAkC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,uBAAuB,CAejP;CACJ"}
+{"version":3,"file":"invoker.d.ts","sourceRoot":"","sources":["../../src/resource/invoker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,6BAA6B,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAwC,KAAK,cAAc,EAAkF,MAAM,gBAAgB,CAAC;AAC3K,OAAO,EAAE,kBAAkB,EAAE,KAAK,kCAAkC,EAAmC,MAAM,iBAAiB,CAAC;AAG/H,MAAM,WAAW,cAAc;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,4HAA4H;IAC5H,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC,EAAE,MAAM,CAAC;IAC1C,kCAAkC,EAAE,MAAM,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,4HAA4H;IAC5H,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,kEAAkE;AAClE,MAAM,WAAW,iBAAiB;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC1B,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,6BAA6B,EAAE,GAC5C,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;;;;;;;;YAMtB,MAAM;EAH/D;AAOD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,CAAC;YARjC,MAAM;;;;;;;;;;;;EAW/D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,uBAAuB,GAAG,OAAO,IAAI,uBAAuB,CAExH;AAED,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AACzD,qHAAqH;AACrH,eAAO,MAAM,6BAA6B,QAAiB,CAAC;AAE5D,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAC7C,eAAO,MAAM,6BAA6B,MAAM,CAAC;AACjD,wEAAwE;AACxE,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,gHAAgH;AAChH,eAAO,MAAM,2BAA2B,SAAU,CAAC;AA2BnD,uGAAuG;AACvG,MAAM,WAAW,UAAU;IACvB,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC5B,cAAc,EAAE,cAAc,CAAC;IAC/B,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,0BAA2B,YAAW,eAAe;IAQ1D,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,0BAA0B;IAC3C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;IAZrC;;;;OAIG;IACH,YACqB,kBAAkB,EAAE,kBAAkB,EACtC,iBAAiB,EAAE,MAAM,EACzB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,YAAY,YAAA,EAC3B,0BAA0B,GAAE,MAA0B,EACtD,eAAe,CAAC,EAAE,eAAe,YAAA,EAClD;IAEJ;;;;OAIG;IACH,MAAM,CAAC,GAAG,EAAE,UAAU,GAAG,eAAe,CAEvC;IACD;;;;;;;;;;;;OAYG;IACG,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,EAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,cAAc,CAAA;KAAE,CAAC,CAEtL;YAEa,QAAQ;YAiGR,SAAS;IAYvB;;;OAGG;YACW,eAAe;IA4B7B,oFAAoF;YACtE,QAAQ;IAuBtB,8DAA8D;IAC9D,oBAAoB,CAAC,uBAAuB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,cAAc,CAYnN;IAED,8DAA8D;IAC9D,sBAAsB,CAAC,QAAQ,EAAE,kCAAkC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,uBAAuB,CAgBjQ;CACJ"}

package/dist/resource/invoker.js

@@ -1,5 +1,6 @@
 import { hashData, signData } from "../crypto/utils.js";
-import { inferenceCharge, isInferenceFunction, isInferenceManifest, parseInferenceResult, parseMaxTokens } from "./inference.js";
+import { estimateInputTokens, inferenceCharge, isInferenceFunction, isInferenceManifest, parseInferenceResult, parseMaxTokens } from "./inference.js";
+import { settlePaidCall } from "./settlement.js";
 /**
  * Hash binding a voucher to one function call. Providers recompute it from the
  * request they receive and compare it to `voucher.invocationHash`.
@@ -13,16 +14,20 @@ export function invocationHash(resourcePath, resourceName, functionName, paramet
  * Key order is part of the signed bytes.
  */
 export function paymentVoucherPayload(voucher) {
-    const { requestId, invocationId, amount, recipientAddress, expiresAt, invocationHash, publicKey } = voucher;
-    return { requestId, invocationId, amount, recipientAddress, expiresAt, invocationHash, publicKey };
+    const { requestId, invocationId, amount, recipientOrganizationId, expiresAt, invocationHash, publicKey } = voucher;
+    return { requestId, invocationId, amount, recipientOrganizationId, expiresAt, invocationHash, publicKey, ...runPayload(voucher.runId) };
+}
+/** `runId` is signed last, and only when set, so a voucher without one signs the same bytes as before it existed. */
+function runPayload(runId) {
+    return runId === undefined ? {} : { runId };
 }
 /**
  * The object `createInferenceVoucher` signs: every inference voucher field except `signature`.
  * Key order is part of the signed bytes.
  */
 export function inferenceVoucherPayload(voucher) {
-    const { kind, requestId, invocationId, maxAmount, inputCostMicroUsdcPerMillionTokens, outputCostMicroUsdcPerMillionTokens, maxTokens, recipientAddress, expiresAt, invocationHash, publicKey } = voucher;
-    return { kind, requestId, invocationId, maxAmount, inputCostMicroUsdcPerMillionTokens, outputCostMicroUsdcPerMillionTokens, maxTokens, recipientAddress, expiresAt, invocationHash, publicKey };
+    const { kind, requestId, invocationId, maxAmount, inputCostMicroUsdPerMillionTokens, outputCostMicroUsdPerMillionTokens, maxTokens, recipientOrganizationId, expiresAt, invocationHash, publicKey } = voucher;
+    return { kind, requestId, invocationId, maxAmount, inputCostMicroUsdPerMillionTokens, outputCostMicroUsdPerMillionTokens, maxTokens, recipientOrganizationId, expiresAt, invocationHash, publicKey, ...runPayload(voucher.runId) };
 }
 export function isInferenceVoucher(voucher) {
     return voucher.kind === 'inference';
@@ -63,22 +68,33 @@ async function fetchWithRetry(url, init, timeoutMs = EXTERNAL_INVOKE_TIMEOUT_MS)
 }
 export class CombinationResourceInvoker {
     resourceRepository;
-    costLimitMicroUsdc;
+    costLimitMicroUsd;
     publicKey;
     privateKey;
     grantService;
-    inferenceCostLimitMicroUsdc;
+    inferenceCostLimitMicroUsd;
+    localSettlement;
     /**
      * Without a `grantService`, calls to restricted remote functions fail.
-     * `inferenceCostLimitMicroUsdc` caps an inference voucher's `maxAmount`, and defaults to `costLimitMicroUsdc`.
+     * `inferenceCostLimitMicroUsd` caps an inference voucher's `maxAmount`, and defaults to `costLimitMicroUsd`.
+     * Without `localSettlement`, a billed run can't call this node's own paid functions.
      */
-    constructor(resourceRepository, costLimitMicroUsdc, publicKey, privateKey, grantService, inferenceCostLimitMicroUsdc = costLimitMicroUsdc) {
+    constructor(resourceRepository, costLimitMicroUsd, publicKey, privateKey, grantService, inferenceCostLimitMicroUsd = costLimitMicroUsd, localSettlement) {
         this.resourceRepository = resourceRepository;
-        this.costLimitMicroUsdc = costLimitMicroUsdc;
+        this.costLimitMicroUsd = costLimitMicroUsd;
         this.publicKey = publicKey;
         this.privateKey = privateKey;
         this.grantService = grantService;
-        this.inferenceCostLimitMicroUsdc = inferenceCostLimitMicroUsdc;
+        this.inferenceCostLimitMicroUsd = inferenceCostLimitMicroUsd;
+        this.localSettlement = localSettlement;
+    }
+    /**
+     * An invoker for one billed run. Its paid calls, remote or to this node's own paid functions, carry
+     * the run's id, so the run's hold pays for them. The run's hold limits what they cost, in place of the
+     * cost limits.
+     */
+    forRun(run) {
+        return { invoke: (resource, functionName, parameters) => this.invokeIn(resource, functionName, parameters, run) };
     }
     /**
      * Invoke a function on a resource.
@@ -94,6 +110,9 @@ export class CombinationResourceInvoker {
      * @returns The return value of the function
      */
     async invoke(resource, functionName, parameters) {
+        return this.invokeIn(resource, functionName, parameters, undefined);
+    }
+    async invokeIn(resource, functionName, parameters, run) {
         if (resource.metadata.baseUrl) {
             let requestBody = {
                 resourcePath: resource.path,
@@ -117,11 +136,14 @@ export class CombinationResourceInvoker {
             }
             const manifest = resourceFunction.paymentManifest;
             const inference = isInferenceFunction(resourceFunction);
+            if (manifest && !manifest.recipientOrganizationId) {
+                return { value: null, error: { message: `Failed to invoke ${resource.name}.${functionName}: its payment manifest names no recipient organization` } };
+            }
             if (manifest && inference) {
                 console.log(`Resource function ${resource.name}.${functionName} is a paid inference function, creating payment voucher...`);
                 // Peers' manifests aren't validated on receipt.
-                if (!isInferenceManifest(manifest) || !Number.isSafeInteger(manifest.inputCostMicroUsdcPerMillionTokens) || manifest.inputCostMicroUsdcPerMillionTokens < 0
-                    || !Number.isSafeInteger(manifest.outputCostMicroUsdcPerMillionTokens) || manifest.outputCostMicroUsdcPerMillionTokens < 0) {
+                if (!isInferenceManifest(manifest) || !Number.isSafeInteger(manifest.inputCostMicroUsdPerMillionTokens) || manifest.inputCostMicroUsdPerMillionTokens < 0
+                    || !Number.isSafeInteger(manifest.outputCostMicroUsdPerMillionTokens) || manifest.outputCostMicroUsdPerMillionTokens < 0) {
                     return { value: null, error: { message: `Failed to invoke ${resource.name}.${functionName}: its payment manifest has no valid per-token pricing` } };
                 }
                 const maxTokens = parseMaxTokens(parameters);
@@ -136,20 +158,20 @@ export class CombinationResourceInvoker {
                 if (inferenceCharge(manifest, estimate.inputTokens, maxTokens) !== estimate.maxAmount) {
                     return { value: null, error: { message: `Failed to invoke ${resource.name}.${functionName}: the provider's estimate doesn't match its advertised rates` } };
                 }
-                if (estimate.maxAmount > this.inferenceCostLimitMicroUsdc) {
-                    throw new Error(`Function ${functionName} may cost up to ${estimate.maxAmount} micro-USDC, which exceeds the inference cost limit of ${this.inferenceCostLimitMicroUsdc} micro-USDC`);
+                if (!run && estimate.maxAmount > this.inferenceCostLimitMicroUsd) {
+                    throw new Error(`Function ${functionName} may cost up to ${estimate.maxAmount} micro-USD, which exceeds the inference cost limit of ${this.inferenceCostLimitMicroUsd} micro-USD`);
                 }
-                requestBody.paymentVoucher = this.createInferenceVoucher(manifest, estimate.maxAmount, maxTokens, resource.path, resource.name, functionName, parameters);
+                requestBody.paymentVoucher = this.createInferenceVoucher(manifest, estimate.maxAmount, maxTokens, resource.path, resource.name, functionName, parameters, run?.runId);
             }
             else if (manifest) {
                 console.log(`Resource function ${resource.name}.${functionName} has a payment manifest, creating payment voucher...`);
                 if (isInferenceManifest(manifest)) {
                     return { value: null, error: { message: `Failed to invoke ${resource.name}.${functionName}: it has per-token pricing but isn't an inference function` } };
                 }
-                if (manifest.costMicroUsdc > this.costLimitMicroUsdc) {
-                    throw new Error(`Function ${functionName} cost ${manifest.costMicroUsdc} micro-USDC, which exceeds the cost limit of ${this.costLimitMicroUsdc} micro-USDC`);
+                if (!run && manifest.costMicroUsd > this.costLimitMicroUsd) {
+                    throw new Error(`Function ${functionName} cost ${manifest.costMicroUsd} micro-USD, which exceeds the cost limit of ${this.costLimitMicroUsd} micro-USD`);
                 }
-                requestBody.paymentVoucher = this.createPaymentVoucher(manifest.recipientAddress, manifest.costMicroUsdc, resource.path, resource.name, functionName, parameters);
+                requestBody.paymentVoucher = this.createPaymentVoucher(manifest.recipientOrganizationId, manifest.costMicroUsd, resource.path, resource.name, functionName, parameters, run?.runId);
             }
             // The voucher is created once and reused on every attempt, so the operator's
             // requestId/invocationId check prevents a retried call from being settled twice.
@@ -175,16 +197,56 @@ export class CombinationResourceInvoker {
             if (!fn) {
                 return { value: null, error: { message: `Function ${functionName} not found in resource ${resource.name}` } };
             }
-            const result = await fn.exec(parameters);
-            if (isInferenceFunction(fn)) {
-                const inferenceResult = parseInferenceResult(result);
-                if (!inferenceResult) {
-                    return { value: null, error: { message: `Inference function ${functionName} must return { value, usage: { inputTokens, outputTokens } }` } };
-                }
-                return { value: inferenceResult.value, error: null, usage: inferenceResult.usage };
+            // A billed run pays for this node's own paid functions as a remote caller would.
+            if (run && fn.paymentManifest) {
+                return this.invokeLocalPaid(resource, fn, parameters, run);
+            }
+            return this.execLocal(fn, parameters);
+        }
+    }
+    async execLocal(fn, parameters) {
+        const result = await fn.exec(parameters);
+        if (isInferenceFunction(fn)) {
+            const inferenceResult = parseInferenceResult(result);
+            if (!inferenceResult) {
+                return { value: null, error: { message: `Inference function ${fn.name} must return { value, usage: { inputTokens, outputTokens } }` } };
+            }
+            return { value: inferenceResult.value, error: null, usage: inferenceResult.usage };
+        }
+        return { value: result, error: null };
+    }
+    /**
+     * Calls one of this node's paid functions for a billed run: signs a voucher with the run's id that pays
+     * this node's organization, then authorizes, runs and settles it as `POST /v1/run/resource` would.
+     */
+    async invokeLocalPaid(resource, fn, parameters, run) {
+        const failed = (reason) => ({ value: null, error: { message: `Failed to invoke ${resource.name}.${fn.name}: ${reason}` } });
+        const organizationId = this.localSettlement?.organizationId;
+        if (!this.localSettlement || !organizationId) {
+            return failed('this node is not enrolled in an organization that can be paid');
+        }
+        const manifest = fn.paymentManifest;
+        let voucher;
+        if (isInferenceFunction(fn) && isInferenceManifest(manifest)) {
+            const maxTokens = parseMaxTokens(parameters);
+            if (maxTokens === undefined) {
+                return failed('maxTokens must be a positive int32');
+            }
+            const inputTokens = await estimateInputTokens(fn, parameters);
+            if (inputTokens === undefined) {
+                return failed('failed to estimate input tokens');
             }
-            return { value: result, error: null };
+            const maxAmount = inferenceCharge(manifest, inputTokens, maxTokens);
+            voucher = this.createInferenceVoucher({ ...manifest, recipientOrganizationId: organizationId }, maxAmount, maxTokens, resource.path, resource.name, fn.name, parameters, run.runId);
+        }
+        else if (!isInferenceManifest(manifest)) {
+            voucher = this.createPaymentVoucher(organizationId, manifest.costMicroUsd, resource.path, resource.name, fn.name, parameters, run.runId);
+        }
+        else {
+            return failed('it has per-token pricing but isn\'t an inference function');
         }
+        const result = await settlePaidCall(this.localSettlement.operatorClient, voucher, () => this.execLocal(fn, parameters), (error, message) => console.error(message, error));
+        return 'refused' in result ? failed(result.refused.error) : result;
     }
     /** Asks the provider what a call to a paid inference function will cost at most. */
     async estimate(url, target, chain) {
@@ -210,27 +272,35 @@ export class CombinationResourceInvoker {
         }
         return { inputTokens: inputTokens, maxAmount: maxAmount };
     }
-    createPaymentVoucher(recipientAddress, amount, resourcePath, resourceName, functionName, parameters) {
-        const requestId = crypto.randomUUID();
-        const invocationId = crypto.randomUUID();
-        const expiresAt = new Date(Date.now() + PAYMENT_VOUCHER_LIFETIME_MS).toISOString();
-        const hash = invocationHash(resourcePath, resourceName, functionName, parameters);
-        const signature = signData(paymentVoucherPayload({ requestId, invocationId, amount, recipientAddress, expiresAt, invocationHash: hash, publicKey: this.publicKey }), this.privateKey);
-        return { requestId, invocationId, amount, recipientAddress, signature, expiresAt, invocationHash: hash, publicKey: this.publicKey };
+    /** With `runId`, the voucher is paid from that run's hold. */
+    createPaymentVoucher(recipientOrganizationId, amount, resourcePath, resourceName, functionName, parameters, runId) {
+        const unsigned = {
+            requestId: crypto.randomUUID(),
+            invocationId: crypto.randomUUID(),
+            amount,
+            recipientOrganizationId,
+            expiresAt: new Date(Date.now() + PAYMENT_VOUCHER_LIFETIME_MS).toISOString(),
+            invocationHash: invocationHash(resourcePath, resourceName, functionName, parameters),
+            publicKey: this.publicKey,
+            ...runPayload(runId),
+        };
+        return { ...unsigned, signature: signData(paymentVoucherPayload(unsigned), this.privateKey) };
     }
-    createInferenceVoucher(manifest, maxAmount, maxTokens, resourcePath, resourceName, functionName, parameters) {
+    /** With `runId`, the voucher is paid from that run's hold. */
+    createInferenceVoucher(manifest, maxAmount, maxTokens, resourcePath, resourceName, functionName, parameters, runId) {
         const unsigned = {
             kind: 'inference',
             requestId: crypto.randomUUID(),
             invocationId: crypto.randomUUID(),
             maxAmount,
-            inputCostMicroUsdcPerMillionTokens: manifest.inputCostMicroUsdcPerMillionTokens,
-            outputCostMicroUsdcPerMillionTokens: manifest.outputCostMicroUsdcPerMillionTokens,
+            inputCostMicroUsdPerMillionTokens: manifest.inputCostMicroUsdPerMillionTokens,
+            outputCostMicroUsdPerMillionTokens: manifest.outputCostMicroUsdPerMillionTokens,
             maxTokens,
-            recipientAddress: manifest.recipientAddress,
+            recipientOrganizationId: manifest.recipientOrganizationId,
             expiresAt: new Date(Date.now() + INFERENCE_VOUCHER_LIFETIME_MS).toISOString(),
             invocationHash: invocationHash(resourcePath, resourceName, functionName, parameters),
             publicKey: this.publicKey,
+            ...runPayload(runId),
         };
         return { ...unsigned, signature: signData(inferenceVoucherPayload(unsigned), this.privateKey) };
     }

package/dist/resource/repository.d.ts

@@ -1,18 +1,21 @@
 import { Resource, ResourceFunction, ResourceFunctionCallParameter, ResourceFunctionParameter } from "requestscript";
 import { Database } from "sqlite";
 import type { StoredPeer } from "../peer/repository.js";
-/** A flat price per call. */
+/**
+ * A flat price per call. `recipientOrganizationId` is filled in by the hosting node when it advertises
+ * the function, from the organization it is enrolled in; resource authors leave it out.
+ */
 export interface StellariumFixedPaymentManifest {
     id?: number;
-    costMicroUsdc: number;
-    recipientAddress: string;
+    costMicroUsd: number;
+    recipientOrganizationId?: string;
 }
 /** Per-token pricing for an inference function. Either rate may be 0. */
 export interface StellariumInferencePaymentManifest {
     id?: number;
-    inputCostMicroUsdcPerMillionTokens: number;
-    outputCostMicroUsdcPerMillionTokens: number;
-    recipientAddress: string;
+    inputCostMicroUsdPerMillionTokens: number;
+    outputCostMicroUsdPerMillionTokens: number;
+    recipientOrganizationId?: string;
 }
 export type StellariumResourceFunctionPaymentManifest = StellariumFixedPaymentManifest | StellariumInferencePaymentManifest;
 /** Fixed functions return one value. Inference functions run AI inference and are priced per token. */
@@ -61,8 +64,10 @@ export declare class ResourceRepository {
     private readonly db;
     private resources;
     private readonly baseUrl;
+    private readonly organizationId?;
     private writes;
-    constructor(db: Database, resources?: StellariumResource[], baseUrl?: string);
+    /** `organizationId` is the operator organization this node is enrolled in, which is paid for its functions. */
+    constructor(db: Database, resources?: StellariumResource[], baseUrl?: string, organizationId?: string | undefined);
     private serialize;
     private transaction;
     private isInternal;
@@ -84,6 +89,7 @@ export declare class ResourceRepository {
     private deleteFunctions;
     getInternalResource(path: string, name: string): Promise<StellariumResource | undefined>;
     getResource(key: string): Promise<Resource | undefined>;
+    /** This node's resources, with its base URL and its organization as the recipient of every paid function. */
     getInternalResources(): Promise<StellariumResource[]>;
     /** Learned resources in insertion order. A negative `limit` means no limit. */
     getExternalResources(offset?: number, limit?: number): Promise<StellariumResource[]>;

package/dist/resource/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/resource/repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AACrH,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD,6BAA6B;AAC7B,MAAM,WAAW,8BAA8B;IAC3C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC5B;AAED,yEAAyE;AACzE,MAAM,WAAW,kCAAkC;IAC/C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,kCAAkC,EAAE,MAAM,CAAC;IAC3C,mCAAmC,EAAE,MAAM,CAAC;IAC5C,gBAAgB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,yCAAyC,GAAG,8BAA8B,GAAG,kCAAkC,CAAC;AAE5H,uGAAuG;AACvG,MAAM,MAAM,8BAA8B,GAAG,OAAO,GAAG,WAAW,CAAC;AAEnE,MAAM,WAAW,mCAAoC,SAAQ,yBAAyB;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAChE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,mCAAmC,EAAE,CAAC;IAClD,eAAe,CAAC,EAAE,yCAAyC,CAAC;IAC5D,0FAA0F;IAC1F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kIAAkI;IAClI,IAAI,CAAC,EAAE,8BAA8B,CAAC;IACtC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,6BAA6B,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,kBAAmB,SAAQ,QAAQ;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,0BAA0B,EAAE,CAAC;CAC3C;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM;;;EAE1F;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC;AA4B7E,qBAAa,kBAAkB;IAIf,OAAO,CAAC,QAAQ,CAAC,EAAE;IAAY,OAAO,CAAC,SAAS;IAA6B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFjH,OAAO,CAAC,MAAM,CAAuC;IAErD,YAA6B,EAAE,EAAE,QAAQ,EAAU,SAAS,GAAE,kBAAkB,EAAO,EAAmB,OAAO,GAAE,MAAW,EAAI;IAElI,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,UAAU;IAIlB;;;OAGG;IACG,KAAK,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUvD;IAED;;;;;;OAMG;IACG,OAAO,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAoC1H;YAEa,MAAM;YAcN,eAAe;YAoCf,eAAe;IAOvB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAE7F;IAEK,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CA6B5D;IAEK,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAE1D;IAED,+EAA+E;IACzE,oBAAoB,CAAC,MAAM,SAAI,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAgBhF;IAEK,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAsB3I;IAEK,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAapF;IAEK,qBAAqB,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,mCAAmC,EAAE,CAAC,CAMtG;IAEK,kCAAkC,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,yCAAyC,GAAG,SAAS,CAAC,CAkBnI;IAED;;;OAGG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQ/E;CACJ"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/resource/repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AACrH,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC3C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,yEAAyE;AACzE,MAAM,WAAW,kCAAkC;IAC/C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,iCAAiC,EAAE,MAAM,CAAC;IAC1C,kCAAkC,EAAE,MAAM,CAAC;IAC3C,uBAAuB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,MAAM,yCAAyC,GAAG,8BAA8B,GAAG,kCAAkC,CAAC;AAE5H,uGAAuG;AACvG,MAAM,MAAM,8BAA8B,GAAG,OAAO,GAAG,WAAW,CAAC;AAEnE,MAAM,WAAW,mCAAoC,SAAQ,yBAAyB;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAChE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,mCAAmC,EAAE,CAAC;IAClD,eAAe,CAAC,EAAE,yCAAyC,CAAC;IAC5D,0FAA0F;IAC1F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kIAAkI;IAClI,IAAI,CAAC,EAAE,8BAA8B,CAAC;IACtC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,6BAA6B,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,kBAAmB,SAAQ,QAAQ;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,0BAA0B,EAAE,CAAC;CAC3C;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM;;;EAE1F;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC;AA4B7E,qBAAa,kBAAkB;IAKf,OAAO,CAAC,QAAQ,CAAC,EAAE;IAAY,OAAO,CAAC,SAAS;IAA6B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAe,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAHhK,OAAO,CAAC,MAAM,CAAuC;IAErD,+GAA+G;IAC/G,YAA6B,EAAE,EAAE,QAAQ,EAAU,SAAS,GAAE,kBAAkB,EAAO,EAAmB,OAAO,GAAE,MAAW,EAAmB,cAAc,CAAC,EAAE,MAAM,YAAA,EAAI;IAE5K,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,UAAU;IAIlB;;;OAGG;IACG,KAAK,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUvD;IAED;;;;;;OAMG;IACG,OAAO,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAoC1H;YAEa,MAAM;YAcN,eAAe;YAoCf,eAAe;IAOvB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAE7F;IAEK,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CA6B5D;IAED,6GAA6G;IACvG,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQ1D;IAED,+EAA+E;IACzE,oBAAoB,CAAC,MAAM,SAAI,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAgBhF;IAEK,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAsB3I;IAEK,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAapF;IAEK,qBAAqB,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,mCAAmC,EAAE,CAAC,CAMtG;IAEK,kCAAkC,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,yCAAyC,GAAG,SAAS,CAAC,CAkBnI;IAED;;;OAGG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQ/E;CACJ"}

package/dist/resource/repository.js

@@ -24,12 +24,15 @@ export class ResourceRepository {
     db;
     resources;
     baseUrl;
+    organizationId;
     // The connection is shared, so transactions are serialized to keep them from nesting.
     writes = Promise.resolve();
-    constructor(db, resources = [], baseUrl = '') {
+    /** `organizationId` is the operator organization this node is enrolled in, which is paid for its functions. */
+    constructor(db, resources = [], baseUrl = '', organizationId) {
         this.db = db;
         this.resources = resources;
         this.baseUrl = baseUrl;
+        this.organizationId = organizationId;
     }
     serialize(work) {
         const run = this.writes.then(work, work);
@@ -123,12 +126,12 @@ export class ResourceRepository {
             const manifest = fn.paymentManifest;
             if (manifest) {
                 const inference = isInferenceManifest(manifest);
-                await this.db.run('INSERT INTO resource_function_payment_manifest (resource_function_id, cost_micro_usdc, input_cost_micro_usdc_per_million_tokens, output_cost_micro_usdc_per_million_tokens, recipient_address, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)', [
+                await this.db.run('INSERT INTO resource_function_payment_manifest (resource_function_id, cost_micro_usd, input_cost_micro_usd_per_million_tokens, output_cost_micro_usd_per_million_tokens, recipient_organization_id, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)', [
                     functionId,
-                    inference ? null : manifest.costMicroUsdc,
-                    inference ? manifest.inputCostMicroUsdcPerMillionTokens : null,
-                    inference ? manifest.outputCostMicroUsdcPerMillionTokens : null,
-                    manifest.recipientAddress,
+                    inference ? null : manifest.costMicroUsd,
+                    inference ? manifest.inputCostMicroUsdPerMillionTokens : null,
+                    inference ? manifest.outputCostMicroUsdPerMillionTokens : null,
+                    manifest.recipientOrganizationId ?? null,
                     createdAt,
                     createdAt,
                 ]);
@@ -167,8 +170,15 @@ export class ResourceRepository {
             }
         };
     }
+    /** This node's resources, with its base URL and its organization as the recipient of every paid function. */
     async getInternalResources() {
-        return this.resources.map(r => ({ ...r, baseUrl: this.baseUrl }));
+        return this.resources.map(r => ({
+            ...r,
+            baseUrl: this.baseUrl,
+            functions: r.functions.map((fn) => fn.paymentManifest
+                ? { ...fn, paymentManifest: { ...fn.paymentManifest, recipientOrganizationId: this.organizationId } }
+                : fn),
+        }));
     }
     /** Learned resources in insertion order. A negative `limit` means no limit. */
     async getExternalResources(offset = 0, limit = -1) {
@@ -231,18 +241,18 @@ export class ResourceRepository {
         if (!result) {
             return undefined;
         }
-        if (result.cost_micro_usdc === null) {
+        if (result.cost_micro_usd === null) {
             return {
                 id: result.id,
-                inputCostMicroUsdcPerMillionTokens: result.input_cost_micro_usdc_per_million_tokens,
-                outputCostMicroUsdcPerMillionTokens: result.output_cost_micro_usdc_per_million_tokens,
-                recipientAddress: result.recipient_address,
+                inputCostMicroUsdPerMillionTokens: result.input_cost_micro_usd_per_million_tokens,
+                outputCostMicroUsdPerMillionTokens: result.output_cost_micro_usd_per_million_tokens,
+                recipientOrganizationId: result.recipient_organization_id ?? undefined,
             };
         }
         return {
             id: result.id,
-            costMicroUsdc: result.cost_micro_usdc,
-            recipientAddress: result.recipient_address,
+            costMicroUsd: result.cost_micro_usd,
+            recipientOrganizationId: result.recipient_organization_id ?? undefined,
         };
     }
     /**

package/dist/resource/settlement.d.ts

@@ -0,0 +1,25 @@
+import type { OperatorClient } from "../client/operatorClient.js";
+import { type InferenceUsage } from "./inference.js";
+import { type InferencePaymentVoucher, type PaymentVoucher } from "./invoker.js";
+/** What a resource function call evaluates to, with an inference function's usage. */
+export interface InvokeResult {
+    value: unknown;
+    error: {
+        message: string;
+    } | null;
+    usage?: InferenceUsage;
+}
+/** The operator refused to hold the voucher, so the call didn't run. */
+export interface PaymentRefusal {
+    refused: {
+        status: number;
+        error: string;
+    };
+}
+/**
+ * Runs a paid call: holds the voucher's amount with the operator first, so a paid function never runs
+ * unpaid, then runs `call` and captures the voucher, or releases it for a failed or free call. Settlement is
+ * scheduled after returning, so it doesn't delay the caller, and failures go to `onSettleError`.
+ */
+export declare function settlePaidCall(operatorClient: OperatorClient, voucher: PaymentVoucher | InferencePaymentVoucher, call: () => Promise<InvokeResult>, onSettleError: (error: unknown, message: string) => void): Promise<InvokeResult | PaymentRefusal>;
+//# sourceMappingURL=settlement.d.ts.map

package/dist/resource/settlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settlement.d.ts","sourceRoot":"","sources":["../../src/resource/settlement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAqB,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,KAAK,uBAAuB,EAAsB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAErG,sFAAsF;AACtF,MAAM,WAAW,YAAY;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClC,KAAK,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,wEAAwE;AACxE,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C;AAYD;;;;GAIG;AACH,wBAAsB,cAAc,CAChC,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,cAAc,GAAG,uBAAuB,EACjD,IAAI,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,EACjC,aAAa,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GACzD,OAAO,CAAC,YAAY,GAAG,cAAc,CAAC,CAuCxC"}

package/dist/resource/settlement.js

@@ -0,0 +1,59 @@
+import { inferenceCharge } from "./inference.js";
+import { isInferenceVoucher } from "./invoker.js";
+/** What the operator will capture for `usage`: its charge at the voucher's rates, capped at `maxAmount`. */
+function cappedInferenceCharge(voucher, usage) {
+    try {
+        return Math.min(inferenceCharge(voucher, usage.inputTokens, usage.outputTokens), voucher.maxAmount);
+    }
+    catch {
+        // The charge isn't a safe integer, so it is over any maxAmount.
+        return voucher.maxAmount;
+    }
+}
+/**
+ * Runs a paid call: holds the voucher's amount with the operator first, so a paid function never runs
+ * unpaid, then runs `call` and captures the voucher, or releases it for a failed or free call. Settlement is
+ * scheduled after returning, so it doesn't delay the caller, and failures go to `onSettleError`.
+ */
+export async function settlePaidCall(operatorClient, voucher, call, onSettleError) {
+    const authorization = await operatorClient.authorize(voucher);
+    if (!authorization.ok) {
+        return { refused: { status: authorization.status, error: authorization.error } };
+    }
+    let capture;
+    const settle = () => setTimeout(async () => {
+        try {
+            if (capture) {
+                await operatorClient.capture(capture);
+            }
+            else {
+                await operatorClient.release(voucher);
+            }
+        }
+        catch (error) {
+            onSettleError(error, capture ? 'Failed to capture payment' : 'Failed to release payment');
+        }
+    }, 0);
+    let result;
+    try {
+        result = await call();
+    }
+    catch (error) {
+        settle();
+        throw error;
+    }
+    if (!result.error && !isInferenceVoucher(voucher)) {
+        capture = { voucher };
+    }
+    else if (!result.error && result.usage && isInferenceVoucher(voucher)) {
+        // The function may report more output than it was allowed; the caller only signed for maxTokens.
+        const usage = { inputTokens: result.usage.inputTokens, outputTokens: Math.min(result.usage.outputTokens, voucher.maxTokens) };
+        result.usage = usage;
+        // A free call has nothing to charge, so its hold is released instead.
+        if (cappedInferenceCharge(voucher, usage) > 0) {
+            capture = { voucher, usage };
+        }
+    }
+    settle();
+    return result;
+}