@ariestools/aries-datalake-client 0.1.18 → 0.1.20

package/README.md

@@ -36,3 +36,54 @@ const payloads = new RestPayloadsClient({
 ```
 
 The supplier receives the exact control-plane audience or datalake id. Treat its return value as a sensitive, short-lived bearer token: cache it only in page memory when useful, and never persist it in browser storage or logs. The wallet gateway controls key access; the Aries HTTP services independently verify audience, signature, origin, scope, signer identity, and live ACL state.
+
+## Explicit public payload reads
+
+Use `RestPublicPayloadsReader` when the provider has granted public viewer access
+to the datalake. This is separate from the authenticated clients above; an
+authentication failure never triggers an anonymous retry.
+
+```ts
+import { RestPublicPayloadsReader } from '@ariestools/aries-datalake-client/browser'
+
+const reader = new RestPublicPayloadsReader({
+  baseUrl: 'https://data.example/plane/v1/datalakes/dl_public',
+  datalakeId: 'dl_public',
+})
+const controller = new AbortController()
+const payload = await reader.get('configured-content-hash', {
+  maxResponseBytes: 65_536,
+  signal: controller.signal,
+})
+```
+
+The reader exposes only `get(hash, options?)` and `getMany(hashes, options?)`.
+It has no token supplier, header hooks, listing or mutation methods. Requests
+omit ambient credentials and reject redirects. Configuration accepts absolute
+HTTP(S) URLs, including a shared-host path prefix, and rejects userinfo and
+fragments. Local HTTP is permitted explicitly; address/DNS policy remains the
+host's responsibility. An optional `fetchImpl` is a trusted transport override
+that must retain those policies. Without it, fetch is resolved at request time.
+
+`maxResponseBytes` is an optional positive safe integer. It counts decoded Fetch
+response-stream bytes before JSON parsing, on success and error responses,
+including the whole native object/array and its metadata. Omission means no size
+limit. It does not bound raw compressed traffic, headers, decompression work or
+connection buffers. The signal is forwarded to fetch and remains active during
+body consumption; aborting does not wait indefinitely for stream cleanup.
+
+Successful reads validate the stored-payload shape and preserve all fields.
+Neither requested paths nor `_hash`/`_dataHash` metadata verify content identity;
+callers that need content assurance must hash and validate the returned data.
+Transport, size, cancellation, malformed-response and access failures remain
+failed reads, not evidence that an advertised object never existed.
+
+Public viewer access applies to the **whole datalake**, including provider-side
+enumeration and usage APIs. Prefer a dedicated public viewer lake with
+authenticated writers; public runner access also permits mutations. New lakes
+are private until granted access, and browser access additionally requires the
+provider's CORS configuration. This client does not change ACLs or retention.
+
+The public reader requires the released `@ariestools/sdk` 8.2.0 or a compatible
+8.2 patch, plus its required `@opentelemetry/api` peer. It does not require zod
+for these reads; other SDK features and datalake peers can have separate needs.

package/dist/browser/PayloadsClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PayloadsClient.d.ts","sourceRoot":"","sources":["../../src/PayloadsClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAKV,oBAAoB,EACpB,mBAAmB,EAEnB,kBAAkB,EAClB,OAAO,EACP,eAAe,EAChB,MAAM,yCAAyC,CAAA;AAgBhD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAGrD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE;QACX,SAAS,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;QAChD,aAAa,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACrD,CAAA;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC1D,IAAI,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAChE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAA;CACtC;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,eAAe,CAAA;AAErD,MAAM,WAAW,yBAAyB;IACxC;;MAEE;IACF,SAAS,EAAE,uBAAuB,CAAA;IAClC;;MAEE;IACF,OAAO,EAAE,MAAM,CAAA;IACf;;MAEE;IACF,UAAU,EAAE,MAAM,CAAA;IAClB;;MAEE;IACF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAiCD,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;gBAExB,OAAO,EAAE,yBAAyB;IAOxC,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAOrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAIpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAQ9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY1D,IAAI,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAepE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC;YAI7B,OAAO;YAKP,kBAAkB;CAkCjC"}
+{"version":3,"file":"PayloadsClient.d.ts","sourceRoot":"","sources":["../../src/PayloadsClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAIV,oBAAoB,EACpB,mBAAmB,EAEnB,kBAAkB,EAClB,OAAO,EACP,eAAe,EAChB,MAAM,yCAAyC,CAAA;AAchD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAIrD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE;QACX,SAAS,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;QAChD,aAAa,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACrD,CAAA;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC1D,IAAI,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAChE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAA;CACtC;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,eAAe,CAAA;AAErD,MAAM,WAAW,yBAAyB;IACxC;;MAEE;IACF,SAAS,EAAE,uBAAuB,CAAA;IAClC;;MAEE;IACF,OAAO,EAAE,MAAM,CAAA;IACf;;MAEE;IACF,UAAU,EAAE,MAAM,CAAA;IAClB;;MAEE;IACF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAYD,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;gBAExB,OAAO,EAAE,yBAAyB;IAOxC,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAOrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAIpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAQ9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY1D,IAAI,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAepE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC;YAI7B,OAAO;YAKP,kBAAkB;CAuBjC"}

package/dist/browser/RestPublicPayloadsReader.d.ts

@@ -0,0 +1,38 @@
+import type { Payload, WithStorageMeta } from '@ariestools/aries-datalake-core/browser';
+/** Policy for one public HTTP response, including its JSON envelope and metadata. */
+export interface RestPublicPayloadsReadOptions {
+    /**
+    Positive safe-integer limit on decoded Fetch-body bytes before JSON parsing.
+    Omission leaves the body size unlimited; this is not a raw network-byte limit.
+    */
+    readonly maxResponseBytes?: number;
+    /** Caller cancellation remains active through response-body consumption. */
+    readonly signal?: AbortSignal;
+}
+export interface RestPublicPayloadsReaderOptions {
+    /** Absolute HTTP(S) data-plane URL, optionally including its API path prefix. */
+    readonly baseUrl: string;
+    /** Datalake id used to regenerate the canonical native data-plane paths. */
+    readonly datalakeId: string;
+    /**
+    Trusted transport override. It must preserve the public no-credentials and
+    no-redirect policy and honor cancellation. Defaults to request-time global fetch.
+    */
+    readonly fetchImpl?: typeof fetch;
+}
+/**
+ * Exact-hash reads using the native data-plane protocol without token handling.
+ * The server must grant public viewer access. Public access applies to the whole
+ * lake; this reader neither grants access nor falls back from authenticated I/O.
+ * Returned metadata is structural transport data, not verified content identity.
+ */
+export declare class RestPublicPayloadsReader {
+    private readonly datalakeId;
+    private readonly fetchImpl?;
+    private readonly requestBase;
+    constructor(options: RestPublicPayloadsReaderOptions);
+    get(hash: string, options?: RestPublicPayloadsReadOptions): Promise<WithStorageMeta<Payload>>;
+    getMany(hashes: readonly string[], options?: RestPublicPayloadsReadOptions): Promise<WithStorageMeta<Payload>[]>;
+    private request;
+}
+//# sourceMappingURL=RestPublicPayloadsReader.d.ts.map

package/dist/browser/RestPublicPayloadsReader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RestPublicPayloadsReader.d.ts","sourceRoot":"","sources":["../../src/RestPublicPayloadsReader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAA;AAMvF,qFAAqF;AACrF,MAAM,WAAW,6BAA6B;IAC5C;;;MAGE;IACF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,MAAM,WAAW,+BAA+B;IAC9C,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B;;;MAGE;IACF,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAClC;AAED;;;;;GAKG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAc;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;gBAExB,OAAO,EAAE,+BAA+B;IAM9C,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,6BAAkC,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAMjG,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,GAAE,6BAAkC,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAW5G,OAAO;CAoBtB"}

package/dist/browser/browser.d.ts

@@ -4,5 +4,7 @@ export type { DatalakeUsageReport, PayloadsAuthTokenSource, PayloadsClient, Rest
 export { RestPayloadsClient } from './PayloadsClient.ts';
 export type { RestDatalakeClientOptions } from './RestDatalakeClient.ts';
 export { RestDatalakeClient } from './RestDatalakeClient.ts';
+export type { RestPublicPayloadsReaderOptions, RestPublicPayloadsReadOptions } from './RestPublicPayloadsReader.ts';
+export { RestPublicPayloadsReader } from './RestPublicPayloadsReader.ts';
 export * from '@ariestools/aries-datalake-core/browser';
 //# sourceMappingURL=browser.d.ts.map

package/dist/browser/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,GACrD,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,yBAAyB,GAC1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,cAAc,yCAAyC,CAAA"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,GACrD,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,yBAAyB,GAC1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,YAAY,EAAE,+BAA+B,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAA;AACnH,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,cAAc,yCAAyC,CAAA"}

package/dist/browser/browser.mjs

@@ -1,10 +1,8 @@
 // src/PayloadsClient.ts
 import {
-  DATALAKE_API_VERSION,
   DATALAKE_HEADER_DUPLICATES,
   DATALAKE_HEADER_NEXT_CURSOR,
   DATALAKE_HEADER_REJECTED,
-  DatalakeApiError,
   datalakePlaneClearPath,
   datalakePlaneDeletePath,
   datalakePlaneGetManyPath,
@@ -19,7 +17,8 @@ async function resolveAuthToken(source, audience) {
   return typeof source === "function" ? await source({ audience }) : source;
 }
 
-// src/PayloadsClient.ts
+// src/payloadRequest.ts
+import { DATALAKE_API_VERSION, DatalakeApiError } from "@ariestools/aries-datalake-core/browser";
 function extractRequestBase(urlWithPossiblePath) {
   try {
     const parsed = new URL(urlWithPossiblePath);
@@ -31,6 +30,24 @@ function extractRequestBase(urlWithPossiblePath) {
     return urlWithPossiblePath.replace(/\/$/, "");
   }
 }
+function parsePayloadResponse(response, text, method) {
+  const payload = text.length > 0 ? JSON.parse(text) : void 0;
+  if (!response.ok) {
+    const errorBody = isApiErrorBody(payload) ? payload : {
+      code: "internal",
+      message: "Unexpected " + response.status + " response from " + method + " data plane"
+    };
+    throw new DatalakeApiError(response.status, errorBody);
+  }
+  return payload;
+}
+function isApiErrorBody(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const maybe = value;
+  return typeof maybe.code === "string" && typeof maybe.message === "string";
+}
+
+// src/PayloadsClient.ts
 var RestPayloadsClient = class {
   authToken;
   datalakeId;
@@ -114,15 +131,7 @@ var RestPayloadsClient = class {
     const response = await this.fetchImpl(`${this.requestBase}${path}`, init);
     if (response.status === 204) return { data: void 0, headers: response.headers };
     const text = await response.text();
-    const payload = text.length > 0 ? JSON.parse(text) : void 0;
-    if (!response.ok) {
-      const errorBody = isApiErrorBody(payload) ? payload : {
-        code: "internal",
-        message: `Unexpected ${response.status} response from ${method} data plane`
-      };
-      throw new DatalakeApiError(response.status, errorBody);
-    }
-    return { data: payload, headers: response.headers };
+    return { data: parsePayloadResponse(response, text, method), headers: response.headers };
   }
 };
 function readInsertSummary(headers) {
@@ -135,11 +144,6 @@ function readInsertSummary(headers) {
     rejected
   };
 }
-function isApiErrorBody(value) {
-  if (typeof value !== "object" || value === null) return false;
-  const maybe = value;
-  return typeof maybe.code === "string" && typeof maybe.message === "string";
-}
 
 // src/RestDatalakeClient.ts
 import {
@@ -235,10 +239,89 @@ function isApiErrorBody2(value) {
   return typeof maybe.code === "string" && typeof maybe.message === "string";
 }
 
+// src/RestPublicPayloadsReader.ts
+import { datalakePlaneGetManyPath as datalakePlaneGetManyPath2, datalakePlaneGetPath as datalakePlaneGetPath2 } from "@ariestools/aries-datalake-core/browser";
+import { readResponseText } from "@ariestools/sdk/fetch";
+var RestPublicPayloadsReader = class {
+  datalakeId;
+  fetchImpl;
+  requestBase;
+  constructor(options) {
+    this.requestBase = publicRequestBase(options.baseUrl);
+    this.datalakeId = options.datalakeId;
+    this.fetchImpl = options.fetchImpl;
+  }
+  async get(hash, options = {}) {
+    const payload = await this.request(datalakePlaneGetPath2(this.datalakeId, hash), options);
+    if (!isStoredPayload(payload)) throw new TypeError("Data plane returned an invalid stored payload");
+    return payload;
+  }
+  async getMany(hashes, options = {}) {
+    const policy = pinReadOptions(options);
+    const requested = [...hashes];
+    if (requested.length === 0) return [];
+    const payloads = await this.request(datalakePlaneGetManyPath2(this.datalakeId), policy, requested);
+    if (!Array.isArray(payloads) || !payloads.every(isStoredPayload)) {
+      throw new TypeError("Data plane returned an invalid stored-payload array");
+    }
+    return payloads;
+  }
+  async request(path, options, hashes) {
+    const { maxResponseBytes, signal } = pinReadOptions(options);
+    const method = hashes === void 0 ? "GET" : "POST";
+    const headers = { accept: "application/json" };
+    const init = {
+      credentials: "omit",
+      headers,
+      method,
+      redirect: "error",
+      signal
+    };
+    if (hashes !== void 0) {
+      headers["content-type"] = "application/json";
+      init.body = JSON.stringify(hashes);
+    }
+    const fetchImpl = this.fetchImpl ?? globalThis.fetch;
+    const response = await fetchImpl(this.requestBase + path, init);
+    const text = await readResponseText(response, { maxResponseBytes, signal });
+    return parsePayloadResponse(response, text, method);
+  }
+};
+function pinReadOptions(options) {
+  const { maxResponseBytes, signal } = options;
+  if (maxResponseBytes !== void 0 && (!Number.isSafeInteger(maxResponseBytes) || maxResponseBytes <= 0)) {
+    throw new RangeError("maxResponseBytes must be a positive safe integer");
+  }
+  signal?.throwIfAborted();
+  return { maxResponseBytes, signal };
+}
+function publicRequestBase(baseUrl) {
+  let parsed;
+  try {
+    parsed = new URL(baseUrl);
+  } catch {
+    throw new TypeError("baseUrl must be an absolute HTTP(S) URL");
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    throw new TypeError("baseUrl must be an absolute HTTP(S) URL");
+  }
+  if (parsed.username !== "" || parsed.password !== "") {
+    throw new TypeError("Public data-plane URLs must not contain credentials");
+  }
+  if (parsed.href.includes("#")) throw new TypeError("Public data-plane URLs must not contain fragments");
+  return extractRequestBase(baseUrl);
+}
+function isStoredPayload(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const payload = value;
+  return ["schema", "_hash", "_dataHash", "_sequence"].every((key) => Object.hasOwn(payload, key) && typeof payload[key] === "string");
+}
+
 // src/browser.ts
 export * from "@ariestools/aries-datalake-core/browser";
 export {
   RestDatalakeClient,
-  RestPayloadsClient
+  RestPayloadsClient,
+  RestPublicPayloadsReader
 };
 //# sourceMappingURL=browser.mjs.map

package/dist/browser/browser.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../../src/PayloadsClient.ts", "../../src/AuthToken.ts", "../../src/RestDatalakeClient.ts", "../../src/browser.ts"],
-  "sourcesContent": ["import type {\n  ApiErrorBody,\n  DatalakeInsertSummary,\n  InsertPayloadsBody,\n  InsertPayloadsResponse,\n  InsertPayloadsResult,\n  NextPayloadsOptions,\n  NextPayloadsResponse,\n  NextPayloadsResult,\n  Payload,\n  WithStorageMeta,\n} from '@ariestools/aries-datalake-core/browser'\nimport {\n  DATALAKE_API_VERSION,\n  DATALAKE_HEADER_DUPLICATES,\n  DATALAKE_HEADER_NEXT_CURSOR,\n  DATALAKE_HEADER_REJECTED,\n  DatalakeApiError,\n  datalakePlaneClearPath,\n  datalakePlaneDeletePath,\n  datalakePlaneGetManyPath,\n  datalakePlaneGetPath,\n  datalakePlaneInsertPath,\n  datalakePlaneNextPath,\n  datalakePlaneUsagePath,\n} from '@ariestools/aries-datalake-core/browser'\n\nimport type { AuthTokenSource } from './AuthToken.ts'\nimport { resolveAuthToken } from './AuthToken.ts'\n\nexport interface DatalakeUsageReport {\n  datalakeId: string\n  payloadCount: number\n  rateLimits?: {\n    anonymous?: { limit: number; remaining: number }\n    authenticated?: { limit: number; remaining: number }\n  }\n}\n\n/**\n * HTTP client for a single datalake's data plane. Clients send bare\n * `Payload` objects (no `_hash` / `_dataHash` \u2014 those are stamped on\n * insert by the data plane's archivist). Responses always carry the\n * archivist-computed storage meta.\n *\n * Wire format mirrors the XYO archivist REST middleware: `/insert`,\n * `/get/:hash`, `/next`, bare arrays as bodies. Datalake-specific\n * extras (duplicates count, rejected hashes, next cursor) are delivered\n * via response headers.\n */\nexport interface PayloadsClient {\n  clear(): Promise<{ removed: number }>\n  delete(hash: string): Promise<void>\n  get(hash: string): Promise<WithStorageMeta<Payload>>\n  getMany(hashes: string[]): Promise<WithStorageMeta<Payload>[]>\n  insert(payloads: Payload[]): Promise<InsertPayloadsResult>\n  next(options?: NextPayloadsOptions): Promise<NextPayloadsResult>\n  usage(): Promise<DatalakeUsageReport>\n}\n\n/**\n * Either a static bearer token, or a factory invoked per-request. The factory\n * form lets callers mint a fresh self-signed wallet JWT per call (with\n * `aud` bound to the datalake id).\n */\nexport type PayloadsAuthTokenSource = AuthTokenSource\n\nexport interface RestPayloadsClientOptions {\n  /**\n  Static bearer token, or async factory minted per-request.\n  */\n  authToken: PayloadsAuthTokenSource\n  /**\n  Data-plane base URL without trailing slash.\n  */\n  baseUrl: string\n  /**\n  Datalake id; appended to `/v1/datalakes/:id/...`.\n  */\n  datalakeId: string\n  /**\n  Optional `fetch` override; defaults to global `fetch`.\n  */\n  fetchImpl?: typeof fetch\n}\n\ninterface RequestOptions {\n  body?: unknown\n  method?: string\n}\n\ninterface RequestResult<T> {\n  data: T\n  headers: Headers\n}\n\n/**\n * The data plane is typically addressed by a URL that already includes the\n * datalake id (e.g. `https://plane/v1/datalakes/dl_abc`). Preserve any path\n * prefix before `/v1/datalakes` so a shared ALB can expose the data plane at\n * `https://host/plane` while the path helpers regenerate the canonical API\n * suffix from the id.\n */\nfunction extractRequestBase(urlWithPossiblePath: string): string {\n  try {\n    const parsed = new URL(urlWithPossiblePath)\n    const apiMarker = `/${DATALAKE_API_VERSION}/datalakes`\n    const markerIndex = parsed.pathname.indexOf(apiMarker)\n    const prefix = markerIndex === -1\n      ? parsed.pathname.replace(/\\/$/, '')\n      : parsed.pathname.slice(0, markerIndex)\n    return `${parsed.protocol}//${parsed.host}${prefix}`\n  } catch {\n    return urlWithPossiblePath.replace(/\\/$/, '')\n  }\n}\n\nexport class RestPayloadsClient implements PayloadsClient {\n  private readonly authToken: PayloadsAuthTokenSource\n  private readonly datalakeId: string\n  private readonly fetchImpl: typeof fetch\n  private readonly requestBase: string\n\n  constructor(options: RestPayloadsClientOptions) {\n    this.requestBase = extractRequestBase(options.baseUrl)\n    this.datalakeId = options.datalakeId\n    this.authToken = options.authToken\n    this.fetchImpl = options.fetchImpl ?? fetch\n  }\n\n  async clear(): Promise<{ removed: number }> {\n    return this.request<{ removed: number }>(\n      datalakePlaneClearPath(this.datalakeId),\n      { method: 'POST' },\n    )\n  }\n\n  async delete(hash: string): Promise<void> {\n    await this.request<void>(\n      datalakePlaneDeletePath(this.datalakeId, hash),\n      { method: 'DELETE' },\n    )\n  }\n\n  async get(hash: string): Promise<WithStorageMeta<Payload>> {\n    return this.request<WithStorageMeta<Payload>>(datalakePlaneGetPath(this.datalakeId, hash))\n  }\n\n  async getMany(hashes: string[]): Promise<WithStorageMeta<Payload>[]> {\n    if (hashes.length === 0) return []\n    return this.request<WithStorageMeta<Payload>[]>(\n      datalakePlaneGetManyPath(this.datalakeId),\n      { method: 'POST', body: hashes },\n    )\n  }\n\n  async insert(payloads: Payload[]): Promise<InsertPayloadsResult> {\n    const body: InsertPayloadsBody = payloads\n    const { data, headers } = await this.requestWithHeaders<InsertPayloadsResponse>(\n      datalakePlaneInsertPath(this.datalakeId),\n      { method: 'POST', body },\n    )\n    return {\n      inserted: data,\n      summary: readInsertSummary(headers),\n    }\n  }\n\n  async next(options: NextPayloadsOptions = {}): Promise<NextPayloadsResult> {\n    const params = new URLSearchParams()\n    if (options.limit !== undefined) params.set('limit', String(options.limit))\n    if (options.cursor) params.set('cursor', options.cursor)\n    if (options.schemas && options.schemas.length > 0) params.set('schemas', options.schemas.join(','))\n    if (options.order) params.set('order', options.order)\n    const suffix = params.toString()\n    const path = suffix\n      ? `${datalakePlaneNextPath(this.datalakeId)}?${suffix}`\n      : datalakePlaneNextPath(this.datalakeId)\n    const { data, headers } = await this.requestWithHeaders<NextPayloadsResponse>(path)\n    const nextCursor = headers.get(DATALAKE_HEADER_NEXT_CURSOR) ?? undefined\n    return { payloads: data, nextCursor }\n  }\n\n  async usage(): Promise<DatalakeUsageReport> {\n    return this.request<DatalakeUsageReport>(datalakePlaneUsagePath(this.datalakeId))\n  }\n\n  private async request<T>(path: string, options: RequestOptions = {}): Promise<T> {\n    const { data } = await this.requestWithHeaders<T>(path, options)\n    return data\n  }\n\n  private async requestWithHeaders<T>(path: string, options: RequestOptions = {}): Promise<RequestResult<T>> {\n    const method = options.method ?? 'GET'\n    const token = await resolveAuthToken(this.authToken, this.datalakeId)\n    const headers: Record<string, string> = {\n      accept: 'application/json',\n      authorization: `Bearer ${token}`,\n    }\n    const init: RequestInit = {\n      credentials: 'omit',\n      headers,\n      method,\n      redirect: 'error',\n    }\n    if (options.body !== undefined) {\n      headers['content-type'] = 'application/json'\n      init.body = JSON.stringify(options.body)\n    }\n\n    const response = await this.fetchImpl(`${this.requestBase}${path}`, init)\n    if (response.status === 204) return { data: undefined as T, headers: response.headers }\n    const text = await response.text()\n    const payload: unknown = text.length > 0 ? JSON.parse(text) : undefined\n\n    if (!response.ok) {\n      const errorBody: ApiErrorBody = isApiErrorBody(payload)\n        ? payload\n        : {\n            code: 'internal',\n            message: `Unexpected ${response.status} response from ${method} data plane`,\n          }\n      throw new DatalakeApiError(response.status, errorBody)\n    }\n    return { data: payload as T, headers: response.headers }\n  }\n}\n\nfunction readInsertSummary(headers: Headers): DatalakeInsertSummary {\n  const duplicatesRaw = headers.get(DATALAKE_HEADER_DUPLICATES)\n  const duplicates = duplicatesRaw === null ? 0 : Number.parseInt(duplicatesRaw, 10)\n  const rejectedRaw = headers.get(DATALAKE_HEADER_REJECTED)\n  const rejected = rejectedRaw === null || rejectedRaw.length === 0\n    ? []\n    : rejectedRaw.split(',').map(value => value.trim()).filter(value => value.length > 0)\n  return {\n    duplicates: Number.isFinite(duplicates) ? duplicates : 0,\n    rejected,\n  }\n}\n\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const maybe = value as Record<string, unknown>\n  return typeof maybe.code === 'string' && typeof maybe.message === 'string'\n}\n", "export interface AuthTokenRequest {\n  /**\n  Exact JWT audience required by the target service or datalake.\n  */\n  audience: string\n}\n\n/**\nInvoked for every request so callers can obtain a fresh wallet JWT.\n*/\nexport type AuthTokenSupplier = (request: AuthTokenRequest) => Promise<string>\n\nexport type AuthTokenSource = AuthTokenSupplier | string\n\nexport async function resolveAuthToken(source: AuthTokenSource, audience: string): Promise<string> {\n  return typeof source === 'function' ? await source({ audience }) : source\n}\n", "import type {\n  ApiErrorBody,\n  CreateDatalakeBody,\n  DatalakeDescriptor,\n  DatalakeToken,\n  GrantBody,\n  MintTokenBody,\n} from '@ariestools/aries-datalake-core/browser'\nimport {\n  DATALAKE_CONTROL_AUDIENCE,\n  DatalakeApiError,\n  datalakeCollectionPath,\n  datalakeGrantPath,\n  datalakeGrantsPath,\n  datalakeResourcePath,\n  datalakeTokensPath,\n} from '@ariestools/aries-datalake-core/browser'\n\nimport type { AuthTokenSource } from './AuthToken.ts'\nimport { resolveAuthToken } from './AuthToken.ts'\nimport type {\n  CreateDatalakeRequest,\n  DatalakeClient,\n  GrantRequest,\n  RevokeRequest,\n  TokenRequest,\n} from './DatalakeClient.ts'\n\nexport interface RestDatalakeClientOptions {\n  /**\n  Exact control-plane JWT audience.\n  */\n  audience?: string\n  /**\n  Static token, or async factory minted per-request.\n  */\n  authToken: AuthTokenSource\n  /**\n  Control-plane base URL, e.g. `https://dl-control.xylabs.io`.\n  */\n  baseUrl: string\n  /**\n  Optional `fetch` override; defaults to global `fetch`.\n  */\n  fetchImpl?: typeof fetch\n}\n\ninterface RequestOptions {\n  body?: unknown\n  method?: string\n}\n\n/**\n * HTTP client for the datalake control plane. Implements the stable\n * `DatalakeClient` contract so callers are independent of transport.\n */\nexport class RestDatalakeClient implements DatalakeClient {\n  private readonly audience: string\n  private readonly authToken: AuthTokenSource\n  private readonly baseUrl: string\n  private readonly fetchImpl: typeof fetch\n\n  constructor(options: RestDatalakeClientOptions) {\n    this.baseUrl = options.baseUrl.replace(/\\/$/, '')\n    this.audience = options.audience ?? DATALAKE_CONTROL_AUDIENCE\n    this.authToken = options.authToken\n    this.fetchImpl = options.fetchImpl ?? fetch\n  }\n\n  async create(request: CreateDatalakeRequest): Promise<DatalakeDescriptor> {\n    const body: CreateDatalakeBody = { name: request.name, config: request.config }\n    return this.request<DatalakeDescriptor>(datalakeCollectionPath(), { method: 'POST', body })\n  }\n\n  async describe(idOrName: string): Promise<DatalakeDescriptor> {\n    return this.request<DatalakeDescriptor>(datalakeResourcePath(idOrName))\n  }\n\n  async destroy(idOrName: string): Promise<void> {\n    await this.request<void>(datalakeResourcePath(idOrName), { method: 'DELETE' })\n  }\n\n  async grant(request: GrantRequest): Promise<DatalakeDescriptor> {\n    const body: GrantBody = { principal: request.principal, role: request.role }\n    return this.request<DatalakeDescriptor>(\n      datalakeGrantsPath(request.datalakeId),\n      { method: 'POST', body },\n    )\n  }\n\n  async list(): Promise<DatalakeDescriptor[]> {\n    return this.request<DatalakeDescriptor[]>(datalakeCollectionPath())\n  }\n\n  async mintToken(request: TokenRequest): Promise<DatalakeToken> {\n    const body: MintTokenBody = { role: request.role, ttlSeconds: request.ttlSeconds }\n    return this.request<DatalakeToken>(\n      datalakeTokensPath(request.datalakeId),\n      { method: 'POST', body },\n    )\n  }\n\n  async revoke(request: RevokeRequest): Promise<DatalakeDescriptor> {\n    return this.request<DatalakeDescriptor>(\n      datalakeGrantPath(request.datalakeId, request.principal),\n      { method: 'DELETE' },\n    )\n  }\n\n  private async request<T>(path: string, options: RequestOptions = {}): Promise<T> {\n    const url = `${this.baseUrl}${path}`\n    const method = options.method ?? 'GET'\n    const token = await resolveAuthToken(this.authToken, this.audience)\n    const headers: Record<string, string> = {\n      accept: 'application/json',\n      authorization: `Bearer ${token}`,\n    }\n    const init: RequestInit = {\n      credentials: 'omit',\n      headers,\n      method,\n      redirect: 'error',\n    }\n    if (options.body !== undefined) {\n      headers['content-type'] = 'application/json'\n      init.body = JSON.stringify(options.body)\n    }\n\n    const response = await this.fetchImpl(url, init)\n    if (response.status === 204) {\n      return undefined as T\n    }\n    const text = await response.text()\n    const payload: unknown = text.length > 0 ? JSON.parse(text) : undefined\n\n    if (!response.ok) {\n      const errorBody: ApiErrorBody = isApiErrorBody(payload)\n        ? payload\n        : {\n            code: 'internal',\n            message: `Unexpected ${response.status} response from ${method} control plane`,\n          }\n      throw new DatalakeApiError(response.status, errorBody)\n    }\n    return payload as T\n  }\n}\n\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const maybe = value as Record<string, unknown>\n  return typeof maybe.code === 'string' && typeof maybe.message === 'string'\n}\n", "export type {\n  AuthTokenRequest, AuthTokenSource, AuthTokenSupplier,\n} from './AuthToken.ts'\nexport type {\n  CreateDatalakeRequest,\n  DatalakeClient,\n  GrantRequest,\n  RevokeRequest,\n  TokenRequest,\n} from './DatalakeClient.ts'\nexport type {\n  DatalakeUsageReport,\n  PayloadsAuthTokenSource,\n  PayloadsClient,\n  RestPayloadsClientOptions,\n} from './PayloadsClient.ts'\nexport { RestPayloadsClient } from './PayloadsClient.ts'\nexport type { RestDatalakeClientOptions } from './RestDatalakeClient.ts'\nexport { RestDatalakeClient } from './RestDatalakeClient.ts'\nexport * from '@ariestools/aries-datalake-core/browser'\n"],
-  "mappings": ";AAYA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACXP,eAAsB,iBAAiB,QAAyB,UAAmC;AACjG,SAAO,OAAO,WAAW,aAAa,MAAM,OAAO,EAAE,SAAS,CAAC,IAAI;AACrE;;;ADuFA,SAAS,mBAAmB,qBAAqC;AAC/D,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,mBAAmB;AAC1C,UAAM,YAAY,IAAI,oBAAoB;AAC1C,UAAM,cAAc,OAAO,SAAS,QAAQ,SAAS;AACrD,UAAM,SAAS,gBAAgB,KAC3B,OAAO,SAAS,QAAQ,OAAO,EAAE,IACjC,OAAO,SAAS,MAAM,GAAG,WAAW;AACxC,WAAO,GAAG,OAAO,QAAQ,KAAK,OAAO,IAAI,GAAG,MAAM;AAAA,EACpD,QAAQ;AACN,WAAO,oBAAoB,QAAQ,OAAO,EAAE;AAAA,EAC9C;AACF;AAEO,IAAM,qBAAN,MAAmD;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAAoC;AAC9C,SAAK,cAAc,mBAAmB,QAAQ,OAAO;AACrD,SAAK,aAAa,QAAQ;AAC1B,SAAK,YAAY,QAAQ;AACzB,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,QAAsC;AAC1C,WAAO,KAAK;AAAA,MACV,uBAAuB,KAAK,UAAU;AAAA,MACtC,EAAE,QAAQ,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,MAA6B;AACxC,UAAM,KAAK;AAAA,MACT,wBAAwB,KAAK,YAAY,IAAI;AAAA,MAC7C,EAAE,QAAQ,SAAS;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,MAAiD;AACzD,WAAO,KAAK,QAAkC,qBAAqB,KAAK,YAAY,IAAI,CAAC;AAAA,EAC3F;AAAA,EAEA,MAAM,QAAQ,QAAuD;AACnE,QAAI,OAAO,WAAW,EAAG,QAAO,CAAC;AACjC,WAAO,KAAK;AAAA,MACV,yBAAyB,KAAK,UAAU;AAAA,MACxC,EAAE,QAAQ,QAAQ,MAAM,OAAO;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,UAAoD;AAC/D,UAAM,OAA2B;AACjC,UAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,KAAK;AAAA,MACnC,wBAAwB,KAAK,UAAU;AAAA,MACvC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AACA,WAAO;AAAA,MACL,UAAU;AAAA,MACV,SAAS,kBAAkB,OAAO;AAAA,IACpC;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,UAA+B,CAAC,GAAgC;AACzE,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,QAAQ,UAAU,OAAW,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC1E,QAAI,QAAQ,OAAQ,QAAO,IAAI,UAAU,QAAQ,MAAM;AACvD,QAAI,QAAQ,WAAW,QAAQ,QAAQ,SAAS,EAAG,QAAO,IAAI,WAAW,QAAQ,QAAQ,KAAK,GAAG,CAAC;AAClG,QAAI,QAAQ,MAAO,QAAO,IAAI,SAAS,QAAQ,KAAK;AACpD,UAAM,SAAS,OAAO,SAAS;AAC/B,UAAM,OAAO,SACT,GAAG,sBAAsB,KAAK,UAAU,CAAC,IAAI,MAAM,KACnD,sBAAsB,KAAK,UAAU;AACzC,UAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,KAAK,mBAAyC,IAAI;AAClF,UAAM,aAAa,QAAQ,IAAI,2BAA2B,KAAK;AAC/D,WAAO,EAAE,UAAU,MAAM,WAAW;AAAA,EACtC;AAAA,EAEA,MAAM,QAAsC;AAC1C,WAAO,KAAK,QAA6B,uBAAuB,KAAK,UAAU,CAAC;AAAA,EAClF;AAAA,EAEA,MAAc,QAAW,MAAc,UAA0B,CAAC,GAAe;AAC/E,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,mBAAsB,MAAM,OAAO;AAC/D,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,mBAAsB,MAAc,UAA0B,CAAC,GAA8B;AACzG,UAAM,SAAS,QAAQ,UAAU;AACjC,UAAM,QAAQ,MAAM,iBAAiB,KAAK,WAAW,KAAK,UAAU;AACpE,UAAM,UAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,eAAe,UAAU,KAAK;AAAA,IAChC;AACA,UAAM,OAAoB;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU;AAAA,IACZ;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,cAAc,IAAI;AAC1B,WAAK,OAAO,KAAK,UAAU,QAAQ,IAAI;AAAA,IACzC;AAEA,UAAM,WAAW,MAAM,KAAK,UAAU,GAAG,KAAK,WAAW,GAAG,IAAI,IAAI,IAAI;AACxE,QAAI,SAAS,WAAW,IAAK,QAAO,EAAE,MAAM,QAAgB,SAAS,SAAS,QAAQ;AACtF,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAM,UAAmB,KAAK,SAAS,IAAI,KAAK,MAAM,IAAI,IAAI;AAE9D,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAA0B,eAAe,OAAO,IAClD,UACA;AAAA,QACE,MAAM;AAAA,QACN,SAAS,cAAc,SAAS,MAAM,kBAAkB,MAAM;AAAA,MAChE;AACJ,YAAM,IAAI,iBAAiB,SAAS,QAAQ,SAAS;AAAA,IACvD;AACA,WAAO,EAAE,MAAM,SAAc,SAAS,SAAS,QAAQ;AAAA,EACzD;AACF;AAEA,SAAS,kBAAkB,SAAyC;AAClE,QAAM,gBAAgB,QAAQ,IAAI,0BAA0B;AAC5D,QAAM,aAAa,kBAAkB,OAAO,IAAI,OAAO,SAAS,eAAe,EAAE;AACjF,QAAM,cAAc,QAAQ,IAAI,wBAAwB;AACxD,QAAM,WAAW,gBAAgB,QAAQ,YAAY,WAAW,IAC5D,CAAC,IACD,YAAY,MAAM,GAAG,EAAE,IAAI,WAAS,MAAM,KAAK,CAAC,EAAE,OAAO,WAAS,MAAM,SAAS,CAAC;AACtF,SAAO;AAAA,IACL,YAAY,OAAO,SAAS,UAAU,IAAI,aAAa;AAAA,IACvD;AAAA,EACF;AACF;AAEA,SAAS,eAAe,OAAuC;AAC7D,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,QAAQ;AACd,SAAO,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY;AACpE;;;AE7OA;AAAA,EACE;AAAA,EACA,oBAAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAwCA,IAAM,qBAAN,MAAmD;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAAoC;AAC9C,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAChD,SAAK,WAAW,QAAQ,YAAY;AACpC,SAAK,YAAY,QAAQ;AACzB,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,OAAO,SAA6D;AACxE,UAAM,OAA2B,EAAE,MAAM,QAAQ,MAAM,QAAQ,QAAQ,OAAO;AAC9E,WAAO,KAAK,QAA4B,uBAAuB,GAAG,EAAE,QAAQ,QAAQ,KAAK,CAAC;AAAA,EAC5F;AAAA,EAEA,MAAM,SAAS,UAA+C;AAC5D,WAAO,KAAK,QAA4B,qBAAqB,QAAQ,CAAC;AAAA,EACxE;AAAA,EAEA,MAAM,QAAQ,UAAiC;AAC7C,UAAM,KAAK,QAAc,qBAAqB,QAAQ,GAAG,EAAE,QAAQ,SAAS,CAAC;AAAA,EAC/E;AAAA,EAEA,MAAM,MAAM,SAAoD;AAC9D,UAAM,OAAkB,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAC3E,WAAO,KAAK;AAAA,MACV,mBAAmB,QAAQ,UAAU;AAAA,MACrC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,OAAsC;AAC1C,WAAO,KAAK,QAA8B,uBAAuB,CAAC;AAAA,EACpE;AAAA,EAEA,MAAM,UAAU,SAA+C;AAC7D,UAAM,OAAsB,EAAE,MAAM,QAAQ,MAAM,YAAY,QAAQ,WAAW;AACjF,WAAO,KAAK;AAAA,MACV,mBAAmB,QAAQ,UAAU;AAAA,MACrC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,SAAqD;AAChE,WAAO,KAAK;AAAA,MACV,kBAAkB,QAAQ,YAAY,QAAQ,SAAS;AAAA,MACvD,EAAE,QAAQ,SAAS;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAc,QAAW,MAAc,UAA0B,CAAC,GAAe;AAC/E,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI;AAClC,UAAM,SAAS,QAAQ,UAAU;AACjC,UAAM,QAAQ,MAAM,iBAAiB,KAAK,WAAW,KAAK,QAAQ;AAClE,UAAM,UAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,eAAe,UAAU,KAAK;AAAA,IAChC;AACA,UAAM,OAAoB;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU;AAAA,IACZ;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,cAAc,IAAI;AAC1B,WAAK,OAAO,KAAK,UAAU,QAAQ,IAAI;AAAA,IACzC;AAEA,UAAM,WAAW,MAAM,KAAK,UAAU,KAAK,IAAI;AAC/C,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,IACT;AACA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAM,UAAmB,KAAK,SAAS,IAAI,KAAK,MAAM,IAAI,IAAI;AAE9D,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAA0BC,gBAAe,OAAO,IAClD,UACA;AAAA,QACE,MAAM;AAAA,QACN,SAAS,cAAc,SAAS,MAAM,kBAAkB,MAAM;AAAA,MAChE;AACJ,YAAM,IAAIC,kBAAiB,SAAS,QAAQ,SAAS;AAAA,IACvD;AACA,WAAO;AAAA,EACT;AACF;AAEA,SAASD,gBAAe,OAAuC;AAC7D,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,QAAQ;AACd,SAAO,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY;AACpE;;;ACrIA,cAAc;",
-  "names": ["DatalakeApiError", "isApiErrorBody", "DatalakeApiError"]
+  "sources": ["../../src/PayloadsClient.ts", "../../src/AuthToken.ts", "../../src/payloadRequest.ts", "../../src/RestDatalakeClient.ts", "../../src/RestPublicPayloadsReader.ts", "../../src/browser.ts"],
+  "sourcesContent": ["import type {\n  DatalakeInsertSummary,\n  InsertPayloadsBody,\n  InsertPayloadsResponse,\n  InsertPayloadsResult,\n  NextPayloadsOptions,\n  NextPayloadsResponse,\n  NextPayloadsResult,\n  Payload,\n  WithStorageMeta,\n} from '@ariestools/aries-datalake-core/browser'\nimport {\n  DATALAKE_HEADER_DUPLICATES,\n  DATALAKE_HEADER_NEXT_CURSOR,\n  DATALAKE_HEADER_REJECTED,\n  datalakePlaneClearPath,\n  datalakePlaneDeletePath,\n  datalakePlaneGetManyPath,\n  datalakePlaneGetPath,\n  datalakePlaneInsertPath,\n  datalakePlaneNextPath,\n  datalakePlaneUsagePath,\n} from '@ariestools/aries-datalake-core/browser'\n\nimport type { AuthTokenSource } from './AuthToken.ts'\nimport { resolveAuthToken } from './AuthToken.ts'\nimport { extractRequestBase, parsePayloadResponse } from './payloadRequest.ts'\n\nexport interface DatalakeUsageReport {\n  datalakeId: string\n  payloadCount: number\n  rateLimits?: {\n    anonymous?: { limit: number; remaining: number }\n    authenticated?: { limit: number; remaining: number }\n  }\n}\n\n/**\n * HTTP client for a single datalake's data plane. Clients send bare\n * `Payload` objects (no `_hash` / `_dataHash` \u2014 those are stamped on\n * insert by the data plane's archivist). Responses always carry the\n * archivist-computed storage meta.\n *\n * Wire format mirrors the XYO archivist REST middleware: `/insert`,\n * `/get/:hash`, `/next`, bare arrays as bodies. Datalake-specific\n * extras (duplicates count, rejected hashes, next cursor) are delivered\n * via response headers.\n */\nexport interface PayloadsClient {\n  clear(): Promise<{ removed: number }>\n  delete(hash: string): Promise<void>\n  get(hash: string): Promise<WithStorageMeta<Payload>>\n  getMany(hashes: string[]): Promise<WithStorageMeta<Payload>[]>\n  insert(payloads: Payload[]): Promise<InsertPayloadsResult>\n  next(options?: NextPayloadsOptions): Promise<NextPayloadsResult>\n  usage(): Promise<DatalakeUsageReport>\n}\n\n/**\n * Either a static bearer token, or a factory invoked per-request. The factory\n * form lets callers mint a fresh self-signed wallet JWT per call (with\n * `aud` bound to the datalake id).\n */\nexport type PayloadsAuthTokenSource = AuthTokenSource\n\nexport interface RestPayloadsClientOptions {\n  /**\n  Static bearer token, or async factory minted per-request.\n  */\n  authToken: PayloadsAuthTokenSource\n  /**\n  Data-plane base URL without trailing slash.\n  */\n  baseUrl: string\n  /**\n  Datalake id; appended to `/v1/datalakes/:id/...`.\n  */\n  datalakeId: string\n  /**\n  Optional `fetch` override; defaults to global `fetch`.\n  */\n  fetchImpl?: typeof fetch\n}\n\ninterface RequestOptions {\n  body?: unknown\n  method?: string\n}\n\ninterface RequestResult<T> {\n  data: T\n  headers: Headers\n}\n\nexport class RestPayloadsClient implements PayloadsClient {\n  private readonly authToken: PayloadsAuthTokenSource\n  private readonly datalakeId: string\n  private readonly fetchImpl: typeof fetch\n  private readonly requestBase: string\n\n  constructor(options: RestPayloadsClientOptions) {\n    this.requestBase = extractRequestBase(options.baseUrl)\n    this.datalakeId = options.datalakeId\n    this.authToken = options.authToken\n    this.fetchImpl = options.fetchImpl ?? fetch\n  }\n\n  async clear(): Promise<{ removed: number }> {\n    return this.request<{ removed: number }>(\n      datalakePlaneClearPath(this.datalakeId),\n      { method: 'POST' },\n    )\n  }\n\n  async delete(hash: string): Promise<void> {\n    await this.request<void>(\n      datalakePlaneDeletePath(this.datalakeId, hash),\n      { method: 'DELETE' },\n    )\n  }\n\n  async get(hash: string): Promise<WithStorageMeta<Payload>> {\n    return this.request<WithStorageMeta<Payload>>(datalakePlaneGetPath(this.datalakeId, hash))\n  }\n\n  async getMany(hashes: string[]): Promise<WithStorageMeta<Payload>[]> {\n    if (hashes.length === 0) return []\n    return this.request<WithStorageMeta<Payload>[]>(\n      datalakePlaneGetManyPath(this.datalakeId),\n      { method: 'POST', body: hashes },\n    )\n  }\n\n  async insert(payloads: Payload[]): Promise<InsertPayloadsResult> {\n    const body: InsertPayloadsBody = payloads\n    const { data, headers } = await this.requestWithHeaders<InsertPayloadsResponse>(\n      datalakePlaneInsertPath(this.datalakeId),\n      { method: 'POST', body },\n    )\n    return {\n      inserted: data,\n      summary: readInsertSummary(headers),\n    }\n  }\n\n  async next(options: NextPayloadsOptions = {}): Promise<NextPayloadsResult> {\n    const params = new URLSearchParams()\n    if (options.limit !== undefined) params.set('limit', String(options.limit))\n    if (options.cursor) params.set('cursor', options.cursor)\n    if (options.schemas && options.schemas.length > 0) params.set('schemas', options.schemas.join(','))\n    if (options.order) params.set('order', options.order)\n    const suffix = params.toString()\n    const path = suffix\n      ? `${datalakePlaneNextPath(this.datalakeId)}?${suffix}`\n      : datalakePlaneNextPath(this.datalakeId)\n    const { data, headers } = await this.requestWithHeaders<NextPayloadsResponse>(path)\n    const nextCursor = headers.get(DATALAKE_HEADER_NEXT_CURSOR) ?? undefined\n    return { payloads: data, nextCursor }\n  }\n\n  async usage(): Promise<DatalakeUsageReport> {\n    return this.request<DatalakeUsageReport>(datalakePlaneUsagePath(this.datalakeId))\n  }\n\n  private async request<T>(path: string, options: RequestOptions = {}): Promise<T> {\n    const { data } = await this.requestWithHeaders<T>(path, options)\n    return data\n  }\n\n  private async requestWithHeaders<T>(path: string, options: RequestOptions = {}): Promise<RequestResult<T>> {\n    const method = options.method ?? 'GET'\n    const token = await resolveAuthToken(this.authToken, this.datalakeId)\n    const headers: Record<string, string> = {\n      accept: 'application/json',\n      authorization: `Bearer ${token}`,\n    }\n    const init: RequestInit = {\n      credentials: 'omit',\n      headers,\n      method,\n      redirect: 'error',\n    }\n    if (options.body !== undefined) {\n      headers['content-type'] = 'application/json'\n      init.body = JSON.stringify(options.body)\n    }\n\n    const response = await this.fetchImpl(`${this.requestBase}${path}`, init)\n    if (response.status === 204) return { data: undefined as T, headers: response.headers }\n    const text = await response.text()\n    return { data: parsePayloadResponse<T>(response, text, method), headers: response.headers }\n  }\n}\n\nfunction readInsertSummary(headers: Headers): DatalakeInsertSummary {\n  const duplicatesRaw = headers.get(DATALAKE_HEADER_DUPLICATES)\n  const duplicates = duplicatesRaw === null ? 0 : Number.parseInt(duplicatesRaw, 10)\n  const rejectedRaw = headers.get(DATALAKE_HEADER_REJECTED)\n  const rejected = rejectedRaw === null || rejectedRaw.length === 0\n    ? []\n    : rejectedRaw.split(',').map(value => value.trim()).filter(value => value.length > 0)\n  return {\n    duplicates: Number.isFinite(duplicates) ? duplicates : 0,\n    rejected,\n  }\n}\n", "export interface AuthTokenRequest {\n  /**\n  Exact JWT audience required by the target service or datalake.\n  */\n  audience: string\n}\n\n/**\nInvoked for every request so callers can obtain a fresh wallet JWT.\n*/\nexport type AuthTokenSupplier = (request: AuthTokenRequest) => Promise<string>\n\nexport type AuthTokenSource = AuthTokenSupplier | string\n\nexport async function resolveAuthToken(source: AuthTokenSource, audience: string): Promise<string> {\n  return typeof source === 'function' ? await source({ audience }) : source\n}\n", "import type { ApiErrorBody } from '@ariestools/aries-datalake-core/browser'\nimport { DATALAKE_API_VERSION, DatalakeApiError } from '@ariestools/aries-datalake-core/browser'\n\n/**\n * The data plane is typically addressed by a URL that already includes the\n * datalake id (e.g. `https://plane/v1/datalakes/dl_abc`). Preserve any path\n * prefix before `/v1/datalakes` so a shared ALB can expose the data plane at\n * `https://host/plane` while the path helpers regenerate the canonical API\n * suffix from the id.\n */\nexport function extractRequestBase(urlWithPossiblePath: string): string {\n  try {\n    const parsed = new URL(urlWithPossiblePath)\n    const apiMarker = `/${DATALAKE_API_VERSION}/datalakes`\n    const markerIndex = parsed.pathname.indexOf(apiMarker)\n    const prefix = markerIndex === -1\n      ? parsed.pathname.replace(/\\/$/, '')\n      : parsed.pathname.slice(0, markerIndex)\n    return `${parsed.protocol}//${parsed.host}${prefix}`\n  } catch {\n    return urlWithPossiblePath.replace(/\\/$/, '')\n  }\n}\n\n/** Preserve the native data-plane JSON and API-error response contract. */\nexport function parsePayloadResponse<T>(response: Response, text: string, method: string): T {\n  const payload: unknown = text.length > 0 ? JSON.parse(text) : undefined\n\n  if (!response.ok) {\n    const errorBody: ApiErrorBody = isApiErrorBody(payload)\n      ? payload\n      : {\n          code: 'internal',\n          message: 'Unexpected ' + response.status + ' response from ' + method + ' data plane',\n        }\n    throw new DatalakeApiError(response.status, errorBody)\n  }\n  return payload as T\n}\n\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const maybe = value as Record<string, unknown>\n  return typeof maybe.code === 'string' && typeof maybe.message === 'string'\n}\n", "import type {\n  ApiErrorBody,\n  CreateDatalakeBody,\n  DatalakeDescriptor,\n  DatalakeToken,\n  GrantBody,\n  MintTokenBody,\n} from '@ariestools/aries-datalake-core/browser'\nimport {\n  DATALAKE_CONTROL_AUDIENCE,\n  DatalakeApiError,\n  datalakeCollectionPath,\n  datalakeGrantPath,\n  datalakeGrantsPath,\n  datalakeResourcePath,\n  datalakeTokensPath,\n} from '@ariestools/aries-datalake-core/browser'\n\nimport type { AuthTokenSource } from './AuthToken.ts'\nimport { resolveAuthToken } from './AuthToken.ts'\nimport type {\n  CreateDatalakeRequest,\n  DatalakeClient,\n  GrantRequest,\n  RevokeRequest,\n  TokenRequest,\n} from './DatalakeClient.ts'\n\nexport interface RestDatalakeClientOptions {\n  /**\n  Exact control-plane JWT audience.\n  */\n  audience?: string\n  /**\n  Static token, or async factory minted per-request.\n  */\n  authToken: AuthTokenSource\n  /**\n  Control-plane base URL, e.g. `https://dl-control.xylabs.io`.\n  */\n  baseUrl: string\n  /**\n  Optional `fetch` override; defaults to global `fetch`.\n  */\n  fetchImpl?: typeof fetch\n}\n\ninterface RequestOptions {\n  body?: unknown\n  method?: string\n}\n\n/**\n * HTTP client for the datalake control plane. Implements the stable\n * `DatalakeClient` contract so callers are independent of transport.\n */\nexport class RestDatalakeClient implements DatalakeClient {\n  private readonly audience: string\n  private readonly authToken: AuthTokenSource\n  private readonly baseUrl: string\n  private readonly fetchImpl: typeof fetch\n\n  constructor(options: RestDatalakeClientOptions) {\n    this.baseUrl = options.baseUrl.replace(/\\/$/, '')\n    this.audience = options.audience ?? DATALAKE_CONTROL_AUDIENCE\n    this.authToken = options.authToken\n    this.fetchImpl = options.fetchImpl ?? fetch\n  }\n\n  async create(request: CreateDatalakeRequest): Promise<DatalakeDescriptor> {\n    const body: CreateDatalakeBody = { name: request.name, config: request.config }\n    return this.request<DatalakeDescriptor>(datalakeCollectionPath(), { method: 'POST', body })\n  }\n\n  async describe(idOrName: string): Promise<DatalakeDescriptor> {\n    return this.request<DatalakeDescriptor>(datalakeResourcePath(idOrName))\n  }\n\n  async destroy(idOrName: string): Promise<void> {\n    await this.request<void>(datalakeResourcePath(idOrName), { method: 'DELETE' })\n  }\n\n  async grant(request: GrantRequest): Promise<DatalakeDescriptor> {\n    const body: GrantBody = { principal: request.principal, role: request.role }\n    return this.request<DatalakeDescriptor>(\n      datalakeGrantsPath(request.datalakeId),\n      { method: 'POST', body },\n    )\n  }\n\n  async list(): Promise<DatalakeDescriptor[]> {\n    return this.request<DatalakeDescriptor[]>(datalakeCollectionPath())\n  }\n\n  async mintToken(request: TokenRequest): Promise<DatalakeToken> {\n    const body: MintTokenBody = { role: request.role, ttlSeconds: request.ttlSeconds }\n    return this.request<DatalakeToken>(\n      datalakeTokensPath(request.datalakeId),\n      { method: 'POST', body },\n    )\n  }\n\n  async revoke(request: RevokeRequest): Promise<DatalakeDescriptor> {\n    return this.request<DatalakeDescriptor>(\n      datalakeGrantPath(request.datalakeId, request.principal),\n      { method: 'DELETE' },\n    )\n  }\n\n  private async request<T>(path: string, options: RequestOptions = {}): Promise<T> {\n    const url = `${this.baseUrl}${path}`\n    const method = options.method ?? 'GET'\n    const token = await resolveAuthToken(this.authToken, this.audience)\n    const headers: Record<string, string> = {\n      accept: 'application/json',\n      authorization: `Bearer ${token}`,\n    }\n    const init: RequestInit = {\n      credentials: 'omit',\n      headers,\n      method,\n      redirect: 'error',\n    }\n    if (options.body !== undefined) {\n      headers['content-type'] = 'application/json'\n      init.body = JSON.stringify(options.body)\n    }\n\n    const response = await this.fetchImpl(url, init)\n    if (response.status === 204) {\n      return undefined as T\n    }\n    const text = await response.text()\n    const payload: unknown = text.length > 0 ? JSON.parse(text) : undefined\n\n    if (!response.ok) {\n      const errorBody: ApiErrorBody = isApiErrorBody(payload)\n        ? payload\n        : {\n            code: 'internal',\n            message: `Unexpected ${response.status} response from ${method} control plane`,\n          }\n      throw new DatalakeApiError(response.status, errorBody)\n    }\n    return payload as T\n  }\n}\n\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const maybe = value as Record<string, unknown>\n  return typeof maybe.code === 'string' && typeof maybe.message === 'string'\n}\n", "import type { Payload, WithStorageMeta } from '@ariestools/aries-datalake-core/browser'\nimport { datalakePlaneGetManyPath, datalakePlaneGetPath } from '@ariestools/aries-datalake-core/browser'\nimport { readResponseText } from '@ariestools/sdk/fetch'\n\nimport { extractRequestBase, parsePayloadResponse } from './payloadRequest.ts'\n\n/** Policy for one public HTTP response, including its JSON envelope and metadata. */\nexport interface RestPublicPayloadsReadOptions {\n  /**\n  Positive safe-integer limit on decoded Fetch-body bytes before JSON parsing.\n  Omission leaves the body size unlimited; this is not a raw network-byte limit.\n  */\n  readonly maxResponseBytes?: number\n  /** Caller cancellation remains active through response-body consumption. */\n  readonly signal?: AbortSignal\n}\n\nexport interface RestPublicPayloadsReaderOptions {\n  /** Absolute HTTP(S) data-plane URL, optionally including its API path prefix. */\n  readonly baseUrl: string\n  /** Datalake id used to regenerate the canonical native data-plane paths. */\n  readonly datalakeId: string\n  /**\n  Trusted transport override. It must preserve the public no-credentials and\n  no-redirect policy and honor cancellation. Defaults to request-time global fetch.\n  */\n  readonly fetchImpl?: typeof fetch\n}\n\n/**\n * Exact-hash reads using the native data-plane protocol without token handling.\n * The server must grant public viewer access. Public access applies to the whole\n * lake; this reader neither grants access nor falls back from authenticated I/O.\n * Returned metadata is structural transport data, not verified content identity.\n */\nexport class RestPublicPayloadsReader {\n  private readonly datalakeId: string\n  private readonly fetchImpl?: typeof fetch\n  private readonly requestBase: string\n\n  constructor(options: RestPublicPayloadsReaderOptions) {\n    this.requestBase = publicRequestBase(options.baseUrl)\n    this.datalakeId = options.datalakeId\n    this.fetchImpl = options.fetchImpl\n  }\n\n  async get(hash: string, options: RestPublicPayloadsReadOptions = {}): Promise<WithStorageMeta<Payload>> {\n    const payload = await this.request(datalakePlaneGetPath(this.datalakeId, hash), options)\n    if (!isStoredPayload(payload)) throw new TypeError('Data plane returned an invalid stored payload')\n    return payload\n  }\n\n  async getMany(hashes: readonly string[], options: RestPublicPayloadsReadOptions = {}): Promise<WithStorageMeta<Payload>[]> {\n    const policy = pinReadOptions(options)\n    const requested = [...hashes]\n    if (requested.length === 0) return []\n    const payloads = await this.request(datalakePlaneGetManyPath(this.datalakeId), policy, requested)\n    if (!Array.isArray(payloads) || !payloads.every(isStoredPayload)) {\n      throw new TypeError('Data plane returned an invalid stored-payload array')\n    }\n    return payloads\n  }\n\n  private async request(path: string, options: RestPublicPayloadsReadOptions, hashes?: readonly string[]): Promise<unknown> {\n    const { maxResponseBytes, signal } = pinReadOptions(options)\n    const method = hashes === undefined ? 'GET' : 'POST'\n    const headers: Record<string, string> = { accept: 'application/json' }\n    const init: RequestInit = {\n      credentials: 'omit',\n      headers,\n      method,\n      redirect: 'error',\n      signal,\n    }\n    if (hashes !== undefined) {\n      headers['content-type'] = 'application/json'\n      init.body = JSON.stringify(hashes)\n    }\n    const fetchImpl = this.fetchImpl ?? globalThis.fetch\n    const response = await fetchImpl(this.requestBase + path, init)\n    const text = await readResponseText(response, { maxResponseBytes, signal })\n    return parsePayloadResponse<unknown>(response, text, method)\n  }\n}\n\nfunction pinReadOptions(options: RestPublicPayloadsReadOptions): RestPublicPayloadsReadOptions {\n  const { maxResponseBytes, signal } = options\n  if (maxResponseBytes !== undefined && (!Number.isSafeInteger(maxResponseBytes) || maxResponseBytes <= 0)) {\n    throw new RangeError('maxResponseBytes must be a positive safe integer')\n  }\n  signal?.throwIfAborted()\n  return { maxResponseBytes, signal }\n}\n\nfunction publicRequestBase(baseUrl: string): string {\n  let parsed: URL\n  try {\n    parsed = new URL(baseUrl)\n  } catch {\n    throw new TypeError('baseUrl must be an absolute HTTP(S) URL')\n  }\n  if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n    throw new TypeError('baseUrl must be an absolute HTTP(S) URL')\n  }\n  if (parsed.username !== '' || parsed.password !== '') {\n    throw new TypeError('Public data-plane URLs must not contain credentials')\n  }\n  if (parsed.href.includes('#')) throw new TypeError('Public data-plane URLs must not contain fragments')\n  return extractRequestBase(baseUrl)\n}\n\nfunction isStoredPayload(value: unknown): value is WithStorageMeta<Payload> {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) return false\n  const payload = value as Record<string, unknown>\n  return ['schema', '_hash', '_dataHash', '_sequence'].every(key => Object.hasOwn(payload, key) && typeof payload[key] === 'string')\n}\n", "export type {\n  AuthTokenRequest, AuthTokenSource, AuthTokenSupplier,\n} from './AuthToken.ts'\nexport type {\n  CreateDatalakeRequest,\n  DatalakeClient,\n  GrantRequest,\n  RevokeRequest,\n  TokenRequest,\n} from './DatalakeClient.ts'\nexport type {\n  DatalakeUsageReport,\n  PayloadsAuthTokenSource,\n  PayloadsClient,\n  RestPayloadsClientOptions,\n} from './PayloadsClient.ts'\nexport { RestPayloadsClient } from './PayloadsClient.ts'\nexport type { RestDatalakeClientOptions } from './RestDatalakeClient.ts'\nexport { RestDatalakeClient } from './RestDatalakeClient.ts'\nexport type { RestPublicPayloadsReaderOptions, RestPublicPayloadsReadOptions } from './RestPublicPayloadsReader.ts'\nexport { RestPublicPayloadsReader } from './RestPublicPayloadsReader.ts'\nexport * from '@ariestools/aries-datalake-core/browser'\n"],
+  "mappings": ";AAWA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACRP,eAAsB,iBAAiB,QAAyB,UAAmC;AACjG,SAAO,OAAO,WAAW,aAAa,MAAM,OAAO,EAAE,SAAS,CAAC,IAAI;AACrE;;;ACfA,SAAS,sBAAsB,wBAAwB;AAShD,SAAS,mBAAmB,qBAAqC;AACtE,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,mBAAmB;AAC1C,UAAM,YAAY,IAAI,oBAAoB;AAC1C,UAAM,cAAc,OAAO,SAAS,QAAQ,SAAS;AACrD,UAAM,SAAS,gBAAgB,KAC3B,OAAO,SAAS,QAAQ,OAAO,EAAE,IACjC,OAAO,SAAS,MAAM,GAAG,WAAW;AACxC,WAAO,GAAG,OAAO,QAAQ,KAAK,OAAO,IAAI,GAAG,MAAM;AAAA,EACpD,QAAQ;AACN,WAAO,oBAAoB,QAAQ,OAAO,EAAE;AAAA,EAC9C;AACF;AAGO,SAAS,qBAAwB,UAAoB,MAAc,QAAmB;AAC3F,QAAM,UAAmB,KAAK,SAAS,IAAI,KAAK,MAAM,IAAI,IAAI;AAE9D,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,YAA0B,eAAe,OAAO,IAClD,UACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS,gBAAgB,SAAS,SAAS,oBAAoB,SAAS;AAAA,IAC1E;AACJ,UAAM,IAAI,iBAAiB,SAAS,QAAQ,SAAS;AAAA,EACvD;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAAuC;AAC7D,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,QAAQ;AACd,SAAO,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY;AACpE;;;AFkDO,IAAM,qBAAN,MAAmD;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAAoC;AAC9C,SAAK,cAAc,mBAAmB,QAAQ,OAAO;AACrD,SAAK,aAAa,QAAQ;AAC1B,SAAK,YAAY,QAAQ;AACzB,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,QAAsC;AAC1C,WAAO,KAAK;AAAA,MACV,uBAAuB,KAAK,UAAU;AAAA,MACtC,EAAE,QAAQ,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,MAA6B;AACxC,UAAM,KAAK;AAAA,MACT,wBAAwB,KAAK,YAAY,IAAI;AAAA,MAC7C,EAAE,QAAQ,SAAS;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,MAAiD;AACzD,WAAO,KAAK,QAAkC,qBAAqB,KAAK,YAAY,IAAI,CAAC;AAAA,EAC3F;AAAA,EAEA,MAAM,QAAQ,QAAuD;AACnE,QAAI,OAAO,WAAW,EAAG,QAAO,CAAC;AACjC,WAAO,KAAK;AAAA,MACV,yBAAyB,KAAK,UAAU;AAAA,MACxC,EAAE,QAAQ,QAAQ,MAAM,OAAO;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,UAAoD;AAC/D,UAAM,OAA2B;AACjC,UAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,KAAK;AAAA,MACnC,wBAAwB,KAAK,UAAU;AAAA,MACvC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AACA,WAAO;AAAA,MACL,UAAU;AAAA,MACV,SAAS,kBAAkB,OAAO;AAAA,IACpC;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,UAA+B,CAAC,GAAgC;AACzE,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,QAAQ,UAAU,OAAW,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC1E,QAAI,QAAQ,OAAQ,QAAO,IAAI,UAAU,QAAQ,MAAM;AACvD,QAAI,QAAQ,WAAW,QAAQ,QAAQ,SAAS,EAAG,QAAO,IAAI,WAAW,QAAQ,QAAQ,KAAK,GAAG,CAAC;AAClG,QAAI,QAAQ,MAAO,QAAO,IAAI,SAAS,QAAQ,KAAK;AACpD,UAAM,SAAS,OAAO,SAAS;AAC/B,UAAM,OAAO,SACT,GAAG,sBAAsB,KAAK,UAAU,CAAC,IAAI,MAAM,KACnD,sBAAsB,KAAK,UAAU;AACzC,UAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,KAAK,mBAAyC,IAAI;AAClF,UAAM,aAAa,QAAQ,IAAI,2BAA2B,KAAK;AAC/D,WAAO,EAAE,UAAU,MAAM,WAAW;AAAA,EACtC;AAAA,EAEA,MAAM,QAAsC;AAC1C,WAAO,KAAK,QAA6B,uBAAuB,KAAK,UAAU,CAAC;AAAA,EAClF;AAAA,EAEA,MAAc,QAAW,MAAc,UAA0B,CAAC,GAAe;AAC/E,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,mBAAsB,MAAM,OAAO;AAC/D,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,mBAAsB,MAAc,UAA0B,CAAC,GAA8B;AACzG,UAAM,SAAS,QAAQ,UAAU;AACjC,UAAM,QAAQ,MAAM,iBAAiB,KAAK,WAAW,KAAK,UAAU;AACpE,UAAM,UAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,eAAe,UAAU,KAAK;AAAA,IAChC;AACA,UAAM,OAAoB;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU;AAAA,IACZ;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,cAAc,IAAI;AAC1B,WAAK,OAAO,KAAK,UAAU,QAAQ,IAAI;AAAA,IACzC;AAEA,UAAM,WAAW,MAAM,KAAK,UAAU,GAAG,KAAK,WAAW,GAAG,IAAI,IAAI,IAAI;AACxE,QAAI,SAAS,WAAW,IAAK,QAAO,EAAE,MAAM,QAAgB,SAAS,SAAS,QAAQ;AACtF,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,WAAO,EAAE,MAAM,qBAAwB,UAAU,MAAM,MAAM,GAAG,SAAS,SAAS,QAAQ;AAAA,EAC5F;AACF;AAEA,SAAS,kBAAkB,SAAyC;AAClE,QAAM,gBAAgB,QAAQ,IAAI,0BAA0B;AAC5D,QAAM,aAAa,kBAAkB,OAAO,IAAI,OAAO,SAAS,eAAe,EAAE;AACjF,QAAM,cAAc,QAAQ,IAAI,wBAAwB;AACxD,QAAM,WAAW,gBAAgB,QAAQ,YAAY,WAAW,IAC5D,CAAC,IACD,YAAY,MAAM,GAAG,EAAE,IAAI,WAAS,MAAM,KAAK,CAAC,EAAE,OAAO,WAAS,MAAM,SAAS,CAAC;AACtF,SAAO;AAAA,IACL,YAAY,OAAO,SAAS,UAAU,IAAI,aAAa;AAAA,IACvD;AAAA,EACF;AACF;;;AGrMA;AAAA,EACE;AAAA,EACA,oBAAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAwCA,IAAM,qBAAN,MAAmD;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAAoC;AAC9C,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAChD,SAAK,WAAW,QAAQ,YAAY;AACpC,SAAK,YAAY,QAAQ;AACzB,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,OAAO,SAA6D;AACxE,UAAM,OAA2B,EAAE,MAAM,QAAQ,MAAM,QAAQ,QAAQ,OAAO;AAC9E,WAAO,KAAK,QAA4B,uBAAuB,GAAG,EAAE,QAAQ,QAAQ,KAAK,CAAC;AAAA,EAC5F;AAAA,EAEA,MAAM,SAAS,UAA+C;AAC5D,WAAO,KAAK,QAA4B,qBAAqB,QAAQ,CAAC;AAAA,EACxE;AAAA,EAEA,MAAM,QAAQ,UAAiC;AAC7C,UAAM,KAAK,QAAc,qBAAqB,QAAQ,GAAG,EAAE,QAAQ,SAAS,CAAC;AAAA,EAC/E;AAAA,EAEA,MAAM,MAAM,SAAoD;AAC9D,UAAM,OAAkB,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAC3E,WAAO,KAAK;AAAA,MACV,mBAAmB,QAAQ,UAAU;AAAA,MACrC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,OAAsC;AAC1C,WAAO,KAAK,QAA8B,uBAAuB,CAAC;AAAA,EACpE;AAAA,EAEA,MAAM,UAAU,SAA+C;AAC7D,UAAM,OAAsB,EAAE,MAAM,QAAQ,MAAM,YAAY,QAAQ,WAAW;AACjF,WAAO,KAAK;AAAA,MACV,mBAAmB,QAAQ,UAAU;AAAA,MACrC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,SAAqD;AAChE,WAAO,KAAK;AAAA,MACV,kBAAkB,QAAQ,YAAY,QAAQ,SAAS;AAAA,MACvD,EAAE,QAAQ,SAAS;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAc,QAAW,MAAc,UAA0B,CAAC,GAAe;AAC/E,UAAM,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI;AAClC,UAAM,SAAS,QAAQ,UAAU;AACjC,UAAM,QAAQ,MAAM,iBAAiB,KAAK,WAAW,KAAK,QAAQ;AAClE,UAAM,UAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,eAAe,UAAU,KAAK;AAAA,IAChC;AACA,UAAM,OAAoB;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU;AAAA,IACZ;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,cAAc,IAAI;AAC1B,WAAK,OAAO,KAAK,UAAU,QAAQ,IAAI;AAAA,IACzC;AAEA,UAAM,WAAW,MAAM,KAAK,UAAU,KAAK,IAAI;AAC/C,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,IACT;AACA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAM,UAAmB,KAAK,SAAS,IAAI,KAAK,MAAM,IAAI,IAAI;AAE9D,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAA0BC,gBAAe,OAAO,IAClD,UACA;AAAA,QACE,MAAM;AAAA,QACN,SAAS,cAAc,SAAS,MAAM,kBAAkB,MAAM;AAAA,MAChE;AACJ,YAAM,IAAIC,kBAAiB,SAAS,QAAQ,SAAS;AAAA,IACvD;AACA,WAAO;AAAA,EACT;AACF;AAEA,SAASD,gBAAe,OAAuC;AAC7D,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,QAAQ;AACd,SAAO,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY;AACpE;;;ACvJA,SAAS,4BAAAE,2BAA0B,wBAAAC,6BAA4B;AAC/D,SAAS,wBAAwB;AAiC1B,IAAM,2BAAN,MAA+B;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAA0C;AACpD,SAAK,cAAc,kBAAkB,QAAQ,OAAO;AACpD,SAAK,aAAa,QAAQ;AAC1B,SAAK,YAAY,QAAQ;AAAA,EAC3B;AAAA,EAEA,MAAM,IAAI,MAAc,UAAyC,CAAC,GAAsC;AACtG,UAAM,UAAU,MAAM,KAAK,QAAQC,sBAAqB,KAAK,YAAY,IAAI,GAAG,OAAO;AACvF,QAAI,CAAC,gBAAgB,OAAO,EAAG,OAAM,IAAI,UAAU,+CAA+C;AAClG,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QAAQ,QAA2B,UAAyC,CAAC,GAAwC;AACzH,UAAM,SAAS,eAAe,OAAO;AACrC,UAAM,YAAY,CAAC,GAAG,MAAM;AAC5B,QAAI,UAAU,WAAW,EAAG,QAAO,CAAC;AACpC,UAAM,WAAW,MAAM,KAAK,QAAQC,0BAAyB,KAAK,UAAU,GAAG,QAAQ,SAAS;AAChG,QAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS,MAAM,eAAe,GAAG;AAChE,YAAM,IAAI,UAAU,qDAAqD;AAAA,IAC3E;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQ,MAAc,SAAwC,QAA8C;AACxH,UAAM,EAAE,kBAAkB,OAAO,IAAI,eAAe,OAAO;AAC3D,UAAM,SAAS,WAAW,SAAY,QAAQ;AAC9C,UAAM,UAAkC,EAAE,QAAQ,mBAAmB;AACrE,UAAM,OAAoB;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV;AAAA,IACF;AACA,QAAI,WAAW,QAAW;AACxB,cAAQ,cAAc,IAAI;AAC1B,WAAK,OAAO,KAAK,UAAU,MAAM;AAAA,IACnC;AACA,UAAM,YAAY,KAAK,aAAa,WAAW;AAC/C,UAAM,WAAW,MAAM,UAAU,KAAK,cAAc,MAAM,IAAI;AAC9D,UAAM,OAAO,MAAM,iBAAiB,UAAU,EAAE,kBAAkB,OAAO,CAAC;AAC1E,WAAO,qBAA8B,UAAU,MAAM,MAAM;AAAA,EAC7D;AACF;AAEA,SAAS,eAAe,SAAuE;AAC7F,QAAM,EAAE,kBAAkB,OAAO,IAAI;AACrC,MAAI,qBAAqB,WAAc,CAAC,OAAO,cAAc,gBAAgB,KAAK,oBAAoB,IAAI;AACxG,UAAM,IAAI,WAAW,kDAAkD;AAAA,EACzE;AACA,UAAQ,eAAe;AACvB,SAAO,EAAE,kBAAkB,OAAO;AACpC;AAEA,SAAS,kBAAkB,SAAyB;AAClD,MAAI;AACJ,MAAI;AACF,aAAS,IAAI,IAAI,OAAO;AAAA,EAC1B,QAAQ;AACN,UAAM,IAAI,UAAU,yCAAyC;AAAA,EAC/D;AACA,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UAAU;AAC/D,UAAM,IAAI,UAAU,yCAAyC;AAAA,EAC/D;AACA,MAAI,OAAO,aAAa,MAAM,OAAO,aAAa,IAAI;AACpD,UAAM,IAAI,UAAU,qDAAqD;AAAA,EAC3E;AACA,MAAI,OAAO,KAAK,SAAS,GAAG,EAAG,OAAM,IAAI,UAAU,mDAAmD;AACtG,SAAO,mBAAmB,OAAO;AACnC;AAEA,SAAS,gBAAgB,OAAmD;AAC1E,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,UAAU;AAChB,SAAO,CAAC,UAAU,SAAS,aAAa,WAAW,EAAE,MAAM,SAAO,OAAO,OAAO,SAAS,GAAG,KAAK,OAAO,QAAQ,GAAG,MAAM,QAAQ;AACnI;;;AC9FA,cAAc;",
+  "names": ["DatalakeApiError", "isApiErrorBody", "DatalakeApiError", "datalakePlaneGetManyPath", "datalakePlaneGetPath", "datalakePlaneGetPath", "datalakePlaneGetManyPath"]
 }

package/dist/node/PayloadsClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PayloadsClient.d.ts","sourceRoot":"","sources":["../../src/PayloadsClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAKV,oBAAoB,EACpB,mBAAmB,EAEnB,kBAAkB,EAClB,OAAO,EACP,eAAe,EAChB,MAAM,yCAAyC,CAAA;AAgBhD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAGrD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE;QACX,SAAS,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;QAChD,aAAa,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACrD,CAAA;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC1D,IAAI,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAChE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAA;CACtC;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,eAAe,CAAA;AAErD,MAAM,WAAW,yBAAyB;IACxC;;MAEE;IACF,SAAS,EAAE,uBAAuB,CAAA;IAClC;;MAEE;IACF,OAAO,EAAE,MAAM,CAAA;IACf;;MAEE;IACF,UAAU,EAAE,MAAM,CAAA;IAClB;;MAEE;IACF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAiCD,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;gBAExB,OAAO,EAAE,yBAAyB;IAOxC,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAOrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAIpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAQ9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY1D,IAAI,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAepE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC;YAI7B,OAAO;YAKP,kBAAkB;CAkCjC"}
+{"version":3,"file":"PayloadsClient.d.ts","sourceRoot":"","sources":["../../src/PayloadsClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAIV,oBAAoB,EACpB,mBAAmB,EAEnB,kBAAkB,EAClB,OAAO,EACP,eAAe,EAChB,MAAM,yCAAyC,CAAA;AAchD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAIrD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE;QACX,SAAS,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;QAChD,aAAa,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACrD,CAAA;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC1D,IAAI,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAChE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAA;CACtC;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,eAAe,CAAA;AAErD,MAAM,WAAW,yBAAyB;IACxC;;MAEE;IACF,SAAS,EAAE,uBAAuB,CAAA;IAClC;;MAEE;IACF,OAAO,EAAE,MAAM,CAAA;IACf;;MAEE;IACF,UAAU,EAAE,MAAM,CAAA;IAClB;;MAEE;IACF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAYD,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;gBAExB,OAAO,EAAE,yBAAyB;IAOxC,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAOrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAIpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAQ9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY1D,IAAI,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAepE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC;YAI7B,OAAO;YAKP,kBAAkB;CAuBjC"}

package/dist/node/RestPublicPayloadsReader.d.ts

@@ -0,0 +1,38 @@
+import type { Payload, WithStorageMeta } from '@ariestools/aries-datalake-core/browser';
+/** Policy for one public HTTP response, including its JSON envelope and metadata. */
+export interface RestPublicPayloadsReadOptions {
+    /**
+    Positive safe-integer limit on decoded Fetch-body bytes before JSON parsing.
+    Omission leaves the body size unlimited; this is not a raw network-byte limit.
+    */
+    readonly maxResponseBytes?: number;
+    /** Caller cancellation remains active through response-body consumption. */
+    readonly signal?: AbortSignal;
+}
+export interface RestPublicPayloadsReaderOptions {
+    /** Absolute HTTP(S) data-plane URL, optionally including its API path prefix. */
+    readonly baseUrl: string;
+    /** Datalake id used to regenerate the canonical native data-plane paths. */
+    readonly datalakeId: string;
+    /**
+    Trusted transport override. It must preserve the public no-credentials and
+    no-redirect policy and honor cancellation. Defaults to request-time global fetch.
+    */
+    readonly fetchImpl?: typeof fetch;
+}
+/**
+ * Exact-hash reads using the native data-plane protocol without token handling.
+ * The server must grant public viewer access. Public access applies to the whole
+ * lake; this reader neither grants access nor falls back from authenticated I/O.
+ * Returned metadata is structural transport data, not verified content identity.
+ */
+export declare class RestPublicPayloadsReader {
+    private readonly datalakeId;
+    private readonly fetchImpl?;
+    private readonly requestBase;
+    constructor(options: RestPublicPayloadsReaderOptions);
+    get(hash: string, options?: RestPublicPayloadsReadOptions): Promise<WithStorageMeta<Payload>>;
+    getMany(hashes: readonly string[], options?: RestPublicPayloadsReadOptions): Promise<WithStorageMeta<Payload>[]>;
+    private request;
+}
+//# sourceMappingURL=RestPublicPayloadsReader.d.ts.map

package/dist/node/RestPublicPayloadsReader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RestPublicPayloadsReader.d.ts","sourceRoot":"","sources":["../../src/RestPublicPayloadsReader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAA;AAMvF,qFAAqF;AACrF,MAAM,WAAW,6BAA6B;IAC5C;;;MAGE;IACF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,MAAM,WAAW,+BAA+B;IAC9C,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B;;;MAGE;IACF,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAClC;AAED;;;;;GAKG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAc;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;gBAExB,OAAO,EAAE,+BAA+B;IAM9C,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,6BAAkC,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAMjG,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,GAAE,6BAAkC,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAW5G,OAAO;CAoBtB"}

package/dist/node/browser.d.ts

@@ -4,5 +4,7 @@ export type { DatalakeUsageReport, PayloadsAuthTokenSource, PayloadsClient, Rest
 export { RestPayloadsClient } from './PayloadsClient.ts';
 export type { RestDatalakeClientOptions } from './RestDatalakeClient.ts';
 export { RestDatalakeClient } from './RestDatalakeClient.ts';
+export type { RestPublicPayloadsReaderOptions, RestPublicPayloadsReadOptions } from './RestPublicPayloadsReader.ts';
+export { RestPublicPayloadsReader } from './RestPublicPayloadsReader.ts';
 export * from '@ariestools/aries-datalake-core/browser';
 //# sourceMappingURL=browser.d.ts.map

package/dist/node/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,GACrD,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,yBAAyB,GAC1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,cAAc,yCAAyC,CAAA"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,GACrD,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,yBAAyB,GAC1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,YAAY,EAAE,+BAA+B,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAA;AACnH,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,cAAc,yCAAyC,CAAA"}

package/dist/node/index.d.ts

@@ -10,4 +10,6 @@ export type { DatalakeUsageReport, PayloadsAuthTokenSource, PayloadsClient, Rest
 export { RestPayloadsClient } from './PayloadsClient.ts';
 export type { RestDatalakeClientOptions } from './RestDatalakeClient.ts';
 export { RestDatalakeClient } from './RestDatalakeClient.ts';
+export type { RestPublicPayloadsReaderOptions, RestPublicPayloadsReadOptions } from './RestPublicPayloadsReader.ts';
+export { RestPublicPayloadsReader } from './RestPublicPayloadsReader.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/node/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,GACrD,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAA;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC/E,OAAO,EACL,gBAAgB,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,GAC3E,MAAM,kBAAkB,CAAA;AACzB,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,GAC7D,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AACrF,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,yBAAyB,GAC1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,GACrD,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAA;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC/E,OAAO,EACL,gBAAgB,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,GAC3E,MAAM,kBAAkB,CAAA;AACzB,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,GAC7D,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AACrF,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,yBAAyB,GAC1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,YAAY,EAAE,+BAA+B,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAA;AACnH,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA"}

package/dist/node/index.mjs

@@ -362,11 +362,9 @@ function clearDefaultDatalake() {
 
 // src/PayloadsClient.ts
 import {
-  DATALAKE_API_VERSION,
   DATALAKE_HEADER_DUPLICATES,
   DATALAKE_HEADER_NEXT_CURSOR,
   DATALAKE_HEADER_REJECTED,
-  DatalakeApiError as DatalakeApiError2,
   datalakePlaneClearPath,
   datalakePlaneDeletePath,
   datalakePlaneGetManyPath,
@@ -375,6 +373,9 @@ import {
   datalakePlaneNextPath,
   datalakePlaneUsagePath
 } from "@ariestools/aries-datalake-core/browser";
+
+// src/payloadRequest.ts
+import { DATALAKE_API_VERSION, DatalakeApiError as DatalakeApiError2 } from "@ariestools/aries-datalake-core/browser";
 function extractRequestBase(urlWithPossiblePath) {
   try {
     const parsed = new URL(urlWithPossiblePath);
@@ -386,6 +387,24 @@ function extractRequestBase(urlWithPossiblePath) {
     return urlWithPossiblePath.replace(/\/$/, "");
   }
 }
+function parsePayloadResponse(response, text, method) {
+  const payload = text.length > 0 ? JSON.parse(text) : void 0;
+  if (!response.ok) {
+    const errorBody = isApiErrorBody2(payload) ? payload : {
+      code: "internal",
+      message: "Unexpected " + response.status + " response from " + method + " data plane"
+    };
+    throw new DatalakeApiError2(response.status, errorBody);
+  }
+  return payload;
+}
+function isApiErrorBody2(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const maybe = value;
+  return typeof maybe.code === "string" && typeof maybe.message === "string";
+}
+
+// src/PayloadsClient.ts
 var RestPayloadsClient = class {
   authToken;
   datalakeId;
@@ -469,15 +488,7 @@ var RestPayloadsClient = class {
     const response = await this.fetchImpl(`${this.requestBase}${path4}`, init);
     if (response.status === 204) return { data: void 0, headers: response.headers };
     const text = await response.text();
-    const payload = text.length > 0 ? JSON.parse(text) : void 0;
-    if (!response.ok) {
-      const errorBody = isApiErrorBody2(payload) ? payload : {
-        code: "internal",
-        message: `Unexpected ${response.status} response from ${method} data plane`
-      };
-      throw new DatalakeApiError2(response.status, errorBody);
-    }
-    return { data: payload, headers: response.headers };
+    return { data: parsePayloadResponse(response, text, method), headers: response.headers };
   }
 };
 function readInsertSummary(headers) {
@@ -490,15 +501,89 @@ function readInsertSummary(headers) {
     rejected
   };
 }
-function isApiErrorBody2(value) {
-  if (typeof value !== "object" || value === null) return false;
-  const maybe = value;
-  return typeof maybe.code === "string" && typeof maybe.message === "string";
+
+// src/RestPublicPayloadsReader.ts
+import { datalakePlaneGetManyPath as datalakePlaneGetManyPath2, datalakePlaneGetPath as datalakePlaneGetPath2 } from "@ariestools/aries-datalake-core/browser";
+import { readResponseText } from "@ariestools/sdk/fetch";
+var RestPublicPayloadsReader = class {
+  datalakeId;
+  fetchImpl;
+  requestBase;
+  constructor(options) {
+    this.requestBase = publicRequestBase(options.baseUrl);
+    this.datalakeId = options.datalakeId;
+    this.fetchImpl = options.fetchImpl;
+  }
+  async get(hash, options = {}) {
+    const payload = await this.request(datalakePlaneGetPath2(this.datalakeId, hash), options);
+    if (!isStoredPayload(payload)) throw new TypeError("Data plane returned an invalid stored payload");
+    return payload;
+  }
+  async getMany(hashes, options = {}) {
+    const policy = pinReadOptions(options);
+    const requested = [...hashes];
+    if (requested.length === 0) return [];
+    const payloads = await this.request(datalakePlaneGetManyPath2(this.datalakeId), policy, requested);
+    if (!Array.isArray(payloads) || !payloads.every(isStoredPayload)) {
+      throw new TypeError("Data plane returned an invalid stored-payload array");
+    }
+    return payloads;
+  }
+  async request(path4, options, hashes) {
+    const { maxResponseBytes, signal } = pinReadOptions(options);
+    const method = hashes === void 0 ? "GET" : "POST";
+    const headers = { accept: "application/json" };
+    const init = {
+      credentials: "omit",
+      headers,
+      method,
+      redirect: "error",
+      signal
+    };
+    if (hashes !== void 0) {
+      headers["content-type"] = "application/json";
+      init.body = JSON.stringify(hashes);
+    }
+    const fetchImpl = this.fetchImpl ?? globalThis.fetch;
+    const response = await fetchImpl(this.requestBase + path4, init);
+    const text = await readResponseText(response, { maxResponseBytes, signal });
+    return parsePayloadResponse(response, text, method);
+  }
+};
+function pinReadOptions(options) {
+  const { maxResponseBytes, signal } = options;
+  if (maxResponseBytes !== void 0 && (!Number.isSafeInteger(maxResponseBytes) || maxResponseBytes <= 0)) {
+    throw new RangeError("maxResponseBytes must be a positive safe integer");
+  }
+  signal?.throwIfAborted();
+  return { maxResponseBytes, signal };
+}
+function publicRequestBase(baseUrl) {
+  let parsed;
+  try {
+    parsed = new URL(baseUrl);
+  } catch {
+    throw new TypeError("baseUrl must be an absolute HTTP(S) URL");
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    throw new TypeError("baseUrl must be an absolute HTTP(S) URL");
+  }
+  if (parsed.username !== "" || parsed.password !== "") {
+    throw new TypeError("Public data-plane URLs must not contain credentials");
+  }
+  if (parsed.href.includes("#")) throw new TypeError("Public data-plane URLs must not contain fragments");
+  return extractRequestBase(baseUrl);
+}
+function isStoredPayload(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+  const payload = value;
+  return ["schema", "_hash", "_dataHash", "_sequence"].every((key) => Object.hasOwn(payload, key) && typeof payload[key] === "string");
 }
 export {
   LocalDatalakeClient,
   RestDatalakeClient,
   RestPayloadsClient,
+  RestPublicPayloadsReader,
   clearCredentials,
   clearDefaultDatalake,
   createDatalakeClient,

package/dist/node/index.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../../src/credentials.ts", "../../src/paths.ts", "../../src/LocalDatalakeClient.ts", "../../src/RestDatalakeClient.ts", "../../src/AuthToken.ts", "../../src/createDatalakeClient.ts", "../../src/defaultDatalake.ts", "../../src/PayloadsClient.ts"],
-  "sourcesContent": ["import {\n  chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync,\n} from 'node:fs'\nimport path from 'node:path'\n\nimport { getAriesHome, getCredentialsPath } from './paths.ts'\n\n/**\n * Hints for self-signed wallet-JWT mode. When present, the CLI is expected to\n * mint a fresh ES256K JWT per request using the active aries wallet. The\n * server-side `authToken` field is unused in this mode.\n */\nexport interface WalletJwtCredentials {\n  /**\n  `aud` claim to use for control-plane calls (default `aries-datalake-control`).\n  */\n  controlAudience?: string\n  /**\n  Derivation offset of the signing account (default `'0'`).\n  */\n  offset?: string\n  /**\n  TTL (seconds) for each minted JWT (default `120`).\n  */\n  ttlSeconds?: number\n}\n\nexport interface StoredCredentials {\n  /**\n   * Static bearer token for legacy/static-token mode. Absent when `walletJwt`\n   * mode is configured \u2014 the CLI mints a token per request instead.\n   */\n  authToken?: string\n  baseUrl: string\n  /**\n  ISO-8601 expiration of the access token.\n  */\n  expiresAt?: string\n  /**\n  Optional refresh token for long-lived sessions.\n  */\n  refreshToken?: string\n  userId?: string\n  /**\n  Wallet-JWT mode hints. When set, the CLI mints self-signed JWTs.\n  */\n  walletJwt?: WalletJwtCredentials\n}\n\nexport function saveCredentials(credentials: StoredCredentials): void {\n  const home = getAriesHome()\n  if (!existsSync(home)) mkdirSync(home, { recursive: true })\n  const filePath = getCredentialsPath()\n  writeFileSync(filePath, JSON.stringify(credentials, undefined, 2), 'utf8')\n  try {\n    chmodSync(filePath, 0o600)\n  } catch {\n    // chmod can fail on some filesystems (e.g. Windows); tolerate silently.\n  }\n}\n\nexport function loadCredentials(): StoredCredentials | undefined {\n  const filePath = getCredentialsPath()\n  if (!existsSync(filePath)) return undefined\n  try {\n    const raw = readFileSync(filePath, 'utf8')\n    return JSON.parse(raw) as StoredCredentials\n  } catch {\n    return undefined\n  }\n}\n\nexport function clearCredentials(): void {\n  const filePath = getCredentialsPath()\n  if (existsSync(filePath)) unlinkSync(filePath)\n}\n\nexport function getCredentialsLocation(): string {\n  return path.resolve(getCredentialsPath())\n}\n", "import { homedir } from 'node:os'\nimport path from 'node:path'\n\n/**\n * Root directory for all Aries state (credentials, local datalake stub, etc.).\n * Overridable via `ARIES_HOME` so tests can redirect to a temp dir.\n */\nexport function getAriesHome(): string {\n  return process.env.ARIES_HOME ?? path.join(homedir(), '.aries')\n}\n\nexport function getDatalakeStoreDir(): string {\n  return path.join(getAriesHome(), 'datalakes')\n}\n\n/**\n * JSON file backing the `LocalDatalakeClient`. A lightweight substitute for\n * the real control plane during P0 development.\n */\nexport function getLocalDatalakeStorePath(): string {\n  return path.join(getDatalakeStoreDir(), 'local-store.json')\n}\n\nexport function getCredentialsPath(): string {\n  return path.join(getAriesHome(), 'credentials.json')\n}\n\nexport function getDefaultDatalakePath(): string {\n  return path.join(getAriesHome(), 'datalake-default.json')\n}\n", "import {\n  existsSync, mkdirSync, readFileSync, writeFileSync,\n} from 'node:fs'\nimport path from 'node:path'\n\nimport type {\n  DatalakeDescriptor,\n  DatalakeTier,\n  DatalakeToken,\n} from '@ariestools/aries-datalake-core'\n\nimport type {\n  CreateDatalakeRequest,\n  DatalakeClient,\n  GrantRequest,\n  RevokeRequest,\n  TokenRequest,\n} from './DatalakeClient.ts'\nimport { getDatalakeStoreDir, getLocalDatalakeStorePath } from './paths.ts'\n\ninterface LocalStore {\n  datalakes: DatalakeDescriptor[]\n}\n\nconst LOCAL_OWNER_ID = 'local-user'\n\nconst TIER_SIZE_DEFAULTS: Record<DatalakeTier, number> = {\n  small: 10 * 1024 * 1024 * 1024,\n  medium: 100 * 1024 * 1024 * 1024,\n  large: 1024 * 1024 * 1024 * 1024,\n  archive: 10 * 1024 * 1024 * 1024 * 1024,\n}\n\nconst TIER_IOPS_DEFAULTS: Record<DatalakeTier, number> = {\n  small: 500,\n  medium: 2000,\n  large: 10_000,\n  archive: 0,\n}\n\nfunction readStore(): LocalStore {\n  const filePath = getLocalDatalakeStorePath()\n  if (!existsSync(filePath)) return { datalakes: [] }\n  try {\n    const raw = readFileSync(filePath, 'utf8')\n    return JSON.parse(raw) as LocalStore\n  } catch {\n    return { datalakes: [] }\n  }\n}\n\nfunction writeStore(store: LocalStore): void {\n  const dir = getDatalakeStoreDir()\n  if (!existsSync(dir)) mkdirSync(dir, { recursive: true })\n  writeFileSync(getLocalDatalakeStorePath(), JSON.stringify(store, undefined, 2), 'utf8')\n}\n\nfunction generateId(): string {\n  return `dl_${Math.random().toString(36).slice(2, 10)}${Date.now().toString(36)}`\n}\n\nfunction findDatalake(store: LocalStore, idOrName: string): DatalakeDescriptor | undefined {\n  return store.datalakes.find(dl => dl.id === idOrName || dl.name === idOrName)\n}\n\nfunction requireDatalake(store: LocalStore, idOrName: string): DatalakeDescriptor {\n  const found = findDatalake(store, idOrName)\n  if (!found) throw new Error(`Datalake not found: ${idOrName}`)\n  return found\n}\n\n/**\n * Filesystem-backed stub implementation of `DatalakeClient` used during P0\n * development. Pretends to provision datalakes instantly, persists metadata\n * to `~/.aries/datalakes/local-store.json`, and mints opaque non-JWT tokens.\n *\n * Not suitable for production use \u2014 replace with `RestDatalakeClient` once\n * the control plane is live.\n */\nexport class LocalDatalakeClient implements DatalakeClient {\n  async create(request: CreateDatalakeRequest): Promise<DatalakeDescriptor> {\n    const store = readStore()\n    if (store.datalakes.some(dl => dl.name === request.name)) {\n      throw new Error(`Datalake already exists: ${request.name}`)\n    }\n\n    const now = new Date().toISOString()\n    const tier = request.config.tier\n    const descriptor: DatalakeDescriptor = {\n      id: generateId(),\n      name: request.name,\n      ownerId: LOCAL_OWNER_ID,\n      config: {\n        tier,\n        sizeBytes: request.config.sizeBytes ?? TIER_SIZE_DEFAULTS[tier],\n        iops: request.config.iops ?? TIER_IOPS_DEFAULTS[tier],\n        retentionDays: request.config.retentionDays ?? 30,\n        region: request.config.region ?? 'us-west-2',\n        allowedSchemas: request.config.allowedSchemas ?? [],\n        disallowedSchemas: request.config.disallowedSchemas ?? [],\n      },\n      status: 'ready',\n      url: `http://localhost:8080/datalakes/${request.name}`,\n      acl: [],\n      usage: {\n        payloadCount: 0,\n        bytesStored: 0,\n        bytesStoredLimit: request.config.sizeBytes ?? TIER_SIZE_DEFAULTS[tier],\n        readsLast24h: 0,\n        writesLast24h: 0,\n      },\n      createdAt: now,\n      updatedAt: now,\n    }\n\n    store.datalakes.push(descriptor)\n    writeStore(store)\n    return descriptor\n  }\n\n  async describe(idOrName: string): Promise<DatalakeDescriptor> {\n    const store = readStore()\n    return requireDatalake(store, idOrName)\n  }\n\n  async destroy(idOrName: string): Promise<void> {\n    const store = readStore()\n    const found = findDatalake(store, idOrName)\n    if (!found) throw new Error(`Datalake not found: ${idOrName}`)\n    store.datalakes = store.datalakes.filter(dl => dl.id !== found.id)\n    writeStore(store)\n  }\n\n  async grant(request: GrantRequest): Promise<DatalakeDescriptor> {\n    const store = readStore()\n    const datalake = requireDatalake(store, request.datalakeId)\n    const existing = datalake.acl.findIndex(entry => entry.principal === request.principal)\n    const entry = {\n      principal: request.principal,\n      role: request.role,\n      grantedAt: new Date().toISOString(),\n      grantedBy: LOCAL_OWNER_ID,\n    }\n    if (existing === -1) {\n      datalake.acl.push(entry)\n    } else {\n      datalake.acl[existing] = entry\n    }\n    datalake.updatedAt = entry.grantedAt\n    writeStore(store)\n    return datalake\n  }\n\n  async list(): Promise<DatalakeDescriptor[]> {\n    return readStore().datalakes\n  }\n\n  async mintToken(request: TokenRequest): Promise<DatalakeToken> {\n    const store = readStore()\n    const datalake = requireDatalake(store, request.datalakeId)\n    const ttl = request.ttlSeconds ?? 3600\n    const issued = Buffer.from(\n      JSON.stringify({\n        dl: datalake.id,\n        role: request.role,\n        exp: Math.floor(Date.now() / 1000) + ttl,\n      }),\n    ).toString('base64url')\n    return {\n      token: `local.${issued}`,\n      datalakeId: datalake.id,\n      role: request.role,\n      expiresAt: new Date(Date.now() + ttl * 1000).toISOString(),\n      url: datalake.url ?? `http://localhost:8080/datalakes/${datalake.name}`,\n    }\n  }\n\n  async revoke(request: RevokeRequest): Promise<DatalakeDescriptor> {\n    const store = readStore()\n    const datalake = requireDatalake(store, request.datalakeId)\n    datalake.acl = datalake.acl.filter(entry => entry.principal !== request.principal)\n    datalake.updatedAt = new Date().toISOString()\n    writeStore(store)\n    return datalake\n  }\n}\n\n/**\n * Convenience: the absolute path where the local store persists state.\n * Useful in tests and for `aries datalake describe --debug`.\n */\nexport function getLocalStoreLocation(): string {\n  return path.resolve(getLocalDatalakeStorePath())\n}\n", "import type {\n  ApiErrorBody,\n  CreateDatalakeBody,\n  DatalakeDescriptor,\n  DatalakeToken,\n  GrantBody,\n  MintTokenBody,\n} from '@ariestools/aries-datalake-core/browser'\nimport {\n  DATALAKE_CONTROL_AUDIENCE,\n  DatalakeApiError,\n  datalakeCollectionPath,\n  datalakeGrantPath,\n  datalakeGrantsPath,\n  datalakeResourcePath,\n  datalakeTokensPath,\n} from '@ariestools/aries-datalake-core/browser'\n\nimport type { AuthTokenSource } from './AuthToken.ts'\nimport { resolveAuthToken } from './AuthToken.ts'\nimport type {\n  CreateDatalakeRequest,\n  DatalakeClient,\n  GrantRequest,\n  RevokeRequest,\n  TokenRequest,\n} from './DatalakeClient.ts'\n\nexport interface RestDatalakeClientOptions {\n  /**\n  Exact control-plane JWT audience.\n  */\n  audience?: string\n  /**\n  Static token, or async factory minted per-request.\n  */\n  authToken: AuthTokenSource\n  /**\n  Control-plane base URL, e.g. `https://dl-control.xylabs.io`.\n  */\n  baseUrl: string\n  /**\n  Optional `fetch` override; defaults to global `fetch`.\n  */\n  fetchImpl?: typeof fetch\n}\n\ninterface RequestOptions {\n  body?: unknown\n  method?: string\n}\n\n/**\n * HTTP client for the datalake control plane. Implements the stable\n * `DatalakeClient` contract so callers are independent of transport.\n */\nexport class RestDatalakeClient implements DatalakeClient {\n  private readonly audience: string\n  private readonly authToken: AuthTokenSource\n  private readonly baseUrl: string\n  private readonly fetchImpl: typeof fetch\n\n  constructor(options: RestDatalakeClientOptions) {\n    this.baseUrl = options.baseUrl.replace(/\\/$/, '')\n    this.audience = options.audience ?? DATALAKE_CONTROL_AUDIENCE\n    this.authToken = options.authToken\n    this.fetchImpl = options.fetchImpl ?? fetch\n  }\n\n  async create(request: CreateDatalakeRequest): Promise<DatalakeDescriptor> {\n    const body: CreateDatalakeBody = { name: request.name, config: request.config }\n    return this.request<DatalakeDescriptor>(datalakeCollectionPath(), { method: 'POST', body })\n  }\n\n  async describe(idOrName: string): Promise<DatalakeDescriptor> {\n    return this.request<DatalakeDescriptor>(datalakeResourcePath(idOrName))\n  }\n\n  async destroy(idOrName: string): Promise<void> {\n    await this.request<void>(datalakeResourcePath(idOrName), { method: 'DELETE' })\n  }\n\n  async grant(request: GrantRequest): Promise<DatalakeDescriptor> {\n    const body: GrantBody = { principal: request.principal, role: request.role }\n    return this.request<DatalakeDescriptor>(\n      datalakeGrantsPath(request.datalakeId),\n      { method: 'POST', body },\n    )\n  }\n\n  async list(): Promise<DatalakeDescriptor[]> {\n    return this.request<DatalakeDescriptor[]>(datalakeCollectionPath())\n  }\n\n  async mintToken(request: TokenRequest): Promise<DatalakeToken> {\n    const body: MintTokenBody = { role: request.role, ttlSeconds: request.ttlSeconds }\n    return this.request<DatalakeToken>(\n      datalakeTokensPath(request.datalakeId),\n      { method: 'POST', body },\n    )\n  }\n\n  async revoke(request: RevokeRequest): Promise<DatalakeDescriptor> {\n    return this.request<DatalakeDescriptor>(\n      datalakeGrantPath(request.datalakeId, request.principal),\n      { method: 'DELETE' },\n    )\n  }\n\n  private async request<T>(path: string, options: RequestOptions = {}): Promise<T> {\n    const url = `${this.baseUrl}${path}`\n    const method = options.method ?? 'GET'\n    const token = await resolveAuthToken(this.authToken, this.audience)\n    const headers: Record<string, string> = {\n      accept: 'application/json',\n      authorization: `Bearer ${token}`,\n    }\n    const init: RequestInit = {\n      credentials: 'omit',\n      headers,\n      method,\n      redirect: 'error',\n    }\n    if (options.body !== undefined) {\n      headers['content-type'] = 'application/json'\n      init.body = JSON.stringify(options.body)\n    }\n\n    const response = await this.fetchImpl(url, init)\n    if (response.status === 204) {\n      return undefined as T\n    }\n    const text = await response.text()\n    const payload: unknown = text.length > 0 ? JSON.parse(text) : undefined\n\n    if (!response.ok) {\n      const errorBody: ApiErrorBody = isApiErrorBody(payload)\n        ? payload\n        : {\n            code: 'internal',\n            message: `Unexpected ${response.status} response from ${method} control plane`,\n          }\n      throw new DatalakeApiError(response.status, errorBody)\n    }\n    return payload as T\n  }\n}\n\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const maybe = value as Record<string, unknown>\n  return typeof maybe.code === 'string' && typeof maybe.message === 'string'\n}\n", "export interface AuthTokenRequest {\n  /**\n  Exact JWT audience required by the target service or datalake.\n  */\n  audience: string\n}\n\n/**\nInvoked for every request so callers can obtain a fresh wallet JWT.\n*/\nexport type AuthTokenSupplier = (request: AuthTokenRequest) => Promise<string>\n\nexport type AuthTokenSource = AuthTokenSupplier | string\n\nexport async function resolveAuthToken(source: AuthTokenSource, audience: string): Promise<string> {\n  return typeof source === 'function' ? await source({ audience }) : source\n}\n", "import type { AuthTokenSource } from './AuthToken.ts'\nimport { loadCredentials } from './credentials.ts'\nimport type { DatalakeClient } from './DatalakeClient.ts'\nimport { LocalDatalakeClient } from './LocalDatalakeClient.ts'\nimport { RestDatalakeClient } from './RestDatalakeClient.ts'\n\nexport interface CreateDatalakeClientOptions {\n  /**\n   * Override the auth token (otherwise read from credentials). Accepts either\n   * a static bearer string or an async factory \u2014 pass a factory when minting\n   * self-signed wallet JWTs per request.\n   */\n  authToken?: AuthTokenSource\n  /**\n  Override the control-plane URL (otherwise read from env / credentials).\n  */\n  baseUrl?: string\n  /**\n   * Force a specific driver. Defaults to:\n   *   - `rest` when `ARIES_DATALAKE_API` is set or credentials are present\n   *   - `local` otherwise\n   */\n  driver?: 'local' | 'rest'\n}\n\n/**\n * Returns a `DatalakeClient` wired for the current environment. The CLI uses\n * this factory so every command picks up the same resolution rules.\n */\nexport function createDatalakeClient(options: CreateDatalakeClientOptions = {}): DatalakeClient {\n  const envBaseUrl = process.env.ARIES_DATALAKE_API\n  const credentials = loadCredentials()\n  const baseUrl = options.baseUrl ?? envBaseUrl ?? credentials?.baseUrl\n  const authToken: AuthTokenSource | undefined = options.authToken ?? credentials?.authToken\n\n  const driver = options.driver\n    ?? (baseUrl && authToken ? 'rest' : 'local')\n\n  if (driver === 'rest') {\n    if (!baseUrl || !authToken) {\n      throw new Error(\n        'REST driver requires a baseUrl and authToken. '\n        + 'Run `aries datalake login` or set ARIES_DATALAKE_API and sign in.',\n      )\n    }\n    return new RestDatalakeClient({ baseUrl, authToken })\n  }\n\n  return new LocalDatalakeClient()\n}\n", "import {\n  existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync,\n} from 'node:fs'\n\nimport { getAriesHome, getDefaultDatalakePath } from './paths.ts'\n\ninterface DefaultDatalakeFile {\n  id?: string\n  name: string\n  setAt: string\n}\n\n/**\n * Remembers which datalake the user selected via `aries datalake use`. Read by\n * commands that accept an optional `<name>` and fall back to the default.\n */\nexport function setDefaultDatalake(name: string, id?: string): void {\n  const home = getAriesHome()\n  if (!existsSync(home)) mkdirSync(home, { recursive: true })\n  const payload: DefaultDatalakeFile = {\n    name, id, setAt: new Date().toISOString(),\n  }\n  writeFileSync(getDefaultDatalakePath(), JSON.stringify(payload, undefined, 2), 'utf8')\n}\n\nexport function getDefaultDatalake(): string | undefined {\n  const filePath = getDefaultDatalakePath()\n  if (!existsSync(filePath)) return undefined\n  try {\n    const raw = readFileSync(filePath, 'utf8')\n    const parsed = JSON.parse(raw) as DefaultDatalakeFile\n    return parsed.name\n  } catch {\n    return undefined\n  }\n}\n\nexport function clearDefaultDatalake(): void {\n  const filePath = getDefaultDatalakePath()\n  if (existsSync(filePath)) unlinkSync(filePath)\n}\n", "import type {\n  ApiErrorBody,\n  DatalakeInsertSummary,\n  InsertPayloadsBody,\n  InsertPayloadsResponse,\n  InsertPayloadsResult,\n  NextPayloadsOptions,\n  NextPayloadsResponse,\n  NextPayloadsResult,\n  Payload,\n  WithStorageMeta,\n} from '@ariestools/aries-datalake-core/browser'\nimport {\n  DATALAKE_API_VERSION,\n  DATALAKE_HEADER_DUPLICATES,\n  DATALAKE_HEADER_NEXT_CURSOR,\n  DATALAKE_HEADER_REJECTED,\n  DatalakeApiError,\n  datalakePlaneClearPath,\n  datalakePlaneDeletePath,\n  datalakePlaneGetManyPath,\n  datalakePlaneGetPath,\n  datalakePlaneInsertPath,\n  datalakePlaneNextPath,\n  datalakePlaneUsagePath,\n} from '@ariestools/aries-datalake-core/browser'\n\nimport type { AuthTokenSource } from './AuthToken.ts'\nimport { resolveAuthToken } from './AuthToken.ts'\n\nexport interface DatalakeUsageReport {\n  datalakeId: string\n  payloadCount: number\n  rateLimits?: {\n    anonymous?: { limit: number; remaining: number }\n    authenticated?: { limit: number; remaining: number }\n  }\n}\n\n/**\n * HTTP client for a single datalake's data plane. Clients send bare\n * `Payload` objects (no `_hash` / `_dataHash` \u2014 those are stamped on\n * insert by the data plane's archivist). Responses always carry the\n * archivist-computed storage meta.\n *\n * Wire format mirrors the XYO archivist REST middleware: `/insert`,\n * `/get/:hash`, `/next`, bare arrays as bodies. Datalake-specific\n * extras (duplicates count, rejected hashes, next cursor) are delivered\n * via response headers.\n */\nexport interface PayloadsClient {\n  clear(): Promise<{ removed: number }>\n  delete(hash: string): Promise<void>\n  get(hash: string): Promise<WithStorageMeta<Payload>>\n  getMany(hashes: string[]): Promise<WithStorageMeta<Payload>[]>\n  insert(payloads: Payload[]): Promise<InsertPayloadsResult>\n  next(options?: NextPayloadsOptions): Promise<NextPayloadsResult>\n  usage(): Promise<DatalakeUsageReport>\n}\n\n/**\n * Either a static bearer token, or a factory invoked per-request. The factory\n * form lets callers mint a fresh self-signed wallet JWT per call (with\n * `aud` bound to the datalake id).\n */\nexport type PayloadsAuthTokenSource = AuthTokenSource\n\nexport interface RestPayloadsClientOptions {\n  /**\n  Static bearer token, or async factory minted per-request.\n  */\n  authToken: PayloadsAuthTokenSource\n  /**\n  Data-plane base URL without trailing slash.\n  */\n  baseUrl: string\n  /**\n  Datalake id; appended to `/v1/datalakes/:id/...`.\n  */\n  datalakeId: string\n  /**\n  Optional `fetch` override; defaults to global `fetch`.\n  */\n  fetchImpl?: typeof fetch\n}\n\ninterface RequestOptions {\n  body?: unknown\n  method?: string\n}\n\ninterface RequestResult<T> {\n  data: T\n  headers: Headers\n}\n\n/**\n * The data plane is typically addressed by a URL that already includes the\n * datalake id (e.g. `https://plane/v1/datalakes/dl_abc`). Preserve any path\n * prefix before `/v1/datalakes` so a shared ALB can expose the data plane at\n * `https://host/plane` while the path helpers regenerate the canonical API\n * suffix from the id.\n */\nfunction extractRequestBase(urlWithPossiblePath: string): string {\n  try {\n    const parsed = new URL(urlWithPossiblePath)\n    const apiMarker = `/${DATALAKE_API_VERSION}/datalakes`\n    const markerIndex = parsed.pathname.indexOf(apiMarker)\n    const prefix = markerIndex === -1\n      ? parsed.pathname.replace(/\\/$/, '')\n      : parsed.pathname.slice(0, markerIndex)\n    return `${parsed.protocol}//${parsed.host}${prefix}`\n  } catch {\n    return urlWithPossiblePath.replace(/\\/$/, '')\n  }\n}\n\nexport class RestPayloadsClient implements PayloadsClient {\n  private readonly authToken: PayloadsAuthTokenSource\n  private readonly datalakeId: string\n  private readonly fetchImpl: typeof fetch\n  private readonly requestBase: string\n\n  constructor(options: RestPayloadsClientOptions) {\n    this.requestBase = extractRequestBase(options.baseUrl)\n    this.datalakeId = options.datalakeId\n    this.authToken = options.authToken\n    this.fetchImpl = options.fetchImpl ?? fetch\n  }\n\n  async clear(): Promise<{ removed: number }> {\n    return this.request<{ removed: number }>(\n      datalakePlaneClearPath(this.datalakeId),\n      { method: 'POST' },\n    )\n  }\n\n  async delete(hash: string): Promise<void> {\n    await this.request<void>(\n      datalakePlaneDeletePath(this.datalakeId, hash),\n      { method: 'DELETE' },\n    )\n  }\n\n  async get(hash: string): Promise<WithStorageMeta<Payload>> {\n    return this.request<WithStorageMeta<Payload>>(datalakePlaneGetPath(this.datalakeId, hash))\n  }\n\n  async getMany(hashes: string[]): Promise<WithStorageMeta<Payload>[]> {\n    if (hashes.length === 0) return []\n    return this.request<WithStorageMeta<Payload>[]>(\n      datalakePlaneGetManyPath(this.datalakeId),\n      { method: 'POST', body: hashes },\n    )\n  }\n\n  async insert(payloads: Payload[]): Promise<InsertPayloadsResult> {\n    const body: InsertPayloadsBody = payloads\n    const { data, headers } = await this.requestWithHeaders<InsertPayloadsResponse>(\n      datalakePlaneInsertPath(this.datalakeId),\n      { method: 'POST', body },\n    )\n    return {\n      inserted: data,\n      summary: readInsertSummary(headers),\n    }\n  }\n\n  async next(options: NextPayloadsOptions = {}): Promise<NextPayloadsResult> {\n    const params = new URLSearchParams()\n    if (options.limit !== undefined) params.set('limit', String(options.limit))\n    if (options.cursor) params.set('cursor', options.cursor)\n    if (options.schemas && options.schemas.length > 0) params.set('schemas', options.schemas.join(','))\n    if (options.order) params.set('order', options.order)\n    const suffix = params.toString()\n    const path = suffix\n      ? `${datalakePlaneNextPath(this.datalakeId)}?${suffix}`\n      : datalakePlaneNextPath(this.datalakeId)\n    const { data, headers } = await this.requestWithHeaders<NextPayloadsResponse>(path)\n    const nextCursor = headers.get(DATALAKE_HEADER_NEXT_CURSOR) ?? undefined\n    return { payloads: data, nextCursor }\n  }\n\n  async usage(): Promise<DatalakeUsageReport> {\n    return this.request<DatalakeUsageReport>(datalakePlaneUsagePath(this.datalakeId))\n  }\n\n  private async request<T>(path: string, options: RequestOptions = {}): Promise<T> {\n    const { data } = await this.requestWithHeaders<T>(path, options)\n    return data\n  }\n\n  private async requestWithHeaders<T>(path: string, options: RequestOptions = {}): Promise<RequestResult<T>> {\n    const method = options.method ?? 'GET'\n    const token = await resolveAuthToken(this.authToken, this.datalakeId)\n    const headers: Record<string, string> = {\n      accept: 'application/json',\n      authorization: `Bearer ${token}`,\n    }\n    const init: RequestInit = {\n      credentials: 'omit',\n      headers,\n      method,\n      redirect: 'error',\n    }\n    if (options.body !== undefined) {\n      headers['content-type'] = 'application/json'\n      init.body = JSON.stringify(options.body)\n    }\n\n    const response = await this.fetchImpl(`${this.requestBase}${path}`, init)\n    if (response.status === 204) return { data: undefined as T, headers: response.headers }\n    const text = await response.text()\n    const payload: unknown = text.length > 0 ? JSON.parse(text) : undefined\n\n    if (!response.ok) {\n      const errorBody: ApiErrorBody = isApiErrorBody(payload)\n        ? payload\n        : {\n            code: 'internal',\n            message: `Unexpected ${response.status} response from ${method} data plane`,\n          }\n      throw new DatalakeApiError(response.status, errorBody)\n    }\n    return { data: payload as T, headers: response.headers }\n  }\n}\n\nfunction readInsertSummary(headers: Headers): DatalakeInsertSummary {\n  const duplicatesRaw = headers.get(DATALAKE_HEADER_DUPLICATES)\n  const duplicates = duplicatesRaw === null ? 0 : Number.parseInt(duplicatesRaw, 10)\n  const rejectedRaw = headers.get(DATALAKE_HEADER_REJECTED)\n  const rejected = rejectedRaw === null || rejectedRaw.length === 0\n    ? []\n    : rejectedRaw.split(',').map(value => value.trim()).filter(value => value.length > 0)\n  return {\n    duplicates: Number.isFinite(duplicates) ? duplicates : 0,\n    rejected,\n  }\n}\n\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const maybe = value as Record<string, unknown>\n  return typeof maybe.code === 'string' && typeof maybe.message === 'string'\n}\n"],
-  "mappings": ";AAAA;AAAA,EACE;AAAA,EAAW;AAAA,EAAY;AAAA,EAAW;AAAA,EAAc;AAAA,EAAY;AAAA,OACvD;AACP,OAAOA,WAAU;;;ACHjB,SAAS,eAAe;AACxB,OAAO,UAAU;AAMV,SAAS,eAAuB;AACrC,SAAO,QAAQ,IAAI,cAAc,KAAK,KAAK,QAAQ,GAAG,QAAQ;AAChE;AAEO,SAAS,sBAA8B;AAC5C,SAAO,KAAK,KAAK,aAAa,GAAG,WAAW;AAC9C;AAMO,SAAS,4BAAoC;AAClD,SAAO,KAAK,KAAK,oBAAoB,GAAG,kBAAkB;AAC5D;AAEO,SAAS,qBAA6B;AAC3C,SAAO,KAAK,KAAK,aAAa,GAAG,kBAAkB;AACrD;AAEO,SAAS,yBAAiC;AAC/C,SAAO,KAAK,KAAK,aAAa,GAAG,uBAAuB;AAC1D;;;ADoBO,SAAS,gBAAgB,aAAsC;AACpE,QAAM,OAAO,aAAa;AAC1B,MAAI,CAAC,WAAW,IAAI,EAAG,WAAU,MAAM,EAAE,WAAW,KAAK,CAAC;AAC1D,QAAM,WAAW,mBAAmB;AACpC,gBAAc,UAAU,KAAK,UAAU,aAAa,QAAW,CAAC,GAAG,MAAM;AACzE,MAAI;AACF,cAAU,UAAU,GAAK;AAAA,EAC3B,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,kBAAiD;AAC/D,QAAM,WAAW,mBAAmB;AACpC,MAAI,CAAC,WAAW,QAAQ,EAAG,QAAO;AAClC,MAAI;AACF,UAAM,MAAM,aAAa,UAAU,MAAM;AACzC,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAyB;AACvC,QAAM,WAAW,mBAAmB;AACpC,MAAI,WAAW,QAAQ,EAAG,YAAW,QAAQ;AAC/C;AAEO,SAAS,yBAAiC;AAC/C,SAAOC,MAAK,QAAQ,mBAAmB,CAAC;AAC1C;;;AE/EA;AAAA,EACE,cAAAC;AAAA,EAAY,aAAAC;AAAA,EAAW,gBAAAC;AAAA,EAAc,iBAAAC;AAAA,OAChC;AACP,OAAOC,WAAU;AAqBjB,IAAM,iBAAiB;AAEvB,IAAM,qBAAmD;AAAA,EACvD,OAAO,KAAK,OAAO,OAAO;AAAA,EAC1B,QAAQ,MAAM,OAAO,OAAO;AAAA,EAC5B,OAAO,OAAO,OAAO,OAAO;AAAA,EAC5B,SAAS,KAAK,OAAO,OAAO,OAAO;AACrC;AAEA,IAAM,qBAAmD;AAAA,EACvD,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,SAAS;AACX;AAEA,SAAS,YAAwB;AAC/B,QAAM,WAAW,0BAA0B;AAC3C,MAAI,CAACC,YAAW,QAAQ,EAAG,QAAO,EAAE,WAAW,CAAC,EAAE;AAClD,MAAI;AACF,UAAM,MAAMC,cAAa,UAAU,MAAM;AACzC,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO,EAAE,WAAW,CAAC,EAAE;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,OAAyB;AAC3C,QAAM,MAAM,oBAAoB;AAChC,MAAI,CAACD,YAAW,GAAG,EAAG,CAAAE,WAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACxD,EAAAC,eAAc,0BAA0B,GAAG,KAAK,UAAU,OAAO,QAAW,CAAC,GAAG,MAAM;AACxF;AAEA,SAAS,aAAqB;AAC5B,SAAO,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC;AAChF;AAEA,SAAS,aAAa,OAAmB,UAAkD;AACzF,SAAO,MAAM,UAAU,KAAK,QAAM,GAAG,OAAO,YAAY,GAAG,SAAS,QAAQ;AAC9E;AAEA,SAAS,gBAAgB,OAAmB,UAAsC;AAChF,QAAM,QAAQ,aAAa,OAAO,QAAQ;AAC1C,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,uBAAuB,QAAQ,EAAE;AAC7D,SAAO;AACT;AAUO,IAAM,sBAAN,MAAoD;AAAA,EACzD,MAAM,OAAO,SAA6D;AACxE,UAAM,QAAQ,UAAU;AACxB,QAAI,MAAM,UAAU,KAAK,QAAM,GAAG,SAAS,QAAQ,IAAI,GAAG;AACxD,YAAM,IAAI,MAAM,4BAA4B,QAAQ,IAAI,EAAE;AAAA,IAC5D;AAEA,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,OAAO,QAAQ,OAAO;AAC5B,UAAM,aAAiC;AAAA,MACrC,IAAI,WAAW;AAAA,MACf,MAAM,QAAQ;AAAA,MACd,SAAS;AAAA,MACT,QAAQ;AAAA,QACN;AAAA,QACA,WAAW,QAAQ,OAAO,aAAa,mBAAmB,IAAI;AAAA,QAC9D,MAAM,QAAQ,OAAO,QAAQ,mBAAmB,IAAI;AAAA,QACpD,eAAe,QAAQ,OAAO,iBAAiB;AAAA,QAC/C,QAAQ,QAAQ,OAAO,UAAU;AAAA,QACjC,gBAAgB,QAAQ,OAAO,kBAAkB,CAAC;AAAA,QAClD,mBAAmB,QAAQ,OAAO,qBAAqB,CAAC;AAAA,MAC1D;AAAA,MACA,QAAQ;AAAA,MACR,KAAK,mCAAmC,QAAQ,IAAI;AAAA,MACpD,KAAK,CAAC;AAAA,MACN,OAAO;AAAA,QACL,cAAc;AAAA,QACd,aAAa;AAAA,QACb,kBAAkB,QAAQ,OAAO,aAAa,mBAAmB,IAAI;AAAA,QACrE,cAAc;AAAA,QACd,eAAe;AAAA,MACjB;AAAA,MACA,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAEA,UAAM,UAAU,KAAK,UAAU;AAC/B,eAAW,KAAK;AAChB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,UAA+C;AAC5D,UAAM,QAAQ,UAAU;AACxB,WAAO,gBAAgB,OAAO,QAAQ;AAAA,EACxC;AAAA,EAEA,MAAM,QAAQ,UAAiC;AAC7C,UAAM,QAAQ,UAAU;AACxB,UAAM,QAAQ,aAAa,OAAO,QAAQ;AAC1C,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,uBAAuB,QAAQ,EAAE;AAC7D,UAAM,YAAY,MAAM,UAAU,OAAO,QAAM,GAAG,OAAO,MAAM,EAAE;AACjE,eAAW,KAAK;AAAA,EAClB;AAAA,EAEA,MAAM,MAAM,SAAoD;AAC9D,UAAM,QAAQ,UAAU;AACxB,UAAM,WAAW,gBAAgB,OAAO,QAAQ,UAAU;AAC1D,UAAM,WAAW,SAAS,IAAI,UAAU,CAAAC,WAASA,OAAM,cAAc,QAAQ,SAAS;AACtF,UAAM,QAAQ;AAAA,MACZ,WAAW,QAAQ;AAAA,MACnB,MAAM,QAAQ;AAAA,MACd,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,WAAW;AAAA,IACb;AACA,QAAI,aAAa,IAAI;AACnB,eAAS,IAAI,KAAK,KAAK;AAAA,IACzB,OAAO;AACL,eAAS,IAAI,QAAQ,IAAI;AAAA,IAC3B;AACA,aAAS,YAAY,MAAM;AAC3B,eAAW,KAAK;AAChB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,OAAsC;AAC1C,WAAO,UAAU,EAAE;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,SAA+C;AAC7D,UAAM,QAAQ,UAAU;AACxB,UAAM,WAAW,gBAAgB,OAAO,QAAQ,UAAU;AAC1D,UAAM,MAAM,QAAQ,cAAc;AAClC,UAAM,SAAS,OAAO;AAAA,MACpB,KAAK,UAAU;AAAA,QACb,IAAI,SAAS;AAAA,QACb,MAAM,QAAQ;AAAA,QACd,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI;AAAA,MACvC,CAAC;AAAA,IACH,EAAE,SAAS,WAAW;AACtB,WAAO;AAAA,MACL,OAAO,SAAS,MAAM;AAAA,MACtB,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,GAAI,EAAE,YAAY;AAAA,MACzD,KAAK,SAAS,OAAO,mCAAmC,SAAS,IAAI;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,SAAqD;AAChE,UAAM,QAAQ,UAAU;AACxB,UAAM,WAAW,gBAAgB,OAAO,QAAQ,UAAU;AAC1D,aAAS,MAAM,SAAS,IAAI,OAAO,WAAS,MAAM,cAAc,QAAQ,SAAS;AACjF,aAAS,aAAY,oBAAI,KAAK,GAAE,YAAY;AAC5C,eAAW,KAAK;AAChB,WAAO;AAAA,EACT;AACF;AAMO,SAAS,wBAAgC;AAC9C,SAAOC,MAAK,QAAQ,0BAA0B,CAAC;AACjD;;;ACzLA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACFP,eAAsB,iBAAiB,QAAyB,UAAmC;AACjG,SAAO,OAAO,WAAW,aAAa,MAAM,OAAO,EAAE,SAAS,CAAC,IAAI;AACrE;;;ADwCO,IAAM,qBAAN,MAAmD;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAAoC;AAC9C,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAChD,SAAK,WAAW,QAAQ,YAAY;AACpC,SAAK,YAAY,QAAQ;AACzB,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,OAAO,SAA6D;AACxE,UAAM,OAA2B,EAAE,MAAM,QAAQ,MAAM,QAAQ,QAAQ,OAAO;AAC9E,WAAO,KAAK,QAA4B,uBAAuB,GAAG,EAAE,QAAQ,QAAQ,KAAK,CAAC;AAAA,EAC5F;AAAA,EAEA,MAAM,SAAS,UAA+C;AAC5D,WAAO,KAAK,QAA4B,qBAAqB,QAAQ,CAAC;AAAA,EACxE;AAAA,EAEA,MAAM,QAAQ,UAAiC;AAC7C,UAAM,KAAK,QAAc,qBAAqB,QAAQ,GAAG,EAAE,QAAQ,SAAS,CAAC;AAAA,EAC/E;AAAA,EAEA,MAAM,MAAM,SAAoD;AAC9D,UAAM,OAAkB,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAC3E,WAAO,KAAK;AAAA,MACV,mBAAmB,QAAQ,UAAU;AAAA,MACrC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,OAAsC;AAC1C,WAAO,KAAK,QAA8B,uBAAuB,CAAC;AAAA,EACpE;AAAA,EAEA,MAAM,UAAU,SAA+C;AAC7D,UAAM,OAAsB,EAAE,MAAM,QAAQ,MAAM,YAAY,QAAQ,WAAW;AACjF,WAAO,KAAK;AAAA,MACV,mBAAmB,QAAQ,UAAU;AAAA,MACrC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,SAAqD;AAChE,WAAO,KAAK;AAAA,MACV,kBAAkB,QAAQ,YAAY,QAAQ,SAAS;AAAA,MACvD,EAAE,QAAQ,SAAS;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAc,QAAWC,OAAc,UAA0B,CAAC,GAAe;AAC/E,UAAM,MAAM,GAAG,KAAK,OAAO,GAAGA,KAAI;AAClC,UAAM,SAAS,QAAQ,UAAU;AACjC,UAAM,QAAQ,MAAM,iBAAiB,KAAK,WAAW,KAAK,QAAQ;AAClE,UAAM,UAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,eAAe,UAAU,KAAK;AAAA,IAChC;AACA,UAAM,OAAoB;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU;AAAA,IACZ;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,cAAc,IAAI;AAC1B,WAAK,OAAO,KAAK,UAAU,QAAQ,IAAI;AAAA,IACzC;AAEA,UAAM,WAAW,MAAM,KAAK,UAAU,KAAK,IAAI;AAC/C,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,IACT;AACA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAM,UAAmB,KAAK,SAAS,IAAI,KAAK,MAAM,IAAI,IAAI;AAE9D,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAA0B,eAAe,OAAO,IAClD,UACA;AAAA,QACE,MAAM;AAAA,QACN,SAAS,cAAc,SAAS,MAAM,kBAAkB,MAAM;AAAA,MAChE;AACJ,YAAM,IAAI,iBAAiB,SAAS,QAAQ,SAAS;AAAA,IACvD;AACA,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,OAAuC;AAC7D,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,QAAQ;AACd,SAAO,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY;AACpE;;;AE3HO,SAAS,qBAAqB,UAAuC,CAAC,GAAmB;AAC9F,QAAM,aAAa,QAAQ,IAAI;AAC/B,QAAM,cAAc,gBAAgB;AACpC,QAAM,UAAU,QAAQ,WAAW,cAAc,aAAa;AAC9D,QAAM,YAAyC,QAAQ,aAAa,aAAa;AAEjF,QAAM,SAAS,QAAQ,WACjB,WAAW,YAAY,SAAS;AAEtC,MAAI,WAAW,QAAQ;AACrB,QAAI,CAAC,WAAW,CAAC,WAAW;AAC1B,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,WAAO,IAAI,mBAAmB,EAAE,SAAS,UAAU,CAAC;AAAA,EACtD;AAEA,SAAO,IAAI,oBAAoB;AACjC;;;ACjDA;AAAA,EACE,cAAAC;AAAA,EAAY,aAAAC;AAAA,EAAW,gBAAAC;AAAA,EAAc,cAAAC;AAAA,EAAY,iBAAAC;AAAA,OAC5C;AAcA,SAAS,mBAAmB,MAAc,IAAmB;AAClE,QAAM,OAAO,aAAa;AAC1B,MAAI,CAACC,YAAW,IAAI,EAAG,CAAAC,WAAU,MAAM,EAAE,WAAW,KAAK,CAAC;AAC1D,QAAM,UAA+B;AAAA,IACnC;AAAA,IAAM;AAAA,IAAI,QAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,EAC1C;AACA,EAAAC,eAAc,uBAAuB,GAAG,KAAK,UAAU,SAAS,QAAW,CAAC,GAAG,MAAM;AACvF;AAEO,SAAS,qBAAyC;AACvD,QAAM,WAAW,uBAAuB;AACxC,MAAI,CAACF,YAAW,QAAQ,EAAG,QAAO;AAClC,MAAI;AACF,UAAM,MAAMG,cAAa,UAAU,MAAM;AACzC,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO,OAAO;AAAA,EAChB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,uBAA6B;AAC3C,QAAM,WAAW,uBAAuB;AACxC,MAAIH,YAAW,QAAQ,EAAG,CAAAI,YAAW,QAAQ;AAC/C;;;AC5BA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,oBAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AA8EP,SAAS,mBAAmB,qBAAqC;AAC/D,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,mBAAmB;AAC1C,UAAM,YAAY,IAAI,oBAAoB;AAC1C,UAAM,cAAc,OAAO,SAAS,QAAQ,SAAS;AACrD,UAAM,SAAS,gBAAgB,KAC3B,OAAO,SAAS,QAAQ,OAAO,EAAE,IACjC,OAAO,SAAS,MAAM,GAAG,WAAW;AACxC,WAAO,GAAG,OAAO,QAAQ,KAAK,OAAO,IAAI,GAAG,MAAM;AAAA,EACpD,QAAQ;AACN,WAAO,oBAAoB,QAAQ,OAAO,EAAE;AAAA,EAC9C;AACF;AAEO,IAAM,qBAAN,MAAmD;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAAoC;AAC9C,SAAK,cAAc,mBAAmB,QAAQ,OAAO;AACrD,SAAK,aAAa,QAAQ;AAC1B,SAAK,YAAY,QAAQ;AACzB,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,QAAsC;AAC1C,WAAO,KAAK;AAAA,MACV,uBAAuB,KAAK,UAAU;AAAA,MACtC,EAAE,QAAQ,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,MAA6B;AACxC,UAAM,KAAK;AAAA,MACT,wBAAwB,KAAK,YAAY,IAAI;AAAA,MAC7C,EAAE,QAAQ,SAAS;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,MAAiD;AACzD,WAAO,KAAK,QAAkC,qBAAqB,KAAK,YAAY,IAAI,CAAC;AAAA,EAC3F;AAAA,EAEA,MAAM,QAAQ,QAAuD;AACnE,QAAI,OAAO,WAAW,EAAG,QAAO,CAAC;AACjC,WAAO,KAAK;AAAA,MACV,yBAAyB,KAAK,UAAU;AAAA,MACxC,EAAE,QAAQ,QAAQ,MAAM,OAAO;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,UAAoD;AAC/D,UAAM,OAA2B;AACjC,UAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,KAAK;AAAA,MACnC,wBAAwB,KAAK,UAAU;AAAA,MACvC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AACA,WAAO;AAAA,MACL,UAAU;AAAA,MACV,SAAS,kBAAkB,OAAO;AAAA,IACpC;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,UAA+B,CAAC,GAAgC;AACzE,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,QAAQ,UAAU,OAAW,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC1E,QAAI,QAAQ,OAAQ,QAAO,IAAI,UAAU,QAAQ,MAAM;AACvD,QAAI,QAAQ,WAAW,QAAQ,QAAQ,SAAS,EAAG,QAAO,IAAI,WAAW,QAAQ,QAAQ,KAAK,GAAG,CAAC;AAClG,QAAI,QAAQ,MAAO,QAAO,IAAI,SAAS,QAAQ,KAAK;AACpD,UAAM,SAAS,OAAO,SAAS;AAC/B,UAAMC,QAAO,SACT,GAAG,sBAAsB,KAAK,UAAU,CAAC,IAAI,MAAM,KACnD,sBAAsB,KAAK,UAAU;AACzC,UAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,KAAK,mBAAyCA,KAAI;AAClF,UAAM,aAAa,QAAQ,IAAI,2BAA2B,KAAK;AAC/D,WAAO,EAAE,UAAU,MAAM,WAAW;AAAA,EACtC;AAAA,EAEA,MAAM,QAAsC;AAC1C,WAAO,KAAK,QAA6B,uBAAuB,KAAK,UAAU,CAAC;AAAA,EAClF;AAAA,EAEA,MAAc,QAAWA,OAAc,UAA0B,CAAC,GAAe;AAC/E,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,mBAAsBA,OAAM,OAAO;AAC/D,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,mBAAsBA,OAAc,UAA0B,CAAC,GAA8B;AACzG,UAAM,SAAS,QAAQ,UAAU;AACjC,UAAM,QAAQ,MAAM,iBAAiB,KAAK,WAAW,KAAK,UAAU;AACpE,UAAM,UAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,eAAe,UAAU,KAAK;AAAA,IAChC;AACA,UAAM,OAAoB;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU;AAAA,IACZ;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,cAAc,IAAI;AAC1B,WAAK,OAAO,KAAK,UAAU,QAAQ,IAAI;AAAA,IACzC;AAEA,UAAM,WAAW,MAAM,KAAK,UAAU,GAAG,KAAK,WAAW,GAAGA,KAAI,IAAI,IAAI;AACxE,QAAI,SAAS,WAAW,IAAK,QAAO,EAAE,MAAM,QAAgB,SAAS,SAAS,QAAQ;AACtF,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAM,UAAmB,KAAK,SAAS,IAAI,KAAK,MAAM,IAAI,IAAI;AAE9D,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAA0BC,gBAAe,OAAO,IAClD,UACA;AAAA,QACE,MAAM;AAAA,QACN,SAAS,cAAc,SAAS,MAAM,kBAAkB,MAAM;AAAA,MAChE;AACJ,YAAM,IAAIC,kBAAiB,SAAS,QAAQ,SAAS;AAAA,IACvD;AACA,WAAO,EAAE,MAAM,SAAc,SAAS,SAAS,QAAQ;AAAA,EACzD;AACF;AAEA,SAAS,kBAAkB,SAAyC;AAClE,QAAM,gBAAgB,QAAQ,IAAI,0BAA0B;AAC5D,QAAM,aAAa,kBAAkB,OAAO,IAAI,OAAO,SAAS,eAAe,EAAE;AACjF,QAAM,cAAc,QAAQ,IAAI,wBAAwB;AACxD,QAAM,WAAW,gBAAgB,QAAQ,YAAY,WAAW,IAC5D,CAAC,IACD,YAAY,MAAM,GAAG,EAAE,IAAI,WAAS,MAAM,KAAK,CAAC,EAAE,OAAO,WAAS,MAAM,SAAS,CAAC;AACtF,SAAO;AAAA,IACL,YAAY,OAAO,SAAS,UAAU,IAAI,aAAa;AAAA,IACvD;AAAA,EACF;AACF;AAEA,SAASD,gBAAe,OAAuC;AAC7D,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,QAAQ;AACd,SAAO,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY;AACpE;",
-  "names": ["path", "path", "existsSync", "mkdirSync", "readFileSync", "writeFileSync", "path", "existsSync", "readFileSync", "mkdirSync", "writeFileSync", "entry", "path", "path", "existsSync", "mkdirSync", "readFileSync", "unlinkSync", "writeFileSync", "existsSync", "mkdirSync", "writeFileSync", "readFileSync", "unlinkSync", "DatalakeApiError", "path", "isApiErrorBody", "DatalakeApiError"]
+  "sources": ["../../src/credentials.ts", "../../src/paths.ts", "../../src/LocalDatalakeClient.ts", "../../src/RestDatalakeClient.ts", "../../src/AuthToken.ts", "../../src/createDatalakeClient.ts", "../../src/defaultDatalake.ts", "../../src/PayloadsClient.ts", "../../src/payloadRequest.ts", "../../src/RestPublicPayloadsReader.ts"],
+  "sourcesContent": ["import {\n  chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync,\n} from 'node:fs'\nimport path from 'node:path'\n\nimport { getAriesHome, getCredentialsPath } from './paths.ts'\n\n/**\n * Hints for self-signed wallet-JWT mode. When present, the CLI is expected to\n * mint a fresh ES256K JWT per request using the active aries wallet. The\n * server-side `authToken` field is unused in this mode.\n */\nexport interface WalletJwtCredentials {\n  /**\n  `aud` claim to use for control-plane calls (default `aries-datalake-control`).\n  */\n  controlAudience?: string\n  /**\n  Derivation offset of the signing account (default `'0'`).\n  */\n  offset?: string\n  /**\n  TTL (seconds) for each minted JWT (default `120`).\n  */\n  ttlSeconds?: number\n}\n\nexport interface StoredCredentials {\n  /**\n   * Static bearer token for legacy/static-token mode. Absent when `walletJwt`\n   * mode is configured \u2014 the CLI mints a token per request instead.\n   */\n  authToken?: string\n  baseUrl: string\n  /**\n  ISO-8601 expiration of the access token.\n  */\n  expiresAt?: string\n  /**\n  Optional refresh token for long-lived sessions.\n  */\n  refreshToken?: string\n  userId?: string\n  /**\n  Wallet-JWT mode hints. When set, the CLI mints self-signed JWTs.\n  */\n  walletJwt?: WalletJwtCredentials\n}\n\nexport function saveCredentials(credentials: StoredCredentials): void {\n  const home = getAriesHome()\n  if (!existsSync(home)) mkdirSync(home, { recursive: true })\n  const filePath = getCredentialsPath()\n  writeFileSync(filePath, JSON.stringify(credentials, undefined, 2), 'utf8')\n  try {\n    chmodSync(filePath, 0o600)\n  } catch {\n    // chmod can fail on some filesystems (e.g. Windows); tolerate silently.\n  }\n}\n\nexport function loadCredentials(): StoredCredentials | undefined {\n  const filePath = getCredentialsPath()\n  if (!existsSync(filePath)) return undefined\n  try {\n    const raw = readFileSync(filePath, 'utf8')\n    return JSON.parse(raw) as StoredCredentials\n  } catch {\n    return undefined\n  }\n}\n\nexport function clearCredentials(): void {\n  const filePath = getCredentialsPath()\n  if (existsSync(filePath)) unlinkSync(filePath)\n}\n\nexport function getCredentialsLocation(): string {\n  return path.resolve(getCredentialsPath())\n}\n", "import { homedir } from 'node:os'\nimport path from 'node:path'\n\n/**\n * Root directory for all Aries state (credentials, local datalake stub, etc.).\n * Overridable via `ARIES_HOME` so tests can redirect to a temp dir.\n */\nexport function getAriesHome(): string {\n  return process.env.ARIES_HOME ?? path.join(homedir(), '.aries')\n}\n\nexport function getDatalakeStoreDir(): string {\n  return path.join(getAriesHome(), 'datalakes')\n}\n\n/**\n * JSON file backing the `LocalDatalakeClient`. A lightweight substitute for\n * the real control plane during P0 development.\n */\nexport function getLocalDatalakeStorePath(): string {\n  return path.join(getDatalakeStoreDir(), 'local-store.json')\n}\n\nexport function getCredentialsPath(): string {\n  return path.join(getAriesHome(), 'credentials.json')\n}\n\nexport function getDefaultDatalakePath(): string {\n  return path.join(getAriesHome(), 'datalake-default.json')\n}\n", "import {\n  existsSync, mkdirSync, readFileSync, writeFileSync,\n} from 'node:fs'\nimport path from 'node:path'\n\nimport type {\n  DatalakeDescriptor,\n  DatalakeTier,\n  DatalakeToken,\n} from '@ariestools/aries-datalake-core'\n\nimport type {\n  CreateDatalakeRequest,\n  DatalakeClient,\n  GrantRequest,\n  RevokeRequest,\n  TokenRequest,\n} from './DatalakeClient.ts'\nimport { getDatalakeStoreDir, getLocalDatalakeStorePath } from './paths.ts'\n\ninterface LocalStore {\n  datalakes: DatalakeDescriptor[]\n}\n\nconst LOCAL_OWNER_ID = 'local-user'\n\nconst TIER_SIZE_DEFAULTS: Record<DatalakeTier, number> = {\n  small: 10 * 1024 * 1024 * 1024,\n  medium: 100 * 1024 * 1024 * 1024,\n  large: 1024 * 1024 * 1024 * 1024,\n  archive: 10 * 1024 * 1024 * 1024 * 1024,\n}\n\nconst TIER_IOPS_DEFAULTS: Record<DatalakeTier, number> = {\n  small: 500,\n  medium: 2000,\n  large: 10_000,\n  archive: 0,\n}\n\nfunction readStore(): LocalStore {\n  const filePath = getLocalDatalakeStorePath()\n  if (!existsSync(filePath)) return { datalakes: [] }\n  try {\n    const raw = readFileSync(filePath, 'utf8')\n    return JSON.parse(raw) as LocalStore\n  } catch {\n    return { datalakes: [] }\n  }\n}\n\nfunction writeStore(store: LocalStore): void {\n  const dir = getDatalakeStoreDir()\n  if (!existsSync(dir)) mkdirSync(dir, { recursive: true })\n  writeFileSync(getLocalDatalakeStorePath(), JSON.stringify(store, undefined, 2), 'utf8')\n}\n\nfunction generateId(): string {\n  return `dl_${Math.random().toString(36).slice(2, 10)}${Date.now().toString(36)}`\n}\n\nfunction findDatalake(store: LocalStore, idOrName: string): DatalakeDescriptor | undefined {\n  return store.datalakes.find(dl => dl.id === idOrName || dl.name === idOrName)\n}\n\nfunction requireDatalake(store: LocalStore, idOrName: string): DatalakeDescriptor {\n  const found = findDatalake(store, idOrName)\n  if (!found) throw new Error(`Datalake not found: ${idOrName}`)\n  return found\n}\n\n/**\n * Filesystem-backed stub implementation of `DatalakeClient` used during P0\n * development. Pretends to provision datalakes instantly, persists metadata\n * to `~/.aries/datalakes/local-store.json`, and mints opaque non-JWT tokens.\n *\n * Not suitable for production use \u2014 replace with `RestDatalakeClient` once\n * the control plane is live.\n */\nexport class LocalDatalakeClient implements DatalakeClient {\n  async create(request: CreateDatalakeRequest): Promise<DatalakeDescriptor> {\n    const store = readStore()\n    if (store.datalakes.some(dl => dl.name === request.name)) {\n      throw new Error(`Datalake already exists: ${request.name}`)\n    }\n\n    const now = new Date().toISOString()\n    const tier = request.config.tier\n    const descriptor: DatalakeDescriptor = {\n      id: generateId(),\n      name: request.name,\n      ownerId: LOCAL_OWNER_ID,\n      config: {\n        tier,\n        sizeBytes: request.config.sizeBytes ?? TIER_SIZE_DEFAULTS[tier],\n        iops: request.config.iops ?? TIER_IOPS_DEFAULTS[tier],\n        retentionDays: request.config.retentionDays ?? 30,\n        region: request.config.region ?? 'us-west-2',\n        allowedSchemas: request.config.allowedSchemas ?? [],\n        disallowedSchemas: request.config.disallowedSchemas ?? [],\n      },\n      status: 'ready',\n      url: `http://localhost:8080/datalakes/${request.name}`,\n      acl: [],\n      usage: {\n        payloadCount: 0,\n        bytesStored: 0,\n        bytesStoredLimit: request.config.sizeBytes ?? TIER_SIZE_DEFAULTS[tier],\n        readsLast24h: 0,\n        writesLast24h: 0,\n      },\n      createdAt: now,\n      updatedAt: now,\n    }\n\n    store.datalakes.push(descriptor)\n    writeStore(store)\n    return descriptor\n  }\n\n  async describe(idOrName: string): Promise<DatalakeDescriptor> {\n    const store = readStore()\n    return requireDatalake(store, idOrName)\n  }\n\n  async destroy(idOrName: string): Promise<void> {\n    const store = readStore()\n    const found = findDatalake(store, idOrName)\n    if (!found) throw new Error(`Datalake not found: ${idOrName}`)\n    store.datalakes = store.datalakes.filter(dl => dl.id !== found.id)\n    writeStore(store)\n  }\n\n  async grant(request: GrantRequest): Promise<DatalakeDescriptor> {\n    const store = readStore()\n    const datalake = requireDatalake(store, request.datalakeId)\n    const existing = datalake.acl.findIndex(entry => entry.principal === request.principal)\n    const entry = {\n      principal: request.principal,\n      role: request.role,\n      grantedAt: new Date().toISOString(),\n      grantedBy: LOCAL_OWNER_ID,\n    }\n    if (existing === -1) {\n      datalake.acl.push(entry)\n    } else {\n      datalake.acl[existing] = entry\n    }\n    datalake.updatedAt = entry.grantedAt\n    writeStore(store)\n    return datalake\n  }\n\n  async list(): Promise<DatalakeDescriptor[]> {\n    return readStore().datalakes\n  }\n\n  async mintToken(request: TokenRequest): Promise<DatalakeToken> {\n    const store = readStore()\n    const datalake = requireDatalake(store, request.datalakeId)\n    const ttl = request.ttlSeconds ?? 3600\n    const issued = Buffer.from(\n      JSON.stringify({\n        dl: datalake.id,\n        role: request.role,\n        exp: Math.floor(Date.now() / 1000) + ttl,\n      }),\n    ).toString('base64url')\n    return {\n      token: `local.${issued}`,\n      datalakeId: datalake.id,\n      role: request.role,\n      expiresAt: new Date(Date.now() + ttl * 1000).toISOString(),\n      url: datalake.url ?? `http://localhost:8080/datalakes/${datalake.name}`,\n    }\n  }\n\n  async revoke(request: RevokeRequest): Promise<DatalakeDescriptor> {\n    const store = readStore()\n    const datalake = requireDatalake(store, request.datalakeId)\n    datalake.acl = datalake.acl.filter(entry => entry.principal !== request.principal)\n    datalake.updatedAt = new Date().toISOString()\n    writeStore(store)\n    return datalake\n  }\n}\n\n/**\n * Convenience: the absolute path where the local store persists state.\n * Useful in tests and for `aries datalake describe --debug`.\n */\nexport function getLocalStoreLocation(): string {\n  return path.resolve(getLocalDatalakeStorePath())\n}\n", "import type {\n  ApiErrorBody,\n  CreateDatalakeBody,\n  DatalakeDescriptor,\n  DatalakeToken,\n  GrantBody,\n  MintTokenBody,\n} from '@ariestools/aries-datalake-core/browser'\nimport {\n  DATALAKE_CONTROL_AUDIENCE,\n  DatalakeApiError,\n  datalakeCollectionPath,\n  datalakeGrantPath,\n  datalakeGrantsPath,\n  datalakeResourcePath,\n  datalakeTokensPath,\n} from '@ariestools/aries-datalake-core/browser'\n\nimport type { AuthTokenSource } from './AuthToken.ts'\nimport { resolveAuthToken } from './AuthToken.ts'\nimport type {\n  CreateDatalakeRequest,\n  DatalakeClient,\n  GrantRequest,\n  RevokeRequest,\n  TokenRequest,\n} from './DatalakeClient.ts'\n\nexport interface RestDatalakeClientOptions {\n  /**\n  Exact control-plane JWT audience.\n  */\n  audience?: string\n  /**\n  Static token, or async factory minted per-request.\n  */\n  authToken: AuthTokenSource\n  /**\n  Control-plane base URL, e.g. `https://dl-control.xylabs.io`.\n  */\n  baseUrl: string\n  /**\n  Optional `fetch` override; defaults to global `fetch`.\n  */\n  fetchImpl?: typeof fetch\n}\n\ninterface RequestOptions {\n  body?: unknown\n  method?: string\n}\n\n/**\n * HTTP client for the datalake control plane. Implements the stable\n * `DatalakeClient` contract so callers are independent of transport.\n */\nexport class RestDatalakeClient implements DatalakeClient {\n  private readonly audience: string\n  private readonly authToken: AuthTokenSource\n  private readonly baseUrl: string\n  private readonly fetchImpl: typeof fetch\n\n  constructor(options: RestDatalakeClientOptions) {\n    this.baseUrl = options.baseUrl.replace(/\\/$/, '')\n    this.audience = options.audience ?? DATALAKE_CONTROL_AUDIENCE\n    this.authToken = options.authToken\n    this.fetchImpl = options.fetchImpl ?? fetch\n  }\n\n  async create(request: CreateDatalakeRequest): Promise<DatalakeDescriptor> {\n    const body: CreateDatalakeBody = { name: request.name, config: request.config }\n    return this.request<DatalakeDescriptor>(datalakeCollectionPath(), { method: 'POST', body })\n  }\n\n  async describe(idOrName: string): Promise<DatalakeDescriptor> {\n    return this.request<DatalakeDescriptor>(datalakeResourcePath(idOrName))\n  }\n\n  async destroy(idOrName: string): Promise<void> {\n    await this.request<void>(datalakeResourcePath(idOrName), { method: 'DELETE' })\n  }\n\n  async grant(request: GrantRequest): Promise<DatalakeDescriptor> {\n    const body: GrantBody = { principal: request.principal, role: request.role }\n    return this.request<DatalakeDescriptor>(\n      datalakeGrantsPath(request.datalakeId),\n      { method: 'POST', body },\n    )\n  }\n\n  async list(): Promise<DatalakeDescriptor[]> {\n    return this.request<DatalakeDescriptor[]>(datalakeCollectionPath())\n  }\n\n  async mintToken(request: TokenRequest): Promise<DatalakeToken> {\n    const body: MintTokenBody = { role: request.role, ttlSeconds: request.ttlSeconds }\n    return this.request<DatalakeToken>(\n      datalakeTokensPath(request.datalakeId),\n      { method: 'POST', body },\n    )\n  }\n\n  async revoke(request: RevokeRequest): Promise<DatalakeDescriptor> {\n    return this.request<DatalakeDescriptor>(\n      datalakeGrantPath(request.datalakeId, request.principal),\n      { method: 'DELETE' },\n    )\n  }\n\n  private async request<T>(path: string, options: RequestOptions = {}): Promise<T> {\n    const url = `${this.baseUrl}${path}`\n    const method = options.method ?? 'GET'\n    const token = await resolveAuthToken(this.authToken, this.audience)\n    const headers: Record<string, string> = {\n      accept: 'application/json',\n      authorization: `Bearer ${token}`,\n    }\n    const init: RequestInit = {\n      credentials: 'omit',\n      headers,\n      method,\n      redirect: 'error',\n    }\n    if (options.body !== undefined) {\n      headers['content-type'] = 'application/json'\n      init.body = JSON.stringify(options.body)\n    }\n\n    const response = await this.fetchImpl(url, init)\n    if (response.status === 204) {\n      return undefined as T\n    }\n    const text = await response.text()\n    const payload: unknown = text.length > 0 ? JSON.parse(text) : undefined\n\n    if (!response.ok) {\n      const errorBody: ApiErrorBody = isApiErrorBody(payload)\n        ? payload\n        : {\n            code: 'internal',\n            message: `Unexpected ${response.status} response from ${method} control plane`,\n          }\n      throw new DatalakeApiError(response.status, errorBody)\n    }\n    return payload as T\n  }\n}\n\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const maybe = value as Record<string, unknown>\n  return typeof maybe.code === 'string' && typeof maybe.message === 'string'\n}\n", "export interface AuthTokenRequest {\n  /**\n  Exact JWT audience required by the target service or datalake.\n  */\n  audience: string\n}\n\n/**\nInvoked for every request so callers can obtain a fresh wallet JWT.\n*/\nexport type AuthTokenSupplier = (request: AuthTokenRequest) => Promise<string>\n\nexport type AuthTokenSource = AuthTokenSupplier | string\n\nexport async function resolveAuthToken(source: AuthTokenSource, audience: string): Promise<string> {\n  return typeof source === 'function' ? await source({ audience }) : source\n}\n", "import type { AuthTokenSource } from './AuthToken.ts'\nimport { loadCredentials } from './credentials.ts'\nimport type { DatalakeClient } from './DatalakeClient.ts'\nimport { LocalDatalakeClient } from './LocalDatalakeClient.ts'\nimport { RestDatalakeClient } from './RestDatalakeClient.ts'\n\nexport interface CreateDatalakeClientOptions {\n  /**\n   * Override the auth token (otherwise read from credentials). Accepts either\n   * a static bearer string or an async factory \u2014 pass a factory when minting\n   * self-signed wallet JWTs per request.\n   */\n  authToken?: AuthTokenSource\n  /**\n  Override the control-plane URL (otherwise read from env / credentials).\n  */\n  baseUrl?: string\n  /**\n   * Force a specific driver. Defaults to:\n   *   - `rest` when `ARIES_DATALAKE_API` is set or credentials are present\n   *   - `local` otherwise\n   */\n  driver?: 'local' | 'rest'\n}\n\n/**\n * Returns a `DatalakeClient` wired for the current environment. The CLI uses\n * this factory so every command picks up the same resolution rules.\n */\nexport function createDatalakeClient(options: CreateDatalakeClientOptions = {}): DatalakeClient {\n  const envBaseUrl = process.env.ARIES_DATALAKE_API\n  const credentials = loadCredentials()\n  const baseUrl = options.baseUrl ?? envBaseUrl ?? credentials?.baseUrl\n  const authToken: AuthTokenSource | undefined = options.authToken ?? credentials?.authToken\n\n  const driver = options.driver\n    ?? (baseUrl && authToken ? 'rest' : 'local')\n\n  if (driver === 'rest') {\n    if (!baseUrl || !authToken) {\n      throw new Error(\n        'REST driver requires a baseUrl and authToken. '\n        + 'Run `aries datalake login` or set ARIES_DATALAKE_API and sign in.',\n      )\n    }\n    return new RestDatalakeClient({ baseUrl, authToken })\n  }\n\n  return new LocalDatalakeClient()\n}\n", "import {\n  existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync,\n} from 'node:fs'\n\nimport { getAriesHome, getDefaultDatalakePath } from './paths.ts'\n\ninterface DefaultDatalakeFile {\n  id?: string\n  name: string\n  setAt: string\n}\n\n/**\n * Remembers which datalake the user selected via `aries datalake use`. Read by\n * commands that accept an optional `<name>` and fall back to the default.\n */\nexport function setDefaultDatalake(name: string, id?: string): void {\n  const home = getAriesHome()\n  if (!existsSync(home)) mkdirSync(home, { recursive: true })\n  const payload: DefaultDatalakeFile = {\n    name, id, setAt: new Date().toISOString(),\n  }\n  writeFileSync(getDefaultDatalakePath(), JSON.stringify(payload, undefined, 2), 'utf8')\n}\n\nexport function getDefaultDatalake(): string | undefined {\n  const filePath = getDefaultDatalakePath()\n  if (!existsSync(filePath)) return undefined\n  try {\n    const raw = readFileSync(filePath, 'utf8')\n    const parsed = JSON.parse(raw) as DefaultDatalakeFile\n    return parsed.name\n  } catch {\n    return undefined\n  }\n}\n\nexport function clearDefaultDatalake(): void {\n  const filePath = getDefaultDatalakePath()\n  if (existsSync(filePath)) unlinkSync(filePath)\n}\n", "import type {\n  DatalakeInsertSummary,\n  InsertPayloadsBody,\n  InsertPayloadsResponse,\n  InsertPayloadsResult,\n  NextPayloadsOptions,\n  NextPayloadsResponse,\n  NextPayloadsResult,\n  Payload,\n  WithStorageMeta,\n} from '@ariestools/aries-datalake-core/browser'\nimport {\n  DATALAKE_HEADER_DUPLICATES,\n  DATALAKE_HEADER_NEXT_CURSOR,\n  DATALAKE_HEADER_REJECTED,\n  datalakePlaneClearPath,\n  datalakePlaneDeletePath,\n  datalakePlaneGetManyPath,\n  datalakePlaneGetPath,\n  datalakePlaneInsertPath,\n  datalakePlaneNextPath,\n  datalakePlaneUsagePath,\n} from '@ariestools/aries-datalake-core/browser'\n\nimport type { AuthTokenSource } from './AuthToken.ts'\nimport { resolveAuthToken } from './AuthToken.ts'\nimport { extractRequestBase, parsePayloadResponse } from './payloadRequest.ts'\n\nexport interface DatalakeUsageReport {\n  datalakeId: string\n  payloadCount: number\n  rateLimits?: {\n    anonymous?: { limit: number; remaining: number }\n    authenticated?: { limit: number; remaining: number }\n  }\n}\n\n/**\n * HTTP client for a single datalake's data plane. Clients send bare\n * `Payload` objects (no `_hash` / `_dataHash` \u2014 those are stamped on\n * insert by the data plane's archivist). Responses always carry the\n * archivist-computed storage meta.\n *\n * Wire format mirrors the XYO archivist REST middleware: `/insert`,\n * `/get/:hash`, `/next`, bare arrays as bodies. Datalake-specific\n * extras (duplicates count, rejected hashes, next cursor) are delivered\n * via response headers.\n */\nexport interface PayloadsClient {\n  clear(): Promise<{ removed: number }>\n  delete(hash: string): Promise<void>\n  get(hash: string): Promise<WithStorageMeta<Payload>>\n  getMany(hashes: string[]): Promise<WithStorageMeta<Payload>[]>\n  insert(payloads: Payload[]): Promise<InsertPayloadsResult>\n  next(options?: NextPayloadsOptions): Promise<NextPayloadsResult>\n  usage(): Promise<DatalakeUsageReport>\n}\n\n/**\n * Either a static bearer token, or a factory invoked per-request. The factory\n * form lets callers mint a fresh self-signed wallet JWT per call (with\n * `aud` bound to the datalake id).\n */\nexport type PayloadsAuthTokenSource = AuthTokenSource\n\nexport interface RestPayloadsClientOptions {\n  /**\n  Static bearer token, or async factory minted per-request.\n  */\n  authToken: PayloadsAuthTokenSource\n  /**\n  Data-plane base URL without trailing slash.\n  */\n  baseUrl: string\n  /**\n  Datalake id; appended to `/v1/datalakes/:id/...`.\n  */\n  datalakeId: string\n  /**\n  Optional `fetch` override; defaults to global `fetch`.\n  */\n  fetchImpl?: typeof fetch\n}\n\ninterface RequestOptions {\n  body?: unknown\n  method?: string\n}\n\ninterface RequestResult<T> {\n  data: T\n  headers: Headers\n}\n\nexport class RestPayloadsClient implements PayloadsClient {\n  private readonly authToken: PayloadsAuthTokenSource\n  private readonly datalakeId: string\n  private readonly fetchImpl: typeof fetch\n  private readonly requestBase: string\n\n  constructor(options: RestPayloadsClientOptions) {\n    this.requestBase = extractRequestBase(options.baseUrl)\n    this.datalakeId = options.datalakeId\n    this.authToken = options.authToken\n    this.fetchImpl = options.fetchImpl ?? fetch\n  }\n\n  async clear(): Promise<{ removed: number }> {\n    return this.request<{ removed: number }>(\n      datalakePlaneClearPath(this.datalakeId),\n      { method: 'POST' },\n    )\n  }\n\n  async delete(hash: string): Promise<void> {\n    await this.request<void>(\n      datalakePlaneDeletePath(this.datalakeId, hash),\n      { method: 'DELETE' },\n    )\n  }\n\n  async get(hash: string): Promise<WithStorageMeta<Payload>> {\n    return this.request<WithStorageMeta<Payload>>(datalakePlaneGetPath(this.datalakeId, hash))\n  }\n\n  async getMany(hashes: string[]): Promise<WithStorageMeta<Payload>[]> {\n    if (hashes.length === 0) return []\n    return this.request<WithStorageMeta<Payload>[]>(\n      datalakePlaneGetManyPath(this.datalakeId),\n      { method: 'POST', body: hashes },\n    )\n  }\n\n  async insert(payloads: Payload[]): Promise<InsertPayloadsResult> {\n    const body: InsertPayloadsBody = payloads\n    const { data, headers } = await this.requestWithHeaders<InsertPayloadsResponse>(\n      datalakePlaneInsertPath(this.datalakeId),\n      { method: 'POST', body },\n    )\n    return {\n      inserted: data,\n      summary: readInsertSummary(headers),\n    }\n  }\n\n  async next(options: NextPayloadsOptions = {}): Promise<NextPayloadsResult> {\n    const params = new URLSearchParams()\n    if (options.limit !== undefined) params.set('limit', String(options.limit))\n    if (options.cursor) params.set('cursor', options.cursor)\n    if (options.schemas && options.schemas.length > 0) params.set('schemas', options.schemas.join(','))\n    if (options.order) params.set('order', options.order)\n    const suffix = params.toString()\n    const path = suffix\n      ? `${datalakePlaneNextPath(this.datalakeId)}?${suffix}`\n      : datalakePlaneNextPath(this.datalakeId)\n    const { data, headers } = await this.requestWithHeaders<NextPayloadsResponse>(path)\n    const nextCursor = headers.get(DATALAKE_HEADER_NEXT_CURSOR) ?? undefined\n    return { payloads: data, nextCursor }\n  }\n\n  async usage(): Promise<DatalakeUsageReport> {\n    return this.request<DatalakeUsageReport>(datalakePlaneUsagePath(this.datalakeId))\n  }\n\n  private async request<T>(path: string, options: RequestOptions = {}): Promise<T> {\n    const { data } = await this.requestWithHeaders<T>(path, options)\n    return data\n  }\n\n  private async requestWithHeaders<T>(path: string, options: RequestOptions = {}): Promise<RequestResult<T>> {\n    const method = options.method ?? 'GET'\n    const token = await resolveAuthToken(this.authToken, this.datalakeId)\n    const headers: Record<string, string> = {\n      accept: 'application/json',\n      authorization: `Bearer ${token}`,\n    }\n    const init: RequestInit = {\n      credentials: 'omit',\n      headers,\n      method,\n      redirect: 'error',\n    }\n    if (options.body !== undefined) {\n      headers['content-type'] = 'application/json'\n      init.body = JSON.stringify(options.body)\n    }\n\n    const response = await this.fetchImpl(`${this.requestBase}${path}`, init)\n    if (response.status === 204) return { data: undefined as T, headers: response.headers }\n    const text = await response.text()\n    return { data: parsePayloadResponse<T>(response, text, method), headers: response.headers }\n  }\n}\n\nfunction readInsertSummary(headers: Headers): DatalakeInsertSummary {\n  const duplicatesRaw = headers.get(DATALAKE_HEADER_DUPLICATES)\n  const duplicates = duplicatesRaw === null ? 0 : Number.parseInt(duplicatesRaw, 10)\n  const rejectedRaw = headers.get(DATALAKE_HEADER_REJECTED)\n  const rejected = rejectedRaw === null || rejectedRaw.length === 0\n    ? []\n    : rejectedRaw.split(',').map(value => value.trim()).filter(value => value.length > 0)\n  return {\n    duplicates: Number.isFinite(duplicates) ? duplicates : 0,\n    rejected,\n  }\n}\n", "import type { ApiErrorBody } from '@ariestools/aries-datalake-core/browser'\nimport { DATALAKE_API_VERSION, DatalakeApiError } from '@ariestools/aries-datalake-core/browser'\n\n/**\n * The data plane is typically addressed by a URL that already includes the\n * datalake id (e.g. `https://plane/v1/datalakes/dl_abc`). Preserve any path\n * prefix before `/v1/datalakes` so a shared ALB can expose the data plane at\n * `https://host/plane` while the path helpers regenerate the canonical API\n * suffix from the id.\n */\nexport function extractRequestBase(urlWithPossiblePath: string): string {\n  try {\n    const parsed = new URL(urlWithPossiblePath)\n    const apiMarker = `/${DATALAKE_API_VERSION}/datalakes`\n    const markerIndex = parsed.pathname.indexOf(apiMarker)\n    const prefix = markerIndex === -1\n      ? parsed.pathname.replace(/\\/$/, '')\n      : parsed.pathname.slice(0, markerIndex)\n    return `${parsed.protocol}//${parsed.host}${prefix}`\n  } catch {\n    return urlWithPossiblePath.replace(/\\/$/, '')\n  }\n}\n\n/** Preserve the native data-plane JSON and API-error response contract. */\nexport function parsePayloadResponse<T>(response: Response, text: string, method: string): T {\n  const payload: unknown = text.length > 0 ? JSON.parse(text) : undefined\n\n  if (!response.ok) {\n    const errorBody: ApiErrorBody = isApiErrorBody(payload)\n      ? payload\n      : {\n          code: 'internal',\n          message: 'Unexpected ' + response.status + ' response from ' + method + ' data plane',\n        }\n    throw new DatalakeApiError(response.status, errorBody)\n  }\n  return payload as T\n}\n\nfunction isApiErrorBody(value: unknown): value is ApiErrorBody {\n  if (typeof value !== 'object' || value === null) return false\n  const maybe = value as Record<string, unknown>\n  return typeof maybe.code === 'string' && typeof maybe.message === 'string'\n}\n", "import type { Payload, WithStorageMeta } from '@ariestools/aries-datalake-core/browser'\nimport { datalakePlaneGetManyPath, datalakePlaneGetPath } from '@ariestools/aries-datalake-core/browser'\nimport { readResponseText } from '@ariestools/sdk/fetch'\n\nimport { extractRequestBase, parsePayloadResponse } from './payloadRequest.ts'\n\n/** Policy for one public HTTP response, including its JSON envelope and metadata. */\nexport interface RestPublicPayloadsReadOptions {\n  /**\n  Positive safe-integer limit on decoded Fetch-body bytes before JSON parsing.\n  Omission leaves the body size unlimited; this is not a raw network-byte limit.\n  */\n  readonly maxResponseBytes?: number\n  /** Caller cancellation remains active through response-body consumption. */\n  readonly signal?: AbortSignal\n}\n\nexport interface RestPublicPayloadsReaderOptions {\n  /** Absolute HTTP(S) data-plane URL, optionally including its API path prefix. */\n  readonly baseUrl: string\n  /** Datalake id used to regenerate the canonical native data-plane paths. */\n  readonly datalakeId: string\n  /**\n  Trusted transport override. It must preserve the public no-credentials and\n  no-redirect policy and honor cancellation. Defaults to request-time global fetch.\n  */\n  readonly fetchImpl?: typeof fetch\n}\n\n/**\n * Exact-hash reads using the native data-plane protocol without token handling.\n * The server must grant public viewer access. Public access applies to the whole\n * lake; this reader neither grants access nor falls back from authenticated I/O.\n * Returned metadata is structural transport data, not verified content identity.\n */\nexport class RestPublicPayloadsReader {\n  private readonly datalakeId: string\n  private readonly fetchImpl?: typeof fetch\n  private readonly requestBase: string\n\n  constructor(options: RestPublicPayloadsReaderOptions) {\n    this.requestBase = publicRequestBase(options.baseUrl)\n    this.datalakeId = options.datalakeId\n    this.fetchImpl = options.fetchImpl\n  }\n\n  async get(hash: string, options: RestPublicPayloadsReadOptions = {}): Promise<WithStorageMeta<Payload>> {\n    const payload = await this.request(datalakePlaneGetPath(this.datalakeId, hash), options)\n    if (!isStoredPayload(payload)) throw new TypeError('Data plane returned an invalid stored payload')\n    return payload\n  }\n\n  async getMany(hashes: readonly string[], options: RestPublicPayloadsReadOptions = {}): Promise<WithStorageMeta<Payload>[]> {\n    const policy = pinReadOptions(options)\n    const requested = [...hashes]\n    if (requested.length === 0) return []\n    const payloads = await this.request(datalakePlaneGetManyPath(this.datalakeId), policy, requested)\n    if (!Array.isArray(payloads) || !payloads.every(isStoredPayload)) {\n      throw new TypeError('Data plane returned an invalid stored-payload array')\n    }\n    return payloads\n  }\n\n  private async request(path: string, options: RestPublicPayloadsReadOptions, hashes?: readonly string[]): Promise<unknown> {\n    const { maxResponseBytes, signal } = pinReadOptions(options)\n    const method = hashes === undefined ? 'GET' : 'POST'\n    const headers: Record<string, string> = { accept: 'application/json' }\n    const init: RequestInit = {\n      credentials: 'omit',\n      headers,\n      method,\n      redirect: 'error',\n      signal,\n    }\n    if (hashes !== undefined) {\n      headers['content-type'] = 'application/json'\n      init.body = JSON.stringify(hashes)\n    }\n    const fetchImpl = this.fetchImpl ?? globalThis.fetch\n    const response = await fetchImpl(this.requestBase + path, init)\n    const text = await readResponseText(response, { maxResponseBytes, signal })\n    return parsePayloadResponse<unknown>(response, text, method)\n  }\n}\n\nfunction pinReadOptions(options: RestPublicPayloadsReadOptions): RestPublicPayloadsReadOptions {\n  const { maxResponseBytes, signal } = options\n  if (maxResponseBytes !== undefined && (!Number.isSafeInteger(maxResponseBytes) || maxResponseBytes <= 0)) {\n    throw new RangeError('maxResponseBytes must be a positive safe integer')\n  }\n  signal?.throwIfAborted()\n  return { maxResponseBytes, signal }\n}\n\nfunction publicRequestBase(baseUrl: string): string {\n  let parsed: URL\n  try {\n    parsed = new URL(baseUrl)\n  } catch {\n    throw new TypeError('baseUrl must be an absolute HTTP(S) URL')\n  }\n  if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {\n    throw new TypeError('baseUrl must be an absolute HTTP(S) URL')\n  }\n  if (parsed.username !== '' || parsed.password !== '') {\n    throw new TypeError('Public data-plane URLs must not contain credentials')\n  }\n  if (parsed.href.includes('#')) throw new TypeError('Public data-plane URLs must not contain fragments')\n  return extractRequestBase(baseUrl)\n}\n\nfunction isStoredPayload(value: unknown): value is WithStorageMeta<Payload> {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) return false\n  const payload = value as Record<string, unknown>\n  return ['schema', '_hash', '_dataHash', '_sequence'].every(key => Object.hasOwn(payload, key) && typeof payload[key] === 'string')\n}\n"],
+  "mappings": ";AAAA;AAAA,EACE;AAAA,EAAW;AAAA,EAAY;AAAA,EAAW;AAAA,EAAc;AAAA,EAAY;AAAA,OACvD;AACP,OAAOA,WAAU;;;ACHjB,SAAS,eAAe;AACxB,OAAO,UAAU;AAMV,SAAS,eAAuB;AACrC,SAAO,QAAQ,IAAI,cAAc,KAAK,KAAK,QAAQ,GAAG,QAAQ;AAChE;AAEO,SAAS,sBAA8B;AAC5C,SAAO,KAAK,KAAK,aAAa,GAAG,WAAW;AAC9C;AAMO,SAAS,4BAAoC;AAClD,SAAO,KAAK,KAAK,oBAAoB,GAAG,kBAAkB;AAC5D;AAEO,SAAS,qBAA6B;AAC3C,SAAO,KAAK,KAAK,aAAa,GAAG,kBAAkB;AACrD;AAEO,SAAS,yBAAiC;AAC/C,SAAO,KAAK,KAAK,aAAa,GAAG,uBAAuB;AAC1D;;;ADoBO,SAAS,gBAAgB,aAAsC;AACpE,QAAM,OAAO,aAAa;AAC1B,MAAI,CAAC,WAAW,IAAI,EAAG,WAAU,MAAM,EAAE,WAAW,KAAK,CAAC;AAC1D,QAAM,WAAW,mBAAmB;AACpC,gBAAc,UAAU,KAAK,UAAU,aAAa,QAAW,CAAC,GAAG,MAAM;AACzE,MAAI;AACF,cAAU,UAAU,GAAK;AAAA,EAC3B,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,kBAAiD;AAC/D,QAAM,WAAW,mBAAmB;AACpC,MAAI,CAAC,WAAW,QAAQ,EAAG,QAAO;AAClC,MAAI;AACF,UAAM,MAAM,aAAa,UAAU,MAAM;AACzC,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,mBAAyB;AACvC,QAAM,WAAW,mBAAmB;AACpC,MAAI,WAAW,QAAQ,EAAG,YAAW,QAAQ;AAC/C;AAEO,SAAS,yBAAiC;AAC/C,SAAOC,MAAK,QAAQ,mBAAmB,CAAC;AAC1C;;;AE/EA;AAAA,EACE,cAAAC;AAAA,EAAY,aAAAC;AAAA,EAAW,gBAAAC;AAAA,EAAc,iBAAAC;AAAA,OAChC;AACP,OAAOC,WAAU;AAqBjB,IAAM,iBAAiB;AAEvB,IAAM,qBAAmD;AAAA,EACvD,OAAO,KAAK,OAAO,OAAO;AAAA,EAC1B,QAAQ,MAAM,OAAO,OAAO;AAAA,EAC5B,OAAO,OAAO,OAAO,OAAO;AAAA,EAC5B,SAAS,KAAK,OAAO,OAAO,OAAO;AACrC;AAEA,IAAM,qBAAmD;AAAA,EACvD,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,SAAS;AACX;AAEA,SAAS,YAAwB;AAC/B,QAAM,WAAW,0BAA0B;AAC3C,MAAI,CAACC,YAAW,QAAQ,EAAG,QAAO,EAAE,WAAW,CAAC,EAAE;AAClD,MAAI;AACF,UAAM,MAAMC,cAAa,UAAU,MAAM;AACzC,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO,EAAE,WAAW,CAAC,EAAE;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,OAAyB;AAC3C,QAAM,MAAM,oBAAoB;AAChC,MAAI,CAACD,YAAW,GAAG,EAAG,CAAAE,WAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACxD,EAAAC,eAAc,0BAA0B,GAAG,KAAK,UAAU,OAAO,QAAW,CAAC,GAAG,MAAM;AACxF;AAEA,SAAS,aAAqB;AAC5B,SAAO,MAAM,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC;AAChF;AAEA,SAAS,aAAa,OAAmB,UAAkD;AACzF,SAAO,MAAM,UAAU,KAAK,QAAM,GAAG,OAAO,YAAY,GAAG,SAAS,QAAQ;AAC9E;AAEA,SAAS,gBAAgB,OAAmB,UAAsC;AAChF,QAAM,QAAQ,aAAa,OAAO,QAAQ;AAC1C,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,uBAAuB,QAAQ,EAAE;AAC7D,SAAO;AACT;AAUO,IAAM,sBAAN,MAAoD;AAAA,EACzD,MAAM,OAAO,SAA6D;AACxE,UAAM,QAAQ,UAAU;AACxB,QAAI,MAAM,UAAU,KAAK,QAAM,GAAG,SAAS,QAAQ,IAAI,GAAG;AACxD,YAAM,IAAI,MAAM,4BAA4B,QAAQ,IAAI,EAAE;AAAA,IAC5D;AAEA,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,OAAO,QAAQ,OAAO;AAC5B,UAAM,aAAiC;AAAA,MACrC,IAAI,WAAW;AAAA,MACf,MAAM,QAAQ;AAAA,MACd,SAAS;AAAA,MACT,QAAQ;AAAA,QACN;AAAA,QACA,WAAW,QAAQ,OAAO,aAAa,mBAAmB,IAAI;AAAA,QAC9D,MAAM,QAAQ,OAAO,QAAQ,mBAAmB,IAAI;AAAA,QACpD,eAAe,QAAQ,OAAO,iBAAiB;AAAA,QAC/C,QAAQ,QAAQ,OAAO,UAAU;AAAA,QACjC,gBAAgB,QAAQ,OAAO,kBAAkB,CAAC;AAAA,QAClD,mBAAmB,QAAQ,OAAO,qBAAqB,CAAC;AAAA,MAC1D;AAAA,MACA,QAAQ;AAAA,MACR,KAAK,mCAAmC,QAAQ,IAAI;AAAA,MACpD,KAAK,CAAC;AAAA,MACN,OAAO;AAAA,QACL,cAAc;AAAA,QACd,aAAa;AAAA,QACb,kBAAkB,QAAQ,OAAO,aAAa,mBAAmB,IAAI;AAAA,QACrE,cAAc;AAAA,QACd,eAAe;AAAA,MACjB;AAAA,MACA,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAEA,UAAM,UAAU,KAAK,UAAU;AAC/B,eAAW,KAAK;AAChB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,UAA+C;AAC5D,UAAM,QAAQ,UAAU;AACxB,WAAO,gBAAgB,OAAO,QAAQ;AAAA,EACxC;AAAA,EAEA,MAAM,QAAQ,UAAiC;AAC7C,UAAM,QAAQ,UAAU;AACxB,UAAM,QAAQ,aAAa,OAAO,QAAQ;AAC1C,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,uBAAuB,QAAQ,EAAE;AAC7D,UAAM,YAAY,MAAM,UAAU,OAAO,QAAM,GAAG,OAAO,MAAM,EAAE;AACjE,eAAW,KAAK;AAAA,EAClB;AAAA,EAEA,MAAM,MAAM,SAAoD;AAC9D,UAAM,QAAQ,UAAU;AACxB,UAAM,WAAW,gBAAgB,OAAO,QAAQ,UAAU;AAC1D,UAAM,WAAW,SAAS,IAAI,UAAU,CAAAC,WAASA,OAAM,cAAc,QAAQ,SAAS;AACtF,UAAM,QAAQ;AAAA,MACZ,WAAW,QAAQ;AAAA,MACnB,MAAM,QAAQ;AAAA,MACd,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,WAAW;AAAA,IACb;AACA,QAAI,aAAa,IAAI;AACnB,eAAS,IAAI,KAAK,KAAK;AAAA,IACzB,OAAO;AACL,eAAS,IAAI,QAAQ,IAAI;AAAA,IAC3B;AACA,aAAS,YAAY,MAAM;AAC3B,eAAW,KAAK;AAChB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,OAAsC;AAC1C,WAAO,UAAU,EAAE;AAAA,EACrB;AAAA,EAEA,MAAM,UAAU,SAA+C;AAC7D,UAAM,QAAQ,UAAU;AACxB,UAAM,WAAW,gBAAgB,OAAO,QAAQ,UAAU;AAC1D,UAAM,MAAM,QAAQ,cAAc;AAClC,UAAM,SAAS,OAAO;AAAA,MACpB,KAAK,UAAU;AAAA,QACb,IAAI,SAAS;AAAA,QACb,MAAM,QAAQ;AAAA,QACd,KAAK,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI;AAAA,MACvC,CAAC;AAAA,IACH,EAAE,SAAS,WAAW;AACtB,WAAO;AAAA,MACL,OAAO,SAAS,MAAM;AAAA,MACtB,YAAY,SAAS;AAAA,MACrB,MAAM,QAAQ;AAAA,MACd,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,GAAI,EAAE,YAAY;AAAA,MACzD,KAAK,SAAS,OAAO,mCAAmC,SAAS,IAAI;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,SAAqD;AAChE,UAAM,QAAQ,UAAU;AACxB,UAAM,WAAW,gBAAgB,OAAO,QAAQ,UAAU;AAC1D,aAAS,MAAM,SAAS,IAAI,OAAO,WAAS,MAAM,cAAc,QAAQ,SAAS;AACjF,aAAS,aAAY,oBAAI,KAAK,GAAE,YAAY;AAC5C,eAAW,KAAK;AAChB,WAAO;AAAA,EACT;AACF;AAMO,SAAS,wBAAgC;AAC9C,SAAOC,MAAK,QAAQ,0BAA0B,CAAC;AACjD;;;ACzLA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACFP,eAAsB,iBAAiB,QAAyB,UAAmC;AACjG,SAAO,OAAO,WAAW,aAAa,MAAM,OAAO,EAAE,SAAS,CAAC,IAAI;AACrE;;;ADwCO,IAAM,qBAAN,MAAmD;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAAoC;AAC9C,SAAK,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AAChD,SAAK,WAAW,QAAQ,YAAY;AACpC,SAAK,YAAY,QAAQ;AACzB,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,OAAO,SAA6D;AACxE,UAAM,OAA2B,EAAE,MAAM,QAAQ,MAAM,QAAQ,QAAQ,OAAO;AAC9E,WAAO,KAAK,QAA4B,uBAAuB,GAAG,EAAE,QAAQ,QAAQ,KAAK,CAAC;AAAA,EAC5F;AAAA,EAEA,MAAM,SAAS,UAA+C;AAC5D,WAAO,KAAK,QAA4B,qBAAqB,QAAQ,CAAC;AAAA,EACxE;AAAA,EAEA,MAAM,QAAQ,UAAiC;AAC7C,UAAM,KAAK,QAAc,qBAAqB,QAAQ,GAAG,EAAE,QAAQ,SAAS,CAAC;AAAA,EAC/E;AAAA,EAEA,MAAM,MAAM,SAAoD;AAC9D,UAAM,OAAkB,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAC3E,WAAO,KAAK;AAAA,MACV,mBAAmB,QAAQ,UAAU;AAAA,MACrC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,OAAsC;AAC1C,WAAO,KAAK,QAA8B,uBAAuB,CAAC;AAAA,EACpE;AAAA,EAEA,MAAM,UAAU,SAA+C;AAC7D,UAAM,OAAsB,EAAE,MAAM,QAAQ,MAAM,YAAY,QAAQ,WAAW;AACjF,WAAO,KAAK;AAAA,MACV,mBAAmB,QAAQ,UAAU;AAAA,MACrC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,SAAqD;AAChE,WAAO,KAAK;AAAA,MACV,kBAAkB,QAAQ,YAAY,QAAQ,SAAS;AAAA,MACvD,EAAE,QAAQ,SAAS;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAc,QAAWC,OAAc,UAA0B,CAAC,GAAe;AAC/E,UAAM,MAAM,GAAG,KAAK,OAAO,GAAGA,KAAI;AAClC,UAAM,SAAS,QAAQ,UAAU;AACjC,UAAM,QAAQ,MAAM,iBAAiB,KAAK,WAAW,KAAK,QAAQ;AAClE,UAAM,UAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,eAAe,UAAU,KAAK;AAAA,IAChC;AACA,UAAM,OAAoB;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU;AAAA,IACZ;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,cAAc,IAAI;AAC1B,WAAK,OAAO,KAAK,UAAU,QAAQ,IAAI;AAAA,IACzC;AAEA,UAAM,WAAW,MAAM,KAAK,UAAU,KAAK,IAAI;AAC/C,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,IACT;AACA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAM,UAAmB,KAAK,SAAS,IAAI,KAAK,MAAM,IAAI,IAAI;AAE9D,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAA0B,eAAe,OAAO,IAClD,UACA;AAAA,QACE,MAAM;AAAA,QACN,SAAS,cAAc,SAAS,MAAM,kBAAkB,MAAM;AAAA,MAChE;AACJ,YAAM,IAAI,iBAAiB,SAAS,QAAQ,SAAS;AAAA,IACvD;AACA,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,OAAuC;AAC7D,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,QAAQ;AACd,SAAO,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY;AACpE;;;AE3HO,SAAS,qBAAqB,UAAuC,CAAC,GAAmB;AAC9F,QAAM,aAAa,QAAQ,IAAI;AAC/B,QAAM,cAAc,gBAAgB;AACpC,QAAM,UAAU,QAAQ,WAAW,cAAc,aAAa;AAC9D,QAAM,YAAyC,QAAQ,aAAa,aAAa;AAEjF,QAAM,SAAS,QAAQ,WACjB,WAAW,YAAY,SAAS;AAEtC,MAAI,WAAW,QAAQ;AACrB,QAAI,CAAC,WAAW,CAAC,WAAW;AAC1B,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,WAAO,IAAI,mBAAmB,EAAE,SAAS,UAAU,CAAC;AAAA,EACtD;AAEA,SAAO,IAAI,oBAAoB;AACjC;;;ACjDA;AAAA,EACE,cAAAC;AAAA,EAAY,aAAAC;AAAA,EAAW,gBAAAC;AAAA,EAAc,cAAAC;AAAA,EAAY,iBAAAC;AAAA,OAC5C;AAcA,SAAS,mBAAmB,MAAc,IAAmB;AAClE,QAAM,OAAO,aAAa;AAC1B,MAAI,CAACC,YAAW,IAAI,EAAG,CAAAC,WAAU,MAAM,EAAE,WAAW,KAAK,CAAC;AAC1D,QAAM,UAA+B;AAAA,IACnC;AAAA,IAAM;AAAA,IAAI,QAAO,oBAAI,KAAK,GAAE,YAAY;AAAA,EAC1C;AACA,EAAAC,eAAc,uBAAuB,GAAG,KAAK,UAAU,SAAS,QAAW,CAAC,GAAG,MAAM;AACvF;AAEO,SAAS,qBAAyC;AACvD,QAAM,WAAW,uBAAuB;AACxC,MAAI,CAACF,YAAW,QAAQ,EAAG,QAAO;AAClC,MAAI;AACF,UAAM,MAAMG,cAAa,UAAU,MAAM;AACzC,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO,OAAO;AAAA,EAChB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,uBAA6B;AAC3C,QAAM,WAAW,uBAAuB;AACxC,MAAIH,YAAW,QAAQ,EAAG,CAAAI,YAAW,QAAQ;AAC/C;;;AC7BA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACrBP,SAAS,sBAAsB,oBAAAC,yBAAwB;AAShD,SAAS,mBAAmB,qBAAqC;AACtE,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,mBAAmB;AAC1C,UAAM,YAAY,IAAI,oBAAoB;AAC1C,UAAM,cAAc,OAAO,SAAS,QAAQ,SAAS;AACrD,UAAM,SAAS,gBAAgB,KAC3B,OAAO,SAAS,QAAQ,OAAO,EAAE,IACjC,OAAO,SAAS,MAAM,GAAG,WAAW;AACxC,WAAO,GAAG,OAAO,QAAQ,KAAK,OAAO,IAAI,GAAG,MAAM;AAAA,EACpD,QAAQ;AACN,WAAO,oBAAoB,QAAQ,OAAO,EAAE;AAAA,EAC9C;AACF;AAGO,SAAS,qBAAwB,UAAoB,MAAc,QAAmB;AAC3F,QAAM,UAAmB,KAAK,SAAS,IAAI,KAAK,MAAM,IAAI,IAAI;AAE9D,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,YAA0BC,gBAAe,OAAO,IAClD,UACA;AAAA,MACE,MAAM;AAAA,MACN,SAAS,gBAAgB,SAAS,SAAS,oBAAoB,SAAS;AAAA,IAC1E;AACJ,UAAM,IAAID,kBAAiB,SAAS,QAAQ,SAAS;AAAA,EACvD;AACA,SAAO;AACT;AAEA,SAASC,gBAAe,OAAuC;AAC7D,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,QAAQ;AACd,SAAO,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY;AACpE;;;ADkDO,IAAM,qBAAN,MAAmD;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAAoC;AAC9C,SAAK,cAAc,mBAAmB,QAAQ,OAAO;AACrD,SAAK,aAAa,QAAQ;AAC1B,SAAK,YAAY,QAAQ;AACzB,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,QAAsC;AAC1C,WAAO,KAAK;AAAA,MACV,uBAAuB,KAAK,UAAU;AAAA,MACtC,EAAE,QAAQ,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,MAA6B;AACxC,UAAM,KAAK;AAAA,MACT,wBAAwB,KAAK,YAAY,IAAI;AAAA,MAC7C,EAAE,QAAQ,SAAS;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,MAAiD;AACzD,WAAO,KAAK,QAAkC,qBAAqB,KAAK,YAAY,IAAI,CAAC;AAAA,EAC3F;AAAA,EAEA,MAAM,QAAQ,QAAuD;AACnE,QAAI,OAAO,WAAW,EAAG,QAAO,CAAC;AACjC,WAAO,KAAK;AAAA,MACV,yBAAyB,KAAK,UAAU;AAAA,MACxC,EAAE,QAAQ,QAAQ,MAAM,OAAO;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,UAAoD;AAC/D,UAAM,OAA2B;AACjC,UAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,KAAK;AAAA,MACnC,wBAAwB,KAAK,UAAU;AAAA,MACvC,EAAE,QAAQ,QAAQ,KAAK;AAAA,IACzB;AACA,WAAO;AAAA,MACL,UAAU;AAAA,MACV,SAAS,kBAAkB,OAAO;AAAA,IACpC;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,UAA+B,CAAC,GAAgC;AACzE,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,QAAQ,UAAU,OAAW,QAAO,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AAC1E,QAAI,QAAQ,OAAQ,QAAO,IAAI,UAAU,QAAQ,MAAM;AACvD,QAAI,QAAQ,WAAW,QAAQ,QAAQ,SAAS,EAAG,QAAO,IAAI,WAAW,QAAQ,QAAQ,KAAK,GAAG,CAAC;AAClG,QAAI,QAAQ,MAAO,QAAO,IAAI,SAAS,QAAQ,KAAK;AACpD,UAAM,SAAS,OAAO,SAAS;AAC/B,UAAMC,QAAO,SACT,GAAG,sBAAsB,KAAK,UAAU,CAAC,IAAI,MAAM,KACnD,sBAAsB,KAAK,UAAU;AACzC,UAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,KAAK,mBAAyCA,KAAI;AAClF,UAAM,aAAa,QAAQ,IAAI,2BAA2B,KAAK;AAC/D,WAAO,EAAE,UAAU,MAAM,WAAW;AAAA,EACtC;AAAA,EAEA,MAAM,QAAsC;AAC1C,WAAO,KAAK,QAA6B,uBAAuB,KAAK,UAAU,CAAC;AAAA,EAClF;AAAA,EAEA,MAAc,QAAWA,OAAc,UAA0B,CAAC,GAAe;AAC/E,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,mBAAsBA,OAAM,OAAO;AAC/D,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,mBAAsBA,OAAc,UAA0B,CAAC,GAA8B;AACzG,UAAM,SAAS,QAAQ,UAAU;AACjC,UAAM,QAAQ,MAAM,iBAAiB,KAAK,WAAW,KAAK,UAAU;AACpE,UAAM,UAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,eAAe,UAAU,KAAK;AAAA,IAChC;AACA,UAAM,OAAoB;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU;AAAA,IACZ;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,cAAc,IAAI;AAC1B,WAAK,OAAO,KAAK,UAAU,QAAQ,IAAI;AAAA,IACzC;AAEA,UAAM,WAAW,MAAM,KAAK,UAAU,GAAG,KAAK,WAAW,GAAGA,KAAI,IAAI,IAAI;AACxE,QAAI,SAAS,WAAW,IAAK,QAAO,EAAE,MAAM,QAAgB,SAAS,SAAS,QAAQ;AACtF,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,WAAO,EAAE,MAAM,qBAAwB,UAAU,MAAM,MAAM,GAAG,SAAS,SAAS,QAAQ;AAAA,EAC5F;AACF;AAEA,SAAS,kBAAkB,SAAyC;AAClE,QAAM,gBAAgB,QAAQ,IAAI,0BAA0B;AAC5D,QAAM,aAAa,kBAAkB,OAAO,IAAI,OAAO,SAAS,eAAe,EAAE;AACjF,QAAM,cAAc,QAAQ,IAAI,wBAAwB;AACxD,QAAM,WAAW,gBAAgB,QAAQ,YAAY,WAAW,IAC5D,CAAC,IACD,YAAY,MAAM,GAAG,EAAE,IAAI,WAAS,MAAM,KAAK,CAAC,EAAE,OAAO,WAAS,MAAM,SAAS,CAAC;AACtF,SAAO;AAAA,IACL,YAAY,OAAO,SAAS,UAAU,IAAI,aAAa;AAAA,IACvD;AAAA,EACF;AACF;;;AE5MA,SAAS,4BAAAC,2BAA0B,wBAAAC,6BAA4B;AAC/D,SAAS,wBAAwB;AAiC1B,IAAM,2BAAN,MAA+B;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAA0C;AACpD,SAAK,cAAc,kBAAkB,QAAQ,OAAO;AACpD,SAAK,aAAa,QAAQ;AAC1B,SAAK,YAAY,QAAQ;AAAA,EAC3B;AAAA,EAEA,MAAM,IAAI,MAAc,UAAyC,CAAC,GAAsC;AACtG,UAAM,UAAU,MAAM,KAAK,QAAQC,sBAAqB,KAAK,YAAY,IAAI,GAAG,OAAO;AACvF,QAAI,CAAC,gBAAgB,OAAO,EAAG,OAAM,IAAI,UAAU,+CAA+C;AAClG,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QAAQ,QAA2B,UAAyC,CAAC,GAAwC;AACzH,UAAM,SAAS,eAAe,OAAO;AACrC,UAAM,YAAY,CAAC,GAAG,MAAM;AAC5B,QAAI,UAAU,WAAW,EAAG,QAAO,CAAC;AACpC,UAAM,WAAW,MAAM,KAAK,QAAQC,0BAAyB,KAAK,UAAU,GAAG,QAAQ,SAAS;AAChG,QAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS,MAAM,eAAe,GAAG;AAChE,YAAM,IAAI,UAAU,qDAAqD;AAAA,IAC3E;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,QAAQC,OAAc,SAAwC,QAA8C;AACxH,UAAM,EAAE,kBAAkB,OAAO,IAAI,eAAe,OAAO;AAC3D,UAAM,SAAS,WAAW,SAAY,QAAQ;AAC9C,UAAM,UAAkC,EAAE,QAAQ,mBAAmB;AACrE,UAAM,OAAoB;AAAA,MACxB,aAAa;AAAA,MACb;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV;AAAA,IACF;AACA,QAAI,WAAW,QAAW;AACxB,cAAQ,cAAc,IAAI;AAC1B,WAAK,OAAO,KAAK,UAAU,MAAM;AAAA,IACnC;AACA,UAAM,YAAY,KAAK,aAAa,WAAW;AAC/C,UAAM,WAAW,MAAM,UAAU,KAAK,cAAcA,OAAM,IAAI;AAC9D,UAAM,OAAO,MAAM,iBAAiB,UAAU,EAAE,kBAAkB,OAAO,CAAC;AAC1E,WAAO,qBAA8B,UAAU,MAAM,MAAM;AAAA,EAC7D;AACF;AAEA,SAAS,eAAe,SAAuE;AAC7F,QAAM,EAAE,kBAAkB,OAAO,IAAI;AACrC,MAAI,qBAAqB,WAAc,CAAC,OAAO,cAAc,gBAAgB,KAAK,oBAAoB,IAAI;AACxG,UAAM,IAAI,WAAW,kDAAkD;AAAA,EACzE;AACA,UAAQ,eAAe;AACvB,SAAO,EAAE,kBAAkB,OAAO;AACpC;AAEA,SAAS,kBAAkB,SAAyB;AAClD,MAAI;AACJ,MAAI;AACF,aAAS,IAAI,IAAI,OAAO;AAAA,EAC1B,QAAQ;AACN,UAAM,IAAI,UAAU,yCAAyC;AAAA,EAC/D;AACA,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,UAAU;AAC/D,UAAM,IAAI,UAAU,yCAAyC;AAAA,EAC/D;AACA,MAAI,OAAO,aAAa,MAAM,OAAO,aAAa,IAAI;AACpD,UAAM,IAAI,UAAU,qDAAqD;AAAA,EAC3E;AACA,MAAI,OAAO,KAAK,SAAS,GAAG,EAAG,OAAM,IAAI,UAAU,mDAAmD;AACtG,SAAO,mBAAmB,OAAO;AACnC;AAEA,SAAS,gBAAgB,OAAmD;AAC1E,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,UAAU;AAChB,SAAO,CAAC,UAAU,SAAS,aAAa,WAAW,EAAE,MAAM,SAAO,OAAO,OAAO,SAAS,GAAG,KAAK,OAAO,QAAQ,GAAG,MAAM,QAAQ;AACnI;",
+  "names": ["path", "path", "existsSync", "mkdirSync", "readFileSync", "writeFileSync", "path", "existsSync", "readFileSync", "mkdirSync", "writeFileSync", "entry", "path", "path", "existsSync", "mkdirSync", "readFileSync", "unlinkSync", "writeFileSync", "existsSync", "mkdirSync", "writeFileSync", "readFileSync", "unlinkSync", "DatalakeApiError", "isApiErrorBody", "path", "datalakePlaneGetManyPath", "datalakePlaneGetPath", "datalakePlaneGetPath", "datalakePlaneGetManyPath", "path"]
 }

package/dist/node/payloadRequest.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The data plane is typically addressed by a URL that already includes the
+ * datalake id (e.g. `https://plane/v1/datalakes/dl_abc`). Preserve any path
+ * prefix before `/v1/datalakes` so a shared ALB can expose the data plane at
+ * `https://host/plane` while the path helpers regenerate the canonical API
+ * suffix from the id.
+ */
+export declare function extractRequestBase(urlWithPossiblePath: string): string;
+/** Preserve the native data-plane JSON and API-error response contract. */
+export declare function parsePayloadResponse<T>(response: Response, text: string, method: string): T;
+//# sourceMappingURL=payloadRequest.d.ts.map

package/dist/node/payloadRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payloadRequest.d.ts","sourceRoot":"","sources":["../../src/payloadRequest.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAYtE;AAED,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAa3F"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ariestools/aries-datalake-client",
-  "version": "0.1.18",
+  "version": "0.1.20",
   "description": "Client SDK for the Aries on-demand XL1 datalake control plane",
   "keywords": [
     "xylabs",
@@ -42,23 +42,24 @@
     "README.md"
   ],
   "dependencies": {
-    "@ariestools/aries-datalake-core": "~0.1.18"
+    "@ariestools/sdk": "~8.2.0",
+    "@ariestools/aries-datalake-core": "~0.1.20"
   },
   "devDependencies": {
-    "@ariestools/sdk": "~8.1.9",
-    "@ariestools/toolchain": "~9.0.2",
-    "@ariestools/tsconfig": "~9.0.2",
+    "@ariestools/sdk": "~8.2.0",
+    "@ariestools/toolchain": "~9.1.2",
+    "@ariestools/tsconfig": "~9.1.2",
     "@opentelemetry/api": "~1.9.1",
-    "@types/node": "~26.2.0",
-    "@xyo-network/sdk": "~7.2.3",
-    "@xyo-network/sdk-protocol": "~7.2.4",
-    "fastify": "~5.12.0",
+    "@types/node": "~26.4.0",
+    "@xyo-network/sdk": "~7.4.0",
+    "@xyo-network/sdk-protocol": "~7.4.2",
+    "fastify": "~5.12.1",
     "typescript": "~6.0.3",
-    "vite": "~8.2.1",
-    "vitest": "~4.1.10",
-    "zod": "~4.4.3",
-    "@ariestools/aries-datalake-control": "~0.1.18",
-    "@ariestools/aries-datalake-plane": "~0.1.18"
+    "vite": "~8.2.2",
+    "vitest": "~4.1.11",
+    "zod": "~4.5.1",
+    "@ariestools/aries-datalake-plane": "~0.1.20",
+    "@ariestools/aries-datalake-control": "~0.1.20"
   },
   "engines": {
     "node": ">=18.17.1"
@@ -67,6 +68,9 @@
   "publishConfig": {
     "access": "public"
   },
+  "peerDependencies": {
+    "@opentelemetry/api": "^1.9"
+  },
   "scripts": {
     "package-compile": "package-compile-only && node ../../scripts/pruneBrowserDeclarations.mjs dist/browser/browser.d.ts"
   }