@ariestools/aries-datalake-client 0.1.19 → 0.1.21

package/README.md

@@ -5,7 +5,7 @@ REST clients for the Aries datalake control and data planes, with Node-only loca
 ## Entry points
 
 - `@ariestools/aries-datalake-client` is the Node entry point. It includes the REST clients plus local filesystem-backed clients, credentials, defaults, and `ARIES_HOME` helpers.
-- `@ariestools/aries-datalake-client/browser` is the browser entry point. It exports only REST clients, their interfaces, the asynchronous token-supplier contract, and browser-safe datalake wire contracts.
+- `@ariestools/aries-datalake-client/browser` is the browser entry point. It exports REST clients, the composite client, their interfaces, the asynchronous token-supplier contract, and browser-safe datalake wire contracts.
 
 Use an asynchronous token supplier that is invoked for each request. The application adapter may return a still-valid short-lived token from page memory or request a fresh wallet JWT through the XL1 browser wallet gateway:
 
@@ -36,3 +36,128 @@ const payloads = new RestPayloadsClient({
 ```
 
 The supplier receives the exact control-plane audience or datalake id. Treat its return value as a sensitive, short-lived bearer token: cache it only in page memory when useful, and never persist it in browser storage or logs. The wallet gateway controls key access; the Aries HTTP services independently verify audience, signature, origin, scope, signer identity, and live ACL state.
+
+## Multiple required datalakes
+
+`CompositePayloadsClient` writes each target's eligible subset and verifies it by
+reading the content back. Configure a complete S3 collection alongside a selected
+Auto Drive collection using already authenticated `RestPayloadsClient` instances:
+
+```ts
+import { CompositePayloadsClient, type RestPayloadsClient } from '@ariestools/aries-datalake-client/browser'
+import { asAnyPayload, PayloadBuilder } from '@xyo-network/sdk'
+
+declare const autoDriveClient: RestPayloadsClient
+declare const s3Client: RestPayloadsClient
+
+const composite = new CompositePayloadsClient({
+  identify: async (payload) => {
+    const canonical = asAnyPayload(payload, true)
+    return {
+      hash: await PayloadBuilder.hash(canonical),
+      dataHash: await PayloadBuilder.dataHash(canonical),
+    }
+  },
+  targets: [
+    {
+      name: 'auto-drive',
+      client: autoDriveClient,
+      policy: {
+        mode: 'selected',
+        allowedSchemas: ['com.example.smallrecord'],
+        maxPayloadBytes: 4096, // Example deployment limit, not a provider default.
+        revision: 'v1',
+      },
+    },
+    { name: 's3', client: s3Client, policy: { mode: 'all' } },
+  ],
+})
+
+const result = await composite.insertWithReceipts([
+  { schema: 'com.example.smallrecord', value: 1 },
+  { schema: 'com.example.other', value: 2 },
+])
+const read = await composite.getWithReceipts(result.acknowledged.map(payload => payload._hash))
+```
+
+All targets are required for their eligible subset. A selected policy requires
+an explicit allowlist and positive byte limit; an empty list selects nothing.
+`disallowedSchemas` takes precedence. `schemaMaxPayloadBytes` may tighten the
+global byte limit, and `isValid` may supply a trusted structural validator.
+Sizes count UTF-8 JSON including client metadata and excluding storage metadata.
+The receiving service must enforce its policy independently; this client does not
+authorize permanent uploads or implement service quotas.
+
+`insert(payloads)` returns the verified acknowledgment array, including duplicates;
+`insertWithReceipts(payloads)` also returns per-target eligibility and outcomes.
+A rejected expected-eligible item or failed required target throws
+`CompositePayloadsWriteError`. Its `result` retains verified partial success and
+sanitized receipts, not raw provider errors. A complete target's success does not
+satisfy a different target's obligation. Callers own durable retry state and
+policy-revision coordination; this client does not resume a failed operation.
+
+`get(hashes)` and `getMany(hashes)` return verified payload arrays.
+`getWithReceipts(hashes)` adds source attribution. Reads try targets in declared
+order for unresolved hashes only. Provider errors or corrupt responses throw
+`CompositePayloadsReadError`; they are not silently converted into misses.
+Reads never copy content between targets. Supply canonical XYO `PayloadBuilder`
+hashes through `identify`; the composite package itself adds no XYO runtime
+dependency to browser consumers.
+
+Only flat payload bodies are accepted. Validate and flatten known hydrated
+protocol envelopes before insertion. There is no global sequence, clear, delete,
+or usage API and no automatic registration into an XL1 connection. The
+payload-array `insert`/`get` methods are intended for a protocol adapter; keep
+the SDK's exact transaction-content acknowledgment check in that adapter.
+Successful read-back is readable storage, not proof of provider network archival.
+
+## Explicit public payload reads
+
+Use `RestPublicPayloadsReader` when the provider has granted public viewer access
+to the datalake. This is separate from the authenticated clients above; an
+authentication failure never triggers an anonymous retry.
+
+```ts
+import { RestPublicPayloadsReader } from '@ariestools/aries-datalake-client/browser'
+
+const reader = new RestPublicPayloadsReader({
+  baseUrl: 'https://data.example/plane/v1/datalakes/dl_public',
+  datalakeId: 'dl_public',
+})
+const controller = new AbortController()
+const payload = await reader.get('configured-content-hash', {
+  maxResponseBytes: 65_536,
+  signal: controller.signal,
+})
+```
+
+The reader exposes only `get(hash, options?)` and `getMany(hashes, options?)`.
+It has no token supplier, header hooks, listing or mutation methods. Requests
+omit ambient credentials and reject redirects. Configuration accepts absolute
+HTTP(S) URLs, including a shared-host path prefix, and rejects userinfo and
+fragments. Local HTTP is permitted explicitly; address/DNS policy remains the
+host's responsibility. An optional `fetchImpl` is a trusted transport override
+that must retain those policies. Without it, fetch is resolved at request time.
+
+`maxResponseBytes` is an optional positive safe integer. It counts decoded Fetch
+response-stream bytes before JSON parsing, on success and error responses,
+including the whole native object/array and its metadata. Omission means no size
+limit. It does not bound raw compressed traffic, headers, decompression work or
+connection buffers. The signal is forwarded to fetch and remains active during
+body consumption; aborting does not wait indefinitely for stream cleanup.
+
+Successful reads validate the stored-payload shape and preserve all fields.
+Neither requested paths nor `_hash`/`_dataHash` metadata verify content identity;
+callers that need content assurance must hash and validate the returned data.
+Transport, size, cancellation, malformed-response and access failures remain
+failed reads, not evidence that an advertised object never existed.
+
+Public viewer access applies to the **whole datalake**, including provider-side
+enumeration and usage APIs. Prefer a dedicated public viewer lake with
+authenticated writers; public runner access also permits mutations. New lakes
+are private until granted access, and browser access additionally requires the
+provider's CORS configuration. This client does not change ACLs or retention.
+
+The public reader requires the released `@ariestools/sdk` 8.2.0 or a compatible
+8.2 patch, plus its required `@opentelemetry/api` peer. It does not require zod
+for these reads; other SDK features and datalake peers can have separate needs.

package/dist/browser/CompositePayloadsClient.d.ts

@@ -0,0 +1,91 @@
+import type { Payload, WithStorageMeta } from '@ariestools/aries-datalake-core/browser';
+import type { PayloadsClient } from './PayloadsClient.ts';
+/** Supply the canonical XYO PayloadBuilder hashes, without adding its runtime to browser clients. */
+export interface CompositePayloadIdentity {
+    dataHash: string;
+    hash: string;
+}
+export interface CompositePayloadsPolicy {
+    /** Required for selected mode; an empty array selects nothing. */
+    allowedSchemas?: readonly string[];
+    disallowedSchemas?: readonly string[];
+    /** Trusted local validator; receiving services must independently enforce their policy. */
+    isValid?: (payload: Payload) => boolean;
+    /** Required for selected mode. Measured as UTF-8 JSON, before compression. */
+    maxPayloadBytes?: number;
+    /** Explicitly choose a complete collection or an allowlisted collection. */
+    mode: 'all' | 'selected';
+    revision?: string;
+    /** Per-schema limits can only tighten the overall payload limit. */
+    schemaMaxPayloadBytes?: Readonly<Record<string, number>>;
+}
+export interface CompositePayloadsTarget {
+    client: Pick<PayloadsClient, 'getMany' | 'insert'>;
+    /** A non-secret identifier, not an endpoint or credential. Also determines receipt provenance. */
+    name: string;
+    policy: CompositePayloadsPolicy;
+}
+export interface CompositePayloadsClientOptions {
+    /** Trusted canonical XYO hash implementation. Storage metadata must not affect either hash. */
+    identify: (payload: Payload) => Promise<CompositePayloadIdentity>;
+    /** Every target is required for its eligible subset. Array order is read priority. */
+    targets: readonly CompositePayloadsTarget[];
+}
+export interface CompositePayloadExclusion {
+    hash: string;
+    reason: 'schema' | 'size' | 'validation';
+}
+export interface CompositeWriteReceipt {
+    acknowledged: string[];
+    eligible: string[];
+    error?: 'provider_error' | 'invalid_response' | 'policy_rejected' | 'incomplete_readback';
+    excluded: CompositePayloadExclusion[];
+    policyRevision?: string;
+    rejected: string[];
+    status: 'complete' | 'excluded' | 'failed';
+    target: string;
+}
+export interface CompositeWriteResult {
+    /** Verified union, including previously stored duplicates. Not an aggregate success on an error. */
+    acknowledged: WithStorageMeta<Payload>[];
+    receipts: CompositeWriteReceipt[];
+}
+export declare class CompositePayloadsWriteError extends Error {
+    readonly result: CompositeWriteResult;
+    constructor(result: CompositeWriteResult);
+}
+export interface CompositeReadReceipt {
+    error?: 'provider_error' | 'invalid_response';
+    found: string[];
+    requested: string[];
+    target: string;
+}
+export interface CompositeReadResult {
+    payloads: WithStorageMeta<Payload>[];
+    receipts: CompositeReadReceipt[];
+    sources: Record<string, string>;
+}
+export declare class CompositePayloadsReadError extends Error {
+    readonly result: CompositeReadResult;
+    constructor(result: CompositeReadResult);
+}
+/**
+ * Required-subset writes and verified hash reads across named datalakes.
+ * Accepts flat payload bodies only. Callers validate and flatten protocol envelopes first.
+ * Deliberately has no global next/clear/delete/usage: store-local sequences and lifecycles differ.
+ */
+export declare class CompositePayloadsClient {
+    private readonly identify;
+    private readonly targets;
+    constructor(options: CompositePayloadsClientOptions);
+    /** Missing hashes fall through in target order. Provider errors and corruption fail explicitly. */
+    get(hashes: string[]): Promise<WithStorageMeta<Payload>[]>;
+    getMany(hashes: string[]): Promise<WithStorageMeta<Payload>[]>;
+    getWithReceipts(hashes: readonly string[]): Promise<CompositeReadResult>;
+    /** Payload-array acknowledgment suitable for consumers of insert/get method contracts. */
+    insert(payloads: Payload[]): Promise<WithStorageMeta<Payload>[]>;
+    insertWithReceipts(payloads: readonly Payload[]): Promise<CompositeWriteResult>;
+    private verify;
+    private writeTarget;
+}
+//# sourceMappingURL=CompositePayloadsClient.d.ts.map

package/dist/browser/CompositePayloadsClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CompositePayloadsClient.d.ts","sourceRoot":"","sources":["../../src/CompositePayloadsClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAA;AAEvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEzD,qGAAqG;AACrG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,2FAA2F;IAC3F,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAA;IACvC,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,4EAA4E;IAC5E,IAAI,EAAE,KAAK,GAAG,UAAU,CAAA;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CACzD;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAA;IAClD,kGAAkG;IAClG,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,uBAAuB,CAAA;CAChC;AAED,MAAM,WAAW,8BAA8B;IAC7C,+FAA+F;IAC/F,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACjE,sFAAsF;IACtF,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAA;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,YAAY,CAAA;CACzC;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,KAAK,CAAC,EAAE,gBAAgB,GAAG,kBAAkB,GAAG,iBAAiB,GAAG,qBAAqB,CAAA;IACzF,QAAQ,EAAE,yBAAyB,EAAE,CAAA;IACrC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAA;IAC1C,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,oGAAoG;IACpG,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAA;IACxC,QAAQ,EAAE,qBAAqB,EAAE,CAAA;CAClC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;gBAEzB,MAAM,EAAE,oBAAoB;CAKzC;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,gBAAgB,GAAG,kBAAkB,CAAA;IAC7C,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAA;IACpC,QAAQ,EAAE,oBAAoB,EAAE,CAAA;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAChC;AAED,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;gBAExB,MAAM,EAAE,mBAAmB;CAKxC;AAcD;;;;GAIG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IACrE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;gBAEhD,OAAO,EAAE,8BAA8B;IAcnD,mGAAmG;IAC7F,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAI1D,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAI9D,eAAe,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAqC9E,0FAA0F;IACpF,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAIhE,kBAAkB,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;YA8BvE,MAAM;YAmBN,WAAW;CA8C1B"}

package/dist/browser/PayloadsClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PayloadsClient.d.ts","sourceRoot":"","sources":["../../src/PayloadsClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAKV,oBAAoB,EACpB,mBAAmB,EAEnB,kBAAkB,EAClB,OAAO,EACP,eAAe,EAChB,MAAM,yCAAyC,CAAA;AAgBhD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAGrD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE;QACX,SAAS,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;QAChD,aAAa,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACrD,CAAA;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC1D,IAAI,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAChE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAA;CACtC;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,eAAe,CAAA;AAErD,MAAM,WAAW,yBAAyB;IACxC;;MAEE;IACF,SAAS,EAAE,uBAAuB,CAAA;IAClC;;MAEE;IACF,OAAO,EAAE,MAAM,CAAA;IACf;;MAEE;IACF,UAAU,EAAE,MAAM,CAAA;IAClB;;MAEE;IACF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAiCD,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;gBAExB,OAAO,EAAE,yBAAyB;IAOxC,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAOrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAIpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAQ9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY1D,IAAI,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAepE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC;YAI7B,OAAO;YAKP,kBAAkB;CAkCjC"}
+{"version":3,"file":"PayloadsClient.d.ts","sourceRoot":"","sources":["../../src/PayloadsClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAIV,oBAAoB,EACpB,mBAAmB,EAEnB,kBAAkB,EAClB,OAAO,EACP,eAAe,EAChB,MAAM,yCAAyC,CAAA;AAchD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAIrD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE;QACX,SAAS,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;QAChD,aAAa,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACrD,CAAA;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC1D,IAAI,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAChE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAA;CACtC;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,eAAe,CAAA;AAErD,MAAM,WAAW,yBAAyB;IACxC;;MAEE;IACF,SAAS,EAAE,uBAAuB,CAAA;IAClC;;MAEE;IACF,OAAO,EAAE,MAAM,CAAA;IACf;;MAEE;IACF,UAAU,EAAE,MAAM,CAAA;IAClB;;MAEE;IACF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAYD,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;gBAExB,OAAO,EAAE,yBAAyB;IAOxC,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAOrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAIpD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAQ9D,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY1D,IAAI,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAepE,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC;YAI7B,OAAO;YAKP,kBAAkB;CAuBjC"}

package/dist/browser/RestPublicPayloadsReader.d.ts

@@ -0,0 +1,38 @@
+import type { Payload, WithStorageMeta } from '@ariestools/aries-datalake-core/browser';
+/** Policy for one public HTTP response, including its JSON envelope and metadata. */
+export interface RestPublicPayloadsReadOptions {
+    /**
+    Positive safe-integer limit on decoded Fetch-body bytes before JSON parsing.
+    Omission leaves the body size unlimited; this is not a raw network-byte limit.
+    */
+    readonly maxResponseBytes?: number;
+    /** Caller cancellation remains active through response-body consumption. */
+    readonly signal?: AbortSignal;
+}
+export interface RestPublicPayloadsReaderOptions {
+    /** Absolute HTTP(S) data-plane URL, optionally including its API path prefix. */
+    readonly baseUrl: string;
+    /** Datalake id used to regenerate the canonical native data-plane paths. */
+    readonly datalakeId: string;
+    /**
+    Trusted transport override. It must preserve the public no-credentials and
+    no-redirect policy and honor cancellation. Defaults to request-time global fetch.
+    */
+    readonly fetchImpl?: typeof fetch;
+}
+/**
+ * Exact-hash reads using the native data-plane protocol without token handling.
+ * The server must grant public viewer access. Public access applies to the whole
+ * lake; this reader neither grants access nor falls back from authenticated I/O.
+ * Returned metadata is structural transport data, not verified content identity.
+ */
+export declare class RestPublicPayloadsReader {
+    private readonly datalakeId;
+    private readonly fetchImpl?;
+    private readonly requestBase;
+    constructor(options: RestPublicPayloadsReaderOptions);
+    get(hash: string, options?: RestPublicPayloadsReadOptions): Promise<WithStorageMeta<Payload>>;
+    getMany(hashes: readonly string[], options?: RestPublicPayloadsReadOptions): Promise<WithStorageMeta<Payload>[]>;
+    private request;
+}
+//# sourceMappingURL=RestPublicPayloadsReader.d.ts.map

package/dist/browser/RestPublicPayloadsReader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RestPublicPayloadsReader.d.ts","sourceRoot":"","sources":["../../src/RestPublicPayloadsReader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAA;AAMvF,qFAAqF;AACrF,MAAM,WAAW,6BAA6B;IAC5C;;;MAGE;IACF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B;AAED,MAAM,WAAW,+BAA+B;IAC9C,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B;;;MAGE;IACF,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAClC;AAED;;;;;GAKG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAc;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;gBAExB,OAAO,EAAE,+BAA+B;IAM9C,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,6BAAkC,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAMjG,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,GAAE,6BAAkC,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAW5G,OAAO;CAoBtB"}

package/dist/browser/browser.d.ts

@@ -1,8 +1,12 @@
 export type { AuthTokenRequest, AuthTokenSource, AuthTokenSupplier, } from './AuthToken.ts';
+export type { CompositePayloadExclusion, CompositePayloadIdentity, CompositePayloadsClientOptions, CompositePayloadsPolicy, CompositePayloadsTarget, CompositeReadReceipt, CompositeReadResult, CompositeWriteReceipt, CompositeWriteResult, } from './CompositePayloadsClient.ts';
+export { CompositePayloadsClient, CompositePayloadsReadError, CompositePayloadsWriteError, } from './CompositePayloadsClient.ts';
 export type { CreateDatalakeRequest, DatalakeClient, GrantRequest, RevokeRequest, TokenRequest, } from './DatalakeClient.ts';
 export type { DatalakeUsageReport, PayloadsAuthTokenSource, PayloadsClient, RestPayloadsClientOptions, } from './PayloadsClient.ts';
 export { RestPayloadsClient } from './PayloadsClient.ts';
 export type { RestDatalakeClientOptions } from './RestDatalakeClient.ts';
 export { RestDatalakeClient } from './RestDatalakeClient.ts';
+export type { RestPublicPayloadsReaderOptions, RestPublicPayloadsReadOptions } from './RestPublicPayloadsReader.ts';
+export { RestPublicPayloadsReader } from './RestPublicPayloadsReader.ts';
 export * from '@ariestools/aries-datalake-core/browser';
 //# sourceMappingURL=browser.d.ts.map

package/dist/browser/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,GACrD,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,yBAAyB,GAC1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,cAAc,yCAAyC,CAAA"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,GACrD,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,yBAAyB,EACzB,wBAAwB,EACxB,8BAA8B,EAC9B,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,uBAAuB,EAAE,0BAA0B,EAAE,2BAA2B,GACjF,MAAM,8BAA8B,CAAA;AACrC,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,GACb,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,yBAAyB,GAC1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,YAAY,EAAE,+BAA+B,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAA;AACnH,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACxE,cAAc,yCAAyC,CAAA"}