@ariestools/datalake-cli 0.0.0-stage → 0.3.1

package/LICENSE

@@ -0,0 +1,4 @@
+LGPL-3.0-only
+
+Copyright (c) 2026 Arie Trouw
+

package/README.md

@@ -1,3 +1,41 @@
-# Temporary Holding Version
+# `@ariestools/datalake-cli`
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Datalake command tree for Aries. `aries datalake` and `ariesi datalake` spawn the `aries-datalake` bin. A direct launch is `aries-datalake <command>`.
+
+`ARIES_DATALAKE_SURFACE=internal` adds the internal blob commands. `ariesi` sets that only at the internal tier. The public `aries` binary does not.
+
+`datalake dev` runs `daemons/datalake-dev.mjs` from beside this bin.
+
+## Library
+
+The package's root export is the programmatic datalake surface that `@ariestools/cli/datalake` used to ship. It re-exports the public client and core APIs and the dev-server inspection, and adds `startRetainedDatalake`, a local datalake for fixtures:
+
+```ts
+import { createDatalakeClient, ExactRootArchive, startRetainedDatalake } from '@ariestools/datalake-cli'
+```
+
+`startRetainedDatalake` forks `retainedDatalakeWorker.mjs` from beside the library. The worker bundles the private control and plane, so installing this package needs no private or restricted package.
+
+Its type declarations are the facade's own: self-contained, with payloads typed as JSON values and the payload client taking and returning `unknown`, so code written against `@ariestools/cli/datalake` compiles once its import path changes.
+
+### Retained local datalake
+
+`startRetainedDatalake` starts a datalake for disposable local
+qualification. It owns an isolated loopback worker and returns `url`, `restart()`
+and `stop()`. Supply an absolute `directory` and, for a new corpus, a
+`DatalakeDescriptor`. The directory holds public descriptor/payload data only;
+the signing secret is ephemeral. Restart retains the endpoint and refuses to
+recreate a missing descriptor or overwrite a conflicting descriptor. A successful
+stop means the owned child and its pipes have closed. Readiness and stop deadlines
+are configurable positive integers up to 60 seconds.
+
+Optional `initialPayloads` seed at most 4096 public bodies and 16 MiB into a newly
+created descriptor. They are never replayed during restart; trying to seed an
+existing descriptor fails. This is a local fixture facility, not a managed
+production service or an account recovery journal.
+
+The same export provides `ExactRootArchive` and its self-contained types.
+It requires a trusted native-root `identify` callback, explicit resource limits,
+and an append-only token supplier. Reads are anonymous and verify original roots.
+A matching hash establishes integrity; the consuming protocol decides authority
+and admissibility. No private control/plane dependency is needed downstream.

package/dist/node/actions/datalake/login.d.ts

@@ -0,0 +1,30 @@
+export interface LoginOptions {
+    baseUrl?: string;
+    /**
+    When `wallet` is set, audience to use for control-plane calls.
+    */
+    controlAudience?: string;
+    /**
+    When `wallet` is set, derivation offset of the signing account (default `'0'`).
+    */
+    offset?: string;
+    privateKey?: string;
+    token?: string;
+    /**
+    When `wallet` is set, TTL in seconds for each minted JWT.
+    */
+    ttlSeconds?: number;
+    /**
+    Use the active aries wallet to self-sign JWTs per request.
+    */
+    wallet?: boolean;
+}
+/** The control base URL a login targets: `baseUrl`, else `ARIES_DATALAKE_API`, without a trailing slash. */
+export declare function resolveLoginBaseUrl(baseUrl: string | undefined): string | undefined;
+/**
+ * Signs in and stores credentials. Resolves to the control base URL the
+ * credentials were saved for, or `undefined` when login failed (the failure
+ * is printed and `process.exitCode` set).
+ */
+export declare function login(options: LoginOptions): Promise<string | undefined>;
+//# sourceMappingURL=login.d.ts.map

package/dist/node/actions/datalake/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/actions/datalake/login.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;MAEE;IACF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;MAEE;IACF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;MAEE;IACF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;MAEE;IACF,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAsFD,4GAA4G;AAC5G,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAEnF;AAED;;;;GAIG;AACH,wBAAsB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA6B9E"}