@ariestools/datalake-cli 0.0.0-stage → 0.3.1

package/dist/node/index.d.ts

@@ -0,0 +1,346 @@
+/** Programmatic datalake client API of @ariestools/datalake-cli, self-contained: it names no other package's types. */
+
+export interface AuthTokenRequest {
+  audience: string
+}
+export type AuthTokenSupplier = (request: AuthTokenRequest) => Promise<string>
+export type AuthTokenSource = string | AuthTokenSupplier
+export type PayloadsAuthTokenSource = AuthTokenSource
+
+export type DatalakeRole = 'viewer' | 'runner'
+export type DatalakePrincipal = string
+export type DatalakeTier = 'small' | 'medium' | 'large' | 'archive'
+export type DatalakeRegion = 'us-west-2' | 'us-east-1' | 'eu-west-1'
+export type DatalakeStatus =
+  | 'pending'
+  | 'provisioning'
+  | 'ready'
+  | 'resizing'
+  | 'deprovisioning'
+  | 'deleted'
+  | 'error'
+
+export interface RateLimitOverrides {
+  anonymousPerMinute?: number
+  authenticatedPerMinute?: number
+  burstFactor?: number
+}
+
+export interface DatalakeConfig {
+  allowedSchemas?: string[]
+  disallowedSchemas?: string[]
+  iops?: number
+  rateLimits?: RateLimitOverrides
+  region?: DatalakeRegion
+  retentionDays?: number | null
+  sizeBytes?: number
+  tier: DatalakeTier
+  /** @deprecated No-op; archivist recomputes hashes trustlessly. */
+  verifyHashes?: boolean
+}
+
+export interface AclEntry {
+  grantedAt: string
+  grantedBy?: string
+  principal: DatalakePrincipal
+  role: DatalakeRole
+}
+
+export interface DatalakeUsage {
+  bytesStored: number
+  bytesStoredLimit: number
+  payloadCount: number
+  readsLast24h: number
+  writesLast24h: number
+}
+
+export interface DatalakeDescriptor {
+  acl: AclEntry[]
+  config: DatalakeConfig
+  createdAt: string
+  errorMessage?: string
+  id: string
+  name: string
+  ownerId: string
+  status: DatalakeStatus
+  updatedAt: string
+  url?: string
+  usage?: DatalakeUsage
+}
+
+export interface DatalakeToken {
+  datalakeId: string
+  expiresAt: string
+  role: DatalakeRole
+  token: string
+  url: string
+}
+
+export interface CreateDatalakeRequest {
+  config: DatalakeConfig
+  name: string
+}
+
+export interface GrantRequest {
+  datalakeId: string
+  principal: DatalakePrincipal
+  role: DatalakeRole
+}
+
+export interface RevokeRequest {
+  datalakeId: string
+  principal: DatalakePrincipal
+}
+
+export interface TokenRequest {
+  datalakeId: string
+  role: DatalakeRole
+  ttlSeconds?: number
+}
+
+export interface WalletJwtCredentials {
+  controlAudience?: string
+  offset?: string
+  ttlSeconds?: number
+}
+
+export interface StoredCredentials {
+  authToken?: string
+  baseUrl: string
+  expiresAt?: string
+  refreshToken?: string
+  userId?: string
+  walletJwt?: WalletJwtCredentials
+}
+
+export interface CreateDatalakeClientOptions {
+  authToken?: AuthTokenSource
+  baseUrl?: string
+  driver?: 'local' | 'rest'
+}
+
+export interface RestDatalakeClientOptions {
+  authToken: AuthTokenSource
+  audience?: string
+  baseUrl: string
+  fetchImpl?: typeof fetch
+}
+
+export interface RestPayloadsClientOptions {
+  authToken: PayloadsAuthTokenSource
+  baseUrl: string
+  datalakeId: string
+  fetchImpl?: typeof fetch
+}
+
+export interface DatalakeInsertSummary {
+  duplicates: number
+  rejected: string[]
+}
+
+/** Result of PayloadsClient.insert — matches RestPayloadsClient runtime. */
+export interface InsertPayloadsResult {
+  inserted: unknown[]
+  summary: DatalakeInsertSummary
+}
+
+export interface NextPayloadsResult {
+  nextCursor?: string
+  payloads: unknown[]
+}
+
+export interface DatalakeUsageReport {
+  datalakeId: string
+  payloadCount: number
+  rateLimits?: {
+    anonymous?: { limit: number; remaining: number }
+    authenticated?: { limit: number; remaining: number }
+  }
+}
+
+export type DatalakeDevServerStatus =
+  | 'healthy'
+  | 'degraded'
+  | 'unresponsive'
+  | 'stale'
+  | 'stopped'
+
+export type DatalakeDevServerExitCode = 0 | 2 | 3
+
+export interface DatalakeDevServerEndpointReport {
+  healthy: boolean
+  url: string
+}
+
+export interface DatalakeDevServerReport {
+  schemaVersion: 1
+  status: DatalakeDevServerStatus
+  exitCode: DatalakeDevServerExitCode
+  process: {
+    running: boolean
+    pid: number | null
+    startedAt: string | null
+  }
+  endpoints: {
+    control: DatalakeDevServerEndpointReport | null
+    plane: DatalakeDevServerEndpointReport | null
+  }
+}
+
+export interface InspectDatalakeDevServerOptions {
+  timeoutMs?: number
+}
+
+export interface PayloadsClient {
+  clear(): Promise<{ removed: number }>
+  delete(hash: string): Promise<void>
+  get(hash: string): Promise<unknown>
+  getMany(hashes: string[]): Promise<unknown[]>
+  insert(payloads: unknown[]): Promise<InsertPayloadsResult>
+  next(options?: {
+    cursor?: string
+    limit?: number
+    order?: 'asc' | 'desc'
+    schemas?: string[]
+  }): Promise<NextPayloadsResult>
+  usage(): Promise<DatalakeUsageReport>
+}
+
+export interface DatalakeClient {
+  create(request: CreateDatalakeRequest): Promise<DatalakeDescriptor>
+  describe(idOrName: string): Promise<DatalakeDescriptor>
+  destroy(idOrName: string): Promise<void>
+  grant(request: GrantRequest): Promise<DatalakeDescriptor>
+  list(): Promise<DatalakeDescriptor[]>
+  mintToken(request: TokenRequest): Promise<DatalakeToken>
+  revoke(request: RevokeRequest): Promise<DatalakeDescriptor>
+}
+
+export declare function createDatalakeClient(options?: CreateDatalakeClientOptions): DatalakeClient
+export declare function inspectDatalakeDevServer(
+  options?: InspectDatalakeDevServerOptions,
+): Promise<DatalakeDevServerReport>
+export declare class LocalDatalakeClient implements DatalakeClient {
+  create(request: CreateDatalakeRequest): Promise<DatalakeDescriptor>
+  describe(idOrName: string): Promise<DatalakeDescriptor>
+  destroy(idOrName: string): Promise<void>
+  grant(request: GrantRequest): Promise<DatalakeDescriptor>
+  list(): Promise<DatalakeDescriptor[]>
+  mintToken(request: TokenRequest): Promise<DatalakeToken>
+  revoke(request: RevokeRequest): Promise<DatalakeDescriptor>
+}
+export declare class RestDatalakeClient implements DatalakeClient {
+  constructor(options: RestDatalakeClientOptions)
+  create(request: CreateDatalakeRequest): Promise<DatalakeDescriptor>
+  describe(idOrName: string): Promise<DatalakeDescriptor>
+  destroy(idOrName: string): Promise<void>
+  grant(request: GrantRequest): Promise<DatalakeDescriptor>
+  list(): Promise<DatalakeDescriptor[]>
+  mintToken(request: TokenRequest): Promise<DatalakeToken>
+  revoke(request: RevokeRequest): Promise<DatalakeDescriptor>
+}
+export declare class RestPayloadsClient implements PayloadsClient {
+  constructor(options: RestPayloadsClientOptions)
+  clear(): Promise<{ removed: number }>
+  delete(hash: string): Promise<void>
+  get(hash: string): Promise<unknown>
+  getMany(hashes: string[]): Promise<unknown[]>
+  insert(payloads: unknown[]): Promise<InsertPayloadsResult>
+  next(options?: {
+    cursor?: string
+    limit?: number
+    order?: 'asc' | 'desc'
+    schemas?: string[]
+  }): Promise<NextPayloadsResult>
+  usage(): Promise<DatalakeUsageReport>
+}
+
+export declare function loadCredentials(): StoredCredentials | undefined
+export declare function saveCredentials(credentials: StoredCredentials): void
+export declare function clearCredentials(): void
+export declare function getCredentialsLocation(): string
+export declare function getDefaultDatalake(): string | undefined
+export declare function setDefaultDatalake(name: string, id?: string): void
+export declare function clearDefaultDatalake(): void
+export type JsonPrimitive = boolean | null | number | string
+export type JsonValue = JsonPrimitive | JsonObject | JsonValue[]
+export interface JsonObject { [key: string]: JsonValue }
+export interface Payload { schema: string; $sources?: string[]; [key: string]: JsonValue | undefined }
+
+export interface ExactRootArchiveLimits {
+  readonly maxConcurrentOperations: number
+  readonly maxOperationMilliseconds: number
+  readonly maxRequestBytes: number
+  readonly maxResponseBytes: number
+  readonly maxRoots: number
+  readonly maxTokenBytes: number
+}
+
+export interface ExactRootArchiveTokenRequest {
+  readonly audience: string
+  readonly scope: 'payload:append'
+  readonly signal: AbortSignal
+}
+
+export interface ExactRootArchiveOptions {
+  /** Absolute, credential-free configured plane URL. */
+  readonly baseUrl: string
+  readonly datalakeId: string
+  /** Trusted transport preserving signal, no redirects and credential policy. */
+  readonly fetchImpl?: typeof fetch
+  /** Explicit domain of the native SDK identity callback, not a JSON digest. */
+  readonly hashDomain: string
+  /** Trusted owning SDK algorithm; preserve client metadata and ignore only SDK storage metadata. */
+  readonly identify: (this: void, payload: Payload) => Promise<string>
+  readonly limits: ExactRootArchiveLimits
+  /** Trusted private issuer adapter, invoked only for append on this lake. */
+  readonly tokenSupplier: (this: void, request: ExactRootArchiveTokenRequest) => Promise<string>
+}
+
+export interface ExactRootArchiveBody {
+  readonly hashDomain: string
+  readonly payload: Payload
+  readonly root: string
+}
+
+export interface ExactRootArchiveRoot {
+  readonly hashDomain: string
+  readonly root: string
+}
+
+export interface ExactRootArchiveCallOptions {
+  readonly signal?: AbortSignal
+}
+
+export type ExactRootArchiveErrorCode = 'invalid-request' | 'unsupported-domain' | 'capacity' | 'cancelled'
+  | 'deadline' | 'token' | 'transport' | 'resource' | 'private' | 'missing' | 'altered' | 'invalid-response'
+export type ExactRootArchiveWriteState = 'not-started' | 'uncertain' | 'acknowledged'
+
+
+export declare class ExactRootArchiveError extends Error {
+  readonly code: ExactRootArchiveErrorCode
+  readonly writeState: ExactRootArchiveWriteState
+  constructor(code: ExactRootArchiveErrorCode, writeState?: ExactRootArchiveWriteState)
+}
+export declare class ExactRootArchive {
+  readonly hashDomain: string
+  readonly limits: ExactRootArchiveLimits
+  constructor(options: ExactRootArchiveOptions)
+  get outstandingOperations(): number
+  read(roots: readonly ExactRootArchiveRoot[], options?: ExactRootArchiveCallOptions): Promise<ExactRootArchiveBody[]>
+  write(bodies: readonly ExactRootArchiveBody[], options?: ExactRootArchiveCallOptions): Promise<ExactRootArchiveBody[]>
+}
+export interface RetainedDatalakeOptions {
+  readonly descriptor?: DatalakeDescriptor
+  readonly directory: string
+  readonly initialPayloads?: readonly Payload[]
+  readonly readinessTimeoutMilliseconds?: number
+  readonly stopTimeoutMilliseconds?: number
+}
+export interface RetainedDatalake {
+  readonly url: string
+  restart(): Promise<void>
+  stop(): Promise<void>
+}
+export declare function startRetainedDatalake(options: RetainedDatalakeOptions): Promise<RetainedDatalake>
+

package/dist/node/index.mjs

@@ -0,0 +1,202 @@
+// src/retainedDatalake.ts
+import { fork } from "node:child_process";
+import PATH from "node:path";
+
+// src/retainedDatalakeChild.ts
+function fixtureDeadline(value, fallback) {
+  const milliseconds = value ?? fallback;
+  if (!Number.isSafeInteger(milliseconds) || milliseconds < 1 || milliseconds > 6e4) {
+    throw new Error("Local fixture deadline must be a positive integer at most 60000 milliseconds");
+  }
+  return milliseconds;
+}
+function fixtureEnvironment() {
+  const environment = {};
+  for (const name of ["PATH", "TMPDIR", "TMP", "TEMP", "NODE_OPTIONS", "NODE_ENV", "NO_COLOR", "FORCE_COLOR", "TZ"]) {
+    const value = process.env[name];
+    if (value !== void 0) environment[name] = value;
+  }
+  return environment;
+}
+function ownChild(child) {
+  let ended = false;
+  const closed = new Promise((resolve) => {
+    child.once("close", () => {
+      ended = true;
+      resolve();
+    });
+  });
+  child.stderr?.on("data", () => {
+  });
+  child.on("error", () => {
+  });
+  return {
+    child,
+    closed,
+    hasClosed: () => ended
+  };
+}
+async function waitClosed(owned, milliseconds) {
+  if (owned.hasClosed()) return true;
+  let timer;
+  try {
+    return await Promise.race([
+      (async () => {
+        await owned.closed;
+        return true;
+      })(),
+      new Promise((resolve) => {
+        timer = setTimeout(() => resolve(false), milliseconds);
+      })
+    ]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function stopChild(owned, milliseconds) {
+  if (owned.hasClosed()) return;
+  owned.child.kill("SIGTERM");
+  if (await waitClosed(owned, milliseconds)) return;
+  owned.child.kill("SIGKILL");
+  if (!await waitClosed(owned, milliseconds)) throw new Error("Local fixture child settlement remains unknown");
+}
+
+// src/retainedDatalake.ts
+function readyOrigin(input) {
+  if (input === null || typeof input !== "object") throw new Error("Invalid retained datalake response");
+  const response = input;
+  if (response.kind !== "ready" || typeof response.url !== "string" || response.node !== process.version) {
+    throw new Error("Retained datalake failed before readiness");
+  }
+  const url = new URL(response.url);
+  if (url.hostname !== "127.0.0.1" || url.protocol !== "http:" || url.username !== "" || url.password !== "") {
+    throw new Error("Retained datalake returned a nonlocal endpoint");
+  }
+  return url.origin;
+}
+function readiness(owned, timeout) {
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(() => {
+      clean();
+      reject(new Error("Retained datalake readiness deadline exceeded"));
+    }, timeout);
+    const clean = () => {
+      clearTimeout(timer);
+      owned.child.off("message", message);
+    };
+    const message = (input) => {
+      clean();
+      try {
+        resolve(readyOrigin(input));
+      } catch (error) {
+        reject(error instanceof Error ? error : new Error("Invalid retained datalake response"));
+      }
+    };
+    owned.child.once("message", message);
+    void (async () => {
+      await owned.closed;
+      clean();
+      reject(new Error("Retained datalake child exited before readiness"));
+    })();
+  });
+}
+async function start(options, port, initialize) {
+  if (!PATH.isAbsolute(options.directory)) throw new Error("Retained archive directory must be absolute");
+  const worker = new URL(import.meta.url.endsWith(".ts") ? "./retainedDatalakeWorker.ts" : "./retainedDatalakeWorker.mjs", import.meta.url);
+  const owned = ownChild(fork(worker, [], {
+    env: fixtureEnvironment(),
+    execPath: process.execPath,
+    stdio: ["ignore", "ignore", "pipe", "ipc"]
+  }));
+  try {
+    const ready = readiness(owned, options.readinessTimeoutMilliseconds ?? 3e4);
+    owned.child.send({
+      kind: "start",
+      directory: options.directory,
+      port,
+      descriptor: options.descriptor,
+      initialize,
+      initialPayloads: initialize ? options.initialPayloads : void 0
+    });
+    return { owned, url: await ready };
+  } catch (error) {
+    await stopChild(owned, options.stopTimeoutMilliseconds ?? 1e4);
+    throw error;
+  }
+}
+async function startRetainedDatalake(options) {
+  const fixed = Object.freeze({
+    initialPayloads: options.initialPayloads === void 0 ? void 0 : structuredClone(options.initialPayloads),
+    directory: options.directory,
+    descriptor: options.descriptor === void 0 ? void 0 : structuredClone(options.descriptor),
+    readinessTimeoutMilliseconds: fixtureDeadline(options.readinessTimeoutMilliseconds, 3e4),
+    stopTimeoutMilliseconds: fixtureDeadline(options.stopTimeoutMilliseconds, 1e4)
+  });
+  let current = await start(fixed, 0, true);
+  const url = current.url;
+  const endpoint = new URL(url);
+  const port = Number(endpoint.port);
+  let operation = Promise.resolve();
+  const serialize = (action) => {
+    const previous = operation;
+    const next = (async () => {
+      await previous;
+      await action();
+    })();
+    operation = (async () => {
+      try {
+        await next;
+      } catch {
+      }
+    })();
+    return next;
+  };
+  const stopCurrent = async () => {
+    if (current !== void 0) await stopChild(current.owned, fixed.stopTimeoutMilliseconds ?? 1e4);
+    current = void 0;
+  };
+  return {
+    url,
+    stop: () => serialize(stopCurrent),
+    restart: () => serialize(async () => {
+      await stopCurrent();
+      current = await start(fixed, port, false);
+      if (current.url !== url) throw new Error("Retained datalake restart changed its explicit endpoint");
+    })
+  };
+}
+
+// src/index.ts
+import {
+  clearCredentials,
+  clearDefaultDatalake,
+  createDatalakeClient,
+  getCredentialsLocation,
+  getDefaultDatalake,
+  loadCredentials,
+  LocalDatalakeClient,
+  RestDatalakeClient,
+  RestPayloadsClient,
+  saveCredentials,
+  setDefaultDatalake
+} from "@ariestools/aries-datalake-client";
+import { ExactRootArchive, ExactRootArchiveError } from "@ariestools/aries-datalake-client";
+import { inspectDatalakeDevServer } from "@ariestools/aries-datalake-client/dev";
+export {
+  ExactRootArchive,
+  ExactRootArchiveError,
+  LocalDatalakeClient,
+  RestDatalakeClient,
+  RestPayloadsClient,
+  clearCredentials,
+  clearDefaultDatalake,
+  createDatalakeClient,
+  getCredentialsLocation,
+  getDefaultDatalake,
+  inspectDatalakeDevServer,
+  loadCredentials,
+  saveCredentials,
+  setDefaultDatalake,
+  startRetainedDatalake
+};
+//# sourceMappingURL=index.mjs.map

package/dist/node/index.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/retainedDatalake.ts", "../../src/retainedDatalakeChild.ts", "../../src/index.ts"],
+  "sourcesContent": ["import { fork } from 'node:child_process'\nimport PATH from 'node:path'\n\nimport type { DatalakeDescriptor, Payload } from '@ariestools/aries-datalake-core'\n\nimport type { OwnedChild } from './retainedDatalakeChild.ts'\nimport {\n  fixtureDeadline, fixtureEnvironment, ownChild, stopChild,\n} from './retainedDatalakeChild.ts'\n\nexport interface RetainedDatalakeOptions {\n  readonly descriptor?: DatalakeDescriptor\n  readonly directory: string\n  /** Public fixture bodies, inserted only into a newly created descriptor. */\n  readonly initialPayloads?: readonly Payload[]\n  readonly readinessTimeoutMilliseconds?: number\n  readonly stopTimeoutMilliseconds?: number\n}\n\nexport interface RetainedDatalake {\n  readonly url: string\n  restart(): Promise<void>\n  stop(): Promise<void>\n}\n\ninterface RunningArchive {\n  readonly owned: OwnedChild\n  readonly url: string\n}\n\nfunction readyOrigin(input: unknown): string {\n  if (input === null || typeof input !== 'object') throw new Error('Invalid retained datalake response')\n  const response = input as { kind?: unknown; node?: unknown; url?: unknown }\n  if (response.kind !== 'ready' || typeof response.url !== 'string' || response.node !== process.version) {\n    throw new Error('Retained datalake failed before readiness')\n  }\n  const url = new URL(response.url)\n  if (url.hostname !== '127.0.0.1' || url.protocol !== 'http:' || url.username !== '' || url.password !== '') {\n    throw new Error('Retained datalake returned a nonlocal endpoint')\n  }\n  return url.origin\n}\n\nfunction readiness(owned: OwnedChild, timeout: number): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const timer = setTimeout(() => {\n      clean()\n      reject(new Error('Retained datalake readiness deadline exceeded'))\n    }, timeout)\n    const clean = (): void => {\n      clearTimeout(timer)\n      owned.child.off('message', message)\n    }\n    const message = (input: unknown): void => {\n      clean()\n      try {\n        resolve(readyOrigin(input))\n      } catch (error) {\n        reject(error instanceof Error ? error : new Error('Invalid retained datalake response'))\n      }\n    }\n    owned.child.once('message', message)\n    void (async () => {\n      await owned.closed\n      clean()\n      reject(new Error('Retained datalake child exited before readiness'))\n    })()\n  })\n}\n\nasync function start(options: RetainedDatalakeOptions, port: number, initialize: boolean): Promise<RunningArchive> {\n  if (!PATH.isAbsolute(options.directory)) throw new Error('Retained archive directory must be absolute')\n  const worker = new URL(import.meta.url.endsWith('.ts') ? './retainedDatalakeWorker.ts' : './retainedDatalakeWorker.mjs', import.meta.url)\n  const owned = ownChild(fork(worker, [], {\n    env: fixtureEnvironment(), execPath: process.execPath, stdio: ['ignore', 'ignore', 'pipe', 'ipc'],\n  }))\n  try {\n    const ready = readiness(owned, options.readinessTimeoutMilliseconds ?? 30_000)\n    owned.child.send({\n      kind: 'start',\n      directory: options.directory,\n      port,\n      descriptor: options.descriptor,\n      initialize,\n      initialPayloads: initialize ? options.initialPayloads : undefined,\n    })\n    return { owned, url: await ready }\n  } catch (error) {\n    await stopChild(owned, options.stopTimeoutMilliseconds ?? 10_000)\n    throw error\n  }\n}\n\n/** Public LMDB/descriptor corpus only; no account keys or recovery journal. */\nexport async function startRetainedDatalake(options: RetainedDatalakeOptions): Promise<RetainedDatalake> {\n  const fixed: RetainedDatalakeOptions = Object.freeze({\n    initialPayloads: options.initialPayloads === undefined ? undefined : structuredClone(options.initialPayloads),\n    directory: options.directory,\n    descriptor: options.descriptor === undefined ? undefined : structuredClone(options.descriptor),\n    readinessTimeoutMilliseconds: fixtureDeadline(options.readinessTimeoutMilliseconds, 30_000),\n    stopTimeoutMilliseconds: fixtureDeadline(options.stopTimeoutMilliseconds, 10_000),\n  })\n  let current: RunningArchive | undefined = await start(fixed, 0, true)\n  const url = current.url\n  const endpoint = new URL(url)\n  const port = Number(endpoint.port)\n  let operation = Promise.resolve()\n  const serialize = (action: () => Promise<void>): Promise<void> => {\n    const previous = operation\n    const next = (async () => {\n      await previous\n      await action()\n    })()\n    operation = (async () => {\n      try {\n        await next\n      } catch {\n        // Caller retains failure; later cleanup may retry.\n      }\n    })()\n    return next\n  }\n  const stopCurrent = async (): Promise<void> => {\n    if (current !== undefined) await stopChild(current.owned, fixed.stopTimeoutMilliseconds ?? 10_000)\n    current = undefined\n  }\n  return {\n    url,\n    stop: () => serialize(stopCurrent),\n    restart: () => serialize(async () => {\n      await stopCurrent()\n      current = await start(fixed, port, false)\n      if (current.url !== url) throw new Error('Retained datalake restart changed its explicit endpoint')\n    }),\n  }\n}\n", "import type { ChildProcess } from 'node:child_process'\n\nexport interface OwnedChild {\n  readonly child: ChildProcess\n  readonly closed: Promise<void>\n  hasClosed(): boolean\n}\n\nexport function fixtureDeadline(value: number | undefined, fallback: number): number {\n  const milliseconds = value ?? fallback\n  if (!Number.isSafeInteger(milliseconds) || milliseconds < 1 || milliseconds > 60_000) {\n    throw new Error('Local fixture deadline must be a positive integer at most 60000 milliseconds')\n  }\n  return milliseconds\n}\n\n/** Closed executable environment; operating credentials and XL1 overrides are not inherited. */\nexport function fixtureEnvironment(): NodeJS.ProcessEnv {\n  const environment: NodeJS.ProcessEnv = {}\n  for (const name of ['PATH', 'TMPDIR', 'TMP', 'TEMP', 'NODE_OPTIONS', 'NODE_ENV', 'NO_COLOR', 'FORCE_COLOR', 'TZ']) {\n    const value = process.env[name]\n    if (value !== undefined) environment[name] = value\n  }\n  return environment\n}\n\nexport function ownChild(child: ChildProcess): OwnedChild {\n  let ended = false\n  const closed = new Promise<void>((resolve) => {\n    child.once('close', () => {\n      ended = true\n      resolve()\n    })\n  })\n  // Drain diagnostics without publishing child environment or ephemeral keys.\n  child.stderr?.on('data', () => { /* Diagnostics are deliberately discarded. */ })\n  child.on('error', () => { /* The close event remains the settlement authority. */ })\n  return {\n    child, closed, hasClosed: () => ended,\n  }\n}\n\nasync function waitClosed(owned: OwnedChild, milliseconds: number): Promise<boolean> {\n  if (owned.hasClosed()) return true\n  let timer: ReturnType<typeof setTimeout> | undefined\n  try {\n    return await Promise.race([\n      (async () => {\n        await owned.closed\n        return true\n      })(),\n      new Promise<boolean>((resolve) => { timer = setTimeout(() => resolve(false), milliseconds) }),\n    ])\n  } finally {\n    clearTimeout(timer)\n  }\n}\n\n/** A successful return means the real child and its pipes closed. */\nexport async function stopChild(owned: OwnedChild, milliseconds: number): Promise<void> {\n  if (owned.hasClosed()) return\n  owned.child.kill('SIGTERM')\n  if (await waitClosed(owned, milliseconds)) return\n  owned.child.kill('SIGKILL')\n  if (!await waitClosed(owned, milliseconds)) throw new Error('Local fixture child settlement remains unknown')\n}\n", "/**\n * The programmatic datalake surface of `@ariestools/datalake-cli`, which\n * replaces `@ariestools/cli/datalake`: the public client and core APIs, the\n * local dev-server inspection, and a retained local datalake for fixtures.\n * The client and core are public dependencies; the retained datalake's worker\n * bundles the private control and plane, so consumers install no private\n * package.\n */\n\nexport type { RetainedDatalake, RetainedDatalakeOptions } from './retainedDatalake.ts'\nexport { startRetainedDatalake } from './retainedDatalake.ts'\nexport type { CreateDatalakeClientOptions } from '@ariestools/aries-datalake-client'\nexport type {\n  AuthTokenSource,\n  DatalakeClient,\n  PayloadsAuthTokenSource,\n  PayloadsClient,\n  RestDatalakeClientOptions,\n  RestPayloadsClientOptions,\n  StoredCredentials,\n  WalletJwtCredentials,\n} from '@ariestools/aries-datalake-client'\nexport type {\n  ExactRootArchiveBody, ExactRootArchiveCallOptions, ExactRootArchiveErrorCode,\n  ExactRootArchiveLimits, ExactRootArchiveOptions, ExactRootArchiveRoot,\n  ExactRootArchiveTokenRequest, ExactRootArchiveWriteState,\n} from '@ariestools/aries-datalake-client'\nexport {\n  clearCredentials,\n  clearDefaultDatalake,\n  createDatalakeClient,\n  getCredentialsLocation,\n  getDefaultDatalake,\n  loadCredentials,\n  LocalDatalakeClient,\n  RestDatalakeClient,\n  RestPayloadsClient,\n  saveCredentials,\n  setDefaultDatalake,\n} from '@ariestools/aries-datalake-client'\nexport { ExactRootArchive, ExactRootArchiveError } from '@ariestools/aries-datalake-client'\nexport type {\n  DatalakeDevServerEndpointReport,\n  DatalakeDevServerExitCode,\n  DatalakeDevServerReport,\n  DatalakeDevServerStatus,\n  InspectDatalakeDevServerOptions,\n} from '@ariestools/aries-datalake-client/dev'\nexport { inspectDatalakeDevServer } from '@ariestools/aries-datalake-client/dev'\nexport type { DatalakeDescriptor, Payload } from '@ariestools/aries-datalake-core'\n"],
+  "mappings": ";AAAA,SAAS,YAAY;AACrB,OAAO,UAAU;;;ACOV,SAAS,gBAAgB,OAA2B,UAA0B;AACnF,QAAM,eAAe,SAAS;AAC9B,MAAI,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe,KAAK,eAAe,KAAQ;AACpF,UAAM,IAAI,MAAM,8EAA8E;AAAA,EAChG;AACA,SAAO;AACT;AAGO,SAAS,qBAAwC;AACtD,QAAM,cAAiC,CAAC;AACxC,aAAW,QAAQ,CAAC,QAAQ,UAAU,OAAO,QAAQ,gBAAgB,YAAY,YAAY,eAAe,IAAI,GAAG;AACjH,UAAM,QAAQ,QAAQ,IAAI,IAAI;AAC9B,QAAI,UAAU,OAAW,aAAY,IAAI,IAAI;AAAA,EAC/C;AACA,SAAO;AACT;AAEO,SAAS,SAAS,OAAiC;AACxD,MAAI,QAAQ;AACZ,QAAM,SAAS,IAAI,QAAc,CAAC,YAAY;AAC5C,UAAM,KAAK,SAAS,MAAM;AACxB,cAAQ;AACR,cAAQ;AAAA,IACV,CAAC;AAAA,EACH,CAAC;AAED,QAAM,QAAQ,GAAG,QAAQ,MAAM;AAAA,EAAgD,CAAC;AAChF,QAAM,GAAG,SAAS,MAAM;AAAA,EAA0D,CAAC;AACnF,SAAO;AAAA,IACL;AAAA,IAAO;AAAA,IAAQ,WAAW,MAAM;AAAA,EAClC;AACF;AAEA,eAAe,WAAW,OAAmB,cAAwC;AACnF,MAAI,MAAM,UAAU,EAAG,QAAO;AAC9B,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK;AAAA,OACvB,YAAY;AACX,cAAM,MAAM;AACZ,eAAO;AAAA,MACT,GAAG;AAAA,MACH,IAAI,QAAiB,CAAC,YAAY;AAAE,gBAAQ,WAAW,MAAM,QAAQ,KAAK,GAAG,YAAY;AAAA,MAAE,CAAC;AAAA,IAC9F,CAAC;AAAA,EACH,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;AAGA,eAAsB,UAAU,OAAmB,cAAqC;AACtF,MAAI,MAAM,UAAU,EAAG;AACvB,QAAM,MAAM,KAAK,SAAS;AAC1B,MAAI,MAAM,WAAW,OAAO,YAAY,EAAG;AAC3C,QAAM,MAAM,KAAK,SAAS;AAC1B,MAAI,CAAC,MAAM,WAAW,OAAO,YAAY,EAAG,OAAM,IAAI,MAAM,gDAAgD;AAC9G;;;ADnCA,SAAS,YAAY,OAAwB;AAC3C,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,OAAM,IAAI,MAAM,oCAAoC;AACrG,QAAM,WAAW;AACjB,MAAI,SAAS,SAAS,WAAW,OAAO,SAAS,QAAQ,YAAY,SAAS,SAAS,QAAQ,SAAS;AACtG,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,QAAM,MAAM,IAAI,IAAI,SAAS,GAAG;AAChC,MAAI,IAAI,aAAa,eAAe,IAAI,aAAa,WAAW,IAAI,aAAa,MAAM,IAAI,aAAa,IAAI;AAC1G,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,SAAO,IAAI;AACb;AAEA,SAAS,UAAU,OAAmB,SAAkC;AACtE,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,QAAQ,WAAW,MAAM;AAC7B,YAAM;AACN,aAAO,IAAI,MAAM,+CAA+C,CAAC;AAAA,IACnE,GAAG,OAAO;AACV,UAAM,QAAQ,MAAY;AACxB,mBAAa,KAAK;AAClB,YAAM,MAAM,IAAI,WAAW,OAAO;AAAA,IACpC;AACA,UAAM,UAAU,CAAC,UAAyB;AACxC,YAAM;AACN,UAAI;AACF,gBAAQ,YAAY,KAAK,CAAC;AAAA,MAC5B,SAAS,OAAO;AACd,eAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,oCAAoC,CAAC;AAAA,MACzF;AAAA,IACF;AACA,UAAM,MAAM,KAAK,WAAW,OAAO;AACnC,UAAM,YAAY;AAChB,YAAM,MAAM;AACZ,YAAM;AACN,aAAO,IAAI,MAAM,iDAAiD,CAAC;AAAA,IACrE,GAAG;AAAA,EACL,CAAC;AACH;AAEA,eAAe,MAAM,SAAkC,MAAc,YAA8C;AACjH,MAAI,CAAC,KAAK,WAAW,QAAQ,SAAS,EAAG,OAAM,IAAI,MAAM,6CAA6C;AACtG,QAAM,SAAS,IAAI,IAAI,YAAY,IAAI,SAAS,KAAK,IAAI,gCAAgC,gCAAgC,YAAY,GAAG;AACxI,QAAM,QAAQ,SAAS,KAAK,QAAQ,CAAC,GAAG;AAAA,IACtC,KAAK,mBAAmB;AAAA,IAAG,UAAU,QAAQ;AAAA,IAAU,OAAO,CAAC,UAAU,UAAU,QAAQ,KAAK;AAAA,EAClG,CAAC,CAAC;AACF,MAAI;AACF,UAAM,QAAQ,UAAU,OAAO,QAAQ,gCAAgC,GAAM;AAC7E,UAAM,MAAM,KAAK;AAAA,MACf,MAAM;AAAA,MACN,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,YAAY,QAAQ;AAAA,MACpB;AAAA,MACA,iBAAiB,aAAa,QAAQ,kBAAkB;AAAA,IAC1D,CAAC;AACD,WAAO,EAAE,OAAO,KAAK,MAAM,MAAM;AAAA,EACnC,SAAS,OAAO;AACd,UAAM,UAAU,OAAO,QAAQ,2BAA2B,GAAM;AAChE,UAAM;AAAA,EACR;AACF;AAGA,eAAsB,sBAAsB,SAA6D;AACvG,QAAM,QAAiC,OAAO,OAAO;AAAA,IACnD,iBAAiB,QAAQ,oBAAoB,SAAY,SAAY,gBAAgB,QAAQ,eAAe;AAAA,IAC5G,WAAW,QAAQ;AAAA,IACnB,YAAY,QAAQ,eAAe,SAAY,SAAY,gBAAgB,QAAQ,UAAU;AAAA,IAC7F,8BAA8B,gBAAgB,QAAQ,8BAA8B,GAAM;AAAA,IAC1F,yBAAyB,gBAAgB,QAAQ,yBAAyB,GAAM;AAAA,EAClF,CAAC;AACD,MAAI,UAAsC,MAAM,MAAM,OAAO,GAAG,IAAI;AACpE,QAAM,MAAM,QAAQ;AACpB,QAAM,WAAW,IAAI,IAAI,GAAG;AAC5B,QAAM,OAAO,OAAO,SAAS,IAAI;AACjC,MAAI,YAAY,QAAQ,QAAQ;AAChC,QAAM,YAAY,CAAC,WAA+C;AAChE,UAAM,WAAW;AACjB,UAAM,QAAQ,YAAY;AACxB,YAAM;AACN,YAAM,OAAO;AAAA,IACf,GAAG;AACH,iBAAa,YAAY;AACvB,UAAI;AACF,cAAM;AAAA,MACR,QAAQ;AAAA,MAER;AAAA,IACF,GAAG;AACH,WAAO;AAAA,EACT;AACA,QAAM,cAAc,YAA2B;AAC7C,QAAI,YAAY,OAAW,OAAM,UAAU,QAAQ,OAAO,MAAM,2BAA2B,GAAM;AACjG,cAAU;AAAA,EACZ;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,MAAM,UAAU,WAAW;AAAA,IACjC,SAAS,MAAM,UAAU,YAAY;AACnC,YAAM,YAAY;AAClB,gBAAU,MAAM,MAAM,OAAO,MAAM,KAAK;AACxC,UAAI,QAAQ,QAAQ,IAAK,OAAM,IAAI,MAAM,yDAAyD;AAAA,IACpG,CAAC;AAAA,EACH;AACF;;;AE5GA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,6BAA6B;AAQxD,SAAS,gCAAgC;",
+  "names": []
+}

package/dist/node/internal.d.ts

@@ -0,0 +1,10 @@
+import type { CommandModule } from 'yargs';
+export { applyLoginInsecureHttpChoice } from './commands/datalakeLoginInternalCommand.ts';
+/**
+ * The internal datalake tree: the public tree plus the blob group, the
+ * `dev up --blobs` variant, and `login --allow-insecure-http`. Only the
+ * internal CLI entry imports this module, so none of it reaches the public
+ * `aries` bundle.
+ */
+export declare const internalDatalakeCommand: CommandModule;
+//# sourceMappingURL=internal.d.ts.map

package/dist/node/internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../src/internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAA;AAO1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAA;AAEzF;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,aAIpC,CAAA"}

package/dist/node/retainedDatalake.d.ts

@@ -0,0 +1,17 @@
+import type { DatalakeDescriptor, Payload } from '@ariestools/aries-datalake-core';
+export interface RetainedDatalakeOptions {
+    readonly descriptor?: DatalakeDescriptor;
+    readonly directory: string;
+    /** Public fixture bodies, inserted only into a newly created descriptor. */
+    readonly initialPayloads?: readonly Payload[];
+    readonly readinessTimeoutMilliseconds?: number;
+    readonly stopTimeoutMilliseconds?: number;
+}
+export interface RetainedDatalake {
+    readonly url: string;
+    restart(): Promise<void>;
+    stop(): Promise<void>;
+}
+/** Public LMDB/descriptor corpus only; no account keys or recovery journal. */
+export declare function startRetainedDatalake(options: RetainedDatalakeOptions): Promise<RetainedDatalake>;
+//# sourceMappingURL=retainedDatalake.d.ts.map

package/dist/node/retainedDatalake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retainedDatalake.d.ts","sourceRoot":"","sources":["../../src/retainedDatalake.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAA;AAOlF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAA;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;IAC7C,QAAQ,CAAC,4BAA4B,CAAC,EAAE,MAAM,CAAA;IAC9C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;CAC1C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACxB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAsED,+EAA+E;AAC/E,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAyCvG"}

package/dist/node/retainedDatalakeChild.d.ts

@@ -0,0 +1,13 @@
+import type { ChildProcess } from 'node:child_process';
+export interface OwnedChild {
+    readonly child: ChildProcess;
+    readonly closed: Promise<void>;
+    hasClosed(): boolean;
+}
+export declare function fixtureDeadline(value: number | undefined, fallback: number): number;
+/** Closed executable environment; operating credentials and XL1 overrides are not inherited. */
+export declare function fixtureEnvironment(): NodeJS.ProcessEnv;
+export declare function ownChild(child: ChildProcess): OwnedChild;
+/** A successful return means the real child and its pipes closed. */
+export declare function stopChild(owned: OwnedChild, milliseconds: number): Promise<void>;
+//# sourceMappingURL=retainedDatalakeChild.d.ts.map

package/dist/node/retainedDatalakeChild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retainedDatalakeChild.d.ts","sourceRoot":"","sources":["../../src/retainedDatalakeChild.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,SAAS,IAAI,OAAO,CAAA;CACrB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMnF;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAOtD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,UAAU,CAcxD;AAkBD,qEAAqE;AACrE,wBAAsB,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMtF"}

package/dist/node/retainedDatalakeWorker.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=retainedDatalakeWorker.d.ts.map

package/dist/node/retainedDatalakeWorker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retainedDatalakeWorker.d.ts","sourceRoot":"","sources":["../../src/retainedDatalakeWorker.ts"],"names":[],"mappings":""}