@datumos/datum-cli 0.0.0 → 0.588.0

package/package.json

@@ -1,7 +1,29 @@
 {
   "name": "@datumos/datum-cli",
-  "version": "0.0.0",
-  "description": "Placeholder — the datum CLI is published from CI.",
+  "version": "0.588.0",
+  "description": "Official CLI of the Datum API. Datum — an agentic service operations platform on the Claude Agent SDK: externally triggered agent runs with an admin panel for cases, sessions and autonomy.",
+  "type": "module",
+  "bin": {
+    "datum": "cli/datum.js",
+    "mca": "cli/datum.js"
+  },
+  "files": [
+    "cli/",
+    "openapi/",
+    "spaces/",
+    "LICENSE",
+    "NOTICE",
+    "npm-shrinkwrap.json"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0"
+  },
+  "engines": {
+    "node": ">=22"
+  },
   "license": "Apache-2.0",
-  "repository": { "type": "git", "url": "git+https://github.com/Ringier-Axel-Springer-PL/datum-core.git" }
+  "homepage": "https://datumos.ai",
+  "publishConfig": {
+    "access": "public"
+  }
 }

package/spaces/reservedHostLabels.js

@@ -0,0 +1,66 @@
+/**
+ * The host labels of a space family that are never space slugs — kept
+ * WITHOUT any import so the `datum` CLI package can ship this module next to
+ * its own files (#2792, scripts/release/cliPackageFiles.mjs
+ * CLI_EXTERNAL_FILES): the CLI's `--space` needs to know that `auth.<domain>`
+ * sits beside the spaces, not above them. Re-exported by
+ * spaces.interfaces.ts, networkRelays.interfaces.ts and
+ * pushRelay.interfaces.ts — the one definition.
+ */
+/** The network-relay ingress (#1951): relay.<domain> is where relays dial
+ * the hub's WebSocket — an ORGANISATION host, never a space. */
+export const RELAY_HOST_LABEL = "relay";
+/** The push relay (#2574): `push.<domain>` answers phones and every
+ * organisation's instance — reserved as a space slug. */
+export const PUSH_RELAY_HOST_LABEL = "push";
+/** The ACC preview gateway (#2926): `gw.<domain>` is the host a gateway
+ * variant's upstream points at — an ORGANISATION host that serves previews
+ * of every space (the `x-datum-address` header says which), never a space.
+ * Locally it is `<label>--gw.<preview domain>` (previewHostParts). */
+export const GATEWAY_HOST_LABEL = "gw";
+/** Subdomain labels that can never be space slugs (design decision D4):
+ * aliased in the Accelerator as dedicated zones (www/api/auth/status/docs)
+ * or reserved defensively so nobody can mint a tenant that LOOKS like the
+ * org console or a sign-in host (admin/login — §4b; the resolver routes
+ * reserved zones to the bootstrap space, so admin.<domain> simply serves
+ * the org surface). */
+/** The subdomain the sign-in flow runs on: `auth.<space domain>`, the ONE host
+ * an identity provider holds a redirect URI for (design doc §6). Reserved
+ * below, so it resolves to the bootstrap space and can never be a tenant. */
+export const AUTH_HOST_SLUG = "auth";
+/**
+ * The subdomain the ORGANISATION's own surface is linked on:
+ * `www.<space domain>` — the bootstrap space's host in every server-built
+ * link (spaceUrl.ts) and in the panel's space switcher.
+ *
+ * Why a label and not the apex (design doc §6 said "root/www"): the apex is
+ * the one host of the family a deployment cannot count on owning — on
+ * production it is routinely aliased elsewhere (ours serves the dev tunnel),
+ * and a link built on it then lands the reader on ANOTHER instance. `www` is
+ * reserved below (so it resolves to the bootstrap space, never a tenant), it
+ * sits under the same wildcard vhost and certificate every space host needs,
+ * and it is inside the session cookie's `Domain=` family. The apex keeps
+ * WORKING as an entry point — it simply stops being what we hand out.
+ */
+export const ORG_HOST_SLUG = "www";
+export const RESERVED_SPACE_SLUGS = [
+    ORG_HOST_SLUG,
+    "api",
+    AUTH_HOST_SLUG,
+    "status",
+    "docs",
+    "admin",
+    "login",
+    // The model-key gateway's host (#1189): llm.<domain> is the LiteLLM
+    // inference endpoint on prod (the ALB routes its /v1/* before the panel),
+    // so no space may claim it.
+    "llm",
+    // The network-relay ingress (#1951).
+    RELAY_HOST_LABEL,
+    // The push relay (#2574): push.<domain> answers phones and every
+    // organisation's instance — never a space.
+    PUSH_RELAY_HOST_LABEL,
+    // The ACC preview gateway (#2926).
+    GATEWAY_HOST_LABEL,
+];
+//# sourceMappingURL=reservedHostLabels.js.map