@xylabs/aries 0.1.1

package/dist/actions/datalake/formatters.mjs

@@ -0,0 +1,90 @@
+// src/actions/datalake/formatters.ts
+import chalk from "chalk";
+var STATUS_COLORS = {
+  pending: chalk.gray,
+  provisioning: chalk.yellow,
+  ready: chalk.green,
+  resizing: chalk.yellow,
+  deprovisioning: chalk.yellow,
+  deleted: chalk.gray,
+  error: chalk.red
+};
+function formatBytes(bytes) {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 ** 2) return `${(bytes / 1024).toFixed(1)} KB`;
+  if (bytes < 1024 ** 3) return `${(bytes / 1024 ** 2).toFixed(1)} MB`;
+  if (bytes < 1024 ** 4) return `${(bytes / 1024 ** 3).toFixed(1)} GB`;
+  return `${(bytes / 1024 ** 4).toFixed(1)} TB`;
+}
+function formatStatus(status) {
+  const colorize = STATUS_COLORS[status] ?? chalk.white;
+  return colorize(status);
+}
+function printDatalakeRow(datalake) {
+  const size = datalake.config.sizeBytes ? formatBytes(datalake.config.sizeBytes) : "\u2014";
+  const name = chalk.white(datalake.name.padEnd(20));
+  const tier = chalk.cyan(datalake.config.tier.padEnd(8));
+  const region = chalk.gray((datalake.config.region ?? "\u2014").padEnd(12));
+  const status = formatStatus(datalake.status).padEnd(14);
+  console.log(`  ${name} ${tier} ${region} ${size.padStart(8)}  ${status}`);
+}
+function printRateLimits(limits) {
+  const parts = [];
+  if (limits.authenticatedPerMinute !== void 0) parts.push(`auth=${limits.authenticatedPerMinute}/min`);
+  if (limits.anonymousPerMinute !== void 0) parts.push(`anon=${limits.anonymousPerMinute}/min`);
+  if (limits.burstFactor !== void 0) parts.push(`burst=${limits.burstFactor}x`);
+  if (parts.length > 0) {
+    console.log(`  ${chalk.gray("limits:")}     ${parts.join(" ")}`);
+  }
+}
+function printUsage(usage) {
+  console.log();
+  console.log(chalk.cyan("  usage"));
+  console.log(`    ${chalk.gray("payloads:")}   ${usage.payloadCount}`);
+  console.log(`    ${chalk.gray("stored:")}     ${formatBytes(usage.bytesStored)} / ${formatBytes(usage.bytesStoredLimit)}`);
+  console.log(`    ${chalk.gray("reads 24h:")}  ${usage.readsLast24h}`);
+  console.log(`    ${chalk.gray("writes 24h:")} ${usage.writesLast24h}`);
+}
+function printAcl(acl) {
+  if (acl.length === 0) return;
+  console.log();
+  console.log(chalk.cyan("  access"));
+  for (const entry of acl) {
+    const principal = entry.principal === "public" ? chalk.yellow("public") : entry.principal;
+    console.log(`    ${principal.padEnd(24)} ${chalk.magenta(entry.role)}  ${chalk.gray(entry.grantedAt)}`);
+  }
+}
+function printDatalakeDetail(datalake) {
+  console.log(chalk.cyan(`
+${datalake.name}`));
+  console.log(`  ${chalk.gray("id:")}         ${datalake.id}`);
+  console.log(`  ${chalk.gray("status:")}     ${formatStatus(datalake.status)}`);
+  if (datalake.url) {
+    console.log(`  ${chalk.gray("url:")}        ${datalake.url}`);
+  }
+  console.log(`  ${chalk.gray("owner:")}      ${datalake.ownerId}`);
+  console.log(`  ${chalk.gray("tier:")}       ${datalake.config.tier}`);
+  console.log(`  ${chalk.gray("region:")}     ${datalake.config.region ?? "\u2014"}`);
+  console.log(`  ${chalk.gray("size:")}       ${datalake.config.sizeBytes ? formatBytes(datalake.config.sizeBytes) : "\u2014"}`);
+  console.log(`  ${chalk.gray("iops:")}       ${datalake.config.iops ?? "\u2014"}`);
+  console.log(`  ${chalk.gray("retention:")}  ${datalake.config.retentionDays ?? "forever"}`);
+  if (datalake.config.verifyHashes) {
+    console.log(`  ${chalk.gray("verify:")}     ${chalk.green("hashes enforced")}`);
+  }
+  if (datalake.config.rateLimits) printRateLimits(datalake.config.rateLimits);
+  console.log(`  ${chalk.gray("created:")}    ${datalake.createdAt}`);
+  console.log(`  ${chalk.gray("updated:")}    ${datalake.updatedAt}`);
+  if (datalake.usage) printUsage(datalake.usage);
+  printAcl(datalake.acl);
+  if (datalake.errorMessage) {
+    console.log();
+    console.log(`  ${chalk.red("error:")} ${datalake.errorMessage}`);
+  }
+}
+export {
+  formatBytes,
+  formatStatus,
+  printDatalakeDetail,
+  printDatalakeRow
+};
+//# sourceMappingURL=formatters.mjs.map

package/dist/actions/datalake/formatters.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/actions/datalake/formatters.ts"],"sourcesContent":["import type {\n  DatalakeDescriptor, DatalakeStatus, DatalakeUsage, RateLimitOverrides,\n} from '@xylabs/aries-datalake-core'\nimport chalk from 'chalk'\n\nconst STATUS_COLORS: Record<DatalakeStatus, (s: string) => string> = {\n  pending: chalk.gray,\n  provisioning: chalk.yellow,\n  ready: chalk.green,\n  resizing: chalk.yellow,\n  deprovisioning: chalk.yellow,\n  deleted: chalk.gray,\n  error: chalk.red,\n}\n\nexport function formatBytes(bytes: number): string {\n  if (bytes < 1024) return `${bytes} B`\n  if (bytes < 1024 ** 2) return `${(bytes / 1024).toFixed(1)} KB`\n  if (bytes < 1024 ** 3) return `${(bytes / 1024 ** 2).toFixed(1)} MB`\n  if (bytes < 1024 ** 4) return `${(bytes / 1024 ** 3).toFixed(1)} GB`\n  return `${(bytes / 1024 ** 4).toFixed(1)} TB`\n}\n\nexport function formatStatus(status: DatalakeStatus): string {\n  const colorize = STATUS_COLORS[status] ?? chalk.white\n  return colorize(status)\n}\n\nexport function printDatalakeRow(datalake: DatalakeDescriptor): void {\n  const size = datalake.config.sizeBytes ? formatBytes(datalake.config.sizeBytes) : '—'\n  const name = chalk.white(datalake.name.padEnd(20))\n  const tier = chalk.cyan(datalake.config.tier.padEnd(8))\n  const region = chalk.gray((datalake.config.region ?? '—').padEnd(12))\n  const status = formatStatus(datalake.status).padEnd(14)\n  console.log(`  ${name} ${tier} ${region} ${size.padStart(8)}  ${status}`)\n}\n\nfunction printRateLimits(limits: RateLimitOverrides): void {\n  const parts: string[] = []\n  if (limits.authenticatedPerMinute !== undefined) parts.push(`auth=${limits.authenticatedPerMinute}/min`)\n  if (limits.anonymousPerMinute !== undefined) parts.push(`anon=${limits.anonymousPerMinute}/min`)\n  if (limits.burstFactor !== undefined) parts.push(`burst=${limits.burstFactor}x`)\n  if (parts.length > 0) {\n    console.log(`  ${chalk.gray('limits:')}     ${parts.join(' ')}`)\n  }\n}\n\nfunction printUsage(usage: DatalakeUsage): void {\n  console.log()\n  console.log(chalk.cyan('  usage'))\n  console.log(`    ${chalk.gray('payloads:')}   ${usage.payloadCount}`)\n  console.log(`    ${chalk.gray('stored:')}     ${formatBytes(usage.bytesStored)} / ${formatBytes(usage.bytesStoredLimit)}`)\n  console.log(`    ${chalk.gray('reads 24h:')}  ${usage.readsLast24h}`)\n  console.log(`    ${chalk.gray('writes 24h:')} ${usage.writesLast24h}`)\n}\n\nfunction printAcl(acl: DatalakeDescriptor['acl']): void {\n  if (acl.length === 0) return\n  console.log()\n  console.log(chalk.cyan('  access'))\n  for (const entry of acl) {\n    const principal = entry.principal === 'public' ? chalk.yellow('public') : entry.principal\n    console.log(`    ${principal.padEnd(24)} ${chalk.magenta(entry.role)}  ${chalk.gray(entry.grantedAt)}`)\n  }\n}\n\nexport function printDatalakeDetail(datalake: DatalakeDescriptor): void {\n  console.log(chalk.cyan(`\\n${datalake.name}`))\n  console.log(`  ${chalk.gray('id:')}         ${datalake.id}`)\n  console.log(`  ${chalk.gray('status:')}     ${formatStatus(datalake.status)}`)\n  if (datalake.url) {\n    console.log(`  ${chalk.gray('url:')}        ${datalake.url}`)\n  }\n  console.log(`  ${chalk.gray('owner:')}      ${datalake.ownerId}`)\n  console.log(`  ${chalk.gray('tier:')}       ${datalake.config.tier}`)\n  console.log(`  ${chalk.gray('region:')}     ${datalake.config.region ?? '—'}`)\n  console.log(`  ${chalk.gray('size:')}       ${datalake.config.sizeBytes ? formatBytes(datalake.config.sizeBytes) : '—'}`)\n  console.log(`  ${chalk.gray('iops:')}       ${datalake.config.iops ?? '—'}`)\n  console.log(`  ${chalk.gray('retention:')}  ${datalake.config.retentionDays ?? 'forever'}`)\n  if (datalake.config.verifyHashes) {\n    console.log(`  ${chalk.gray('verify:')}     ${chalk.green('hashes enforced')}`)\n  }\n  if (datalake.config.rateLimits) printRateLimits(datalake.config.rateLimits)\n  console.log(`  ${chalk.gray('created:')}    ${datalake.createdAt}`)\n  console.log(`  ${chalk.gray('updated:')}    ${datalake.updatedAt}`)\n  if (datalake.usage) printUsage(datalake.usage)\n  printAcl(datalake.acl)\n  if (datalake.errorMessage) {\n    console.log()\n    console.log(`  ${chalk.red('error:')} ${datalake.errorMessage}`)\n  }\n}\n"],"mappings":";AAGA,OAAO,WAAW;AAElB,IAAM,gBAA+D;AAAA,EACnE,SAAS,MAAM;AAAA,EACf,cAAc,MAAM;AAAA,EACpB,OAAO,MAAM;AAAA,EACb,UAAU,MAAM;AAAA,EAChB,gBAAgB,MAAM;AAAA,EACtB,SAAS,MAAM;AAAA,EACf,OAAO,MAAM;AACf;AAEO,SAAS,YAAY,OAAuB;AACjD,MAAI,QAAQ,KAAM,QAAO,GAAG,KAAK;AACjC,MAAI,QAAQ,QAAQ,EAAG,QAAO,IAAI,QAAQ,MAAM,QAAQ,CAAC,CAAC;AAC1D,MAAI,QAAQ,QAAQ,EAAG,QAAO,IAAI,QAAQ,QAAQ,GAAG,QAAQ,CAAC,CAAC;AAC/D,MAAI,QAAQ,QAAQ,EAAG,QAAO,IAAI,QAAQ,QAAQ,GAAG,QAAQ,CAAC,CAAC;AAC/D,SAAO,IAAI,QAAQ,QAAQ,GAAG,QAAQ,CAAC,CAAC;AAC1C;AAEO,SAAS,aAAa,QAAgC;AAC3D,QAAM,WAAW,cAAc,MAAM,KAAK,MAAM;AAChD,SAAO,SAAS,MAAM;AACxB;AAEO,SAAS,iBAAiB,UAAoC;AACnE,QAAM,OAAO,SAAS,OAAO,YAAY,YAAY,SAAS,OAAO,SAAS,IAAI;AAClF,QAAM,OAAO,MAAM,MAAM,SAAS,KAAK,OAAO,EAAE,CAAC;AACjD,QAAM,OAAO,MAAM,KAAK,SAAS,OAAO,KAAK,OAAO,CAAC,CAAC;AACtD,QAAM,SAAS,MAAM,MAAM,SAAS,OAAO,UAAU,UAAK,OAAO,EAAE,CAAC;AACpE,QAAM,SAAS,aAAa,SAAS,MAAM,EAAE,OAAO,EAAE;AACtD,UAAQ,IAAI,KAAK,IAAI,IAAI,IAAI,IAAI,MAAM,IAAI,KAAK,SAAS,CAAC,CAAC,KAAK,MAAM,EAAE;AAC1E;AAEA,SAAS,gBAAgB,QAAkC;AACzD,QAAM,QAAkB,CAAC;AACzB,MAAI,OAAO,2BAA2B,OAAW,OAAM,KAAK,QAAQ,OAAO,sBAAsB,MAAM;AACvG,MAAI,OAAO,uBAAuB,OAAW,OAAM,KAAK,QAAQ,OAAO,kBAAkB,MAAM;AAC/F,MAAI,OAAO,gBAAgB,OAAW,OAAM,KAAK,SAAS,OAAO,WAAW,GAAG;AAC/E,MAAI,MAAM,SAAS,GAAG;AACpB,YAAQ,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,QAAQ,MAAM,KAAK,GAAG,CAAC,EAAE;AAAA,EACjE;AACF;AAEA,SAAS,WAAW,OAA4B;AAC9C,UAAQ,IAAI;AACZ,UAAQ,IAAI,MAAM,KAAK,SAAS,CAAC;AACjC,UAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,CAAC,MAAM,MAAM,YAAY,EAAE;AACpE,UAAQ,IAAI,OAAO,MAAM,KAAK,SAAS,CAAC,QAAQ,YAAY,MAAM,WAAW,CAAC,MAAM,YAAY,MAAM,gBAAgB,CAAC,EAAE;AACzH,UAAQ,IAAI,OAAO,MAAM,KAAK,YAAY,CAAC,KAAK,MAAM,YAAY,EAAE;AACpE,UAAQ,IAAI,OAAO,MAAM,KAAK,aAAa,CAAC,IAAI,MAAM,aAAa,EAAE;AACvE;AAEA,SAAS,SAAS,KAAsC;AACtD,MAAI,IAAI,WAAW,EAAG;AACtB,UAAQ,IAAI;AACZ,UAAQ,IAAI,MAAM,KAAK,UAAU,CAAC;AAClC,aAAW,SAAS,KAAK;AACvB,UAAM,YAAY,MAAM,cAAc,WAAW,MAAM,OAAO,QAAQ,IAAI,MAAM;AAChF,YAAQ,IAAI,OAAO,UAAU,OAAO,EAAE,CAAC,IAAI,MAAM,QAAQ,MAAM,IAAI,CAAC,KAAK,MAAM,KAAK,MAAM,SAAS,CAAC,EAAE;AAAA,EACxG;AACF;AAEO,SAAS,oBAAoB,UAAoC;AACtE,UAAQ,IAAI,MAAM,KAAK;AAAA,EAAK,SAAS,IAAI,EAAE,CAAC;AAC5C,UAAQ,IAAI,KAAK,MAAM,KAAK,KAAK,CAAC,YAAY,SAAS,EAAE,EAAE;AAC3D,UAAQ,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,QAAQ,aAAa,SAAS,MAAM,CAAC,EAAE;AAC7E,MAAI,SAAS,KAAK;AAChB,YAAQ,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,WAAW,SAAS,GAAG,EAAE;AAAA,EAC9D;AACA,UAAQ,IAAI,KAAK,MAAM,KAAK,QAAQ,CAAC,SAAS,SAAS,OAAO,EAAE;AAChE,UAAQ,IAAI,KAAK,MAAM,KAAK,OAAO,CAAC,UAAU,SAAS,OAAO,IAAI,EAAE;AACpE,UAAQ,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,QAAQ,SAAS,OAAO,UAAU,QAAG,EAAE;AAC7E,UAAQ,IAAI,KAAK,MAAM,KAAK,OAAO,CAAC,UAAU,SAAS,OAAO,YAAY,YAAY,SAAS,OAAO,SAAS,IAAI,QAAG,EAAE;AACxH,UAAQ,IAAI,KAAK,MAAM,KAAK,OAAO,CAAC,UAAU,SAAS,OAAO,QAAQ,QAAG,EAAE;AAC3E,UAAQ,IAAI,KAAK,MAAM,KAAK,YAAY,CAAC,KAAK,SAAS,OAAO,iBAAiB,SAAS,EAAE;AAC1F,MAAI,SAAS,OAAO,cAAc;AAChC,YAAQ,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,QAAQ,MAAM,MAAM,iBAAiB,CAAC,EAAE;AAAA,EAChF;AACA,MAAI,SAAS,OAAO,WAAY,iBAAgB,SAAS,OAAO,UAAU;AAC1E,UAAQ,IAAI,KAAK,MAAM,KAAK,UAAU,CAAC,OAAO,SAAS,SAAS,EAAE;AAClE,UAAQ,IAAI,KAAK,MAAM,KAAK,UAAU,CAAC,OAAO,SAAS,SAAS,EAAE;AAClE,MAAI,SAAS,MAAO,YAAW,SAAS,KAAK;AAC7C,WAAS,SAAS,GAAG;AACrB,MAAI,SAAS,cAAc;AACzB,YAAQ,IAAI;AACZ,YAAQ,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,SAAS,YAAY,EAAE;AAAA,EACjE;AACF;","names":[]}

package/dist/actions/datalake/grantAccess.mjs

@@ -0,0 +1,116 @@
+// src/actions/datalake/grantAccess.ts
+import { createDatalakeClient } from "@xylabs/aries-datalake-client";
+import chalk2 from "chalk";
+
+// src/actions/datalake/formatters.ts
+import chalk from "chalk";
+var STATUS_COLORS = {
+  pending: chalk.gray,
+  provisioning: chalk.yellow,
+  ready: chalk.green,
+  resizing: chalk.yellow,
+  deprovisioning: chalk.yellow,
+  deleted: chalk.gray,
+  error: chalk.red
+};
+function formatBytes(bytes) {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 ** 2) return `${(bytes / 1024).toFixed(1)} KB`;
+  if (bytes < 1024 ** 3) return `${(bytes / 1024 ** 2).toFixed(1)} MB`;
+  if (bytes < 1024 ** 4) return `${(bytes / 1024 ** 3).toFixed(1)} GB`;
+  return `${(bytes / 1024 ** 4).toFixed(1)} TB`;
+}
+function formatStatus(status) {
+  const colorize = STATUS_COLORS[status] ?? chalk.white;
+  return colorize(status);
+}
+function printRateLimits(limits) {
+  const parts = [];
+  if (limits.authenticatedPerMinute !== void 0) parts.push(`auth=${limits.authenticatedPerMinute}/min`);
+  if (limits.anonymousPerMinute !== void 0) parts.push(`anon=${limits.anonymousPerMinute}/min`);
+  if (limits.burstFactor !== void 0) parts.push(`burst=${limits.burstFactor}x`);
+  if (parts.length > 0) {
+    console.log(`  ${chalk.gray("limits:")}     ${parts.join(" ")}`);
+  }
+}
+function printUsage(usage) {
+  console.log();
+  console.log(chalk.cyan("  usage"));
+  console.log(`    ${chalk.gray("payloads:")}   ${usage.payloadCount}`);
+  console.log(`    ${chalk.gray("stored:")}     ${formatBytes(usage.bytesStored)} / ${formatBytes(usage.bytesStoredLimit)}`);
+  console.log(`    ${chalk.gray("reads 24h:")}  ${usage.readsLast24h}`);
+  console.log(`    ${chalk.gray("writes 24h:")} ${usage.writesLast24h}`);
+}
+function printAcl(acl) {
+  if (acl.length === 0) return;
+  console.log();
+  console.log(chalk.cyan("  access"));
+  for (const entry of acl) {
+    const principal = entry.principal === "public" ? chalk.yellow("public") : entry.principal;
+    console.log(`    ${principal.padEnd(24)} ${chalk.magenta(entry.role)}  ${chalk.gray(entry.grantedAt)}`);
+  }
+}
+function printDatalakeDetail(datalake) {
+  console.log(chalk.cyan(`
+${datalake.name}`));
+  console.log(`  ${chalk.gray("id:")}         ${datalake.id}`);
+  console.log(`  ${chalk.gray("status:")}     ${formatStatus(datalake.status)}`);
+  if (datalake.url) {
+    console.log(`  ${chalk.gray("url:")}        ${datalake.url}`);
+  }
+  console.log(`  ${chalk.gray("owner:")}      ${datalake.ownerId}`);
+  console.log(`  ${chalk.gray("tier:")}       ${datalake.config.tier}`);
+  console.log(`  ${chalk.gray("region:")}     ${datalake.config.region ?? "\u2014"}`);
+  console.log(`  ${chalk.gray("size:")}       ${datalake.config.sizeBytes ? formatBytes(datalake.config.sizeBytes) : "\u2014"}`);
+  console.log(`  ${chalk.gray("iops:")}       ${datalake.config.iops ?? "\u2014"}`);
+  console.log(`  ${chalk.gray("retention:")}  ${datalake.config.retentionDays ?? "forever"}`);
+  if (datalake.config.verifyHashes) {
+    console.log(`  ${chalk.gray("verify:")}     ${chalk.green("hashes enforced")}`);
+  }
+  if (datalake.config.rateLimits) printRateLimits(datalake.config.rateLimits);
+  console.log(`  ${chalk.gray("created:")}    ${datalake.createdAt}`);
+  console.log(`  ${chalk.gray("updated:")}    ${datalake.updatedAt}`);
+  if (datalake.usage) printUsage(datalake.usage);
+  printAcl(datalake.acl);
+  if (datalake.errorMessage) {
+    console.log();
+    console.log(`  ${chalk.red("error:")} ${datalake.errorMessage}`);
+  }
+}
+
+// src/actions/datalake/resolveTarget.ts
+import { getDefaultDatalake } from "@xylabs/aries-datalake-client";
+function resolveTarget(argValue) {
+  const target = argValue ?? getDefaultDatalake();
+  if (!target) {
+    throw new Error(
+      "No datalake specified and no default set. Pass <name> or run `aries datalake use <name>`."
+    );
+  }
+  return target;
+}
+
+// src/actions/datalake/grantAccess.ts
+async function grantAccess(options) {
+  const client = createDatalakeClient();
+  const target = resolveTarget(options.idOrName);
+  if (options.principal === "public" && options.role === "runner" && !options.confirmPublic) {
+    console.log(chalk2.yellow(
+      "Granting `public runner` makes anonymous writes possible. Re-run with --confirm-public to proceed."
+    ));
+    process.exitCode = 1;
+    return;
+  }
+  const descriptor = await client.describe(target);
+  const updated = await client.grant({
+    datalakeId: descriptor.id,
+    principal: options.principal,
+    role: options.role
+  });
+  console.log(chalk2.green(`granted ${options.role} to ${options.principal} on ${updated.name}`));
+  printDatalakeDetail(updated);
+}
+export {
+  grantAccess
+};
+//# sourceMappingURL=grantAccess.mjs.map

package/dist/actions/datalake/grantAccess.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/actions/datalake/grantAccess.ts","../../../src/actions/datalake/formatters.ts","../../../src/actions/datalake/resolveTarget.ts"],"sourcesContent":["import { createDatalakeClient } from '@xylabs/aries-datalake-client'\nimport type { DatalakePrincipal, DatalakeRole } from '@xylabs/aries-datalake-core'\nimport chalk from 'chalk'\n\nimport { printDatalakeDetail } from './formatters.ts'\nimport { resolveTarget } from './resolveTarget.ts'\n\nexport interface GrantAccessOptions {\n  idOrName?: string\n  principal: DatalakePrincipal\n  role: DatalakeRole\n  confirmPublic?: boolean\n}\n\nexport async function grantAccess(options: GrantAccessOptions): Promise<void> {\n  const client = createDatalakeClient()\n  const target = resolveTarget(options.idOrName)\n\n  if (options.principal === 'public' && options.role === 'runner' && !options.confirmPublic) {\n    console.log(chalk.yellow(\n      'Granting `public runner` makes anonymous writes possible. '\n      + 'Re-run with --confirm-public to proceed.',\n    ))\n    process.exitCode = 1\n    return\n  }\n\n  const descriptor = await client.describe(target)\n  const updated = await client.grant({\n    datalakeId: descriptor.id,\n    principal: options.principal,\n    role: options.role,\n  })\n  console.log(chalk.green(`granted ${options.role} to ${options.principal} on ${updated.name}`))\n  printDatalakeDetail(updated)\n}\n","import type {\n  DatalakeDescriptor, DatalakeStatus, DatalakeUsage, RateLimitOverrides,\n} from '@xylabs/aries-datalake-core'\nimport chalk from 'chalk'\n\nconst STATUS_COLORS: Record<DatalakeStatus, (s: string) => string> = {\n  pending: chalk.gray,\n  provisioning: chalk.yellow,\n  ready: chalk.green,\n  resizing: chalk.yellow,\n  deprovisioning: chalk.yellow,\n  deleted: chalk.gray,\n  error: chalk.red,\n}\n\nexport function formatBytes(bytes: number): string {\n  if (bytes < 1024) return `${bytes} B`\n  if (bytes < 1024 ** 2) return `${(bytes / 1024).toFixed(1)} KB`\n  if (bytes < 1024 ** 3) return `${(bytes / 1024 ** 2).toFixed(1)} MB`\n  if (bytes < 1024 ** 4) return `${(bytes / 1024 ** 3).toFixed(1)} GB`\n  return `${(bytes / 1024 ** 4).toFixed(1)} TB`\n}\n\nexport function formatStatus(status: DatalakeStatus): string {\n  const colorize = STATUS_COLORS[status] ?? chalk.white\n  return colorize(status)\n}\n\nexport function printDatalakeRow(datalake: DatalakeDescriptor): void {\n  const size = datalake.config.sizeBytes ? formatBytes(datalake.config.sizeBytes) : '—'\n  const name = chalk.white(datalake.name.padEnd(20))\n  const tier = chalk.cyan(datalake.config.tier.padEnd(8))\n  const region = chalk.gray((datalake.config.region ?? '—').padEnd(12))\n  const status = formatStatus(datalake.status).padEnd(14)\n  console.log(`  ${name} ${tier} ${region} ${size.padStart(8)}  ${status}`)\n}\n\nfunction printRateLimits(limits: RateLimitOverrides): void {\n  const parts: string[] = []\n  if (limits.authenticatedPerMinute !== undefined) parts.push(`auth=${limits.authenticatedPerMinute}/min`)\n  if (limits.anonymousPerMinute !== undefined) parts.push(`anon=${limits.anonymousPerMinute}/min`)\n  if (limits.burstFactor !== undefined) parts.push(`burst=${limits.burstFactor}x`)\n  if (parts.length > 0) {\n    console.log(`  ${chalk.gray('limits:')}     ${parts.join(' ')}`)\n  }\n}\n\nfunction printUsage(usage: DatalakeUsage): void {\n  console.log()\n  console.log(chalk.cyan('  usage'))\n  console.log(`    ${chalk.gray('payloads:')}   ${usage.payloadCount}`)\n  console.log(`    ${chalk.gray('stored:')}     ${formatBytes(usage.bytesStored)} / ${formatBytes(usage.bytesStoredLimit)}`)\n  console.log(`    ${chalk.gray('reads 24h:')}  ${usage.readsLast24h}`)\n  console.log(`    ${chalk.gray('writes 24h:')} ${usage.writesLast24h}`)\n}\n\nfunction printAcl(acl: DatalakeDescriptor['acl']): void {\n  if (acl.length === 0) return\n  console.log()\n  console.log(chalk.cyan('  access'))\n  for (const entry of acl) {\n    const principal = entry.principal === 'public' ? chalk.yellow('public') : entry.principal\n    console.log(`    ${principal.padEnd(24)} ${chalk.magenta(entry.role)}  ${chalk.gray(entry.grantedAt)}`)\n  }\n}\n\nexport function printDatalakeDetail(datalake: DatalakeDescriptor): void {\n  console.log(chalk.cyan(`\\n${datalake.name}`))\n  console.log(`  ${chalk.gray('id:')}         ${datalake.id}`)\n  console.log(`  ${chalk.gray('status:')}     ${formatStatus(datalake.status)}`)\n  if (datalake.url) {\n    console.log(`  ${chalk.gray('url:')}        ${datalake.url}`)\n  }\n  console.log(`  ${chalk.gray('owner:')}      ${datalake.ownerId}`)\n  console.log(`  ${chalk.gray('tier:')}       ${datalake.config.tier}`)\n  console.log(`  ${chalk.gray('region:')}     ${datalake.config.region ?? '—'}`)\n  console.log(`  ${chalk.gray('size:')}       ${datalake.config.sizeBytes ? formatBytes(datalake.config.sizeBytes) : '—'}`)\n  console.log(`  ${chalk.gray('iops:')}       ${datalake.config.iops ?? '—'}`)\n  console.log(`  ${chalk.gray('retention:')}  ${datalake.config.retentionDays ?? 'forever'}`)\n  if (datalake.config.verifyHashes) {\n    console.log(`  ${chalk.gray('verify:')}     ${chalk.green('hashes enforced')}`)\n  }\n  if (datalake.config.rateLimits) printRateLimits(datalake.config.rateLimits)\n  console.log(`  ${chalk.gray('created:')}    ${datalake.createdAt}`)\n  console.log(`  ${chalk.gray('updated:')}    ${datalake.updatedAt}`)\n  if (datalake.usage) printUsage(datalake.usage)\n  printAcl(datalake.acl)\n  if (datalake.errorMessage) {\n    console.log()\n    console.log(`  ${chalk.red('error:')} ${datalake.errorMessage}`)\n  }\n}\n","import { getDefaultDatalake } from '@xylabs/aries-datalake-client'\n\n/**\n * Resolves the target datalake name/id for commands that take an optional\n * argument. Falls back to the one set via `aries datalake use`.\n */\nexport function resolveTarget(argValue: string | undefined): string {\n  const target = argValue ?? getDefaultDatalake()\n  if (!target) {\n    throw new Error(\n      'No datalake specified and no default set. '\n      + 'Pass <name> or run `aries datalake use <name>`.',\n    )\n  }\n  return target\n}\n"],"mappings":";AAAA,SAAS,4BAA4B;AAErC,OAAOA,YAAW;;;ACClB,OAAO,WAAW;AAElB,IAAM,gBAA+D;AAAA,EACnE,SAAS,MAAM;AAAA,EACf,cAAc,MAAM;AAAA,EACpB,OAAO,MAAM;AAAA,EACb,UAAU,MAAM;AAAA,EAChB,gBAAgB,MAAM;AAAA,EACtB,SAAS,MAAM;AAAA,EACf,OAAO,MAAM;AACf;AAEO,SAAS,YAAY,OAAuB;AACjD,MAAI,QAAQ,KAAM,QAAO,GAAG,KAAK;AACjC,MAAI,QAAQ,QAAQ,EAAG,QAAO,IAAI,QAAQ,MAAM,QAAQ,CAAC,CAAC;AAC1D,MAAI,QAAQ,QAAQ,EAAG,QAAO,IAAI,QAAQ,QAAQ,GAAG,QAAQ,CAAC,CAAC;AAC/D,MAAI,QAAQ,QAAQ,EAAG,QAAO,IAAI,QAAQ,QAAQ,GAAG,QAAQ,CAAC,CAAC;AAC/D,SAAO,IAAI,QAAQ,QAAQ,GAAG,QAAQ,CAAC,CAAC;AAC1C;AAEO,SAAS,aAAa,QAAgC;AAC3D,QAAM,WAAW,cAAc,MAAM,KAAK,MAAM;AAChD,SAAO,SAAS,MAAM;AACxB;AAWA,SAAS,gBAAgB,QAAkC;AACzD,QAAM,QAAkB,CAAC;AACzB,MAAI,OAAO,2BAA2B,OAAW,OAAM,KAAK,QAAQ,OAAO,sBAAsB,MAAM;AACvG,MAAI,OAAO,uBAAuB,OAAW,OAAM,KAAK,QAAQ,OAAO,kBAAkB,MAAM;AAC/F,MAAI,OAAO,gBAAgB,OAAW,OAAM,KAAK,SAAS,OAAO,WAAW,GAAG;AAC/E,MAAI,MAAM,SAAS,GAAG;AACpB,YAAQ,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,QAAQ,MAAM,KAAK,GAAG,CAAC,EAAE;AAAA,EACjE;AACF;AAEA,SAAS,WAAW,OAA4B;AAC9C,UAAQ,IAAI;AACZ,UAAQ,IAAI,MAAM,KAAK,SAAS,CAAC;AACjC,UAAQ,IAAI,OAAO,MAAM,KAAK,WAAW,CAAC,MAAM,MAAM,YAAY,EAAE;AACpE,UAAQ,IAAI,OAAO,MAAM,KAAK,SAAS,CAAC,QAAQ,YAAY,MAAM,WAAW,CAAC,MAAM,YAAY,MAAM,gBAAgB,CAAC,EAAE;AACzH,UAAQ,IAAI,OAAO,MAAM,KAAK,YAAY,CAAC,KAAK,MAAM,YAAY,EAAE;AACpE,UAAQ,IAAI,OAAO,MAAM,KAAK,aAAa,CAAC,IAAI,MAAM,aAAa,EAAE;AACvE;AAEA,SAAS,SAAS,KAAsC;AACtD,MAAI,IAAI,WAAW,EAAG;AACtB,UAAQ,IAAI;AACZ,UAAQ,IAAI,MAAM,KAAK,UAAU,CAAC;AAClC,aAAW,SAAS,KAAK;AACvB,UAAM,YAAY,MAAM,cAAc,WAAW,MAAM,OAAO,QAAQ,IAAI,MAAM;AAChF,YAAQ,IAAI,OAAO,UAAU,OAAO,EAAE,CAAC,IAAI,MAAM,QAAQ,MAAM,IAAI,CAAC,KAAK,MAAM,KAAK,MAAM,SAAS,CAAC,EAAE;AAAA,EACxG;AACF;AAEO,SAAS,oBAAoB,UAAoC;AACtE,UAAQ,IAAI,MAAM,KAAK;AAAA,EAAK,SAAS,IAAI,EAAE,CAAC;AAC5C,UAAQ,IAAI,KAAK,MAAM,KAAK,KAAK,CAAC,YAAY,SAAS,EAAE,EAAE;AAC3D,UAAQ,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,QAAQ,aAAa,SAAS,MAAM,CAAC,EAAE;AAC7E,MAAI,SAAS,KAAK;AAChB,YAAQ,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,WAAW,SAAS,GAAG,EAAE;AAAA,EAC9D;AACA,UAAQ,IAAI,KAAK,MAAM,KAAK,QAAQ,CAAC,SAAS,SAAS,OAAO,EAAE;AAChE,UAAQ,IAAI,KAAK,MAAM,KAAK,OAAO,CAAC,UAAU,SAAS,OAAO,IAAI,EAAE;AACpE,UAAQ,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,QAAQ,SAAS,OAAO,UAAU,QAAG,EAAE;AAC7E,UAAQ,IAAI,KAAK,MAAM,KAAK,OAAO,CAAC,UAAU,SAAS,OAAO,YAAY,YAAY,SAAS,OAAO,SAAS,IAAI,QAAG,EAAE;AACxH,UAAQ,IAAI,KAAK,MAAM,KAAK,OAAO,CAAC,UAAU,SAAS,OAAO,QAAQ,QAAG,EAAE;AAC3E,UAAQ,IAAI,KAAK,MAAM,KAAK,YAAY,CAAC,KAAK,SAAS,OAAO,iBAAiB,SAAS,EAAE;AAC1F,MAAI,SAAS,OAAO,cAAc;AAChC,YAAQ,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,QAAQ,MAAM,MAAM,iBAAiB,CAAC,EAAE;AAAA,EAChF;AACA,MAAI,SAAS,OAAO,WAAY,iBAAgB,SAAS,OAAO,UAAU;AAC1E,UAAQ,IAAI,KAAK,MAAM,KAAK,UAAU,CAAC,OAAO,SAAS,SAAS,EAAE;AAClE,UAAQ,IAAI,KAAK,MAAM,KAAK,UAAU,CAAC,OAAO,SAAS,SAAS,EAAE;AAClE,MAAI,SAAS,MAAO,YAAW,SAAS,KAAK;AAC7C,WAAS,SAAS,GAAG;AACrB,MAAI,SAAS,cAAc;AACzB,YAAQ,IAAI;AACZ,YAAQ,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,SAAS,YAAY,EAAE;AAAA,EACjE;AACF;;;AC3FA,SAAS,0BAA0B;AAM5B,SAAS,cAAc,UAAsC;AAClE,QAAM,SAAS,YAAY,mBAAmB;AAC9C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACA,SAAO;AACT;;;AFDA,eAAsB,YAAY,SAA4C;AAC5E,QAAM,SAAS,qBAAqB;AACpC,QAAM,SAAS,cAAc,QAAQ,QAAQ;AAE7C,MAAI,QAAQ,cAAc,YAAY,QAAQ,SAAS,YAAY,CAAC,QAAQ,eAAe;AACzF,YAAQ,IAAIC,OAAM;AAAA,MAChB;AAAA,IAEF,CAAC;AACD,YAAQ,WAAW;AACnB;AAAA,EACF;AAEA,QAAM,aAAa,MAAM,OAAO,SAAS,MAAM;AAC/C,QAAM,UAAU,MAAM,OAAO,MAAM;AAAA,IACjC,YAAY,WAAW;AAAA,IACvB,WAAW,QAAQ;AAAA,IACnB,MAAM,QAAQ;AAAA,EAChB,CAAC;AACD,UAAQ,IAAIA,OAAM,MAAM,WAAW,QAAQ,IAAI,OAAO,QAAQ,SAAS,OAAO,QAAQ,IAAI,EAAE,CAAC;AAC7F,sBAAoB,OAAO;AAC7B;","names":["chalk","chalk"]}

package/dist/actions/datalake/index.mjs

@@ -0,0 +1,361 @@
+// src/actions/datalake/createDatalake.ts
+import { createDatalakeClient } from "@xylabs/aries-datalake-client";
+import chalk2 from "chalk";
+
+// src/actions/datalake/formatters.ts
+import chalk from "chalk";
+var STATUS_COLORS = {
+  pending: chalk.gray,
+  provisioning: chalk.yellow,
+  ready: chalk.green,
+  resizing: chalk.yellow,
+  deprovisioning: chalk.yellow,
+  deleted: chalk.gray,
+  error: chalk.red
+};
+function formatBytes(bytes) {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 ** 2) return `${(bytes / 1024).toFixed(1)} KB`;
+  if (bytes < 1024 ** 3) return `${(bytes / 1024 ** 2).toFixed(1)} MB`;
+  if (bytes < 1024 ** 4) return `${(bytes / 1024 ** 3).toFixed(1)} GB`;
+  return `${(bytes / 1024 ** 4).toFixed(1)} TB`;
+}
+function formatStatus(status) {
+  const colorize = STATUS_COLORS[status] ?? chalk.white;
+  return colorize(status);
+}
+function printDatalakeRow(datalake) {
+  const size = datalake.config.sizeBytes ? formatBytes(datalake.config.sizeBytes) : "\u2014";
+  const name = chalk.white(datalake.name.padEnd(20));
+  const tier = chalk.cyan(datalake.config.tier.padEnd(8));
+  const region = chalk.gray((datalake.config.region ?? "\u2014").padEnd(12));
+  const status = formatStatus(datalake.status).padEnd(14);
+  console.log(`  ${name} ${tier} ${region} ${size.padStart(8)}  ${status}`);
+}
+function printRateLimits(limits) {
+  const parts = [];
+  if (limits.authenticatedPerMinute !== void 0) parts.push(`auth=${limits.authenticatedPerMinute}/min`);
+  if (limits.anonymousPerMinute !== void 0) parts.push(`anon=${limits.anonymousPerMinute}/min`);
+  if (limits.burstFactor !== void 0) parts.push(`burst=${limits.burstFactor}x`);
+  if (parts.length > 0) {
+    console.log(`  ${chalk.gray("limits:")}     ${parts.join(" ")}`);
+  }
+}
+function printUsage(usage) {
+  console.log();
+  console.log(chalk.cyan("  usage"));
+  console.log(`    ${chalk.gray("payloads:")}   ${usage.payloadCount}`);
+  console.log(`    ${chalk.gray("stored:")}     ${formatBytes(usage.bytesStored)} / ${formatBytes(usage.bytesStoredLimit)}`);
+  console.log(`    ${chalk.gray("reads 24h:")}  ${usage.readsLast24h}`);
+  console.log(`    ${chalk.gray("writes 24h:")} ${usage.writesLast24h}`);
+}
+function printAcl(acl) {
+  if (acl.length === 0) return;
+  console.log();
+  console.log(chalk.cyan("  access"));
+  for (const entry of acl) {
+    const principal = entry.principal === "public" ? chalk.yellow("public") : entry.principal;
+    console.log(`    ${principal.padEnd(24)} ${chalk.magenta(entry.role)}  ${chalk.gray(entry.grantedAt)}`);
+  }
+}
+function printDatalakeDetail(datalake) {
+  console.log(chalk.cyan(`
+${datalake.name}`));
+  console.log(`  ${chalk.gray("id:")}         ${datalake.id}`);
+  console.log(`  ${chalk.gray("status:")}     ${formatStatus(datalake.status)}`);
+  if (datalake.url) {
+    console.log(`  ${chalk.gray("url:")}        ${datalake.url}`);
+  }
+  console.log(`  ${chalk.gray("owner:")}      ${datalake.ownerId}`);
+  console.log(`  ${chalk.gray("tier:")}       ${datalake.config.tier}`);
+  console.log(`  ${chalk.gray("region:")}     ${datalake.config.region ?? "\u2014"}`);
+  console.log(`  ${chalk.gray("size:")}       ${datalake.config.sizeBytes ? formatBytes(datalake.config.sizeBytes) : "\u2014"}`);
+  console.log(`  ${chalk.gray("iops:")}       ${datalake.config.iops ?? "\u2014"}`);
+  console.log(`  ${chalk.gray("retention:")}  ${datalake.config.retentionDays ?? "forever"}`);
+  if (datalake.config.verifyHashes) {
+    console.log(`  ${chalk.gray("verify:")}     ${chalk.green("hashes enforced")}`);
+  }
+  if (datalake.config.rateLimits) printRateLimits(datalake.config.rateLimits);
+  console.log(`  ${chalk.gray("created:")}    ${datalake.createdAt}`);
+  console.log(`  ${chalk.gray("updated:")}    ${datalake.updatedAt}`);
+  if (datalake.usage) printUsage(datalake.usage);
+  printAcl(datalake.acl);
+  if (datalake.errorMessage) {
+    console.log();
+    console.log(`  ${chalk.red("error:")} ${datalake.errorMessage}`);
+  }
+}
+
+// src/actions/datalake/parseSize.ts
+var SIZE_UNITS = {
+  b: 1,
+  kb: 1024,
+  mb: 1024 ** 2,
+  gb: 1024 ** 3,
+  tb: 1024 ** 4
+};
+function parseSize(input) {
+  const match = /^(\d+(?:\.\d+)?)\s*([a-zA-Z]+)?$/.exec(input.trim());
+  if (!match) throw new Error(`Invalid size: ${input}`);
+  const value = Number(match[1]);
+  const unitRaw = (match[2] ?? "b").toLowerCase();
+  const unit = SIZE_UNITS[unitRaw];
+  if (unit === void 0) throw new Error(`Unknown size unit: ${match[2]}`);
+  return Math.round(value * unit);
+}
+
+// src/actions/datalake/createDatalake.ts
+function buildRateLimits(options) {
+  if (options.rateAuthPerMinute === void 0 && options.rateAnonPerMinute === void 0 && options.rateBurstFactor === void 0) return void 0;
+  return {
+    authenticatedPerMinute: options.rateAuthPerMinute,
+    anonymousPerMinute: options.rateAnonPerMinute,
+    burstFactor: options.rateBurstFactor
+  };
+}
+async function createDatalake(options) {
+  const client = createDatalakeClient();
+  const config = {
+    tier: options.tier,
+    sizeBytes: options.size === void 0 ? void 0 : parseSize(options.size),
+    iops: options.iops,
+    region: options.region,
+    retentionDays: options.retentionDays,
+    verifyHashes: options.verifyHashes,
+    rateLimits: buildRateLimits(options)
+  };
+  console.log(chalk2.gray(`provisioning ${options.name} (tier=${options.tier})...`));
+  const descriptor = await client.create({ name: options.name, config });
+  console.log(chalk2.green(`created ${descriptor.name} (${descriptor.id})`));
+  printDatalakeDetail(descriptor);
+}
+
+// src/actions/datalake/describeDatalake.ts
+import { createDatalakeClient as createDatalakeClient3 } from "@xylabs/aries-datalake-client";
+import chalk3 from "chalk";
+
+// src/actions/datalake/payloads/mintAndConnect.ts
+import { createDatalakeClient as createDatalakeClient2, RestPayloadsClient } from "@xylabs/aries-datalake-client";
+import { XyoPayloadsClient } from "@xylabs/aries-datalake-xl1-adapter";
+
+// src/actions/datalake/resolveTarget.ts
+import { getDefaultDatalake } from "@xylabs/aries-datalake-client";
+function resolveTarget(argValue) {
+  const target = argValue ?? getDefaultDatalake();
+  if (!target) {
+    throw new Error(
+      "No datalake specified and no default set. Pass <name> or run `aries datalake use <name>`."
+    );
+  }
+  return target;
+}
+
+// src/actions/datalake/payloads/mintAndConnect.ts
+async function mintAndConnect(options) {
+  const controlClient = createDatalakeClient2();
+  const target = resolveTarget(options.idOrName);
+  const descriptor = await controlClient.describe(target);
+  if (!descriptor.url) {
+    throw new Error(`Datalake ${descriptor.name} has no URL yet (status=${descriptor.status})`);
+  }
+  const token = await controlClient.mintToken({
+    datalakeId: descriptor.id,
+    role: options.role,
+    ttlSeconds: options.ttlSeconds ?? 3600
+  });
+  const clientOptions = {
+    baseUrl: token.url,
+    datalakeId: descriptor.id,
+    authToken: token.token
+  };
+  return {
+    client: options.useXl1Sdk ? new XyoPayloadsClient(clientOptions) : new RestPayloadsClient(clientOptions),
+    datalakeName: descriptor.name,
+    datalakeId: descriptor.id,
+    url: token.url,
+    transport: options.useXl1Sdk ? "xl1-sdk" : "native"
+  };
+}
+
+// src/actions/datalake/describeDatalake.ts
+async function describeDatalake(idOrName) {
+  const client = createDatalakeClient3();
+  const target = resolveTarget(idOrName);
+  const descriptor = await client.describe(target);
+  printDatalakeDetail(descriptor);
+  if (descriptor.status !== "ready") return;
+  try {
+    const connection = await mintAndConnect({ idOrName: target, role: "viewer" });
+    const usage = await connection.client.usage();
+    printLiveUsage(usage);
+  } catch (error) {
+    console.log();
+    console.log(chalk3.gray(
+      `  (live quota unavailable: ${error instanceof Error ? error.message : String(error)})`
+    ));
+  }
+}
+function printLiveUsage(usage) {
+  console.log();
+  console.log(chalk3.cyan("  live"));
+  console.log(`    ${chalk3.gray("payloads:")}       ${usage.payloadCount}`);
+  const limits = usage.rateLimits;
+  if (limits?.authenticated) {
+    const { remaining, limit } = limits.authenticated;
+    console.log(`    ${chalk3.gray("auth quota:")}     ${remaining}/${limit}`);
+  }
+  if (limits?.anonymous) {
+    const { remaining, limit } = limits.anonymous;
+    console.log(`    ${chalk3.gray("anon quota:")}     ${remaining}/${limit}`);
+  }
+}
+
+// src/actions/datalake/destroyDatalake.ts
+import { createDatalakeClient as createDatalakeClient4 } from "@xylabs/aries-datalake-client";
+import chalk4 from "chalk";
+async function destroyDatalake(options) {
+  const client = createDatalakeClient4();
+  const target = resolveTarget(options.idOrName);
+  if (!options.force) {
+    console.log(chalk4.yellow(
+      `Refusing to destroy ${target} without --force. This operation permanently deletes the datalake and all its payloads.`
+    ));
+    process.exitCode = 1;
+    return;
+  }
+  await client.destroy(target);
+  console.log(chalk4.green(`destroyed ${target}`));
+}
+
+// src/actions/datalake/grantAccess.ts
+import { createDatalakeClient as createDatalakeClient5 } from "@xylabs/aries-datalake-client";
+import chalk5 from "chalk";
+async function grantAccess(options) {
+  const client = createDatalakeClient5();
+  const target = resolveTarget(options.idOrName);
+  if (options.principal === "public" && options.role === "runner" && !options.confirmPublic) {
+    console.log(chalk5.yellow(
+      "Granting `public runner` makes anonymous writes possible. Re-run with --confirm-public to proceed."
+    ));
+    process.exitCode = 1;
+    return;
+  }
+  const descriptor = await client.describe(target);
+  const updated = await client.grant({
+    datalakeId: descriptor.id,
+    principal: options.principal,
+    role: options.role
+  });
+  console.log(chalk5.green(`granted ${options.role} to ${options.principal} on ${updated.name}`));
+  printDatalakeDetail(updated);
+}
+
+// src/actions/datalake/listDatalakes.ts
+import { createDatalakeClient as createDatalakeClient6 } from "@xylabs/aries-datalake-client";
+import chalk6 from "chalk";
+async function listDatalakes() {
+  const client = createDatalakeClient6();
+  const datalakes = await client.list();
+  if (datalakes.length === 0) {
+    console.log(chalk6.yellow("No datalakes yet. Create one with `aries datalake create <name>`."));
+    return;
+  }
+  console.log(
+    chalk6.gray("  ") + chalk6.gray("name".padEnd(20)) + " " + chalk6.gray("tier".padEnd(8)) + " " + chalk6.gray("region".padEnd(12)) + " " + chalk6.gray("    size") + "  " + chalk6.gray("status")
+  );
+  for (const datalake of datalakes) {
+    printDatalakeRow(datalake);
+  }
+}
+
+// src/actions/datalake/login.ts
+import { saveCredentials } from "@xylabs/aries-datalake-client";
+import chalk7 from "chalk";
+async function login(options) {
+  const baseUrl = options.baseUrl ?? process.env.ARIES_DATALAKE_API;
+  const token = options.token ?? process.env.ARIES_DATALAKE_TOKEN;
+  if (!baseUrl || !token) {
+    console.log(chalk7.yellow(
+      "P0 login requires --base-url and --token (or ARIES_DATALAKE_API + ARIES_DATALAKE_TOKEN). OAuth device-flow lands in P1."
+    ));
+    process.exitCode = 1;
+    return;
+  }
+  saveCredentials({ baseUrl, authToken: token });
+  console.log(chalk7.green(`credentials saved for ${baseUrl}`));
+}
+
+// src/actions/datalake/logout.ts
+import { clearCredentials } from "@xylabs/aries-datalake-client";
+import chalk8 from "chalk";
+async function logout() {
+  clearCredentials();
+  console.log(chalk8.green("signed out"));
+}
+
+// src/actions/datalake/mintToken.ts
+import { createDatalakeClient as createDatalakeClient7 } from "@xylabs/aries-datalake-client";
+import chalk9 from "chalk";
+async function mintToken(options) {
+  const client = createDatalakeClient7();
+  const target = resolveTarget(options.idOrName);
+  const descriptor = await client.describe(target);
+  const token = await client.mintToken({
+    datalakeId: descriptor.id,
+    role: options.role,
+    ttlSeconds: options.ttlSeconds
+  });
+  console.log(chalk9.cyan("datalake token"));
+  console.log(`  ${chalk9.gray("url:")}    ${token.url}`);
+  console.log(`  ${chalk9.gray("role:")}   ${token.role}`);
+  console.log(`  ${chalk9.gray("exp:")}    ${token.expiresAt}`);
+  console.log();
+  console.log(token.token);
+}
+
+// src/actions/datalake/revokeAccess.ts
+import { createDatalakeClient as createDatalakeClient8 } from "@xylabs/aries-datalake-client";
+import chalk10 from "chalk";
+async function revokeAccess(options) {
+  const client = createDatalakeClient8();
+  const target = resolveTarget(options.idOrName);
+  const descriptor = await client.describe(target);
+  const updated = await client.revoke({
+    datalakeId: descriptor.id,
+    principal: options.principal
+  });
+  console.log(chalk10.green(`revoked access for ${options.principal} on ${updated.name}`));
+  printDatalakeDetail(updated);
+}
+
+// src/actions/datalake/useDatalake.ts
+import {
+  clearDefaultDatalake,
+  createDatalakeClient as createDatalakeClient9,
+  setDefaultDatalake
+} from "@xylabs/aries-datalake-client";
+import chalk11 from "chalk";
+async function useDatalake(name) {
+  if (!name) {
+    clearDefaultDatalake();
+    console.log(chalk11.green("cleared default datalake"));
+    return;
+  }
+  const client = createDatalakeClient9();
+  const descriptor = await client.describe(name);
+  setDefaultDatalake(descriptor.name, descriptor.id);
+  console.log(chalk11.green(`default datalake set to ${descriptor.name} (${descriptor.id})`));
+}
+export {
+  createDatalake,
+  describeDatalake,
+  destroyDatalake,
+  grantAccess,
+  listDatalakes,
+  login,
+  logout,
+  mintToken,
+  revokeAccess,
+  useDatalake
+};
+//# sourceMappingURL=index.mjs.map