@altertable/data-app 0.59.1 → 0.61.0

package/dist/chunks/{contract-tkkc28tg.js → contract-zr4s2g7m.js}

@@ -4,10 +4,10 @@ import {
   createMessageClient2,
   localFrameBridge,
   getDataAppTransport2
-} from "./contract-mb5nfzwg.js";
+} from "./contract-d9skd1n7.js";
 import {
   navigationUpdateRoute2
-} from "./contract-jksbmt5q.js";
+} from "./contract-ehk50k7e.js";
 import {
   PARENT_PARAM,
   validLocation
@@ -105,9 +105,9 @@ function attachNavigation(frame, virtual, connection) {
     if (disposed)
       return;
     unsubscribe?.();
-    const messages = createMessageClient2({ "navigation.update": navigationUpdateRoute2 }, bridge.request);
+    const messages = createMessageClient2({ "navigation:update": navigationUpdateRoute2 }, bridge.request);
     function sendUpdate(update) {
-      messages.request("navigation.update", update).catch(() => {});
+      messages.request("navigation:update", update).catch(() => {});
     }
     function receiveState(state) {
       if (!state || typeof state !== "object" || !validLocation(state))
@@ -210,4 +210,4 @@ function createDataClient2(options = {}) {
 
 export { createDataAppNavigation2, getDataAppNavigation2, createDataClient2 };
 
-//# debugId=235551129B40A86C64756E2164756E21
+//# debugId=604C308B1E4C235964756E2164756E21

package/dist/chunks/{contract-tkkc28tg.js.map → contract-zr4s2g7m.js.map}

@@ -3,10 +3,10 @@
   "sources": ["../src/client/location.ts", "../src/client/navigation.ts", "../src/client/index.ts"],
   "sourcesContent": [
     "import { PARENT_PARAM, validLocation } from '@/src/core/bridge';\n\nexport type AppLocation = { search: string; hash: string };\nexport type DataAppLocation = {\n  snapshot(): AppLocation;\n  subscribe(listener: () => void): () => void;\n  update(location: AppLocation, mode?: 'push' | 'replace'): void;\n};\n\n/** Opaque sandboxes keep app state in memory; URL frames retain their real URL for HMR. */\nexport function createAppLocation(\n  frame: Window,\n  virtual: boolean,\n  publish: (location: AppLocation, mode: 'push' | 'replace') => void\n) {\n  let state: AppLocation = { search: '', hash: '' };\n  let disposed = false;\n  const listeners = new Set<() => void>();\n\n  function notify() {\n    for (const listener of listeners) listener();\n  }\n\n  function snapshot(): AppLocation {\n    if (virtual) return state;\n    const url = new URL(frame.location.href);\n    url.searchParams.delete(PARENT_PARAM);\n    if (state.search !== url.search || state.hash !== url.hash)\n      state = { search: url.search, hash: url.hash };\n\n    return state;\n  }\n\n  function apply(next: AppLocation) {\n    const previous = snapshot();\n    if (previous.search === next.search && previous.hash === next.hash) return;\n    if (virtual) state = next;\n    else {\n      const url = new URL(frame.location.href);\n      const parent = url.searchParams.get(PARENT_PARAM);\n      url.search = next.search;\n      if (parent) url.searchParams.set(PARENT_PARAM, parent);\n      url.hash = next.hash;\n      frame.history.replaceState(null, '', url);\n      frame.dispatchEvent(new Event('popstate'));\n    }\n    if (virtual) notify();\n  }\n\n  const location: DataAppLocation = {\n    snapshot,\n    subscribe(listener) {\n      listeners.add(listener);\n      if (!virtual) frame.addEventListener('popstate', listener);\n\n      return () => {\n        listeners.delete(listener);\n        frame.removeEventListener('popstate', listener);\n      };\n    },\n    update(next, mode = 'replace') {\n      if (disposed) return;\n      if (!validLocation(next)) throw new Error('Invalid app location.');\n      const before = snapshot();\n      if (before.search === next.search && before.hash === next.hash) return;\n      apply(next);\n      publish(next, mode);\n    },\n  };\n\n  function dispose() {\n    disposed = true;\n    for (const listener of listeners)\n      frame.removeEventListener('popstate', listener);\n    listeners.clear();\n  }\n\n  return { location, apply, dispose };\n}\n",
-    "import { createAppLocation, type DataAppLocation } from '@/src/client/location';\nimport { validLocation } from '@/src/core/bridge';\nimport {\n  navigationUpdateRoute,\n  type NavigationUpdate,\n} from '@/src/core/messages';\nimport { createMessageClient } from '@/src/client/messages';\nimport {\n  getDataAppTransport,\n  localFrameBridge,\n  type IframeTransport,\n} from '@/src/client/iframe';\n\nexport type DataAppNavigation = DataAppLocation & {\n  /** Publish URL changes made outside the adapter, including the document title. */\n  publish(mode?: 'push' | 'replace'): void;\n  dispose(): void;\n};\n\n/** Attach app URL behavior to an already authenticated bridge. */\nexport function createDataAppNavigation({\n  bridge,\n  window: frame = window,\n}: {\n  bridge: IframeTransport;\n  window?: Window;\n}): DataAppNavigation {\n  return attachNavigation(frame, bridge.mode === 'bundle', bridge).navigation;\n}\n\nfunction attachNavigation(\n  frame: Window,\n  virtual: boolean,\n  connection: IframeTransport | Promise<IframeTransport>\n) {\n  let disposed = false;\n  let unsubscribe: (() => void) | undefined;\n  let send: ((update: NavigationUpdate) => void) | undefined;\n  let pendingUpdate: NavigationUpdate | undefined;\n  const { location, apply, dispose } = createAppLocation(\n    frame,\n    virtual,\n    publish\n  );\n\n  function publish(\n    location: { search: string; hash: string },\n    mode: 'push' | 'replace'\n  ) {\n    const update = { ...location, mode, title: frame.document.title };\n    if (send) send(update);\n    else pendingUpdate = update;\n  }\n\n  function attach(bridge: IframeTransport) {\n    if (disposed) return;\n    unsubscribe?.();\n    const messages = createMessageClient(\n      { 'navigation.update': navigationUpdateRoute },\n      bridge.request\n    );\n\n    function sendUpdate(update: NavigationUpdate) {\n      void messages.request('navigation.update', update).catch(() => {});\n    }\n\n    function receiveState(state: unknown) {\n      if (!state || typeof state !== 'object' || !validLocation(state)) return;\n      pendingUpdate = undefined;\n      apply(state as { search: string; hash: string });\n    }\n\n    send = sendUpdate;\n    unsubscribe = bridge.subscribe(receiveState);\n    receiveState(bridge.snapshot());\n    if (pendingUpdate) {\n      sendUpdate(pendingUpdate);\n      pendingUpdate = undefined;\n    }\n  }\n\n  if ('then' in connection) void connection.then(attach).catch(() => {});\n  else attach(connection);\n\n  const navigation: DataAppNavigation = {\n    ...location,\n    publish(mode = 'replace') {\n      if (!disposed) publish(location.snapshot(), mode);\n    },\n    dispose() {\n      disposed = true;\n      unsubscribe?.();\n      dispose();\n      send = undefined;\n      pendingUpdate = undefined;\n    },\n  };\n\n  return {\n    navigation,\n    attach,\n    isDisposed() {\n      return disposed;\n    },\n  };\n}\n\nconst navigationKey = Symbol.for('altertable.appNavigation');\ntype NavigationWindow = Window & {\n  [navigationKey]?: ReturnType<typeof attachNavigation> & {\n    bridge?: IframeTransport;\n  };\n};\n\n/** URL controls attach navigation on demand; bootstrap and data-only clients do not. */\nexport function getDataAppNavigation(\n  frame: Window = window\n): DataAppNavigation | undefined {\n  const target = frame as NavigationWindow;\n  const bridge = getDataAppTransport(frame);\n  const cached = target[navigationKey]?.isDisposed()\n    ? undefined\n    : target[navigationKey];\n  if (cached) {\n    if (bridge && cached.bridge !== bridge) {\n      cached.attach(bridge);\n      cached.bridge = bridge;\n    }\n\n    return cached.navigation;\n  }\n  if (bridge) {\n    const adapter = attachNavigation(frame, bridge.mode === 'bundle', bridge);\n    target[navigationKey] = { bridge, ...adapter };\n\n    return adapter.navigation;\n  }\n  const preview = localFrameBridge(frame);\n  if (!preview?.connect) return undefined;\n  const connection = preview.connect();\n  const adapter = attachNavigation(frame, false, connection);\n  const entry = {\n    ...adapter,\n    bridge: undefined as IframeTransport | undefined,\n  };\n  target[navigationKey] = entry;\n  void connection\n    .then(bridge => {\n      entry.bridge = bridge;\n    })\n    .catch(() => {});\n\n  return adapter.navigation;\n}\n",
+    "import { createAppLocation, type DataAppLocation } from '@/src/client/location';\nimport { validLocation } from '@/src/core/bridge';\nimport {\n  navigationUpdateRoute,\n  type NavigationUpdate,\n} from '@/src/core/messages';\nimport { createMessageClient } from '@/src/client/messages';\nimport {\n  getDataAppTransport,\n  localFrameBridge,\n  type IframeTransport,\n} from '@/src/client/iframe';\n\nexport type DataAppNavigation = DataAppLocation & {\n  /** Publish URL changes made outside the adapter, including the document title. */\n  publish(mode?: 'push' | 'replace'): void;\n  dispose(): void;\n};\n\n/** Attach app URL behavior to an already authenticated bridge. */\nexport function createDataAppNavigation({\n  bridge,\n  window: frame = window,\n}: {\n  bridge: IframeTransport;\n  window?: Window;\n}): DataAppNavigation {\n  return attachNavigation(frame, bridge.mode === 'bundle', bridge).navigation;\n}\n\nfunction attachNavigation(\n  frame: Window,\n  virtual: boolean,\n  connection: IframeTransport | Promise<IframeTransport>\n) {\n  let disposed = false;\n  let unsubscribe: (() => void) | undefined;\n  let send: ((update: NavigationUpdate) => void) | undefined;\n  let pendingUpdate: NavigationUpdate | undefined;\n  const { location, apply, dispose } = createAppLocation(\n    frame,\n    virtual,\n    publish\n  );\n\n  function publish(\n    location: { search: string; hash: string },\n    mode: 'push' | 'replace'\n  ) {\n    const update = { ...location, mode, title: frame.document.title };\n    if (send) send(update);\n    else pendingUpdate = update;\n  }\n\n  function attach(bridge: IframeTransport) {\n    if (disposed) return;\n    unsubscribe?.();\n    const messages = createMessageClient(\n      { 'navigation:update': navigationUpdateRoute },\n      bridge.request\n    );\n\n    function sendUpdate(update: NavigationUpdate) {\n      void messages.request('navigation:update', update).catch(() => {});\n    }\n\n    function receiveState(state: unknown) {\n      if (!state || typeof state !== 'object' || !validLocation(state)) return;\n      pendingUpdate = undefined;\n      apply(state as { search: string; hash: string });\n    }\n\n    send = sendUpdate;\n    unsubscribe = bridge.subscribe(receiveState);\n    receiveState(bridge.snapshot());\n    if (pendingUpdate) {\n      sendUpdate(pendingUpdate);\n      pendingUpdate = undefined;\n    }\n  }\n\n  if ('then' in connection) void connection.then(attach).catch(() => {});\n  else attach(connection);\n\n  const navigation: DataAppNavigation = {\n    ...location,\n    publish(mode = 'replace') {\n      if (!disposed) publish(location.snapshot(), mode);\n    },\n    dispose() {\n      disposed = true;\n      unsubscribe?.();\n      dispose();\n      send = undefined;\n      pendingUpdate = undefined;\n    },\n  };\n\n  return {\n    navigation,\n    attach,\n    isDisposed() {\n      return disposed;\n    },\n  };\n}\n\nconst navigationKey = Symbol.for('altertable.appNavigation');\ntype NavigationWindow = Window & {\n  [navigationKey]?: ReturnType<typeof attachNavigation> & {\n    bridge?: IframeTransport;\n  };\n};\n\n/** URL controls attach navigation on demand; bootstrap and data-only clients do not. */\nexport function getDataAppNavigation(\n  frame: Window = window\n): DataAppNavigation | undefined {\n  const target = frame as NavigationWindow;\n  const bridge = getDataAppTransport(frame);\n  const cached = target[navigationKey]?.isDisposed()\n    ? undefined\n    : target[navigationKey];\n  if (cached) {\n    if (bridge && cached.bridge !== bridge) {\n      cached.attach(bridge);\n      cached.bridge = bridge;\n    }\n\n    return cached.navigation;\n  }\n  if (bridge) {\n    const adapter = attachNavigation(frame, bridge.mode === 'bundle', bridge);\n    target[navigationKey] = { bridge, ...adapter };\n\n    return adapter.navigation;\n  }\n  const preview = localFrameBridge(frame);\n  if (!preview?.connect) return undefined;\n  const connection = preview.connect();\n  const adapter = attachNavigation(frame, false, connection);\n  const entry = {\n    ...adapter,\n    bridge: undefined as IframeTransport | undefined,\n  };\n  target[navigationKey] = entry;\n  void connection\n    .then(bridge => {\n      entry.bridge = bridge;\n    })\n    .catch(() => {});\n\n  return adapter.navigation;\n}\n",
     "/**\n * Typed clients for HTTP and iframe delivery; safe to import in the browser.\n * @module @altertable/data-app/client\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/client.md\n */\nimport {\n  createHttpTransport,\n  DataAppError,\n  type DataTransport,\n} from '@/src/client/transport';\nimport { localFrameBridge } from '@/src/client/iframe';\nexport {\n  createHttpTransport,\n  DataAppError,\n  type DataTransport,\n} from '@/src/client/transport';\nexport {\n  createIframeTransport,\n  installDataAppTransport,\n  getDataAppTransport,\n  type IframeTransport,\n} from '@/src/client/iframe';\nexport { createMessageClient } from '@/src/client/messages';\nimport type { DataOperations, DisclosedQuery } from '@/src/core/contract';\n\nexport type InputOf<T> = T extends { input: (value: unknown) => infer Input }\n  ? Input\n  : never;\nexport type OutputOf<T> = T extends { output: (value: unknown) => infer Output }\n  ? Output\n  : never;\n\n/**\n * Parsed operation data and query evidence. `queries` is present only when SQL disclosure is\n * allowed.\n */\nexport type DataResponse<Output, Input = unknown> = {\n  data: Output;\n  /** The exact browser input that produced this response. Never infer it from current controls. */\n  input: Input;\n  requestId: string;\n  queriedAt: string;\n  queryIds: string[];\n  queries?: DisclosedQuery[];\n};\n\nexport type DataClient<Operations extends DataOperations> = {\n  query<Name extends keyof Operations & string>(\n    name: Name,\n    input: InputOf<Operations[Name]>,\n    options?: { signal?: AbortSignal }\n  ): Promise<\n    DataResponse<OutputOf<Operations[Name]>, InputOf<Operations[Name]>>\n  >;\n};\n\n/** Browser client for named operations; it sends inputs, never SQL or lakehouse credentials. */\nexport function createDataClient<Operations extends DataOperations>(\n  options: {\n    transport?: DataTransport;\n    endpoint?: string;\n    fetch?: typeof fetch;\n  } = {}\n): DataClient<Operations> {\n  const http = createHttpTransport(options);\n\n  return {\n    async query(name, input, { signal } = {}) {\n      const transport =\n        options.transport ??\n        (options.endpoint !== undefined || options.fetch !== undefined\n          ? http\n          : (localFrameBridge()?.transport ?? http));\n      const response = await transport(name, input, signal);\n      const ok = response.status >= 200 && response.status < 300;\n      let body: Omit<\n        DataResponse<OutputOf<Operations[typeof name]>>,\n        'input'\n      > & {\n        error?: { code: string; message: string; requestId?: string };\n      };\n      try {\n        const parsed: unknown = response.body;\n        if (\n          parsed === null ||\n          typeof parsed !== 'object' ||\n          Array.isArray(parsed)\n        )\n          throw new Error('Invalid response envelope.');\n        body = parsed as typeof body;\n      } catch (error) {\n        if (signal?.aborted) throw error;\n        throw new DataAppError(\n          ok ? 'The data response was invalid.' : 'Could not load data.',\n          ok ? 'invalid_response' : 'request_failed'\n        );\n      }\n      if (!ok)\n        throw new DataAppError(\n          body.error?.message ?? 'Could not load data.',\n          body.error?.code ?? 'request_failed',\n          body.error?.requestId\n        );\n\n      return { ...body, input };\n    },\n  };\n}\n\nexport type { DataAppLocation, AppLocation } from '@/src/client/location';\n\nexport {\n  createDataAppNavigation,\n  getDataAppNavigation,\n  type DataAppNavigation,\n} from '@/src/client/navigation';\n"
   ],
   "mappings": ";;;;;;;;;;;;;;;AAUO,SAAS,iBAAiB,CAC/B,OACA,SACA,SACA;AAAA,EACA,IAAI,QAAqB,EAAE,QAAQ,IAAI,MAAM,GAAG;AAAA,EAChD,IAAI,WAAW;AAAA,EACf,MAAM,YAAY,IAAI;AAAA,EAEtB,SAAS,MAAM,GAAG;AAAA,IAChB,WAAW,YAAY;AAAA,MAAW,SAAS;AAAA;AAAA,EAG7C,SAAS,QAAQ,GAAgB;AAAA,IAC/B,IAAI;AAAA,MAAS,OAAO;AAAA,IACpB,MAAM,MAAM,IAAI,IAAI,MAAM,SAAS,IAAI;AAAA,IACvC,IAAI,aAAa,OAAO,YAAY;AAAA,IACpC,IAAI,MAAM,WAAW,IAAI,UAAU,MAAM,SAAS,IAAI;AAAA,MACpD,QAAQ,EAAE,QAAQ,IAAI,QAAQ,MAAM,IAAI,KAAK;AAAA,IAE/C,OAAO;AAAA;AAAA,EAGT,SAAS,KAAK,CAAC,MAAmB;AAAA,IAChC,MAAM,WAAW,SAAS;AAAA,IAC1B,IAAI,SAAS,WAAW,KAAK,UAAU,SAAS,SAAS,KAAK;AAAA,MAAM;AAAA,IACpE,IAAI;AAAA,MAAS,QAAQ;AAAA,IAChB;AAAA,MACH,MAAM,MAAM,IAAI,IAAI,MAAM,SAAS,IAAI;AAAA,MACvC,MAAM,SAAS,IAAI,aAAa,IAAI,YAAY;AAAA,MAChD,IAAI,SAAS,KAAK;AAAA,MAClB,IAAI;AAAA,QAAQ,IAAI,aAAa,IAAI,cAAc,MAAM;AAAA,MACrD,IAAI,OAAO,KAAK;AAAA,MAChB,MAAM,QAAQ,aAAa,MAAM,IAAI,GAAG;AAAA,MACxC,MAAM,cAAc,IAAI,MAAM,UAAU,CAAC;AAAA;AAAA,IAE3C,IAAI;AAAA,MAAS,OAAO;AAAA;AAAA,EAGtB,MAAM,WAA4B;AAAA,IAChC;AAAA,IACA,SAAS,CAAC,UAAU;AAAA,MAClB,UAAU,IAAI,QAAQ;AAAA,MACtB,IAAI,CAAC;AAAA,QAAS,MAAM,iBAAiB,YAAY,QAAQ;AAAA,MAEzD,OAAO,MAAM;AAAA,QACX,UAAU,OAAO,QAAQ;AAAA,QACzB,MAAM,oBAAoB,YAAY,QAAQ;AAAA;AAAA;AAAA,IAGlD,MAAM,CAAC,MAAM,OAAO,WAAW;AAAA,MAC7B,IAAI;AAAA,QAAU;AAAA,MACd,IAAI,CAAC,cAAc,IAAI;AAAA,QAAG,MAAM,IAAI,MAAM,uBAAuB;AAAA,MACjE,MAAM,SAAS,SAAS;AAAA,MACxB,IAAI,OAAO,WAAW,KAAK,UAAU,OAAO,SAAS,KAAK;AAAA,QAAM;AAAA,MAChE,MAAM,IAAI;AAAA,MACV,QAAQ,MAAM,IAAI;AAAA;AAAA,EAEtB;AAAA,EAEA,SAAS,OAAO,GAAG;AAAA,IACjB,WAAW;AAAA,IACX,WAAW,YAAY;AAAA,MACrB,MAAM,oBAAoB,YAAY,QAAQ;AAAA,IAChD,UAAU,MAAM;AAAA;AAAA,EAGlB,OAAO,EAAE,UAAU,OAAO,QAAQ;AAAA;;;ACzD7B,SAAS,wBAAuB;AAAA,EACrC;AAAA,EACA,QAAQ,QAAQ;AAAA,GAII;AAAA,EACpB,OAAO,iBAAiB,OAAO,OAAO,SAAS,UAAU,MAAM,EAAE;AAAA;AAGnE,SAAS,gBAAgB,CACvB,OACA,SACA,YACA;AAAA,EACA,IAAI,WAAW;AAAA,EACf,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,QAAQ,UAAU,OAAO,YAAY,kBACnC,OACA,SACA,OACF;AAAA,EAEA,SAAS,OAAO,CACd,UACA,MACA;AAAA,IACA,MAAM,SAAS,KAAK,UAAU,MAAM,OAAO,MAAM,SAAS,MAAM;AAAA,IAChE,IAAI;AAAA,MAAM,KAAK,MAAM;AAAA,IAChB;AAAA,sBAAgB;AAAA;AAAA,EAGvB,SAAS,MAAM,CAAC,QAAyB;AAAA,IACvC,IAAI;AAAA,MAAU;AAAA,IACd,cAAc;AAAA,IACd,MAAM,WAAW,qBACf,EAAE,qBAAqB,uBAAsB,GAC7C,OAAO,OACT;AAAA,IAEA,SAAS,UAAU,CAAC,QAA0B;AAAA,MACvC,SAAS,QAAQ,qBAAqB,MAAM,EAAE,MAAM,MAAM,EAAE;AAAA;AAAA,IAGnE,SAAS,YAAY,CAAC,OAAgB;AAAA,MACpC,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,cAAc,KAAK;AAAA,QAAG;AAAA,MAClE,gBAAgB;AAAA,MAChB,MAAM,KAAyC;AAAA;AAAA,IAGjD,OAAO;AAAA,IACP,cAAc,OAAO,UAAU,YAAY;AAAA,IAC3C,aAAa,OAAO,SAAS,CAAC;AAAA,IAC9B,IAAI,eAAe;AAAA,MACjB,WAAW,aAAa;AAAA,MACxB,gBAAgB;AAAA,IAClB;AAAA;AAAA,EAGF,IAAI,UAAU;AAAA,IAAiB,WAAW,KAAK,MAAM,EAAE,MAAM,MAAM,EAAE;AAAA,EAChE;AAAA,WAAO,UAAU;AAAA,EAEtB,MAAM,aAAgC;AAAA,OACjC;AAAA,IACH,OAAO,CAAC,OAAO,WAAW;AAAA,MACxB,IAAI,CAAC;AAAA,QAAU,QAAQ,SAAS,SAAS,GAAG,IAAI;AAAA;AAAA,IAElD,OAAO,GAAG;AAAA,MACR,WAAW;AAAA,MACX,cAAc;AAAA,MACd,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,gBAAgB;AAAA;AAAA,EAEpB;AAAA,EAEA,OAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,UAAU,GAAG;AAAA,MACX,OAAO;AAAA;AAAA,EAEX;AAAA;AAGF,IAAM,gBAAgB,OAAO,IAAI,0BAA0B;AAQpD,SAAS,qBAAoB,CAClC,QAAgB,QACe;AAAA,EAC/B,MAAM,SAAS;AAAA,EACf,MAAM,SAAS,qBAAoB,KAAK;AAAA,EACxC,MAAM,SAAS,OAAO,gBAAgB,WAAW,IAC7C,YACA,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,IACV,IAAI,UAAU,OAAO,WAAW,QAAQ;AAAA,MACtC,OAAO,OAAO,MAAM;AAAA,MACpB,OAAO,SAAS;AAAA,IAClB;AAAA,IAEA,OAAO,OAAO;AAAA,EAChB;AAAA,EACA,IAAI,QAAQ;AAAA,IACV,MAAM,UAAU,iBAAiB,OAAO,OAAO,SAAS,UAAU,MAAM;AAAA,IACxE,OAAO,iBAAiB,EAAE,WAAW,QAAQ;AAAA,IAE7C,OAAO,QAAQ;AAAA,EACjB;AAAA,EACA,MAAM,UAAU,iBAAiB,KAAK;AAAA,EACtC,IAAI,CAAC,SAAS;AAAA,IAAS;AAAA,EACvB,MAAM,aAAa,QAAQ,QAAQ;AAAA,EACnC,MAAM,UAAU,iBAAiB,OAAO,OAAO,UAAU;AAAA,EACzD,MAAM,QAAQ;AAAA,OACT;AAAA,IACH,QAAQ;AAAA,EACV;AAAA,EACA,OAAO,iBAAiB;AAAA,EACnB,WACF,KAAK,YAAU;AAAA,IACd,MAAM,SAAS;AAAA,GAChB,EACA,MAAM,MAAM,EAAE;AAAA,EAEjB,OAAO,QAAQ;AAAA;;;AC/FV,SAAS,iBAAmD,CACjE,UAII,CAAC,GACmB;AAAA,EACxB,MAAM,OAAO,qBAAoB,OAAO;AAAA,EAExC,OAAO;AAAA,SACC,MAAK,CAAC,MAAM,SAAS,WAAW,CAAC,GAAG;AAAA,MACxC,MAAM,YACJ,QAAQ,cACP,QAAQ,aAAa,aAAa,QAAQ,UAAU,YACjD,OACC,iBAAiB,GAAG,aAAa;AAAA,MACxC,MAAM,WAAW,MAAM,UAAU,MAAM,OAAO,MAAM;AAAA,MACpD,MAAM,KAAK,SAAS,UAAU,OAAO,SAAS,SAAS;AAAA,MACvD,IAAI;AAAA,MAMJ,IAAI;AAAA,QACF,MAAM,SAAkB,SAAS;AAAA,QACjC,IACE,WAAW,QACX,OAAO,WAAW,YAClB,MAAM,QAAQ,MAAM;AAAA,UAEpB,MAAM,IAAI,MAAM,4BAA4B;AAAA,QAC9C,OAAO;AAAA,QACP,OAAO,OAAO;AAAA,QACd,IAAI,QAAQ;AAAA,UAAS,MAAM;AAAA,QAC3B,MAAM,IAAI,cACR,KAAK,mCAAmC,wBACxC,KAAK,qBAAqB,gBAC5B;AAAA;AAAA,MAEF,IAAI,CAAC;AAAA,QACH,MAAM,IAAI,cACR,KAAK,OAAO,WAAW,wBACvB,KAAK,OAAO,QAAQ,kBACpB,KAAK,OAAO,SACd;AAAA,MAEF,OAAO,KAAK,MAAM,MAAM;AAAA;AAAA,EAE5B;AAAA;",
-  "debugId": "235551129B40A86C64756E2164756E21",
+  "debugId": "604C308B1E4C235964756E2164756E21",
   "names": []
 }

package/dist/client/index.js

@@ -2,7 +2,7 @@ import {
   createDataAppNavigation2,
   getDataAppNavigation2,
   createDataClient2
-} from "../chunks/contract-tkkc28tg.js";
+} from "../chunks/contract-zr4s2g7m.js";
 import {
   DataAppError2,
   createHttpTransport2,
@@ -10,8 +10,8 @@ import {
   createIframeTransport2,
   installDataAppTransport2,
   getDataAppTransport2
-} from "../chunks/contract-mb5nfzwg.js";
-import"../chunks/contract-jksbmt5q.js";
+} from "../chunks/contract-d9skd1n7.js";
+import"../chunks/contract-ehk50k7e.js";
 export {
   DataAppError2 as DataAppError,
   createDataAppNavigation2 as createDataAppNavigation,

package/dist/core/contract.js

@@ -25,7 +25,7 @@ import {
   defineDataQueryRoute2,
   navigationUpdateRoute2,
   dataAppRoutes2
-} from "../chunks/contract-jksbmt5q.js";
+} from "../chunks/contract-ehk50k7e.js";
 export {
   DataSourceError2 as DataSourceError,
   MessageRoutingError2 as MessageRoutingError,

package/dist/embed/index.js

@@ -1,12 +1,12 @@
-import"../chunks/contract-jksbmt5q.js";
+import"../chunks/contract-ehk50k7e.js";
 import {
   createIframeTransport2,
   installDataAppTransport2
-} from "../chunks/contract-mb5nfzwg.js";
+} from "../chunks/contract-d9skd1n7.js";
 import {
   attachDataAppBridge2,
   attachDataAppShell2
-} from "../chunks/contract-tqrf3ykr.js";
+} from "../chunks/contract-7gpsee0v.js";
 import {
   PARENT_PARAM
 } from "../chunks/contract-ryyf6dme.js";

package/dist/local.js.map

@@ -5,7 +5,7 @@
     "/**\n * Shared operation contracts and input/output validation for browser and server.\n * @module @altertable/data-app/contract\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/contract.md\n */\nimport { parseDate, today } from '@internationalized/date';\nimport { formatDateRange } from '@/src/core/format';\nimport { invariant } from '@/src/core/invariant';\n\nexport type QueryResult = {\n  columns: { name: string; type?: string }[];\n  rows: unknown[][];\n  queryId?: string;\n};\n\nexport function parseEmptyInput(value: unknown): Record<string, never> {\n  invariant(\n    typeof value === 'object' &&\n      value !== null &&\n      !Array.isArray(value) &&\n      Object.keys(value).length === 0,\n    'This operation takes no inputs.'\n  );\n\n  return {};\n}\n\nexport function parseTrue(value: unknown): true {\n  invariant(value === true, 'Expected a successful check.');\n\n  return true;\n}\n\nexport type DateRangeInput = { start: string; end: string };\nexport type DateRangeRequest = {\n  range: DateRangeInput;\n  comparison: DateRangeInput | null;\n};\n\n/** The immediately preceding, equally long set of calendar days. */\nexport function previousDateRange({\n  start,\n  end,\n}: DateRangeInput): DateRangeInput {\n  const first = parseDate(start);\n  const last = parseDate(end);\n  const days =\n    (last.toDate('UTC').getTime() - first.toDate('UTC').getTime()) /\n      86_400_000 +\n    1;\n  invariant(days >= 1, 'Date range must start before it ends.');\n  const previousEnd = first.subtract({ days: 1 });\n\n  return {\n    start: previousEnd.subtract({ days: days - 1 }).toString(),\n    end: previousEnd.toString(),\n  };\n}\n\nexport type ReportingPeriod =\n  | { kind: 'rolling'; amount: number; unit: 'hour' | 'day'; end: string }\n  | { kind: 'calendar'; start: string; end: string; timeZone: string };\n\nexport type DateRangeContractOptions = {\n  minDate?: string;\n  maxDate?: string | (() => string);\n  maxRangeDays: number;\n  timeZone: string;\n  completeDays?: boolean;\n};\n\n/** One source policy for the server parser, URL variable, and displayed reporting period. */\nexport function defineDateRangeContract(options: DateRangeContractOptions) {\n  invariant(\n    Number.isInteger(options.maxRangeDays) && options.maxRangeDays > 0,\n    'Date range needs a positive maxRangeDays.'\n  );\n  if (options.minDate) parseDate(options.minDate);\n  if (typeof options.maxDate === 'string') parseDate(options.maxDate);\n  today(options.timeZone);\n\n  function bounds() {\n    const latest = today(options.timeZone).subtract({\n      days: options.completeDays === false ? 0 : 1,\n    });\n    const sourceMax =\n      typeof options.maxDate === 'function'\n        ? options.maxDate()\n        : options.maxDate;\n    const maxDate =\n      sourceMax && parseDate(sourceMax).compare(latest) < 0\n        ? parseDate(sourceMax).toString()\n        : latest.toString();\n\n    return {\n      minDate: options.minDate,\n      maxDate,\n      maxRangeDays: options.maxRangeDays,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function period({ start, end }: DateRangeInput): ReportingPeriod {\n    return {\n      kind: 'calendar',\n      start,\n      end,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function describeInput(input: DateRangeInput) {\n    return `${formatDateRange(input)} ${options.timeZone}`;\n  }\n\n  function comparison(input: DateRangeInput): DateRangeInput | null {\n    const previous = previousDateRange(input);\n\n    return options.minDate && previous.start < options.minDate\n      ? null\n      : previous;\n  }\n\n  function request(value: unknown, compare = false): DateRangeRequest {\n    const range = parseDateRangeInput(value, bounds());\n    const previous = compare ? comparison(range) : null;\n    invariant(\n      !compare || previous,\n      'Comparison is outside available source coverage.'\n    );\n\n    return { range, comparison: previous };\n  }\n\n  function parseRequest(value: unknown): DateRangeRequest {\n    invariant(value && typeof value === 'object', 'Choose a date range.');\n    const input = value as Record<string, unknown>;\n    const parsed = request(input.range, input.comparison != null);\n    if (input.comparison != null) {\n      const supplied = parseDateRangeInput(input.comparison, bounds());\n      invariant(\n        supplied.start === parsed.comparison?.start &&\n          supplied.end === parsed.comparison?.end,\n        'Comparison must be the preceding equal-length range.'\n      );\n    }\n\n    return parsed;\n  }\n\n  return {\n    request,\n    parseRequest,\n    bounds,\n    parse(value: unknown) {\n      return parseDateRangeInput(value, bounds());\n    },\n    period,\n    comparison,\n    describeInput,\n    view: { period, describeInput },\n  };\n}\n\nexport type DateRangeContract = ReturnType<typeof defineDateRangeContract>;\n\n/** Validate calendar dates and a bounded inclusive range on the server. */\nexport function parseDateRangeInput(\n  value: unknown,\n  {\n    minDate,\n    maxDate,\n    maxRangeDays,\n  }: { minDate?: string; maxDate?: string; maxRangeDays: number }\n): DateRangeInput {\n  invariant(\n    value && typeof value === 'object' && !Array.isArray(value),\n    'Choose a date range.'\n  );\n  const { start, end } = value as Record<string, unknown>;\n\n  function day(input: unknown): number {\n    invariant(\n      typeof input === 'string' && /^\\d{4}-\\d{2}-\\d{2}$/.test(input),\n      'Dates must be YYYY-MM-DD.'\n    );\n    const timestamp = Date.parse(`${input}T00:00:00Z`);\n    invariant(\n      Number.isFinite(timestamp) &&\n        new Date(timestamp).toISOString().slice(0, 10) === input,\n      'Choose valid calendar dates.'\n    );\n\n    return timestamp;\n  }\n  const first = day(start);\n  const last = day(end);\n  invariant(\n    Number.isInteger(maxRangeDays) && maxRangeDays > 0,\n    'Maximum range days must be positive.'\n  );\n  invariant(\n    first <= last &&\n      (last - first) / 86_400_000 < maxRangeDays &&\n      (minDate === undefined || first >= day(minDate)) &&\n      (maxDate === undefined || last <= day(maxDate)),\n    `Choose up to ${maxRangeDays} days within the available range.`\n  );\n\n  return { start: start as string, end: end as string };\n}\n\n/** Accepts numeric strings from DuckDB; rejects negative, fractional, and unsafe integers. */\nexport function parseCount(value: unknown): number {\n  const number =\n    typeof value === 'number' || typeof value === 'string'\n      ? Number(value)\n      : NaN;\n  invariant(\n    Number.isSafeInteger(number) &&\n      number >= 0 &&\n      (typeof value !== 'string' || !!value.trim()),\n    'Invalid count in query result.'\n  );\n\n  return number;\n}\n\nexport function parseLabel(value: unknown, maxLength = 100): string {\n  invariant(\n    typeof value === 'string' && !!value && value.length <= maxLength,\n    'Invalid label in query result.'\n  );\n\n  return value;\n}\n\n/** Rejects missing or duplicate columns and rows whose width differs from the column list. */\nexport function rowsAsRecords(\n  result: QueryResult,\n  requiredColumns: readonly string[]\n): Record<string, unknown>[] {\n  const names = result.columns.map(column => column.name);\n  invariant(\n    new Set(names).size === names.length &&\n      requiredColumns.every(name => names.includes(name)),\n    'Query result columns do not match the expected shape.'\n  );\n\n  return result.rows.map(row => {\n    invariant(\n      row.length === names.length,\n      'Query result row has the wrong width.'\n    );\n\n    return Object.fromEntries(names.map((name, index) => [name, row[index]]));\n  });\n}\n\n/** One named statement an operation ran. Returned only when SQL disclosure is allowed. */\nexport type DisclosedQuery = {\n  name: string;\n  statement: string;\n  queryId?: string;\n};\n\nexport function defineQueryNames<const Names extends Record<string, string>>(\n  names: Names\n): Names {\n  const values = Object.values(names);\n  invariant(\n    values.every(name => !!name.trim()) &&\n      new Set(values).size === values.length,\n    'Query names must be nonempty and unique.'\n  );\n\n  return names;\n}\n\nexport class DataSourceError extends Error {\n  queryName?: string;\n\n  constructor(\n    public readonly reason:\n      | 'unauthorized'\n      | 'forbidden'\n      | 'rate_limited'\n      | 'query_rejected'\n      | 'unavailable',\n    public readonly status?: number\n  ) {\n    super(`Data source ${reason}${status ? ` (${status})` : ''}.`);\n    this.name = 'DataSourceError';\n  }\n}\n\n/** Server-only query interface supplied by a local or hosted adapter. */\nexport type Lakehouse = {\n  queryAll(\n    statement: string,\n    options: { limit: number; signal: AbortSignal; name?: string }\n  ): Promise<QueryResult>;\n};\n\nexport type OperationContext = { lakehouse: Lakehouse; signal: AbortSignal };\n\n/**\n * Both parsers run on the server before results cross the JSON boundary. Schema libraries can be\n * used inside either parser.\n */\nexport type DataOperation<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown) => Output;\n  run: (context: OperationContext, input: Input) => Promise<Output>;\n  checks: readonly Input[];\n  queryNames?: Readonly<Record<string, string>>;\n  policy: {\n    maxQueryRows: number;\n    maxDurationMs: number;\n    maxResponseBytes?: number;\n    exposeSql?: boolean;\n  };\n};\n\nexport type OperationQuery<Names extends Readonly<Record<string, string>>> = (\n  name: Names[keyof Names],\n  statement: string,\n  options?: { limit?: number }\n) => Promise<QueryResult>;\n\nexport function defineOperation<\n  Input,\n  Output,\n  const Names extends Readonly<Record<string, string>> = Record<string, never>,\n>(\n  operation: Omit<DataOperation<Input, Output>, 'run' | 'queryNames'> & {\n    queryNames?: Names;\n    run: (\n      context: OperationContext & { query: OperationQuery<NoInfer<Names>> },\n      input: Input\n    ) => Promise<Output>;\n  }\n): DataOperation<Input, Output> & { queryNames?: Names } {\n  invariant(\n    Array.isArray(operation.checks) &&\n      operation.checks.length > 0 &&\n      Number.isInteger(operation.policy.maxQueryRows) &&\n      operation.policy.maxQueryRows > 0 &&\n      Number.isInteger(operation.policy.maxDurationMs) &&\n      operation.policy.maxDurationMs > 0 &&\n      (operation.policy.maxResponseBytes === undefined ||\n        (Number.isInteger(operation.policy.maxResponseBytes) &&\n          operation.policy.maxResponseBytes > 0)),\n    'Each data operation needs check inputs and positive row and duration limits.'\n  );\n  if (operation.queryNames) defineQueryNames(operation.queryNames);\n  for (const input of operation.checks) operation.input(input);\n\n  return {\n    ...operation,\n    run(context, input) {\n      function query(\n        name: Names[keyof Names],\n        statement: string,\n        options?: { limit?: number }\n      ): Promise<QueryResult> {\n        invariant(\n          operation.queryNames &&\n            Object.values(operation.queryNames).includes(name),\n          `Unknown query name: ${name}.`\n        );\n\n        return context.lakehouse.queryAll(statement, {\n          name,\n          limit: options?.limit ?? operation.policy.maxQueryRows,\n          signal: context.signal,\n        });\n      }\n\n      return operation.run({ ...context, query }, input);\n    },\n  };\n}\n\nexport const connectionQueryNames = defineQueryNames({\n  connection: 'connection-check',\n});\n\n/** Success requires a bounded SQL query; it does not establish access to a particular dataset. */\nexport function connectionCheck(): DataOperation<Record<string, never>, true> {\n  return defineOperation({\n    input: parseEmptyInput,\n    output: parseTrue,\n    checks: [{}],\n    queryNames: connectionQueryNames,\n    policy: { maxQueryRows: 1, maxDurationMs: 15_000, exposeSql: true },\n    async run({ query }): Promise<true> {\n      await query(\n        connectionQueryNames.connection,\n        'SELECT 1 AS connection_check'\n      );\n\n      return true;\n    },\n  });\n}\n\nexport type DataOperations = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n    run: (context: OperationContext, input: never) => Promise<unknown>;\n    checks: readonly unknown[];\n    queryNames?: Readonly<Record<string, string>>;\n    policy: DataOperation<never, unknown>['policy'];\n  }\n>;\nexport {\n  dimensionFilter,\n  parseDimensionSelection,\n  parseFacetOptions,\n  dimensionPredicate,\n} from '@/src/core/dimension';\nexport type {\n  DimensionSelection,\n  DimensionMember,\n  DimensionOption,\n  DimensionVariable,\n  DimensionFilterOptions,\n} from '@/src/core/dimension';\n\nexport * from '@/src/core/messages';\nexport type { TransportResponse } from '@/src/core/bridge';\n",
     "/**\n * Date and number formatting with explicit units and missing-value behavior.\n * @module @altertable/data-app/format\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/format.md\n */\ntype CommonOptions = { locale?: string; missing?: string };\n\n/** Compact, unambiguous calendar dates for labels and request status. */\nexport function formatDateRange({\n  start,\n  end,\n}: {\n  start: string;\n  end: string;\n}): string {\n  const first = new Date(`${start}T00:00:00Z`);\n  const last = new Date(`${end}T00:00:00Z`);\n\n  function format(date: Date, options: Intl.DateTimeFormatOptions) {\n    return new Intl.DateTimeFormat('en-US', {\n      ...options,\n      timeZone: 'UTC',\n    }).format(date);\n  }\n\n  function formatFullDate(date: Date) {\n    return format(date, { month: 'short', day: 'numeric', year: 'numeric' });\n  }\n\n  if (start === end) return formatFullDate(first);\n  if (first.getUTCFullYear() !== last.getUTCFullYear())\n    return `${formatFullDate(first)}–${formatFullDate(last)}`;\n  const firstMonth = format(first, { month: 'short' });\n  const lastMonth = format(last, { month: 'short' });\n  const firstDay = first.getUTCDate();\n  const lastDay = last.getUTCDate();\n\n  return firstMonth === lastMonth\n    ? `${firstMonth} ${firstDay}–${lastDay}, ${last.getUTCFullYear()}`\n    : `${firstMonth} ${firstDay}–${lastMonth} ${lastDay}, ${last.getUTCFullYear()}`;\n}\n\nexport type MetricFormat =\n  | { kind: 'count'; compact?: boolean; locale?: string }\n  | { kind: 'ratio'; maximumFractionDigits?: number; locale?: string }\n  | { kind: 'currency'; currency: string; locale?: string };\n\nexport function formatMetric(value: number, format: MetricFormat): string {\n  if (format.kind === 'count') return formatCount(value, format);\n  if (format.kind === 'ratio') return formatPercent(value, format);\n\n  return formatNumber(value, {\n    style: 'currency',\n    currency: format.currency,\n    locale: format.locale,\n  });\n}\n\n/** Missing and non-finite values use the `missing` label; negative zero renders as zero. */\nexport function formatNumber(\n  value: number | null | undefined,\n  options: CommonOptions & Intl.NumberFormatOptions = {}\n): string {\n  const { locale = 'en-US', missing = '—', ...numberOptions } = options;\n\n  return value === null || value === undefined || !Number.isFinite(value)\n    ? missing\n    : new Intl.NumberFormat(locale, numberOptions).format(\n        Object.is(value, -0) ? 0 : value\n      );\n}\n\n/** Negative and fractional counts render as missing. Compact notation is opt-in. */\nexport function formatCount(\n  value: number | null | undefined,\n  options: CommonOptions & { compact?: boolean } = {}\n): string {\n  const { compact = false, ...common } = options;\n  if (\n    value !== null &&\n    value !== undefined &&\n    (!Number.isInteger(value) || value < 0)\n  ) {\n    return common.missing ?? '—';\n  }\n\n  return formatNumber(value, {\n    ...common,\n    notation: compact ? 'compact' : 'standard',\n    maximumFractionDigits: compact ? 1 : 0,\n  });\n}\n\nconst pluralRules = new Intl.PluralRules();\n\nexport function pluralize(\n  count: number,\n  singular: string,\n  plural = `${singular}s`\n): string {\n  return pluralRules.select(count) === 'one' ? singular : plural;\n}\n\n/** Accepts a ratio (0.116), not a percentage (11.6). */\nexport function formatPercent(\n  ratio: number | null | undefined,\n  options: CommonOptions & { maximumFractionDigits?: number } = {}\n): string {\n  if (ratio === null || ratio === undefined || !Number.isFinite(ratio)) {\n    return options.missing ?? '—';\n  }\n  const digits =\n    options.maximumFractionDigits ?? (Math.abs(ratio) < 0.01 ? 2 : 1);\n  const percentOptions = {\n    locale: options.locale,\n    style: 'percent' as const,\n    maximumFractionDigits: digits,\n  };\n  const smallestVisibleRatio = 10 ** -digits / 100;\n  if (ratio !== 0 && Math.round(Math.abs(ratio) / smallestVisibleRatio) === 0) {\n    const boundary = formatNumber(smallestVisibleRatio, percentOptions);\n\n    return ratio > 0 ? `<${boundary}` : `>−${boundary}`;\n  }\n\n  return formatNumber(ratio, percentOptions);\n}\n",
     "/** Assert an author or data contract while preserving a useful failure message. */\nexport function invariant(\n  condition: unknown,\n  message: string\n): asserts condition {\n  if (!condition) throw new Error(`Invariant failed: ${message}`);\n}\n",
-    "import type { TransportResponse } from '@/src/core/bridge';\nimport type { DisclosedQuery } from '@/src/core/contract';\n\nexport type MessageContext = { signal: AbortSignal };\nexport type RoutedMessage = { route: string; payload: unknown };\nexport type MessageDispatcher = (\n  message: unknown,\n  context: MessageContext\n) => Promise<unknown>;\nexport type MessageTransport = (\n  message: RoutedMessage,\n  signal?: AbortSignal\n) => Promise<unknown>;\nexport type MessageRoute<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown, input: Input) => Output;\n};\nexport type MessageRoutes = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown, input: never) => unknown;\n  }\n>;\nexport type MessageInput<Route extends MessageRoutes[string]> = ReturnType<\n  Route['input']\n>;\nexport type MessageHandlers<Routes extends MessageRoutes> = {\n  [Name in keyof Routes]: (\n    payload: MessageInput<Routes[Name]>,\n    context: MessageContext\n  ) =>\n    | ReturnType<Routes[Name]['output']>\n    | Promise<ReturnType<Routes[Name]['output']>>;\n};\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/MessageRoutingError');\n\n/** Only these deliberate, public failures cross the message boundary. Other errors stay private. */\nexport class MessageRoutingError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    public readonly code: string,\n    message: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'MessageRoutingError';\n  }\n}\n\nexport function defineMessageRoute<Input, Output>(\n  route: MessageRoute<Input, Output>\n): MessageRoute<Input, Output> {\n  return route;\n}\n\n/** Contracts are shared; handlers are supplied by the host and never belong in the app bundle. */\nexport function createMessageRouter<const Routes extends MessageRoutes>(\n  routes: Routes,\n  handlers: MessageHandlers<NoInfer<Routes>>\n) {\n  const registered = new Map(\n    Object.entries(routes).map(([name, contract]) => {\n      const handler = handlers[name];\n      if (!name || name.length > 256 || typeof handler !== 'function')\n        throw new Error(\n          'Each message route requires a handler and a bounded name.'\n        );\n\n      return [name, { contract, handler }] as const;\n    })\n  );\n\n  async function dispatch(\n    value: unknown,\n    context: MessageContext\n  ): Promise<unknown> {\n    if (\n      !value ||\n      typeof value !== 'object' ||\n      typeof (value as RoutedMessage).route !== 'string'\n    )\n      throw new MessageRoutingError(\n        'invalid_message',\n        'Invalid routed message.'\n      );\n    const message = value as RoutedMessage;\n    const entry = registered.get(message.route);\n    if (!entry)\n      throw new MessageRoutingError('unknown_route', 'Unknown message route.');\n    let payload: unknown;\n    try {\n      payload = entry.contract.input(message.payload);\n    } catch {\n      throw new MessageRoutingError(\n        'invalid_payload',\n        'Invalid message payload.'\n      );\n    }\n    context.signal.throwIfAborted();\n    let result: unknown;\n    try {\n      result = await entry.handler(payload as never, context);\n    } catch (error) {\n      if (context.signal.aborted) throw context.signal.reason;\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'request_failed',\n        'The message request failed. Retry the request.'\n      );\n    }\n    context.signal.throwIfAborted();\n    try {\n      return entry.contract.output(result, payload as never);\n    } catch (error) {\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'invalid_response',\n        'Invalid message response.'\n      );\n    }\n  }\n\n  return { dispatch };\n}\n\nexport type OperationContracts = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n  }\n>;\nexport type DataQueryInput<Operations extends OperationContracts> = {\n  [Name in keyof Operations & string]: {\n    operation: Name;\n    input: ReturnType<Operations[Name]['input']>;\n  };\n}[keyof Operations & string];\nexport type DataQueryBody<Output> = {\n  data: Output;\n  requestId: string;\n  queriedAt: string;\n  queryIds: string[];\n  queries?: DisclosedQuery[];\n};\nexport type DataQueryRoute<Operations extends OperationContracts> =\n  MessageRoute<DataQueryInput<Operations>, TransportResponse> & {\n    operations: Operations | undefined;\n  };\nexport type MessageOutput<Route extends MessageRoutes[string], Input> =\n  Route extends DataQueryRoute<infer Operations>\n    ? Input extends { operation: infer Name extends keyof Operations }\n      ? {\n          status: number;\n          body: DataQueryBody<ReturnType<Operations[Name]['output']>>;\n        }\n      : never\n    : ReturnType<Route['output']>;\n\n/** Omit contracts only in generic hosts such as the CLI shell, where Bun validates operations. */\nexport function defineDataQueryRoute<\n  Operations extends OperationContracts = OperationContracts,\n>(operations?: Operations): DataQueryRoute<Operations> {\n  return {\n    operations,\n    input(value) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid query.');\n      const request = value as { operation?: unknown; input?: unknown };\n      if (\n        typeof request.operation !== 'string' ||\n        !request.operation ||\n        request.operation.length > 256 ||\n        request.operation.includes('/')\n      )\n        throw new Error('Invalid operation.');\n      const operation =\n        operations && Object.hasOwn(operations, request.operation)\n          ? operations[request.operation]\n          : undefined;\n      if (operations && !operation) throw new Error('Unknown operation.');\n\n      return {\n        operation: request.operation,\n        input: operation ? operation.input(request.input) : request.input,\n      } as DataQueryInput<Operations>;\n    },\n    output(value, input) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid data response.');\n      const response = value as TransportResponse;\n      if (\n        !Number.isInteger(response.status) ||\n        response.status < 100 ||\n        response.status > 599 ||\n        !response.body ||\n        typeof response.body !== 'object'\n      )\n        throw new Error('Invalid data response.');\n      const body = response.body as DataQueryBody<unknown> & {\n        error?: { code?: unknown; message?: unknown; requestId?: unknown };\n      };\n      if (response.status < 200 || response.status >= 300) {\n        const failure = body.error;\n        throw new MessageRoutingError(\n          typeof failure?.code === 'string' ? failure.code : 'request_failed',\n          typeof failure?.message === 'string'\n            ? failure.message\n            : 'Could not load data.',\n          typeof failure?.requestId === 'string' ? failure.requestId : undefined\n        );\n      }\n      if (\n        !('data' in body) ||\n        typeof body.requestId !== 'string' ||\n        typeof body.queriedAt !== 'string' ||\n        !Array.isArray(body.queryIds) ||\n        !body.queryIds.every(id => typeof id === 'string')\n      )\n        throw new Error('Invalid data envelope.');\n      if (\n        body.queries !== undefined &&\n        (!Array.isArray(body.queries) ||\n          !body.queries.every(\n            query =>\n              query &&\n              typeof query === 'object' &&\n              typeof query.name === 'string' &&\n              typeof query.statement === 'string' &&\n              (query.queryId === undefined || typeof query.queryId === 'string')\n          ))\n      )\n        throw new Error('Invalid query evidence.');\n      const operation = operations?.[input.operation];\n\n      return {\n        status: response.status,\n        body: {\n          ...body,\n          data: operation ? operation.output(body.data) : body.data,\n        },\n      };\n    },\n  };\n}\n\nexport type NavigationUpdate = {\n  search: string;\n  hash: string;\n  mode: 'push' | 'replace';\n  title?: string;\n};\nexport const navigationUpdateRoute = /* @__PURE__ */ defineMessageRoute({\n  input(value: unknown): NavigationUpdate {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid navigation.');\n    const input = value as NavigationUpdate;\n    if (\n      typeof input.search !== 'string' ||\n      input.search.length > 16_384 ||\n      (input.search !== '' && !input.search.startsWith('?')) ||\n      typeof input.hash !== 'string' ||\n      input.hash.length > 4096 ||\n      (input.hash !== '' && !input.hash.startsWith('#')) ||\n      (input.mode !== 'push' && input.mode !== 'replace') ||\n      (input.title !== undefined &&\n        (typeof input.title !== 'string' || input.title.length > 512))\n    )\n      throw new Error('Invalid navigation.');\n\n    return {\n      search: input.search,\n      hash: input.hash,\n      mode: input.mode,\n      ...(input.title === undefined ? {} : { title: input.title }),\n    };\n  },\n  output(value: unknown): null {\n    if (value !== null) throw new Error('Invalid navigation response.');\n\n    return null;\n  },\n});\nexport const dataAppRoutes = {\n  'data.query': /* @__PURE__ */ defineDataQueryRoute(),\n  'navigation.update': navigationUpdateRoute,\n};\n",
+    "import type { TransportResponse } from '@/src/core/bridge';\nimport type { DisclosedQuery } from '@/src/core/contract';\n\nexport type MessageContext = { signal: AbortSignal };\nexport type RoutedMessage = { route: string; payload: unknown };\nexport type MessageDispatcher = (\n  message: unknown,\n  context: MessageContext\n) => Promise<unknown>;\nexport type MessageTransport = (\n  message: RoutedMessage,\n  signal?: AbortSignal\n) => Promise<unknown>;\nexport type MessageRoute<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown, input: Input) => Output;\n};\nexport type MessageRoutes = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown, input: never) => unknown;\n  }\n>;\nexport type MessageInput<Route extends MessageRoutes[string]> = ReturnType<\n  Route['input']\n>;\nexport type MessageHandlers<Routes extends MessageRoutes> = {\n  [Name in keyof Routes]: (\n    payload: MessageInput<Routes[Name]>,\n    context: MessageContext\n  ) =>\n    | ReturnType<Routes[Name]['output']>\n    | Promise<ReturnType<Routes[Name]['output']>>;\n};\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/MessageRoutingError');\n\n/** Only these deliberate, public failures cross the message boundary. Other errors stay private. */\nexport class MessageRoutingError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    public readonly code: string,\n    message: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'MessageRoutingError';\n  }\n}\n\nexport function defineMessageRoute<Input, Output>(\n  route: MessageRoute<Input, Output>\n): MessageRoute<Input, Output> {\n  return route;\n}\n\n/** Contracts are shared; handlers are supplied by the host and never belong in the app bundle. */\nexport function createMessageRouter<const Routes extends MessageRoutes>(\n  routes: Routes,\n  handlers: MessageHandlers<NoInfer<Routes>>\n) {\n  const registered = new Map(\n    Object.entries(routes).map(([name, contract]) => {\n      const handler = handlers[name];\n      if (!name || name.length > 256 || typeof handler !== 'function')\n        throw new Error(\n          'Each message route requires a handler and a bounded name.'\n        );\n\n      return [name, { contract, handler }] as const;\n    })\n  );\n\n  async function dispatch(\n    value: unknown,\n    context: MessageContext\n  ): Promise<unknown> {\n    if (\n      !value ||\n      typeof value !== 'object' ||\n      typeof (value as RoutedMessage).route !== 'string'\n    )\n      throw new MessageRoutingError(\n        'invalid_message',\n        'Invalid routed message.'\n      );\n    const message = value as RoutedMessage;\n    const entry = registered.get(message.route);\n    if (!entry)\n      throw new MessageRoutingError('unknown_route', 'Unknown message route.');\n    let payload: unknown;\n    try {\n      payload = entry.contract.input(message.payload);\n    } catch {\n      throw new MessageRoutingError(\n        'invalid_payload',\n        'Invalid message payload.'\n      );\n    }\n    context.signal.throwIfAborted();\n    let result: unknown;\n    try {\n      result = await entry.handler(payload as never, context);\n    } catch (error) {\n      if (context.signal.aborted) throw context.signal.reason;\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'request_failed',\n        'The message request failed. Retry the request.'\n      );\n    }\n    context.signal.throwIfAborted();\n    try {\n      return entry.contract.output(result, payload as never);\n    } catch (error) {\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'invalid_response',\n        'Invalid message response.'\n      );\n    }\n  }\n\n  return { dispatch };\n}\n\nexport type OperationContracts = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n  }\n>;\nexport type DataQueryInput<Operations extends OperationContracts> = {\n  [Name in keyof Operations & string]: {\n    operation: Name;\n    input: ReturnType<Operations[Name]['input']>;\n  };\n}[keyof Operations & string];\nexport type DataQueryBody<Output> = {\n  data: Output;\n  requestId: string;\n  queriedAt: string;\n  queryIds: string[];\n  queries?: DisclosedQuery[];\n};\nexport type DataQueryRoute<Operations extends OperationContracts> =\n  MessageRoute<DataQueryInput<Operations>, TransportResponse> & {\n    operations: Operations | undefined;\n  };\nexport type MessageOutput<Route extends MessageRoutes[string], Input> =\n  Route extends DataQueryRoute<infer Operations>\n    ? Input extends { operation: infer Name extends keyof Operations }\n      ? {\n          status: number;\n          body: DataQueryBody<ReturnType<Operations[Name]['output']>>;\n        }\n      : never\n    : ReturnType<Route['output']>;\n\n/** Omit contracts only in generic hosts such as the CLI shell, where Bun validates operations. */\nexport function defineDataQueryRoute<\n  Operations extends OperationContracts = OperationContracts,\n>(operations?: Operations): DataQueryRoute<Operations> {\n  return {\n    operations,\n    input(value) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid query.');\n      const request = value as { operation?: unknown; input?: unknown };\n      if (\n        typeof request.operation !== 'string' ||\n        !request.operation ||\n        request.operation.length > 256 ||\n        request.operation.includes('/')\n      )\n        throw new Error('Invalid operation.');\n      const operation =\n        operations && Object.hasOwn(operations, request.operation)\n          ? operations[request.operation]\n          : undefined;\n      if (operations && !operation) throw new Error('Unknown operation.');\n\n      return {\n        operation: request.operation,\n        input: operation ? operation.input(request.input) : request.input,\n      } as DataQueryInput<Operations>;\n    },\n    output(value, input) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid data response.');\n      const response = value as TransportResponse;\n      if (\n        !Number.isInteger(response.status) ||\n        response.status < 100 ||\n        response.status > 599 ||\n        !response.body ||\n        typeof response.body !== 'object'\n      )\n        throw new Error('Invalid data response.');\n      const body = response.body as DataQueryBody<unknown> & {\n        error?: { code?: unknown; message?: unknown; requestId?: unknown };\n      };\n      if (response.status < 200 || response.status >= 300) {\n        const failure = body.error;\n        throw new MessageRoutingError(\n          typeof failure?.code === 'string' ? failure.code : 'request_failed',\n          typeof failure?.message === 'string'\n            ? failure.message\n            : 'Could not load data.',\n          typeof failure?.requestId === 'string' ? failure.requestId : undefined\n        );\n      }\n      if (\n        !('data' in body) ||\n        typeof body.requestId !== 'string' ||\n        typeof body.queriedAt !== 'string' ||\n        !Array.isArray(body.queryIds) ||\n        !body.queryIds.every(id => typeof id === 'string')\n      )\n        throw new Error('Invalid data envelope.');\n      if (\n        body.queries !== undefined &&\n        (!Array.isArray(body.queries) ||\n          !body.queries.every(\n            query =>\n              query &&\n              typeof query === 'object' &&\n              typeof query.name === 'string' &&\n              typeof query.statement === 'string' &&\n              (query.queryId === undefined || typeof query.queryId === 'string')\n          ))\n      )\n        throw new Error('Invalid query evidence.');\n      const operation = operations?.[input.operation];\n\n      return {\n        status: response.status,\n        body: {\n          ...body,\n          data: operation ? operation.output(body.data) : body.data,\n        },\n      };\n    },\n  };\n}\n\nexport type NavigationUpdate = {\n  search: string;\n  hash: string;\n  mode: 'push' | 'replace';\n  title?: string;\n};\nexport const navigationUpdateRoute = /* @__PURE__ */ defineMessageRoute({\n  input(value: unknown): NavigationUpdate {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid navigation.');\n    const input = value as NavigationUpdate;\n    if (\n      typeof input.search !== 'string' ||\n      input.search.length > 16_384 ||\n      (input.search !== '' && !input.search.startsWith('?')) ||\n      typeof input.hash !== 'string' ||\n      input.hash.length > 4096 ||\n      (input.hash !== '' && !input.hash.startsWith('#')) ||\n      (input.mode !== 'push' && input.mode !== 'replace') ||\n      (input.title !== undefined &&\n        (typeof input.title !== 'string' || input.title.length > 512))\n    )\n      throw new Error('Invalid navigation.');\n\n    return {\n      search: input.search,\n      hash: input.hash,\n      mode: input.mode,\n      ...(input.title === undefined ? {} : { title: input.title }),\n    };\n  },\n  output(value: unknown): null {\n    if (value !== null) throw new Error('Invalid navigation response.');\n\n    return null;\n  },\n});\nexport const dataAppRoutes = {\n  'data:query': /* @__PURE__ */ defineDataQueryRoute(),\n  'navigation:update': navigationUpdateRoute,\n};\n",
     "import {\n  DataSourceError,\n  type DataOperations,\n  type DisclosedQuery,\n  type Lakehouse,\n} from '@/src/core/contract';\n\nconst sourceErrorMessages = {\n  unauthorized:\n    \"Lakehouse access needs attention. Run this app with 'altertable app dev', or run 'altertable login' and retry.\",\n  forbidden:\n    \"This app cannot access its lakehouse data. Check the selected profile's permissions.\",\n  rate_limited: 'The lakehouse is busy. Wait a moment and retry.',\n  query_rejected:\n    \"A lakehouse query was rejected. Check the app's data operation.\",\n  unavailable: 'The lakehouse is unavailable. Check the connection and retry.',\n};\n\n/** Authorization result for one viewer request. A hosted adapter must scope its lakehouse client. */\nexport type RequestAccess = { lakehouse: Lakehouse; canDiscloseSql: boolean };\n\n/**\n * Execute named operations on the server. The app supplies operations and viewer authorization.\n * JSON, Origin, and Fetch Metadata checks reject cross-site browser POSTs; they do not\n * authenticate another local process. SQL is returned only when both the operation and\n * authorization result permit disclosure.\n */\nexport function createDataHandler(\n  operations: DataOperations,\n  authorize: (request: Request, operation: string) => Promise<RequestAccess>\n) {\n  async function handleDataRequest(request: Request): Promise<Response> {\n    const requestId = crypto.randomUUID();\n    const url = new URL(request.url);\n    if (!url.pathname.startsWith('/api/data/'))\n      return new Response('Not found', { status: 404 });\n    const encodedName = url.pathname.slice('/api/data/'.length);\n    if (!encodedName || encodedName.includes('/'))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    let name: string;\n    try {\n      name = decodeURIComponent(encodedName);\n    } catch {\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    }\n    if (!Object.hasOwn(operations, name))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    if (request.method !== 'POST')\n      return problem(405, 'method_not_allowed', 'Use POST.', requestId);\n    if (\n      request.headers\n        .get('content-type')\n        ?.split(';')[0]\n        ?.trim()\n        .toLowerCase() !== 'application/json'\n    )\n      return problem(\n        415,\n        'unsupported_media_type',\n        'Use application/json.',\n        requestId\n      );\n    const origin = request.headers.get('origin');\n    const fetchSite = request.headers.get('sec-fetch-site');\n    const fetchMode = request.headers.get('sec-fetch-mode');\n    if (\n      (origin !== null && origin !== url.origin) ||\n      (fetchSite !== null && fetchSite !== 'same-origin') ||\n      (fetchSite !== null && origin === null) ||\n      (fetchMode !== null &&\n        fetchMode !== 'cors' &&\n        fetchMode !== 'same-origin')\n    )\n      return problem(\n        403,\n        'cross_origin_request',\n        'The data request must come from this app.',\n        requestId\n      );\n    let access: RequestAccess;\n    try {\n      access = await authorize(request, name);\n    } catch {\n      return problem(\n        403,\n        'forbidden',\n        'You cannot run this data operation.',\n        requestId\n      );\n    }\n    const operation = operations[name]!;\n    let input: unknown;\n    if (request.signal.aborted)\n      return problem(504, 'timeout', 'The data request timed out.', requestId);\n    try {\n      const body = await readInput(request);\n      input = operation.input(JSON.parse(body));\n    } catch (error) {\n      if (error instanceof InputTooLargeError)\n        return problem(\n          413,\n          'input_too_large',\n          'Input is too large.',\n          requestId\n        );\n\n      return problem(\n        400,\n        'invalid_input',\n        \"Check this operation's inputs.\",\n        requestId\n      );\n    }\n    const timeout = AbortSignal.timeout(operation.policy.maxDurationMs);\n    const signal = AbortSignal.any([request.signal, timeout]);\n    const queryIds: string[] = [];\n    const queries: DisclosedQuery[] = [];\n    const boundedLakehouse: Lakehouse = {\n      async queryAll(statement, options) {\n        if (!Number.isInteger(options.limit) || options.limit < 1)\n          throw new Error('Query needs a positive row limit.');\n        if (\n          operation.queryNames &&\n          !Object.values(operation.queryNames).includes(options.name ?? '')\n        )\n          throw new Error(\n            `Query name is not registered for operation ${name}.`\n          );\n        const query: DisclosedQuery = {\n          name: options.name ?? `Query ${queries.length + 1}`,\n          statement,\n        };\n        queries.push(query);\n        let result;\n        try {\n          result = await access.lakehouse.queryAll(statement, {\n            limit: Math.min(options.limit, operation.policy.maxQueryRows),\n            signal: AbortSignal.any([signal, options.signal]),\n          });\n        } catch (error) {\n          if (error instanceof DataSourceError) error.queryName = query.name;\n          throw error;\n        }\n        if (result.rows.length > operation.policy.maxQueryRows)\n          throw new Error('Result exceeds row limit.');\n        if (result.queryId) {\n          query.queryId = result.queryId;\n          queryIds.push(result.queryId);\n        }\n\n        return result;\n      },\n    };\n    let abort: (() => void) | undefined;\n    try {\n      signal.throwIfAborted();\n      const cancelled = new Promise<never>((_, reject) => {\n        function rejectAborted() {\n          reject(new Error('Request aborted.'));\n        }\n        abort = rejectAborted;\n        signal.addEventListener('abort', rejectAborted, { once: true });\n        if (signal.aborted) rejectAborted();\n      });\n      const data = operation.output(\n        await Promise.race([\n          cancelled,\n          Promise.resolve().then(() => {\n            signal.throwIfAborted();\n\n            return operation.run(\n              { lakehouse: boundedLakehouse, signal },\n              input as never\n            );\n          }),\n        ])\n      );\n      const result = {\n        data,\n        requestId,\n        queriedAt: new Date().toISOString(),\n        queryIds,\n        ...(operation.policy.exposeSql && access.canDiscloseSql\n          ? { queries }\n          : {}),\n      };\n      const body = JSON.stringify(result);\n      if (\n        new TextEncoder().encode(body).byteLength >\n        (operation.policy.maxResponseBytes ?? 1_000_000)\n      ) {\n        throw new Error('Response exceeds byte limit.');\n      }\n\n      return new Response(body, {\n        headers: {\n          'cache-control': 'no-store',\n          'content-type': 'application/json',\n        },\n      });\n    } catch (error) {\n      const source = error instanceof DataSourceError ? error : null;\n      console.error(\n        `Data operation ${name} failed (${requestId}): ${source ? `${source.reason}${source.status ? ` (${source.status})` : ''}${source.queryName ? ` in ${source.queryName}` : ''}` : error instanceof Error ? error.name : 'unknown'}`\n      );\n      if (source) {\n        return problem(\n          source.reason === 'rate_limited' ? 429 : 502,\n          `source_${source.reason}`,\n          sourceErrorMessages[source.reason],\n          requestId\n        );\n      }\n\n      return problem(\n        signal.aborted ? 504 : 502,\n        signal.aborted ? 'timeout' : 'query_failed',\n        signal.aborted\n          ? 'The data request timed out.'\n          : 'The data request failed.',\n        requestId\n      );\n    } finally {\n      if (abort) signal.removeEventListener('abort', abort);\n    }\n  }\n\n  return handleDataRequest;\n}\n\nfunction problem(\n  status: number,\n  code: string,\n  message: string,\n  requestId: string\n): Response {\n  return Response.json(\n    { error: { code, message, requestId } },\n    { status, headers: { 'cache-control': 'no-store' } }\n  );\n}\n\nconst MAX_INPUT_BYTES = 16_384;\nclass InputTooLargeError extends Error {}\n\n/** Count encoded bytes before retaining chunks; cancellation also interrupts waiting reads. */\nasync function readInput(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return '';\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  let abort: (() => void) | undefined;\n\n  function cancelReader() {\n    // The source's cancel algorithm may never settle; the handler must still respond.\n    void reader!.cancel().catch(() => {});\n  }\n\n  try {\n    request.signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n        cancelReader();\n      }\n      abort = rejectAborted;\n      request.signal.addEventListener('abort', rejectAborted, { once: true });\n      if (request.signal.aborted) rejectAborted();\n    });\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), cancelled]);\n      if (done) break;\n      size += value.byteLength;\n      if (size > MAX_INPUT_BYTES) {\n        cancelReader();\n        throw new InputTooLargeError();\n      }\n      chunks.push(value);\n    }\n    const bytes = new Uint8Array(size);\n    let offset = 0;\n    for (const chunk of chunks) {\n      bytes.set(chunk, offset);\n      offset += chunk.byteLength;\n    }\n\n    return new TextDecoder().decode(bytes);\n  } finally {\n    if (abort) request.signal.removeEventListener('abort', abort);\n    reader.releaseLock();\n  }\n}\n",
     "/**\n * Bun local-development serving and server-only lakehouse access.\n * @module @altertable/data-app/server/bun\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/server-bun.md\n */\nimport {\n  DataSourceError,\n  type Lakehouse,\n  type QueryResult,\n} from '@/src/core/contract';\nimport type { DataOperations } from '@/src/core/contract';\nimport { createDataHandler } from '@/src/server/handler';\n\n/** Serve one app on localhost through the CLI's lakehouse proxy during development.\n * Hosted servers must authorize every viewer and must use `createDataHandler` directly. */\nexport function serveLocalApp({\n  page,\n  operations,\n  title,\n  port = Number(process.env.PORT ?? 25837),\n}: {\n  page: Bun.HTMLBundle;\n  operations: DataOperations;\n  title: string;\n  port?: number;\n}) {\n  const server = Bun.serve({\n    hostname: '127.0.0.1',\n    port,\n    development: process.env.NODE_ENV !== 'production',\n    idleTimeout: 60,\n    routes: { '/': page },\n    fetch: createDataHandler(operations, async () => ({\n      lakehouse: localLakehouse(),\n      canDiscloseSql: true,\n    })),\n  });\n  console.log(`${title} running at ${server.url}`);\n\n  return server;\n}\n\n/** Server-only lakehouse adapter. Local development uses the selected CLI profile's proxy. */\nexport function localLakehouse(\n  environment: Record<string, string | undefined> = process.env,\n  request: typeof fetch = fetch\n): Lakehouse {\n  return {\n    async queryAll(statement, { limit, signal }) {\n      const proxyUrl = environment.ALTERTABLE_DATA_PROXY_URL;\n      const proxyToken = environment.ALTERTABLE_DATA_PROXY_TOKEN;\n      const username = environment.ALTERTABLE_LAKEHOUSE_USERNAME;\n      const password = environment.ALTERTABLE_LAKEHOUSE_PASSWORD;\n      if (!proxyUrl && (!username || !password))\n        throw new DataSourceError('unauthorized');\n      if (proxyUrl && !proxyToken) throw new DataSourceError('unauthorized');\n      const base =\n        proxyUrl ??\n        environment.ALTERTABLE_API_BASE ??\n        'https://api.altertable.ai';\n      let response: Response;\n      try {\n        response = await request(\n          new URL('query', `${base.replace(/\\/$/, '')}/`),\n          {\n            method: 'POST',\n            headers: {\n              authorization: proxyUrl\n                ? `Bearer ${proxyToken}`\n                : `Basic ${Buffer.from(`${username}:${password}`).toString('base64')}`,\n              'content-type': 'application/json',\n            },\n            body: JSON.stringify({ statement, limit }),\n            signal,\n          }\n        );\n      } catch (error) {\n        if (signal.aborted) throw error;\n        throw new DataSourceError('unavailable');\n      }\n      if (!response.ok) {\n        const reason =\n          response.status === 401\n            ? 'unauthorized'\n            : response.status === 403\n              ? 'forbidden'\n              : response.status === 429\n                ? 'rate_limited'\n                : response.status === 400 || response.status === 422\n                  ? 'query_rejected'\n                  : 'unavailable';\n        throw new DataSourceError(reason, response.status);\n      }\n      const body = await readQueryBody(response);\n\n      return parseQueryResult(body, limit);\n    },\n  };\n}\n\nasync function readQueryBody(response: Response): Promise<string> {\n  const reader = response.body?.getReader();\n  if (!reader) throw new Error('Query response is empty.');\n  const decoder = new TextDecoder();\n  let body = '';\n  let bytes = 0;\n  while (true) {\n    const chunk = await reader.read();\n    if (chunk.done) break;\n    bytes += chunk.value.byteLength;\n    if (bytes > 5_000_000) {\n      await reader.cancel();\n      throw new Error('Query response is too large.');\n    }\n    body += decoder.decode(chunk.value, { stream: true });\n  }\n  body += decoder.decode();\n\n  return body;\n}\n\nfunction parseQueryResult(body: string, limit: number): QueryResult {\n  const lines = body\n    .trimEnd()\n    .split('\\n')\n    .filter(line => line.trim());\n  if (!lines.length) throw new Error('Query response is empty.');\n  const metadata = JSON.parse(lines[0]!) as { query_id?: string };\n  let firstRowIndex = 1;\n  let columns: QueryResult['columns'] = [];\n  if (lines[firstRowIndex]) {\n    const columnDefinitions = JSON.parse(lines[firstRowIndex]!) as unknown;\n    if (\n      Array.isArray(columnDefinitions) &&\n      columnDefinitions.every(\n        value =>\n          typeof value === 'string' ||\n          (typeof value === 'object' && value !== null && 'name' in value)\n      )\n    ) {\n      columns = columnDefinitions.map(value =>\n        typeof value === 'string'\n          ? { name: value }\n          : (value as { name: string; type?: string })\n      );\n      firstRowIndex++;\n    }\n  }\n  const rows = lines\n    .slice(firstRowIndex)\n    .map(line => JSON.parse(line) as unknown[]);\n  if (rows.length > limit)\n    throw new Error('Lakehouse returned more rows than requested.');\n\n  return { columns, rows, queryId: metadata.query_id };\n}\n"
   ],

package/dist/react/embed/index.js

@@ -1,8 +1,8 @@
-import"../../chunks/contract-jksbmt5q.js";
+import"../../chunks/contract-ehk50k7e.js";
 import {
   attachDataAppBridge2,
   attachDataAppShell2
-} from "../../chunks/contract-tqrf3ykr.js";
+} from "../../chunks/contract-7gpsee0v.js";
 
 // src/react/embed/bridge.tsx
 import { useRef, useLayoutEffect, useEffect } from "react";

package/dist/react/index.js

@@ -1,11 +1,11 @@
-import"../chunks/contract-jksbmt5q.js";
+import"../chunks/contract-ehk50k7e.js";
 import {
   DataAppError2
-} from "../chunks/contract-mb5nfzwg.js";
+} from "../chunks/contract-d9skd1n7.js";
 import {
   getDataAppNavigation2,
   createDataClient2
-} from "../chunks/contract-tkkc28tg.js";
+} from "../chunks/contract-zr4s2g7m.js";
 import {
   dataAppTitle2
 } from "../chunks/contract-wz59z8pq.js";

package/dist/server.js.map

@@ -5,7 +5,7 @@
     "/**\n * Shared operation contracts and input/output validation for browser and server.\n * @module @altertable/data-app/contract\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/contract.md\n */\nimport { parseDate, today } from '@internationalized/date';\nimport { formatDateRange } from '@/src/core/format';\nimport { invariant } from '@/src/core/invariant';\n\nexport type QueryResult = {\n  columns: { name: string; type?: string }[];\n  rows: unknown[][];\n  queryId?: string;\n};\n\nexport function parseEmptyInput(value: unknown): Record<string, never> {\n  invariant(\n    typeof value === 'object' &&\n      value !== null &&\n      !Array.isArray(value) &&\n      Object.keys(value).length === 0,\n    'This operation takes no inputs.'\n  );\n\n  return {};\n}\n\nexport function parseTrue(value: unknown): true {\n  invariant(value === true, 'Expected a successful check.');\n\n  return true;\n}\n\nexport type DateRangeInput = { start: string; end: string };\nexport type DateRangeRequest = {\n  range: DateRangeInput;\n  comparison: DateRangeInput | null;\n};\n\n/** The immediately preceding, equally long set of calendar days. */\nexport function previousDateRange({\n  start,\n  end,\n}: DateRangeInput): DateRangeInput {\n  const first = parseDate(start);\n  const last = parseDate(end);\n  const days =\n    (last.toDate('UTC').getTime() - first.toDate('UTC').getTime()) /\n      86_400_000 +\n    1;\n  invariant(days >= 1, 'Date range must start before it ends.');\n  const previousEnd = first.subtract({ days: 1 });\n\n  return {\n    start: previousEnd.subtract({ days: days - 1 }).toString(),\n    end: previousEnd.toString(),\n  };\n}\n\nexport type ReportingPeriod =\n  | { kind: 'rolling'; amount: number; unit: 'hour' | 'day'; end: string }\n  | { kind: 'calendar'; start: string; end: string; timeZone: string };\n\nexport type DateRangeContractOptions = {\n  minDate?: string;\n  maxDate?: string | (() => string);\n  maxRangeDays: number;\n  timeZone: string;\n  completeDays?: boolean;\n};\n\n/** One source policy for the server parser, URL variable, and displayed reporting period. */\nexport function defineDateRangeContract(options: DateRangeContractOptions) {\n  invariant(\n    Number.isInteger(options.maxRangeDays) && options.maxRangeDays > 0,\n    'Date range needs a positive maxRangeDays.'\n  );\n  if (options.minDate) parseDate(options.minDate);\n  if (typeof options.maxDate === 'string') parseDate(options.maxDate);\n  today(options.timeZone);\n\n  function bounds() {\n    const latest = today(options.timeZone).subtract({\n      days: options.completeDays === false ? 0 : 1,\n    });\n    const sourceMax =\n      typeof options.maxDate === 'function'\n        ? options.maxDate()\n        : options.maxDate;\n    const maxDate =\n      sourceMax && parseDate(sourceMax).compare(latest) < 0\n        ? parseDate(sourceMax).toString()\n        : latest.toString();\n\n    return {\n      minDate: options.minDate,\n      maxDate,\n      maxRangeDays: options.maxRangeDays,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function period({ start, end }: DateRangeInput): ReportingPeriod {\n    return {\n      kind: 'calendar',\n      start,\n      end,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function describeInput(input: DateRangeInput) {\n    return `${formatDateRange(input)} ${options.timeZone}`;\n  }\n\n  function comparison(input: DateRangeInput): DateRangeInput | null {\n    const previous = previousDateRange(input);\n\n    return options.minDate && previous.start < options.minDate\n      ? null\n      : previous;\n  }\n\n  function request(value: unknown, compare = false): DateRangeRequest {\n    const range = parseDateRangeInput(value, bounds());\n    const previous = compare ? comparison(range) : null;\n    invariant(\n      !compare || previous,\n      'Comparison is outside available source coverage.'\n    );\n\n    return { range, comparison: previous };\n  }\n\n  function parseRequest(value: unknown): DateRangeRequest {\n    invariant(value && typeof value === 'object', 'Choose a date range.');\n    const input = value as Record<string, unknown>;\n    const parsed = request(input.range, input.comparison != null);\n    if (input.comparison != null) {\n      const supplied = parseDateRangeInput(input.comparison, bounds());\n      invariant(\n        supplied.start === parsed.comparison?.start &&\n          supplied.end === parsed.comparison?.end,\n        'Comparison must be the preceding equal-length range.'\n      );\n    }\n\n    return parsed;\n  }\n\n  return {\n    request,\n    parseRequest,\n    bounds,\n    parse(value: unknown) {\n      return parseDateRangeInput(value, bounds());\n    },\n    period,\n    comparison,\n    describeInput,\n    view: { period, describeInput },\n  };\n}\n\nexport type DateRangeContract = ReturnType<typeof defineDateRangeContract>;\n\n/** Validate calendar dates and a bounded inclusive range on the server. */\nexport function parseDateRangeInput(\n  value: unknown,\n  {\n    minDate,\n    maxDate,\n    maxRangeDays,\n  }: { minDate?: string; maxDate?: string; maxRangeDays: number }\n): DateRangeInput {\n  invariant(\n    value && typeof value === 'object' && !Array.isArray(value),\n    'Choose a date range.'\n  );\n  const { start, end } = value as Record<string, unknown>;\n\n  function day(input: unknown): number {\n    invariant(\n      typeof input === 'string' && /^\\d{4}-\\d{2}-\\d{2}$/.test(input),\n      'Dates must be YYYY-MM-DD.'\n    );\n    const timestamp = Date.parse(`${input}T00:00:00Z`);\n    invariant(\n      Number.isFinite(timestamp) &&\n        new Date(timestamp).toISOString().slice(0, 10) === input,\n      'Choose valid calendar dates.'\n    );\n\n    return timestamp;\n  }\n  const first = day(start);\n  const last = day(end);\n  invariant(\n    Number.isInteger(maxRangeDays) && maxRangeDays > 0,\n    'Maximum range days must be positive.'\n  );\n  invariant(\n    first <= last &&\n      (last - first) / 86_400_000 < maxRangeDays &&\n      (minDate === undefined || first >= day(minDate)) &&\n      (maxDate === undefined || last <= day(maxDate)),\n    `Choose up to ${maxRangeDays} days within the available range.`\n  );\n\n  return { start: start as string, end: end as string };\n}\n\n/** Accepts numeric strings from DuckDB; rejects negative, fractional, and unsafe integers. */\nexport function parseCount(value: unknown): number {\n  const number =\n    typeof value === 'number' || typeof value === 'string'\n      ? Number(value)\n      : NaN;\n  invariant(\n    Number.isSafeInteger(number) &&\n      number >= 0 &&\n      (typeof value !== 'string' || !!value.trim()),\n    'Invalid count in query result.'\n  );\n\n  return number;\n}\n\nexport function parseLabel(value: unknown, maxLength = 100): string {\n  invariant(\n    typeof value === 'string' && !!value && value.length <= maxLength,\n    'Invalid label in query result.'\n  );\n\n  return value;\n}\n\n/** Rejects missing or duplicate columns and rows whose width differs from the column list. */\nexport function rowsAsRecords(\n  result: QueryResult,\n  requiredColumns: readonly string[]\n): Record<string, unknown>[] {\n  const names = result.columns.map(column => column.name);\n  invariant(\n    new Set(names).size === names.length &&\n      requiredColumns.every(name => names.includes(name)),\n    'Query result columns do not match the expected shape.'\n  );\n\n  return result.rows.map(row => {\n    invariant(\n      row.length === names.length,\n      'Query result row has the wrong width.'\n    );\n\n    return Object.fromEntries(names.map((name, index) => [name, row[index]]));\n  });\n}\n\n/** One named statement an operation ran. Returned only when SQL disclosure is allowed. */\nexport type DisclosedQuery = {\n  name: string;\n  statement: string;\n  queryId?: string;\n};\n\nexport function defineQueryNames<const Names extends Record<string, string>>(\n  names: Names\n): Names {\n  const values = Object.values(names);\n  invariant(\n    values.every(name => !!name.trim()) &&\n      new Set(values).size === values.length,\n    'Query names must be nonempty and unique.'\n  );\n\n  return names;\n}\n\nexport class DataSourceError extends Error {\n  queryName?: string;\n\n  constructor(\n    public readonly reason:\n      | 'unauthorized'\n      | 'forbidden'\n      | 'rate_limited'\n      | 'query_rejected'\n      | 'unavailable',\n    public readonly status?: number\n  ) {\n    super(`Data source ${reason}${status ? ` (${status})` : ''}.`);\n    this.name = 'DataSourceError';\n  }\n}\n\n/** Server-only query interface supplied by a local or hosted adapter. */\nexport type Lakehouse = {\n  queryAll(\n    statement: string,\n    options: { limit: number; signal: AbortSignal; name?: string }\n  ): Promise<QueryResult>;\n};\n\nexport type OperationContext = { lakehouse: Lakehouse; signal: AbortSignal };\n\n/**\n * Both parsers run on the server before results cross the JSON boundary. Schema libraries can be\n * used inside either parser.\n */\nexport type DataOperation<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown) => Output;\n  run: (context: OperationContext, input: Input) => Promise<Output>;\n  checks: readonly Input[];\n  queryNames?: Readonly<Record<string, string>>;\n  policy: {\n    maxQueryRows: number;\n    maxDurationMs: number;\n    maxResponseBytes?: number;\n    exposeSql?: boolean;\n  };\n};\n\nexport type OperationQuery<Names extends Readonly<Record<string, string>>> = (\n  name: Names[keyof Names],\n  statement: string,\n  options?: { limit?: number }\n) => Promise<QueryResult>;\n\nexport function defineOperation<\n  Input,\n  Output,\n  const Names extends Readonly<Record<string, string>> = Record<string, never>,\n>(\n  operation: Omit<DataOperation<Input, Output>, 'run' | 'queryNames'> & {\n    queryNames?: Names;\n    run: (\n      context: OperationContext & { query: OperationQuery<NoInfer<Names>> },\n      input: Input\n    ) => Promise<Output>;\n  }\n): DataOperation<Input, Output> & { queryNames?: Names } {\n  invariant(\n    Array.isArray(operation.checks) &&\n      operation.checks.length > 0 &&\n      Number.isInteger(operation.policy.maxQueryRows) &&\n      operation.policy.maxQueryRows > 0 &&\n      Number.isInteger(operation.policy.maxDurationMs) &&\n      operation.policy.maxDurationMs > 0 &&\n      (operation.policy.maxResponseBytes === undefined ||\n        (Number.isInteger(operation.policy.maxResponseBytes) &&\n          operation.policy.maxResponseBytes > 0)),\n    'Each data operation needs check inputs and positive row and duration limits.'\n  );\n  if (operation.queryNames) defineQueryNames(operation.queryNames);\n  for (const input of operation.checks) operation.input(input);\n\n  return {\n    ...operation,\n    run(context, input) {\n      function query(\n        name: Names[keyof Names],\n        statement: string,\n        options?: { limit?: number }\n      ): Promise<QueryResult> {\n        invariant(\n          operation.queryNames &&\n            Object.values(operation.queryNames).includes(name),\n          `Unknown query name: ${name}.`\n        );\n\n        return context.lakehouse.queryAll(statement, {\n          name,\n          limit: options?.limit ?? operation.policy.maxQueryRows,\n          signal: context.signal,\n        });\n      }\n\n      return operation.run({ ...context, query }, input);\n    },\n  };\n}\n\nexport const connectionQueryNames = defineQueryNames({\n  connection: 'connection-check',\n});\n\n/** Success requires a bounded SQL query; it does not establish access to a particular dataset. */\nexport function connectionCheck(): DataOperation<Record<string, never>, true> {\n  return defineOperation({\n    input: parseEmptyInput,\n    output: parseTrue,\n    checks: [{}],\n    queryNames: connectionQueryNames,\n    policy: { maxQueryRows: 1, maxDurationMs: 15_000, exposeSql: true },\n    async run({ query }): Promise<true> {\n      await query(\n        connectionQueryNames.connection,\n        'SELECT 1 AS connection_check'\n      );\n\n      return true;\n    },\n  });\n}\n\nexport type DataOperations = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n    run: (context: OperationContext, input: never) => Promise<unknown>;\n    checks: readonly unknown[];\n    queryNames?: Readonly<Record<string, string>>;\n    policy: DataOperation<never, unknown>['policy'];\n  }\n>;\nexport {\n  dimensionFilter,\n  parseDimensionSelection,\n  parseFacetOptions,\n  dimensionPredicate,\n} from '@/src/core/dimension';\nexport type {\n  DimensionSelection,\n  DimensionMember,\n  DimensionOption,\n  DimensionVariable,\n  DimensionFilterOptions,\n} from '@/src/core/dimension';\n\nexport * from '@/src/core/messages';\nexport type { TransportResponse } from '@/src/core/bridge';\n",
     "/**\n * Date and number formatting with explicit units and missing-value behavior.\n * @module @altertable/data-app/format\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/format.md\n */\ntype CommonOptions = { locale?: string; missing?: string };\n\n/** Compact, unambiguous calendar dates for labels and request status. */\nexport function formatDateRange({\n  start,\n  end,\n}: {\n  start: string;\n  end: string;\n}): string {\n  const first = new Date(`${start}T00:00:00Z`);\n  const last = new Date(`${end}T00:00:00Z`);\n\n  function format(date: Date, options: Intl.DateTimeFormatOptions) {\n    return new Intl.DateTimeFormat('en-US', {\n      ...options,\n      timeZone: 'UTC',\n    }).format(date);\n  }\n\n  function formatFullDate(date: Date) {\n    return format(date, { month: 'short', day: 'numeric', year: 'numeric' });\n  }\n\n  if (start === end) return formatFullDate(first);\n  if (first.getUTCFullYear() !== last.getUTCFullYear())\n    return `${formatFullDate(first)}–${formatFullDate(last)}`;\n  const firstMonth = format(first, { month: 'short' });\n  const lastMonth = format(last, { month: 'short' });\n  const firstDay = first.getUTCDate();\n  const lastDay = last.getUTCDate();\n\n  return firstMonth === lastMonth\n    ? `${firstMonth} ${firstDay}–${lastDay}, ${last.getUTCFullYear()}`\n    : `${firstMonth} ${firstDay}–${lastMonth} ${lastDay}, ${last.getUTCFullYear()}`;\n}\n\nexport type MetricFormat =\n  | { kind: 'count'; compact?: boolean; locale?: string }\n  | { kind: 'ratio'; maximumFractionDigits?: number; locale?: string }\n  | { kind: 'currency'; currency: string; locale?: string };\n\nexport function formatMetric(value: number, format: MetricFormat): string {\n  if (format.kind === 'count') return formatCount(value, format);\n  if (format.kind === 'ratio') return formatPercent(value, format);\n\n  return formatNumber(value, {\n    style: 'currency',\n    currency: format.currency,\n    locale: format.locale,\n  });\n}\n\n/** Missing and non-finite values use the `missing` label; negative zero renders as zero. */\nexport function formatNumber(\n  value: number | null | undefined,\n  options: CommonOptions & Intl.NumberFormatOptions = {}\n): string {\n  const { locale = 'en-US', missing = '—', ...numberOptions } = options;\n\n  return value === null || value === undefined || !Number.isFinite(value)\n    ? missing\n    : new Intl.NumberFormat(locale, numberOptions).format(\n        Object.is(value, -0) ? 0 : value\n      );\n}\n\n/** Negative and fractional counts render as missing. Compact notation is opt-in. */\nexport function formatCount(\n  value: number | null | undefined,\n  options: CommonOptions & { compact?: boolean } = {}\n): string {\n  const { compact = false, ...common } = options;\n  if (\n    value !== null &&\n    value !== undefined &&\n    (!Number.isInteger(value) || value < 0)\n  ) {\n    return common.missing ?? '—';\n  }\n\n  return formatNumber(value, {\n    ...common,\n    notation: compact ? 'compact' : 'standard',\n    maximumFractionDigits: compact ? 1 : 0,\n  });\n}\n\nconst pluralRules = new Intl.PluralRules();\n\nexport function pluralize(\n  count: number,\n  singular: string,\n  plural = `${singular}s`\n): string {\n  return pluralRules.select(count) === 'one' ? singular : plural;\n}\n\n/** Accepts a ratio (0.116), not a percentage (11.6). */\nexport function formatPercent(\n  ratio: number | null | undefined,\n  options: CommonOptions & { maximumFractionDigits?: number } = {}\n): string {\n  if (ratio === null || ratio === undefined || !Number.isFinite(ratio)) {\n    return options.missing ?? '—';\n  }\n  const digits =\n    options.maximumFractionDigits ?? (Math.abs(ratio) < 0.01 ? 2 : 1);\n  const percentOptions = {\n    locale: options.locale,\n    style: 'percent' as const,\n    maximumFractionDigits: digits,\n  };\n  const smallestVisibleRatio = 10 ** -digits / 100;\n  if (ratio !== 0 && Math.round(Math.abs(ratio) / smallestVisibleRatio) === 0) {\n    const boundary = formatNumber(smallestVisibleRatio, percentOptions);\n\n    return ratio > 0 ? `<${boundary}` : `>−${boundary}`;\n  }\n\n  return formatNumber(ratio, percentOptions);\n}\n",
     "/** Assert an author or data contract while preserving a useful failure message. */\nexport function invariant(\n  condition: unknown,\n  message: string\n): asserts condition {\n  if (!condition) throw new Error(`Invariant failed: ${message}`);\n}\n",
-    "import type { TransportResponse } from '@/src/core/bridge';\nimport type { DisclosedQuery } from '@/src/core/contract';\n\nexport type MessageContext = { signal: AbortSignal };\nexport type RoutedMessage = { route: string; payload: unknown };\nexport type MessageDispatcher = (\n  message: unknown,\n  context: MessageContext\n) => Promise<unknown>;\nexport type MessageTransport = (\n  message: RoutedMessage,\n  signal?: AbortSignal\n) => Promise<unknown>;\nexport type MessageRoute<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown, input: Input) => Output;\n};\nexport type MessageRoutes = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown, input: never) => unknown;\n  }\n>;\nexport type MessageInput<Route extends MessageRoutes[string]> = ReturnType<\n  Route['input']\n>;\nexport type MessageHandlers<Routes extends MessageRoutes> = {\n  [Name in keyof Routes]: (\n    payload: MessageInput<Routes[Name]>,\n    context: MessageContext\n  ) =>\n    | ReturnType<Routes[Name]['output']>\n    | Promise<ReturnType<Routes[Name]['output']>>;\n};\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/MessageRoutingError');\n\n/** Only these deliberate, public failures cross the message boundary. Other errors stay private. */\nexport class MessageRoutingError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    public readonly code: string,\n    message: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'MessageRoutingError';\n  }\n}\n\nexport function defineMessageRoute<Input, Output>(\n  route: MessageRoute<Input, Output>\n): MessageRoute<Input, Output> {\n  return route;\n}\n\n/** Contracts are shared; handlers are supplied by the host and never belong in the app bundle. */\nexport function createMessageRouter<const Routes extends MessageRoutes>(\n  routes: Routes,\n  handlers: MessageHandlers<NoInfer<Routes>>\n) {\n  const registered = new Map(\n    Object.entries(routes).map(([name, contract]) => {\n      const handler = handlers[name];\n      if (!name || name.length > 256 || typeof handler !== 'function')\n        throw new Error(\n          'Each message route requires a handler and a bounded name.'\n        );\n\n      return [name, { contract, handler }] as const;\n    })\n  );\n\n  async function dispatch(\n    value: unknown,\n    context: MessageContext\n  ): Promise<unknown> {\n    if (\n      !value ||\n      typeof value !== 'object' ||\n      typeof (value as RoutedMessage).route !== 'string'\n    )\n      throw new MessageRoutingError(\n        'invalid_message',\n        'Invalid routed message.'\n      );\n    const message = value as RoutedMessage;\n    const entry = registered.get(message.route);\n    if (!entry)\n      throw new MessageRoutingError('unknown_route', 'Unknown message route.');\n    let payload: unknown;\n    try {\n      payload = entry.contract.input(message.payload);\n    } catch {\n      throw new MessageRoutingError(\n        'invalid_payload',\n        'Invalid message payload.'\n      );\n    }\n    context.signal.throwIfAborted();\n    let result: unknown;\n    try {\n      result = await entry.handler(payload as never, context);\n    } catch (error) {\n      if (context.signal.aborted) throw context.signal.reason;\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'request_failed',\n        'The message request failed. Retry the request.'\n      );\n    }\n    context.signal.throwIfAborted();\n    try {\n      return entry.contract.output(result, payload as never);\n    } catch (error) {\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'invalid_response',\n        'Invalid message response.'\n      );\n    }\n  }\n\n  return { dispatch };\n}\n\nexport type OperationContracts = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n  }\n>;\nexport type DataQueryInput<Operations extends OperationContracts> = {\n  [Name in keyof Operations & string]: {\n    operation: Name;\n    input: ReturnType<Operations[Name]['input']>;\n  };\n}[keyof Operations & string];\nexport type DataQueryBody<Output> = {\n  data: Output;\n  requestId: string;\n  queriedAt: string;\n  queryIds: string[];\n  queries?: DisclosedQuery[];\n};\nexport type DataQueryRoute<Operations extends OperationContracts> =\n  MessageRoute<DataQueryInput<Operations>, TransportResponse> & {\n    operations: Operations | undefined;\n  };\nexport type MessageOutput<Route extends MessageRoutes[string], Input> =\n  Route extends DataQueryRoute<infer Operations>\n    ? Input extends { operation: infer Name extends keyof Operations }\n      ? {\n          status: number;\n          body: DataQueryBody<ReturnType<Operations[Name]['output']>>;\n        }\n      : never\n    : ReturnType<Route['output']>;\n\n/** Omit contracts only in generic hosts such as the CLI shell, where Bun validates operations. */\nexport function defineDataQueryRoute<\n  Operations extends OperationContracts = OperationContracts,\n>(operations?: Operations): DataQueryRoute<Operations> {\n  return {\n    operations,\n    input(value) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid query.');\n      const request = value as { operation?: unknown; input?: unknown };\n      if (\n        typeof request.operation !== 'string' ||\n        !request.operation ||\n        request.operation.length > 256 ||\n        request.operation.includes('/')\n      )\n        throw new Error('Invalid operation.');\n      const operation =\n        operations && Object.hasOwn(operations, request.operation)\n          ? operations[request.operation]\n          : undefined;\n      if (operations && !operation) throw new Error('Unknown operation.');\n\n      return {\n        operation: request.operation,\n        input: operation ? operation.input(request.input) : request.input,\n      } as DataQueryInput<Operations>;\n    },\n    output(value, input) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid data response.');\n      const response = value as TransportResponse;\n      if (\n        !Number.isInteger(response.status) ||\n        response.status < 100 ||\n        response.status > 599 ||\n        !response.body ||\n        typeof response.body !== 'object'\n      )\n        throw new Error('Invalid data response.');\n      const body = response.body as DataQueryBody<unknown> & {\n        error?: { code?: unknown; message?: unknown; requestId?: unknown };\n      };\n      if (response.status < 200 || response.status >= 300) {\n        const failure = body.error;\n        throw new MessageRoutingError(\n          typeof failure?.code === 'string' ? failure.code : 'request_failed',\n          typeof failure?.message === 'string'\n            ? failure.message\n            : 'Could not load data.',\n          typeof failure?.requestId === 'string' ? failure.requestId : undefined\n        );\n      }\n      if (\n        !('data' in body) ||\n        typeof body.requestId !== 'string' ||\n        typeof body.queriedAt !== 'string' ||\n        !Array.isArray(body.queryIds) ||\n        !body.queryIds.every(id => typeof id === 'string')\n      )\n        throw new Error('Invalid data envelope.');\n      if (\n        body.queries !== undefined &&\n        (!Array.isArray(body.queries) ||\n          !body.queries.every(\n            query =>\n              query &&\n              typeof query === 'object' &&\n              typeof query.name === 'string' &&\n              typeof query.statement === 'string' &&\n              (query.queryId === undefined || typeof query.queryId === 'string')\n          ))\n      )\n        throw new Error('Invalid query evidence.');\n      const operation = operations?.[input.operation];\n\n      return {\n        status: response.status,\n        body: {\n          ...body,\n          data: operation ? operation.output(body.data) : body.data,\n        },\n      };\n    },\n  };\n}\n\nexport type NavigationUpdate = {\n  search: string;\n  hash: string;\n  mode: 'push' | 'replace';\n  title?: string;\n};\nexport const navigationUpdateRoute = /* @__PURE__ */ defineMessageRoute({\n  input(value: unknown): NavigationUpdate {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid navigation.');\n    const input = value as NavigationUpdate;\n    if (\n      typeof input.search !== 'string' ||\n      input.search.length > 16_384 ||\n      (input.search !== '' && !input.search.startsWith('?')) ||\n      typeof input.hash !== 'string' ||\n      input.hash.length > 4096 ||\n      (input.hash !== '' && !input.hash.startsWith('#')) ||\n      (input.mode !== 'push' && input.mode !== 'replace') ||\n      (input.title !== undefined &&\n        (typeof input.title !== 'string' || input.title.length > 512))\n    )\n      throw new Error('Invalid navigation.');\n\n    return {\n      search: input.search,\n      hash: input.hash,\n      mode: input.mode,\n      ...(input.title === undefined ? {} : { title: input.title }),\n    };\n  },\n  output(value: unknown): null {\n    if (value !== null) throw new Error('Invalid navigation response.');\n\n    return null;\n  },\n});\nexport const dataAppRoutes = {\n  'data.query': /* @__PURE__ */ defineDataQueryRoute(),\n  'navigation.update': navigationUpdateRoute,\n};\n",
+    "import type { TransportResponse } from '@/src/core/bridge';\nimport type { DisclosedQuery } from '@/src/core/contract';\n\nexport type MessageContext = { signal: AbortSignal };\nexport type RoutedMessage = { route: string; payload: unknown };\nexport type MessageDispatcher = (\n  message: unknown,\n  context: MessageContext\n) => Promise<unknown>;\nexport type MessageTransport = (\n  message: RoutedMessage,\n  signal?: AbortSignal\n) => Promise<unknown>;\nexport type MessageRoute<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown, input: Input) => Output;\n};\nexport type MessageRoutes = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown, input: never) => unknown;\n  }\n>;\nexport type MessageInput<Route extends MessageRoutes[string]> = ReturnType<\n  Route['input']\n>;\nexport type MessageHandlers<Routes extends MessageRoutes> = {\n  [Name in keyof Routes]: (\n    payload: MessageInput<Routes[Name]>,\n    context: MessageContext\n  ) =>\n    | ReturnType<Routes[Name]['output']>\n    | Promise<ReturnType<Routes[Name]['output']>>;\n};\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/MessageRoutingError');\n\n/** Only these deliberate, public failures cross the message boundary. Other errors stay private. */\nexport class MessageRoutingError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    public readonly code: string,\n    message: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'MessageRoutingError';\n  }\n}\n\nexport function defineMessageRoute<Input, Output>(\n  route: MessageRoute<Input, Output>\n): MessageRoute<Input, Output> {\n  return route;\n}\n\n/** Contracts are shared; handlers are supplied by the host and never belong in the app bundle. */\nexport function createMessageRouter<const Routes extends MessageRoutes>(\n  routes: Routes,\n  handlers: MessageHandlers<NoInfer<Routes>>\n) {\n  const registered = new Map(\n    Object.entries(routes).map(([name, contract]) => {\n      const handler = handlers[name];\n      if (!name || name.length > 256 || typeof handler !== 'function')\n        throw new Error(\n          'Each message route requires a handler and a bounded name.'\n        );\n\n      return [name, { contract, handler }] as const;\n    })\n  );\n\n  async function dispatch(\n    value: unknown,\n    context: MessageContext\n  ): Promise<unknown> {\n    if (\n      !value ||\n      typeof value !== 'object' ||\n      typeof (value as RoutedMessage).route !== 'string'\n    )\n      throw new MessageRoutingError(\n        'invalid_message',\n        'Invalid routed message.'\n      );\n    const message = value as RoutedMessage;\n    const entry = registered.get(message.route);\n    if (!entry)\n      throw new MessageRoutingError('unknown_route', 'Unknown message route.');\n    let payload: unknown;\n    try {\n      payload = entry.contract.input(message.payload);\n    } catch {\n      throw new MessageRoutingError(\n        'invalid_payload',\n        'Invalid message payload.'\n      );\n    }\n    context.signal.throwIfAborted();\n    let result: unknown;\n    try {\n      result = await entry.handler(payload as never, context);\n    } catch (error) {\n      if (context.signal.aborted) throw context.signal.reason;\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'request_failed',\n        'The message request failed. Retry the request.'\n      );\n    }\n    context.signal.throwIfAborted();\n    try {\n      return entry.contract.output(result, payload as never);\n    } catch (error) {\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'invalid_response',\n        'Invalid message response.'\n      );\n    }\n  }\n\n  return { dispatch };\n}\n\nexport type OperationContracts = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n  }\n>;\nexport type DataQueryInput<Operations extends OperationContracts> = {\n  [Name in keyof Operations & string]: {\n    operation: Name;\n    input: ReturnType<Operations[Name]['input']>;\n  };\n}[keyof Operations & string];\nexport type DataQueryBody<Output> = {\n  data: Output;\n  requestId: string;\n  queriedAt: string;\n  queryIds: string[];\n  queries?: DisclosedQuery[];\n};\nexport type DataQueryRoute<Operations extends OperationContracts> =\n  MessageRoute<DataQueryInput<Operations>, TransportResponse> & {\n    operations: Operations | undefined;\n  };\nexport type MessageOutput<Route extends MessageRoutes[string], Input> =\n  Route extends DataQueryRoute<infer Operations>\n    ? Input extends { operation: infer Name extends keyof Operations }\n      ? {\n          status: number;\n          body: DataQueryBody<ReturnType<Operations[Name]['output']>>;\n        }\n      : never\n    : ReturnType<Route['output']>;\n\n/** Omit contracts only in generic hosts such as the CLI shell, where Bun validates operations. */\nexport function defineDataQueryRoute<\n  Operations extends OperationContracts = OperationContracts,\n>(operations?: Operations): DataQueryRoute<Operations> {\n  return {\n    operations,\n    input(value) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid query.');\n      const request = value as { operation?: unknown; input?: unknown };\n      if (\n        typeof request.operation !== 'string' ||\n        !request.operation ||\n        request.operation.length > 256 ||\n        request.operation.includes('/')\n      )\n        throw new Error('Invalid operation.');\n      const operation =\n        operations && Object.hasOwn(operations, request.operation)\n          ? operations[request.operation]\n          : undefined;\n      if (operations && !operation) throw new Error('Unknown operation.');\n\n      return {\n        operation: request.operation,\n        input: operation ? operation.input(request.input) : request.input,\n      } as DataQueryInput<Operations>;\n    },\n    output(value, input) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid data response.');\n      const response = value as TransportResponse;\n      if (\n        !Number.isInteger(response.status) ||\n        response.status < 100 ||\n        response.status > 599 ||\n        !response.body ||\n        typeof response.body !== 'object'\n      )\n        throw new Error('Invalid data response.');\n      const body = response.body as DataQueryBody<unknown> & {\n        error?: { code?: unknown; message?: unknown; requestId?: unknown };\n      };\n      if (response.status < 200 || response.status >= 300) {\n        const failure = body.error;\n        throw new MessageRoutingError(\n          typeof failure?.code === 'string' ? failure.code : 'request_failed',\n          typeof failure?.message === 'string'\n            ? failure.message\n            : 'Could not load data.',\n          typeof failure?.requestId === 'string' ? failure.requestId : undefined\n        );\n      }\n      if (\n        !('data' in body) ||\n        typeof body.requestId !== 'string' ||\n        typeof body.queriedAt !== 'string' ||\n        !Array.isArray(body.queryIds) ||\n        !body.queryIds.every(id => typeof id === 'string')\n      )\n        throw new Error('Invalid data envelope.');\n      if (\n        body.queries !== undefined &&\n        (!Array.isArray(body.queries) ||\n          !body.queries.every(\n            query =>\n              query &&\n              typeof query === 'object' &&\n              typeof query.name === 'string' &&\n              typeof query.statement === 'string' &&\n              (query.queryId === undefined || typeof query.queryId === 'string')\n          ))\n      )\n        throw new Error('Invalid query evidence.');\n      const operation = operations?.[input.operation];\n\n      return {\n        status: response.status,\n        body: {\n          ...body,\n          data: operation ? operation.output(body.data) : body.data,\n        },\n      };\n    },\n  };\n}\n\nexport type NavigationUpdate = {\n  search: string;\n  hash: string;\n  mode: 'push' | 'replace';\n  title?: string;\n};\nexport const navigationUpdateRoute = /* @__PURE__ */ defineMessageRoute({\n  input(value: unknown): NavigationUpdate {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid navigation.');\n    const input = value as NavigationUpdate;\n    if (\n      typeof input.search !== 'string' ||\n      input.search.length > 16_384 ||\n      (input.search !== '' && !input.search.startsWith('?')) ||\n      typeof input.hash !== 'string' ||\n      input.hash.length > 4096 ||\n      (input.hash !== '' && !input.hash.startsWith('#')) ||\n      (input.mode !== 'push' && input.mode !== 'replace') ||\n      (input.title !== undefined &&\n        (typeof input.title !== 'string' || input.title.length > 512))\n    )\n      throw new Error('Invalid navigation.');\n\n    return {\n      search: input.search,\n      hash: input.hash,\n      mode: input.mode,\n      ...(input.title === undefined ? {} : { title: input.title }),\n    };\n  },\n  output(value: unknown): null {\n    if (value !== null) throw new Error('Invalid navigation response.');\n\n    return null;\n  },\n});\nexport const dataAppRoutes = {\n  'data:query': /* @__PURE__ */ defineDataQueryRoute(),\n  'navigation:update': navigationUpdateRoute,\n};\n",
     "import {\n  DataSourceError,\n  type DataOperations,\n  type DisclosedQuery,\n  type Lakehouse,\n} from '@/src/core/contract';\n\nconst sourceErrorMessages = {\n  unauthorized:\n    \"Lakehouse access needs attention. Run this app with 'altertable app dev', or run 'altertable login' and retry.\",\n  forbidden:\n    \"This app cannot access its lakehouse data. Check the selected profile's permissions.\",\n  rate_limited: 'The lakehouse is busy. Wait a moment and retry.',\n  query_rejected:\n    \"A lakehouse query was rejected. Check the app's data operation.\",\n  unavailable: 'The lakehouse is unavailable. Check the connection and retry.',\n};\n\n/** Authorization result for one viewer request. A hosted adapter must scope its lakehouse client. */\nexport type RequestAccess = { lakehouse: Lakehouse; canDiscloseSql: boolean };\n\n/**\n * Execute named operations on the server. The app supplies operations and viewer authorization.\n * JSON, Origin, and Fetch Metadata checks reject cross-site browser POSTs; they do not\n * authenticate another local process. SQL is returned only when both the operation and\n * authorization result permit disclosure.\n */\nexport function createDataHandler(\n  operations: DataOperations,\n  authorize: (request: Request, operation: string) => Promise<RequestAccess>\n) {\n  async function handleDataRequest(request: Request): Promise<Response> {\n    const requestId = crypto.randomUUID();\n    const url = new URL(request.url);\n    if (!url.pathname.startsWith('/api/data/'))\n      return new Response('Not found', { status: 404 });\n    const encodedName = url.pathname.slice('/api/data/'.length);\n    if (!encodedName || encodedName.includes('/'))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    let name: string;\n    try {\n      name = decodeURIComponent(encodedName);\n    } catch {\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    }\n    if (!Object.hasOwn(operations, name))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    if (request.method !== 'POST')\n      return problem(405, 'method_not_allowed', 'Use POST.', requestId);\n    if (\n      request.headers\n        .get('content-type')\n        ?.split(';')[0]\n        ?.trim()\n        .toLowerCase() !== 'application/json'\n    )\n      return problem(\n        415,\n        'unsupported_media_type',\n        'Use application/json.',\n        requestId\n      );\n    const origin = request.headers.get('origin');\n    const fetchSite = request.headers.get('sec-fetch-site');\n    const fetchMode = request.headers.get('sec-fetch-mode');\n    if (\n      (origin !== null && origin !== url.origin) ||\n      (fetchSite !== null && fetchSite !== 'same-origin') ||\n      (fetchSite !== null && origin === null) ||\n      (fetchMode !== null &&\n        fetchMode !== 'cors' &&\n        fetchMode !== 'same-origin')\n    )\n      return problem(\n        403,\n        'cross_origin_request',\n        'The data request must come from this app.',\n        requestId\n      );\n    let access: RequestAccess;\n    try {\n      access = await authorize(request, name);\n    } catch {\n      return problem(\n        403,\n        'forbidden',\n        'You cannot run this data operation.',\n        requestId\n      );\n    }\n    const operation = operations[name]!;\n    let input: unknown;\n    if (request.signal.aborted)\n      return problem(504, 'timeout', 'The data request timed out.', requestId);\n    try {\n      const body = await readInput(request);\n      input = operation.input(JSON.parse(body));\n    } catch (error) {\n      if (error instanceof InputTooLargeError)\n        return problem(\n          413,\n          'input_too_large',\n          'Input is too large.',\n          requestId\n        );\n\n      return problem(\n        400,\n        'invalid_input',\n        \"Check this operation's inputs.\",\n        requestId\n      );\n    }\n    const timeout = AbortSignal.timeout(operation.policy.maxDurationMs);\n    const signal = AbortSignal.any([request.signal, timeout]);\n    const queryIds: string[] = [];\n    const queries: DisclosedQuery[] = [];\n    const boundedLakehouse: Lakehouse = {\n      async queryAll(statement, options) {\n        if (!Number.isInteger(options.limit) || options.limit < 1)\n          throw new Error('Query needs a positive row limit.');\n        if (\n          operation.queryNames &&\n          !Object.values(operation.queryNames).includes(options.name ?? '')\n        )\n          throw new Error(\n            `Query name is not registered for operation ${name}.`\n          );\n        const query: DisclosedQuery = {\n          name: options.name ?? `Query ${queries.length + 1}`,\n          statement,\n        };\n        queries.push(query);\n        let result;\n        try {\n          result = await access.lakehouse.queryAll(statement, {\n            limit: Math.min(options.limit, operation.policy.maxQueryRows),\n            signal: AbortSignal.any([signal, options.signal]),\n          });\n        } catch (error) {\n          if (error instanceof DataSourceError) error.queryName = query.name;\n          throw error;\n        }\n        if (result.rows.length > operation.policy.maxQueryRows)\n          throw new Error('Result exceeds row limit.');\n        if (result.queryId) {\n          query.queryId = result.queryId;\n          queryIds.push(result.queryId);\n        }\n\n        return result;\n      },\n    };\n    let abort: (() => void) | undefined;\n    try {\n      signal.throwIfAborted();\n      const cancelled = new Promise<never>((_, reject) => {\n        function rejectAborted() {\n          reject(new Error('Request aborted.'));\n        }\n        abort = rejectAborted;\n        signal.addEventListener('abort', rejectAborted, { once: true });\n        if (signal.aborted) rejectAborted();\n      });\n      const data = operation.output(\n        await Promise.race([\n          cancelled,\n          Promise.resolve().then(() => {\n            signal.throwIfAborted();\n\n            return operation.run(\n              { lakehouse: boundedLakehouse, signal },\n              input as never\n            );\n          }),\n        ])\n      );\n      const result = {\n        data,\n        requestId,\n        queriedAt: new Date().toISOString(),\n        queryIds,\n        ...(operation.policy.exposeSql && access.canDiscloseSql\n          ? { queries }\n          : {}),\n      };\n      const body = JSON.stringify(result);\n      if (\n        new TextEncoder().encode(body).byteLength >\n        (operation.policy.maxResponseBytes ?? 1_000_000)\n      ) {\n        throw new Error('Response exceeds byte limit.');\n      }\n\n      return new Response(body, {\n        headers: {\n          'cache-control': 'no-store',\n          'content-type': 'application/json',\n        },\n      });\n    } catch (error) {\n      const source = error instanceof DataSourceError ? error : null;\n      console.error(\n        `Data operation ${name} failed (${requestId}): ${source ? `${source.reason}${source.status ? ` (${source.status})` : ''}${source.queryName ? ` in ${source.queryName}` : ''}` : error instanceof Error ? error.name : 'unknown'}`\n      );\n      if (source) {\n        return problem(\n          source.reason === 'rate_limited' ? 429 : 502,\n          `source_${source.reason}`,\n          sourceErrorMessages[source.reason],\n          requestId\n        );\n      }\n\n      return problem(\n        signal.aborted ? 504 : 502,\n        signal.aborted ? 'timeout' : 'query_failed',\n        signal.aborted\n          ? 'The data request timed out.'\n          : 'The data request failed.',\n        requestId\n      );\n    } finally {\n      if (abort) signal.removeEventListener('abort', abort);\n    }\n  }\n\n  return handleDataRequest;\n}\n\nfunction problem(\n  status: number,\n  code: string,\n  message: string,\n  requestId: string\n): Response {\n  return Response.json(\n    { error: { code, message, requestId } },\n    { status, headers: { 'cache-control': 'no-store' } }\n  );\n}\n\nconst MAX_INPUT_BYTES = 16_384;\nclass InputTooLargeError extends Error {}\n\n/** Count encoded bytes before retaining chunks; cancellation also interrupts waiting reads. */\nasync function readInput(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return '';\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  let abort: (() => void) | undefined;\n\n  function cancelReader() {\n    // The source's cancel algorithm may never settle; the handler must still respond.\n    void reader!.cancel().catch(() => {});\n  }\n\n  try {\n    request.signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n        cancelReader();\n      }\n      abort = rejectAborted;\n      request.signal.addEventListener('abort', rejectAborted, { once: true });\n      if (request.signal.aborted) rejectAborted();\n    });\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), cancelled]);\n      if (done) break;\n      size += value.byteLength;\n      if (size > MAX_INPUT_BYTES) {\n        cancelReader();\n        throw new InputTooLargeError();\n      }\n      chunks.push(value);\n    }\n    const bytes = new Uint8Array(size);\n    let offset = 0;\n    for (const chunk of chunks) {\n      bytes.set(chunk, offset);\n      offset += chunk.byteLength;\n    }\n\n    return new TextDecoder().decode(bytes);\n  } finally {\n    if (abort) request.signal.removeEventListener('abort', abort);\n    reader.releaseLock();\n  }\n}\n"
   ],
   "mappings": ";;AAKA;;;ACwFA,IAAM,cAAc,IAAI,KAAK;;;AC5FtB,SAAS,SAAS,CACvB,WACA,SACmB;AAAA,EACnB,IAAI,CAAC;AAAA,IAAW,MAAM,IAAI,MAAM,qBAAqB,SAAS;AAAA;;ACgChE,IAAM,aAAa,OAAO,IAAI,0CAA0C;;AHqOjE,SAAS,gBAA4D,CAC1E,OACO;AAAA,EACP,MAAM,SAAS,OAAO,OAAO,KAAK;AAAA,EAClC,UACE,OAAO,MAAM,UAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,KAChC,IAAI,IAAI,MAAM,EAAE,SAAS,OAAO,QAClC,0CACF;AAAA,EAEA,OAAO;AAAA;AAAA;AAGF,MAAM,wBAAwB,MAAM;AAAA,EAIvB;AAAA,EAMA;AAAA,EATlB;AAAA,EAEA,WAAW,CACO,QAMA,QAChB;AAAA,IACA,MAAM,eAAe,SAAS,SAAS,KAAK,YAAY,KAAK;AAAA,IAR7C;AAAA,IAMA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AA0FO,IAAM,uBAAuB,iBAAiB;AAAA,EACnD,YAAY;AACd,CAAC;;;AI3XD,IAAM,sBAAsB;AAAA,EAC1B,cACE;AAAA,EACF,WACE;AAAA,EACF,cAAc;AAAA,EACd,gBACE;AAAA,EACF,aAAa;AACf;AAWO,SAAS,iBAAiB,CAC/B,YACA,WACA;AAAA,EACA,eAAe,iBAAiB,CAAC,SAAqC;AAAA,IACpE,MAAM,YAAY,OAAO,WAAW;AAAA,IACpC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAAA,IAC/B,IAAI,CAAC,IAAI,SAAS,WAAW,YAAY;AAAA,MACvC,OAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD,MAAM,cAAc,IAAI,SAAS,MAAM,aAAa,MAAM;AAAA,IAC1D,IAAI,CAAC,eAAe,YAAY,SAAS,GAAG;AAAA,MAC1C,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,mBAAmB,WAAW;AAAA,MACrC,MAAM;AAAA,MACN,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA;AAAA,IAEvE,IAAI,CAAC,OAAO,OAAO,YAAY,IAAI;AAAA,MACjC,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI,QAAQ,WAAW;AAAA,MACrB,OAAO,QAAQ,KAAK,sBAAsB,aAAa,SAAS;AAAA,IAClE,IACE,QAAQ,QACL,IAAI,cAAc,GACjB,MAAM,GAAG,EAAE,IACX,KAAK,EACN,YAAY,MAAM;AAAA,MAErB,OAAO,QACL,KACA,0BACA,yBACA,SACF;AAAA,IACF,MAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAAA,IAC3C,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,IACG,WAAW,QAAQ,WAAW,IAAI,UAClC,cAAc,QAAQ,cAAc,iBACpC,cAAc,QAAQ,WAAW,QACjC,cAAc,QACb,cAAc,UACd,cAAc;AAAA,MAEhB,OAAO,QACL,KACA,wBACA,6CACA,SACF;AAAA,IACF,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,MAAM,UAAU,SAAS,IAAI;AAAA,MACtC,MAAM;AAAA,MACN,OAAO,QACL,KACA,aACA,uCACA,SACF;AAAA;AAAA,IAEF,MAAM,YAAY,WAAW;AAAA,IAC7B,IAAI;AAAA,IACJ,IAAI,QAAQ,OAAO;AAAA,MACjB,OAAO,QAAQ,KAAK,WAAW,+BAA+B,SAAS;AAAA,IACzE,IAAI;AAAA,MACF,MAAM,OAAO,MAAM,UAAU,OAAO;AAAA,MACpC,QAAQ,UAAU,MAAM,KAAK,MAAM,IAAI,CAAC;AAAA,MACxC,OAAO,OAAO;AAAA,MACd,IAAI,iBAAiB;AAAA,QACnB,OAAO,QACL,KACA,mBACA,uBACA,SACF;AAAA,MAEF,OAAO,QACL,KACA,iBACA,kCACA,SACF;AAAA;AAAA,IAEF,MAAM,UAAU,YAAY,QAAQ,UAAU,OAAO,aAAa;AAAA,IAClE,MAAM,SAAS,YAAY,IAAI,CAAC,QAAQ,QAAQ,OAAO,CAAC;AAAA,IACxD,MAAM,WAAqB,CAAC;AAAA,IAC5B,MAAM,UAA4B,CAAC;AAAA,IACnC,MAAM,mBAA8B;AAAA,WAC5B,SAAQ,CAAC,WAAW,SAAS;AAAA,QACjC,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,QAAQ,QAAQ;AAAA,UACtD,MAAM,IAAI,MAAM,mCAAmC;AAAA,QACrD,IACE,UAAU,cACV,CAAC,OAAO,OAAO,UAAU,UAAU,EAAE,SAAS,QAAQ,QAAQ,EAAE;AAAA,UAEhE,MAAM,IAAI,MACR,8CAA8C,OAChD;AAAA,QACF,MAAM,QAAwB;AAAA,UAC5B,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,UAChD;AAAA,QACF;AAAA,QACA,QAAQ,KAAK,KAAK;AAAA,QAClB,IAAI;AAAA,QACJ,IAAI;AAAA,UACF,SAAS,MAAM,OAAO,UAAU,SAAS,WAAW;AAAA,YAClD,OAAO,KAAK,IAAI,QAAQ,OAAO,UAAU,OAAO,YAAY;AAAA,YAC5D,QAAQ,YAAY,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC;AAAA,UAClD,CAAC;AAAA,UACD,OAAO,OAAO;AAAA,UACd,IAAI,iBAAiB;AAAA,YAAiB,MAAM,YAAY,MAAM;AAAA,UAC9D,MAAM;AAAA;AAAA,QAER,IAAI,OAAO,KAAK,SAAS,UAAU,OAAO;AAAA,UACxC,MAAM,IAAI,MAAM,2BAA2B;AAAA,QAC7C,IAAI,OAAO,SAAS;AAAA,UAClB,MAAM,UAAU,OAAO;AAAA,UACvB,SAAS,KAAK,OAAO,OAAO;AAAA,QAC9B;AAAA,QAEA,OAAO;AAAA;AAAA,IAEX;AAAA,IACA,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,eAAe;AAAA,MACtB,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,QAClD,SAAS,aAAa,GAAG;AAAA,UACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA;AAAA,QAEtC,QAAQ;AAAA,QACR,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,QAC9D,IAAI,OAAO;AAAA,UAAS,cAAc;AAAA,OACnC;AAAA,MACD,MAAM,OAAO,UAAU,OACrB,MAAM,QAAQ,KAAK;AAAA,QACjB;AAAA,QACA,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAAA,UAC3B,OAAO,eAAe;AAAA,UAEtB,OAAO,UAAU,IACf,EAAE,WAAW,kBAAkB,OAAO,GACtC,KACF;AAAA,SACD;AAAA,MACH,CAAC,CACH;AAAA,MACA,MAAM,SAAS;AAAA,QACb;AAAA,QACA;AAAA,QACA,WAAW,IAAI,KAAK,EAAE,YAAY;AAAA,QAClC;AAAA,WACI,UAAU,OAAO,aAAa,OAAO,iBACrC,EAAE,QAAQ,IACV,CAAC;AAAA,MACP;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,MAAM;AAAA,MAClC,IACE,IAAI,YAAY,EAAE,OAAO,IAAI,EAAE,cAC9B,UAAU,OAAO,oBAAoB,MACtC;AAAA,QACA,MAAM,IAAI,MAAM,8BAA8B;AAAA,MAChD;AAAA,MAEA,OAAO,IAAI,SAAS,MAAM;AAAA,QACxB,SAAS;AAAA,UACP,iBAAiB;AAAA,UACjB,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,MAAM,SAAS,iBAAiB,kBAAkB,QAAQ;AAAA,MAC1D,QAAQ,MACN,kBAAkB,gBAAgB,eAAe,SAAS,GAAG,OAAO,SAAS,OAAO,SAAS,KAAK,OAAO,YAAY,KAAK,OAAO,YAAY,OAAO,OAAO,cAAc,OAAO,iBAAiB,QAAQ,MAAM,OAAO,WACxN;AAAA,MACA,IAAI,QAAQ;AAAA,QACV,OAAO,QACL,OAAO,WAAW,iBAAiB,MAAM,KACzC,UAAU,OAAO,UACjB,oBAAoB,OAAO,SAC3B,SACF;AAAA,MACF;AAAA,MAEA,OAAO,QACL,OAAO,UAAU,MAAM,KACvB,OAAO,UAAU,YAAY,gBAC7B,OAAO,UACH,gCACA,4BACJ,SACF;AAAA,cACA;AAAA,MACA,IAAI;AAAA,QAAO,OAAO,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA,EAIxD,OAAO;AAAA;AAGT,SAAS,OAAO,CACd,QACA,MACA,SACA,WACU;AAAA,EACV,OAAO,SAAS,KACd,EAAE,OAAO,EAAE,MAAM,SAAS,UAAU,EAAE,GACtC,EAAE,QAAQ,SAAS,EAAE,iBAAiB,WAAW,EAAE,CACrD;AAAA;AAGF,IAAM,kBAAkB;AAAA;AACxB,MAAM,2BAA2B,MAAM;AAAC;AAGxC,eAAe,SAAS,CAAC,SAAmC;AAAA,EAC1D,MAAM,SAAS,QAAQ,MAAM,UAAU;AAAA,EACvC,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EACpB,MAAM,SAAuB,CAAC;AAAA,EAC9B,IAAI,OAAO;AAAA,EACX,IAAI;AAAA,EAEJ,SAAS,YAAY,GAAG;AAAA,IAEjB,OAAQ,OAAO,EAAE,MAAM,MAAM,EAAE;AAAA;AAAA,EAGtC,IAAI;AAAA,IACF,QAAQ,OAAO,eAAe;AAAA,IAC9B,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,QACpC,aAAa;AAAA;AAAA,MAEf,QAAQ;AAAA,MACR,QAAQ,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MACtE,IAAI,QAAQ,OAAO;AAAA,QAAS,cAAc;AAAA,KAC3C;AAAA,IACD,OAAO,MAAM;AAAA,MACX,QAAQ,MAAM,UAAU,MAAM,QAAQ,KAAK,CAAC,OAAO,KAAK,GAAG,SAAS,CAAC;AAAA,MACrE,IAAI;AAAA,QAAM;AAAA,MACV,QAAQ,MAAM;AAAA,MACd,IAAI,OAAO,iBAAiB;AAAA,QAC1B,aAAa;AAAA,QACb,MAAM,IAAI;AAAA,MACZ;AAAA,MACA,OAAO,KAAK,KAAK;AAAA,IACnB;AAAA,IACA,MAAM,QAAQ,IAAI,WAAW,IAAI;AAAA,IACjC,IAAI,SAAS;AAAA,IACb,WAAW,SAAS,QAAQ;AAAA,MAC1B,MAAM,IAAI,OAAO,MAAM;AAAA,MACvB,UAAU,MAAM;AAAA,IAClB;AAAA,IAEA,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,YACrC;AAAA,IACA,IAAI;AAAA,MAAO,QAAQ,OAAO,oBAAoB,SAAS,KAAK;AAAA,IAC5D,OAAO,YAAY;AAAA;AAAA;",

package/dist/types/core/messages.d.ts

@@ -71,7 +71,7 @@ export type NavigationUpdate = {
 };
 export declare const navigationUpdateRoute: MessageRoute<NavigationUpdate, null>;
 export declare const dataAppRoutes: {
-    'data.query': DataQueryRoute<OperationContracts>;
-    'navigation.update': MessageRoute<NavigationUpdate, null>;
+    'data:query': DataQueryRoute<OperationContracts>;
+    'navigation:update': MessageRoute<NavigationUpdate, null>;
 };
 export {};

package/docs/client.md

@@ -68,7 +68,7 @@ import {
 const bridge = getDataAppTransport();
 if (!bridge) throw new Error('An iframe transport must be installed first.');
 const messages = createMessageClient(routes, bridge.request);
-const result = await messages.request('echo', 'hello', { signal });
+const result = await messages.request('demo:echo', 'hello', { signal });
 ```
 
 The app supplies shared `routes` and optional `signal`. Both client and host

package/docs/contract.md

@@ -63,6 +63,8 @@ Message contracts describe the payloads allowed between an embedded app and its
 host. Share these contracts with the app; keep handlers and authorization in the
 host/server.
 
+Name routes `{scope}:{action}`, for example `data:query` or `navigation:update`.
+
 ```ts
 import {
   createMessageRouter,
@@ -72,12 +74,12 @@ import {
 import { createNavigationHandler } from '@altertable/data-app/embed';
 
 const routes = {
-  echo: defineMessageRoute({ input: parseString, output: parseString }),
-  'navigation.update': navigationUpdateRoute,
+  'demo:echo': defineMessageRoute({ input: parseString, output: parseString }),
+  'navigation:update': navigationUpdateRoute,
 };
 const router = createMessageRouter(routes, {
-  echo: value => value,
-  'navigation.update': createNavigationHandler(),
+  'demo:echo': value => value,
+  'navigation:update': createNavigationHandler(),
 });
 ```
 
@@ -90,6 +92,6 @@ errors are replaced with a generic failure.
 input and output and preserves its response evidence. It infers the result type
 from the selected operation when used with `createMessageClient`. Share input and
 output parsers, not operation implementations containing SQL or credentials.
-`dataAppRoutes` supplies generic `data.query` and `navigation.update` contracts;
+`dataAppRoutes` supplies generic `data:query` and `navigation:update` contracts;
 generic hosts must delegate operation validation and authorization to their
 server. Request handlers receive `{ signal }` for cancellation.

package/docs/embed.md

@@ -79,7 +79,7 @@ wildcard delivery, but incoming messages still require the exact iframe window,
 null origin, token, document, and session to match.
 
 `createNavigationHandler({ window, reservedSearchParams })` handles the shared
-`navigation.update` route using browser history. Reserved host query parameters
+`navigation:update` route using browser history. Reserved host query parameters
 survive app changes. Supply your own handler when integrating a framework router.
 Host Back/Forward events publish opaque host state through the bridge. The app's
 optional navigation adapter interprets search/hash and synchronizes controls;
@@ -96,3 +96,11 @@ The shell's `startupTimeoutMs` defaults to 30 seconds.
 `onDiagnostic` receives only message `direction` and `type`, never tokens or
 payloads. Routed handlers must authorize every data request. Message validation
 and iframe isolation do not grant access to data or execute SQL.
+
+Message types follow `{scope}:{action}`: `bridge:connect`, `bridge:ready`,
+`bridge:initialize`, `bridge:request`, `bridge:result`, `bridge:error`,
+`bridge:cancel`, `bridge:disconnect`, `runtime:ready`, `runtime:error`,
+`script:load`, and `state:update`. Routed requests use the same convention,
+including `data:query` and `navigation:update`. Hosts, apps, and bootstrap scripts
+must use matching names; the former unscoped and dot-separated names are no
+longer supported.

package/docs/releasing.md

@@ -37,6 +37,11 @@ The manifest starts at the imported runtime version `0.59.1`. This records the
 version baseline, not a claim that it is published. Release Please computes the
 next version from release-relevant commits on `main`.
 
+While the package is below `1.0.0`, breaking changes bump the minor version via
+`bump-minor-pre-major`. Features also bump the minor version, and fixes bump the
+patch version. Breaking changes remain documented in release notes. Remove this
+option when preparing the first stable `1.0.0` release.
+
 ## Release flow
 
 1. Merge Conventional Commits into `main`.

package/docs/starter-agent-instructions.md

@@ -47,5 +47,7 @@ interactions at phone and desktop widths, including loading, empty, error, and
 stale states. Verify that the exploration answers the user's question.
 ```
 
-The CLI's existing starter remains owned by its repository. Updating its template
-and checks to consume the published package is a separate migration.
+A runnable port of the CLI starter lives in
+[`examples/starter`](https://github.com/altertable-ai/data-app/tree/main/examples/starter). It consumes the built public
+package and keeps its own app instructions. Updating CLI scaffolding to consume
+the published package remains a separate migration.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@altertable/data-app",
-  "version": "0.59.1",
+  "version": "0.61.0",
   "description": "Contracts, transport, and React UI for Altertable data apps",
   "keywords": [
     "altertable",
@@ -22,6 +22,9 @@
     "type": "git",
     "url": "git+https://github.com/altertable-ai/data-app.git"
   },
+  "workspaces": [
+    "examples/starter"
+  ],
   "files": [
     "dist",
     "docs",
@@ -90,11 +93,12 @@
     "format": "oxfmt .",
     "format:check": "oxfmt --check .",
     "test": "bun test ./tests",
-    "check": "bun run typecheck && bun run lint && bun run format:check && bun run test && bun run build && bun run test:package",
+    "check": "bun run build && bun run typecheck && bun run lint && bun run format:check && bun run test && bun run test:package && bun run test:starter",
     "test:package": "bun run scripts/check-package.ts",
     "check:workflows": "bash scripts/check-workflows.sh",
     "test:browser": "playwright test --config browser-tests/playwright.config.ts",
-    "lint:fix": "oxlint --type-aware --fix src tests scripts browser-tests"
+    "lint:fix": "oxlint --type-aware --fix src tests scripts browser-tests",
+    "test:starter": "bun run scripts/check-starter.ts"
   },
   "dependencies": {
     "@floating-ui/react": "0.27.20",