@altertable/data-app 0.59.1 → 0.62.0

package/dist/server.js

@@ -12,6 +12,31 @@ function invariant(condition, message) {
 }
 // src/core/messages.ts
 var errorBrand = Symbol.for("@altertable/data-app/MessageRoutingError");
+function defineMessageRoute(route) {
+  return route;
+}
+var sqlQueryRoute = defineMessageRoute({
+  input(value) {
+    if (!value || typeof value !== "object")
+      throw new Error("Invalid SQL query.");
+    const query = value;
+    if (typeof query.statement !== "string" || !query.statement.trim() || typeof query.limit !== "number" || !Number.isSafeInteger(query.limit) || query.limit < 1)
+      throw new Error("Invalid SQL query.");
+    return { statement: query.statement, limit: query.limit };
+  },
+  output(value, input) {
+    if (!value || typeof value !== "object")
+      throw new Error("Invalid query result.");
+    const result = value;
+    if (!Array.isArray(result.columns) || !result.columns.every((column) => column && typeof column.name === "string" && (column.type === undefined || typeof column.type === "string")) || !Array.isArray(result.rows) || result.rows.length > input.limit || !result.rows.every((row) => Array.isArray(row) && row.length === result.columns.length) || result.queryId !== undefined && typeof result.queryId !== "string")
+      throw new Error("Invalid query result.");
+    return {
+      columns: result.columns,
+      rows: result.rows,
+      ...result.queryId === undefined ? {} : { queryId: result.queryId }
+    };
+  }
+});
 // src/core/contract.ts
 function defineQueryNames(names) {
   const values = Object.values(names);
@@ -34,14 +59,146 @@ var connectionQueryNames = defineQueryNames({
   connection: "connection-check"
 });
 
-// src/server/handler.ts
+// src/core/operation.ts
+async function executeDataOperation(operation, value, {
+  operationName,
+  lakehouse,
+  signal: requestSignal,
+  includeSql,
+  requestId
+}) {
+  requestSignal.throwIfAborted();
+  let input;
+  try {
+    input = operation.input(value);
+  } catch {
+    throw new OperationInputError;
+  }
+  const signal = AbortSignal.any([
+    requestSignal,
+    AbortSignal.timeout(operation.policy.maxDurationMs)
+  ]);
+  const execution = createOperationLakehouse(operation, lakehouse, signal, operationName);
+  try {
+    const output = await runOperation(operation, input, {
+      lakehouse: execution.lakehouse,
+      signal
+    });
+    const body = {
+      data: operation.output(output),
+      requestId,
+      queriedAt: new Date().toISOString(),
+      queryIds: execution.queryIds,
+      ...operation.policy.exposeSql && includeSql ? { queries: execution.queries } : {}
+    };
+    const serializedBody = JSON.stringify(body);
+    const responseBytes = new TextEncoder().encode(serializedBody).byteLength;
+    if (responseBytes > (operation.policy.maxResponseBytes ?? 1e6))
+      throw new Error("Response exceeds byte limit.");
+    return { body, serializedBody };
+  } catch (error) {
+    if (signal.aborted && !(error instanceof DataSourceError))
+      throw new OperationTimeoutError;
+    throw error;
+  }
+}
+function createOperationLakehouse(operation, source, signal, operationName) {
+  const queryIds = [];
+  const queries = [];
+  const lakehouse = {
+    async queryAll(statement, options) {
+      if (!Number.isInteger(options.limit) || options.limit < 1)
+        throw new Error("Query needs a positive row limit.");
+      if (operation.queryNames && !Object.values(operation.queryNames).includes(options.name ?? ""))
+        throw new Error(`Query name is not registered for operation ${operationName}.`);
+      const query = {
+        name: options.name ?? `Query ${queries.length + 1}`,
+        statement
+      };
+      queries.push(query);
+      const limit = Math.min(options.limit, operation.policy.maxQueryRows);
+      let result;
+      try {
+        result = await source.queryAll(statement, {
+          limit,
+          signal: AbortSignal.any([signal, options.signal])
+        });
+      } catch (error) {
+        if (error instanceof DataSourceError)
+          error.queryName = query.name;
+        throw error;
+      }
+      if (result.rows.length > limit)
+        throw new Error("Result exceeds row limit.");
+      if (result.queryId) {
+        query.queryId = result.queryId;
+        queryIds.push(result.queryId);
+      }
+      return result;
+    }
+  };
+  return { lakehouse, queries, queryIds };
+}
+async function runOperation(operation, input, { lakehouse, signal }) {
+  let abort;
+  try {
+    signal.throwIfAborted();
+    const cancelled = new Promise((_, reject) => {
+      function rejectAborted() {
+        reject(new Error("Request aborted."));
+      }
+      abort = rejectAborted;
+      signal.addEventListener("abort", rejectAborted, { once: true });
+      if (signal.aborted)
+        rejectAborted();
+    });
+    return await Promise.race([
+      cancelled,
+      Promise.resolve().then(() => {
+        signal.throwIfAborted();
+        return operation.run({ lakehouse, signal }, input);
+      })
+    ]);
+  } finally {
+    if (abort)
+      signal.removeEventListener("abort", abort);
+  }
+}
+
+class OperationTimeoutError extends Error {
+}
+
+class OperationInputError extends Error {
+}
 var sourceErrorMessages = {
-  unauthorized: "Lakehouse access needs attention. Run this app with 'altertable app dev', or run 'altertable login' and retry.",
-  forbidden: "This app cannot access its lakehouse data. Check the selected profile's permissions.",
+  unauthorized: "This app could not authenticate its data connection. Contact the app owner.",
+  forbidden: "This app cannot access the requested data. Contact the app owner.",
   rate_limited: "The lakehouse is busy. Wait a moment and retry.",
   query_rejected: "A lakehouse query was rejected. Check the app's data operation.",
   unavailable: "The lakehouse is unavailable. Check the connection and retry."
 };
+function toDataOperationFailure(error, aborted = false) {
+  if (error instanceof OperationInputError)
+    return {
+      status: 400,
+      code: "invalid_input",
+      message: "Check this operation's inputs."
+    };
+  if (error instanceof DataSourceError)
+    return {
+      status: error.reason === "rate_limited" ? 429 : 502,
+      code: `source_${error.reason}`,
+      message: sourceErrorMessages[error.reason]
+    };
+  const timedOut = aborted || error instanceof OperationTimeoutError;
+  return {
+    status: timedOut ? 504 : 502,
+    code: timedOut ? "timeout" : "query_failed",
+    message: timedOut ? "The data request timed out." : "The data request failed."
+  };
+}
+
+// src/server/handler.ts
 function createDataHandler(operations, authorize) {
   async function handleDataRequest(request) {
     const requestId = crypto.randomUUID();
@@ -80,78 +237,22 @@ function createDataHandler(operations, authorize) {
       return problem(504, "timeout", "The data request timed out.", requestId);
     try {
       const body = await readInput(request);
-      input = operation.input(JSON.parse(body));
+      input = JSON.parse(body);
     } catch (error) {
       if (error instanceof InputTooLargeError)
         return problem(413, "input_too_large", "Input is too large.", requestId);
       return problem(400, "invalid_input", "Check this operation's inputs.", requestId);
     }
-    const timeout = AbortSignal.timeout(operation.policy.maxDurationMs);
-    const signal = AbortSignal.any([request.signal, timeout]);
-    const queryIds = [];
-    const queries = [];
-    const boundedLakehouse = {
-      async queryAll(statement, options) {
-        if (!Number.isInteger(options.limit) || options.limit < 1)
-          throw new Error("Query needs a positive row limit.");
-        if (operation.queryNames && !Object.values(operation.queryNames).includes(options.name ?? ""))
-          throw new Error(`Query name is not registered for operation ${name}.`);
-        const query = {
-          name: options.name ?? `Query ${queries.length + 1}`,
-          statement
-        };
-        queries.push(query);
-        let result;
-        try {
-          result = await access.lakehouse.queryAll(statement, {
-            limit: Math.min(options.limit, operation.policy.maxQueryRows),
-            signal: AbortSignal.any([signal, options.signal])
-          });
-        } catch (error) {
-          if (error instanceof DataSourceError)
-            error.queryName = query.name;
-          throw error;
-        }
-        if (result.rows.length > operation.policy.maxQueryRows)
-          throw new Error("Result exceeds row limit.");
-        if (result.queryId) {
-          query.queryId = result.queryId;
-          queryIds.push(result.queryId);
-        }
-        return result;
-      }
-    };
-    let abort;
+    const signal = request.signal;
     try {
-      signal.throwIfAborted();
-      const cancelled = new Promise((_, reject) => {
-        function rejectAborted() {
-          reject(new Error("Request aborted."));
-        }
-        abort = rejectAborted;
-        signal.addEventListener("abort", rejectAborted, { once: true });
-        if (signal.aborted)
-          rejectAborted();
-      });
-      const data = operation.output(await Promise.race([
-        cancelled,
-        Promise.resolve().then(() => {
-          signal.throwIfAborted();
-          return operation.run({ lakehouse: boundedLakehouse, signal }, input);
-        })
-      ]));
-      const result = {
-        data,
+      const { serializedBody } = await executeDataOperation(operation, input, {
+        lakehouse: access.lakehouse,
+        includeSql: access.canDiscloseSql,
+        signal,
         requestId,
-        queriedAt: new Date().toISOString(),
-        queryIds,
-        ...operation.policy.exposeSql && access.canDiscloseSql ? { queries } : {}
-      };
-      const body = JSON.stringify(result);
-      if (new TextEncoder().encode(body).byteLength > (operation.policy.maxResponseBytes ?? 1e6)) {
-        throw new Error("Response exceeds byte limit.");
-      }
-      return new Response(body, {
+        operationName: name
+      });
+      return new Response(serializedBody, {
         headers: {
           "cache-control": "no-store",
           "content-type": "application/json"
@@ -160,13 +261,8 @@ function createDataHandler(operations, authorize) {
     } catch (error) {
       const source = error instanceof DataSourceError ? error : null;
       console.error(`Data operation ${name} failed (${requestId}): ${source ? `${source.reason}${source.status ? ` (${source.status})` : ""}${source.queryName ? ` in ${source.queryName}` : ""}` : error instanceof Error ? error.name : "unknown"}`);
-      if (source) {
-        return problem(source.reason === "rate_limited" ? 429 : 502, `source_${source.reason}`, sourceErrorMessages[source.reason], requestId);
-      }
-      return problem(signal.aborted ? 504 : 502, signal.aborted ? "timeout" : "query_failed", signal.aborted ? "The data request timed out." : "The data request failed.", requestId);
-    } finally {
-      if (abort)
-        signal.removeEventListener("abort", abort);
+      const failure = toDataOperationFailure(error, signal.aborted);
+      return problem(failure.status, failure.code, failure.message, requestId);
     }
   }
   return handleDataRequest;
@@ -228,4 +324,4 @@ export {
   createDataHandler
 };
 
-//# debugId=14B5C03112DB3A8E64756E2164756E21
+//# debugId=FD4B27B85D0C2A8564756E2164756E21

package/dist/server.js.map

@@ -1,14 +1,15 @@
 {
   "version": 3,
-  "sources": ["../src/core/contract.ts", "../src/core/format.ts", "../src/core/invariant.ts", "../src/core/messages.ts", "../src/server/handler.ts"],
+  "sources": ["../src/core/contract.ts", "../src/core/format.ts", "../src/core/invariant.ts", "../src/core/messages.ts", "../src/core/operation.ts", "../src/server/handler.ts"],
   "sourcesContent": [
-    "/**\n * Shared operation contracts and input/output validation for browser and server.\n * @module @altertable/data-app/contract\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/contract.md\n */\nimport { parseDate, today } from '@internationalized/date';\nimport { formatDateRange } from '@/src/core/format';\nimport { invariant } from '@/src/core/invariant';\n\nexport type QueryResult = {\n  columns: { name: string; type?: string }[];\n  rows: unknown[][];\n  queryId?: string;\n};\n\nexport function parseEmptyInput(value: unknown): Record<string, never> {\n  invariant(\n    typeof value === 'object' &&\n      value !== null &&\n      !Array.isArray(value) &&\n      Object.keys(value).length === 0,\n    'This operation takes no inputs.'\n  );\n\n  return {};\n}\n\nexport function parseTrue(value: unknown): true {\n  invariant(value === true, 'Expected a successful check.');\n\n  return true;\n}\n\nexport type DateRangeInput = { start: string; end: string };\nexport type DateRangeRequest = {\n  range: DateRangeInput;\n  comparison: DateRangeInput | null;\n};\n\n/** The immediately preceding, equally long set of calendar days. */\nexport function previousDateRange({\n  start,\n  end,\n}: DateRangeInput): DateRangeInput {\n  const first = parseDate(start);\n  const last = parseDate(end);\n  const days =\n    (last.toDate('UTC').getTime() - first.toDate('UTC').getTime()) /\n      86_400_000 +\n    1;\n  invariant(days >= 1, 'Date range must start before it ends.');\n  const previousEnd = first.subtract({ days: 1 });\n\n  return {\n    start: previousEnd.subtract({ days: days - 1 }).toString(),\n    end: previousEnd.toString(),\n  };\n}\n\nexport type ReportingPeriod =\n  | { kind: 'rolling'; amount: number; unit: 'hour' | 'day'; end: string }\n  | { kind: 'calendar'; start: string; end: string; timeZone: string };\n\nexport type DateRangeContractOptions = {\n  minDate?: string;\n  maxDate?: string | (() => string);\n  maxRangeDays: number;\n  timeZone: string;\n  completeDays?: boolean;\n};\n\n/** One source policy for the server parser, URL variable, and displayed reporting period. */\nexport function defineDateRangeContract(options: DateRangeContractOptions) {\n  invariant(\n    Number.isInteger(options.maxRangeDays) && options.maxRangeDays > 0,\n    'Date range needs a positive maxRangeDays.'\n  );\n  if (options.minDate) parseDate(options.minDate);\n  if (typeof options.maxDate === 'string') parseDate(options.maxDate);\n  today(options.timeZone);\n\n  function bounds() {\n    const latest = today(options.timeZone).subtract({\n      days: options.completeDays === false ? 0 : 1,\n    });\n    const sourceMax =\n      typeof options.maxDate === 'function'\n        ? options.maxDate()\n        : options.maxDate;\n    const maxDate =\n      sourceMax && parseDate(sourceMax).compare(latest) < 0\n        ? parseDate(sourceMax).toString()\n        : latest.toString();\n\n    return {\n      minDate: options.minDate,\n      maxDate,\n      maxRangeDays: options.maxRangeDays,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function period({ start, end }: DateRangeInput): ReportingPeriod {\n    return {\n      kind: 'calendar',\n      start,\n      end,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function describeInput(input: DateRangeInput) {\n    return `${formatDateRange(input)} ${options.timeZone}`;\n  }\n\n  function comparison(input: DateRangeInput): DateRangeInput | null {\n    const previous = previousDateRange(input);\n\n    return options.minDate && previous.start < options.minDate\n      ? null\n      : previous;\n  }\n\n  function request(value: unknown, compare = false): DateRangeRequest {\n    const range = parseDateRangeInput(value, bounds());\n    const previous = compare ? comparison(range) : null;\n    invariant(\n      !compare || previous,\n      'Comparison is outside available source coverage.'\n    );\n\n    return { range, comparison: previous };\n  }\n\n  function parseRequest(value: unknown): DateRangeRequest {\n    invariant(value && typeof value === 'object', 'Choose a date range.');\n    const input = value as Record<string, unknown>;\n    const parsed = request(input.range, input.comparison != null);\n    if (input.comparison != null) {\n      const supplied = parseDateRangeInput(input.comparison, bounds());\n      invariant(\n        supplied.start === parsed.comparison?.start &&\n          supplied.end === parsed.comparison?.end,\n        'Comparison must be the preceding equal-length range.'\n      );\n    }\n\n    return parsed;\n  }\n\n  return {\n    request,\n    parseRequest,\n    bounds,\n    parse(value: unknown) {\n      return parseDateRangeInput(value, bounds());\n    },\n    period,\n    comparison,\n    describeInput,\n    view: { period, describeInput },\n  };\n}\n\nexport type DateRangeContract = ReturnType<typeof defineDateRangeContract>;\n\n/** Validate calendar dates and a bounded inclusive range on the server. */\nexport function parseDateRangeInput(\n  value: unknown,\n  {\n    minDate,\n    maxDate,\n    maxRangeDays,\n  }: { minDate?: string; maxDate?: string; maxRangeDays: number }\n): DateRangeInput {\n  invariant(\n    value && typeof value === 'object' && !Array.isArray(value),\n    'Choose a date range.'\n  );\n  const { start, end } = value as Record<string, unknown>;\n\n  function day(input: unknown): number {\n    invariant(\n      typeof input === 'string' && /^\\d{4}-\\d{2}-\\d{2}$/.test(input),\n      'Dates must be YYYY-MM-DD.'\n    );\n    const timestamp = Date.parse(`${input}T00:00:00Z`);\n    invariant(\n      Number.isFinite(timestamp) &&\n        new Date(timestamp).toISOString().slice(0, 10) === input,\n      'Choose valid calendar dates.'\n    );\n\n    return timestamp;\n  }\n  const first = day(start);\n  const last = day(end);\n  invariant(\n    Number.isInteger(maxRangeDays) && maxRangeDays > 0,\n    'Maximum range days must be positive.'\n  );\n  invariant(\n    first <= last &&\n      (last - first) / 86_400_000 < maxRangeDays &&\n      (minDate === undefined || first >= day(minDate)) &&\n      (maxDate === undefined || last <= day(maxDate)),\n    `Choose up to ${maxRangeDays} days within the available range.`\n  );\n\n  return { start: start as string, end: end as string };\n}\n\n/** Accepts numeric strings from DuckDB; rejects negative, fractional, and unsafe integers. */\nexport function parseCount(value: unknown): number {\n  const number =\n    typeof value === 'number' || typeof value === 'string'\n      ? Number(value)\n      : NaN;\n  invariant(\n    Number.isSafeInteger(number) &&\n      number >= 0 &&\n      (typeof value !== 'string' || !!value.trim()),\n    'Invalid count in query result.'\n  );\n\n  return number;\n}\n\nexport function parseLabel(value: unknown, maxLength = 100): string {\n  invariant(\n    typeof value === 'string' && !!value && value.length <= maxLength,\n    'Invalid label in query result.'\n  );\n\n  return value;\n}\n\n/** Rejects missing or duplicate columns and rows whose width differs from the column list. */\nexport function rowsAsRecords(\n  result: QueryResult,\n  requiredColumns: readonly string[]\n): Record<string, unknown>[] {\n  const names = result.columns.map(column => column.name);\n  invariant(\n    new Set(names).size === names.length &&\n      requiredColumns.every(name => names.includes(name)),\n    'Query result columns do not match the expected shape.'\n  );\n\n  return result.rows.map(row => {\n    invariant(\n      row.length === names.length,\n      'Query result row has the wrong width.'\n    );\n\n    return Object.fromEntries(names.map((name, index) => [name, row[index]]));\n  });\n}\n\n/** One named statement an operation ran. Returned only when SQL disclosure is allowed. */\nexport type DisclosedQuery = {\n  name: string;\n  statement: string;\n  queryId?: string;\n};\n\nexport function defineQueryNames<const Names extends Record<string, string>>(\n  names: Names\n): Names {\n  const values = Object.values(names);\n  invariant(\n    values.every(name => !!name.trim()) &&\n      new Set(values).size === values.length,\n    'Query names must be nonempty and unique.'\n  );\n\n  return names;\n}\n\nexport class DataSourceError extends Error {\n  queryName?: string;\n\n  constructor(\n    public readonly reason:\n      | 'unauthorized'\n      | 'forbidden'\n      | 'rate_limited'\n      | 'query_rejected'\n      | 'unavailable',\n    public readonly status?: number\n  ) {\n    super(`Data source ${reason}${status ? ` (${status})` : ''}.`);\n    this.name = 'DataSourceError';\n  }\n}\n\n/** Server-only query interface supplied by a local or hosted adapter. */\nexport type Lakehouse = {\n  queryAll(\n    statement: string,\n    options: { limit: number; signal: AbortSignal; name?: string }\n  ): Promise<QueryResult>;\n};\n\nexport type OperationContext = { lakehouse: Lakehouse; signal: AbortSignal };\n\n/**\n * Both parsers run on the server before results cross the JSON boundary. Schema libraries can be\n * used inside either parser.\n */\nexport type DataOperation<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown) => Output;\n  run: (context: OperationContext, input: Input) => Promise<Output>;\n  checks: readonly Input[];\n  queryNames?: Readonly<Record<string, string>>;\n  policy: {\n    maxQueryRows: number;\n    maxDurationMs: number;\n    maxResponseBytes?: number;\n    exposeSql?: boolean;\n  };\n};\n\nexport type OperationQuery<Names extends Readonly<Record<string, string>>> = (\n  name: Names[keyof Names],\n  statement: string,\n  options?: { limit?: number }\n) => Promise<QueryResult>;\n\nexport function defineOperation<\n  Input,\n  Output,\n  const Names extends Readonly<Record<string, string>> = Record<string, never>,\n>(\n  operation: Omit<DataOperation<Input, Output>, 'run' | 'queryNames'> & {\n    queryNames?: Names;\n    run: (\n      context: OperationContext & { query: OperationQuery<NoInfer<Names>> },\n      input: Input\n    ) => Promise<Output>;\n  }\n): DataOperation<Input, Output> & { queryNames?: Names } {\n  invariant(\n    Array.isArray(operation.checks) &&\n      operation.checks.length > 0 &&\n      Number.isInteger(operation.policy.maxQueryRows) &&\n      operation.policy.maxQueryRows > 0 &&\n      Number.isInteger(operation.policy.maxDurationMs) &&\n      operation.policy.maxDurationMs > 0 &&\n      (operation.policy.maxResponseBytes === undefined ||\n        (Number.isInteger(operation.policy.maxResponseBytes) &&\n          operation.policy.maxResponseBytes > 0)),\n    'Each data operation needs check inputs and positive row and duration limits.'\n  );\n  if (operation.queryNames) defineQueryNames(operation.queryNames);\n  for (const input of operation.checks) operation.input(input);\n\n  return {\n    ...operation,\n    run(context, input) {\n      function query(\n        name: Names[keyof Names],\n        statement: string,\n        options?: { limit?: number }\n      ): Promise<QueryResult> {\n        invariant(\n          operation.queryNames &&\n            Object.values(operation.queryNames).includes(name),\n          `Unknown query name: ${name}.`\n        );\n\n        return context.lakehouse.queryAll(statement, {\n          name,\n          limit: options?.limit ?? operation.policy.maxQueryRows,\n          signal: context.signal,\n        });\n      }\n\n      return operation.run({ ...context, query }, input);\n    },\n  };\n}\n\nexport const connectionQueryNames = defineQueryNames({\n  connection: 'connection-check',\n});\n\n/** Success requires a bounded SQL query; it does not establish access to a particular dataset. */\nexport function connectionCheck(): DataOperation<Record<string, never>, true> {\n  return defineOperation({\n    input: parseEmptyInput,\n    output: parseTrue,\n    checks: [{}],\n    queryNames: connectionQueryNames,\n    policy: { maxQueryRows: 1, maxDurationMs: 15_000, exposeSql: true },\n    async run({ query }): Promise<true> {\n      await query(\n        connectionQueryNames.connection,\n        'SELECT 1 AS connection_check'\n      );\n\n      return true;\n    },\n  });\n}\n\nexport type DataOperations = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n    run: (context: OperationContext, input: never) => Promise<unknown>;\n    checks: readonly unknown[];\n    queryNames?: Readonly<Record<string, string>>;\n    policy: DataOperation<never, unknown>['policy'];\n  }\n>;\nexport {\n  dimensionFilter,\n  parseDimensionSelection,\n  parseFacetOptions,\n  dimensionPredicate,\n} from '@/src/core/dimension';\nexport type {\n  DimensionSelection,\n  DimensionMember,\n  DimensionOption,\n  DimensionVariable,\n  DimensionFilterOptions,\n} from '@/src/core/dimension';\n\nexport * from '@/src/core/messages';\nexport type { TransportResponse } from '@/src/core/bridge';\n",
+    "/**\n * Shared operation contracts and input/output validation for browser and server.\n * @module @altertable/data-app/contract\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/contract.md\n */\nimport { parseDate, today } from '@internationalized/date';\nimport { formatDateRange } from '@/src/core/format';\nimport { invariant } from '@/src/core/invariant';\n\nexport type QueryResult = {\n  columns: { name: string; type?: string }[];\n  rows: unknown[][];\n  queryId?: string;\n};\n\nexport function parseEmptyInput(value: unknown): Record<string, never> {\n  invariant(\n    typeof value === 'object' &&\n      value !== null &&\n      !Array.isArray(value) &&\n      Object.keys(value).length === 0,\n    'This operation takes no inputs.'\n  );\n\n  return {};\n}\n\nexport function parseTrue(value: unknown): true {\n  invariant(value === true, 'Expected a successful check.');\n\n  return true;\n}\n\nexport type DateRangeInput = { start: string; end: string };\nexport type DateRangeRequest = {\n  range: DateRangeInput;\n  comparison: DateRangeInput | null;\n};\n\n/** The immediately preceding, equally long set of calendar days. */\nexport function previousDateRange({\n  start,\n  end,\n}: DateRangeInput): DateRangeInput {\n  const first = parseDate(start);\n  const last = parseDate(end);\n  const days =\n    (last.toDate('UTC').getTime() - first.toDate('UTC').getTime()) /\n      86_400_000 +\n    1;\n  invariant(days >= 1, 'Date range must start before it ends.');\n  const previousEnd = first.subtract({ days: 1 });\n\n  return {\n    start: previousEnd.subtract({ days: days - 1 }).toString(),\n    end: previousEnd.toString(),\n  };\n}\n\nexport type ReportingPeriod =\n  | { kind: 'rolling'; amount: number; unit: 'hour' | 'day'; end: string }\n  | { kind: 'calendar'; start: string; end: string; timeZone: string };\n\nexport type DateRangeContractOptions = {\n  minDate?: string;\n  maxDate?: string | (() => string);\n  maxRangeDays: number;\n  timeZone: string;\n  completeDays?: boolean;\n};\n\n/** One source policy for the server parser, URL variable, and displayed reporting period. */\nexport function defineDateRangeContract(options: DateRangeContractOptions) {\n  invariant(\n    Number.isInteger(options.maxRangeDays) && options.maxRangeDays > 0,\n    'Date range needs a positive maxRangeDays.'\n  );\n  if (options.minDate) parseDate(options.minDate);\n  if (typeof options.maxDate === 'string') parseDate(options.maxDate);\n  today(options.timeZone);\n\n  function bounds() {\n    const latest = today(options.timeZone).subtract({\n      days: options.completeDays === false ? 0 : 1,\n    });\n    const sourceMax =\n      typeof options.maxDate === 'function'\n        ? options.maxDate()\n        : options.maxDate;\n    const maxDate =\n      sourceMax && parseDate(sourceMax).compare(latest) < 0\n        ? parseDate(sourceMax).toString()\n        : latest.toString();\n\n    return {\n      minDate: options.minDate,\n      maxDate,\n      maxRangeDays: options.maxRangeDays,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function period({ start, end }: DateRangeInput): ReportingPeriod {\n    return {\n      kind: 'calendar',\n      start,\n      end,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function describeInput(input: DateRangeInput) {\n    return `${formatDateRange(input)} ${options.timeZone}`;\n  }\n\n  function comparison(input: DateRangeInput): DateRangeInput | null {\n    const previous = previousDateRange(input);\n\n    return options.minDate && previous.start < options.minDate\n      ? null\n      : previous;\n  }\n\n  function request(value: unknown, compare = false): DateRangeRequest {\n    const range = parseDateRangeInput(value, bounds());\n    const previous = compare ? comparison(range) : null;\n    invariant(\n      !compare || previous,\n      'Comparison is outside available source coverage.'\n    );\n\n    return { range, comparison: previous };\n  }\n\n  function parseRequest(value: unknown): DateRangeRequest {\n    invariant(value && typeof value === 'object', 'Choose a date range.');\n    const input = value as Record<string, unknown>;\n    const parsed = request(input.range, input.comparison != null);\n    if (input.comparison != null) {\n      const supplied = parseDateRangeInput(input.comparison, bounds());\n      invariant(\n        supplied.start === parsed.comparison?.start &&\n          supplied.end === parsed.comparison?.end,\n        'Comparison must be the preceding equal-length range.'\n      );\n    }\n\n    return parsed;\n  }\n\n  return {\n    request,\n    parseRequest,\n    bounds,\n    parse(value: unknown) {\n      return parseDateRangeInput(value, bounds());\n    },\n    period,\n    comparison,\n    describeInput,\n    view: { period, describeInput },\n  };\n}\n\nexport type DateRangeContract = ReturnType<typeof defineDateRangeContract>;\n\n/** Validate calendar dates and a bounded inclusive range on the server. */\nexport function parseDateRangeInput(\n  value: unknown,\n  {\n    minDate,\n    maxDate,\n    maxRangeDays,\n  }: { minDate?: string; maxDate?: string; maxRangeDays: number }\n): DateRangeInput {\n  invariant(\n    value && typeof value === 'object' && !Array.isArray(value),\n    'Choose a date range.'\n  );\n  const { start, end } = value as Record<string, unknown>;\n\n  function day(input: unknown): number {\n    invariant(\n      typeof input === 'string' && /^\\d{4}-\\d{2}-\\d{2}$/.test(input),\n      'Dates must be YYYY-MM-DD.'\n    );\n    const timestamp = Date.parse(`${input}T00:00:00Z`);\n    invariant(\n      Number.isFinite(timestamp) &&\n        new Date(timestamp).toISOString().slice(0, 10) === input,\n      'Choose valid calendar dates.'\n    );\n\n    return timestamp;\n  }\n  const first = day(start);\n  const last = day(end);\n  invariant(\n    Number.isInteger(maxRangeDays) && maxRangeDays > 0,\n    'Maximum range days must be positive.'\n  );\n  invariant(\n    first <= last &&\n      (last - first) / 86_400_000 < maxRangeDays &&\n      (minDate === undefined || first >= day(minDate)) &&\n      (maxDate === undefined || last <= day(maxDate)),\n    `Choose up to ${maxRangeDays} days within the available range.`\n  );\n\n  return { start: start as string, end: end as string };\n}\n\n/** Accepts numeric strings from DuckDB; rejects negative, fractional, and unsafe integers. */\nexport function parseCount(value: unknown): number {\n  const number =\n    typeof value === 'number' || typeof value === 'string'\n      ? Number(value)\n      : NaN;\n  invariant(\n    Number.isSafeInteger(number) &&\n      number >= 0 &&\n      (typeof value !== 'string' || !!value.trim()),\n    'Invalid count in query result.'\n  );\n\n  return number;\n}\n\nexport function parseLabel(value: unknown, maxLength = 100): string {\n  invariant(\n    typeof value === 'string' && !!value && value.length <= maxLength,\n    'Invalid label in query result.'\n  );\n\n  return value;\n}\n\n/** Rejects missing or duplicate columns and rows whose width differs from the column list. */\nexport function rowsAsRecords(\n  result: QueryResult,\n  requiredColumns: readonly string[]\n): Record<string, unknown>[] {\n  const names = result.columns.map(column => column.name);\n  invariant(\n    new Set(names).size === names.length &&\n      requiredColumns.every(name => names.includes(name)),\n    'Query result columns do not match the expected shape.'\n  );\n\n  return result.rows.map(row => {\n    invariant(\n      row.length === names.length,\n      'Query result row has the wrong width.'\n    );\n\n    return Object.fromEntries(names.map((name, index) => [name, row[index]]));\n  });\n}\n\n/** One named statement an operation ran. Returned only when SQL disclosure is allowed. */\nexport type DisclosedQuery = {\n  name: string;\n  statement: string;\n  queryId?: string;\n};\n\nexport function defineQueryNames<const Names extends Record<string, string>>(\n  names: Names\n): Names {\n  const values = Object.values(names);\n  invariant(\n    values.every(name => !!name.trim()) &&\n      new Set(values).size === values.length,\n    'Query names must be nonempty and unique.'\n  );\n\n  return names;\n}\n\nexport class DataSourceError extends Error {\n  queryName?: string;\n\n  constructor(\n    public readonly reason:\n      | 'unauthorized'\n      | 'forbidden'\n      | 'rate_limited'\n      | 'query_rejected'\n      | 'unavailable',\n    public readonly status?: number\n  ) {\n    super(`Data source ${reason}${status ? ` (${status})` : ''}.`);\n    this.name = 'DataSourceError';\n  }\n}\n\n/** Query interface supplied by a server adapter or an authorized iframe bridge. */\nexport type Lakehouse = {\n  queryAll(\n    statement: string,\n    options: { limit: number; signal: AbortSignal; name?: string }\n  ): Promise<QueryResult>;\n};\n\nexport type OperationContext = { lakehouse: Lakehouse; signal: AbortSignal };\n\n/**\n * Parsers run in the operation executor's runtime: server for HTTP apps, browser for bundle apps.\n * Browser validation does not replace backend authorization or query limits.\n */\nexport type DataOperation<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown) => Output;\n  run: (context: OperationContext, input: Input) => Promise<Output>;\n  checks: readonly Input[];\n  queryNames?: Readonly<Record<string, string>>;\n  policy: {\n    maxQueryRows: number;\n    maxDurationMs: number;\n    maxResponseBytes?: number;\n    exposeSql?: boolean;\n  };\n};\n\nexport type OperationQuery<Names extends Readonly<Record<string, string>>> = (\n  name: Names[keyof Names],\n  statement: string,\n  options?: { limit?: number }\n) => Promise<QueryResult>;\n\nexport function defineOperation<\n  Input,\n  Output,\n  const Names extends Readonly<Record<string, string>> = Record<string, never>,\n>(\n  operation: Omit<DataOperation<Input, Output>, 'run' | 'queryNames'> & {\n    queryNames?: Names;\n    run: (\n      context: OperationContext & { query: OperationQuery<NoInfer<Names>> },\n      input: Input\n    ) => Promise<Output>;\n  }\n): DataOperation<Input, Output> & { queryNames?: Names } {\n  invariant(\n    Array.isArray(operation.checks) &&\n      operation.checks.length > 0 &&\n      Number.isInteger(operation.policy.maxQueryRows) &&\n      operation.policy.maxQueryRows > 0 &&\n      Number.isInteger(operation.policy.maxDurationMs) &&\n      operation.policy.maxDurationMs > 0 &&\n      (operation.policy.maxResponseBytes === undefined ||\n        (Number.isInteger(operation.policy.maxResponseBytes) &&\n          operation.policy.maxResponseBytes > 0)),\n    'Each data operation needs check inputs and positive row and duration limits.'\n  );\n  if (operation.queryNames) defineQueryNames(operation.queryNames);\n  for (const input of operation.checks) operation.input(input);\n\n  return {\n    ...operation,\n    run(context, input) {\n      function query(\n        name: Names[keyof Names],\n        statement: string,\n        options?: { limit?: number }\n      ): Promise<QueryResult> {\n        invariant(\n          operation.queryNames &&\n            Object.values(operation.queryNames).includes(name),\n          `Unknown query name: ${name}.`\n        );\n\n        return context.lakehouse.queryAll(statement, {\n          name,\n          limit: options?.limit ?? operation.policy.maxQueryRows,\n          signal: context.signal,\n        });\n      }\n\n      return operation.run({ ...context, query }, input);\n    },\n  };\n}\n\nexport const connectionQueryNames = defineQueryNames({\n  connection: 'connection-check',\n});\n\n/** Success requires a bounded SQL query; it does not establish access to a particular dataset. */\nexport function connectionCheck(): DataOperation<Record<string, never>, true> {\n  return defineOperation({\n    input: parseEmptyInput,\n    output: parseTrue,\n    checks: [{}],\n    queryNames: connectionQueryNames,\n    policy: { maxQueryRows: 1, maxDurationMs: 15_000, exposeSql: true },\n    async run({ query }): Promise<true> {\n      await query(\n        connectionQueryNames.connection,\n        'SELECT 1 AS connection_check'\n      );\n\n      return true;\n    },\n  });\n}\n\nexport type DataOperations = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n    run: (context: OperationContext, input: never) => Promise<unknown>;\n    checks: readonly unknown[];\n    queryNames?: Readonly<Record<string, string>>;\n    policy: DataOperation<never, unknown>['policy'];\n  }\n>;\nexport {\n  dimensionFilter,\n  parseDimensionSelection,\n  parseFacetOptions,\n  dimensionPredicate,\n} from '@/src/core/dimension';\nexport type {\n  DimensionSelection,\n  DimensionMember,\n  DimensionOption,\n  DimensionVariable,\n  DimensionFilterOptions,\n} from '@/src/core/dimension';\n\nexport * from '@/src/core/messages';\nexport type { TransportResponse } from '@/src/core/bridge';\n",
     "/**\n * Date and number formatting with explicit units and missing-value behavior.\n * @module @altertable/data-app/format\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/format.md\n */\ntype CommonOptions = { locale?: string; missing?: string };\n\n/** Compact, unambiguous calendar dates for labels and request status. */\nexport function formatDateRange({\n  start,\n  end,\n}: {\n  start: string;\n  end: string;\n}): string {\n  const first = new Date(`${start}T00:00:00Z`);\n  const last = new Date(`${end}T00:00:00Z`);\n\n  function format(date: Date, options: Intl.DateTimeFormatOptions) {\n    return new Intl.DateTimeFormat('en-US', {\n      ...options,\n      timeZone: 'UTC',\n    }).format(date);\n  }\n\n  function formatFullDate(date: Date) {\n    return format(date, { month: 'short', day: 'numeric', year: 'numeric' });\n  }\n\n  if (start === end) return formatFullDate(first);\n  if (first.getUTCFullYear() !== last.getUTCFullYear())\n    return `${formatFullDate(first)}–${formatFullDate(last)}`;\n  const firstMonth = format(first, { month: 'short' });\n  const lastMonth = format(last, { month: 'short' });\n  const firstDay = first.getUTCDate();\n  const lastDay = last.getUTCDate();\n\n  return firstMonth === lastMonth\n    ? `${firstMonth} ${firstDay}–${lastDay}, ${last.getUTCFullYear()}`\n    : `${firstMonth} ${firstDay}–${lastMonth} ${lastDay}, ${last.getUTCFullYear()}`;\n}\n\nexport type MetricFormat =\n  | { kind: 'count'; compact?: boolean; locale?: string }\n  | { kind: 'ratio'; maximumFractionDigits?: number; locale?: string }\n  | { kind: 'currency'; currency: string; locale?: string };\n\nexport function formatMetric(value: number, format: MetricFormat): string {\n  if (format.kind === 'count') return formatCount(value, format);\n  if (format.kind === 'ratio') return formatPercent(value, format);\n\n  return formatNumber(value, {\n    style: 'currency',\n    currency: format.currency,\n    locale: format.locale,\n  });\n}\n\n/** Missing and non-finite values use the `missing` label; negative zero renders as zero. */\nexport function formatNumber(\n  value: number | null | undefined,\n  options: CommonOptions & Intl.NumberFormatOptions = {}\n): string {\n  const { locale = 'en-US', missing = '—', ...numberOptions } = options;\n\n  return value === null || value === undefined || !Number.isFinite(value)\n    ? missing\n    : new Intl.NumberFormat(locale, numberOptions).format(\n        Object.is(value, -0) ? 0 : value\n      );\n}\n\n/** Negative and fractional counts render as missing. Compact notation is opt-in. */\nexport function formatCount(\n  value: number | null | undefined,\n  options: CommonOptions & { compact?: boolean } = {}\n): string {\n  const { compact = false, ...common } = options;\n  if (\n    value !== null &&\n    value !== undefined &&\n    (!Number.isInteger(value) || value < 0)\n  ) {\n    return common.missing ?? '—';\n  }\n\n  return formatNumber(value, {\n    ...common,\n    notation: compact ? 'compact' : 'standard',\n    maximumFractionDigits: compact ? 1 : 0,\n  });\n}\n\nconst pluralRules = new Intl.PluralRules();\n\nexport function pluralize(\n  count: number,\n  singular: string,\n  plural = `${singular}s`\n): string {\n  return pluralRules.select(count) === 'one' ? singular : plural;\n}\n\n/** Accepts a ratio (0.116), not a percentage (11.6). */\nexport function formatPercent(\n  ratio: number | null | undefined,\n  options: CommonOptions & { maximumFractionDigits?: number } = {}\n): string {\n  if (ratio === null || ratio === undefined || !Number.isFinite(ratio)) {\n    return options.missing ?? '—';\n  }\n  const digits =\n    options.maximumFractionDigits ?? (Math.abs(ratio) < 0.01 ? 2 : 1);\n  const percentOptions = {\n    locale: options.locale,\n    style: 'percent' as const,\n    maximumFractionDigits: digits,\n  };\n  const smallestVisibleRatio = 10 ** -digits / 100;\n  if (ratio !== 0 && Math.round(Math.abs(ratio) / smallestVisibleRatio) === 0) {\n    const boundary = formatNumber(smallestVisibleRatio, percentOptions);\n\n    return ratio > 0 ? `<${boundary}` : `>−${boundary}`;\n  }\n\n  return formatNumber(ratio, percentOptions);\n}\n",
     "/** Assert an author or data contract while preserving a useful failure message. */\nexport function invariant(\n  condition: unknown,\n  message: string\n): asserts condition {\n  if (!condition) throw new Error(`Invariant failed: ${message}`);\n}\n",
-    "import type { TransportResponse } from '@/src/core/bridge';\nimport type { DisclosedQuery } from '@/src/core/contract';\n\nexport type MessageContext = { signal: AbortSignal };\nexport type RoutedMessage = { route: string; payload: unknown };\nexport type MessageDispatcher = (\n  message: unknown,\n  context: MessageContext\n) => Promise<unknown>;\nexport type MessageTransport = (\n  message: RoutedMessage,\n  signal?: AbortSignal\n) => Promise<unknown>;\nexport type MessageRoute<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown, input: Input) => Output;\n};\nexport type MessageRoutes = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown, input: never) => unknown;\n  }\n>;\nexport type MessageInput<Route extends MessageRoutes[string]> = ReturnType<\n  Route['input']\n>;\nexport type MessageHandlers<Routes extends MessageRoutes> = {\n  [Name in keyof Routes]: (\n    payload: MessageInput<Routes[Name]>,\n    context: MessageContext\n  ) =>\n    | ReturnType<Routes[Name]['output']>\n    | Promise<ReturnType<Routes[Name]['output']>>;\n};\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/MessageRoutingError');\n\n/** Only these deliberate, public failures cross the message boundary. Other errors stay private. */\nexport class MessageRoutingError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    public readonly code: string,\n    message: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'MessageRoutingError';\n  }\n}\n\nexport function defineMessageRoute<Input, Output>(\n  route: MessageRoute<Input, Output>\n): MessageRoute<Input, Output> {\n  return route;\n}\n\n/** Contracts are shared; handlers are supplied by the host and never belong in the app bundle. */\nexport function createMessageRouter<const Routes extends MessageRoutes>(\n  routes: Routes,\n  handlers: MessageHandlers<NoInfer<Routes>>\n) {\n  const registered = new Map(\n    Object.entries(routes).map(([name, contract]) => {\n      const handler = handlers[name];\n      if (!name || name.length > 256 || typeof handler !== 'function')\n        throw new Error(\n          'Each message route requires a handler and a bounded name.'\n        );\n\n      return [name, { contract, handler }] as const;\n    })\n  );\n\n  async function dispatch(\n    value: unknown,\n    context: MessageContext\n  ): Promise<unknown> {\n    if (\n      !value ||\n      typeof value !== 'object' ||\n      typeof (value as RoutedMessage).route !== 'string'\n    )\n      throw new MessageRoutingError(\n        'invalid_message',\n        'Invalid routed message.'\n      );\n    const message = value as RoutedMessage;\n    const entry = registered.get(message.route);\n    if (!entry)\n      throw new MessageRoutingError('unknown_route', 'Unknown message route.');\n    let payload: unknown;\n    try {\n      payload = entry.contract.input(message.payload);\n    } catch {\n      throw new MessageRoutingError(\n        'invalid_payload',\n        'Invalid message payload.'\n      );\n    }\n    context.signal.throwIfAborted();\n    let result: unknown;\n    try {\n      result = await entry.handler(payload as never, context);\n    } catch (error) {\n      if (context.signal.aborted) throw context.signal.reason;\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'request_failed',\n        'The message request failed. Retry the request.'\n      );\n    }\n    context.signal.throwIfAborted();\n    try {\n      return entry.contract.output(result, payload as never);\n    } catch (error) {\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'invalid_response',\n        'Invalid message response.'\n      );\n    }\n  }\n\n  return { dispatch };\n}\n\nexport type OperationContracts = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n  }\n>;\nexport type DataQueryInput<Operations extends OperationContracts> = {\n  [Name in keyof Operations & string]: {\n    operation: Name;\n    input: ReturnType<Operations[Name]['input']>;\n  };\n}[keyof Operations & string];\nexport type DataQueryBody<Output> = {\n  data: Output;\n  requestId: string;\n  queriedAt: string;\n  queryIds: string[];\n  queries?: DisclosedQuery[];\n};\nexport type DataQueryRoute<Operations extends OperationContracts> =\n  MessageRoute<DataQueryInput<Operations>, TransportResponse> & {\n    operations: Operations | undefined;\n  };\nexport type MessageOutput<Route extends MessageRoutes[string], Input> =\n  Route extends DataQueryRoute<infer Operations>\n    ? Input extends { operation: infer Name extends keyof Operations }\n      ? {\n          status: number;\n          body: DataQueryBody<ReturnType<Operations[Name]['output']>>;\n        }\n      : never\n    : ReturnType<Route['output']>;\n\n/** Omit contracts only in generic hosts such as the CLI shell, where Bun validates operations. */\nexport function defineDataQueryRoute<\n  Operations extends OperationContracts = OperationContracts,\n>(operations?: Operations): DataQueryRoute<Operations> {\n  return {\n    operations,\n    input(value) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid query.');\n      const request = value as { operation?: unknown; input?: unknown };\n      if (\n        typeof request.operation !== 'string' ||\n        !request.operation ||\n        request.operation.length > 256 ||\n        request.operation.includes('/')\n      )\n        throw new Error('Invalid operation.');\n      const operation =\n        operations && Object.hasOwn(operations, request.operation)\n          ? operations[request.operation]\n          : undefined;\n      if (operations && !operation) throw new Error('Unknown operation.');\n\n      return {\n        operation: request.operation,\n        input: operation ? operation.input(request.input) : request.input,\n      } as DataQueryInput<Operations>;\n    },\n    output(value, input) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid data response.');\n      const response = value as TransportResponse;\n      if (\n        !Number.isInteger(response.status) ||\n        response.status < 100 ||\n        response.status > 599 ||\n        !response.body ||\n        typeof response.body !== 'object'\n      )\n        throw new Error('Invalid data response.');\n      const body = response.body as DataQueryBody<unknown> & {\n        error?: { code?: unknown; message?: unknown; requestId?: unknown };\n      };\n      if (response.status < 200 || response.status >= 300) {\n        const failure = body.error;\n        throw new MessageRoutingError(\n          typeof failure?.code === 'string' ? failure.code : 'request_failed',\n          typeof failure?.message === 'string'\n            ? failure.message\n            : 'Could not load data.',\n          typeof failure?.requestId === 'string' ? failure.requestId : undefined\n        );\n      }\n      if (\n        !('data' in body) ||\n        typeof body.requestId !== 'string' ||\n        typeof body.queriedAt !== 'string' ||\n        !Array.isArray(body.queryIds) ||\n        !body.queryIds.every(id => typeof id === 'string')\n      )\n        throw new Error('Invalid data envelope.');\n      if (\n        body.queries !== undefined &&\n        (!Array.isArray(body.queries) ||\n          !body.queries.every(\n            query =>\n              query &&\n              typeof query === 'object' &&\n              typeof query.name === 'string' &&\n              typeof query.statement === 'string' &&\n              (query.queryId === undefined || typeof query.queryId === 'string')\n          ))\n      )\n        throw new Error('Invalid query evidence.');\n      const operation = operations?.[input.operation];\n\n      return {\n        status: response.status,\n        body: {\n          ...body,\n          data: operation ? operation.output(body.data) : body.data,\n        },\n      };\n    },\n  };\n}\n\nexport type NavigationUpdate = {\n  search: string;\n  hash: string;\n  mode: 'push' | 'replace';\n  title?: string;\n};\nexport const navigationUpdateRoute = /* @__PURE__ */ defineMessageRoute({\n  input(value: unknown): NavigationUpdate {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid navigation.');\n    const input = value as NavigationUpdate;\n    if (\n      typeof input.search !== 'string' ||\n      input.search.length > 16_384 ||\n      (input.search !== '' && !input.search.startsWith('?')) ||\n      typeof input.hash !== 'string' ||\n      input.hash.length > 4096 ||\n      (input.hash !== '' && !input.hash.startsWith('#')) ||\n      (input.mode !== 'push' && input.mode !== 'replace') ||\n      (input.title !== undefined &&\n        (typeof input.title !== 'string' || input.title.length > 512))\n    )\n      throw new Error('Invalid navigation.');\n\n    return {\n      search: input.search,\n      hash: input.hash,\n      mode: input.mode,\n      ...(input.title === undefined ? {} : { title: input.title }),\n    };\n  },\n  output(value: unknown): null {\n    if (value !== null) throw new Error('Invalid navigation response.');\n\n    return null;\n  },\n});\nexport const dataAppRoutes = {\n  'data.query': /* @__PURE__ */ defineDataQueryRoute(),\n  'navigation.update': navigationUpdateRoute,\n};\n",
-    "import {\n  DataSourceError,\n  type DataOperations,\n  type DisclosedQuery,\n  type Lakehouse,\n} from '@/src/core/contract';\n\nconst sourceErrorMessages = {\n  unauthorized:\n    \"Lakehouse access needs attention. Run this app with 'altertable app dev', or run 'altertable login' and retry.\",\n  forbidden:\n    \"This app cannot access its lakehouse data. Check the selected profile's permissions.\",\n  rate_limited: 'The lakehouse is busy. Wait a moment and retry.',\n  query_rejected:\n    \"A lakehouse query was rejected. Check the app's data operation.\",\n  unavailable: 'The lakehouse is unavailable. Check the connection and retry.',\n};\n\n/** Authorization result for one viewer request. A hosted adapter must scope its lakehouse client. */\nexport type RequestAccess = { lakehouse: Lakehouse; canDiscloseSql: boolean };\n\n/**\n * Execute named operations on the server. The app supplies operations and viewer authorization.\n * JSON, Origin, and Fetch Metadata checks reject cross-site browser POSTs; they do not\n * authenticate another local process. SQL is returned only when both the operation and\n * authorization result permit disclosure.\n */\nexport function createDataHandler(\n  operations: DataOperations,\n  authorize: (request: Request, operation: string) => Promise<RequestAccess>\n) {\n  async function handleDataRequest(request: Request): Promise<Response> {\n    const requestId = crypto.randomUUID();\n    const url = new URL(request.url);\n    if (!url.pathname.startsWith('/api/data/'))\n      return new Response('Not found', { status: 404 });\n    const encodedName = url.pathname.slice('/api/data/'.length);\n    if (!encodedName || encodedName.includes('/'))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    let name: string;\n    try {\n      name = decodeURIComponent(encodedName);\n    } catch {\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    }\n    if (!Object.hasOwn(operations, name))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    if (request.method !== 'POST')\n      return problem(405, 'method_not_allowed', 'Use POST.', requestId);\n    if (\n      request.headers\n        .get('content-type')\n        ?.split(';')[0]\n        ?.trim()\n        .toLowerCase() !== 'application/json'\n    )\n      return problem(\n        415,\n        'unsupported_media_type',\n        'Use application/json.',\n        requestId\n      );\n    const origin = request.headers.get('origin');\n    const fetchSite = request.headers.get('sec-fetch-site');\n    const fetchMode = request.headers.get('sec-fetch-mode');\n    if (\n      (origin !== null && origin !== url.origin) ||\n      (fetchSite !== null && fetchSite !== 'same-origin') ||\n      (fetchSite !== null && origin === null) ||\n      (fetchMode !== null &&\n        fetchMode !== 'cors' &&\n        fetchMode !== 'same-origin')\n    )\n      return problem(\n        403,\n        'cross_origin_request',\n        'The data request must come from this app.',\n        requestId\n      );\n    let access: RequestAccess;\n    try {\n      access = await authorize(request, name);\n    } catch {\n      return problem(\n        403,\n        'forbidden',\n        'You cannot run this data operation.',\n        requestId\n      );\n    }\n    const operation = operations[name]!;\n    let input: unknown;\n    if (request.signal.aborted)\n      return problem(504, 'timeout', 'The data request timed out.', requestId);\n    try {\n      const body = await readInput(request);\n      input = operation.input(JSON.parse(body));\n    } catch (error) {\n      if (error instanceof InputTooLargeError)\n        return problem(\n          413,\n          'input_too_large',\n          'Input is too large.',\n          requestId\n        );\n\n      return problem(\n        400,\n        'invalid_input',\n        \"Check this operation's inputs.\",\n        requestId\n      );\n    }\n    const timeout = AbortSignal.timeout(operation.policy.maxDurationMs);\n    const signal = AbortSignal.any([request.signal, timeout]);\n    const queryIds: string[] = [];\n    const queries: DisclosedQuery[] = [];\n    const boundedLakehouse: Lakehouse = {\n      async queryAll(statement, options) {\n        if (!Number.isInteger(options.limit) || options.limit < 1)\n          throw new Error('Query needs a positive row limit.');\n        if (\n          operation.queryNames &&\n          !Object.values(operation.queryNames).includes(options.name ?? '')\n        )\n          throw new Error(\n            `Query name is not registered for operation ${name}.`\n          );\n        const query: DisclosedQuery = {\n          name: options.name ?? `Query ${queries.length + 1}`,\n          statement,\n        };\n        queries.push(query);\n        let result;\n        try {\n          result = await access.lakehouse.queryAll(statement, {\n            limit: Math.min(options.limit, operation.policy.maxQueryRows),\n            signal: AbortSignal.any([signal, options.signal]),\n          });\n        } catch (error) {\n          if (error instanceof DataSourceError) error.queryName = query.name;\n          throw error;\n        }\n        if (result.rows.length > operation.policy.maxQueryRows)\n          throw new Error('Result exceeds row limit.');\n        if (result.queryId) {\n          query.queryId = result.queryId;\n          queryIds.push(result.queryId);\n        }\n\n        return result;\n      },\n    };\n    let abort: (() => void) | undefined;\n    try {\n      signal.throwIfAborted();\n      const cancelled = new Promise<never>((_, reject) => {\n        function rejectAborted() {\n          reject(new Error('Request aborted.'));\n        }\n        abort = rejectAborted;\n        signal.addEventListener('abort', rejectAborted, { once: true });\n        if (signal.aborted) rejectAborted();\n      });\n      const data = operation.output(\n        await Promise.race([\n          cancelled,\n          Promise.resolve().then(() => {\n            signal.throwIfAborted();\n\n            return operation.run(\n              { lakehouse: boundedLakehouse, signal },\n              input as never\n            );\n          }),\n        ])\n      );\n      const result = {\n        data,\n        requestId,\n        queriedAt: new Date().toISOString(),\n        queryIds,\n        ...(operation.policy.exposeSql && access.canDiscloseSql\n          ? { queries }\n          : {}),\n      };\n      const body = JSON.stringify(result);\n      if (\n        new TextEncoder().encode(body).byteLength >\n        (operation.policy.maxResponseBytes ?? 1_000_000)\n      ) {\n        throw new Error('Response exceeds byte limit.');\n      }\n\n      return new Response(body, {\n        headers: {\n          'cache-control': 'no-store',\n          'content-type': 'application/json',\n        },\n      });\n    } catch (error) {\n      const source = error instanceof DataSourceError ? error : null;\n      console.error(\n        `Data operation ${name} failed (${requestId}): ${source ? `${source.reason}${source.status ? ` (${source.status})` : ''}${source.queryName ? ` in ${source.queryName}` : ''}` : error instanceof Error ? error.name : 'unknown'}`\n      );\n      if (source) {\n        return problem(\n          source.reason === 'rate_limited' ? 429 : 502,\n          `source_${source.reason}`,\n          sourceErrorMessages[source.reason],\n          requestId\n        );\n      }\n\n      return problem(\n        signal.aborted ? 504 : 502,\n        signal.aborted ? 'timeout' : 'query_failed',\n        signal.aborted\n          ? 'The data request timed out.'\n          : 'The data request failed.',\n        requestId\n      );\n    } finally {\n      if (abort) signal.removeEventListener('abort', abort);\n    }\n  }\n\n  return handleDataRequest;\n}\n\nfunction problem(\n  status: number,\n  code: string,\n  message: string,\n  requestId: string\n): Response {\n  return Response.json(\n    { error: { code, message, requestId } },\n    { status, headers: { 'cache-control': 'no-store' } }\n  );\n}\n\nconst MAX_INPUT_BYTES = 16_384;\nclass InputTooLargeError extends Error {}\n\n/** Count encoded bytes before retaining chunks; cancellation also interrupts waiting reads. */\nasync function readInput(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return '';\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  let abort: (() => void) | undefined;\n\n  function cancelReader() {\n    // The source's cancel algorithm may never settle; the handler must still respond.\n    void reader!.cancel().catch(() => {});\n  }\n\n  try {\n    request.signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n        cancelReader();\n      }\n      abort = rejectAborted;\n      request.signal.addEventListener('abort', rejectAborted, { once: true });\n      if (request.signal.aborted) rejectAborted();\n    });\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), cancelled]);\n      if (done) break;\n      size += value.byteLength;\n      if (size > MAX_INPUT_BYTES) {\n        cancelReader();\n        throw new InputTooLargeError();\n      }\n      chunks.push(value);\n    }\n    const bytes = new Uint8Array(size);\n    let offset = 0;\n    for (const chunk of chunks) {\n      bytes.set(chunk, offset);\n      offset += chunk.byteLength;\n    }\n\n    return new TextDecoder().decode(bytes);\n  } finally {\n    if (abort) request.signal.removeEventListener('abort', abort);\n    reader.releaseLock();\n  }\n}\n"
+    "import type { TransportResponse } from '@/src/core/bridge';\nimport type { DisclosedQuery, QueryResult } from '@/src/core/contract';\n\nexport type MessageContext = { signal: AbortSignal };\nexport type RoutedMessage = { route: string; payload: unknown };\nexport type MessageDispatcher = (\n  message: unknown,\n  context: MessageContext\n) => Promise<unknown>;\nexport type MessageTransport = (\n  message: RoutedMessage,\n  signal?: AbortSignal\n) => Promise<unknown>;\nexport type MessageRoute<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown, input: Input) => Output;\n};\nexport type MessageRoutes = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown, input: never) => unknown;\n  }\n>;\nexport type MessageInput<Route extends MessageRoutes[string]> = ReturnType<\n  Route['input']\n>;\nexport type MessageHandlers<Routes extends MessageRoutes> = {\n  [Name in keyof Routes]: (\n    payload: MessageInput<Routes[Name]>,\n    context: MessageContext\n  ) =>\n    | ReturnType<Routes[Name]['output']>\n    | Promise<ReturnType<Routes[Name]['output']>>;\n};\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/MessageRoutingError');\n\n/** Only these deliberate, public failures cross the message boundary. Other errors stay private. */\nexport class MessageRoutingError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    public readonly code: string,\n    message: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'MessageRoutingError';\n  }\n}\n\nexport function defineMessageRoute<Input, Output>(\n  route: MessageRoute<Input, Output>\n): MessageRoute<Input, Output> {\n  return route;\n}\n\n/** Contracts are shared; handlers are supplied by the host and never belong in the app bundle. */\nexport function createMessageRouter<const Routes extends MessageRoutes>(\n  routes: Routes,\n  handlers: MessageHandlers<NoInfer<Routes>>\n) {\n  const registered = new Map(\n    Object.entries(routes).map(([name, contract]) => {\n      const handler = handlers[name];\n      if (!name || name.length > 256 || typeof handler !== 'function')\n        throw new Error(\n          'Each message route requires a handler and a bounded name.'\n        );\n\n      return [name, { contract, handler }] as const;\n    })\n  );\n\n  async function dispatch(\n    value: unknown,\n    context: MessageContext\n  ): Promise<unknown> {\n    if (\n      !value ||\n      typeof value !== 'object' ||\n      typeof (value as RoutedMessage).route !== 'string'\n    )\n      throw new MessageRoutingError(\n        'invalid_message',\n        'Invalid routed message.'\n      );\n    const message = value as RoutedMessage;\n    const entry = registered.get(message.route);\n    if (!entry)\n      throw new MessageRoutingError('unknown_route', 'Unknown message route.');\n    let payload: unknown;\n    try {\n      payload = entry.contract.input(message.payload);\n    } catch {\n      throw new MessageRoutingError(\n        'invalid_payload',\n        'Invalid message payload.'\n      );\n    }\n    context.signal.throwIfAborted();\n    let result: unknown;\n    try {\n      result = await entry.handler(payload as never, context);\n    } catch (error) {\n      if (context.signal.aborted) throw context.signal.reason;\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'request_failed',\n        'The message request failed. Retry the request.'\n      );\n    }\n    context.signal.throwIfAborted();\n    try {\n      return entry.contract.output(result, payload as never);\n    } catch (error) {\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'invalid_response',\n        'Invalid message response.'\n      );\n    }\n  }\n\n  return { dispatch };\n}\n\nexport type OperationContracts = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n  }\n>;\nexport type DataQueryInput<Operations extends OperationContracts> = {\n  [Name in keyof Operations & string]: {\n    operation: Name;\n    input: ReturnType<Operations[Name]['input']>;\n  };\n}[keyof Operations & string];\nexport type DataQueryBody<Output> = {\n  data: Output;\n  requestId: string;\n  queriedAt: string;\n  queryIds: string[];\n  queries?: DisclosedQuery[];\n};\nexport type DataQueryRoute<Operations extends OperationContracts> =\n  MessageRoute<DataQueryInput<Operations>, TransportResponse> & {\n    operations: Operations | undefined;\n  };\nexport type MessageOutput<Route extends MessageRoutes[string], Input> =\n  Route extends DataQueryRoute<infer Operations>\n    ? Input extends { operation: infer Name extends keyof Operations }\n      ? {\n          status: number;\n          body: DataQueryBody<ReturnType<Operations[Name]['output']>>;\n        }\n      : never\n    : ReturnType<Route['output']>;\n\n/** Omit contracts only in generic hosts such as the CLI shell, where Bun validates operations. */\nexport function defineDataQueryRoute<\n  Operations extends OperationContracts = OperationContracts,\n>(operations?: Operations): DataQueryRoute<Operations> {\n  return {\n    operations,\n    input(value) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid query.');\n      const request = value as { operation?: unknown; input?: unknown };\n      if (\n        typeof request.operation !== 'string' ||\n        !request.operation ||\n        request.operation.length > 256 ||\n        request.operation.includes('/')\n      )\n        throw new Error('Invalid operation.');\n      const operation =\n        operations && Object.hasOwn(operations, request.operation)\n          ? operations[request.operation]\n          : undefined;\n      if (operations && !operation) throw new Error('Unknown operation.');\n\n      return {\n        operation: request.operation,\n        input: operation ? operation.input(request.input) : request.input,\n      } as DataQueryInput<Operations>;\n    },\n    output(value, input) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid data response.');\n      const response = value as TransportResponse;\n      if (\n        !Number.isInteger(response.status) ||\n        response.status < 100 ||\n        response.status > 599 ||\n        !response.body ||\n        typeof response.body !== 'object' ||\n        Array.isArray(response.body)\n      )\n        throw new Error('Invalid data response.');\n      const body = response.body as DataQueryBody<unknown> & {\n        error?: { code?: unknown; message?: unknown; requestId?: unknown };\n      };\n      if (response.status < 200 || response.status >= 300) {\n        const failure = body.error;\n        throw new MessageRoutingError(\n          typeof failure?.code === 'string' ? failure.code : 'request_failed',\n          typeof failure?.message === 'string'\n            ? failure.message\n            : 'Could not load data.',\n          typeof failure?.requestId === 'string' ? failure.requestId : undefined\n        );\n      }\n      if (\n        !('data' in body) ||\n        typeof body.requestId !== 'string' ||\n        typeof body.queriedAt !== 'string' ||\n        !Array.isArray(body.queryIds) ||\n        !body.queryIds.every(id => typeof id === 'string')\n      )\n        throw new Error('Invalid data envelope.');\n      if (\n        body.queries !== undefined &&\n        (!Array.isArray(body.queries) ||\n          !body.queries.every(\n            query =>\n              query &&\n              typeof query === 'object' &&\n              typeof query.name === 'string' &&\n              typeof query.statement === 'string' &&\n              (query.queryId === undefined || typeof query.queryId === 'string')\n          ))\n      )\n        throw new Error('Invalid query evidence.');\n      const operation = operations?.[input.operation];\n\n      return {\n        status: response.status,\n        body: {\n          ...body,\n          data: operation ? operation.output(body.data) : body.data,\n        },\n      };\n    },\n  };\n}\n\nexport type NavigationUpdate = {\n  search: string;\n  hash: string;\n  mode: 'push' | 'replace';\n  title?: string;\n};\nexport const navigationUpdateRoute = /* @__PURE__ */ defineMessageRoute({\n  input(value: unknown): NavigationUpdate {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid navigation.');\n    const input = value as NavigationUpdate;\n    if (\n      typeof input.search !== 'string' ||\n      input.search.length > 16_384 ||\n      (input.search !== '' && !input.search.startsWith('?')) ||\n      typeof input.hash !== 'string' ||\n      input.hash.length > 4096 ||\n      (input.hash !== '' && !input.hash.startsWith('#')) ||\n      (input.mode !== 'push' && input.mode !== 'replace') ||\n      (input.title !== undefined &&\n        (typeof input.title !== 'string' || input.title.length > 512))\n    )\n      throw new Error('Invalid navigation.');\n\n    return {\n      search: input.search,\n      hash: input.hash,\n      mode: input.mode,\n      ...(input.title === undefined ? {} : { title: input.title }),\n    };\n  },\n  output(value: unknown): null {\n    if (value !== null) throw new Error('Invalid navigation response.');\n\n    return null;\n  },\n});\nexport type SqlQueryInput = { statement: string; limit: number };\n\n/** SQL delivery for browser-owned operations. Hosts must enforce backend access and resource limits. */\nexport const sqlQueryRoute = defineMessageRoute({\n  input(value: unknown): SqlQueryInput {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid SQL query.');\n    const query = value as { statement?: unknown; limit?: unknown };\n    if (\n      typeof query.statement !== 'string' ||\n      !query.statement.trim() ||\n      typeof query.limit !== 'number' ||\n      !Number.isSafeInteger(query.limit) ||\n      query.limit < 1\n    )\n      throw new Error('Invalid SQL query.');\n\n    return { statement: query.statement, limit: query.limit };\n  },\n  output(value: unknown, input: SqlQueryInput): QueryResult {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid query result.');\n    const result = value as QueryResult;\n    if (\n      !Array.isArray(result.columns) ||\n      !result.columns.every(\n        column =>\n          column &&\n          typeof column.name === 'string' &&\n          (column.type === undefined || typeof column.type === 'string')\n      ) ||\n      !Array.isArray(result.rows) ||\n      result.rows.length > input.limit ||\n      !result.rows.every(\n        row => Array.isArray(row) && row.length === result.columns.length\n      ) ||\n      (result.queryId !== undefined && typeof result.queryId !== 'string')\n    )\n      throw new Error('Invalid query result.');\n\n    return {\n      columns: result.columns,\n      rows: result.rows,\n      ...(result.queryId === undefined ? {} : { queryId: result.queryId }),\n    };\n  },\n});\n\nexport const dataAppRoutes = {\n  'data:query': /* @__PURE__ */ defineDataQueryRoute(),\n  'navigation:update': navigationUpdateRoute,\n};\n",
+    "import {\n  DataSourceError,\n  type DataOperations,\n  type DisclosedQuery,\n  type Lakehouse,\n  type OperationContext,\n} from '@/src/core/contract';\n\ntype Operation = DataOperations[string];\ntype OperationExecutionOptions = {\n  operationName: string;\n  lakehouse: Lakehouse;\n  signal: AbortSignal;\n  /** Include query evidence in the response; this does not keep browser-owned SQL private. */\n  includeSql: boolean;\n  requestId: string;\n};\n\n/** Shared operation execution. Adapters own authorization, delivery, and public errors. */\nexport async function executeDataOperation(\n  operation: Operation,\n  value: unknown,\n  {\n    operationName,\n    lakehouse,\n    signal: requestSignal,\n    includeSql,\n    requestId,\n  }: OperationExecutionOptions\n) {\n  requestSignal.throwIfAborted();\n  let input: unknown;\n  try {\n    input = operation.input(value);\n  } catch {\n    throw new OperationInputError();\n  }\n\n  const signal = AbortSignal.any([\n    requestSignal,\n    AbortSignal.timeout(operation.policy.maxDurationMs),\n  ]);\n  const execution = createOperationLakehouse(\n    operation,\n    lakehouse,\n    signal,\n    operationName\n  );\n  try {\n    const output = await runOperation(operation, input, {\n      lakehouse: execution.lakehouse,\n      signal,\n    });\n    const body = {\n      data: operation.output(output),\n      requestId,\n      queriedAt: new Date().toISOString(),\n      queryIds: execution.queryIds,\n      ...(operation.policy.exposeSql && includeSql\n        ? { queries: execution.queries }\n        : {}),\n    };\n    const serializedBody = JSON.stringify(body);\n    const responseBytes = new TextEncoder().encode(serializedBody).byteLength;\n    if (responseBytes > (operation.policy.maxResponseBytes ?? 1_000_000))\n      throw new Error('Response exceeds byte limit.');\n\n    return { body, serializedBody };\n  } catch (error) {\n    if (signal.aborted && !(error instanceof DataSourceError))\n      throw new OperationTimeoutError();\n    throw error;\n  }\n}\n\n/** Query evidence follows statement invocation order; query IDs retain completion order. */\nfunction createOperationLakehouse(\n  operation: Operation,\n  source: Lakehouse,\n  signal: AbortSignal,\n  operationName: string\n) {\n  const queryIds: string[] = [];\n  const queries: DisclosedQuery[] = [];\n  const lakehouse: Lakehouse = {\n    async queryAll(statement, options) {\n      if (!Number.isInteger(options.limit) || options.limit < 1)\n        throw new Error('Query needs a positive row limit.');\n      if (\n        operation.queryNames &&\n        !Object.values(operation.queryNames).includes(options.name ?? '')\n      )\n        throw new Error(\n          `Query name is not registered for operation ${operationName}.`\n        );\n      const query: DisclosedQuery = {\n        name: options.name ?? `Query ${queries.length + 1}`,\n        statement,\n      };\n      queries.push(query);\n      const limit = Math.min(options.limit, operation.policy.maxQueryRows);\n      let result;\n      try {\n        result = await source.queryAll(statement, {\n          limit,\n          signal: AbortSignal.any([signal, options.signal]),\n        });\n      } catch (error) {\n        if (error instanceof DataSourceError) error.queryName = query.name;\n        throw error;\n      }\n      if (result.rows.length > limit)\n        throw new Error('Result exceeds row limit.');\n      if (result.queryId) {\n        query.queryId = result.queryId;\n        queryIds.push(result.queryId);\n      }\n\n      return result;\n    },\n  };\n\n  return { lakehouse, queries, queryIds };\n}\n\n/** Settle cancellation even when operation code or its lakehouse ignores the signal. */\nasync function runOperation(\n  operation: Operation,\n  input: unknown,\n  { lakehouse, signal }: OperationContext\n) {\n  let abort: (() => void) | undefined;\n  try {\n    signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n      }\n      abort = rejectAborted;\n      signal.addEventListener('abort', rejectAborted, { once: true });\n      if (signal.aborted) rejectAborted();\n    });\n\n    return await Promise.race([\n      cancelled,\n      Promise.resolve().then(() => {\n        signal.throwIfAborted();\n\n        return operation.run({ lakehouse, signal }, input as never);\n      }),\n    ]);\n  } finally {\n    if (abort) signal.removeEventListener('abort', abort);\n  }\n}\n\nclass OperationTimeoutError extends Error {}\n\nclass OperationInputError extends Error {}\n\nconst sourceErrorMessages = {\n  unauthorized:\n    'This app could not authenticate its data connection. Contact the app owner.',\n  forbidden:\n    'This app cannot access the requested data. Contact the app owner.',\n  rate_limited: 'The lakehouse is busy. Wait a moment and retry.',\n  query_rejected:\n    \"A lakehouse query was rejected. Check the app's data operation.\",\n  unavailable: 'The lakehouse is unavailable. Check the connection and retry.',\n};\n\nexport function toDataOperationFailure(error: unknown, aborted = false) {\n  if (error instanceof OperationInputError)\n    return {\n      status: 400,\n      code: 'invalid_input',\n      message: \"Check this operation's inputs.\",\n    };\n  if (error instanceof DataSourceError)\n    return {\n      status: error.reason === 'rate_limited' ? 429 : 502,\n      code: `source_${error.reason}`,\n      message: sourceErrorMessages[error.reason],\n    };\n  const timedOut = aborted || error instanceof OperationTimeoutError;\n  return {\n    status: timedOut ? 504 : 502,\n    code: timedOut ? 'timeout' : 'query_failed',\n    message: timedOut\n      ? 'The data request timed out.'\n      : 'The data request failed.',\n  };\n}\n",
+    "import {\n  executeDataOperation,\n  toDataOperationFailure,\n} from '@/src/core/operation';\nimport {\n  DataSourceError,\n  type DataOperations,\n  type Lakehouse,\n} from '@/src/core/contract';\n\n/** Authorization result for one viewer request. A hosted adapter must scope its lakehouse client. */\nexport type RequestAccess = { lakehouse: Lakehouse; canDiscloseSql: boolean };\n\n/**\n * Execute named operations on the server. The app supplies operations and viewer authorization.\n * JSON, Origin, and Fetch Metadata checks reject cross-site browser POSTs; they do not\n * authenticate another local process. SQL is returned only when both the operation and\n * authorization result permit disclosure.\n */\nexport function createDataHandler(\n  operations: DataOperations,\n  authorize: (request: Request, operation: string) => Promise<RequestAccess>\n) {\n  async function handleDataRequest(request: Request): Promise<Response> {\n    const requestId = crypto.randomUUID();\n    const url = new URL(request.url);\n    if (!url.pathname.startsWith('/api/data/'))\n      return new Response('Not found', { status: 404 });\n    const encodedName = url.pathname.slice('/api/data/'.length);\n    if (!encodedName || encodedName.includes('/'))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    let name: string;\n    try {\n      name = decodeURIComponent(encodedName);\n    } catch {\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    }\n    if (!Object.hasOwn(operations, name))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    if (request.method !== 'POST')\n      return problem(405, 'method_not_allowed', 'Use POST.', requestId);\n    if (\n      request.headers\n        .get('content-type')\n        ?.split(';')[0]\n        ?.trim()\n        .toLowerCase() !== 'application/json'\n    )\n      return problem(\n        415,\n        'unsupported_media_type',\n        'Use application/json.',\n        requestId\n      );\n    const origin = request.headers.get('origin');\n    const fetchSite = request.headers.get('sec-fetch-site');\n    const fetchMode = request.headers.get('sec-fetch-mode');\n    if (\n      (origin !== null && origin !== url.origin) ||\n      (fetchSite !== null && fetchSite !== 'same-origin') ||\n      (fetchSite !== null && origin === null) ||\n      (fetchMode !== null &&\n        fetchMode !== 'cors' &&\n        fetchMode !== 'same-origin')\n    )\n      return problem(\n        403,\n        'cross_origin_request',\n        'The data request must come from this app.',\n        requestId\n      );\n    let access: RequestAccess;\n    try {\n      access = await authorize(request, name);\n    } catch {\n      return problem(\n        403,\n        'forbidden',\n        'You cannot run this data operation.',\n        requestId\n      );\n    }\n    const operation = operations[name]!;\n    let input: unknown;\n    if (request.signal.aborted)\n      return problem(504, 'timeout', 'The data request timed out.', requestId);\n    try {\n      const body = await readInput(request);\n      input = JSON.parse(body);\n    } catch (error) {\n      if (error instanceof InputTooLargeError)\n        return problem(\n          413,\n          'input_too_large',\n          'Input is too large.',\n          requestId\n        );\n\n      return problem(\n        400,\n        'invalid_input',\n        \"Check this operation's inputs.\",\n        requestId\n      );\n    }\n    const signal = request.signal;\n    try {\n      const { serializedBody } = await executeDataOperation(operation, input, {\n        lakehouse: access.lakehouse,\n        includeSql: access.canDiscloseSql,\n        signal,\n        requestId,\n        operationName: name,\n      });\n      return new Response(serializedBody, {\n        headers: {\n          'cache-control': 'no-store',\n          'content-type': 'application/json',\n        },\n      });\n    } catch (error) {\n      const source = error instanceof DataSourceError ? error : null;\n      console.error(\n        `Data operation ${name} failed (${requestId}): ${source ? `${source.reason}${source.status ? ` (${source.status})` : ''}${source.queryName ? ` in ${source.queryName}` : ''}` : error instanceof Error ? error.name : 'unknown'}`\n      );\n      const failure = toDataOperationFailure(error, signal.aborted);\n\n      return problem(failure.status, failure.code, failure.message, requestId);\n    }\n  }\n\n  return handleDataRequest;\n}\n\nfunction problem(\n  status: number,\n  code: string,\n  message: string,\n  requestId: string\n): Response {\n  return Response.json(\n    { error: { code, message, requestId } },\n    { status, headers: { 'cache-control': 'no-store' } }\n  );\n}\n\nconst MAX_INPUT_BYTES = 16_384;\nclass InputTooLargeError extends Error {}\n\n/** Count encoded bytes before retaining chunks; cancellation also interrupts waiting reads. */\nasync function readInput(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return '';\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  let abort: (() => void) | undefined;\n\n  function cancelReader() {\n    // The source's cancel algorithm may never settle; the handler must still respond.\n    void reader!.cancel().catch(() => {});\n  }\n\n  try {\n    request.signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n        cancelReader();\n      }\n      abort = rejectAborted;\n      request.signal.addEventListener('abort', rejectAborted, { once: true });\n      if (request.signal.aborted) rejectAborted();\n    });\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), cancelled]);\n      if (done) break;\n      size += value.byteLength;\n      if (size > MAX_INPUT_BYTES) {\n        cancelReader();\n        throw new InputTooLargeError();\n      }\n      chunks.push(value);\n    }\n    const bytes = new Uint8Array(size);\n    let offset = 0;\n    for (const chunk of chunks) {\n      bytes.set(chunk, offset);\n      offset += chunk.byteLength;\n    }\n\n    return new TextDecoder().decode(bytes);\n  } finally {\n    if (abort) request.signal.removeEventListener('abort', abort);\n    reader.releaseLock();\n  }\n}\n"
   ],
-  "mappings": ";;AAKA;;;ACwFA,IAAM,cAAc,IAAI,KAAK;;;AC5FtB,SAAS,SAAS,CACvB,WACA,SACmB;AAAA,EACnB,IAAI,CAAC;AAAA,IAAW,MAAM,IAAI,MAAM,qBAAqB,SAAS;AAAA;;ACgChE,IAAM,aAAa,OAAO,IAAI,0CAA0C;;AHqOjE,SAAS,gBAA4D,CAC1E,OACO;AAAA,EACP,MAAM,SAAS,OAAO,OAAO,KAAK;AAAA,EAClC,UACE,OAAO,MAAM,UAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,KAChC,IAAI,IAAI,MAAM,EAAE,SAAS,OAAO,QAClC,0CACF;AAAA,EAEA,OAAO;AAAA;AAAA;AAGF,MAAM,wBAAwB,MAAM;AAAA,EAIvB;AAAA,EAMA;AAAA,EATlB;AAAA,EAEA,WAAW,CACO,QAMA,QAChB;AAAA,IACA,MAAM,eAAe,SAAS,SAAS,KAAK,YAAY,KAAK;AAAA,IAR7C;AAAA,IAMA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AA0FO,IAAM,uBAAuB,iBAAiB;AAAA,EACnD,YAAY;AACd,CAAC;;;AI3XD,IAAM,sBAAsB;AAAA,EAC1B,cACE;AAAA,EACF,WACE;AAAA,EACF,cAAc;AAAA,EACd,gBACE;AAAA,EACF,aAAa;AACf;AAWO,SAAS,iBAAiB,CAC/B,YACA,WACA;AAAA,EACA,eAAe,iBAAiB,CAAC,SAAqC;AAAA,IACpE,MAAM,YAAY,OAAO,WAAW;AAAA,IACpC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAAA,IAC/B,IAAI,CAAC,IAAI,SAAS,WAAW,YAAY;AAAA,MACvC,OAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD,MAAM,cAAc,IAAI,SAAS,MAAM,aAAa,MAAM;AAAA,IAC1D,IAAI,CAAC,eAAe,YAAY,SAAS,GAAG;AAAA,MAC1C,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,mBAAmB,WAAW;AAAA,MACrC,MAAM;AAAA,MACN,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA;AAAA,IAEvE,IAAI,CAAC,OAAO,OAAO,YAAY,IAAI;AAAA,MACjC,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI,QAAQ,WAAW;AAAA,MACrB,OAAO,QAAQ,KAAK,sBAAsB,aAAa,SAAS;AAAA,IAClE,IACE,QAAQ,QACL,IAAI,cAAc,GACjB,MAAM,GAAG,EAAE,IACX,KAAK,EACN,YAAY,MAAM;AAAA,MAErB,OAAO,QACL,KACA,0BACA,yBACA,SACF;AAAA,IACF,MAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAAA,IAC3C,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,IACG,WAAW,QAAQ,WAAW,IAAI,UAClC,cAAc,QAAQ,cAAc,iBACpC,cAAc,QAAQ,WAAW,QACjC,cAAc,QACb,cAAc,UACd,cAAc;AAAA,MAEhB,OAAO,QACL,KACA,wBACA,6CACA,SACF;AAAA,IACF,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,MAAM,UAAU,SAAS,IAAI;AAAA,MACtC,MAAM;AAAA,MACN,OAAO,QACL,KACA,aACA,uCACA,SACF;AAAA;AAAA,IAEF,MAAM,YAAY,WAAW;AAAA,IAC7B,IAAI;AAAA,IACJ,IAAI,QAAQ,OAAO;AAAA,MACjB,OAAO,QAAQ,KAAK,WAAW,+BAA+B,SAAS;AAAA,IACzE,IAAI;AAAA,MACF,MAAM,OAAO,MAAM,UAAU,OAAO;AAAA,MACpC,QAAQ,UAAU,MAAM,KAAK,MAAM,IAAI,CAAC;AAAA,MACxC,OAAO,OAAO;AAAA,MACd,IAAI,iBAAiB;AAAA,QACnB,OAAO,QACL,KACA,mBACA,uBACA,SACF;AAAA,MAEF,OAAO,QACL,KACA,iBACA,kCACA,SACF;AAAA;AAAA,IAEF,MAAM,UAAU,YAAY,QAAQ,UAAU,OAAO,aAAa;AAAA,IAClE,MAAM,SAAS,YAAY,IAAI,CAAC,QAAQ,QAAQ,OAAO,CAAC;AAAA,IACxD,MAAM,WAAqB,CAAC;AAAA,IAC5B,MAAM,UAA4B,CAAC;AAAA,IACnC,MAAM,mBAA8B;AAAA,WAC5B,SAAQ,CAAC,WAAW,SAAS;AAAA,QACjC,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,QAAQ,QAAQ;AAAA,UACtD,MAAM,IAAI,MAAM,mCAAmC;AAAA,QACrD,IACE,UAAU,cACV,CAAC,OAAO,OAAO,UAAU,UAAU,EAAE,SAAS,QAAQ,QAAQ,EAAE;AAAA,UAEhE,MAAM,IAAI,MACR,8CAA8C,OAChD;AAAA,QACF,MAAM,QAAwB;AAAA,UAC5B,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,UAChD;AAAA,QACF;AAAA,QACA,QAAQ,KAAK,KAAK;AAAA,QAClB,IAAI;AAAA,QACJ,IAAI;AAAA,UACF,SAAS,MAAM,OAAO,UAAU,SAAS,WAAW;AAAA,YAClD,OAAO,KAAK,IAAI,QAAQ,OAAO,UAAU,OAAO,YAAY;AAAA,YAC5D,QAAQ,YAAY,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC;AAAA,UAClD,CAAC;AAAA,UACD,OAAO,OAAO;AAAA,UACd,IAAI,iBAAiB;AAAA,YAAiB,MAAM,YAAY,MAAM;AAAA,UAC9D,MAAM;AAAA;AAAA,QAER,IAAI,OAAO,KAAK,SAAS,UAAU,OAAO;AAAA,UACxC,MAAM,IAAI,MAAM,2BAA2B;AAAA,QAC7C,IAAI,OAAO,SAAS;AAAA,UAClB,MAAM,UAAU,OAAO;AAAA,UACvB,SAAS,KAAK,OAAO,OAAO;AAAA,QAC9B;AAAA,QAEA,OAAO;AAAA;AAAA,IAEX;AAAA,IACA,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,eAAe;AAAA,MACtB,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,QAClD,SAAS,aAAa,GAAG;AAAA,UACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA;AAAA,QAEtC,QAAQ;AAAA,QACR,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,QAC9D,IAAI,OAAO;AAAA,UAAS,cAAc;AAAA,OACnC;AAAA,MACD,MAAM,OAAO,UAAU,OACrB,MAAM,QAAQ,KAAK;AAAA,QACjB;AAAA,QACA,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAAA,UAC3B,OAAO,eAAe;AAAA,UAEtB,OAAO,UAAU,IACf,EAAE,WAAW,kBAAkB,OAAO,GACtC,KACF;AAAA,SACD;AAAA,MACH,CAAC,CACH;AAAA,MACA,MAAM,SAAS;AAAA,QACb;AAAA,QACA;AAAA,QACA,WAAW,IAAI,KAAK,EAAE,YAAY;AAAA,QAClC;AAAA,WACI,UAAU,OAAO,aAAa,OAAO,iBACrC,EAAE,QAAQ,IACV,CAAC;AAAA,MACP;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,MAAM;AAAA,MAClC,IACE,IAAI,YAAY,EAAE,OAAO,IAAI,EAAE,cAC9B,UAAU,OAAO,oBAAoB,MACtC;AAAA,QACA,MAAM,IAAI,MAAM,8BAA8B;AAAA,MAChD;AAAA,MAEA,OAAO,IAAI,SAAS,MAAM;AAAA,QACxB,SAAS;AAAA,UACP,iBAAiB;AAAA,UACjB,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,MAAM,SAAS,iBAAiB,kBAAkB,QAAQ;AAAA,MAC1D,QAAQ,MACN,kBAAkB,gBAAgB,eAAe,SAAS,GAAG,OAAO,SAAS,OAAO,SAAS,KAAK,OAAO,YAAY,KAAK,OAAO,YAAY,OAAO,OAAO,cAAc,OAAO,iBAAiB,QAAQ,MAAM,OAAO,WACxN;AAAA,MACA,IAAI,QAAQ;AAAA,QACV,OAAO,QACL,OAAO,WAAW,iBAAiB,MAAM,KACzC,UAAU,OAAO,UACjB,oBAAoB,OAAO,SAC3B,SACF;AAAA,MACF;AAAA,MAEA,OAAO,QACL,OAAO,UAAU,MAAM,KACvB,OAAO,UAAU,YAAY,gBAC7B,OAAO,UACH,gCACA,4BACJ,SACF;AAAA,cACA;AAAA,MACA,IAAI;AAAA,QAAO,OAAO,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA,EAIxD,OAAO;AAAA;AAGT,SAAS,OAAO,CACd,QACA,MACA,SACA,WACU;AAAA,EACV,OAAO,SAAS,KACd,EAAE,OAAO,EAAE,MAAM,SAAS,UAAU,EAAE,GACtC,EAAE,QAAQ,SAAS,EAAE,iBAAiB,WAAW,EAAE,CACrD;AAAA;AAGF,IAAM,kBAAkB;AAAA;AACxB,MAAM,2BAA2B,MAAM;AAAC;AAGxC,eAAe,SAAS,CAAC,SAAmC;AAAA,EAC1D,MAAM,SAAS,QAAQ,MAAM,UAAU;AAAA,EACvC,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EACpB,MAAM,SAAuB,CAAC;AAAA,EAC9B,IAAI,OAAO;AAAA,EACX,IAAI;AAAA,EAEJ,SAAS,YAAY,GAAG;AAAA,IAEjB,OAAQ,OAAO,EAAE,MAAM,MAAM,EAAE;AAAA;AAAA,EAGtC,IAAI;AAAA,IACF,QAAQ,OAAO,eAAe;AAAA,IAC9B,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,QACpC,aAAa;AAAA;AAAA,MAEf,QAAQ;AAAA,MACR,QAAQ,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MACtE,IAAI,QAAQ,OAAO;AAAA,QAAS,cAAc;AAAA,KAC3C;AAAA,IACD,OAAO,MAAM;AAAA,MACX,QAAQ,MAAM,UAAU,MAAM,QAAQ,KAAK,CAAC,OAAO,KAAK,GAAG,SAAS,CAAC;AAAA,MACrE,IAAI;AAAA,QAAM;AAAA,MACV,QAAQ,MAAM;AAAA,MACd,IAAI,OAAO,iBAAiB;AAAA,QAC1B,aAAa;AAAA,QACb,MAAM,IAAI;AAAA,MACZ;AAAA,MACA,OAAO,KAAK,KAAK;AAAA,IACnB;AAAA,IACA,MAAM,QAAQ,IAAI,WAAW,IAAI;AAAA,IACjC,IAAI,SAAS;AAAA,IACb,WAAW,SAAS,QAAQ;AAAA,MAC1B,MAAM,IAAI,OAAO,MAAM;AAAA,MACvB,UAAU,MAAM;AAAA,IAClB;AAAA,IAEA,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,YACrC;AAAA,IACA,IAAI;AAAA,MAAO,QAAQ,OAAO,oBAAoB,SAAS,KAAK;AAAA,IAC5D,OAAO,YAAY;AAAA;AAAA;",
-  "debugId": "14B5C03112DB3A8E64756E2164756E21",
+  "mappings": ";;AAKA;;;ACwFA,IAAM,cAAc,IAAI,KAAK;;;AC5FtB,SAAS,SAAS,CACvB,WACA,SACmB;AAAA,EACnB,IAAI,CAAC;AAAA,IAAW,MAAM,IAAI,MAAM,qBAAqB,SAAS;AAAA;;ACgChE,IAAM,aAAa,OAAO,IAAI,0CAA0C;AAuBjE,SAAS,kBAAiC,CAC/C,OAC6B;AAAA,EAC7B,OAAO;AAAA;AA2OF,IAAM,gBAAgB,mBAAmB;AAAA,EAC9C,KAAK,CAAC,OAA+B;AAAA,IACnC,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,MAC7B,MAAM,IAAI,MAAM,oBAAoB;AAAA,IACtC,MAAM,QAAQ;AAAA,IACd,IACE,OAAO,MAAM,cAAc,YAC3B,CAAC,MAAM,UAAU,KAAK,KACtB,OAAO,MAAM,UAAU,YACvB,CAAC,OAAO,cAAc,MAAM,KAAK,KACjC,MAAM,QAAQ;AAAA,MAEd,MAAM,IAAI,MAAM,oBAAoB;AAAA,IAEtC,OAAO,EAAE,WAAW,MAAM,WAAW,OAAO,MAAM,MAAM;AAAA;AAAA,EAE1D,MAAM,CAAC,OAAgB,OAAmC;AAAA,IACxD,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,MAC7B,MAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC,MAAM,SAAS;AAAA,IACf,IACE,CAAC,MAAM,QAAQ,OAAO,OAAO,KAC7B,CAAC,OAAO,QAAQ,MACd,YACE,UACA,OAAO,OAAO,SAAS,aACtB,OAAO,SAAS,aAAa,OAAO,OAAO,SAAS,SACzD,KACA,CAAC,MAAM,QAAQ,OAAO,IAAI,KAC1B,OAAO,KAAK,SAAS,MAAM,SAC3B,CAAC,OAAO,KAAK,MACX,SAAO,MAAM,QAAQ,GAAG,KAAK,IAAI,WAAW,OAAO,QAAQ,MAC7D,KACC,OAAO,YAAY,aAAa,OAAO,OAAO,YAAY;AAAA,MAE3D,MAAM,IAAI,MAAM,uBAAuB;AAAA,IAEzC,OAAO;AAAA,MACL,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO;AAAA,SACT,OAAO,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,OAAO,QAAQ;AAAA,IACpE;AAAA;AAEJ,CAAC;;AH3EM,SAAS,gBAA4D,CAC1E,OACO;AAAA,EACP,MAAM,SAAS,OAAO,OAAO,KAAK;AAAA,EAClC,UACE,OAAO,MAAM,UAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,KAChC,IAAI,IAAI,MAAM,EAAE,SAAS,OAAO,QAClC,0CACF;AAAA,EAEA,OAAO;AAAA;AAAA;AAGF,MAAM,wBAAwB,MAAM;AAAA,EAIvB;AAAA,EAMA;AAAA,EATlB;AAAA,EAEA,WAAW,CACO,QAMA,QAChB;AAAA,IACA,MAAM,eAAe,SAAS,SAAS,KAAK,YAAY,KAAK;AAAA,IAR7C;AAAA,IAMA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AA0FO,IAAM,uBAAuB,iBAAiB;AAAA,EACnD,YAAY;AACd,CAAC;;;AI/WD,eAAsB,oBAAoB,CACxC,WACA;AAAA,EAEE;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,GAEF;AAAA,EACA,cAAc,eAAe;AAAA,EAC7B,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,QAAQ,UAAU,MAAM,KAAK;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM,IAAI;AAAA;AAAA,EAGZ,MAAM,SAAS,YAAY,IAAI;AAAA,IAC7B;AAAA,IACA,YAAY,QAAQ,UAAU,OAAO,aAAa;AAAA,EACpD,CAAC;AAAA,EACD,MAAM,YAAY,yBAChB,WACA,WACA,QACA,aACF;AAAA,EACA,IAAI;AAAA,IACF,MAAM,SAAS,MAAM,aAAa,WAAW,OAAO;AAAA,MAClD,WAAW,UAAU;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,IACD,MAAM,OAAO;AAAA,MACX,MAAM,UAAU,OAAO,MAAM;AAAA,MAC7B;AAAA,MACA,WAAW,IAAI,KAAK,EAAE,YAAY;AAAA,MAClC,UAAU,UAAU;AAAA,SAChB,UAAU,OAAO,aAAa,aAC9B,EAAE,SAAS,UAAU,QAAQ,IAC7B,CAAC;AAAA,IACP;AAAA,IACA,MAAM,iBAAiB,KAAK,UAAU,IAAI;AAAA,IAC1C,MAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,cAAc,EAAE;AAAA,IAC/D,IAAI,iBAAiB,UAAU,OAAO,oBAAoB;AAAA,MACxD,MAAM,IAAI,MAAM,8BAA8B;AAAA,IAEhD,OAAO,EAAE,MAAM,eAAe;AAAA,IAC9B,OAAO,OAAO;AAAA,IACd,IAAI,OAAO,WAAW,EAAE,iBAAiB;AAAA,MACvC,MAAM,IAAI;AAAA,IACZ,MAAM;AAAA;AAAA;AAKV,SAAS,wBAAwB,CAC/B,WACA,QACA,QACA,eACA;AAAA,EACA,MAAM,WAAqB,CAAC;AAAA,EAC5B,MAAM,UAA4B,CAAC;AAAA,EACnC,MAAM,YAAuB;AAAA,SACrB,SAAQ,CAAC,WAAW,SAAS;AAAA,MACjC,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,QAAQ,QAAQ;AAAA,QACtD,MAAM,IAAI,MAAM,mCAAmC;AAAA,MACrD,IACE,UAAU,cACV,CAAC,OAAO,OAAO,UAAU,UAAU,EAAE,SAAS,QAAQ,QAAQ,EAAE;AAAA,QAEhE,MAAM,IAAI,MACR,8CAA8C,gBAChD;AAAA,MACF,MAAM,QAAwB;AAAA,QAC5B,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,QAChD;AAAA,MACF;AAAA,MACA,QAAQ,KAAK,KAAK;AAAA,MAClB,MAAM,QAAQ,KAAK,IAAI,QAAQ,OAAO,UAAU,OAAO,YAAY;AAAA,MACnE,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,SAAS,MAAM,OAAO,SAAS,WAAW;AAAA,UACxC;AAAA,UACA,QAAQ,YAAY,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC;AAAA,QAClD,CAAC;AAAA,QACD,OAAO,OAAO;AAAA,QACd,IAAI,iBAAiB;AAAA,UAAiB,MAAM,YAAY,MAAM;AAAA,QAC9D,MAAM;AAAA;AAAA,MAER,IAAI,OAAO,KAAK,SAAS;AAAA,QACvB,MAAM,IAAI,MAAM,2BAA2B;AAAA,MAC7C,IAAI,OAAO,SAAS;AAAA,QAClB,MAAM,UAAU,OAAO;AAAA,QACvB,SAAS,KAAK,OAAO,OAAO;AAAA,MAC9B;AAAA,MAEA,OAAO;AAAA;AAAA,EAEX;AAAA,EAEA,OAAO,EAAE,WAAW,SAAS,SAAS;AAAA;AAIxC,eAAe,YAAY,CACzB,WACA,SACE,WAAW,UACb;AAAA,EACA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,eAAe;AAAA,IACtB,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA;AAAA,MAEtC,QAAQ;AAAA,MACR,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MAC9D,IAAI,OAAO;AAAA,QAAS,cAAc;AAAA,KACnC;AAAA,IAED,OAAO,MAAM,QAAQ,KAAK;AAAA,MACxB;AAAA,MACA,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAAA,QAC3B,OAAO,eAAe;AAAA,QAEtB,OAAO,UAAU,IAAI,EAAE,WAAW,OAAO,GAAG,KAAc;AAAA,OAC3D;AAAA,IACH,CAAC;AAAA,YACD;AAAA,IACA,IAAI;AAAA,MAAO,OAAO,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA;AAIxD,MAAM,8BAA8B,MAAM;AAAC;AAAA;AAE3C,MAAM,4BAA4B,MAAM;AAAC;AAEzC,IAAM,sBAAsB;AAAA,EAC1B,cACE;AAAA,EACF,WACE;AAAA,EACF,cAAc;AAAA,EACd,gBACE;AAAA,EACF,aAAa;AACf;AAEO,SAAS,sBAAsB,CAAC,OAAgB,UAAU,OAAO;AAAA,EACtE,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,EACF,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ,MAAM,WAAW,iBAAiB,MAAM;AAAA,MAChD,MAAM,UAAU,MAAM;AAAA,MACtB,SAAS,oBAAoB,MAAM;AAAA,IACrC;AAAA,EACF,MAAM,WAAW,WAAW,iBAAiB;AAAA,EAC7C,OAAO;AAAA,IACL,QAAQ,WAAW,MAAM;AAAA,IACzB,MAAM,WAAW,YAAY;AAAA,IAC7B,SAAS,WACL,gCACA;AAAA,EACN;AAAA;;;AC5KK,SAAS,iBAAiB,CAC/B,YACA,WACA;AAAA,EACA,eAAe,iBAAiB,CAAC,SAAqC;AAAA,IACpE,MAAM,YAAY,OAAO,WAAW;AAAA,IACpC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAAA,IAC/B,IAAI,CAAC,IAAI,SAAS,WAAW,YAAY;AAAA,MACvC,OAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD,MAAM,cAAc,IAAI,SAAS,MAAM,aAAa,MAAM;AAAA,IAC1D,IAAI,CAAC,eAAe,YAAY,SAAS,GAAG;AAAA,MAC1C,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,mBAAmB,WAAW;AAAA,MACrC,MAAM;AAAA,MACN,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA;AAAA,IAEvE,IAAI,CAAC,OAAO,OAAO,YAAY,IAAI;AAAA,MACjC,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI,QAAQ,WAAW;AAAA,MACrB,OAAO,QAAQ,KAAK,sBAAsB,aAAa,SAAS;AAAA,IAClE,IACE,QAAQ,QACL,IAAI,cAAc,GACjB,MAAM,GAAG,EAAE,IACX,KAAK,EACN,YAAY,MAAM;AAAA,MAErB,OAAO,QACL,KACA,0BACA,yBACA,SACF;AAAA,IACF,MAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAAA,IAC3C,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,IACG,WAAW,QAAQ,WAAW,IAAI,UAClC,cAAc,QAAQ,cAAc,iBACpC,cAAc,QAAQ,WAAW,QACjC,cAAc,QACb,cAAc,UACd,cAAc;AAAA,MAEhB,OAAO,QACL,KACA,wBACA,6CACA,SACF;AAAA,IACF,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,MAAM,UAAU,SAAS,IAAI;AAAA,MACtC,MAAM;AAAA,MACN,OAAO,QACL,KACA,aACA,uCACA,SACF;AAAA;AAAA,IAEF,MAAM,YAAY,WAAW;AAAA,IAC7B,IAAI;AAAA,IACJ,IAAI,QAAQ,OAAO;AAAA,MACjB,OAAO,QAAQ,KAAK,WAAW,+BAA+B,SAAS;AAAA,IACzE,IAAI;AAAA,MACF,MAAM,OAAO,MAAM,UAAU,OAAO;AAAA,MACpC,QAAQ,KAAK,MAAM,IAAI;AAAA,MACvB,OAAO,OAAO;AAAA,MACd,IAAI,iBAAiB;AAAA,QACnB,OAAO,QACL,KACA,mBACA,uBACA,SACF;AAAA,MAEF,OAAO,QACL,KACA,iBACA,kCACA,SACF;AAAA;AAAA,IAEF,MAAM,SAAS,QAAQ;AAAA,IACvB,IAAI;AAAA,MACF,QAAQ,mBAAmB,MAAM,qBAAqB,WAAW,OAAO;AAAA,QACtE,WAAW,OAAO;AAAA,QAClB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB,CAAC;AAAA,MACD,OAAO,IAAI,SAAS,gBAAgB;AAAA,QAClC,SAAS;AAAA,UACP,iBAAiB;AAAA,UACjB,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,MAAM,SAAS,iBAAiB,kBAAkB,QAAQ;AAAA,MAC1D,QAAQ,MACN,kBAAkB,gBAAgB,eAAe,SAAS,GAAG,OAAO,SAAS,OAAO,SAAS,KAAK,OAAO,YAAY,KAAK,OAAO,YAAY,OAAO,OAAO,cAAc,OAAO,iBAAiB,QAAQ,MAAM,OAAO,WACxN;AAAA,MACA,MAAM,UAAU,uBAAuB,OAAO,OAAO,OAAO;AAAA,MAE5D,OAAO,QAAQ,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,SAAS,SAAS;AAAA;AAAA;AAAA,EAI3E,OAAO;AAAA;AAGT,SAAS,OAAO,CACd,QACA,MACA,SACA,WACU;AAAA,EACV,OAAO,SAAS,KACd,EAAE,OAAO,EAAE,MAAM,SAAS,UAAU,EAAE,GACtC,EAAE,QAAQ,SAAS,EAAE,iBAAiB,WAAW,EAAE,CACrD;AAAA;AAGF,IAAM,kBAAkB;AAAA;AACxB,MAAM,2BAA2B,MAAM;AAAC;AAGxC,eAAe,SAAS,CAAC,SAAmC;AAAA,EAC1D,MAAM,SAAS,QAAQ,MAAM,UAAU;AAAA,EACvC,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EACpB,MAAM,SAAuB,CAAC;AAAA,EAC9B,IAAI,OAAO;AAAA,EACX,IAAI;AAAA,EAEJ,SAAS,YAAY,GAAG;AAAA,IAEjB,OAAQ,OAAO,EAAE,MAAM,MAAM,EAAE;AAAA;AAAA,EAGtC,IAAI;AAAA,IACF,QAAQ,OAAO,eAAe;AAAA,IAC9B,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,QACpC,aAAa;AAAA;AAAA,MAEf,QAAQ;AAAA,MACR,QAAQ,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MACtE,IAAI,QAAQ,OAAO;AAAA,QAAS,cAAc;AAAA,KAC3C;AAAA,IACD,OAAO,MAAM;AAAA,MACX,QAAQ,MAAM,UAAU,MAAM,QAAQ,KAAK,CAAC,OAAO,KAAK,GAAG,SAAS,CAAC;AAAA,MACrE,IAAI;AAAA,QAAM;AAAA,MACV,QAAQ,MAAM;AAAA,MACd,IAAI,OAAO,iBAAiB;AAAA,QAC1B,aAAa;AAAA,QACb,MAAM,IAAI;AAAA,MACZ;AAAA,MACA,OAAO,KAAK,KAAK;AAAA,IACnB;AAAA,IACA,MAAM,QAAQ,IAAI,WAAW,IAAI;AAAA,IACjC,IAAI,SAAS;AAAA,IACb,WAAW,SAAS,QAAQ;AAAA,MAC1B,MAAM,IAAI,OAAO,MAAM;AAAA,MACvB,UAAU,MAAM;AAAA,IAClB;AAAA,IAEA,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,YACrC;AAAA,IACA,IAAI;AAAA,MAAO,QAAQ,OAAO,oBAAoB,SAAS,KAAK;AAAA,IAC5D,OAAO,YAAY;AAAA;AAAA;",
+  "debugId": "FD4B27B85D0C2A8564756E2164756E21",
   "names": []
 }

package/dist/types/client/iframe.d.ts

@@ -10,6 +10,13 @@ export declare function createIframeTransport({ parentOrigin, window: frame, tim
 }): {
     request: (message: RoutedMessage, signal?: AbortSignal) => Promise<unknown>;
     transport: (operation: string, input: unknown, signal?: AbortSignal) => Promise<TransportResponse>;
+    lakehouse: {
+        queryAll(statement: string, { limit, signal }: {
+            limit: number;
+            signal: AbortSignal;
+            name?: string;
+        }): Promise<import("../core/contract.js").QueryResult>;
+    };
     dispose: () => void;
     mode: "bundle" | "url";
     snapshot(): unknown;
@@ -29,6 +36,13 @@ export declare function installDataAppTransport(bridge: ReturnType<typeof create
 export declare function getDataAppTransport(frame?: Window): {
     request: (message: RoutedMessage, signal?: AbortSignal) => Promise<unknown>;
     transport: (operation: string, input: unknown, signal?: AbortSignal) => Promise<TransportResponse>;
+    lakehouse: {
+        queryAll(statement: string, { limit, signal }: {
+            limit: number;
+            signal: AbortSignal;
+            name?: string;
+        }): Promise<import("../core/contract.js").QueryResult>;
+    };
     dispose: () => void;
     mode: "bundle" | "url";
     snapshot(): unknown;