@altertable/data-app 0.59.1

package/dist/react.css.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/server.js

@@ -0,0 +1,231 @@
+// @bun
+// src/core/contract.ts
+import { parseDate, today } from "@internationalized/date";
+
+// src/core/format.ts
+var pluralRules = new Intl.PluralRules;
+
+// src/core/invariant.ts
+function invariant(condition, message) {
+  if (!condition)
+    throw new Error(`Invariant failed: ${message}`);
+}
+// src/core/messages.ts
+var errorBrand = Symbol.for("@altertable/data-app/MessageRoutingError");
+// src/core/contract.ts
+function defineQueryNames(names) {
+  const values = Object.values(names);
+  invariant(values.every((name) => !!name.trim()) && new Set(values).size === values.length, "Query names must be nonempty and unique.");
+  return names;
+}
+
+class DataSourceError extends Error {
+  reason;
+  status;
+  queryName;
+  constructor(reason, status) {
+    super(`Data source ${reason}${status ? ` (${status})` : ""}.`);
+    this.reason = reason;
+    this.status = status;
+    this.name = "DataSourceError";
+  }
+}
+var connectionQueryNames = defineQueryNames({
+  connection: "connection-check"
+});
+
+// src/server/handler.ts
+var sourceErrorMessages = {
+  unauthorized: "Lakehouse access needs attention. Run this app with 'altertable app dev', or run 'altertable login' and retry.",
+  forbidden: "This app cannot access its lakehouse data. Check the selected profile's permissions.",
+  rate_limited: "The lakehouse is busy. Wait a moment and retry.",
+  query_rejected: "A lakehouse query was rejected. Check the app's data operation.",
+  unavailable: "The lakehouse is unavailable. Check the connection and retry."
+};
+function createDataHandler(operations, authorize) {
+  async function handleDataRequest(request) {
+    const requestId = crypto.randomUUID();
+    const url = new URL(request.url);
+    if (!url.pathname.startsWith("/api/data/"))
+      return new Response("Not found", { status: 404 });
+    const encodedName = url.pathname.slice("/api/data/".length);
+    if (!encodedName || encodedName.includes("/"))
+      return problem(404, "not_found", "Unknown data operation.", requestId);
+    let name;
+    try {
+      name = decodeURIComponent(encodedName);
+    } catch {
+      return problem(404, "not_found", "Unknown data operation.", requestId);
+    }
+    if (!Object.hasOwn(operations, name))
+      return problem(404, "not_found", "Unknown data operation.", requestId);
+    if (request.method !== "POST")
+      return problem(405, "method_not_allowed", "Use POST.", requestId);
+    if (request.headers.get("content-type")?.split(";")[0]?.trim().toLowerCase() !== "application/json")
+      return problem(415, "unsupported_media_type", "Use application/json.", requestId);
+    const origin = request.headers.get("origin");
+    const fetchSite = request.headers.get("sec-fetch-site");
+    const fetchMode = request.headers.get("sec-fetch-mode");
+    if (origin !== null && origin !== url.origin || fetchSite !== null && fetchSite !== "same-origin" || fetchSite !== null && origin === null || fetchMode !== null && fetchMode !== "cors" && fetchMode !== "same-origin")
+      return problem(403, "cross_origin_request", "The data request must come from this app.", requestId);
+    let access;
+    try {
+      access = await authorize(request, name);
+    } catch {
+      return problem(403, "forbidden", "You cannot run this data operation.", requestId);
+    }
+    const operation = operations[name];
+    let input;
+    if (request.signal.aborted)
+      return problem(504, "timeout", "The data request timed out.", requestId);
+    try {
+      const body = await readInput(request);
+      input = operation.input(JSON.parse(body));
+    } catch (error) {
+      if (error instanceof InputTooLargeError)
+        return problem(413, "input_too_large", "Input is too large.", requestId);
+      return problem(400, "invalid_input", "Check this operation's inputs.", requestId);
+    }
+    const timeout = AbortSignal.timeout(operation.policy.maxDurationMs);
+    const signal = AbortSignal.any([request.signal, timeout]);
+    const queryIds = [];
+    const queries = [];
+    const boundedLakehouse = {
+      async queryAll(statement, options) {
+        if (!Number.isInteger(options.limit) || options.limit < 1)
+          throw new Error("Query needs a positive row limit.");
+        if (operation.queryNames && !Object.values(operation.queryNames).includes(options.name ?? ""))
+          throw new Error(`Query name is not registered for operation ${name}.`);
+        const query = {
+          name: options.name ?? `Query ${queries.length + 1}`,
+          statement
+        };
+        queries.push(query);
+        let result;
+        try {
+          result = await access.lakehouse.queryAll(statement, {
+            limit: Math.min(options.limit, operation.policy.maxQueryRows),
+            signal: AbortSignal.any([signal, options.signal])
+          });
+        } catch (error) {
+          if (error instanceof DataSourceError)
+            error.queryName = query.name;
+          throw error;
+        }
+        if (result.rows.length > operation.policy.maxQueryRows)
+          throw new Error("Result exceeds row limit.");
+        if (result.queryId) {
+          query.queryId = result.queryId;
+          queryIds.push(result.queryId);
+        }
+        return result;
+      }
+    };
+    let abort;
+    try {
+      signal.throwIfAborted();
+      const cancelled = new Promise((_, reject) => {
+        function rejectAborted() {
+          reject(new Error("Request aborted."));
+        }
+        abort = rejectAborted;
+        signal.addEventListener("abort", rejectAborted, { once: true });
+        if (signal.aborted)
+          rejectAborted();
+      });
+      const data = operation.output(await Promise.race([
+        cancelled,
+        Promise.resolve().then(() => {
+          signal.throwIfAborted();
+          return operation.run({ lakehouse: boundedLakehouse, signal }, input);
+        })
+      ]));
+      const result = {
+        data,
+        requestId,
+        queriedAt: new Date().toISOString(),
+        queryIds,
+        ...operation.policy.exposeSql && access.canDiscloseSql ? { queries } : {}
+      };
+      const body = JSON.stringify(result);
+      if (new TextEncoder().encode(body).byteLength > (operation.policy.maxResponseBytes ?? 1e6)) {
+        throw new Error("Response exceeds byte limit.");
+      }
+      return new Response(body, {
+        headers: {
+          "cache-control": "no-store",
+          "content-type": "application/json"
+        }
+      });
+    } catch (error) {
+      const source = error instanceof DataSourceError ? error : null;
+      console.error(`Data operation ${name} failed (${requestId}): ${source ? `${source.reason}${source.status ? ` (${source.status})` : ""}${source.queryName ? ` in ${source.queryName}` : ""}` : error instanceof Error ? error.name : "unknown"}`);
+      if (source) {
+        return problem(source.reason === "rate_limited" ? 429 : 502, `source_${source.reason}`, sourceErrorMessages[source.reason], requestId);
+      }
+      return problem(signal.aborted ? 504 : 502, signal.aborted ? "timeout" : "query_failed", signal.aborted ? "The data request timed out." : "The data request failed.", requestId);
+    } finally {
+      if (abort)
+        signal.removeEventListener("abort", abort);
+    }
+  }
+  return handleDataRequest;
+}
+function problem(status, code, message, requestId) {
+  return Response.json({ error: { code, message, requestId } }, { status, headers: { "cache-control": "no-store" } });
+}
+var MAX_INPUT_BYTES = 16384;
+
+class InputTooLargeError extends Error {
+}
+async function readInput(request) {
+  const reader = request.body?.getReader();
+  if (!reader)
+    return "";
+  const chunks = [];
+  let size = 0;
+  let abort;
+  function cancelReader() {
+    reader.cancel().catch(() => {});
+  }
+  try {
+    request.signal.throwIfAborted();
+    const cancelled = new Promise((_, reject) => {
+      function rejectAborted() {
+        reject(new Error("Request aborted."));
+        cancelReader();
+      }
+      abort = rejectAborted;
+      request.signal.addEventListener("abort", rejectAborted, { once: true });
+      if (request.signal.aborted)
+        rejectAborted();
+    });
+    while (true) {
+      const { done, value } = await Promise.race([reader.read(), cancelled]);
+      if (done)
+        break;
+      size += value.byteLength;
+      if (size > MAX_INPUT_BYTES) {
+        cancelReader();
+        throw new InputTooLargeError;
+      }
+      chunks.push(value);
+    }
+    const bytes = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+      bytes.set(chunk, offset);
+      offset += chunk.byteLength;
+    }
+    return new TextDecoder().decode(bytes);
+  } finally {
+    if (abort)
+      request.signal.removeEventListener("abort", abort);
+    reader.releaseLock();
+  }
+}
+export {
+  createDataHandler
+};
+
+//# debugId=14B5C03112DB3A8E64756E2164756E21

package/dist/server.js.map

@@ -0,0 +1,14 @@
+{
+  "version": 3,
+  "sources": ["../src/core/contract.ts", "../src/core/format.ts", "../src/core/invariant.ts", "../src/core/messages.ts", "../src/server/handler.ts"],
+  "sourcesContent": [
+    "/**\n * Shared operation contracts and input/output validation for browser and server.\n * @module @altertable/data-app/contract\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/contract.md\n */\nimport { parseDate, today } from '@internationalized/date';\nimport { formatDateRange } from '@/src/core/format';\nimport { invariant } from '@/src/core/invariant';\n\nexport type QueryResult = {\n  columns: { name: string; type?: string }[];\n  rows: unknown[][];\n  queryId?: string;\n};\n\nexport function parseEmptyInput(value: unknown): Record<string, never> {\n  invariant(\n    typeof value === 'object' &&\n      value !== null &&\n      !Array.isArray(value) &&\n      Object.keys(value).length === 0,\n    'This operation takes no inputs.'\n  );\n\n  return {};\n}\n\nexport function parseTrue(value: unknown): true {\n  invariant(value === true, 'Expected a successful check.');\n\n  return true;\n}\n\nexport type DateRangeInput = { start: string; end: string };\nexport type DateRangeRequest = {\n  range: DateRangeInput;\n  comparison: DateRangeInput | null;\n};\n\n/** The immediately preceding, equally long set of calendar days. */\nexport function previousDateRange({\n  start,\n  end,\n}: DateRangeInput): DateRangeInput {\n  const first = parseDate(start);\n  const last = parseDate(end);\n  const days =\n    (last.toDate('UTC').getTime() - first.toDate('UTC').getTime()) /\n      86_400_000 +\n    1;\n  invariant(days >= 1, 'Date range must start before it ends.');\n  const previousEnd = first.subtract({ days: 1 });\n\n  return {\n    start: previousEnd.subtract({ days: days - 1 }).toString(),\n    end: previousEnd.toString(),\n  };\n}\n\nexport type ReportingPeriod =\n  | { kind: 'rolling'; amount: number; unit: 'hour' | 'day'; end: string }\n  | { kind: 'calendar'; start: string; end: string; timeZone: string };\n\nexport type DateRangeContractOptions = {\n  minDate?: string;\n  maxDate?: string | (() => string);\n  maxRangeDays: number;\n  timeZone: string;\n  completeDays?: boolean;\n};\n\n/** One source policy for the server parser, URL variable, and displayed reporting period. */\nexport function defineDateRangeContract(options: DateRangeContractOptions) {\n  invariant(\n    Number.isInteger(options.maxRangeDays) && options.maxRangeDays > 0,\n    'Date range needs a positive maxRangeDays.'\n  );\n  if (options.minDate) parseDate(options.minDate);\n  if (typeof options.maxDate === 'string') parseDate(options.maxDate);\n  today(options.timeZone);\n\n  function bounds() {\n    const latest = today(options.timeZone).subtract({\n      days: options.completeDays === false ? 0 : 1,\n    });\n    const sourceMax =\n      typeof options.maxDate === 'function'\n        ? options.maxDate()\n        : options.maxDate;\n    const maxDate =\n      sourceMax && parseDate(sourceMax).compare(latest) < 0\n        ? parseDate(sourceMax).toString()\n        : latest.toString();\n\n    return {\n      minDate: options.minDate,\n      maxDate,\n      maxRangeDays: options.maxRangeDays,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function period({ start, end }: DateRangeInput): ReportingPeriod {\n    return {\n      kind: 'calendar',\n      start,\n      end,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function describeInput(input: DateRangeInput) {\n    return `${formatDateRange(input)} ${options.timeZone}`;\n  }\n\n  function comparison(input: DateRangeInput): DateRangeInput | null {\n    const previous = previousDateRange(input);\n\n    return options.minDate && previous.start < options.minDate\n      ? null\n      : previous;\n  }\n\n  function request(value: unknown, compare = false): DateRangeRequest {\n    const range = parseDateRangeInput(value, bounds());\n    const previous = compare ? comparison(range) : null;\n    invariant(\n      !compare || previous,\n      'Comparison is outside available source coverage.'\n    );\n\n    return { range, comparison: previous };\n  }\n\n  function parseRequest(value: unknown): DateRangeRequest {\n    invariant(value && typeof value === 'object', 'Choose a date range.');\n    const input = value as Record<string, unknown>;\n    const parsed = request(input.range, input.comparison != null);\n    if (input.comparison != null) {\n      const supplied = parseDateRangeInput(input.comparison, bounds());\n      invariant(\n        supplied.start === parsed.comparison?.start &&\n          supplied.end === parsed.comparison?.end,\n        'Comparison must be the preceding equal-length range.'\n      );\n    }\n\n    return parsed;\n  }\n\n  return {\n    request,\n    parseRequest,\n    bounds,\n    parse(value: unknown) {\n      return parseDateRangeInput(value, bounds());\n    },\n    period,\n    comparison,\n    describeInput,\n    view: { period, describeInput },\n  };\n}\n\nexport type DateRangeContract = ReturnType<typeof defineDateRangeContract>;\n\n/** Validate calendar dates and a bounded inclusive range on the server. */\nexport function parseDateRangeInput(\n  value: unknown,\n  {\n    minDate,\n    maxDate,\n    maxRangeDays,\n  }: { minDate?: string; maxDate?: string; maxRangeDays: number }\n): DateRangeInput {\n  invariant(\n    value && typeof value === 'object' && !Array.isArray(value),\n    'Choose a date range.'\n  );\n  const { start, end } = value as Record<string, unknown>;\n\n  function day(input: unknown): number {\n    invariant(\n      typeof input === 'string' && /^\\d{4}-\\d{2}-\\d{2}$/.test(input),\n      'Dates must be YYYY-MM-DD.'\n    );\n    const timestamp = Date.parse(`${input}T00:00:00Z`);\n    invariant(\n      Number.isFinite(timestamp) &&\n        new Date(timestamp).toISOString().slice(0, 10) === input,\n      'Choose valid calendar dates.'\n    );\n\n    return timestamp;\n  }\n  const first = day(start);\n  const last = day(end);\n  invariant(\n    Number.isInteger(maxRangeDays) && maxRangeDays > 0,\n    'Maximum range days must be positive.'\n  );\n  invariant(\n    first <= last &&\n      (last - first) / 86_400_000 < maxRangeDays &&\n      (minDate === undefined || first >= day(minDate)) &&\n      (maxDate === undefined || last <= day(maxDate)),\n    `Choose up to ${maxRangeDays} days within the available range.`\n  );\n\n  return { start: start as string, end: end as string };\n}\n\n/** Accepts numeric strings from DuckDB; rejects negative, fractional, and unsafe integers. */\nexport function parseCount(value: unknown): number {\n  const number =\n    typeof value === 'number' || typeof value === 'string'\n      ? Number(value)\n      : NaN;\n  invariant(\n    Number.isSafeInteger(number) &&\n      number >= 0 &&\n      (typeof value !== 'string' || !!value.trim()),\n    'Invalid count in query result.'\n  );\n\n  return number;\n}\n\nexport function parseLabel(value: unknown, maxLength = 100): string {\n  invariant(\n    typeof value === 'string' && !!value && value.length <= maxLength,\n    'Invalid label in query result.'\n  );\n\n  return value;\n}\n\n/** Rejects missing or duplicate columns and rows whose width differs from the column list. */\nexport function rowsAsRecords(\n  result: QueryResult,\n  requiredColumns: readonly string[]\n): Record<string, unknown>[] {\n  const names = result.columns.map(column => column.name);\n  invariant(\n    new Set(names).size === names.length &&\n      requiredColumns.every(name => names.includes(name)),\n    'Query result columns do not match the expected shape.'\n  );\n\n  return result.rows.map(row => {\n    invariant(\n      row.length === names.length,\n      'Query result row has the wrong width.'\n    );\n\n    return Object.fromEntries(names.map((name, index) => [name, row[index]]));\n  });\n}\n\n/** One named statement an operation ran. Returned only when SQL disclosure is allowed. */\nexport type DisclosedQuery = {\n  name: string;\n  statement: string;\n  queryId?: string;\n};\n\nexport function defineQueryNames<const Names extends Record<string, string>>(\n  names: Names\n): Names {\n  const values = Object.values(names);\n  invariant(\n    values.every(name => !!name.trim()) &&\n      new Set(values).size === values.length,\n    'Query names must be nonempty and unique.'\n  );\n\n  return names;\n}\n\nexport class DataSourceError extends Error {\n  queryName?: string;\n\n  constructor(\n    public readonly reason:\n      | 'unauthorized'\n      | 'forbidden'\n      | 'rate_limited'\n      | 'query_rejected'\n      | 'unavailable',\n    public readonly status?: number\n  ) {\n    super(`Data source ${reason}${status ? ` (${status})` : ''}.`);\n    this.name = 'DataSourceError';\n  }\n}\n\n/** Server-only query interface supplied by a local or hosted adapter. */\nexport type Lakehouse = {\n  queryAll(\n    statement: string,\n    options: { limit: number; signal: AbortSignal; name?: string }\n  ): Promise<QueryResult>;\n};\n\nexport type OperationContext = { lakehouse: Lakehouse; signal: AbortSignal };\n\n/**\n * Both parsers run on the server before results cross the JSON boundary. Schema libraries can be\n * used inside either parser.\n */\nexport type DataOperation<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown) => Output;\n  run: (context: OperationContext, input: Input) => Promise<Output>;\n  checks: readonly Input[];\n  queryNames?: Readonly<Record<string, string>>;\n  policy: {\n    maxQueryRows: number;\n    maxDurationMs: number;\n    maxResponseBytes?: number;\n    exposeSql?: boolean;\n  };\n};\n\nexport type OperationQuery<Names extends Readonly<Record<string, string>>> = (\n  name: Names[keyof Names],\n  statement: string,\n  options?: { limit?: number }\n) => Promise<QueryResult>;\n\nexport function defineOperation<\n  Input,\n  Output,\n  const Names extends Readonly<Record<string, string>> = Record<string, never>,\n>(\n  operation: Omit<DataOperation<Input, Output>, 'run' | 'queryNames'> & {\n    queryNames?: Names;\n    run: (\n      context: OperationContext & { query: OperationQuery<NoInfer<Names>> },\n      input: Input\n    ) => Promise<Output>;\n  }\n): DataOperation<Input, Output> & { queryNames?: Names } {\n  invariant(\n    Array.isArray(operation.checks) &&\n      operation.checks.length > 0 &&\n      Number.isInteger(operation.policy.maxQueryRows) &&\n      operation.policy.maxQueryRows > 0 &&\n      Number.isInteger(operation.policy.maxDurationMs) &&\n      operation.policy.maxDurationMs > 0 &&\n      (operation.policy.maxResponseBytes === undefined ||\n        (Number.isInteger(operation.policy.maxResponseBytes) &&\n          operation.policy.maxResponseBytes > 0)),\n    'Each data operation needs check inputs and positive row and duration limits.'\n  );\n  if (operation.queryNames) defineQueryNames(operation.queryNames);\n  for (const input of operation.checks) operation.input(input);\n\n  return {\n    ...operation,\n    run(context, input) {\n      function query(\n        name: Names[keyof Names],\n        statement: string,\n        options?: { limit?: number }\n      ): Promise<QueryResult> {\n        invariant(\n          operation.queryNames &&\n            Object.values(operation.queryNames).includes(name),\n          `Unknown query name: ${name}.`\n        );\n\n        return context.lakehouse.queryAll(statement, {\n          name,\n          limit: options?.limit ?? operation.policy.maxQueryRows,\n          signal: context.signal,\n        });\n      }\n\n      return operation.run({ ...context, query }, input);\n    },\n  };\n}\n\nexport const connectionQueryNames = defineQueryNames({\n  connection: 'connection-check',\n});\n\n/** Success requires a bounded SQL query; it does not establish access to a particular dataset. */\nexport function connectionCheck(): DataOperation<Record<string, never>, true> {\n  return defineOperation({\n    input: parseEmptyInput,\n    output: parseTrue,\n    checks: [{}],\n    queryNames: connectionQueryNames,\n    policy: { maxQueryRows: 1, maxDurationMs: 15_000, exposeSql: true },\n    async run({ query }): Promise<true> {\n      await query(\n        connectionQueryNames.connection,\n        'SELECT 1 AS connection_check'\n      );\n\n      return true;\n    },\n  });\n}\n\nexport type DataOperations = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n    run: (context: OperationContext, input: never) => Promise<unknown>;\n    checks: readonly unknown[];\n    queryNames?: Readonly<Record<string, string>>;\n    policy: DataOperation<never, unknown>['policy'];\n  }\n>;\nexport {\n  dimensionFilter,\n  parseDimensionSelection,\n  parseFacetOptions,\n  dimensionPredicate,\n} from '@/src/core/dimension';\nexport type {\n  DimensionSelection,\n  DimensionMember,\n  DimensionOption,\n  DimensionVariable,\n  DimensionFilterOptions,\n} from '@/src/core/dimension';\n\nexport * from '@/src/core/messages';\nexport type { TransportResponse } from '@/src/core/bridge';\n",
+    "/**\n * Date and number formatting with explicit units and missing-value behavior.\n * @module @altertable/data-app/format\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/format.md\n */\ntype CommonOptions = { locale?: string; missing?: string };\n\n/** Compact, unambiguous calendar dates for labels and request status. */\nexport function formatDateRange({\n  start,\n  end,\n}: {\n  start: string;\n  end: string;\n}): string {\n  const first = new Date(`${start}T00:00:00Z`);\n  const last = new Date(`${end}T00:00:00Z`);\n\n  function format(date: Date, options: Intl.DateTimeFormatOptions) {\n    return new Intl.DateTimeFormat('en-US', {\n      ...options,\n      timeZone: 'UTC',\n    }).format(date);\n  }\n\n  function formatFullDate(date: Date) {\n    return format(date, { month: 'short', day: 'numeric', year: 'numeric' });\n  }\n\n  if (start === end) return formatFullDate(first);\n  if (first.getUTCFullYear() !== last.getUTCFullYear())\n    return `${formatFullDate(first)}–${formatFullDate(last)}`;\n  const firstMonth = format(first, { month: 'short' });\n  const lastMonth = format(last, { month: 'short' });\n  const firstDay = first.getUTCDate();\n  const lastDay = last.getUTCDate();\n\n  return firstMonth === lastMonth\n    ? `${firstMonth} ${firstDay}–${lastDay}, ${last.getUTCFullYear()}`\n    : `${firstMonth} ${firstDay}–${lastMonth} ${lastDay}, ${last.getUTCFullYear()}`;\n}\n\nexport type MetricFormat =\n  | { kind: 'count'; compact?: boolean; locale?: string }\n  | { kind: 'ratio'; maximumFractionDigits?: number; locale?: string }\n  | { kind: 'currency'; currency: string; locale?: string };\n\nexport function formatMetric(value: number, format: MetricFormat): string {\n  if (format.kind === 'count') return formatCount(value, format);\n  if (format.kind === 'ratio') return formatPercent(value, format);\n\n  return formatNumber(value, {\n    style: 'currency',\n    currency: format.currency,\n    locale: format.locale,\n  });\n}\n\n/** Missing and non-finite values use the `missing` label; negative zero renders as zero. */\nexport function formatNumber(\n  value: number | null | undefined,\n  options: CommonOptions & Intl.NumberFormatOptions = {}\n): string {\n  const { locale = 'en-US', missing = '—', ...numberOptions } = options;\n\n  return value === null || value === undefined || !Number.isFinite(value)\n    ? missing\n    : new Intl.NumberFormat(locale, numberOptions).format(\n        Object.is(value, -0) ? 0 : value\n      );\n}\n\n/** Negative and fractional counts render as missing. Compact notation is opt-in. */\nexport function formatCount(\n  value: number | null | undefined,\n  options: CommonOptions & { compact?: boolean } = {}\n): string {\n  const { compact = false, ...common } = options;\n  if (\n    value !== null &&\n    value !== undefined &&\n    (!Number.isInteger(value) || value < 0)\n  ) {\n    return common.missing ?? '—';\n  }\n\n  return formatNumber(value, {\n    ...common,\n    notation: compact ? 'compact' : 'standard',\n    maximumFractionDigits: compact ? 1 : 0,\n  });\n}\n\nconst pluralRules = new Intl.PluralRules();\n\nexport function pluralize(\n  count: number,\n  singular: string,\n  plural = `${singular}s`\n): string {\n  return pluralRules.select(count) === 'one' ? singular : plural;\n}\n\n/** Accepts a ratio (0.116), not a percentage (11.6). */\nexport function formatPercent(\n  ratio: number | null | undefined,\n  options: CommonOptions & { maximumFractionDigits?: number } = {}\n): string {\n  if (ratio === null || ratio === undefined || !Number.isFinite(ratio)) {\n    return options.missing ?? '—';\n  }\n  const digits =\n    options.maximumFractionDigits ?? (Math.abs(ratio) < 0.01 ? 2 : 1);\n  const percentOptions = {\n    locale: options.locale,\n    style: 'percent' as const,\n    maximumFractionDigits: digits,\n  };\n  const smallestVisibleRatio = 10 ** -digits / 100;\n  if (ratio !== 0 && Math.round(Math.abs(ratio) / smallestVisibleRatio) === 0) {\n    const boundary = formatNumber(smallestVisibleRatio, percentOptions);\n\n    return ratio > 0 ? `<${boundary}` : `>−${boundary}`;\n  }\n\n  return formatNumber(ratio, percentOptions);\n}\n",
+    "/** Assert an author or data contract while preserving a useful failure message. */\nexport function invariant(\n  condition: unknown,\n  message: string\n): asserts condition {\n  if (!condition) throw new Error(`Invariant failed: ${message}`);\n}\n",
+    "import type { TransportResponse } from '@/src/core/bridge';\nimport type { DisclosedQuery } from '@/src/core/contract';\n\nexport type MessageContext = { signal: AbortSignal };\nexport type RoutedMessage = { route: string; payload: unknown };\nexport type MessageDispatcher = (\n  message: unknown,\n  context: MessageContext\n) => Promise<unknown>;\nexport type MessageTransport = (\n  message: RoutedMessage,\n  signal?: AbortSignal\n) => Promise<unknown>;\nexport type MessageRoute<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown, input: Input) => Output;\n};\nexport type MessageRoutes = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown, input: never) => unknown;\n  }\n>;\nexport type MessageInput<Route extends MessageRoutes[string]> = ReturnType<\n  Route['input']\n>;\nexport type MessageHandlers<Routes extends MessageRoutes> = {\n  [Name in keyof Routes]: (\n    payload: MessageInput<Routes[Name]>,\n    context: MessageContext\n  ) =>\n    | ReturnType<Routes[Name]['output']>\n    | Promise<ReturnType<Routes[Name]['output']>>;\n};\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/MessageRoutingError');\n\n/** Only these deliberate, public failures cross the message boundary. Other errors stay private. */\nexport class MessageRoutingError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    public readonly code: string,\n    message: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'MessageRoutingError';\n  }\n}\n\nexport function defineMessageRoute<Input, Output>(\n  route: MessageRoute<Input, Output>\n): MessageRoute<Input, Output> {\n  return route;\n}\n\n/** Contracts are shared; handlers are supplied by the host and never belong in the app bundle. */\nexport function createMessageRouter<const Routes extends MessageRoutes>(\n  routes: Routes,\n  handlers: MessageHandlers<NoInfer<Routes>>\n) {\n  const registered = new Map(\n    Object.entries(routes).map(([name, contract]) => {\n      const handler = handlers[name];\n      if (!name || name.length > 256 || typeof handler !== 'function')\n        throw new Error(\n          'Each message route requires a handler and a bounded name.'\n        );\n\n      return [name, { contract, handler }] as const;\n    })\n  );\n\n  async function dispatch(\n    value: unknown,\n    context: MessageContext\n  ): Promise<unknown> {\n    if (\n      !value ||\n      typeof value !== 'object' ||\n      typeof (value as RoutedMessage).route !== 'string'\n    )\n      throw new MessageRoutingError(\n        'invalid_message',\n        'Invalid routed message.'\n      );\n    const message = value as RoutedMessage;\n    const entry = registered.get(message.route);\n    if (!entry)\n      throw new MessageRoutingError('unknown_route', 'Unknown message route.');\n    let payload: unknown;\n    try {\n      payload = entry.contract.input(message.payload);\n    } catch {\n      throw new MessageRoutingError(\n        'invalid_payload',\n        'Invalid message payload.'\n      );\n    }\n    context.signal.throwIfAborted();\n    let result: unknown;\n    try {\n      result = await entry.handler(payload as never, context);\n    } catch (error) {\n      if (context.signal.aborted) throw context.signal.reason;\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'request_failed',\n        'The message request failed. Retry the request.'\n      );\n    }\n    context.signal.throwIfAborted();\n    try {\n      return entry.contract.output(result, payload as never);\n    } catch (error) {\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'invalid_response',\n        'Invalid message response.'\n      );\n    }\n  }\n\n  return { dispatch };\n}\n\nexport type OperationContracts = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n  }\n>;\nexport type DataQueryInput<Operations extends OperationContracts> = {\n  [Name in keyof Operations & string]: {\n    operation: Name;\n    input: ReturnType<Operations[Name]['input']>;\n  };\n}[keyof Operations & string];\nexport type DataQueryBody<Output> = {\n  data: Output;\n  requestId: string;\n  queriedAt: string;\n  queryIds: string[];\n  queries?: DisclosedQuery[];\n};\nexport type DataQueryRoute<Operations extends OperationContracts> =\n  MessageRoute<DataQueryInput<Operations>, TransportResponse> & {\n    operations: Operations | undefined;\n  };\nexport type MessageOutput<Route extends MessageRoutes[string], Input> =\n  Route extends DataQueryRoute<infer Operations>\n    ? Input extends { operation: infer Name extends keyof Operations }\n      ? {\n          status: number;\n          body: DataQueryBody<ReturnType<Operations[Name]['output']>>;\n        }\n      : never\n    : ReturnType<Route['output']>;\n\n/** Omit contracts only in generic hosts such as the CLI shell, where Bun validates operations. */\nexport function defineDataQueryRoute<\n  Operations extends OperationContracts = OperationContracts,\n>(operations?: Operations): DataQueryRoute<Operations> {\n  return {\n    operations,\n    input(value) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid query.');\n      const request = value as { operation?: unknown; input?: unknown };\n      if (\n        typeof request.operation !== 'string' ||\n        !request.operation ||\n        request.operation.length > 256 ||\n        request.operation.includes('/')\n      )\n        throw new Error('Invalid operation.');\n      const operation =\n        operations && Object.hasOwn(operations, request.operation)\n          ? operations[request.operation]\n          : undefined;\n      if (operations && !operation) throw new Error('Unknown operation.');\n\n      return {\n        operation: request.operation,\n        input: operation ? operation.input(request.input) : request.input,\n      } as DataQueryInput<Operations>;\n    },\n    output(value, input) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid data response.');\n      const response = value as TransportResponse;\n      if (\n        !Number.isInteger(response.status) ||\n        response.status < 100 ||\n        response.status > 599 ||\n        !response.body ||\n        typeof response.body !== 'object'\n      )\n        throw new Error('Invalid data response.');\n      const body = response.body as DataQueryBody<unknown> & {\n        error?: { code?: unknown; message?: unknown; requestId?: unknown };\n      };\n      if (response.status < 200 || response.status >= 300) {\n        const failure = body.error;\n        throw new MessageRoutingError(\n          typeof failure?.code === 'string' ? failure.code : 'request_failed',\n          typeof failure?.message === 'string'\n            ? failure.message\n            : 'Could not load data.',\n          typeof failure?.requestId === 'string' ? failure.requestId : undefined\n        );\n      }\n      if (\n        !('data' in body) ||\n        typeof body.requestId !== 'string' ||\n        typeof body.queriedAt !== 'string' ||\n        !Array.isArray(body.queryIds) ||\n        !body.queryIds.every(id => typeof id === 'string')\n      )\n        throw new Error('Invalid data envelope.');\n      if (\n        body.queries !== undefined &&\n        (!Array.isArray(body.queries) ||\n          !body.queries.every(\n            query =>\n              query &&\n              typeof query === 'object' &&\n              typeof query.name === 'string' &&\n              typeof query.statement === 'string' &&\n              (query.queryId === undefined || typeof query.queryId === 'string')\n          ))\n      )\n        throw new Error('Invalid query evidence.');\n      const operation = operations?.[input.operation];\n\n      return {\n        status: response.status,\n        body: {\n          ...body,\n          data: operation ? operation.output(body.data) : body.data,\n        },\n      };\n    },\n  };\n}\n\nexport type NavigationUpdate = {\n  search: string;\n  hash: string;\n  mode: 'push' | 'replace';\n  title?: string;\n};\nexport const navigationUpdateRoute = /* @__PURE__ */ defineMessageRoute({\n  input(value: unknown): NavigationUpdate {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid navigation.');\n    const input = value as NavigationUpdate;\n    if (\n      typeof input.search !== 'string' ||\n      input.search.length > 16_384 ||\n      (input.search !== '' && !input.search.startsWith('?')) ||\n      typeof input.hash !== 'string' ||\n      input.hash.length > 4096 ||\n      (input.hash !== '' && !input.hash.startsWith('#')) ||\n      (input.mode !== 'push' && input.mode !== 'replace') ||\n      (input.title !== undefined &&\n        (typeof input.title !== 'string' || input.title.length > 512))\n    )\n      throw new Error('Invalid navigation.');\n\n    return {\n      search: input.search,\n      hash: input.hash,\n      mode: input.mode,\n      ...(input.title === undefined ? {} : { title: input.title }),\n    };\n  },\n  output(value: unknown): null {\n    if (value !== null) throw new Error('Invalid navigation response.');\n\n    return null;\n  },\n});\nexport const dataAppRoutes = {\n  'data.query': /* @__PURE__ */ defineDataQueryRoute(),\n  'navigation.update': navigationUpdateRoute,\n};\n",
+    "import {\n  DataSourceError,\n  type DataOperations,\n  type DisclosedQuery,\n  type Lakehouse,\n} from '@/src/core/contract';\n\nconst sourceErrorMessages = {\n  unauthorized:\n    \"Lakehouse access needs attention. Run this app with 'altertable app dev', or run 'altertable login' and retry.\",\n  forbidden:\n    \"This app cannot access its lakehouse data. Check the selected profile's permissions.\",\n  rate_limited: 'The lakehouse is busy. Wait a moment and retry.',\n  query_rejected:\n    \"A lakehouse query was rejected. Check the app's data operation.\",\n  unavailable: 'The lakehouse is unavailable. Check the connection and retry.',\n};\n\n/** Authorization result for one viewer request. A hosted adapter must scope its lakehouse client. */\nexport type RequestAccess = { lakehouse: Lakehouse; canDiscloseSql: boolean };\n\n/**\n * Execute named operations on the server. The app supplies operations and viewer authorization.\n * JSON, Origin, and Fetch Metadata checks reject cross-site browser POSTs; they do not\n * authenticate another local process. SQL is returned only when both the operation and\n * authorization result permit disclosure.\n */\nexport function createDataHandler(\n  operations: DataOperations,\n  authorize: (request: Request, operation: string) => Promise<RequestAccess>\n) {\n  async function handleDataRequest(request: Request): Promise<Response> {\n    const requestId = crypto.randomUUID();\n    const url = new URL(request.url);\n    if (!url.pathname.startsWith('/api/data/'))\n      return new Response('Not found', { status: 404 });\n    const encodedName = url.pathname.slice('/api/data/'.length);\n    if (!encodedName || encodedName.includes('/'))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    let name: string;\n    try {\n      name = decodeURIComponent(encodedName);\n    } catch {\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    }\n    if (!Object.hasOwn(operations, name))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    if (request.method !== 'POST')\n      return problem(405, 'method_not_allowed', 'Use POST.', requestId);\n    if (\n      request.headers\n        .get('content-type')\n        ?.split(';')[0]\n        ?.trim()\n        .toLowerCase() !== 'application/json'\n    )\n      return problem(\n        415,\n        'unsupported_media_type',\n        'Use application/json.',\n        requestId\n      );\n    const origin = request.headers.get('origin');\n    const fetchSite = request.headers.get('sec-fetch-site');\n    const fetchMode = request.headers.get('sec-fetch-mode');\n    if (\n      (origin !== null && origin !== url.origin) ||\n      (fetchSite !== null && fetchSite !== 'same-origin') ||\n      (fetchSite !== null && origin === null) ||\n      (fetchMode !== null &&\n        fetchMode !== 'cors' &&\n        fetchMode !== 'same-origin')\n    )\n      return problem(\n        403,\n        'cross_origin_request',\n        'The data request must come from this app.',\n        requestId\n      );\n    let access: RequestAccess;\n    try {\n      access = await authorize(request, name);\n    } catch {\n      return problem(\n        403,\n        'forbidden',\n        'You cannot run this data operation.',\n        requestId\n      );\n    }\n    const operation = operations[name]!;\n    let input: unknown;\n    if (request.signal.aborted)\n      return problem(504, 'timeout', 'The data request timed out.', requestId);\n    try {\n      const body = await readInput(request);\n      input = operation.input(JSON.parse(body));\n    } catch (error) {\n      if (error instanceof InputTooLargeError)\n        return problem(\n          413,\n          'input_too_large',\n          'Input is too large.',\n          requestId\n        );\n\n      return problem(\n        400,\n        'invalid_input',\n        \"Check this operation's inputs.\",\n        requestId\n      );\n    }\n    const timeout = AbortSignal.timeout(operation.policy.maxDurationMs);\n    const signal = AbortSignal.any([request.signal, timeout]);\n    const queryIds: string[] = [];\n    const queries: DisclosedQuery[] = [];\n    const boundedLakehouse: Lakehouse = {\n      async queryAll(statement, options) {\n        if (!Number.isInteger(options.limit) || options.limit < 1)\n          throw new Error('Query needs a positive row limit.');\n        if (\n          operation.queryNames &&\n          !Object.values(operation.queryNames).includes(options.name ?? '')\n        )\n          throw new Error(\n            `Query name is not registered for operation ${name}.`\n          );\n        const query: DisclosedQuery = {\n          name: options.name ?? `Query ${queries.length + 1}`,\n          statement,\n        };\n        queries.push(query);\n        let result;\n        try {\n          result = await access.lakehouse.queryAll(statement, {\n            limit: Math.min(options.limit, operation.policy.maxQueryRows),\n            signal: AbortSignal.any([signal, options.signal]),\n          });\n        } catch (error) {\n          if (error instanceof DataSourceError) error.queryName = query.name;\n          throw error;\n        }\n        if (result.rows.length > operation.policy.maxQueryRows)\n          throw new Error('Result exceeds row limit.');\n        if (result.queryId) {\n          query.queryId = result.queryId;\n          queryIds.push(result.queryId);\n        }\n\n        return result;\n      },\n    };\n    let abort: (() => void) | undefined;\n    try {\n      signal.throwIfAborted();\n      const cancelled = new Promise<never>((_, reject) => {\n        function rejectAborted() {\n          reject(new Error('Request aborted.'));\n        }\n        abort = rejectAborted;\n        signal.addEventListener('abort', rejectAborted, { once: true });\n        if (signal.aborted) rejectAborted();\n      });\n      const data = operation.output(\n        await Promise.race([\n          cancelled,\n          Promise.resolve().then(() => {\n            signal.throwIfAborted();\n\n            return operation.run(\n              { lakehouse: boundedLakehouse, signal },\n              input as never\n            );\n          }),\n        ])\n      );\n      const result = {\n        data,\n        requestId,\n        queriedAt: new Date().toISOString(),\n        queryIds,\n        ...(operation.policy.exposeSql && access.canDiscloseSql\n          ? { queries }\n          : {}),\n      };\n      const body = JSON.stringify(result);\n      if (\n        new TextEncoder().encode(body).byteLength >\n        (operation.policy.maxResponseBytes ?? 1_000_000)\n      ) {\n        throw new Error('Response exceeds byte limit.');\n      }\n\n      return new Response(body, {\n        headers: {\n          'cache-control': 'no-store',\n          'content-type': 'application/json',\n        },\n      });\n    } catch (error) {\n      const source = error instanceof DataSourceError ? error : null;\n      console.error(\n        `Data operation ${name} failed (${requestId}): ${source ? `${source.reason}${source.status ? ` (${source.status})` : ''}${source.queryName ? ` in ${source.queryName}` : ''}` : error instanceof Error ? error.name : 'unknown'}`\n      );\n      if (source) {\n        return problem(\n          source.reason === 'rate_limited' ? 429 : 502,\n          `source_${source.reason}`,\n          sourceErrorMessages[source.reason],\n          requestId\n        );\n      }\n\n      return problem(\n        signal.aborted ? 504 : 502,\n        signal.aborted ? 'timeout' : 'query_failed',\n        signal.aborted\n          ? 'The data request timed out.'\n          : 'The data request failed.',\n        requestId\n      );\n    } finally {\n      if (abort) signal.removeEventListener('abort', abort);\n    }\n  }\n\n  return handleDataRequest;\n}\n\nfunction problem(\n  status: number,\n  code: string,\n  message: string,\n  requestId: string\n): Response {\n  return Response.json(\n    { error: { code, message, requestId } },\n    { status, headers: { 'cache-control': 'no-store' } }\n  );\n}\n\nconst MAX_INPUT_BYTES = 16_384;\nclass InputTooLargeError extends Error {}\n\n/** Count encoded bytes before retaining chunks; cancellation also interrupts waiting reads. */\nasync function readInput(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return '';\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  let abort: (() => void) | undefined;\n\n  function cancelReader() {\n    // The source's cancel algorithm may never settle; the handler must still respond.\n    void reader!.cancel().catch(() => {});\n  }\n\n  try {\n    request.signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n        cancelReader();\n      }\n      abort = rejectAborted;\n      request.signal.addEventListener('abort', rejectAborted, { once: true });\n      if (request.signal.aborted) rejectAborted();\n    });\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), cancelled]);\n      if (done) break;\n      size += value.byteLength;\n      if (size > MAX_INPUT_BYTES) {\n        cancelReader();\n        throw new InputTooLargeError();\n      }\n      chunks.push(value);\n    }\n    const bytes = new Uint8Array(size);\n    let offset = 0;\n    for (const chunk of chunks) {\n      bytes.set(chunk, offset);\n      offset += chunk.byteLength;\n    }\n\n    return new TextDecoder().decode(bytes);\n  } finally {\n    if (abort) request.signal.removeEventListener('abort', abort);\n    reader.releaseLock();\n  }\n}\n"
+  ],
+  "mappings": ";;AAKA;;;ACwFA,IAAM,cAAc,IAAI,KAAK;;;AC5FtB,SAAS,SAAS,CACvB,WACA,SACmB;AAAA,EACnB,IAAI,CAAC;AAAA,IAAW,MAAM,IAAI,MAAM,qBAAqB,SAAS;AAAA;;ACgChE,IAAM,aAAa,OAAO,IAAI,0CAA0C;;AHqOjE,SAAS,gBAA4D,CAC1E,OACO;AAAA,EACP,MAAM,SAAS,OAAO,OAAO,KAAK;AAAA,EAClC,UACE,OAAO,MAAM,UAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,KAChC,IAAI,IAAI,MAAM,EAAE,SAAS,OAAO,QAClC,0CACF;AAAA,EAEA,OAAO;AAAA;AAAA;AAGF,MAAM,wBAAwB,MAAM;AAAA,EAIvB;AAAA,EAMA;AAAA,EATlB;AAAA,EAEA,WAAW,CACO,QAMA,QAChB;AAAA,IACA,MAAM,eAAe,SAAS,SAAS,KAAK,YAAY,KAAK;AAAA,IAR7C;AAAA,IAMA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AA0FO,IAAM,uBAAuB,iBAAiB;AAAA,EACnD,YAAY;AACd,CAAC;;;AI3XD,IAAM,sBAAsB;AAAA,EAC1B,cACE;AAAA,EACF,WACE;AAAA,EACF,cAAc;AAAA,EACd,gBACE;AAAA,EACF,aAAa;AACf;AAWO,SAAS,iBAAiB,CAC/B,YACA,WACA;AAAA,EACA,eAAe,iBAAiB,CAAC,SAAqC;AAAA,IACpE,MAAM,YAAY,OAAO,WAAW;AAAA,IACpC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAAA,IAC/B,IAAI,CAAC,IAAI,SAAS,WAAW,YAAY;AAAA,MACvC,OAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD,MAAM,cAAc,IAAI,SAAS,MAAM,aAAa,MAAM;AAAA,IAC1D,IAAI,CAAC,eAAe,YAAY,SAAS,GAAG;AAAA,MAC1C,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,mBAAmB,WAAW;AAAA,MACrC,MAAM;AAAA,MACN,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA;AAAA,IAEvE,IAAI,CAAC,OAAO,OAAO,YAAY,IAAI;AAAA,MACjC,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI,QAAQ,WAAW;AAAA,MACrB,OAAO,QAAQ,KAAK,sBAAsB,aAAa,SAAS;AAAA,IAClE,IACE,QAAQ,QACL,IAAI,cAAc,GACjB,MAAM,GAAG,EAAE,IACX,KAAK,EACN,YAAY,MAAM;AAAA,MAErB,OAAO,QACL,KACA,0BACA,yBACA,SACF;AAAA,IACF,MAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAAA,IAC3C,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,IACG,WAAW,QAAQ,WAAW,IAAI,UAClC,cAAc,QAAQ,cAAc,iBACpC,cAAc,QAAQ,WAAW,QACjC,cAAc,QACb,cAAc,UACd,cAAc;AAAA,MAEhB,OAAO,QACL,KACA,wBACA,6CACA,SACF;AAAA,IACF,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,MAAM,UAAU,SAAS,IAAI;AAAA,MACtC,MAAM;AAAA,MACN,OAAO,QACL,KACA,aACA,uCACA,SACF;AAAA;AAAA,IAEF,MAAM,YAAY,WAAW;AAAA,IAC7B,IAAI;AAAA,IACJ,IAAI,QAAQ,OAAO;AAAA,MACjB,OAAO,QAAQ,KAAK,WAAW,+BAA+B,SAAS;AAAA,IACzE,IAAI;AAAA,MACF,MAAM,OAAO,MAAM,UAAU,OAAO;AAAA,MACpC,QAAQ,UAAU,MAAM,KAAK,MAAM,IAAI,CAAC;AAAA,MACxC,OAAO,OAAO;AAAA,MACd,IAAI,iBAAiB;AAAA,QACnB,OAAO,QACL,KACA,mBACA,uBACA,SACF;AAAA,MAEF,OAAO,QACL,KACA,iBACA,kCACA,SACF;AAAA;AAAA,IAEF,MAAM,UAAU,YAAY,QAAQ,UAAU,OAAO,aAAa;AAAA,IAClE,MAAM,SAAS,YAAY,IAAI,CAAC,QAAQ,QAAQ,OAAO,CAAC;AAAA,IACxD,MAAM,WAAqB,CAAC;AAAA,IAC5B,MAAM,UAA4B,CAAC;AAAA,IACnC,MAAM,mBAA8B;AAAA,WAC5B,SAAQ,CAAC,WAAW,SAAS;AAAA,QACjC,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,QAAQ,QAAQ;AAAA,UACtD,MAAM,IAAI,MAAM,mCAAmC;AAAA,QACrD,IACE,UAAU,cACV,CAAC,OAAO,OAAO,UAAU,UAAU,EAAE,SAAS,QAAQ,QAAQ,EAAE;AAAA,UAEhE,MAAM,IAAI,MACR,8CAA8C,OAChD;AAAA,QACF,MAAM,QAAwB;AAAA,UAC5B,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,UAChD;AAAA,QACF;AAAA,QACA,QAAQ,KAAK,KAAK;AAAA,QAClB,IAAI;AAAA,QACJ,IAAI;AAAA,UACF,SAAS,MAAM,OAAO,UAAU,SAAS,WAAW;AAAA,YAClD,OAAO,KAAK,IAAI,QAAQ,OAAO,UAAU,OAAO,YAAY;AAAA,YAC5D,QAAQ,YAAY,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC;AAAA,UAClD,CAAC;AAAA,UACD,OAAO,OAAO;AAAA,UACd,IAAI,iBAAiB;AAAA,YAAiB,MAAM,YAAY,MAAM;AAAA,UAC9D,MAAM;AAAA;AAAA,QAER,IAAI,OAAO,KAAK,SAAS,UAAU,OAAO;AAAA,UACxC,MAAM,IAAI,MAAM,2BAA2B;AAAA,QAC7C,IAAI,OAAO,SAAS;AAAA,UAClB,MAAM,UAAU,OAAO;AAAA,UACvB,SAAS,KAAK,OAAO,OAAO;AAAA,QAC9B;AAAA,QAEA,OAAO;AAAA;AAAA,IAEX;AAAA,IACA,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,eAAe;AAAA,MACtB,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,QAClD,SAAS,aAAa,GAAG;AAAA,UACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA;AAAA,QAEtC,QAAQ;AAAA,QACR,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,QAC9D,IAAI,OAAO;AAAA,UAAS,cAAc;AAAA,OACnC;AAAA,MACD,MAAM,OAAO,UAAU,OACrB,MAAM,QAAQ,KAAK;AAAA,QACjB;AAAA,QACA,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAAA,UAC3B,OAAO,eAAe;AAAA,UAEtB,OAAO,UAAU,IACf,EAAE,WAAW,kBAAkB,OAAO,GACtC,KACF;AAAA,SACD;AAAA,MACH,CAAC,CACH;AAAA,MACA,MAAM,SAAS;AAAA,QACb;AAAA,QACA;AAAA,QACA,WAAW,IAAI,KAAK,EAAE,YAAY;AAAA,QAClC;AAAA,WACI,UAAU,OAAO,aAAa,OAAO,iBACrC,EAAE,QAAQ,IACV,CAAC;AAAA,MACP;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,MAAM;AAAA,MAClC,IACE,IAAI,YAAY,EAAE,OAAO,IAAI,EAAE,cAC9B,UAAU,OAAO,oBAAoB,MACtC;AAAA,QACA,MAAM,IAAI,MAAM,8BAA8B;AAAA,MAChD;AAAA,MAEA,OAAO,IAAI,SAAS,MAAM;AAAA,QACxB,SAAS;AAAA,UACP,iBAAiB;AAAA,UACjB,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,MAAM,SAAS,iBAAiB,kBAAkB,QAAQ;AAAA,MAC1D,QAAQ,MACN,kBAAkB,gBAAgB,eAAe,SAAS,GAAG,OAAO,SAAS,OAAO,SAAS,KAAK,OAAO,YAAY,KAAK,OAAO,YAAY,OAAO,OAAO,cAAc,OAAO,iBAAiB,QAAQ,MAAM,OAAO,WACxN;AAAA,MACA,IAAI,QAAQ;AAAA,QACV,OAAO,QACL,OAAO,WAAW,iBAAiB,MAAM,KACzC,UAAU,OAAO,UACjB,oBAAoB,OAAO,SAC3B,SACF;AAAA,MACF;AAAA,MAEA,OAAO,QACL,OAAO,UAAU,MAAM,KACvB,OAAO,UAAU,YAAY,gBAC7B,OAAO,UACH,gCACA,4BACJ,SACF;AAAA,cACA;AAAA,MACA,IAAI;AAAA,QAAO,OAAO,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA,EAIxD,OAAO;AAAA;AAGT,SAAS,OAAO,CACd,QACA,MACA,SACA,WACU;AAAA,EACV,OAAO,SAAS,KACd,EAAE,OAAO,EAAE,MAAM,SAAS,UAAU,EAAE,GACtC,EAAE,QAAQ,SAAS,EAAE,iBAAiB,WAAW,EAAE,CACrD;AAAA;AAGF,IAAM,kBAAkB;AAAA;AACxB,MAAM,2BAA2B,MAAM;AAAC;AAGxC,eAAe,SAAS,CAAC,SAAmC;AAAA,EAC1D,MAAM,SAAS,QAAQ,MAAM,UAAU;AAAA,EACvC,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EACpB,MAAM,SAAuB,CAAC;AAAA,EAC9B,IAAI,OAAO;AAAA,EACX,IAAI;AAAA,EAEJ,SAAS,YAAY,GAAG;AAAA,IAEjB,OAAQ,OAAO,EAAE,MAAM,MAAM,EAAE;AAAA;AAAA,EAGtC,IAAI;AAAA,IACF,QAAQ,OAAO,eAAe;AAAA,IAC9B,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,QACpC,aAAa;AAAA;AAAA,MAEf,QAAQ;AAAA,MACR,QAAQ,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MACtE,IAAI,QAAQ,OAAO;AAAA,QAAS,cAAc;AAAA,KAC3C;AAAA,IACD,OAAO,MAAM;AAAA,MACX,QAAQ,MAAM,UAAU,MAAM,QAAQ,KAAK,CAAC,OAAO,KAAK,GAAG,SAAS,CAAC;AAAA,MACrE,IAAI;AAAA,QAAM;AAAA,MACV,QAAQ,MAAM;AAAA,MACd,IAAI,OAAO,iBAAiB;AAAA,QAC1B,aAAa;AAAA,QACb,MAAM,IAAI;AAAA,MACZ;AAAA,MACA,OAAO,KAAK,KAAK;AAAA,IACnB;AAAA,IACA,MAAM,QAAQ,IAAI,WAAW,IAAI;AAAA,IACjC,IAAI,SAAS;AAAA,IACb,WAAW,SAAS,QAAQ;AAAA,MAC1B,MAAM,IAAI,OAAO,MAAM;AAAA,MACvB,UAAU,MAAM;AAAA,IAClB;AAAA,IAEA,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,YACrC;AAAA,IACA,IAAI;AAAA,MAAO,QAAQ,OAAO,oBAAoB,SAAS,KAAK;AAAA,IAC5D,OAAO,YAAY;AAAA;AAAA;",
+  "debugId": "14B5C03112DB3A8E64756E2164756E21",
+  "names": []
+}

package/dist/types/client/iframe.d.ts

@@ -0,0 +1,39 @@
+import { type TransportResponse } from '../core/bridge.js';
+import { type RoutedMessage } from '../core/messages.js';
+/** One bridge per document, shared by all clients and retained across module hot replacement. */
+export declare function createIframeTransport({ parentOrigin, window: frame, timeoutMs, mode, loadScript, }: {
+    parentOrigin: string;
+    window?: Window;
+    timeoutMs?: number;
+    mode?: 'url' | 'bundle';
+    loadScript?: (javascript: string) => void;
+}): {
+    request: (message: RoutedMessage, signal?: AbortSignal) => Promise<unknown>;
+    transport: (operation: string, input: unknown, signal?: AbortSignal) => Promise<TransportResponse>;
+    dispose: () => void;
+    mode: "bundle" | "url";
+    snapshot(): unknown;
+    subscribe(listener: (state: unknown) => void): () => void;
+    ready(): void;
+    fail(): void;
+};
+export type IframeTransport = ReturnType<typeof createIframeTransport>;
+type LocalBridge = Pick<ReturnType<typeof createIframeTransport>, 'transport'> & {
+    connect?: () => Promise<ReturnType<typeof createIframeTransport>>;
+};
+/** The URL opts into local preview; only same-origin server configuration establishes trust. */
+export declare function localFrameBridge(window?: Window): LocalBridge | undefined;
+/** Install an explicitly trusted transport for hosted apps and their URL-backed controls. */
+export declare function installDataAppTransport(bridge: ReturnType<typeof createIframeTransport>, frame?: Window): () => void;
+/** The bootstrap installs this before executing app code. URL apps can install an explicit connection. */
+export declare function getDataAppTransport(frame?: Window): {
+    request: (message: RoutedMessage, signal?: AbortSignal) => Promise<unknown>;
+    transport: (operation: string, input: unknown, signal?: AbortSignal) => Promise<TransportResponse>;
+    dispose: () => void;
+    mode: "bundle" | "url";
+    snapshot(): unknown;
+    subscribe(listener: (state: unknown) => void): () => void;
+    ready(): void;
+    fail(): void;
+} | undefined;
+export {};

package/dist/types/client/index.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Typed clients for HTTP and iframe delivery; safe to import in the browser.
+ * @module @altertable/data-app/client
+ * @see https://github.com/altertable-ai/data-app/blob/main/docs/client.md
+ */
+import { type DataTransport } from './transport.js';
+export { createHttpTransport, DataAppError, type DataTransport, } from './transport.js';
+export { createIframeTransport, installDataAppTransport, getDataAppTransport, type IframeTransport, } from './iframe.js';
+export { createMessageClient } from './messages.js';
+import type { DataOperations, DisclosedQuery } from '../core/contract.js';
+export type InputOf<T> = T extends {
+    input: (value: unknown) => infer Input;
+} ? Input : never;
+export type OutputOf<T> = T extends {
+    output: (value: unknown) => infer Output;
+} ? Output : never;
+/**
+ * Parsed operation data and query evidence. `queries` is present only when SQL disclosure is
+ * allowed.
+ */
+export type DataResponse<Output, Input = unknown> = {
+    data: Output;
+    /** The exact browser input that produced this response. Never infer it from current controls. */
+    input: Input;
+    requestId: string;
+    queriedAt: string;
+    queryIds: string[];
+    queries?: DisclosedQuery[];
+};
+export type DataClient<Operations extends DataOperations> = {
+    query<Name extends keyof Operations & string>(name: Name, input: InputOf<Operations[Name]>, options?: {
+        signal?: AbortSignal;
+    }): Promise<DataResponse<OutputOf<Operations[Name]>, InputOf<Operations[Name]>>>;
+};
+/** Browser client for named operations; it sends inputs, never SQL or lakehouse credentials. */
+export declare function createDataClient<Operations extends DataOperations>(options?: {
+    transport?: DataTransport;
+    endpoint?: string;
+    fetch?: typeof fetch;
+}): DataClient<Operations>;
+export type { DataAppLocation, AppLocation } from './location.js';
+export { createDataAppNavigation, getDataAppNavigation, type DataAppNavigation, } from './navigation.js';

package/dist/types/client/location.d.ts

@@ -0,0 +1,15 @@
+export type AppLocation = {
+    search: string;
+    hash: string;
+};
+export type DataAppLocation = {
+    snapshot(): AppLocation;
+    subscribe(listener: () => void): () => void;
+    update(location: AppLocation, mode?: 'push' | 'replace'): void;
+};
+/** Opaque sandboxes keep app state in memory; URL frames retain their real URL for HMR. */
+export declare function createAppLocation(frame: Window, virtual: boolean, publish: (location: AppLocation, mode: 'push' | 'replace') => void): {
+    location: DataAppLocation;
+    apply: (next: AppLocation) => void;
+    dispose: () => void;
+};

package/dist/types/client/messages.d.ts

@@ -0,0 +1,7 @@
+import { type MessageInput, type MessageOutput, type MessageRoutes, type MessageTransport } from '../core/messages.js';
+/** Both ends validate using the same contracts; the transport owns delivery and cancellation. */
+export declare function createMessageClient<const Routes extends MessageRoutes>(routes: Routes, transport: MessageTransport): {
+    request<Name extends keyof Routes & string, const Input extends MessageInput<NoInfer<Routes[Name]>>>(route: Name, payload: Input, { signal }?: {
+        signal?: AbortSignal;
+    }): Promise<MessageOutput<Routes[Name], Input>>;
+};

package/dist/types/client/navigation.d.ts

@@ -0,0 +1,14 @@
+import { type DataAppLocation } from './location.js';
+import { type IframeTransport } from './iframe.js';
+export type DataAppNavigation = DataAppLocation & {
+    /** Publish URL changes made outside the adapter, including the document title. */
+    publish(mode?: 'push' | 'replace'): void;
+    dispose(): void;
+};
+/** Attach app URL behavior to an already authenticated bridge. */
+export declare function createDataAppNavigation({ bridge, window: frame, }: {
+    bridge: IframeTransport;
+    window?: Window;
+}): DataAppNavigation;
+/** URL controls attach navigation on demand; bootstrap and data-only clients do not. */
+export declare function getDataAppNavigation(frame?: Window): DataAppNavigation | undefined;

package/dist/types/client/transport.d.ts

@@ -0,0 +1,15 @@
+import type { TransportResponse } from '../core/bridge.js';
+export type DataTransport = (operation: string, input: unknown, signal?: AbortSignal) => Promise<TransportResponse>;
+declare const errorBrand: unique symbol;
+export declare class DataAppError extends Error {
+    readonly code: string;
+    readonly requestId?: string | undefined;
+    readonly [errorBrand] = true;
+    static [Symbol.hasInstance](value: unknown): boolean;
+    constructor(message: string, code: string, requestId?: string | undefined);
+}
+export declare function createHttpTransport({ endpoint, fetch: request, }?: {
+    endpoint?: string;
+    fetch?: typeof fetch;
+}): DataTransport;
+export {};

package/dist/types/core/appearance.d.ts

@@ -0,0 +1,28 @@
+export type AppearanceSettings = {
+    mode: 'light' | 'dark' | 'system';
+    baseColor: 'neutral' | 'slate' | 'warm';
+    accentColor: string;
+    darkAccentColor?: string;
+    chartColors: string[];
+    density: 'compact' | 'comfortable' | 'spacious';
+    cornerRadius: 'none' | 'small' | 'medium' | 'large';
+    elevation: 'flat' | 'subtle' | 'raised';
+    typography: {
+        body: string;
+        heading: string;
+    };
+};
+export type ThemeMode = AppearanceSettings['mode'];
+export type ThemeController = {
+    getMode: () => ThemeMode;
+    setMode: (mode: ThemeMode) => void;
+    subscribe: (listener: () => void) => () => void;
+};
+export declare function parseAppearance(value: unknown): AppearanceSettings;
+/**
+ * Install semantic tokens on the document root, including portaled UI. Returns a cleanup for
+ * system-theme listening.
+ */
+export declare function applyAppearance(value: unknown): () => void;
+/** Viewer color mode persists independently of app-authored brand tokens. */
+export declare function createThemeController(value: unknown): ThemeController;

package/dist/types/core/bridge.d.ts

@@ -0,0 +1,35 @@
+/** Data app delivery protocol. IDs identify a document, a shell session, and an individual call. */
+export declare const BRIDGE = "altertable:data-app";
+export declare const PARENT_PARAM = "__altertable_parent";
+/** Bound pending requests in the client and host independently.
+ * The host enforces its own limit because frames can send messages directly. */
+export declare const MAX_PENDING = 128;
+export declare const REQUEST_TIMEOUT_MS = 60000;
+export type TransportResponse = {
+    status: number;
+    body: unknown;
+};
+export type BridgeMessage = {
+    channel: typeof BRIDGE;
+    version: 1;
+    type: string;
+    documentId: string;
+    sessionId?: string;
+    id?: string;
+    route?: string;
+    payload?: unknown;
+    response?: unknown;
+    code?: string;
+    message?: string;
+    /** Opaque host context, interpreted by optional app adapters. */
+    state?: unknown;
+    requestId?: string;
+    token?: string;
+    javascript?: string;
+};
+export declare function isBridgeMessage(value: unknown): value is BridgeMessage;
+export declare function validId(value: unknown): value is string;
+export declare function validLocation(message: {
+    search?: unknown;
+    hash?: unknown;
+}): boolean;

package/dist/types/core/config.d.ts

@@ -0,0 +1,14 @@
+/**
+ * App identity and display scope shared by browser and server.
+ * @module @altertable/data-app/config
+ * @see https://github.com/altertable-ai/data-app/blob/main/docs/config.md
+ */
+export type DataAppConfig = {
+    title: string;
+    scope: {
+        organization: string;
+        environment: string;
+    };
+    appearance: unknown;
+};
+export declare function dataAppTitle(config: Pick<DataAppConfig, 'title' | 'scope'>): string;