@altertable/data-app 0.59.1

package/dist/chunks/contract-tkkc28tg.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/client/location.ts", "../src/client/navigation.ts", "../src/client/index.ts"],
+  "sourcesContent": [
+    "import { PARENT_PARAM, validLocation } from '@/src/core/bridge';\n\nexport type AppLocation = { search: string; hash: string };\nexport type DataAppLocation = {\n  snapshot(): AppLocation;\n  subscribe(listener: () => void): () => void;\n  update(location: AppLocation, mode?: 'push' | 'replace'): void;\n};\n\n/** Opaque sandboxes keep app state in memory; URL frames retain their real URL for HMR. */\nexport function createAppLocation(\n  frame: Window,\n  virtual: boolean,\n  publish: (location: AppLocation, mode: 'push' | 'replace') => void\n) {\n  let state: AppLocation = { search: '', hash: '' };\n  let disposed = false;\n  const listeners = new Set<() => void>();\n\n  function notify() {\n    for (const listener of listeners) listener();\n  }\n\n  function snapshot(): AppLocation {\n    if (virtual) return state;\n    const url = new URL(frame.location.href);\n    url.searchParams.delete(PARENT_PARAM);\n    if (state.search !== url.search || state.hash !== url.hash)\n      state = { search: url.search, hash: url.hash };\n\n    return state;\n  }\n\n  function apply(next: AppLocation) {\n    const previous = snapshot();\n    if (previous.search === next.search && previous.hash === next.hash) return;\n    if (virtual) state = next;\n    else {\n      const url = new URL(frame.location.href);\n      const parent = url.searchParams.get(PARENT_PARAM);\n      url.search = next.search;\n      if (parent) url.searchParams.set(PARENT_PARAM, parent);\n      url.hash = next.hash;\n      frame.history.replaceState(null, '', url);\n      frame.dispatchEvent(new Event('popstate'));\n    }\n    if (virtual) notify();\n  }\n\n  const location: DataAppLocation = {\n    snapshot,\n    subscribe(listener) {\n      listeners.add(listener);\n      if (!virtual) frame.addEventListener('popstate', listener);\n\n      return () => {\n        listeners.delete(listener);\n        frame.removeEventListener('popstate', listener);\n      };\n    },\n    update(next, mode = 'replace') {\n      if (disposed) return;\n      if (!validLocation(next)) throw new Error('Invalid app location.');\n      const before = snapshot();\n      if (before.search === next.search && before.hash === next.hash) return;\n      apply(next);\n      publish(next, mode);\n    },\n  };\n\n  function dispose() {\n    disposed = true;\n    for (const listener of listeners)\n      frame.removeEventListener('popstate', listener);\n    listeners.clear();\n  }\n\n  return { location, apply, dispose };\n}\n",
+    "import { createAppLocation, type DataAppLocation } from '@/src/client/location';\nimport { validLocation } from '@/src/core/bridge';\nimport {\n  navigationUpdateRoute,\n  type NavigationUpdate,\n} from '@/src/core/messages';\nimport { createMessageClient } from '@/src/client/messages';\nimport {\n  getDataAppTransport,\n  localFrameBridge,\n  type IframeTransport,\n} from '@/src/client/iframe';\n\nexport type DataAppNavigation = DataAppLocation & {\n  /** Publish URL changes made outside the adapter, including the document title. */\n  publish(mode?: 'push' | 'replace'): void;\n  dispose(): void;\n};\n\n/** Attach app URL behavior to an already authenticated bridge. */\nexport function createDataAppNavigation({\n  bridge,\n  window: frame = window,\n}: {\n  bridge: IframeTransport;\n  window?: Window;\n}): DataAppNavigation {\n  return attachNavigation(frame, bridge.mode === 'bundle', bridge).navigation;\n}\n\nfunction attachNavigation(\n  frame: Window,\n  virtual: boolean,\n  connection: IframeTransport | Promise<IframeTransport>\n) {\n  let disposed = false;\n  let unsubscribe: (() => void) | undefined;\n  let send: ((update: NavigationUpdate) => void) | undefined;\n  let pendingUpdate: NavigationUpdate | undefined;\n  const { location, apply, dispose } = createAppLocation(\n    frame,\n    virtual,\n    publish\n  );\n\n  function publish(\n    location: { search: string; hash: string },\n    mode: 'push' | 'replace'\n  ) {\n    const update = { ...location, mode, title: frame.document.title };\n    if (send) send(update);\n    else pendingUpdate = update;\n  }\n\n  function attach(bridge: IframeTransport) {\n    if (disposed) return;\n    unsubscribe?.();\n    const messages = createMessageClient(\n      { 'navigation.update': navigationUpdateRoute },\n      bridge.request\n    );\n\n    function sendUpdate(update: NavigationUpdate) {\n      void messages.request('navigation.update', update).catch(() => {});\n    }\n\n    function receiveState(state: unknown) {\n      if (!state || typeof state !== 'object' || !validLocation(state)) return;\n      pendingUpdate = undefined;\n      apply(state as { search: string; hash: string });\n    }\n\n    send = sendUpdate;\n    unsubscribe = bridge.subscribe(receiveState);\n    receiveState(bridge.snapshot());\n    if (pendingUpdate) {\n      sendUpdate(pendingUpdate);\n      pendingUpdate = undefined;\n    }\n  }\n\n  if ('then' in connection) void connection.then(attach).catch(() => {});\n  else attach(connection);\n\n  const navigation: DataAppNavigation = {\n    ...location,\n    publish(mode = 'replace') {\n      if (!disposed) publish(location.snapshot(), mode);\n    },\n    dispose() {\n      disposed = true;\n      unsubscribe?.();\n      dispose();\n      send = undefined;\n      pendingUpdate = undefined;\n    },\n  };\n\n  return {\n    navigation,\n    attach,\n    isDisposed() {\n      return disposed;\n    },\n  };\n}\n\nconst navigationKey = Symbol.for('altertable.appNavigation');\ntype NavigationWindow = Window & {\n  [navigationKey]?: ReturnType<typeof attachNavigation> & {\n    bridge?: IframeTransport;\n  };\n};\n\n/** URL controls attach navigation on demand; bootstrap and data-only clients do not. */\nexport function getDataAppNavigation(\n  frame: Window = window\n): DataAppNavigation | undefined {\n  const target = frame as NavigationWindow;\n  const bridge = getDataAppTransport(frame);\n  const cached = target[navigationKey]?.isDisposed()\n    ? undefined\n    : target[navigationKey];\n  if (cached) {\n    if (bridge && cached.bridge !== bridge) {\n      cached.attach(bridge);\n      cached.bridge = bridge;\n    }\n\n    return cached.navigation;\n  }\n  if (bridge) {\n    const adapter = attachNavigation(frame, bridge.mode === 'bundle', bridge);\n    target[navigationKey] = { bridge, ...adapter };\n\n    return adapter.navigation;\n  }\n  const preview = localFrameBridge(frame);\n  if (!preview?.connect) return undefined;\n  const connection = preview.connect();\n  const adapter = attachNavigation(frame, false, connection);\n  const entry = {\n    ...adapter,\n    bridge: undefined as IframeTransport | undefined,\n  };\n  target[navigationKey] = entry;\n  void connection\n    .then(bridge => {\n      entry.bridge = bridge;\n    })\n    .catch(() => {});\n\n  return adapter.navigation;\n}\n",
+    "/**\n * Typed clients for HTTP and iframe delivery; safe to import in the browser.\n * @module @altertable/data-app/client\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/client.md\n */\nimport {\n  createHttpTransport,\n  DataAppError,\n  type DataTransport,\n} from '@/src/client/transport';\nimport { localFrameBridge } from '@/src/client/iframe';\nexport {\n  createHttpTransport,\n  DataAppError,\n  type DataTransport,\n} from '@/src/client/transport';\nexport {\n  createIframeTransport,\n  installDataAppTransport,\n  getDataAppTransport,\n  type IframeTransport,\n} from '@/src/client/iframe';\nexport { createMessageClient } from '@/src/client/messages';\nimport type { DataOperations, DisclosedQuery } from '@/src/core/contract';\n\nexport type InputOf<T> = T extends { input: (value: unknown) => infer Input }\n  ? Input\n  : never;\nexport type OutputOf<T> = T extends { output: (value: unknown) => infer Output }\n  ? Output\n  : never;\n\n/**\n * Parsed operation data and query evidence. `queries` is present only when SQL disclosure is\n * allowed.\n */\nexport type DataResponse<Output, Input = unknown> = {\n  data: Output;\n  /** The exact browser input that produced this response. Never infer it from current controls. */\n  input: Input;\n  requestId: string;\n  queriedAt: string;\n  queryIds: string[];\n  queries?: DisclosedQuery[];\n};\n\nexport type DataClient<Operations extends DataOperations> = {\n  query<Name extends keyof Operations & string>(\n    name: Name,\n    input: InputOf<Operations[Name]>,\n    options?: { signal?: AbortSignal }\n  ): Promise<\n    DataResponse<OutputOf<Operations[Name]>, InputOf<Operations[Name]>>\n  >;\n};\n\n/** Browser client for named operations; it sends inputs, never SQL or lakehouse credentials. */\nexport function createDataClient<Operations extends DataOperations>(\n  options: {\n    transport?: DataTransport;\n    endpoint?: string;\n    fetch?: typeof fetch;\n  } = {}\n): DataClient<Operations> {\n  const http = createHttpTransport(options);\n\n  return {\n    async query(name, input, { signal } = {}) {\n      const transport =\n        options.transport ??\n        (options.endpoint !== undefined || options.fetch !== undefined\n          ? http\n          : (localFrameBridge()?.transport ?? http));\n      const response = await transport(name, input, signal);\n      const ok = response.status >= 200 && response.status < 300;\n      let body: Omit<\n        DataResponse<OutputOf<Operations[typeof name]>>,\n        'input'\n      > & {\n        error?: { code: string; message: string; requestId?: string };\n      };\n      try {\n        const parsed: unknown = response.body;\n        if (\n          parsed === null ||\n          typeof parsed !== 'object' ||\n          Array.isArray(parsed)\n        )\n          throw new Error('Invalid response envelope.');\n        body = parsed as typeof body;\n      } catch (error) {\n        if (signal?.aborted) throw error;\n        throw new DataAppError(\n          ok ? 'The data response was invalid.' : 'Could not load data.',\n          ok ? 'invalid_response' : 'request_failed'\n        );\n      }\n      if (!ok)\n        throw new DataAppError(\n          body.error?.message ?? 'Could not load data.',\n          body.error?.code ?? 'request_failed',\n          body.error?.requestId\n        );\n\n      return { ...body, input };\n    },\n  };\n}\n\nexport type { DataAppLocation, AppLocation } from '@/src/client/location';\n\nexport {\n  createDataAppNavigation,\n  getDataAppNavigation,\n  type DataAppNavigation,\n} from '@/src/client/navigation';\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;AAUO,SAAS,iBAAiB,CAC/B,OACA,SACA,SACA;AAAA,EACA,IAAI,QAAqB,EAAE,QAAQ,IAAI,MAAM,GAAG;AAAA,EAChD,IAAI,WAAW;AAAA,EACf,MAAM,YAAY,IAAI;AAAA,EAEtB,SAAS,MAAM,GAAG;AAAA,IAChB,WAAW,YAAY;AAAA,MAAW,SAAS;AAAA;AAAA,EAG7C,SAAS,QAAQ,GAAgB;AAAA,IAC/B,IAAI;AAAA,MAAS,OAAO;AAAA,IACpB,MAAM,MAAM,IAAI,IAAI,MAAM,SAAS,IAAI;AAAA,IACvC,IAAI,aAAa,OAAO,YAAY;AAAA,IACpC,IAAI,MAAM,WAAW,IAAI,UAAU,MAAM,SAAS,IAAI;AAAA,MACpD,QAAQ,EAAE,QAAQ,IAAI,QAAQ,MAAM,IAAI,KAAK;AAAA,IAE/C,OAAO;AAAA;AAAA,EAGT,SAAS,KAAK,CAAC,MAAmB;AAAA,IAChC,MAAM,WAAW,SAAS;AAAA,IAC1B,IAAI,SAAS,WAAW,KAAK,UAAU,SAAS,SAAS,KAAK;AAAA,MAAM;AAAA,IACpE,IAAI;AAAA,MAAS,QAAQ;AAAA,IAChB;AAAA,MACH,MAAM,MAAM,IAAI,IAAI,MAAM,SAAS,IAAI;AAAA,MACvC,MAAM,SAAS,IAAI,aAAa,IAAI,YAAY;AAAA,MAChD,IAAI,SAAS,KAAK;AAAA,MAClB,IAAI;AAAA,QAAQ,IAAI,aAAa,IAAI,cAAc,MAAM;AAAA,MACrD,IAAI,OAAO,KAAK;AAAA,MAChB,MAAM,QAAQ,aAAa,MAAM,IAAI,GAAG;AAAA,MACxC,MAAM,cAAc,IAAI,MAAM,UAAU,CAAC;AAAA;AAAA,IAE3C,IAAI;AAAA,MAAS,OAAO;AAAA;AAAA,EAGtB,MAAM,WAA4B;AAAA,IAChC;AAAA,IACA,SAAS,CAAC,UAAU;AAAA,MAClB,UAAU,IAAI,QAAQ;AAAA,MACtB,IAAI,CAAC;AAAA,QAAS,MAAM,iBAAiB,YAAY,QAAQ;AAAA,MAEzD,OAAO,MAAM;AAAA,QACX,UAAU,OAAO,QAAQ;AAAA,QACzB,MAAM,oBAAoB,YAAY,QAAQ;AAAA;AAAA;AAAA,IAGlD,MAAM,CAAC,MAAM,OAAO,WAAW;AAAA,MAC7B,IAAI;AAAA,QAAU;AAAA,MACd,IAAI,CAAC,cAAc,IAAI;AAAA,QAAG,MAAM,IAAI,MAAM,uBAAuB;AAAA,MACjE,MAAM,SAAS,SAAS;AAAA,MACxB,IAAI,OAAO,WAAW,KAAK,UAAU,OAAO,SAAS,KAAK;AAAA,QAAM;AAAA,MAChE,MAAM,IAAI;AAAA,MACV,QAAQ,MAAM,IAAI;AAAA;AAAA,EAEtB;AAAA,EAEA,SAAS,OAAO,GAAG;AAAA,IACjB,WAAW;AAAA,IACX,WAAW,YAAY;AAAA,MACrB,MAAM,oBAAoB,YAAY,QAAQ;AAAA,IAChD,UAAU,MAAM;AAAA;AAAA,EAGlB,OAAO,EAAE,UAAU,OAAO,QAAQ;AAAA;;;ACzD7B,SAAS,wBAAuB;AAAA,EACrC;AAAA,EACA,QAAQ,QAAQ;AAAA,GAII;AAAA,EACpB,OAAO,iBAAiB,OAAO,OAAO,SAAS,UAAU,MAAM,EAAE;AAAA;AAGnE,SAAS,gBAAgB,CACvB,OACA,SACA,YACA;AAAA,EACA,IAAI,WAAW;AAAA,EACf,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,QAAQ,UAAU,OAAO,YAAY,kBACnC,OACA,SACA,OACF;AAAA,EAEA,SAAS,OAAO,CACd,UACA,MACA;AAAA,IACA,MAAM,SAAS,KAAK,UAAU,MAAM,OAAO,MAAM,SAAS,MAAM;AAAA,IAChE,IAAI;AAAA,MAAM,KAAK,MAAM;AAAA,IAChB;AAAA,sBAAgB;AAAA;AAAA,EAGvB,SAAS,MAAM,CAAC,QAAyB;AAAA,IACvC,IAAI;AAAA,MAAU;AAAA,IACd,cAAc;AAAA,IACd,MAAM,WAAW,qBACf,EAAE,qBAAqB,uBAAsB,GAC7C,OAAO,OACT;AAAA,IAEA,SAAS,UAAU,CAAC,QAA0B;AAAA,MACvC,SAAS,QAAQ,qBAAqB,MAAM,EAAE,MAAM,MAAM,EAAE;AAAA;AAAA,IAGnE,SAAS,YAAY,CAAC,OAAgB;AAAA,MACpC,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,cAAc,KAAK;AAAA,QAAG;AAAA,MAClE,gBAAgB;AAAA,MAChB,MAAM,KAAyC;AAAA;AAAA,IAGjD,OAAO;AAAA,IACP,cAAc,OAAO,UAAU,YAAY;AAAA,IAC3C,aAAa,OAAO,SAAS,CAAC;AAAA,IAC9B,IAAI,eAAe;AAAA,MACjB,WAAW,aAAa;AAAA,MACxB,gBAAgB;AAAA,IAClB;AAAA;AAAA,EAGF,IAAI,UAAU;AAAA,IAAiB,WAAW,KAAK,MAAM,EAAE,MAAM,MAAM,EAAE;AAAA,EAChE;AAAA,WAAO,UAAU;AAAA,EAEtB,MAAM,aAAgC;AAAA,OACjC;AAAA,IACH,OAAO,CAAC,OAAO,WAAW;AAAA,MACxB,IAAI,CAAC;AAAA,QAAU,QAAQ,SAAS,SAAS,GAAG,IAAI;AAAA;AAAA,IAElD,OAAO,GAAG;AAAA,MACR,WAAW;AAAA,MACX,cAAc;AAAA,MACd,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,gBAAgB;AAAA;AAAA,EAEpB;AAAA,EAEA,OAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,UAAU,GAAG;AAAA,MACX,OAAO;AAAA;AAAA,EAEX;AAAA;AAGF,IAAM,gBAAgB,OAAO,IAAI,0BAA0B;AAQpD,SAAS,qBAAoB,CAClC,QAAgB,QACe;AAAA,EAC/B,MAAM,SAAS;AAAA,EACf,MAAM,SAAS,qBAAoB,KAAK;AAAA,EACxC,MAAM,SAAS,OAAO,gBAAgB,WAAW,IAC7C,YACA,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,IACV,IAAI,UAAU,OAAO,WAAW,QAAQ;AAAA,MACtC,OAAO,OAAO,MAAM;AAAA,MACpB,OAAO,SAAS;AAAA,IAClB;AAAA,IAEA,OAAO,OAAO;AAAA,EAChB;AAAA,EACA,IAAI,QAAQ;AAAA,IACV,MAAM,UAAU,iBAAiB,OAAO,OAAO,SAAS,UAAU,MAAM;AAAA,IACxE,OAAO,iBAAiB,EAAE,WAAW,QAAQ;AAAA,IAE7C,OAAO,QAAQ;AAAA,EACjB;AAAA,EACA,MAAM,UAAU,iBAAiB,KAAK;AAAA,EACtC,IAAI,CAAC,SAAS;AAAA,IAAS;AAAA,EACvB,MAAM,aAAa,QAAQ,QAAQ;AAAA,EACnC,MAAM,UAAU,iBAAiB,OAAO,OAAO,UAAU;AAAA,EACzD,MAAM,QAAQ;AAAA,OACT;AAAA,IACH,QAAQ;AAAA,EACV;AAAA,EACA,OAAO,iBAAiB;AAAA,EACnB,WACF,KAAK,YAAU;AAAA,IACd,MAAM,SAAS;AAAA,GAChB,EACA,MAAM,MAAM,EAAE;AAAA,EAEjB,OAAO,QAAQ;AAAA;;;AC/FV,SAAS,iBAAmD,CACjE,UAII,CAAC,GACmB;AAAA,EACxB,MAAM,OAAO,qBAAoB,OAAO;AAAA,EAExC,OAAO;AAAA,SACC,MAAK,CAAC,MAAM,SAAS,WAAW,CAAC,GAAG;AAAA,MACxC,MAAM,YACJ,QAAQ,cACP,QAAQ,aAAa,aAAa,QAAQ,UAAU,YACjD,OACC,iBAAiB,GAAG,aAAa;AAAA,MACxC,MAAM,WAAW,MAAM,UAAU,MAAM,OAAO,MAAM;AAAA,MACpD,MAAM,KAAK,SAAS,UAAU,OAAO,SAAS,SAAS;AAAA,MACvD,IAAI;AAAA,MAMJ,IAAI;AAAA,QACF,MAAM,SAAkB,SAAS;AAAA,QACjC,IACE,WAAW,QACX,OAAO,WAAW,YAClB,MAAM,QAAQ,MAAM;AAAA,UAEpB,MAAM,IAAI,MAAM,4BAA4B;AAAA,QAC9C,OAAO;AAAA,QACP,OAAO,OAAO;AAAA,QACd,IAAI,QAAQ;AAAA,UAAS,MAAM;AAAA,QAC3B,MAAM,IAAI,cACR,KAAK,mCAAmC,wBACxC,KAAK,qBAAqB,gBAC5B;AAAA;AAAA,MAEF,IAAI,CAAC;AAAA,QACH,MAAM,IAAI,cACR,KAAK,OAAO,WAAW,wBACvB,KAAK,OAAO,QAAQ,kBACpB,KAAK,OAAO,SACd;AAAA,MAEF,OAAO,KAAK,MAAM,MAAM;AAAA;AAAA,EAE5B;AAAA;",
+  "debugId": "235551129B40A86C64756E2164756E21",
+  "names": []
+}

package/dist/chunks/contract-tqrf3ykr.js

@@ -0,0 +1,232 @@
+import {
+  MessageRoutingError2
+} from "./contract-jksbmt5q.js";
+import {
+  BRIDGE,
+  PARENT_PARAM,
+  MAX_PENDING,
+  REQUEST_TIMEOUT_MS,
+  isBridgeMessage,
+  validId
+} from "./contract-ryyf6dme.js";
+
+// src/embed/host.ts
+function attachDataAppBridge2({
+  iframe,
+  connection,
+  javascript,
+  onStatusChange,
+  onDiagnostic,
+  onMessage,
+  window: host = window
+}) {
+  const frameOrigin = connection.type === "origin" ? connection.origin : "null";
+  if (connection.type === "origin" && new URL(frameOrigin).origin !== frameOrigin)
+    throw new Error("Expected an exact frame origin.");
+  if (connection.type === "opaque" && !validId(connection.token))
+    throw new Error("Invalid sandbox token.");
+  let token = connection.type === "opaque" ? connection.token : undefined;
+  const targetOrigin = connection.type === "opaque" ? "*" : frameOrigin;
+  let documentId;
+  let sessionId;
+  const pending = new Map;
+  function cancelAll() {
+    for (const controller of pending.values())
+      controller.abort();
+    pending.clear();
+  }
+  function send(message) {
+    onDiagnostic?.({ direction: "send", type: message.type ?? "unknown" });
+    iframe.contentWindow?.postMessage({
+      channel: BRIDGE,
+      version: 1,
+      documentId,
+      sessionId,
+      ...connection.type === "opaque" ? { token } : {},
+      ...message
+    }, targetOrigin);
+  }
+  function error(id, code, message, requestId) {
+    send({ type: "error", id, code, message, requestId });
+  }
+  async function request(message) {
+    const id = message.id;
+    if (!validId(id) || pending.has(id))
+      return;
+    if (pending.size >= MAX_PENDING)
+      return error(id, "bridge_busy", "Too many pending data requests.");
+    if (typeof message.route !== "string" || !message.route || message.route.length > 256)
+      return error(id, "invalid_message", "Invalid message route.");
+    try {
+      const body = JSON.stringify(message.payload);
+      if (message.payload !== undefined && (typeof body !== "string" || body.length > 16384))
+        throw new Error("Invalid payload");
+    } catch {
+      return error(id, "invalid_payload", "The message payload is invalid or too large.");
+    }
+    const controller = new AbortController;
+    pending.set(id, controller);
+    const timer = setTimeout(() => {
+      if (pending.get(id) !== controller)
+        return;
+      pending.delete(id);
+      controller.abort();
+      error(id, "timeout", "The data request timed out.");
+    }, REQUEST_TIMEOUT_MS);
+    controller.signal.addEventListener("abort", () => clearTimeout(timer), {
+      once: true
+    });
+    try {
+      const response = await onMessage({ route: message.route, payload: message.payload }, { signal: controller.signal });
+      if (pending.get(id) === controller)
+        send({ type: "result", id, response });
+    } catch (failure) {
+      if (pending.get(id) === controller) {
+        if (failure instanceof MessageRoutingError2)
+          error(id, failure.code, failure.message, failure.requestId);
+        else
+          error(id, "request_failed", "The message request failed. Retry the request.");
+      }
+    } finally {
+      clearTimeout(timer);
+      if (pending.get(id) === controller)
+        pending.delete(id);
+    }
+  }
+  function receive(event) {
+    if (event.origin !== frameOrigin || event.source !== iframe.contentWindow || !isBridgeMessage(event.data))
+      return;
+    const message = event.data;
+    if (connection.type === "opaque" && message.token !== token)
+      return;
+    onDiagnostic?.({ direction: "receive", type: message.type });
+    if (message.type === "ready") {
+      if (message.documentId !== documentId) {
+        cancelAll();
+        documentId = message.documentId;
+        sessionId = crypto.randomUUID();
+      }
+      onStatusChange?.("connected");
+      send({
+        type: "initialize",
+        state: { search: host.location.search, hash: host.location.hash }
+      });
+      if (javascript !== undefined)
+        send({ type: "script.load", javascript });
+      return;
+    }
+    if (!sessionId || message.sessionId !== sessionId || message.documentId !== documentId)
+      return;
+    if (message.type === "runtime.ready")
+      onStatusChange?.("ready");
+    else if (message.type === "runtime.error")
+      onStatusChange?.("failed");
+    else if (message.type === "request")
+      request(message);
+    else if (message.type === "cancel" && validId(message.id)) {
+      pending.get(message.id)?.abort();
+      pending.delete(message.id);
+    } else if (message.type === "disconnect") {
+      cancelAll();
+      documentId = undefined;
+      sessionId = undefined;
+      onStatusChange?.("disconnected");
+    }
+  }
+  function navigate() {
+    send({
+      type: "state",
+      state: { search: host.location.search, hash: host.location.hash }
+    });
+  }
+  function load() {
+    if (connection.type === "opaque")
+      token = crypto.randomUUID();
+    cancelAll();
+    documentId = undefined;
+    sessionId = undefined;
+    onStatusChange?.("connecting");
+    send({ type: "connect", documentId: "host" });
+  }
+  function dispose() {
+    cancelAll();
+    iframe.removeEventListener("load", load);
+    host.removeEventListener("message", receive);
+    host.removeEventListener("popstate", navigate);
+    host.removeEventListener("pagehide", cancelAll);
+  }
+  iframe.addEventListener("load", load);
+  host.addEventListener("message", receive);
+  host.addEventListener("popstate", navigate);
+  host.addEventListener("pagehide", cancelAll);
+  onStatusChange?.("connecting");
+  send({ type: "connect", documentId: "host" });
+  return dispose;
+}
+
+// src/embed/shell.ts
+function attachDataAppShell2({
+  iframe,
+  source,
+  onMessage,
+  onStatusChange,
+  onDiagnostic,
+  startupTimeoutMs = 30000
+}) {
+  const host = iframe.ownerDocument.defaultView;
+  if (!host)
+    throw new Error("The iframe requires a host window.");
+  const url = new URL(source.type === "url" ? source.url : source.bootstrapUrl, host.location.href);
+  if (!/^https?:$/.test(url.protocol))
+    throw new Error("Data apps require an HTTP(S) URL.");
+  const opaque = source.type === "bundle";
+  if (!opaque && url.origin === host.location.origin)
+    throw new Error("URL data apps require a separate origin from the shell.");
+  iframe.setAttribute("sandbox", opaque ? "allow-scripts" : "allow-scripts allow-same-origin allow-downloads allow-popups allow-popups-to-escape-sandbox");
+  iframe.referrerPolicy = "no-referrer";
+  if (!opaque)
+    url.searchParams.set(PARENT_PARAM, host.location.origin);
+  let timer;
+  let failed = false;
+  function status(value) {
+    if (value === "connecting")
+      failed = false;
+    if (failed && value !== "connecting")
+      return;
+    clearTimeout(timer);
+    if (value === "connecting" || value === "connected")
+      timer = setTimeout(() => {
+        failed = true;
+        disposeBridge();
+        onStatusChange?.("failed");
+      }, startupTimeoutMs);
+    if (value === "failed") {
+      failed = true;
+      disposeBridge();
+    }
+    onStatusChange?.(value);
+  }
+  const disposeBridge = attachDataAppBridge2({
+    iframe,
+    connection: opaque ? { type: "opaque", token: crypto.randomUUID() } : { type: "origin", origin: url.origin },
+    javascript: opaque ? source.javascript : undefined,
+    onMessage,
+    onStatusChange: status,
+    onDiagnostic,
+    window: host
+  });
+  function error() {
+    return status("failed");
+  }
+  iframe.addEventListener("error", error);
+  iframe.src = url.href;
+  return () => {
+    clearTimeout(timer);
+    iframe.removeEventListener("error", error);
+    disposeBridge();
+  };
+}
+
+export { attachDataAppBridge2, attachDataAppShell2 };
+
+//# debugId=AFE2FEFDAF8B989664756E2164756E21

package/dist/chunks/contract-tqrf3ykr.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/embed/host.ts", "../src/embed/shell.ts"],
+  "sourcesContent": [
+    "import {\n  BRIDGE,\n  MAX_PENDING,\n  REQUEST_TIMEOUT_MS,\n  isBridgeMessage,\n  validId,\n  type BridgeMessage,\n} from '@/src/core/bridge';\n\nimport {\n  MessageRoutingError,\n  type MessageDispatcher,\n} from '@/src/core/messages';\n\nexport type DataAppConnection =\n  | { type: 'origin'; origin: string }\n  | { type: 'opaque'; token: string };\nexport type DataAppStatus =\n  | 'connecting'\n  | 'connected'\n  | 'ready'\n  | 'failed'\n  | 'disconnected';\nexport type DataAppDiagnostic = { direction: 'send' | 'receive'; type: string };\n\n/** The bridge owns delivery and cancellation; the routed handler owns validation, authorization and execution. */\nexport function attachDataAppBridge({\n  iframe,\n  connection,\n  javascript,\n  onStatusChange,\n  onDiagnostic,\n  onMessage,\n  window: host = window,\n}: {\n  iframe: HTMLIFrameElement;\n  connection: DataAppConnection;\n  javascript?: string;\n  onStatusChange?: (status: DataAppStatus) => void;\n  onDiagnostic?: (event: DataAppDiagnostic) => void;\n  onMessage: MessageDispatcher;\n  window?: Window;\n}) {\n  const frameOrigin = connection.type === 'origin' ? connection.origin : 'null';\n  if (\n    connection.type === 'origin' &&\n    new URL(frameOrigin).origin !== frameOrigin\n  )\n    throw new Error('Expected an exact frame origin.');\n  if (connection.type === 'opaque' && !validId(connection.token))\n    throw new Error('Invalid sandbox token.');\n  let token = connection.type === 'opaque' ? connection.token : undefined;\n  const targetOrigin = connection.type === 'opaque' ? '*' : frameOrigin;\n  let documentId: string | undefined;\n  let sessionId: string | undefined;\n  const pending = new Map<string, AbortController>();\n\n  function cancelAll() {\n    for (const controller of pending.values()) controller.abort();\n    pending.clear();\n  }\n\n  function send(message: Partial<BridgeMessage>) {\n    onDiagnostic?.({ direction: 'send', type: message.type ?? 'unknown' });\n    iframe.contentWindow?.postMessage(\n      {\n        channel: BRIDGE,\n        version: 1,\n        documentId,\n        sessionId,\n        ...(connection.type === 'opaque' ? { token } : {}),\n        ...message,\n      },\n      targetOrigin\n    );\n  }\n\n  function error(\n    id: string,\n    code: string,\n    message: string,\n    requestId?: string\n  ) {\n    send({ type: 'error', id, code, message, requestId });\n  }\n\n  async function request(message: BridgeMessage) {\n    const id = message.id;\n    if (!validId(id) || pending.has(id)) return;\n    if (pending.size >= MAX_PENDING)\n      return error(id, 'bridge_busy', 'Too many pending data requests.');\n    if (\n      typeof message.route !== 'string' ||\n      !message.route ||\n      message.route.length > 256\n    )\n      return error(id, 'invalid_message', 'Invalid message route.');\n    try {\n      const body = JSON.stringify(message.payload);\n      if (\n        message.payload !== undefined &&\n        (typeof body !== 'string' || body.length > 16_384)\n      )\n        throw new Error('Invalid payload');\n    } catch {\n      return error(\n        id,\n        'invalid_payload',\n        'The message payload is invalid or too large.'\n      );\n    }\n    const controller = new AbortController();\n    pending.set(id, controller);\n    const timer = setTimeout(() => {\n      if (pending.get(id) !== controller) return;\n      pending.delete(id);\n      controller.abort();\n      error(id, 'timeout', 'The data request timed out.');\n    }, REQUEST_TIMEOUT_MS);\n    controller.signal.addEventListener('abort', () => clearTimeout(timer), {\n      once: true,\n    });\n    try {\n      const response = await onMessage(\n        { route: message.route, payload: message.payload },\n        { signal: controller.signal }\n      );\n      if (pending.get(id) === controller)\n        send({ type: 'result', id, response });\n    } catch (failure) {\n      if (pending.get(id) === controller) {\n        if (failure instanceof MessageRoutingError)\n          error(id, failure.code, failure.message, failure.requestId);\n        else\n          error(\n            id,\n            'request_failed',\n            'The message request failed. Retry the request.'\n          );\n      }\n    } finally {\n      clearTimeout(timer);\n      if (pending.get(id) === controller) pending.delete(id);\n    }\n  }\n\n  function receive(event: MessageEvent) {\n    if (\n      event.origin !== frameOrigin ||\n      event.source !== iframe.contentWindow ||\n      !isBridgeMessage(event.data)\n    )\n      return;\n    const message = event.data;\n    if (connection.type === 'opaque' && message.token !== token) return;\n    onDiagnostic?.({ direction: 'receive', type: message.type });\n    if (message.type === 'ready') {\n      if (message.documentId !== documentId) {\n        cancelAll();\n        documentId = message.documentId;\n        sessionId = crypto.randomUUID();\n      }\n      onStatusChange?.('connected');\n      send({\n        type: 'initialize',\n        state: { search: host.location.search, hash: host.location.hash },\n      });\n      if (javascript !== undefined) send({ type: 'script.load', javascript });\n\n      return;\n    }\n    if (\n      !sessionId ||\n      message.sessionId !== sessionId ||\n      message.documentId !== documentId\n    )\n      return;\n    if (message.type === 'runtime.ready') onStatusChange?.('ready');\n    else if (message.type === 'runtime.error') onStatusChange?.('failed');\n    else if (message.type === 'request') void request(message);\n    else if (message.type === 'cancel' && validId(message.id)) {\n      pending.get(message.id)?.abort();\n      pending.delete(message.id);\n    } else if (message.type === 'disconnect') {\n      cancelAll();\n      documentId = undefined;\n      sessionId = undefined;\n      onStatusChange?.('disconnected');\n    }\n  }\n\n  function navigate() {\n    send({\n      type: 'state',\n      state: { search: host.location.search, hash: host.location.hash },\n    });\n  }\n\n  function load() {\n    if (connection.type === 'opaque') token = crypto.randomUUID();\n    cancelAll();\n    documentId = undefined;\n    sessionId = undefined;\n    onStatusChange?.('connecting');\n    send({ type: 'connect', documentId: 'host' });\n  }\n\n  function dispose() {\n    cancelAll();\n    iframe.removeEventListener('load', load);\n    host.removeEventListener('message', receive);\n    host.removeEventListener('popstate', navigate);\n    host.removeEventListener('pagehide', cancelAll);\n  }\n\n  iframe.addEventListener('load', load);\n  host.addEventListener('message', receive);\n  host.addEventListener('popstate', navigate);\n  host.addEventListener('pagehide', cancelAll);\n  // Reconnect an already-loaded iframe when its host bridge mounts again.\n  onStatusChange?.('connecting');\n  send({ type: 'connect', documentId: 'host' });\n\n  return dispose;\n}\n",
+    "import { PARENT_PARAM } from '@/src/core/bridge';\nimport type { MessageDispatcher } from '@/src/core/messages';\nimport {\n  attachDataAppBridge,\n  type DataAppStatus,\n  type DataAppDiagnostic,\n} from '@/src/embed/host';\n\nexport type DataAppSource =\n  | { type: 'url'; url: string }\n  | {\n      type: 'bundle';\n      bootstrapUrl: string;\n      javascript: string;\n      revision: string;\n    };\nexport type DataAppShellOptions = {\n  iframe: HTMLIFrameElement;\n  source: DataAppSource;\n  onMessage: MessageDispatcher;\n  onStatusChange?: (status: DataAppStatus) => void;\n  onDiagnostic?: (event: DataAppDiagnostic) => void;\n  startupTimeoutMs?: number;\n};\n\n/** Owns loading and sandbox policy. Dispose before replacing the source or retrying. */\nexport function attachDataAppShell({\n  iframe,\n  source,\n  onMessage,\n  onStatusChange,\n  onDiagnostic,\n  startupTimeoutMs = 30_000,\n}: DataAppShellOptions) {\n  const host = iframe.ownerDocument.defaultView;\n  if (!host) throw new Error('The iframe requires a host window.');\n  const url = new URL(\n    source.type === 'url' ? source.url : source.bootstrapUrl,\n    host.location.href\n  );\n  if (!/^https?:$/.test(url.protocol))\n    throw new Error('Data apps require an HTTP(S) URL.');\n  const opaque = source.type === 'bundle';\n  if (!opaque && url.origin === host.location.origin)\n    throw new Error('URL data apps require a separate origin from the shell.');\n  iframe.setAttribute(\n    'sandbox',\n    opaque\n      ? 'allow-scripts'\n      : 'allow-scripts allow-same-origin allow-downloads allow-popups allow-popups-to-escape-sandbox'\n  );\n  iframe.referrerPolicy = 'no-referrer';\n  if (!opaque) url.searchParams.set(PARENT_PARAM, host.location.origin);\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let failed = false;\n\n  function status(value: DataAppStatus) {\n    if (value === 'connecting') failed = false;\n    if (failed && value !== 'connecting') return;\n    clearTimeout(timer);\n    if (value === 'connecting' || value === 'connected')\n      timer = setTimeout(() => {\n        failed = true;\n        disposeBridge();\n        onStatusChange?.('failed');\n      }, startupTimeoutMs);\n    if (value === 'failed') {\n      failed = true;\n      disposeBridge();\n    }\n    onStatusChange?.(value);\n  }\n\n  const disposeBridge = attachDataAppBridge({\n    iframe,\n    connection: opaque\n      ? { type: 'opaque', token: crypto.randomUUID() }\n      : { type: 'origin', origin: url.origin },\n    javascript: opaque ? source.javascript : undefined,\n    onMessage,\n    onStatusChange: status,\n    onDiagnostic,\n    window: host,\n  });\n\n  function error() {\n    return status('failed');\n  }\n\n  iframe.addEventListener('error', error);\n  iframe.src = url.href;\n\n  return () => {\n    clearTimeout(timer);\n    iframe.removeEventListener('error', error);\n    disposeBridge();\n  };\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;AA0BO,SAAS,oBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ,OAAO;AAAA,GASd;AAAA,EACD,MAAM,cAAc,WAAW,SAAS,WAAW,WAAW,SAAS;AAAA,EACvE,IACE,WAAW,SAAS,YACpB,IAAI,IAAI,WAAW,EAAE,WAAW;AAAA,IAEhC,MAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD,IAAI,WAAW,SAAS,YAAY,CAAC,QAAQ,WAAW,KAAK;AAAA,IAC3D,MAAM,IAAI,MAAM,wBAAwB;AAAA,EAC1C,IAAI,QAAQ,WAAW,SAAS,WAAW,WAAW,QAAQ;AAAA,EAC9D,MAAM,eAAe,WAAW,SAAS,WAAW,MAAM;AAAA,EAC1D,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,MAAM,UAAU,IAAI;AAAA,EAEpB,SAAS,SAAS,GAAG;AAAA,IACnB,WAAW,cAAc,QAAQ,OAAO;AAAA,MAAG,WAAW,MAAM;AAAA,IAC5D,QAAQ,MAAM;AAAA;AAAA,EAGhB,SAAS,IAAI,CAAC,SAAiC;AAAA,IAC7C,eAAe,EAAE,WAAW,QAAQ,MAAM,QAAQ,QAAQ,UAAU,CAAC;AAAA,IACrE,OAAO,eAAe,YACpB;AAAA,MACE,SAAS;AAAA,MACT,SAAS;AAAA,MACT;AAAA,MACA;AAAA,SACI,WAAW,SAAS,WAAW,EAAE,MAAM,IAAI,CAAC;AAAA,SAC7C;AAAA,IACL,GACA,YACF;AAAA;AAAA,EAGF,SAAS,KAAK,CACZ,IACA,MACA,SACA,WACA;AAAA,IACA,KAAK,EAAE,MAAM,SAAS,IAAI,MAAM,SAAS,UAAU,CAAC;AAAA;AAAA,EAGtD,eAAe,OAAO,CAAC,SAAwB;AAAA,IAC7C,MAAM,KAAK,QAAQ;AAAA,IACnB,IAAI,CAAC,QAAQ,EAAE,KAAK,QAAQ,IAAI,EAAE;AAAA,MAAG;AAAA,IACrC,IAAI,QAAQ,QAAQ;AAAA,MAClB,OAAO,MAAM,IAAI,eAAe,iCAAiC;AAAA,IACnE,IACE,OAAO,QAAQ,UAAU,YACzB,CAAC,QAAQ,SACT,QAAQ,MAAM,SAAS;AAAA,MAEvB,OAAO,MAAM,IAAI,mBAAmB,wBAAwB;AAAA,IAC9D,IAAI;AAAA,MACF,MAAM,OAAO,KAAK,UAAU,QAAQ,OAAO;AAAA,MAC3C,IACE,QAAQ,YAAY,cACnB,OAAO,SAAS,YAAY,KAAK,SAAS;AAAA,QAE3C,MAAM,IAAI,MAAM,iBAAiB;AAAA,MACnC,MAAM;AAAA,MACN,OAAO,MACL,IACA,mBACA,8CACF;AAAA;AAAA,IAEF,MAAM,aAAa,IAAI;AAAA,IACvB,QAAQ,IAAI,IAAI,UAAU;AAAA,IAC1B,MAAM,QAAQ,WAAW,MAAM;AAAA,MAC7B,IAAI,QAAQ,IAAI,EAAE,MAAM;AAAA,QAAY;AAAA,MACpC,QAAQ,OAAO,EAAE;AAAA,MACjB,WAAW,MAAM;AAAA,MACjB,MAAM,IAAI,WAAW,6BAA6B;AAAA,OACjD,kBAAkB;AAAA,IACrB,WAAW,OAAO,iBAAiB,SAAS,MAAM,aAAa,KAAK,GAAG;AAAA,MACrE,MAAM;AAAA,IACR,CAAC;AAAA,IACD,IAAI;AAAA,MACF,MAAM,WAAW,MAAM,UACrB,EAAE,OAAO,QAAQ,OAAO,SAAS,QAAQ,QAAQ,GACjD,EAAE,QAAQ,WAAW,OAAO,CAC9B;AAAA,MACA,IAAI,QAAQ,IAAI,EAAE,MAAM;AAAA,QACtB,KAAK,EAAE,MAAM,UAAU,IAAI,SAAS,CAAC;AAAA,MACvC,OAAO,SAAS;AAAA,MAChB,IAAI,QAAQ,IAAI,EAAE,MAAM,YAAY;AAAA,QAClC,IAAI,mBAAmB;AAAA,UACrB,MAAM,IAAI,QAAQ,MAAM,QAAQ,SAAS,QAAQ,SAAS;AAAA,QAE1D;AAAA,gBACE,IACA,kBACA,gDACF;AAAA,MACJ;AAAA,cACA;AAAA,MACA,aAAa,KAAK;AAAA,MAClB,IAAI,QAAQ,IAAI,EAAE,MAAM;AAAA,QAAY,QAAQ,OAAO,EAAE;AAAA;AAAA;AAAA,EAIzD,SAAS,OAAO,CAAC,OAAqB;AAAA,IACpC,IACE,MAAM,WAAW,eACjB,MAAM,WAAW,OAAO,iBACxB,CAAC,gBAAgB,MAAM,IAAI;AAAA,MAE3B;AAAA,IACF,MAAM,UAAU,MAAM;AAAA,IACtB,IAAI,WAAW,SAAS,YAAY,QAAQ,UAAU;AAAA,MAAO;AAAA,IAC7D,eAAe,EAAE,WAAW,WAAW,MAAM,QAAQ,KAAK,CAAC;AAAA,IAC3D,IAAI,QAAQ,SAAS,SAAS;AAAA,MAC5B,IAAI,QAAQ,eAAe,YAAY;AAAA,QACrC,UAAU;AAAA,QACV,aAAa,QAAQ;AAAA,QACrB,YAAY,OAAO,WAAW;AAAA,MAChC;AAAA,MACA,iBAAiB,WAAW;AAAA,MAC5B,KAAK;AAAA,QACH,MAAM;AAAA,QACN,OAAO,EAAE,QAAQ,KAAK,SAAS,QAAQ,MAAM,KAAK,SAAS,KAAK;AAAA,MAClE,CAAC;AAAA,MACD,IAAI,eAAe;AAAA,QAAW,KAAK,EAAE,MAAM,eAAe,WAAW,CAAC;AAAA,MAEtE;AAAA,IACF;AAAA,IACA,IACE,CAAC,aACD,QAAQ,cAAc,aACtB,QAAQ,eAAe;AAAA,MAEvB;AAAA,IACF,IAAI,QAAQ,SAAS;AAAA,MAAiB,iBAAiB,OAAO;AAAA,IACzD,SAAI,QAAQ,SAAS;AAAA,MAAiB,iBAAiB,QAAQ;AAAA,IAC/D,SAAI,QAAQ,SAAS;AAAA,MAAgB,QAAQ,OAAO;AAAA,IACpD,SAAI,QAAQ,SAAS,YAAY,QAAQ,QAAQ,EAAE,GAAG;AAAA,MACzD,QAAQ,IAAI,QAAQ,EAAE,GAAG,MAAM;AAAA,MAC/B,QAAQ,OAAO,QAAQ,EAAE;AAAA,IAC3B,EAAO,SAAI,QAAQ,SAAS,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,aAAa;AAAA,MACb,YAAY;AAAA,MACZ,iBAAiB,cAAc;AAAA,IACjC;AAAA;AAAA,EAGF,SAAS,QAAQ,GAAG;AAAA,IAClB,KAAK;AAAA,MACH,MAAM;AAAA,MACN,OAAO,EAAE,QAAQ,KAAK,SAAS,QAAQ,MAAM,KAAK,SAAS,KAAK;AAAA,IAClE,CAAC;AAAA;AAAA,EAGH,SAAS,IAAI,GAAG;AAAA,IACd,IAAI,WAAW,SAAS;AAAA,MAAU,QAAQ,OAAO,WAAW;AAAA,IAC5D,UAAU;AAAA,IACV,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,iBAAiB,YAAY;AAAA,IAC7B,KAAK,EAAE,MAAM,WAAW,YAAY,OAAO,CAAC;AAAA;AAAA,EAG9C,SAAS,OAAO,GAAG;AAAA,IACjB,UAAU;AAAA,IACV,OAAO,oBAAoB,QAAQ,IAAI;AAAA,IACvC,KAAK,oBAAoB,WAAW,OAAO;AAAA,IAC3C,KAAK,oBAAoB,YAAY,QAAQ;AAAA,IAC7C,KAAK,oBAAoB,YAAY,SAAS;AAAA;AAAA,EAGhD,OAAO,iBAAiB,QAAQ,IAAI;AAAA,EACpC,KAAK,iBAAiB,WAAW,OAAO;AAAA,EACxC,KAAK,iBAAiB,YAAY,QAAQ;AAAA,EAC1C,KAAK,iBAAiB,YAAY,SAAS;AAAA,EAE3C,iBAAiB,YAAY;AAAA,EAC7B,KAAK,EAAE,MAAM,WAAW,YAAY,OAAO,CAAC;AAAA,EAE5C,OAAO;AAAA;;;ACrMF,SAAS,mBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,mBAAmB;AAAA,GACG;AAAA,EACtB,MAAM,OAAO,OAAO,cAAc;AAAA,EAClC,IAAI,CAAC;AAAA,IAAM,MAAM,IAAI,MAAM,oCAAoC;AAAA,EAC/D,MAAM,MAAM,IAAI,IACd,OAAO,SAAS,QAAQ,OAAO,MAAM,OAAO,cAC5C,KAAK,SAAS,IAChB;AAAA,EACA,IAAI,CAAC,YAAY,KAAK,IAAI,QAAQ;AAAA,IAChC,MAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD,MAAM,SAAS,OAAO,SAAS;AAAA,EAC/B,IAAI,CAAC,UAAU,IAAI,WAAW,KAAK,SAAS;AAAA,IAC1C,MAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E,OAAO,aACL,WACA,SACI,kBACA,6FACN;AAAA,EACA,OAAO,iBAAiB;AAAA,EACxB,IAAI,CAAC;AAAA,IAAQ,IAAI,aAAa,IAAI,cAAc,KAAK,SAAS,MAAM;AAAA,EACpE,IAAI;AAAA,EACJ,IAAI,SAAS;AAAA,EAEb,SAAS,MAAM,CAAC,OAAsB;AAAA,IACpC,IAAI,UAAU;AAAA,MAAc,SAAS;AAAA,IACrC,IAAI,UAAU,UAAU;AAAA,MAAc;AAAA,IACtC,aAAa,KAAK;AAAA,IAClB,IAAI,UAAU,gBAAgB,UAAU;AAAA,MACtC,QAAQ,WAAW,MAAM;AAAA,QACvB,SAAS;AAAA,QACT,cAAc;AAAA,QACd,iBAAiB,QAAQ;AAAA,SACxB,gBAAgB;AAAA,IACrB,IAAI,UAAU,UAAU;AAAA,MACtB,SAAS;AAAA,MACT,cAAc;AAAA,IAChB;AAAA,IACA,iBAAiB,KAAK;AAAA;AAAA,EAGxB,MAAM,gBAAgB,qBAAoB;AAAA,IACxC;AAAA,IACA,YAAY,SACR,EAAE,MAAM,UAAU,OAAO,OAAO,WAAW,EAAE,IAC7C,EAAE,MAAM,UAAU,QAAQ,IAAI,OAAO;AAAA,IACzC,YAAY,SAAS,OAAO,aAAa;AAAA,IACzC;AAAA,IACA,gBAAgB;AAAA,IAChB;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AAAA,EAED,SAAS,KAAK,GAAG;AAAA,IACf,OAAO,OAAO,QAAQ;AAAA;AAAA,EAGxB,OAAO,iBAAiB,SAAS,KAAK;AAAA,EACtC,OAAO,MAAM,IAAI;AAAA,EAEjB,OAAO,MAAM;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,OAAO,oBAAoB,SAAS,KAAK;AAAA,IACzC,cAAc;AAAA;AAAA;",
+  "debugId": "AFE2FEFDAF8B989664756E2164756E21",
+  "names": []
+}

package/dist/chunks/contract-wz59z8pq.js

@@ -0,0 +1,8 @@
+// src/core/config.ts
+function dataAppTitle2(config) {
+  return `${config.title} • ${config.scope.organization}/${config.scope.environment} • Altertable app`;
+}
+
+export { dataAppTitle2 };
+
+//# debugId=B8EA593317DFC02A64756E2164756E21

package/dist/chunks/contract-wz59z8pq.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/core/config.ts"],
+  "sourcesContent": [
+    "/**\n * App identity and display scope shared by browser and server.\n * @module @altertable/data-app/config\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/config.md\n */\nexport type DataAppConfig = {\n  title: string;\n  scope: { organization: string; environment: string };\n  appearance: unknown;\n};\n\nexport function dataAppTitle(\n  config: Pick<DataAppConfig, 'title' | 'scope'>\n): string {\n  return `${config.title} • ${config.scope.organization}/${config.scope.environment} • Altertable app`;\n}\n"
+  ],
+  "mappings": ";AAWO,SAAS,aAAY,CAC1B,QACQ;AAAA,EACR,OAAO,GAAG,OAAO,WAAW,OAAO,MAAM,gBAAgB,OAAO,MAAM;AAAA;",
+  "debugId": "B8EA593317DFC02A64756E2164756E21",
+  "names": []
+}

package/dist/client/index.js

@@ -0,0 +1,27 @@
+import {
+  createDataAppNavigation2,
+  getDataAppNavigation2,
+  createDataClient2
+} from "../chunks/contract-tkkc28tg.js";
+import {
+  DataAppError2,
+  createHttpTransport2,
+  createMessageClient2,
+  createIframeTransport2,
+  installDataAppTransport2,
+  getDataAppTransport2
+} from "../chunks/contract-mb5nfzwg.js";
+import"../chunks/contract-jksbmt5q.js";
+export {
+  DataAppError2 as DataAppError,
+  createDataAppNavigation2 as createDataAppNavigation,
+  createDataClient2 as createDataClient,
+  createHttpTransport2 as createHttpTransport,
+  createIframeTransport2 as createIframeTransport,
+  createMessageClient2 as createMessageClient,
+  getDataAppNavigation2 as getDataAppNavigation,
+  getDataAppTransport2 as getDataAppTransport,
+  installDataAppTransport2 as installDataAppTransport
+};
+
+//# debugId=43A567C4125F87CC64756E2164756E21

package/dist/client/index.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "43A567C4125F87CC64756E2164756E21",
+  "names": []
+}

package/dist/core/appearance.js

@@ -0,0 +1,12 @@
+import {
+  parseAppearance2,
+  applyAppearance2,
+  createThemeController2
+} from "../chunks/contract-14vxdcrs.js";
+export {
+  applyAppearance2 as applyAppearance,
+  createThemeController2 as createThemeController,
+  parseAppearance2 as parseAppearance
+};
+
+//# debugId=FFA707298E88F52F64756E2164756E21

package/dist/core/appearance.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "FFA707298E88F52F64756E2164756E21",
+  "names": []
+}

package/dist/core/config.js

@@ -0,0 +1,8 @@
+import {
+  dataAppTitle2
+} from "../chunks/contract-wz59z8pq.js";
+export {
+  dataAppTitle2 as dataAppTitle
+};
+
+//# debugId=4C9942F1F4C00CDF64756E2164756E21

package/dist/core/config.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "4C9942F1F4C00CDF64756E2164756E21",
+  "names": []
+}

package/dist/core/contract.js

@@ -0,0 +1,55 @@
+import {
+  dimensionFilter2,
+  parseDimensionSelection2,
+  parseFacetOptions2,
+  dimensionPredicate2,
+  parseEmptyInput2,
+  parseTrue2,
+  previousDateRange2,
+  defineDateRangeContract2,
+  parseDateRangeInput2,
+  parseCount2,
+  parseLabel2,
+  rowsAsRecords2,
+  defineQueryNames2,
+  DataSourceError2,
+  defineOperation2,
+  connectionQueryNames2,
+  connectionCheck2
+} from "../chunks/contract-nt819swq.js";
+import"../chunks/contract-mev09s5v.js";
+import {
+  MessageRoutingError2,
+  defineMessageRoute2,
+  createMessageRouter2,
+  defineDataQueryRoute2,
+  navigationUpdateRoute2,
+  dataAppRoutes2
+} from "../chunks/contract-jksbmt5q.js";
+export {
+  DataSourceError2 as DataSourceError,
+  MessageRoutingError2 as MessageRoutingError,
+  connectionCheck2 as connectionCheck,
+  connectionQueryNames2 as connectionQueryNames,
+  createMessageRouter2 as createMessageRouter,
+  dataAppRoutes2 as dataAppRoutes,
+  defineDataQueryRoute2 as defineDataQueryRoute,
+  defineDateRangeContract2 as defineDateRangeContract,
+  defineMessageRoute2 as defineMessageRoute,
+  defineOperation2 as defineOperation,
+  defineQueryNames2 as defineQueryNames,
+  dimensionFilter2 as dimensionFilter,
+  dimensionPredicate2 as dimensionPredicate,
+  navigationUpdateRoute2 as navigationUpdateRoute,
+  parseCount2 as parseCount,
+  parseDateRangeInput2 as parseDateRangeInput,
+  parseDimensionSelection2 as parseDimensionSelection,
+  parseEmptyInput2 as parseEmptyInput,
+  parseFacetOptions2 as parseFacetOptions,
+  parseLabel2 as parseLabel,
+  parseTrue2 as parseTrue,
+  previousDateRange2 as previousDateRange,
+  rowsAsRecords2 as rowsAsRecords
+};
+
+//# debugId=2AD65EB8F0F2F7AD64756E2164756E21

package/dist/core/contract.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "2AD65EB8F0F2F7AD64756E2164756E21",
+  "names": []
+}

package/dist/core/format.js

@@ -0,0 +1,18 @@
+import {
+  formatDateRange2,
+  formatMetric2,
+  formatNumber2,
+  formatCount2,
+  pluralize2,
+  formatPercent2
+} from "../chunks/contract-mev09s5v.js";
+export {
+  formatCount2 as formatCount,
+  formatDateRange2 as formatDateRange,
+  formatMetric2 as formatMetric,
+  formatNumber2 as formatNumber,
+  formatPercent2 as formatPercent,
+  pluralize2 as pluralize
+};
+
+//# debugId=B1439475DE6F46A664756E2164756E21

package/dist/core/format.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "B1439475DE6F46A664756E2164756E21",
+  "names": []
+}

package/dist/embed/index.js

@@ -0,0 +1,91 @@
+import"../chunks/contract-jksbmt5q.js";
+import {
+  createIframeTransport2,
+  installDataAppTransport2
+} from "../chunks/contract-mb5nfzwg.js";
+import {
+  attachDataAppBridge2,
+  attachDataAppShell2
+} from "../chunks/contract-tqrf3ykr.js";
+import {
+  PARENT_PARAM
+} from "../chunks/contract-ryyf6dme.js";
+// src/embed/bootstrap.ts
+function startDataAppBootstrap({
+  parentOrigin,
+  window: frame = window
+}) {
+  let loaded;
+  let failed = false;
+  const bridge = createIframeTransport2({
+    parentOrigin,
+    window: frame,
+    mode: "bundle",
+    loadScript(javascript) {
+      if (loaded !== undefined) {
+        if (javascript === loaded) {
+          if (failed)
+            bridge.fail();
+          else
+            bridge.ready();
+        } else
+          bridge.fail();
+        return;
+      }
+      loaded = javascript;
+      try {
+        const script = frame.document.createElement("script");
+        script.textContent = javascript;
+        frame.document.body.append(script);
+        if (!failed)
+          bridge.ready();
+      } catch {
+        reportError();
+      }
+    }
+  });
+  function reportError() {
+    failed = true;
+    bridge.fail();
+  }
+  frame.addEventListener("error", reportError);
+  frame.addEventListener("unhandledrejection", reportError);
+  const uninstall = installDataAppTransport2(bridge, frame);
+  return () => {
+    frame.removeEventListener("error", reportError);
+    frame.removeEventListener("unhandledrejection", reportError);
+    uninstall();
+  };
+}
+// src/embed/navigation.ts
+function createNavigationHandler({
+  window: host = window,
+  reservedSearchParams = []
+} = {}) {
+  function navigate(input) {
+    const previous = new URL(host.location.href);
+    const url = new URL(previous);
+    url.search = input.search;
+    url.searchParams.delete(PARENT_PARAM);
+    for (const name of reservedSearchParams) {
+      url.searchParams.delete(name);
+      for (const value of previous.searchParams.getAll(name))
+        url.searchParams.append(name, value);
+    }
+    url.hash = input.hash;
+    if (url.href !== host.location.href)
+      host.history[input.mode === "push" ? "pushState" : "replaceState"](null, "", url);
+    if (input.title !== undefined)
+      host.document.title = input.title;
+    return null;
+  }
+  return navigate;
+}
+export {
+  attachDataAppBridge2 as attachDataAppBridge,
+  attachDataAppShell2 as attachDataAppShell,
+  createNavigationHandler,
+  startDataAppBootstrap
+};
+
+//# debugId=1E61B2F0590BD55F64756E2164756E21

package/dist/embed/index.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/embed/bootstrap.ts", "../src/embed/navigation.ts"],
+  "sourcesContent": [
+    "import {\n  createIframeTransport,\n  installDataAppTransport,\n} from '@/src/client/iframe';\n\n/** Run from a trusted bootstrap page in an allow-scripts-only iframe. CSP can prohibit network access. */\nexport function startDataAppBootstrap({\n  parentOrigin,\n  window: frame = window,\n}: {\n  parentOrigin: string;\n  window?: Window;\n}) {\n  let loaded: string | undefined;\n  let failed = false;\n  const bridge = createIframeTransport({\n    parentOrigin,\n    window: frame,\n    mode: 'bundle',\n    loadScript(javascript) {\n      if (loaded !== undefined) {\n        if (javascript === loaded) {\n          if (failed) bridge.fail();\n          else bridge.ready();\n        } else bridge.fail();\n\n        return;\n      }\n      loaded = javascript;\n      try {\n        const script = frame.document.createElement('script');\n        script.textContent = javascript;\n        frame.document.body.append(script);\n        if (!failed) bridge.ready();\n      } catch {\n        reportError();\n      }\n    },\n  });\n\n  function reportError() {\n    failed = true;\n    bridge.fail();\n  }\n\n  frame.addEventListener('error', reportError);\n  frame.addEventListener('unhandledrejection', reportError);\n  const uninstall = installDataAppTransport(bridge, frame);\n\n  return () => {\n    frame.removeEventListener('error', reportError);\n    frame.removeEventListener('unhandledrejection', reportError);\n    uninstall();\n  };\n}\n",
+    "import { PARENT_PARAM } from '@/src/core/bridge';\nimport type { NavigationUpdate } from '@/src/core/messages';\n\n/** Override this handler for framework routers. Reserved host parameters survive app navigation. */\nexport function createNavigationHandler({\n  window: host = window,\n  reservedSearchParams = [],\n}: {\n  window?: Window;\n  reservedSearchParams?: readonly string[];\n} = {}) {\n  function navigate(input: NavigationUpdate): null {\n    const previous = new URL(host.location.href);\n    const url = new URL(previous);\n    url.search = input.search;\n    url.searchParams.delete(PARENT_PARAM);\n    for (const name of reservedSearchParams) {\n      url.searchParams.delete(name);\n      for (const value of previous.searchParams.getAll(name))\n        url.searchParams.append(name, value);\n    }\n    url.hash = input.hash;\n    if (url.href !== host.location.href)\n      host.history[input.mode === 'push' ? 'pushState' : 'replaceState'](\n        null,\n        '',\n        url\n      );\n    if (input.title !== undefined) host.document.title = input.title;\n\n    return null;\n  }\n\n  return navigate;\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;AAMO,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA,QAAQ,QAAQ;AAAA,GAIf;AAAA,EACD,IAAI;AAAA,EACJ,IAAI,SAAS;AAAA,EACb,MAAM,SAAS,uBAAsB;AAAA,IACnC;AAAA,IACA,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,UAAU,CAAC,YAAY;AAAA,MACrB,IAAI,WAAW,WAAW;AAAA,QACxB,IAAI,eAAe,QAAQ;AAAA,UACzB,IAAI;AAAA,YAAQ,OAAO,KAAK;AAAA,UACnB;AAAA,mBAAO,MAAM;AAAA,QACpB,EAAO;AAAA,iBAAO,KAAK;AAAA,QAEnB;AAAA,MACF;AAAA,MACA,SAAS;AAAA,MACT,IAAI;AAAA,QACF,MAAM,SAAS,MAAM,SAAS,cAAc,QAAQ;AAAA,QACpD,OAAO,cAAc;AAAA,QACrB,MAAM,SAAS,KAAK,OAAO,MAAM;AAAA,QACjC,IAAI,CAAC;AAAA,UAAQ,OAAO,MAAM;AAAA,QAC1B,MAAM;AAAA,QACN,YAAY;AAAA;AAAA;AAAA,EAGlB,CAAC;AAAA,EAED,SAAS,WAAW,GAAG;AAAA,IACrB,SAAS;AAAA,IACT,OAAO,KAAK;AAAA;AAAA,EAGd,MAAM,iBAAiB,SAAS,WAAW;AAAA,EAC3C,MAAM,iBAAiB,sBAAsB,WAAW;AAAA,EACxD,MAAM,YAAY,yBAAwB,QAAQ,KAAK;AAAA,EAEvD,OAAO,MAAM;AAAA,IACX,MAAM,oBAAoB,SAAS,WAAW;AAAA,IAC9C,MAAM,oBAAoB,sBAAsB,WAAW;AAAA,IAC3D,UAAU;AAAA;AAAA;;AChDP,SAAS,uBAAuB;AAAA,EACrC,QAAQ,OAAO;AAAA,EACf,uBAAuB,CAAC;AAAA,IAItB,CAAC,GAAG;AAAA,EACN,SAAS,QAAQ,CAAC,OAA+B;AAAA,IAC/C,MAAM,WAAW,IAAI,IAAI,KAAK,SAAS,IAAI;AAAA,IAC3C,MAAM,MAAM,IAAI,IAAI,QAAQ;AAAA,IAC5B,IAAI,SAAS,MAAM;AAAA,IACnB,IAAI,aAAa,OAAO,YAAY;AAAA,IACpC,WAAW,QAAQ,sBAAsB;AAAA,MACvC,IAAI,aAAa,OAAO,IAAI;AAAA,MAC5B,WAAW,SAAS,SAAS,aAAa,OAAO,IAAI;AAAA,QACnD,IAAI,aAAa,OAAO,MAAM,KAAK;AAAA,IACvC;AAAA,IACA,IAAI,OAAO,MAAM;AAAA,IACjB,IAAI,IAAI,SAAS,KAAK,SAAS;AAAA,MAC7B,KAAK,QAAQ,MAAM,SAAS,SAAS,cAAc,gBACjD,MACA,IACA,GACF;AAAA,IACF,IAAI,MAAM,UAAU;AAAA,MAAW,KAAK,SAAS,QAAQ,MAAM;AAAA,IAE3D,OAAO;AAAA;AAAA,EAGT,OAAO;AAAA;",
+  "debugId": "1E61B2F0590BD55F64756E2164756E21",
+  "names": []
+}