@altertable/data-app 0.59.1

package/dist/local.js

@@ -0,0 +1,332 @@
+// @bun
+// src/core/contract.ts
+import { parseDate, today } from "@internationalized/date";
+
+// src/core/format.ts
+var pluralRules = new Intl.PluralRules;
+
+// src/core/invariant.ts
+function invariant(condition, message) {
+  if (!condition)
+    throw new Error(`Invariant failed: ${message}`);
+}
+// src/core/messages.ts
+var errorBrand = Symbol.for("@altertable/data-app/MessageRoutingError");
+// src/core/contract.ts
+function defineQueryNames(names) {
+  const values = Object.values(names);
+  invariant(values.every((name) => !!name.trim()) && new Set(values).size === values.length, "Query names must be nonempty and unique.");
+  return names;
+}
+
+class DataSourceError extends Error {
+  reason;
+  status;
+  queryName;
+  constructor(reason, status) {
+    super(`Data source ${reason}${status ? ` (${status})` : ""}.`);
+    this.reason = reason;
+    this.status = status;
+    this.name = "DataSourceError";
+  }
+}
+var connectionQueryNames = defineQueryNames({
+  connection: "connection-check"
+});
+
+// src/server/handler.ts
+var sourceErrorMessages = {
+  unauthorized: "Lakehouse access needs attention. Run this app with 'altertable app dev', or run 'altertable login' and retry.",
+  forbidden: "This app cannot access its lakehouse data. Check the selected profile's permissions.",
+  rate_limited: "The lakehouse is busy. Wait a moment and retry.",
+  query_rejected: "A lakehouse query was rejected. Check the app's data operation.",
+  unavailable: "The lakehouse is unavailable. Check the connection and retry."
+};
+function createDataHandler(operations, authorize) {
+  async function handleDataRequest(request) {
+    const requestId = crypto.randomUUID();
+    const url = new URL(request.url);
+    if (!url.pathname.startsWith("/api/data/"))
+      return new Response("Not found", { status: 404 });
+    const encodedName = url.pathname.slice("/api/data/".length);
+    if (!encodedName || encodedName.includes("/"))
+      return problem(404, "not_found", "Unknown data operation.", requestId);
+    let name;
+    try {
+      name = decodeURIComponent(encodedName);
+    } catch {
+      return problem(404, "not_found", "Unknown data operation.", requestId);
+    }
+    if (!Object.hasOwn(operations, name))
+      return problem(404, "not_found", "Unknown data operation.", requestId);
+    if (request.method !== "POST")
+      return problem(405, "method_not_allowed", "Use POST.", requestId);
+    if (request.headers.get("content-type")?.split(";")[0]?.trim().toLowerCase() !== "application/json")
+      return problem(415, "unsupported_media_type", "Use application/json.", requestId);
+    const origin = request.headers.get("origin");
+    const fetchSite = request.headers.get("sec-fetch-site");
+    const fetchMode = request.headers.get("sec-fetch-mode");
+    if (origin !== null && origin !== url.origin || fetchSite !== null && fetchSite !== "same-origin" || fetchSite !== null && origin === null || fetchMode !== null && fetchMode !== "cors" && fetchMode !== "same-origin")
+      return problem(403, "cross_origin_request", "The data request must come from this app.", requestId);
+    let access;
+    try {
+      access = await authorize(request, name);
+    } catch {
+      return problem(403, "forbidden", "You cannot run this data operation.", requestId);
+    }
+    const operation = operations[name];
+    let input;
+    if (request.signal.aborted)
+      return problem(504, "timeout", "The data request timed out.", requestId);
+    try {
+      const body = await readInput(request);
+      input = operation.input(JSON.parse(body));
+    } catch (error) {
+      if (error instanceof InputTooLargeError)
+        return problem(413, "input_too_large", "Input is too large.", requestId);
+      return problem(400, "invalid_input", "Check this operation's inputs.", requestId);
+    }
+    const timeout = AbortSignal.timeout(operation.policy.maxDurationMs);
+    const signal = AbortSignal.any([request.signal, timeout]);
+    const queryIds = [];
+    const queries = [];
+    const boundedLakehouse = {
+      async queryAll(statement, options) {
+        if (!Number.isInteger(options.limit) || options.limit < 1)
+          throw new Error("Query needs a positive row limit.");
+        if (operation.queryNames && !Object.values(operation.queryNames).includes(options.name ?? ""))
+          throw new Error(`Query name is not registered for operation ${name}.`);
+        const query = {
+          name: options.name ?? `Query ${queries.length + 1}`,
+          statement
+        };
+        queries.push(query);
+        let result;
+        try {
+          result = await access.lakehouse.queryAll(statement, {
+            limit: Math.min(options.limit, operation.policy.maxQueryRows),
+            signal: AbortSignal.any([signal, options.signal])
+          });
+        } catch (error) {
+          if (error instanceof DataSourceError)
+            error.queryName = query.name;
+          throw error;
+        }
+        if (result.rows.length > operation.policy.maxQueryRows)
+          throw new Error("Result exceeds row limit.");
+        if (result.queryId) {
+          query.queryId = result.queryId;
+          queryIds.push(result.queryId);
+        }
+        return result;
+      }
+    };
+    let abort;
+    try {
+      signal.throwIfAborted();
+      const cancelled = new Promise((_, reject) => {
+        function rejectAborted() {
+          reject(new Error("Request aborted."));
+        }
+        abort = rejectAborted;
+        signal.addEventListener("abort", rejectAborted, { once: true });
+        if (signal.aborted)
+          rejectAborted();
+      });
+      const data = operation.output(await Promise.race([
+        cancelled,
+        Promise.resolve().then(() => {
+          signal.throwIfAborted();
+          return operation.run({ lakehouse: boundedLakehouse, signal }, input);
+        })
+      ]));
+      const result = {
+        data,
+        requestId,
+        queriedAt: new Date().toISOString(),
+        queryIds,
+        ...operation.policy.exposeSql && access.canDiscloseSql ? { queries } : {}
+      };
+      const body = JSON.stringify(result);
+      if (new TextEncoder().encode(body).byteLength > (operation.policy.maxResponseBytes ?? 1e6)) {
+        throw new Error("Response exceeds byte limit.");
+      }
+      return new Response(body, {
+        headers: {
+          "cache-control": "no-store",
+          "content-type": "application/json"
+        }
+      });
+    } catch (error) {
+      const source = error instanceof DataSourceError ? error : null;
+      console.error(`Data operation ${name} failed (${requestId}): ${source ? `${source.reason}${source.status ? ` (${source.status})` : ""}${source.queryName ? ` in ${source.queryName}` : ""}` : error instanceof Error ? error.name : "unknown"}`);
+      if (source) {
+        return problem(source.reason === "rate_limited" ? 429 : 502, `source_${source.reason}`, sourceErrorMessages[source.reason], requestId);
+      }
+      return problem(signal.aborted ? 504 : 502, signal.aborted ? "timeout" : "query_failed", signal.aborted ? "The data request timed out." : "The data request failed.", requestId);
+    } finally {
+      if (abort)
+        signal.removeEventListener("abort", abort);
+    }
+  }
+  return handleDataRequest;
+}
+function problem(status, code, message, requestId) {
+  return Response.json({ error: { code, message, requestId } }, { status, headers: { "cache-control": "no-store" } });
+}
+var MAX_INPUT_BYTES = 16384;
+
+class InputTooLargeError extends Error {
+}
+async function readInput(request) {
+  const reader = request.body?.getReader();
+  if (!reader)
+    return "";
+  const chunks = [];
+  let size = 0;
+  let abort;
+  function cancelReader() {
+    reader.cancel().catch(() => {});
+  }
+  try {
+    request.signal.throwIfAborted();
+    const cancelled = new Promise((_, reject) => {
+      function rejectAborted() {
+        reject(new Error("Request aborted."));
+        cancelReader();
+      }
+      abort = rejectAborted;
+      request.signal.addEventListener("abort", rejectAborted, { once: true });
+      if (request.signal.aborted)
+        rejectAborted();
+    });
+    while (true) {
+      const { done, value } = await Promise.race([reader.read(), cancelled]);
+      if (done)
+        break;
+      size += value.byteLength;
+      if (size > MAX_INPUT_BYTES) {
+        cancelReader();
+        throw new InputTooLargeError;
+      }
+      chunks.push(value);
+    }
+    const bytes = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+      bytes.set(chunk, offset);
+      offset += chunk.byteLength;
+    }
+    return new TextDecoder().decode(bytes);
+  } finally {
+    if (abort)
+      request.signal.removeEventListener("abort", abort);
+    reader.releaseLock();
+  }
+}
+
+// src/server/local.ts
+function serveLocalApp({
+  page,
+  operations,
+  title,
+  port = Number(process.env.PORT ?? 25837)
+}) {
+  const server = Bun.serve({
+    hostname: "127.0.0.1",
+    port,
+    development: true,
+    idleTimeout: 60,
+    routes: { "/": page },
+    fetch: createDataHandler(operations, async () => ({
+      lakehouse: localLakehouse(),
+      canDiscloseSql: true
+    }))
+  });
+  console.log(`${title} running at ${server.url}`);
+  return server;
+}
+function localLakehouse(environment = process.env, request = fetch) {
+  return {
+    async queryAll(statement, { limit, signal }) {
+      const proxyUrl = environment.ALTERTABLE_DATA_PROXY_URL;
+      const proxyToken = environment.ALTERTABLE_DATA_PROXY_TOKEN;
+      const username = environment.ALTERTABLE_LAKEHOUSE_USERNAME;
+      const password = environment.ALTERTABLE_LAKEHOUSE_PASSWORD;
+      if (!proxyUrl && (!username || !password))
+        throw new DataSourceError("unauthorized");
+      if (proxyUrl && !proxyToken)
+        throw new DataSourceError("unauthorized");
+      const base = proxyUrl ?? environment.ALTERTABLE_API_BASE ?? "https://api.altertable.ai";
+      let response;
+      try {
+        response = await request(new URL("query", `${base.replace(/\/$/, "")}/`), {
+          method: "POST",
+          headers: {
+            authorization: proxyUrl ? `Bearer ${proxyToken}` : `Basic ${Buffer.from(`${username}:${password}`).toString("base64")}`,
+            "content-type": "application/json"
+          },
+          body: JSON.stringify({ statement, limit }),
+          signal
+        });
+      } catch (error) {
+        if (signal.aborted)
+          throw error;
+        throw new DataSourceError("unavailable");
+      }
+      if (!response.ok) {
+        const reason = response.status === 401 ? "unauthorized" : response.status === 403 ? "forbidden" : response.status === 429 ? "rate_limited" : response.status === 400 || response.status === 422 ? "query_rejected" : "unavailable";
+        throw new DataSourceError(reason, response.status);
+      }
+      const body = await readQueryBody(response);
+      return parseQueryResult(body, limit);
+    }
+  };
+}
+async function readQueryBody(response) {
+  const reader = response.body?.getReader();
+  if (!reader)
+    throw new Error("Query response is empty.");
+  const decoder = new TextDecoder;
+  let body = "";
+  let bytes = 0;
+  while (true) {
+    const chunk = await reader.read();
+    if (chunk.done)
+      break;
+    bytes += chunk.value.byteLength;
+    if (bytes > 5000000) {
+      await reader.cancel();
+      throw new Error("Query response is too large.");
+    }
+    body += decoder.decode(chunk.value, { stream: true });
+  }
+  body += decoder.decode();
+  return body;
+}
+function parseQueryResult(body, limit) {
+  const lines = body.trimEnd().split(`
+`).filter((line) => line.trim());
+  if (!lines.length)
+    throw new Error("Query response is empty.");
+  const metadata = JSON.parse(lines[0]);
+  let firstRowIndex = 1;
+  let columns = [];
+  if (lines[firstRowIndex]) {
+    const columnDefinitions = JSON.parse(lines[firstRowIndex]);
+    if (Array.isArray(columnDefinitions) && columnDefinitions.every((value) => typeof value === "string" || typeof value === "object" && value !== null && ("name" in value))) {
+      columns = columnDefinitions.map((value) => typeof value === "string" ? { name: value } : value);
+      firstRowIndex++;
+    }
+  }
+  const rows = lines.slice(firstRowIndex).map((line) => JSON.parse(line));
+  if (rows.length > limit)
+    throw new Error("Lakehouse returned more rows than requested.");
+  return { columns, rows, queryId: metadata.query_id };
+}
+export {
+  localLakehouse,
+  serveLocalApp
+};
+
+//# debugId=FE9002DDE845605A64756E2164756E21

package/dist/local.js.map

@@ -0,0 +1,15 @@
+{
+  "version": 3,
+  "sources": ["../src/core/contract.ts", "../src/core/format.ts", "../src/core/invariant.ts", "../src/core/messages.ts", "../src/server/handler.ts", "../src/server/local.ts"],
+  "sourcesContent": [
+    "/**\n * Shared operation contracts and input/output validation for browser and server.\n * @module @altertable/data-app/contract\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/contract.md\n */\nimport { parseDate, today } from '@internationalized/date';\nimport { formatDateRange } from '@/src/core/format';\nimport { invariant } from '@/src/core/invariant';\n\nexport type QueryResult = {\n  columns: { name: string; type?: string }[];\n  rows: unknown[][];\n  queryId?: string;\n};\n\nexport function parseEmptyInput(value: unknown): Record<string, never> {\n  invariant(\n    typeof value === 'object' &&\n      value !== null &&\n      !Array.isArray(value) &&\n      Object.keys(value).length === 0,\n    'This operation takes no inputs.'\n  );\n\n  return {};\n}\n\nexport function parseTrue(value: unknown): true {\n  invariant(value === true, 'Expected a successful check.');\n\n  return true;\n}\n\nexport type DateRangeInput = { start: string; end: string };\nexport type DateRangeRequest = {\n  range: DateRangeInput;\n  comparison: DateRangeInput | null;\n};\n\n/** The immediately preceding, equally long set of calendar days. */\nexport function previousDateRange({\n  start,\n  end,\n}: DateRangeInput): DateRangeInput {\n  const first = parseDate(start);\n  const last = parseDate(end);\n  const days =\n    (last.toDate('UTC').getTime() - first.toDate('UTC').getTime()) /\n      86_400_000 +\n    1;\n  invariant(days >= 1, 'Date range must start before it ends.');\n  const previousEnd = first.subtract({ days: 1 });\n\n  return {\n    start: previousEnd.subtract({ days: days - 1 }).toString(),\n    end: previousEnd.toString(),\n  };\n}\n\nexport type ReportingPeriod =\n  | { kind: 'rolling'; amount: number; unit: 'hour' | 'day'; end: string }\n  | { kind: 'calendar'; start: string; end: string; timeZone: string };\n\nexport type DateRangeContractOptions = {\n  minDate?: string;\n  maxDate?: string | (() => string);\n  maxRangeDays: number;\n  timeZone: string;\n  completeDays?: boolean;\n};\n\n/** One source policy for the server parser, URL variable, and displayed reporting period. */\nexport function defineDateRangeContract(options: DateRangeContractOptions) {\n  invariant(\n    Number.isInteger(options.maxRangeDays) && options.maxRangeDays > 0,\n    'Date range needs a positive maxRangeDays.'\n  );\n  if (options.minDate) parseDate(options.minDate);\n  if (typeof options.maxDate === 'string') parseDate(options.maxDate);\n  today(options.timeZone);\n\n  function bounds() {\n    const latest = today(options.timeZone).subtract({\n      days: options.completeDays === false ? 0 : 1,\n    });\n    const sourceMax =\n      typeof options.maxDate === 'function'\n        ? options.maxDate()\n        : options.maxDate;\n    const maxDate =\n      sourceMax && parseDate(sourceMax).compare(latest) < 0\n        ? parseDate(sourceMax).toString()\n        : latest.toString();\n\n    return {\n      minDate: options.minDate,\n      maxDate,\n      maxRangeDays: options.maxRangeDays,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function period({ start, end }: DateRangeInput): ReportingPeriod {\n    return {\n      kind: 'calendar',\n      start,\n      end,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function describeInput(input: DateRangeInput) {\n    return `${formatDateRange(input)} ${options.timeZone}`;\n  }\n\n  function comparison(input: DateRangeInput): DateRangeInput | null {\n    const previous = previousDateRange(input);\n\n    return options.minDate && previous.start < options.minDate\n      ? null\n      : previous;\n  }\n\n  function request(value: unknown, compare = false): DateRangeRequest {\n    const range = parseDateRangeInput(value, bounds());\n    const previous = compare ? comparison(range) : null;\n    invariant(\n      !compare || previous,\n      'Comparison is outside available source coverage.'\n    );\n\n    return { range, comparison: previous };\n  }\n\n  function parseRequest(value: unknown): DateRangeRequest {\n    invariant(value && typeof value === 'object', 'Choose a date range.');\n    const input = value as Record<string, unknown>;\n    const parsed = request(input.range, input.comparison != null);\n    if (input.comparison != null) {\n      const supplied = parseDateRangeInput(input.comparison, bounds());\n      invariant(\n        supplied.start === parsed.comparison?.start &&\n          supplied.end === parsed.comparison?.end,\n        'Comparison must be the preceding equal-length range.'\n      );\n    }\n\n    return parsed;\n  }\n\n  return {\n    request,\n    parseRequest,\n    bounds,\n    parse(value: unknown) {\n      return parseDateRangeInput(value, bounds());\n    },\n    period,\n    comparison,\n    describeInput,\n    view: { period, describeInput },\n  };\n}\n\nexport type DateRangeContract = ReturnType<typeof defineDateRangeContract>;\n\n/** Validate calendar dates and a bounded inclusive range on the server. */\nexport function parseDateRangeInput(\n  value: unknown,\n  {\n    minDate,\n    maxDate,\n    maxRangeDays,\n  }: { minDate?: string; maxDate?: string; maxRangeDays: number }\n): DateRangeInput {\n  invariant(\n    value && typeof value === 'object' && !Array.isArray(value),\n    'Choose a date range.'\n  );\n  const { start, end } = value as Record<string, unknown>;\n\n  function day(input: unknown): number {\n    invariant(\n      typeof input === 'string' && /^\\d{4}-\\d{2}-\\d{2}$/.test(input),\n      'Dates must be YYYY-MM-DD.'\n    );\n    const timestamp = Date.parse(`${input}T00:00:00Z`);\n    invariant(\n      Number.isFinite(timestamp) &&\n        new Date(timestamp).toISOString().slice(0, 10) === input,\n      'Choose valid calendar dates.'\n    );\n\n    return timestamp;\n  }\n  const first = day(start);\n  const last = day(end);\n  invariant(\n    Number.isInteger(maxRangeDays) && maxRangeDays > 0,\n    'Maximum range days must be positive.'\n  );\n  invariant(\n    first <= last &&\n      (last - first) / 86_400_000 < maxRangeDays &&\n      (minDate === undefined || first >= day(minDate)) &&\n      (maxDate === undefined || last <= day(maxDate)),\n    `Choose up to ${maxRangeDays} days within the available range.`\n  );\n\n  return { start: start as string, end: end as string };\n}\n\n/** Accepts numeric strings from DuckDB; rejects negative, fractional, and unsafe integers. */\nexport function parseCount(value: unknown): number {\n  const number =\n    typeof value === 'number' || typeof value === 'string'\n      ? Number(value)\n      : NaN;\n  invariant(\n    Number.isSafeInteger(number) &&\n      number >= 0 &&\n      (typeof value !== 'string' || !!value.trim()),\n    'Invalid count in query result.'\n  );\n\n  return number;\n}\n\nexport function parseLabel(value: unknown, maxLength = 100): string {\n  invariant(\n    typeof value === 'string' && !!value && value.length <= maxLength,\n    'Invalid label in query result.'\n  );\n\n  return value;\n}\n\n/** Rejects missing or duplicate columns and rows whose width differs from the column list. */\nexport function rowsAsRecords(\n  result: QueryResult,\n  requiredColumns: readonly string[]\n): Record<string, unknown>[] {\n  const names = result.columns.map(column => column.name);\n  invariant(\n    new Set(names).size === names.length &&\n      requiredColumns.every(name => names.includes(name)),\n    'Query result columns do not match the expected shape.'\n  );\n\n  return result.rows.map(row => {\n    invariant(\n      row.length === names.length,\n      'Query result row has the wrong width.'\n    );\n\n    return Object.fromEntries(names.map((name, index) => [name, row[index]]));\n  });\n}\n\n/** One named statement an operation ran. Returned only when SQL disclosure is allowed. */\nexport type DisclosedQuery = {\n  name: string;\n  statement: string;\n  queryId?: string;\n};\n\nexport function defineQueryNames<const Names extends Record<string, string>>(\n  names: Names\n): Names {\n  const values = Object.values(names);\n  invariant(\n    values.every(name => !!name.trim()) &&\n      new Set(values).size === values.length,\n    'Query names must be nonempty and unique.'\n  );\n\n  return names;\n}\n\nexport class DataSourceError extends Error {\n  queryName?: string;\n\n  constructor(\n    public readonly reason:\n      | 'unauthorized'\n      | 'forbidden'\n      | 'rate_limited'\n      | 'query_rejected'\n      | 'unavailable',\n    public readonly status?: number\n  ) {\n    super(`Data source ${reason}${status ? ` (${status})` : ''}.`);\n    this.name = 'DataSourceError';\n  }\n}\n\n/** Server-only query interface supplied by a local or hosted adapter. */\nexport type Lakehouse = {\n  queryAll(\n    statement: string,\n    options: { limit: number; signal: AbortSignal; name?: string }\n  ): Promise<QueryResult>;\n};\n\nexport type OperationContext = { lakehouse: Lakehouse; signal: AbortSignal };\n\n/**\n * Both parsers run on the server before results cross the JSON boundary. Schema libraries can be\n * used inside either parser.\n */\nexport type DataOperation<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown) => Output;\n  run: (context: OperationContext, input: Input) => Promise<Output>;\n  checks: readonly Input[];\n  queryNames?: Readonly<Record<string, string>>;\n  policy: {\n    maxQueryRows: number;\n    maxDurationMs: number;\n    maxResponseBytes?: number;\n    exposeSql?: boolean;\n  };\n};\n\nexport type OperationQuery<Names extends Readonly<Record<string, string>>> = (\n  name: Names[keyof Names],\n  statement: string,\n  options?: { limit?: number }\n) => Promise<QueryResult>;\n\nexport function defineOperation<\n  Input,\n  Output,\n  const Names extends Readonly<Record<string, string>> = Record<string, never>,\n>(\n  operation: Omit<DataOperation<Input, Output>, 'run' | 'queryNames'> & {\n    queryNames?: Names;\n    run: (\n      context: OperationContext & { query: OperationQuery<NoInfer<Names>> },\n      input: Input\n    ) => Promise<Output>;\n  }\n): DataOperation<Input, Output> & { queryNames?: Names } {\n  invariant(\n    Array.isArray(operation.checks) &&\n      operation.checks.length > 0 &&\n      Number.isInteger(operation.policy.maxQueryRows) &&\n      operation.policy.maxQueryRows > 0 &&\n      Number.isInteger(operation.policy.maxDurationMs) &&\n      operation.policy.maxDurationMs > 0 &&\n      (operation.policy.maxResponseBytes === undefined ||\n        (Number.isInteger(operation.policy.maxResponseBytes) &&\n          operation.policy.maxResponseBytes > 0)),\n    'Each data operation needs check inputs and positive row and duration limits.'\n  );\n  if (operation.queryNames) defineQueryNames(operation.queryNames);\n  for (const input of operation.checks) operation.input(input);\n\n  return {\n    ...operation,\n    run(context, input) {\n      function query(\n        name: Names[keyof Names],\n        statement: string,\n        options?: { limit?: number }\n      ): Promise<QueryResult> {\n        invariant(\n          operation.queryNames &&\n            Object.values(operation.queryNames).includes(name),\n          `Unknown query name: ${name}.`\n        );\n\n        return context.lakehouse.queryAll(statement, {\n          name,\n          limit: options?.limit ?? operation.policy.maxQueryRows,\n          signal: context.signal,\n        });\n      }\n\n      return operation.run({ ...context, query }, input);\n    },\n  };\n}\n\nexport const connectionQueryNames = defineQueryNames({\n  connection: 'connection-check',\n});\n\n/** Success requires a bounded SQL query; it does not establish access to a particular dataset. */\nexport function connectionCheck(): DataOperation<Record<string, never>, true> {\n  return defineOperation({\n    input: parseEmptyInput,\n    output: parseTrue,\n    checks: [{}],\n    queryNames: connectionQueryNames,\n    policy: { maxQueryRows: 1, maxDurationMs: 15_000, exposeSql: true },\n    async run({ query }): Promise<true> {\n      await query(\n        connectionQueryNames.connection,\n        'SELECT 1 AS connection_check'\n      );\n\n      return true;\n    },\n  });\n}\n\nexport type DataOperations = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n    run: (context: OperationContext, input: never) => Promise<unknown>;\n    checks: readonly unknown[];\n    queryNames?: Readonly<Record<string, string>>;\n    policy: DataOperation<never, unknown>['policy'];\n  }\n>;\nexport {\n  dimensionFilter,\n  parseDimensionSelection,\n  parseFacetOptions,\n  dimensionPredicate,\n} from '@/src/core/dimension';\nexport type {\n  DimensionSelection,\n  DimensionMember,\n  DimensionOption,\n  DimensionVariable,\n  DimensionFilterOptions,\n} from '@/src/core/dimension';\n\nexport * from '@/src/core/messages';\nexport type { TransportResponse } from '@/src/core/bridge';\n",
+    "/**\n * Date and number formatting with explicit units and missing-value behavior.\n * @module @altertable/data-app/format\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/format.md\n */\ntype CommonOptions = { locale?: string; missing?: string };\n\n/** Compact, unambiguous calendar dates for labels and request status. */\nexport function formatDateRange({\n  start,\n  end,\n}: {\n  start: string;\n  end: string;\n}): string {\n  const first = new Date(`${start}T00:00:00Z`);\n  const last = new Date(`${end}T00:00:00Z`);\n\n  function format(date: Date, options: Intl.DateTimeFormatOptions) {\n    return new Intl.DateTimeFormat('en-US', {\n      ...options,\n      timeZone: 'UTC',\n    }).format(date);\n  }\n\n  function formatFullDate(date: Date) {\n    return format(date, { month: 'short', day: 'numeric', year: 'numeric' });\n  }\n\n  if (start === end) return formatFullDate(first);\n  if (first.getUTCFullYear() !== last.getUTCFullYear())\n    return `${formatFullDate(first)}–${formatFullDate(last)}`;\n  const firstMonth = format(first, { month: 'short' });\n  const lastMonth = format(last, { month: 'short' });\n  const firstDay = first.getUTCDate();\n  const lastDay = last.getUTCDate();\n\n  return firstMonth === lastMonth\n    ? `${firstMonth} ${firstDay}–${lastDay}, ${last.getUTCFullYear()}`\n    : `${firstMonth} ${firstDay}–${lastMonth} ${lastDay}, ${last.getUTCFullYear()}`;\n}\n\nexport type MetricFormat =\n  | { kind: 'count'; compact?: boolean; locale?: string }\n  | { kind: 'ratio'; maximumFractionDigits?: number; locale?: string }\n  | { kind: 'currency'; currency: string; locale?: string };\n\nexport function formatMetric(value: number, format: MetricFormat): string {\n  if (format.kind === 'count') return formatCount(value, format);\n  if (format.kind === 'ratio') return formatPercent(value, format);\n\n  return formatNumber(value, {\n    style: 'currency',\n    currency: format.currency,\n    locale: format.locale,\n  });\n}\n\n/** Missing and non-finite values use the `missing` label; negative zero renders as zero. */\nexport function formatNumber(\n  value: number | null | undefined,\n  options: CommonOptions & Intl.NumberFormatOptions = {}\n): string {\n  const { locale = 'en-US', missing = '—', ...numberOptions } = options;\n\n  return value === null || value === undefined || !Number.isFinite(value)\n    ? missing\n    : new Intl.NumberFormat(locale, numberOptions).format(\n        Object.is(value, -0) ? 0 : value\n      );\n}\n\n/** Negative and fractional counts render as missing. Compact notation is opt-in. */\nexport function formatCount(\n  value: number | null | undefined,\n  options: CommonOptions & { compact?: boolean } = {}\n): string {\n  const { compact = false, ...common } = options;\n  if (\n    value !== null &&\n    value !== undefined &&\n    (!Number.isInteger(value) || value < 0)\n  ) {\n    return common.missing ?? '—';\n  }\n\n  return formatNumber(value, {\n    ...common,\n    notation: compact ? 'compact' : 'standard',\n    maximumFractionDigits: compact ? 1 : 0,\n  });\n}\n\nconst pluralRules = new Intl.PluralRules();\n\nexport function pluralize(\n  count: number,\n  singular: string,\n  plural = `${singular}s`\n): string {\n  return pluralRules.select(count) === 'one' ? singular : plural;\n}\n\n/** Accepts a ratio (0.116), not a percentage (11.6). */\nexport function formatPercent(\n  ratio: number | null | undefined,\n  options: CommonOptions & { maximumFractionDigits?: number } = {}\n): string {\n  if (ratio === null || ratio === undefined || !Number.isFinite(ratio)) {\n    return options.missing ?? '—';\n  }\n  const digits =\n    options.maximumFractionDigits ?? (Math.abs(ratio) < 0.01 ? 2 : 1);\n  const percentOptions = {\n    locale: options.locale,\n    style: 'percent' as const,\n    maximumFractionDigits: digits,\n  };\n  const smallestVisibleRatio = 10 ** -digits / 100;\n  if (ratio !== 0 && Math.round(Math.abs(ratio) / smallestVisibleRatio) === 0) {\n    const boundary = formatNumber(smallestVisibleRatio, percentOptions);\n\n    return ratio > 0 ? `<${boundary}` : `>−${boundary}`;\n  }\n\n  return formatNumber(ratio, percentOptions);\n}\n",
+    "/** Assert an author or data contract while preserving a useful failure message. */\nexport function invariant(\n  condition: unknown,\n  message: string\n): asserts condition {\n  if (!condition) throw new Error(`Invariant failed: ${message}`);\n}\n",
+    "import type { TransportResponse } from '@/src/core/bridge';\nimport type { DisclosedQuery } from '@/src/core/contract';\n\nexport type MessageContext = { signal: AbortSignal };\nexport type RoutedMessage = { route: string; payload: unknown };\nexport type MessageDispatcher = (\n  message: unknown,\n  context: MessageContext\n) => Promise<unknown>;\nexport type MessageTransport = (\n  message: RoutedMessage,\n  signal?: AbortSignal\n) => Promise<unknown>;\nexport type MessageRoute<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown, input: Input) => Output;\n};\nexport type MessageRoutes = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown, input: never) => unknown;\n  }\n>;\nexport type MessageInput<Route extends MessageRoutes[string]> = ReturnType<\n  Route['input']\n>;\nexport type MessageHandlers<Routes extends MessageRoutes> = {\n  [Name in keyof Routes]: (\n    payload: MessageInput<Routes[Name]>,\n    context: MessageContext\n  ) =>\n    | ReturnType<Routes[Name]['output']>\n    | Promise<ReturnType<Routes[Name]['output']>>;\n};\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/MessageRoutingError');\n\n/** Only these deliberate, public failures cross the message boundary. Other errors stay private. */\nexport class MessageRoutingError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    public readonly code: string,\n    message: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'MessageRoutingError';\n  }\n}\n\nexport function defineMessageRoute<Input, Output>(\n  route: MessageRoute<Input, Output>\n): MessageRoute<Input, Output> {\n  return route;\n}\n\n/** Contracts are shared; handlers are supplied by the host and never belong in the app bundle. */\nexport function createMessageRouter<const Routes extends MessageRoutes>(\n  routes: Routes,\n  handlers: MessageHandlers<NoInfer<Routes>>\n) {\n  const registered = new Map(\n    Object.entries(routes).map(([name, contract]) => {\n      const handler = handlers[name];\n      if (!name || name.length > 256 || typeof handler !== 'function')\n        throw new Error(\n          'Each message route requires a handler and a bounded name.'\n        );\n\n      return [name, { contract, handler }] as const;\n    })\n  );\n\n  async function dispatch(\n    value: unknown,\n    context: MessageContext\n  ): Promise<unknown> {\n    if (\n      !value ||\n      typeof value !== 'object' ||\n      typeof (value as RoutedMessage).route !== 'string'\n    )\n      throw new MessageRoutingError(\n        'invalid_message',\n        'Invalid routed message.'\n      );\n    const message = value as RoutedMessage;\n    const entry = registered.get(message.route);\n    if (!entry)\n      throw new MessageRoutingError('unknown_route', 'Unknown message route.');\n    let payload: unknown;\n    try {\n      payload = entry.contract.input(message.payload);\n    } catch {\n      throw new MessageRoutingError(\n        'invalid_payload',\n        'Invalid message payload.'\n      );\n    }\n    context.signal.throwIfAborted();\n    let result: unknown;\n    try {\n      result = await entry.handler(payload as never, context);\n    } catch (error) {\n      if (context.signal.aborted) throw context.signal.reason;\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'request_failed',\n        'The message request failed. Retry the request.'\n      );\n    }\n    context.signal.throwIfAborted();\n    try {\n      return entry.contract.output(result, payload as never);\n    } catch (error) {\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'invalid_response',\n        'Invalid message response.'\n      );\n    }\n  }\n\n  return { dispatch };\n}\n\nexport type OperationContracts = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown) => unknown;\n  }\n>;\nexport type DataQueryInput<Operations extends OperationContracts> = {\n  [Name in keyof Operations & string]: {\n    operation: Name;\n    input: ReturnType<Operations[Name]['input']>;\n  };\n}[keyof Operations & string];\nexport type DataQueryBody<Output> = {\n  data: Output;\n  requestId: string;\n  queriedAt: string;\n  queryIds: string[];\n  queries?: DisclosedQuery[];\n};\nexport type DataQueryRoute<Operations extends OperationContracts> =\n  MessageRoute<DataQueryInput<Operations>, TransportResponse> & {\n    operations: Operations | undefined;\n  };\nexport type MessageOutput<Route extends MessageRoutes[string], Input> =\n  Route extends DataQueryRoute<infer Operations>\n    ? Input extends { operation: infer Name extends keyof Operations }\n      ? {\n          status: number;\n          body: DataQueryBody<ReturnType<Operations[Name]['output']>>;\n        }\n      : never\n    : ReturnType<Route['output']>;\n\n/** Omit contracts only in generic hosts such as the CLI shell, where Bun validates operations. */\nexport function defineDataQueryRoute<\n  Operations extends OperationContracts = OperationContracts,\n>(operations?: Operations): DataQueryRoute<Operations> {\n  return {\n    operations,\n    input(value) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid query.');\n      const request = value as { operation?: unknown; input?: unknown };\n      if (\n        typeof request.operation !== 'string' ||\n        !request.operation ||\n        request.operation.length > 256 ||\n        request.operation.includes('/')\n      )\n        throw new Error('Invalid operation.');\n      const operation =\n        operations && Object.hasOwn(operations, request.operation)\n          ? operations[request.operation]\n          : undefined;\n      if (operations && !operation) throw new Error('Unknown operation.');\n\n      return {\n        operation: request.operation,\n        input: operation ? operation.input(request.input) : request.input,\n      } as DataQueryInput<Operations>;\n    },\n    output(value, input) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid data response.');\n      const response = value as TransportResponse;\n      if (\n        !Number.isInteger(response.status) ||\n        response.status < 100 ||\n        response.status > 599 ||\n        !response.body ||\n        typeof response.body !== 'object'\n      )\n        throw new Error('Invalid data response.');\n      const body = response.body as DataQueryBody<unknown> & {\n        error?: { code?: unknown; message?: unknown; requestId?: unknown };\n      };\n      if (response.status < 200 || response.status >= 300) {\n        const failure = body.error;\n        throw new MessageRoutingError(\n          typeof failure?.code === 'string' ? failure.code : 'request_failed',\n          typeof failure?.message === 'string'\n            ? failure.message\n            : 'Could not load data.',\n          typeof failure?.requestId === 'string' ? failure.requestId : undefined\n        );\n      }\n      if (\n        !('data' in body) ||\n        typeof body.requestId !== 'string' ||\n        typeof body.queriedAt !== 'string' ||\n        !Array.isArray(body.queryIds) ||\n        !body.queryIds.every(id => typeof id === 'string')\n      )\n        throw new Error('Invalid data envelope.');\n      if (\n        body.queries !== undefined &&\n        (!Array.isArray(body.queries) ||\n          !body.queries.every(\n            query =>\n              query &&\n              typeof query === 'object' &&\n              typeof query.name === 'string' &&\n              typeof query.statement === 'string' &&\n              (query.queryId === undefined || typeof query.queryId === 'string')\n          ))\n      )\n        throw new Error('Invalid query evidence.');\n      const operation = operations?.[input.operation];\n\n      return {\n        status: response.status,\n        body: {\n          ...body,\n          data: operation ? operation.output(body.data) : body.data,\n        },\n      };\n    },\n  };\n}\n\nexport type NavigationUpdate = {\n  search: string;\n  hash: string;\n  mode: 'push' | 'replace';\n  title?: string;\n};\nexport const navigationUpdateRoute = /* @__PURE__ */ defineMessageRoute({\n  input(value: unknown): NavigationUpdate {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid navigation.');\n    const input = value as NavigationUpdate;\n    if (\n      typeof input.search !== 'string' ||\n      input.search.length > 16_384 ||\n      (input.search !== '' && !input.search.startsWith('?')) ||\n      typeof input.hash !== 'string' ||\n      input.hash.length > 4096 ||\n      (input.hash !== '' && !input.hash.startsWith('#')) ||\n      (input.mode !== 'push' && input.mode !== 'replace') ||\n      (input.title !== undefined &&\n        (typeof input.title !== 'string' || input.title.length > 512))\n    )\n      throw new Error('Invalid navigation.');\n\n    return {\n      search: input.search,\n      hash: input.hash,\n      mode: input.mode,\n      ...(input.title === undefined ? {} : { title: input.title }),\n    };\n  },\n  output(value: unknown): null {\n    if (value !== null) throw new Error('Invalid navigation response.');\n\n    return null;\n  },\n});\nexport const dataAppRoutes = {\n  'data.query': /* @__PURE__ */ defineDataQueryRoute(),\n  'navigation.update': navigationUpdateRoute,\n};\n",
+    "import {\n  DataSourceError,\n  type DataOperations,\n  type DisclosedQuery,\n  type Lakehouse,\n} from '@/src/core/contract';\n\nconst sourceErrorMessages = {\n  unauthorized:\n    \"Lakehouse access needs attention. Run this app with 'altertable app dev', or run 'altertable login' and retry.\",\n  forbidden:\n    \"This app cannot access its lakehouse data. Check the selected profile's permissions.\",\n  rate_limited: 'The lakehouse is busy. Wait a moment and retry.',\n  query_rejected:\n    \"A lakehouse query was rejected. Check the app's data operation.\",\n  unavailable: 'The lakehouse is unavailable. Check the connection and retry.',\n};\n\n/** Authorization result for one viewer request. A hosted adapter must scope its lakehouse client. */\nexport type RequestAccess = { lakehouse: Lakehouse; canDiscloseSql: boolean };\n\n/**\n * Execute named operations on the server. The app supplies operations and viewer authorization.\n * JSON, Origin, and Fetch Metadata checks reject cross-site browser POSTs; they do not\n * authenticate another local process. SQL is returned only when both the operation and\n * authorization result permit disclosure.\n */\nexport function createDataHandler(\n  operations: DataOperations,\n  authorize: (request: Request, operation: string) => Promise<RequestAccess>\n) {\n  async function handleDataRequest(request: Request): Promise<Response> {\n    const requestId = crypto.randomUUID();\n    const url = new URL(request.url);\n    if (!url.pathname.startsWith('/api/data/'))\n      return new Response('Not found', { status: 404 });\n    const encodedName = url.pathname.slice('/api/data/'.length);\n    if (!encodedName || encodedName.includes('/'))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    let name: string;\n    try {\n      name = decodeURIComponent(encodedName);\n    } catch {\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    }\n    if (!Object.hasOwn(operations, name))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    if (request.method !== 'POST')\n      return problem(405, 'method_not_allowed', 'Use POST.', requestId);\n    if (\n      request.headers\n        .get('content-type')\n        ?.split(';')[0]\n        ?.trim()\n        .toLowerCase() !== 'application/json'\n    )\n      return problem(\n        415,\n        'unsupported_media_type',\n        'Use application/json.',\n        requestId\n      );\n    const origin = request.headers.get('origin');\n    const fetchSite = request.headers.get('sec-fetch-site');\n    const fetchMode = request.headers.get('sec-fetch-mode');\n    if (\n      (origin !== null && origin !== url.origin) ||\n      (fetchSite !== null && fetchSite !== 'same-origin') ||\n      (fetchSite !== null && origin === null) ||\n      (fetchMode !== null &&\n        fetchMode !== 'cors' &&\n        fetchMode !== 'same-origin')\n    )\n      return problem(\n        403,\n        'cross_origin_request',\n        'The data request must come from this app.',\n        requestId\n      );\n    let access: RequestAccess;\n    try {\n      access = await authorize(request, name);\n    } catch {\n      return problem(\n        403,\n        'forbidden',\n        'You cannot run this data operation.',\n        requestId\n      );\n    }\n    const operation = operations[name]!;\n    let input: unknown;\n    if (request.signal.aborted)\n      return problem(504, 'timeout', 'The data request timed out.', requestId);\n    try {\n      const body = await readInput(request);\n      input = operation.input(JSON.parse(body));\n    } catch (error) {\n      if (error instanceof InputTooLargeError)\n        return problem(\n          413,\n          'input_too_large',\n          'Input is too large.',\n          requestId\n        );\n\n      return problem(\n        400,\n        'invalid_input',\n        \"Check this operation's inputs.\",\n        requestId\n      );\n    }\n    const timeout = AbortSignal.timeout(operation.policy.maxDurationMs);\n    const signal = AbortSignal.any([request.signal, timeout]);\n    const queryIds: string[] = [];\n    const queries: DisclosedQuery[] = [];\n    const boundedLakehouse: Lakehouse = {\n      async queryAll(statement, options) {\n        if (!Number.isInteger(options.limit) || options.limit < 1)\n          throw new Error('Query needs a positive row limit.');\n        if (\n          operation.queryNames &&\n          !Object.values(operation.queryNames).includes(options.name ?? '')\n        )\n          throw new Error(\n            `Query name is not registered for operation ${name}.`\n          );\n        const query: DisclosedQuery = {\n          name: options.name ?? `Query ${queries.length + 1}`,\n          statement,\n        };\n        queries.push(query);\n        let result;\n        try {\n          result = await access.lakehouse.queryAll(statement, {\n            limit: Math.min(options.limit, operation.policy.maxQueryRows),\n            signal: AbortSignal.any([signal, options.signal]),\n          });\n        } catch (error) {\n          if (error instanceof DataSourceError) error.queryName = query.name;\n          throw error;\n        }\n        if (result.rows.length > operation.policy.maxQueryRows)\n          throw new Error('Result exceeds row limit.');\n        if (result.queryId) {\n          query.queryId = result.queryId;\n          queryIds.push(result.queryId);\n        }\n\n        return result;\n      },\n    };\n    let abort: (() => void) | undefined;\n    try {\n      signal.throwIfAborted();\n      const cancelled = new Promise<never>((_, reject) => {\n        function rejectAborted() {\n          reject(new Error('Request aborted.'));\n        }\n        abort = rejectAborted;\n        signal.addEventListener('abort', rejectAborted, { once: true });\n        if (signal.aborted) rejectAborted();\n      });\n      const data = operation.output(\n        await Promise.race([\n          cancelled,\n          Promise.resolve().then(() => {\n            signal.throwIfAborted();\n\n            return operation.run(\n              { lakehouse: boundedLakehouse, signal },\n              input as never\n            );\n          }),\n        ])\n      );\n      const result = {\n        data,\n        requestId,\n        queriedAt: new Date().toISOString(),\n        queryIds,\n        ...(operation.policy.exposeSql && access.canDiscloseSql\n          ? { queries }\n          : {}),\n      };\n      const body = JSON.stringify(result);\n      if (\n        new TextEncoder().encode(body).byteLength >\n        (operation.policy.maxResponseBytes ?? 1_000_000)\n      ) {\n        throw new Error('Response exceeds byte limit.');\n      }\n\n      return new Response(body, {\n        headers: {\n          'cache-control': 'no-store',\n          'content-type': 'application/json',\n        },\n      });\n    } catch (error) {\n      const source = error instanceof DataSourceError ? error : null;\n      console.error(\n        `Data operation ${name} failed (${requestId}): ${source ? `${source.reason}${source.status ? ` (${source.status})` : ''}${source.queryName ? ` in ${source.queryName}` : ''}` : error instanceof Error ? error.name : 'unknown'}`\n      );\n      if (source) {\n        return problem(\n          source.reason === 'rate_limited' ? 429 : 502,\n          `source_${source.reason}`,\n          sourceErrorMessages[source.reason],\n          requestId\n        );\n      }\n\n      return problem(\n        signal.aborted ? 504 : 502,\n        signal.aborted ? 'timeout' : 'query_failed',\n        signal.aborted\n          ? 'The data request timed out.'\n          : 'The data request failed.',\n        requestId\n      );\n    } finally {\n      if (abort) signal.removeEventListener('abort', abort);\n    }\n  }\n\n  return handleDataRequest;\n}\n\nfunction problem(\n  status: number,\n  code: string,\n  message: string,\n  requestId: string\n): Response {\n  return Response.json(\n    { error: { code, message, requestId } },\n    { status, headers: { 'cache-control': 'no-store' } }\n  );\n}\n\nconst MAX_INPUT_BYTES = 16_384;\nclass InputTooLargeError extends Error {}\n\n/** Count encoded bytes before retaining chunks; cancellation also interrupts waiting reads. */\nasync function readInput(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return '';\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  let abort: (() => void) | undefined;\n\n  function cancelReader() {\n    // The source's cancel algorithm may never settle; the handler must still respond.\n    void reader!.cancel().catch(() => {});\n  }\n\n  try {\n    request.signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n        cancelReader();\n      }\n      abort = rejectAborted;\n      request.signal.addEventListener('abort', rejectAborted, { once: true });\n      if (request.signal.aborted) rejectAborted();\n    });\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), cancelled]);\n      if (done) break;\n      size += value.byteLength;\n      if (size > MAX_INPUT_BYTES) {\n        cancelReader();\n        throw new InputTooLargeError();\n      }\n      chunks.push(value);\n    }\n    const bytes = new Uint8Array(size);\n    let offset = 0;\n    for (const chunk of chunks) {\n      bytes.set(chunk, offset);\n      offset += chunk.byteLength;\n    }\n\n    return new TextDecoder().decode(bytes);\n  } finally {\n    if (abort) request.signal.removeEventListener('abort', abort);\n    reader.releaseLock();\n  }\n}\n",
+    "/**\n * Bun local-development serving and server-only lakehouse access.\n * @module @altertable/data-app/server/bun\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/server-bun.md\n */\nimport {\n  DataSourceError,\n  type Lakehouse,\n  type QueryResult,\n} from '@/src/core/contract';\nimport type { DataOperations } from '@/src/core/contract';\nimport { createDataHandler } from '@/src/server/handler';\n\n/** Serve one app on localhost through the CLI's lakehouse proxy during development.\n * Hosted servers must authorize every viewer and must use `createDataHandler` directly. */\nexport function serveLocalApp({\n  page,\n  operations,\n  title,\n  port = Number(process.env.PORT ?? 25837),\n}: {\n  page: Bun.HTMLBundle;\n  operations: DataOperations;\n  title: string;\n  port?: number;\n}) {\n  const server = Bun.serve({\n    hostname: '127.0.0.1',\n    port,\n    development: process.env.NODE_ENV !== 'production',\n    idleTimeout: 60,\n    routes: { '/': page },\n    fetch: createDataHandler(operations, async () => ({\n      lakehouse: localLakehouse(),\n      canDiscloseSql: true,\n    })),\n  });\n  console.log(`${title} running at ${server.url}`);\n\n  return server;\n}\n\n/** Server-only lakehouse adapter. Local development uses the selected CLI profile's proxy. */\nexport function localLakehouse(\n  environment: Record<string, string | undefined> = process.env,\n  request: typeof fetch = fetch\n): Lakehouse {\n  return {\n    async queryAll(statement, { limit, signal }) {\n      const proxyUrl = environment.ALTERTABLE_DATA_PROXY_URL;\n      const proxyToken = environment.ALTERTABLE_DATA_PROXY_TOKEN;\n      const username = environment.ALTERTABLE_LAKEHOUSE_USERNAME;\n      const password = environment.ALTERTABLE_LAKEHOUSE_PASSWORD;\n      if (!proxyUrl && (!username || !password))\n        throw new DataSourceError('unauthorized');\n      if (proxyUrl && !proxyToken) throw new DataSourceError('unauthorized');\n      const base =\n        proxyUrl ??\n        environment.ALTERTABLE_API_BASE ??\n        'https://api.altertable.ai';\n      let response: Response;\n      try {\n        response = await request(\n          new URL('query', `${base.replace(/\\/$/, '')}/`),\n          {\n            method: 'POST',\n            headers: {\n              authorization: proxyUrl\n                ? `Bearer ${proxyToken}`\n                : `Basic ${Buffer.from(`${username}:${password}`).toString('base64')}`,\n              'content-type': 'application/json',\n            },\n            body: JSON.stringify({ statement, limit }),\n            signal,\n          }\n        );\n      } catch (error) {\n        if (signal.aborted) throw error;\n        throw new DataSourceError('unavailable');\n      }\n      if (!response.ok) {\n        const reason =\n          response.status === 401\n            ? 'unauthorized'\n            : response.status === 403\n              ? 'forbidden'\n              : response.status === 429\n                ? 'rate_limited'\n                : response.status === 400 || response.status === 422\n                  ? 'query_rejected'\n                  : 'unavailable';\n        throw new DataSourceError(reason, response.status);\n      }\n      const body = await readQueryBody(response);\n\n      return parseQueryResult(body, limit);\n    },\n  };\n}\n\nasync function readQueryBody(response: Response): Promise<string> {\n  const reader = response.body?.getReader();\n  if (!reader) throw new Error('Query response is empty.');\n  const decoder = new TextDecoder();\n  let body = '';\n  let bytes = 0;\n  while (true) {\n    const chunk = await reader.read();\n    if (chunk.done) break;\n    bytes += chunk.value.byteLength;\n    if (bytes > 5_000_000) {\n      await reader.cancel();\n      throw new Error('Query response is too large.');\n    }\n    body += decoder.decode(chunk.value, { stream: true });\n  }\n  body += decoder.decode();\n\n  return body;\n}\n\nfunction parseQueryResult(body: string, limit: number): QueryResult {\n  const lines = body\n    .trimEnd()\n    .split('\\n')\n    .filter(line => line.trim());\n  if (!lines.length) throw new Error('Query response is empty.');\n  const metadata = JSON.parse(lines[0]!) as { query_id?: string };\n  let firstRowIndex = 1;\n  let columns: QueryResult['columns'] = [];\n  if (lines[firstRowIndex]) {\n    const columnDefinitions = JSON.parse(lines[firstRowIndex]!) as unknown;\n    if (\n      Array.isArray(columnDefinitions) &&\n      columnDefinitions.every(\n        value =>\n          typeof value === 'string' ||\n          (typeof value === 'object' && value !== null && 'name' in value)\n      )\n    ) {\n      columns = columnDefinitions.map(value =>\n        typeof value === 'string'\n          ? { name: value }\n          : (value as { name: string; type?: string })\n      );\n      firstRowIndex++;\n    }\n  }\n  const rows = lines\n    .slice(firstRowIndex)\n    .map(line => JSON.parse(line) as unknown[]);\n  if (rows.length > limit)\n    throw new Error('Lakehouse returned more rows than requested.');\n\n  return { columns, rows, queryId: metadata.query_id };\n}\n"
+  ],
+  "mappings": ";;AAKA;;;ACwFA,IAAM,cAAc,IAAI,KAAK;;;AC5FtB,SAAS,SAAS,CACvB,WACA,SACmB;AAAA,EACnB,IAAI,CAAC;AAAA,IAAW,MAAM,IAAI,MAAM,qBAAqB,SAAS;AAAA;;ACgChE,IAAM,aAAa,OAAO,IAAI,0CAA0C;;AHqOjE,SAAS,gBAA4D,CAC1E,OACO;AAAA,EACP,MAAM,SAAS,OAAO,OAAO,KAAK;AAAA,EAClC,UACE,OAAO,MAAM,UAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,KAChC,IAAI,IAAI,MAAM,EAAE,SAAS,OAAO,QAClC,0CACF;AAAA,EAEA,OAAO;AAAA;AAAA;AAGF,MAAM,wBAAwB,MAAM;AAAA,EAIvB;AAAA,EAMA;AAAA,EATlB;AAAA,EAEA,WAAW,CACO,QAMA,QAChB;AAAA,IACA,MAAM,eAAe,SAAS,SAAS,KAAK,YAAY,KAAK;AAAA,IAR7C;AAAA,IAMA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AA0FO,IAAM,uBAAuB,iBAAiB;AAAA,EACnD,YAAY;AACd,CAAC;;;AI3XD,IAAM,sBAAsB;AAAA,EAC1B,cACE;AAAA,EACF,WACE;AAAA,EACF,cAAc;AAAA,EACd,gBACE;AAAA,EACF,aAAa;AACf;AAWO,SAAS,iBAAiB,CAC/B,YACA,WACA;AAAA,EACA,eAAe,iBAAiB,CAAC,SAAqC;AAAA,IACpE,MAAM,YAAY,OAAO,WAAW;AAAA,IACpC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAAA,IAC/B,IAAI,CAAC,IAAI,SAAS,WAAW,YAAY;AAAA,MACvC,OAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD,MAAM,cAAc,IAAI,SAAS,MAAM,aAAa,MAAM;AAAA,IAC1D,IAAI,CAAC,eAAe,YAAY,SAAS,GAAG;AAAA,MAC1C,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,mBAAmB,WAAW;AAAA,MACrC,MAAM;AAAA,MACN,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA;AAAA,IAEvE,IAAI,CAAC,OAAO,OAAO,YAAY,IAAI;AAAA,MACjC,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI,QAAQ,WAAW;AAAA,MACrB,OAAO,QAAQ,KAAK,sBAAsB,aAAa,SAAS;AAAA,IAClE,IACE,QAAQ,QACL,IAAI,cAAc,GACjB,MAAM,GAAG,EAAE,IACX,KAAK,EACN,YAAY,MAAM;AAAA,MAErB,OAAO,QACL,KACA,0BACA,yBACA,SACF;AAAA,IACF,MAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAAA,IAC3C,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,IACG,WAAW,QAAQ,WAAW,IAAI,UAClC,cAAc,QAAQ,cAAc,iBACpC,cAAc,QAAQ,WAAW,QACjC,cAAc,QACb,cAAc,UACd,cAAc;AAAA,MAEhB,OAAO,QACL,KACA,wBACA,6CACA,SACF;AAAA,IACF,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,MAAM,UAAU,SAAS,IAAI;AAAA,MACtC,MAAM;AAAA,MACN,OAAO,QACL,KACA,aACA,uCACA,SACF;AAAA;AAAA,IAEF,MAAM,YAAY,WAAW;AAAA,IAC7B,IAAI;AAAA,IACJ,IAAI,QAAQ,OAAO;AAAA,MACjB,OAAO,QAAQ,KAAK,WAAW,+BAA+B,SAAS;AAAA,IACzE,IAAI;AAAA,MACF,MAAM,OAAO,MAAM,UAAU,OAAO;AAAA,MACpC,QAAQ,UAAU,MAAM,KAAK,MAAM,IAAI,CAAC;AAAA,MACxC,OAAO,OAAO;AAAA,MACd,IAAI,iBAAiB;AAAA,QACnB,OAAO,QACL,KACA,mBACA,uBACA,SACF;AAAA,MAEF,OAAO,QACL,KACA,iBACA,kCACA,SACF;AAAA;AAAA,IAEF,MAAM,UAAU,YAAY,QAAQ,UAAU,OAAO,aAAa;AAAA,IAClE,MAAM,SAAS,YAAY,IAAI,CAAC,QAAQ,QAAQ,OAAO,CAAC;AAAA,IACxD,MAAM,WAAqB,CAAC;AAAA,IAC5B,MAAM,UAA4B,CAAC;AAAA,IACnC,MAAM,mBAA8B;AAAA,WAC5B,SAAQ,CAAC,WAAW,SAAS;AAAA,QACjC,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,QAAQ,QAAQ;AAAA,UACtD,MAAM,IAAI,MAAM,mCAAmC;AAAA,QACrD,IACE,UAAU,cACV,CAAC,OAAO,OAAO,UAAU,UAAU,EAAE,SAAS,QAAQ,QAAQ,EAAE;AAAA,UAEhE,MAAM,IAAI,MACR,8CAA8C,OAChD;AAAA,QACF,MAAM,QAAwB;AAAA,UAC5B,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,UAChD;AAAA,QACF;AAAA,QACA,QAAQ,KAAK,KAAK;AAAA,QAClB,IAAI;AAAA,QACJ,IAAI;AAAA,UACF,SAAS,MAAM,OAAO,UAAU,SAAS,WAAW;AAAA,YAClD,OAAO,KAAK,IAAI,QAAQ,OAAO,UAAU,OAAO,YAAY;AAAA,YAC5D,QAAQ,YAAY,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC;AAAA,UAClD,CAAC;AAAA,UACD,OAAO,OAAO;AAAA,UACd,IAAI,iBAAiB;AAAA,YAAiB,MAAM,YAAY,MAAM;AAAA,UAC9D,MAAM;AAAA;AAAA,QAER,IAAI,OAAO,KAAK,SAAS,UAAU,OAAO;AAAA,UACxC,MAAM,IAAI,MAAM,2BAA2B;AAAA,QAC7C,IAAI,OAAO,SAAS;AAAA,UAClB,MAAM,UAAU,OAAO;AAAA,UACvB,SAAS,KAAK,OAAO,OAAO;AAAA,QAC9B;AAAA,QAEA,OAAO;AAAA;AAAA,IAEX;AAAA,IACA,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,eAAe;AAAA,MACtB,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,QAClD,SAAS,aAAa,GAAG;AAAA,UACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA;AAAA,QAEtC,QAAQ;AAAA,QACR,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,QAC9D,IAAI,OAAO;AAAA,UAAS,cAAc;AAAA,OACnC;AAAA,MACD,MAAM,OAAO,UAAU,OACrB,MAAM,QAAQ,KAAK;AAAA,QACjB;AAAA,QACA,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAAA,UAC3B,OAAO,eAAe;AAAA,UAEtB,OAAO,UAAU,IACf,EAAE,WAAW,kBAAkB,OAAO,GACtC,KACF;AAAA,SACD;AAAA,MACH,CAAC,CACH;AAAA,MACA,MAAM,SAAS;AAAA,QACb;AAAA,QACA;AAAA,QACA,WAAW,IAAI,KAAK,EAAE,YAAY;AAAA,QAClC;AAAA,WACI,UAAU,OAAO,aAAa,OAAO,iBACrC,EAAE,QAAQ,IACV,CAAC;AAAA,MACP;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,MAAM;AAAA,MAClC,IACE,IAAI,YAAY,EAAE,OAAO,IAAI,EAAE,cAC9B,UAAU,OAAO,oBAAoB,MACtC;AAAA,QACA,MAAM,IAAI,MAAM,8BAA8B;AAAA,MAChD;AAAA,MAEA,OAAO,IAAI,SAAS,MAAM;AAAA,QACxB,SAAS;AAAA,UACP,iBAAiB;AAAA,UACjB,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,MAAM,SAAS,iBAAiB,kBAAkB,QAAQ;AAAA,MAC1D,QAAQ,MACN,kBAAkB,gBAAgB,eAAe,SAAS,GAAG,OAAO,SAAS,OAAO,SAAS,KAAK,OAAO,YAAY,KAAK,OAAO,YAAY,OAAO,OAAO,cAAc,OAAO,iBAAiB,QAAQ,MAAM,OAAO,WACxN;AAAA,MACA,IAAI,QAAQ;AAAA,QACV,OAAO,QACL,OAAO,WAAW,iBAAiB,MAAM,KACzC,UAAU,OAAO,UACjB,oBAAoB,OAAO,SAC3B,SACF;AAAA,MACF;AAAA,MAEA,OAAO,QACL,OAAO,UAAU,MAAM,KACvB,OAAO,UAAU,YAAY,gBAC7B,OAAO,UACH,gCACA,4BACJ,SACF;AAAA,cACA;AAAA,MACA,IAAI;AAAA,QAAO,OAAO,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA,EAIxD,OAAO;AAAA;AAGT,SAAS,OAAO,CACd,QACA,MACA,SACA,WACU;AAAA,EACV,OAAO,SAAS,KACd,EAAE,OAAO,EAAE,MAAM,SAAS,UAAU,EAAE,GACtC,EAAE,QAAQ,SAAS,EAAE,iBAAiB,WAAW,EAAE,CACrD;AAAA;AAGF,IAAM,kBAAkB;AAAA;AACxB,MAAM,2BAA2B,MAAM;AAAC;AAGxC,eAAe,SAAS,CAAC,SAAmC;AAAA,EAC1D,MAAM,SAAS,QAAQ,MAAM,UAAU;AAAA,EACvC,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EACpB,MAAM,SAAuB,CAAC;AAAA,EAC9B,IAAI,OAAO;AAAA,EACX,IAAI;AAAA,EAEJ,SAAS,YAAY,GAAG;AAAA,IAEjB,OAAQ,OAAO,EAAE,MAAM,MAAM,EAAE;AAAA;AAAA,EAGtC,IAAI;AAAA,IACF,QAAQ,OAAO,eAAe;AAAA,IAC9B,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,QACpC,aAAa;AAAA;AAAA,MAEf,QAAQ;AAAA,MACR,QAAQ,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MACtE,IAAI,QAAQ,OAAO;AAAA,QAAS,cAAc;AAAA,KAC3C;AAAA,IACD,OAAO,MAAM;AAAA,MACX,QAAQ,MAAM,UAAU,MAAM,QAAQ,KAAK,CAAC,OAAO,KAAK,GAAG,SAAS,CAAC;AAAA,MACrE,IAAI;AAAA,QAAM;AAAA,MACV,QAAQ,MAAM;AAAA,MACd,IAAI,OAAO,iBAAiB;AAAA,QAC1B,aAAa;AAAA,QACb,MAAM,IAAI;AAAA,MACZ;AAAA,MACA,OAAO,KAAK,KAAK;AAAA,IACnB;AAAA,IACA,MAAM,QAAQ,IAAI,WAAW,IAAI;AAAA,IACjC,IAAI,SAAS;AAAA,IACb,WAAW,SAAS,QAAQ;AAAA,MAC1B,MAAM,IAAI,OAAO,MAAM;AAAA,MACvB,UAAU,MAAM;AAAA,IAClB;AAAA,IAEA,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,YACrC;AAAA,IACA,IAAI;AAAA,MAAO,QAAQ,OAAO,oBAAoB,SAAS,KAAK;AAAA,IAC5D,OAAO,YAAY;AAAA;AAAA;;;AClRhB,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO,OAAO,QAAQ,IAAI,QAAQ,KAAK;AAAA,GAMtC;AAAA,EACD,MAAM,SAAS,IAAI,MAAM;AAAA,IACvB,UAAU;AAAA,IACV;AAAA,IACA,aAAa;AAAA,IACb,aAAa;AAAA,IACb,QAAQ,EAAE,KAAK,KAAK;AAAA,IACpB,OAAO,kBAAkB,YAAY,aAAa;AAAA,MAChD,WAAW,eAAe;AAAA,MAC1B,gBAAgB;AAAA,IAClB,EAAE;AAAA,EACJ,CAAC;AAAA,EACD,QAAQ,IAAI,GAAG,oBAAoB,OAAO,KAAK;AAAA,EAE/C,OAAO;AAAA;AAIF,SAAS,cAAc,CAC5B,cAAkD,QAAQ,KAC1D,UAAwB,OACb;AAAA,EACX,OAAO;AAAA,SACC,SAAQ,CAAC,aAAa,OAAO,UAAU;AAAA,MAC3C,MAAM,WAAW,YAAY;AAAA,MAC7B,MAAM,aAAa,YAAY;AAAA,MAC/B,MAAM,WAAW,YAAY;AAAA,MAC7B,MAAM,WAAW,YAAY;AAAA,MAC7B,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;AAAA,QAC9B,MAAM,IAAI,gBAAgB,cAAc;AAAA,MAC1C,IAAI,YAAY,CAAC;AAAA,QAAY,MAAM,IAAI,gBAAgB,cAAc;AAAA,MACrE,MAAM,OACJ,YACA,YAAY,uBACZ;AAAA,MACF,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,WAAW,MAAM,QACf,IAAI,IAAI,SAAS,GAAG,KAAK,QAAQ,OAAO,EAAE,IAAI,GAC9C;AAAA,UACE,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,eAAe,WACX,UAAU,eACV,SAAS,OAAO,KAAK,GAAG,YAAY,UAAU,EAAE,SAAS,QAAQ;AAAA,YACrE,gBAAgB;AAAA,UAClB;AAAA,UACA,MAAM,KAAK,UAAU,EAAE,WAAW,MAAM,CAAC;AAAA,UACzC;AAAA,QACF,CACF;AAAA,QACA,OAAO,OAAO;AAAA,QACd,IAAI,OAAO;AAAA,UAAS,MAAM;AAAA,QAC1B,MAAM,IAAI,gBAAgB,aAAa;AAAA;AAAA,MAEzC,IAAI,CAAC,SAAS,IAAI;AAAA,QAChB,MAAM,SACJ,SAAS,WAAW,MAChB,iBACA,SAAS,WAAW,MAClB,cACA,SAAS,WAAW,MAClB,iBACA,SAAS,WAAW,OAAO,SAAS,WAAW,MAC7C,mBACA;AAAA,QACZ,MAAM,IAAI,gBAAgB,QAAQ,SAAS,MAAM;AAAA,MACnD;AAAA,MACA,MAAM,OAAO,MAAM,cAAc,QAAQ;AAAA,MAEzC,OAAO,iBAAiB,MAAM,KAAK;AAAA;AAAA,EAEvC;AAAA;AAGF,eAAe,aAAa,CAAC,UAAqC;AAAA,EAChE,MAAM,SAAS,SAAS,MAAM,UAAU;AAAA,EACxC,IAAI,CAAC;AAAA,IAAQ,MAAM,IAAI,MAAM,0BAA0B;AAAA,EACvD,MAAM,UAAU,IAAI;AAAA,EACpB,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,OAAO,MAAM;AAAA,IACX,MAAM,QAAQ,MAAM,OAAO,KAAK;AAAA,IAChC,IAAI,MAAM;AAAA,MAAM;AAAA,IAChB,SAAS,MAAM,MAAM;AAAA,IACrB,IAAI,QAAQ,SAAW;AAAA,MACrB,MAAM,OAAO,OAAO;AAAA,MACpB,MAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AAAA,IACA,QAAQ,QAAQ,OAAO,MAAM,OAAO,EAAE,QAAQ,KAAK,CAAC;AAAA,EACtD;AAAA,EACA,QAAQ,QAAQ,OAAO;AAAA,EAEvB,OAAO;AAAA;AAGT,SAAS,gBAAgB,CAAC,MAAc,OAA4B;AAAA,EAClE,MAAM,QAAQ,KACX,QAAQ,EACR,MAAM;AAAA,CAAI,EACV,OAAO,UAAQ,KAAK,KAAK,CAAC;AAAA,EAC7B,IAAI,CAAC,MAAM;AAAA,IAAQ,MAAM,IAAI,MAAM,0BAA0B;AAAA,EAC7D,MAAM,WAAW,KAAK,MAAM,MAAM,EAAG;AAAA,EACrC,IAAI,gBAAgB;AAAA,EACpB,IAAI,UAAkC,CAAC;AAAA,EACvC,IAAI,MAAM,gBAAgB;AAAA,IACxB,MAAM,oBAAoB,KAAK,MAAM,MAAM,cAAe;AAAA,IAC1D,IACE,MAAM,QAAQ,iBAAiB,KAC/B,kBAAkB,MAChB,WACE,OAAO,UAAU,YAChB,OAAO,UAAU,YAAY,UAAU,SAAQ,UAAU,MAC9D,GACA;AAAA,MACA,UAAU,kBAAkB,IAAI,WAC9B,OAAO,UAAU,WACb,EAAE,MAAM,MAAM,IACb,KACP;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,MACV,MAAM,aAAa,EACnB,IAAI,UAAQ,KAAK,MAAM,IAAI,CAAc;AAAA,EAC5C,IAAI,KAAK,SAAS;AAAA,IAChB,MAAM,IAAI,MAAM,8CAA8C;AAAA,EAEhE,OAAO,EAAE,SAAS,MAAM,SAAS,SAAS,SAAS;AAAA;",
+  "debugId": "FE9002DDE845605A64756E2164756E21",
+  "names": []
+}

package/dist/react/embed/index.js

@@ -0,0 +1,130 @@
+import"../../chunks/contract-jksbmt5q.js";
+import {
+  attachDataAppBridge2,
+  attachDataAppShell2
+} from "../../chunks/contract-tqrf3ykr.js";
+
+// src/react/embed/bridge.tsx
+import { useRef, useLayoutEffect, useEffect } from "react";
+function DataAppBridge({
+  iframe,
+  connection,
+  onMessage,
+  onStatusChange,
+  onDiagnostic
+}) {
+  const handlers = useRef({ onMessage, onStatusChange, onDiagnostic });
+  useLayoutEffect(() => {
+    handlers.current = { onMessage, onStatusChange, onDiagnostic };
+  });
+  const identity = connection.type === "origin" ? connection.origin : connection.token;
+  const type = connection.type;
+  useEffect(() => {
+    const host = iframe?.ownerDocument.defaultView;
+    if (!iframe || !host)
+      return;
+    return attachDataAppBridge2({
+      iframe,
+      connection: type === "origin" ? { type, origin: identity } : { type, token: identity },
+      window: host,
+      onMessage(request, context) {
+        return handlers.current.onMessage(request, context);
+      },
+      onStatusChange(status) {
+        return handlers.current.onStatusChange?.(status);
+      },
+      onDiagnostic(event) {
+        return handlers.current.onDiagnostic?.(event);
+      }
+    });
+  }, [iframe, type, identity]);
+  return null;
+}
+// src/react/embed/shell.tsx
+import {
+  useEffect as useEffect2,
+  useLayoutEffect as useLayoutEffect2,
+  useRef as useRef2,
+  useReducer,
+  useState
+} from "react";
+import { jsx, jsxs, Fragment } from "react/jsx-runtime";
+function DataAppShell({
+  source,
+  title,
+  onMessage,
+  onStatusChange,
+  onDiagnostic,
+  startupTimeoutMs,
+  loading,
+  renderError
+}) {
+  const [iframe, setIframe] = useState(null);
+  const [attempt, bumpAttempt] = useReducer((value) => value + 1, 0);
+  const [status, setStatus] = useState("connecting");
+  const handlers = useRef2({ onMessage, onStatusChange, onDiagnostic });
+  useLayoutEffect2(() => {
+    handlers.current = { onMessage, onStatusChange, onDiagnostic };
+  });
+  const url = source.type === "url" ? source.url : source.bootstrapUrl;
+  const javascript = source.type === "bundle" ? source.javascript : undefined;
+  const revision = source.type === "bundle" ? source.revision : undefined;
+  const type = source.type;
+  const key = JSON.stringify([type, url, revision, javascript, attempt]);
+  useEffect2(() => {
+    if (!iframe)
+      return;
+    return attachDataAppShell2({
+      iframe,
+      source: type === "url" ? { type, url } : {
+        type,
+        bootstrapUrl: url,
+        javascript,
+        revision
+      },
+      startupTimeoutMs,
+      onMessage(message, context) {
+        return handlers.current.onMessage(message, context);
+      },
+      onDiagnostic(event) {
+        return handlers.current.onDiagnostic?.(event);
+      },
+      onStatusChange(value) {
+        setStatus(value);
+        handlers.current.onStatusChange?.(value);
+      }
+    });
+  }, [iframe, type, url, javascript, revision, startupTimeoutMs]);
+  function retry() {
+    setStatus("connecting");
+    bumpAttempt();
+  }
+  return /* @__PURE__ */ jsxs(Fragment, {
+    children: [
+      status !== "ready" && status !== "failed" && loading && /* @__PURE__ */ jsx("output", {
+        children: loading
+      }),
+      status === "failed" && (renderError?.(retry) ?? /* @__PURE__ */ jsxs("div", {
+        role: "alert",
+        children: [
+          "Could not load the data app. ",
+          /* @__PURE__ */ jsx("button", {
+            onClick: retry,
+            children: "Retry"
+          })
+        ]
+      })),
+      /* @__PURE__ */ jsx("iframe", {
+        ref: setIframe,
+        title,
+        hidden: status !== "ready"
+      }, key)
+    ]
+  });
+}
+export {
+  DataAppBridge,
+  DataAppShell
+};
+
+//# debugId=9408E7ADA67D784E64756E2164756E21

package/dist/react/embed/index.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/react/embed/bridge.tsx", "../src/react/embed/shell.tsx"],
+  "sourcesContent": [
+    "import { useRef, useLayoutEffect, useEffect, type ComponentRef } from 'react';\nimport {\n  attachDataAppBridge,\n  type DataAppConnection,\n  type DataAppStatus,\n  type DataAppDiagnostic,\n} from '@/src/embed/host';\nimport type { MessageDispatcher } from '@/src/core/messages';\n\nexport type DataAppBridgeProps = {\n  iframe: ComponentRef<'iframe'> | null;\n  connection: DataAppConnection;\n  onMessage: MessageDispatcher;\n  onStatusChange?: (status: DataAppStatus) => void;\n  onDiagnostic?: (event: DataAppDiagnostic) => void;\n};\n\n/** Delivery only; the host owns the iframe and route handlers, including navigation. */\nexport function DataAppBridge({\n  iframe,\n  connection,\n  onMessage,\n  onStatusChange,\n  onDiagnostic,\n}: DataAppBridgeProps) {\n  const handlers = useRef({ onMessage, onStatusChange, onDiagnostic });\n\n  useLayoutEffect(() => {\n    handlers.current = { onMessage, onStatusChange, onDiagnostic };\n  });\n\n  const identity =\n    connection.type === 'origin' ? connection.origin : connection.token;\n  const type = connection.type;\n\n  useEffect(() => {\n    const host = iframe?.ownerDocument.defaultView;\n    if (!iframe || !host) return;\n\n    return attachDataAppBridge({\n      iframe,\n      connection:\n        type === 'origin'\n          ? { type, origin: identity }\n          : { type, token: identity },\n      window: host,\n      onMessage(request, context) {\n        return handlers.current.onMessage(request, context);\n      },\n      onStatusChange(status) {\n        return handlers.current.onStatusChange?.(status);\n      },\n      onDiagnostic(event) {\n        return handlers.current.onDiagnostic?.(event);\n      },\n    });\n  }, [iframe, type, identity]);\n\n  return null;\n}\n",
+    "import {\n  useEffect,\n  useLayoutEffect,\n  useRef,\n  useReducer,\n  useState,\n  type ComponentRef,\n  type ReactNode,\n} from 'react';\nimport {\n  attachDataAppShell,\n  type DataAppSource,\n  type DataAppShellOptions,\n} from '@/src/embed/shell';\nimport type { DataAppStatus } from '@/src/embed/host';\n\nexport type DataAppShellProps = Pick<\n  DataAppShellOptions,\n  'onMessage' | 'onStatusChange' | 'onDiagnostic' | 'startupTimeoutMs'\n> & {\n  source: DataAppSource;\n  title: string;\n  loading?: ReactNode;\n  renderError?: (retry: () => void) => ReactNode;\n};\n\n/** Source changes and retries replace the entire frame; handler changes retain its session. */\nexport function DataAppShell({\n  source,\n  title,\n  onMessage,\n  onStatusChange,\n  onDiagnostic,\n  startupTimeoutMs,\n  loading,\n  renderError,\n}: DataAppShellProps) {\n  const [iframe, setIframe] = useState<ComponentRef<'iframe'> | null>(null);\n  const [attempt, bumpAttempt] = useReducer(value => value + 1, 0);\n  const [status, setStatus] = useState<DataAppStatus>('connecting');\n  const handlers = useRef({ onMessage, onStatusChange, onDiagnostic });\n\n  useLayoutEffect(() => {\n    handlers.current = { onMessage, onStatusChange, onDiagnostic };\n  });\n\n  const url = source.type === 'url' ? source.url : source.bootstrapUrl;\n  const javascript = source.type === 'bundle' ? source.javascript : undefined;\n  const revision = source.type === 'bundle' ? source.revision : undefined;\n  const type = source.type;\n  const key = JSON.stringify([type, url, revision, javascript, attempt]);\n\n  useEffect(() => {\n    if (!iframe) return;\n\n    return attachDataAppShell({\n      iframe,\n      source:\n        type === 'url'\n          ? { type, url }\n          : {\n              type,\n              bootstrapUrl: url,\n              javascript: javascript!,\n              revision: revision!,\n            },\n      startupTimeoutMs,\n      onMessage(message, context) {\n        return handlers.current.onMessage(message, context);\n      },\n      onDiagnostic(event) {\n        return handlers.current.onDiagnostic?.(event);\n      },\n      onStatusChange(value) {\n        setStatus(value);\n        handlers.current.onStatusChange?.(value);\n      },\n    });\n  }, [iframe, type, url, javascript, revision, startupTimeoutMs]);\n\n  function retry() {\n    setStatus('connecting');\n    bumpAttempt();\n  }\n\n  return (\n    <>\n      {status !== 'ready' && status !== 'failed' && loading && (\n        <output>{loading}</output>\n      )}\n      {status === 'failed' &&\n        (renderError?.(retry) ?? (\n          <div role=\"alert\">\n            Could not load the data app. <button onClick={retry}>Retry</button>\n          </div>\n        ))}\n      <iframe\n        key={key}\n        ref={setIframe}\n        title={title}\n        hidden={status !== 'ready'}\n      />\n    </>\n  );\n}\n"
+  ],
+  "mappings": ";;;;;;;AAAA;AAkBO,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,GACqB;AAAA,EACrB,MAAM,WAAW,OAAO,EAAE,WAAW,gBAAgB,aAAa,CAAC;AAAA,EAEnE,gBAAgB,MAAM;AAAA,IACpB,SAAS,UAAU,EAAE,WAAW,gBAAgB,aAAa;AAAA,GAC9D;AAAA,EAED,MAAM,WACJ,WAAW,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,EAChE,MAAM,OAAO,WAAW;AAAA,EAExB,UAAU,MAAM;AAAA,IACd,MAAM,OAAO,QAAQ,cAAc;AAAA,IACnC,IAAI,CAAC,UAAU,CAAC;AAAA,MAAM;AAAA,IAEtB,OAAO,qBAAoB;AAAA,MACzB;AAAA,MACA,YACE,SAAS,WACL,EAAE,MAAM,QAAQ,SAAS,IACzB,EAAE,MAAM,OAAO,SAAS;AAAA,MAC9B,QAAQ;AAAA,MACR,SAAS,CAAC,SAAS,SAAS;AAAA,QAC1B,OAAO,SAAS,QAAQ,UAAU,SAAS,OAAO;AAAA;AAAA,MAEpD,cAAc,CAAC,QAAQ;AAAA,QACrB,OAAO,SAAS,QAAQ,iBAAiB,MAAM;AAAA;AAAA,MAEjD,YAAY,CAAC,OAAO;AAAA,QAClB,OAAO,SAAS,QAAQ,eAAe,KAAK;AAAA;AAAA,IAEhD,CAAC;AAAA,KACA,CAAC,QAAQ,MAAM,QAAQ,CAAC;AAAA,EAE3B,OAAO;AAAA;;AC1DT;AAAA,eACE;AAAA,qBACA;AAAA,YACA;AAAA;AAAA;AAAA;;AAwBK,SAAS,YAAY;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,GACoB;AAAA,EACpB,OAAO,QAAQ,aAAa,SAAwC,IAAI;AAAA,EACxE,OAAO,SAAS,eAAe,WAAW,WAAS,QAAQ,GAAG,CAAC;AAAA,EAC/D,OAAO,QAAQ,aAAa,SAAwB,YAAY;AAAA,EAChE,MAAM,WAAW,QAAO,EAAE,WAAW,gBAAgB,aAAa,CAAC;AAAA,EAEnE,iBAAgB,MAAM;AAAA,IACpB,SAAS,UAAU,EAAE,WAAW,gBAAgB,aAAa;AAAA,GAC9D;AAAA,EAED,MAAM,MAAM,OAAO,SAAS,QAAQ,OAAO,MAAM,OAAO;AAAA,EACxD,MAAM,aAAa,OAAO,SAAS,WAAW,OAAO,aAAa;AAAA,EAClE,MAAM,WAAW,OAAO,SAAS,WAAW,OAAO,WAAW;AAAA,EAC9D,MAAM,OAAO,OAAO;AAAA,EACpB,MAAM,MAAM,KAAK,UAAU,CAAC,MAAM,KAAK,UAAU,YAAY,OAAO,CAAC;AAAA,EAErE,WAAU,MAAM;AAAA,IACd,IAAI,CAAC;AAAA,MAAQ;AAAA,IAEb,OAAO,oBAAmB;AAAA,MACxB;AAAA,MACA,QACE,SAAS,QACL,EAAE,MAAM,IAAI,IACZ;AAAA,QACE;AAAA,QACA,cAAc;AAAA,QACd;AAAA,QACA;AAAA,MACF;AAAA,MACN;AAAA,MACA,SAAS,CAAC,SAAS,SAAS;AAAA,QAC1B,OAAO,SAAS,QAAQ,UAAU,SAAS,OAAO;AAAA;AAAA,MAEpD,YAAY,CAAC,OAAO;AAAA,QAClB,OAAO,SAAS,QAAQ,eAAe,KAAK;AAAA;AAAA,MAE9C,cAAc,CAAC,OAAO;AAAA,QACpB,UAAU,KAAK;AAAA,QACf,SAAS,QAAQ,iBAAiB,KAAK;AAAA;AAAA,IAE3C,CAAC;AAAA,KACA,CAAC,QAAQ,MAAM,KAAK,YAAY,UAAU,gBAAgB,CAAC;AAAA,EAE9D,SAAS,KAAK,GAAG;AAAA,IACf,UAAU,YAAY;AAAA,IACtB,YAAY;AAAA;AAAA,EAGd,uBACE;AAAA,cAgBE;AAAA,MAfC,WAAW,WAAW,WAAW,YAAY,2BAC5C,IAAmB,UAAnB;AAAA,kBAAS;AAAA,OAAU;AAAA,MAEpB,WAAW,aACT,cAAc,KAAK,qBAClB,KAEE,OAFF;AAAA,QAAK,MAAK;AAAA,QAAV,UAEE;AAAA,UAFF;AAAA,0BAC+B,IAA+B,UAA/B;AAAA,YAAQ,SAAS;AAAA,YAAjB;AAAA,WAA+B;AAAA;AAAA,OAC5D;AAAA,sBAEN,IAAC,UAAD;AAAA,QAEE,KAAK;AAAA,QACL;AAAA,QACA,QAAQ,WAAW;AAAA,SAHd,GAIP;AAAA;AAAA,GACA;AAAA;",
+  "debugId": "9408E7ADA67D784E64756E2164756E21",
+  "names": []
+}