@altertable/data-app 0.61.0 → 0.62.0

package/dist/chunks/{contract-7gpsee0v.js → contract-rrm7s5zp.js}

@@ -1,6 +1,6 @@
 import {
   MessageRoutingError2
-} from "./contract-ehk50k7e.js";
+} from "./contract-3bnrf5pf.js";
 import {
   BRIDGE,
   PARENT_PARAM,
@@ -11,10 +11,11 @@ import {
 } from "./contract-ryyf6dme.js";
 
 // src/embed/host.ts
-function attachDataAppBridge2({
+function attachDataAppConnection({
   iframe,
   connection,
   javascript,
+  presentation,
   onStatusChange,
   onDiagnostic,
   onMessage,
@@ -27,9 +28,27 @@ function attachDataAppBridge2({
     throw new Error("Invalid sandbox token.");
   let token = connection.type === "opaque" ? connection.token : undefined;
   const targetOrigin = connection.type === "opaque" ? "*" : frameOrigin;
+  let currentPresentation;
+  let disposed = false;
   let documentId;
   let sessionId;
   const pending = new Map;
+  function hostState() {
+    return {
+      search: host.location.search,
+      hash: host.location.hash,
+      ...currentPresentation ? { presentation: currentPresentation } : {}
+    };
+  }
+  function setPresentation(value) {
+    if (disposed)
+      return;
+    if (value?.surface === currentPresentation?.surface && value?.theme === currentPresentation?.theme)
+      return;
+    currentPresentation = value && { ...value };
+    if (sessionId)
+      publishState();
+  }
   function cancelAll() {
     for (const controller of pending.values())
       controller.abort();
@@ -109,7 +128,7 @@ function attachDataAppBridge2({
       onStatusChange?.("connected");
       send({
         type: "bridge:initialize",
-        state: { search: host.location.search, hash: host.location.hash }
+        state: hostState()
       });
       if (javascript !== undefined)
         send({ type: "script:load", javascript });
@@ -133,10 +152,10 @@ function attachDataAppBridge2({
       onStatusChange?.("disconnected");
     }
   }
-  function navigate() {
+  function publishState() {
     send({
       type: "state:update",
-      state: { search: host.location.search, hash: host.location.hash }
+      state: hostState()
     });
   }
   function load() {
@@ -149,25 +168,28 @@ function attachDataAppBridge2({
     send({ type: "bridge:connect", documentId: "host" });
   }
   function dispose() {
+    disposed = true;
     cancelAll();
     iframe.removeEventListener("load", load);
     host.removeEventListener("message", receive);
-    host.removeEventListener("popstate", navigate);
+    host.removeEventListener("popstate", publishState);
     host.removeEventListener("pagehide", cancelAll);
   }
+  setPresentation(presentation);
   iframe.addEventListener("load", load);
   host.addEventListener("message", receive);
-  host.addEventListener("popstate", navigate);
+  host.addEventListener("popstate", publishState);
   host.addEventListener("pagehide", cancelAll);
   onStatusChange?.("connecting");
   send({ type: "bridge:connect", documentId: "host" });
-  return dispose;
+  return { dispose, setPresentation };
 }
 
-// src/embed/shell.ts
-function attachDataAppShell2({
+// src/embed/source.ts
+function attachDataAppSource({
   iframe,
   source,
+  presentation,
   onMessage,
   onStatusChange,
   onDiagnostic,
@@ -181,7 +203,7 @@ function attachDataAppShell2({
     throw new Error("Data apps require an HTTP(S) URL.");
   const opaque = source.type === "bundle";
   if (!opaque && url.origin === host.location.origin)
-    throw new Error("URL data apps require a separate origin from the shell.");
+    throw new Error("URL data apps require a separate origin from the host.");
   iframe.setAttribute("sandbox", opaque ? "allow-scripts" : "allow-scripts allow-same-origin allow-downloads allow-popups allow-popups-to-escape-sandbox");
   iframe.referrerPolicy = "no-referrer";
   if (!opaque)
@@ -197,19 +219,20 @@ function attachDataAppShell2({
     if (value === "connecting" || value === "connected")
       timer = setTimeout(() => {
         failed = true;
-        disposeBridge();
+        bridge.dispose();
         onStatusChange?.("failed");
       }, startupTimeoutMs);
     if (value === "failed") {
       failed = true;
-      disposeBridge();
+      bridge.dispose();
     }
     onStatusChange?.(value);
   }
-  const disposeBridge = attachDataAppBridge2({
+  const bridge = attachDataAppConnection({
     iframe,
     connection: opaque ? { type: "opaque", token: crypto.randomUUID() } : { type: "origin", origin: url.origin },
     javascript: opaque ? source.javascript : undefined,
+    presentation,
     onMessage,
     onStatusChange: status,
     onDiagnostic,
@@ -220,13 +243,19 @@ function attachDataAppShell2({
   }
   iframe.addEventListener("error", error);
   iframe.src = url.href;
-  return () => {
+  function dispose() {
     clearTimeout(timer);
     iframe.removeEventListener("error", error);
-    disposeBridge();
-  };
+    bridge.dispose();
+  }
+  return { dispose, setPresentation: bridge.setPresentation };
+}
+
+// src/embed/bridge.ts
+function attachDataAppBridge2(options) {
+  return options.source ? attachDataAppSource(options) : attachDataAppConnection(options);
 }
 
-export { attachDataAppBridge2, attachDataAppShell2 };
+export { attachDataAppBridge2 };
 
-//# debugId=2962A017228A422764756E2164756E21
+//# debugId=3C364E4A3943864564756E2164756E21

package/dist/chunks/contract-rrm7s5zp.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/embed/host.ts", "../src/embed/source.ts", "../src/embed/bridge.ts"],
+  "sourcesContent": [
+    "import type { DataAppPresentation } from '@/src/core/presentation';\nimport {\n  BRIDGE,\n  MAX_PENDING,\n  REQUEST_TIMEOUT_MS,\n  isBridgeMessage,\n  validId,\n  type BridgeMessage,\n} from '@/src/core/bridge';\n\nimport {\n  MessageRoutingError,\n  type MessageDispatcher,\n} from '@/src/core/messages';\n\nexport type DataAppConnection =\n  | { type: 'origin'; origin: string }\n  | { type: 'opaque'; token: string };\nexport type DataAppStatus =\n  | 'connecting'\n  | 'connected'\n  | 'ready'\n  | 'failed'\n  | 'disconnected';\nexport type DataAppDiagnostic = { direction: 'send' | 'receive'; type: string };\n\nexport type DataAppHost = {\n  dispose: () => void;\n  setPresentation: (presentation?: DataAppPresentation) => void;\n};\n\nexport type DataAppConnectionOptions = {\n  iframe: HTMLIFrameElement;\n  connection: DataAppConnection;\n  javascript?: string;\n  presentation?: DataAppPresentation;\n  onStatusChange?: (status: DataAppStatus) => void;\n  onDiagnostic?: (event: DataAppDiagnostic) => void;\n  onMessage: MessageDispatcher;\n  window?: Window;\n};\n\n/** The bridge owns delivery and cancellation; the routed handler owns validation, authorization and execution. */\nexport function attachDataAppConnection({\n  iframe,\n  connection,\n  javascript,\n  presentation,\n  onStatusChange,\n  onDiagnostic,\n  onMessage,\n  window: host = window,\n}: DataAppConnectionOptions): DataAppHost {\n  const frameOrigin = connection.type === 'origin' ? connection.origin : 'null';\n  if (\n    connection.type === 'origin' &&\n    new URL(frameOrigin).origin !== frameOrigin\n  )\n    throw new Error('Expected an exact frame origin.');\n  if (connection.type === 'opaque' && !validId(connection.token))\n    throw new Error('Invalid sandbox token.');\n  let token = connection.type === 'opaque' ? connection.token : undefined;\n  const targetOrigin = connection.type === 'opaque' ? '*' : frameOrigin;\n  let currentPresentation: DataAppPresentation | undefined;\n  let disposed = false;\n  let documentId: string | undefined;\n  let sessionId: string | undefined;\n  const pending = new Map<string, AbortController>();\n\n  function hostState() {\n    return {\n      search: host.location.search,\n      hash: host.location.hash,\n      ...(currentPresentation ? { presentation: currentPresentation } : {}),\n    };\n  }\n\n  function setPresentation(value: DataAppPresentation | undefined) {\n    if (disposed) return;\n    if (\n      value?.surface === currentPresentation?.surface &&\n      value?.theme === currentPresentation?.theme\n    )\n      return;\n    currentPresentation = value && { ...value };\n    if (sessionId) publishState();\n  }\n\n  function cancelAll() {\n    for (const controller of pending.values()) controller.abort();\n    pending.clear();\n  }\n\n  function send(message: Partial<BridgeMessage>) {\n    onDiagnostic?.({ direction: 'send', type: message.type ?? 'unknown' });\n    iframe.contentWindow?.postMessage(\n      {\n        channel: BRIDGE,\n        version: 1,\n        documentId,\n        sessionId,\n        ...(connection.type === 'opaque' ? { token } : {}),\n        ...message,\n      },\n      targetOrigin\n    );\n  }\n\n  function error(\n    id: string,\n    code: string,\n    message: string,\n    requestId?: string\n  ) {\n    send({ type: 'bridge:error', id, code, message, requestId });\n  }\n\n  async function request(message: BridgeMessage) {\n    const id = message.id;\n    if (!validId(id) || pending.has(id)) return;\n    if (pending.size >= MAX_PENDING)\n      return error(id, 'bridge_busy', 'Too many pending data requests.');\n    if (\n      typeof message.route !== 'string' ||\n      !message.route ||\n      message.route.length > 256\n    )\n      return error(id, 'invalid_message', 'Invalid message route.');\n    try {\n      const body = JSON.stringify(message.payload);\n      if (\n        message.payload !== undefined &&\n        (typeof body !== 'string' || body.length > 16_384)\n      )\n        throw new Error('Invalid payload');\n    } catch {\n      return error(\n        id,\n        'invalid_payload',\n        'The message payload is invalid or too large.'\n      );\n    }\n    const controller = new AbortController();\n    pending.set(id, controller);\n    const timer = setTimeout(() => {\n      if (pending.get(id) !== controller) return;\n      pending.delete(id);\n      controller.abort();\n      error(id, 'timeout', 'The data request timed out.');\n    }, REQUEST_TIMEOUT_MS);\n    controller.signal.addEventListener('abort', () => clearTimeout(timer), {\n      once: true,\n    });\n    try {\n      const response = await onMessage(\n        { route: message.route, payload: message.payload },\n        { signal: controller.signal }\n      );\n      if (pending.get(id) === controller)\n        send({ type: 'bridge:result', id, response });\n    } catch (failure) {\n      if (pending.get(id) === controller) {\n        if (failure instanceof MessageRoutingError)\n          error(id, failure.code, failure.message, failure.requestId);\n        else\n          error(\n            id,\n            'request_failed',\n            'The message request failed. Retry the request.'\n          );\n      }\n    } finally {\n      clearTimeout(timer);\n      if (pending.get(id) === controller) pending.delete(id);\n    }\n  }\n\n  function receive(event: MessageEvent) {\n    if (\n      event.origin !== frameOrigin ||\n      event.source !== iframe.contentWindow ||\n      !isBridgeMessage(event.data)\n    )\n      return;\n    const message = event.data;\n    if (connection.type === 'opaque' && message.token !== token) return;\n    onDiagnostic?.({ direction: 'receive', type: message.type });\n    if (message.type === 'bridge:ready') {\n      if (message.documentId !== documentId) {\n        cancelAll();\n        documentId = message.documentId;\n        sessionId = crypto.randomUUID();\n      }\n      onStatusChange?.('connected');\n      send({\n        type: 'bridge:initialize',\n        state: hostState(),\n      });\n      if (javascript !== undefined) send({ type: 'script:load', javascript });\n\n      return;\n    }\n    if (\n      !sessionId ||\n      message.sessionId !== sessionId ||\n      message.documentId !== documentId\n    )\n      return;\n    if (message.type === 'runtime:ready') onStatusChange?.('ready');\n    else if (message.type === 'runtime:error') onStatusChange?.('failed');\n    else if (message.type === 'bridge:request') void request(message);\n    else if (message.type === 'bridge:cancel' && validId(message.id)) {\n      pending.get(message.id)?.abort();\n      pending.delete(message.id);\n    } else if (message.type === 'bridge:disconnect') {\n      cancelAll();\n      documentId = undefined;\n      sessionId = undefined;\n      onStatusChange?.('disconnected');\n    }\n  }\n\n  function publishState() {\n    send({\n      type: 'state:update',\n      state: hostState(),\n    });\n  }\n\n  function load() {\n    if (connection.type === 'opaque') token = crypto.randomUUID();\n    cancelAll();\n    documentId = undefined;\n    sessionId = undefined;\n    onStatusChange?.('connecting');\n    send({ type: 'bridge:connect', documentId: 'host' });\n  }\n\n  function dispose() {\n    disposed = true;\n    cancelAll();\n    iframe.removeEventListener('load', load);\n    host.removeEventListener('message', receive);\n    host.removeEventListener('popstate', publishState);\n    host.removeEventListener('pagehide', cancelAll);\n  }\n\n  setPresentation(presentation);\n  iframe.addEventListener('load', load);\n  host.addEventListener('message', receive);\n  host.addEventListener('popstate', publishState);\n  host.addEventListener('pagehide', cancelAll);\n  // Reconnect an already-loaded iframe when its host bridge mounts again.\n  onStatusChange?.('connecting');\n  send({ type: 'bridge:connect', documentId: 'host' });\n\n  return { dispose, setPresentation };\n}\n",
+    "import type { DataAppPresentation } from '@/src/core/presentation';\nimport { PARENT_PARAM } from '@/src/core/bridge';\nimport type { MessageDispatcher } from '@/src/core/messages';\nimport {\n  attachDataAppConnection,\n  type DataAppStatus,\n  type DataAppHost,\n  type DataAppDiagnostic,\n} from '@/src/embed/host';\n\nexport type DataAppSource =\n  | { type: 'url'; url: string }\n  | {\n      type: 'bundle';\n      bootstrapUrl: string;\n      javascript: string;\n    };\nexport type DataAppSourceOptions = {\n  iframe: HTMLIFrameElement;\n  source: DataAppSource;\n  presentation?: DataAppPresentation;\n  onMessage: MessageDispatcher;\n  onStatusChange?: (status: DataAppStatus) => void;\n  onDiagnostic?: (event: DataAppDiagnostic) => void;\n  startupTimeoutMs?: number;\n};\n\n/** Owns loading and sandbox policy. Dispose before replacing the source or retrying. */\nexport function attachDataAppSource({\n  iframe,\n  source,\n  presentation,\n  onMessage,\n  onStatusChange,\n  onDiagnostic,\n  startupTimeoutMs = 30_000,\n}: DataAppSourceOptions): DataAppHost {\n  const host = iframe.ownerDocument.defaultView;\n  if (!host) throw new Error('The iframe requires a host window.');\n  const url = new URL(\n    source.type === 'url' ? source.url : source.bootstrapUrl,\n    host.location.href\n  );\n  if (!/^https?:$/.test(url.protocol))\n    throw new Error('Data apps require an HTTP(S) URL.');\n  const opaque = source.type === 'bundle';\n  if (!opaque && url.origin === host.location.origin)\n    throw new Error('URL data apps require a separate origin from the host.');\n  iframe.setAttribute(\n    'sandbox',\n    opaque\n      ? 'allow-scripts'\n      : 'allow-scripts allow-same-origin allow-downloads allow-popups allow-popups-to-escape-sandbox'\n  );\n  iframe.referrerPolicy = 'no-referrer';\n  if (!opaque) url.searchParams.set(PARENT_PARAM, host.location.origin);\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let failed = false;\n\n  function status(value: DataAppStatus) {\n    if (value === 'connecting') failed = false;\n    if (failed && value !== 'connecting') return;\n    clearTimeout(timer);\n    if (value === 'connecting' || value === 'connected')\n      timer = setTimeout(() => {\n        failed = true;\n        bridge.dispose();\n        onStatusChange?.('failed');\n      }, startupTimeoutMs);\n    if (value === 'failed') {\n      failed = true;\n      bridge.dispose();\n    }\n    onStatusChange?.(value);\n  }\n\n  const bridge = attachDataAppConnection({\n    iframe,\n    connection: opaque\n      ? { type: 'opaque', token: crypto.randomUUID() }\n      : { type: 'origin', origin: url.origin },\n    javascript: opaque ? source.javascript : undefined,\n    presentation,\n    onMessage,\n    onStatusChange: status,\n    onDiagnostic,\n    window: host,\n  });\n\n  function error() {\n    return status('failed');\n  }\n\n  iframe.addEventListener('error', error);\n  iframe.src = url.href;\n\n  function dispose() {\n    clearTimeout(timer);\n    iframe.removeEventListener('error', error);\n    bridge.dispose();\n  }\n\n  return { dispose, setPresentation: bridge.setPresentation };\n}\n",
+    "import {\n  attachDataAppConnection,\n  type DataAppConnectionOptions,\n} from '@/src/embed/host';\nimport {\n  attachDataAppSource,\n  type DataAppSourceOptions,\n} from '@/src/embed/source';\n\nexport type DataAppBridgeOptions =\n  | (DataAppSourceOptions & {\n      connection?: never;\n      window?: never;\n      javascript?: never;\n    })\n  | (DataAppConnectionOptions & { source?: never; startupTimeoutMs?: never });\n\n/** Source mode configures and loads the iframe; connection mode attaches to a host-owned document. */\nexport function attachDataAppBridge(options: DataAppBridgeOptions) {\n  return options.source\n    ? attachDataAppSource(options)\n    : attachDataAppConnection(options);\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;AA2CO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ,OAAO;AAAA,GACyB;AAAA,EACxC,MAAM,cAAc,WAAW,SAAS,WAAW,WAAW,SAAS;AAAA,EACvE,IACE,WAAW,SAAS,YACpB,IAAI,IAAI,WAAW,EAAE,WAAW;AAAA,IAEhC,MAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD,IAAI,WAAW,SAAS,YAAY,CAAC,QAAQ,WAAW,KAAK;AAAA,IAC3D,MAAM,IAAI,MAAM,wBAAwB;AAAA,EAC1C,IAAI,QAAQ,WAAW,SAAS,WAAW,WAAW,QAAQ;AAAA,EAC9D,MAAM,eAAe,WAAW,SAAS,WAAW,MAAM;AAAA,EAC1D,IAAI;AAAA,EACJ,IAAI,WAAW;AAAA,EACf,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,MAAM,UAAU,IAAI;AAAA,EAEpB,SAAS,SAAS,GAAG;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ,KAAK,SAAS;AAAA,MACtB,MAAM,KAAK,SAAS;AAAA,SAChB,sBAAsB,EAAE,cAAc,oBAAoB,IAAI,CAAC;AAAA,IACrE;AAAA;AAAA,EAGF,SAAS,eAAe,CAAC,OAAwC;AAAA,IAC/D,IAAI;AAAA,MAAU;AAAA,IACd,IACE,OAAO,YAAY,qBAAqB,WACxC,OAAO,UAAU,qBAAqB;AAAA,MAEtC;AAAA,IACF,sBAAsB,SAAS,KAAK,MAAM;AAAA,IAC1C,IAAI;AAAA,MAAW,aAAa;AAAA;AAAA,EAG9B,SAAS,SAAS,GAAG;AAAA,IACnB,WAAW,cAAc,QAAQ,OAAO;AAAA,MAAG,WAAW,MAAM;AAAA,IAC5D,QAAQ,MAAM;AAAA;AAAA,EAGhB,SAAS,IAAI,CAAC,SAAiC;AAAA,IAC7C,eAAe,EAAE,WAAW,QAAQ,MAAM,QAAQ,QAAQ,UAAU,CAAC;AAAA,IACrE,OAAO,eAAe,YACpB;AAAA,MACE,SAAS;AAAA,MACT,SAAS;AAAA,MACT;AAAA,MACA;AAAA,SACI,WAAW,SAAS,WAAW,EAAE,MAAM,IAAI,CAAC;AAAA,SAC7C;AAAA,IACL,GACA,YACF;AAAA;AAAA,EAGF,SAAS,KAAK,CACZ,IACA,MACA,SACA,WACA;AAAA,IACA,KAAK,EAAE,MAAM,gBAAgB,IAAI,MAAM,SAAS,UAAU,CAAC;AAAA;AAAA,EAG7D,eAAe,OAAO,CAAC,SAAwB;AAAA,IAC7C,MAAM,KAAK,QAAQ;AAAA,IACnB,IAAI,CAAC,QAAQ,EAAE,KAAK,QAAQ,IAAI,EAAE;AAAA,MAAG;AAAA,IACrC,IAAI,QAAQ,QAAQ;AAAA,MAClB,OAAO,MAAM,IAAI,eAAe,iCAAiC;AAAA,IACnE,IACE,OAAO,QAAQ,UAAU,YACzB,CAAC,QAAQ,SACT,QAAQ,MAAM,SAAS;AAAA,MAEvB,OAAO,MAAM,IAAI,mBAAmB,wBAAwB;AAAA,IAC9D,IAAI;AAAA,MACF,MAAM,OAAO,KAAK,UAAU,QAAQ,OAAO;AAAA,MAC3C,IACE,QAAQ,YAAY,cACnB,OAAO,SAAS,YAAY,KAAK,SAAS;AAAA,QAE3C,MAAM,IAAI,MAAM,iBAAiB;AAAA,MACnC,MAAM;AAAA,MACN,OAAO,MACL,IACA,mBACA,8CACF;AAAA;AAAA,IAEF,MAAM,aAAa,IAAI;AAAA,IACvB,QAAQ,IAAI,IAAI,UAAU;AAAA,IAC1B,MAAM,QAAQ,WAAW,MAAM;AAAA,MAC7B,IAAI,QAAQ,IAAI,EAAE,MAAM;AAAA,QAAY;AAAA,MACpC,QAAQ,OAAO,EAAE;AAAA,MACjB,WAAW,MAAM;AAAA,MACjB,MAAM,IAAI,WAAW,6BAA6B;AAAA,OACjD,kBAAkB;AAAA,IACrB,WAAW,OAAO,iBAAiB,SAAS,MAAM,aAAa,KAAK,GAAG;AAAA,MACrE,MAAM;AAAA,IACR,CAAC;AAAA,IACD,IAAI;AAAA,MACF,MAAM,WAAW,MAAM,UACrB,EAAE,OAAO,QAAQ,OAAO,SAAS,QAAQ,QAAQ,GACjD,EAAE,QAAQ,WAAW,OAAO,CAC9B;AAAA,MACA,IAAI,QAAQ,IAAI,EAAE,MAAM;AAAA,QACtB,KAAK,EAAE,MAAM,iBAAiB,IAAI,SAAS,CAAC;AAAA,MAC9C,OAAO,SAAS;AAAA,MAChB,IAAI,QAAQ,IAAI,EAAE,MAAM,YAAY;AAAA,QAClC,IAAI,mBAAmB;AAAA,UACrB,MAAM,IAAI,QAAQ,MAAM,QAAQ,SAAS,QAAQ,SAAS;AAAA,QAE1D;AAAA,gBACE,IACA,kBACA,gDACF;AAAA,MACJ;AAAA,cACA;AAAA,MACA,aAAa,KAAK;AAAA,MAClB,IAAI,QAAQ,IAAI,EAAE,MAAM;AAAA,QAAY,QAAQ,OAAO,EAAE;AAAA;AAAA;AAAA,EAIzD,SAAS,OAAO,CAAC,OAAqB;AAAA,IACpC,IACE,MAAM,WAAW,eACjB,MAAM,WAAW,OAAO,iBACxB,CAAC,gBAAgB,MAAM,IAAI;AAAA,MAE3B;AAAA,IACF,MAAM,UAAU,MAAM;AAAA,IACtB,IAAI,WAAW,SAAS,YAAY,QAAQ,UAAU;AAAA,MAAO;AAAA,IAC7D,eAAe,EAAE,WAAW,WAAW,MAAM,QAAQ,KAAK,CAAC;AAAA,IAC3D,IAAI,QAAQ,SAAS,gBAAgB;AAAA,MACnC,IAAI,QAAQ,eAAe,YAAY;AAAA,QACrC,UAAU;AAAA,QACV,aAAa,QAAQ;AAAA,QACrB,YAAY,OAAO,WAAW;AAAA,MAChC;AAAA,MACA,iBAAiB,WAAW;AAAA,MAC5B,KAAK;AAAA,QACH,MAAM;AAAA,QACN,OAAO,UAAU;AAAA,MACnB,CAAC;AAAA,MACD,IAAI,eAAe;AAAA,QAAW,KAAK,EAAE,MAAM,eAAe,WAAW,CAAC;AAAA,MAEtE;AAAA,IACF;AAAA,IACA,IACE,CAAC,aACD,QAAQ,cAAc,aACtB,QAAQ,eAAe;AAAA,MAEvB;AAAA,IACF,IAAI,QAAQ,SAAS;AAAA,MAAiB,iBAAiB,OAAO;AAAA,IACzD,SAAI,QAAQ,SAAS;AAAA,MAAiB,iBAAiB,QAAQ;AAAA,IAC/D,SAAI,QAAQ,SAAS;AAAA,MAAuB,QAAQ,OAAO;AAAA,IAC3D,SAAI,QAAQ,SAAS,mBAAmB,QAAQ,QAAQ,EAAE,GAAG;AAAA,MAChE,QAAQ,IAAI,QAAQ,EAAE,GAAG,MAAM;AAAA,MAC/B,QAAQ,OAAO,QAAQ,EAAE;AAAA,IAC3B,EAAO,SAAI,QAAQ,SAAS,qBAAqB;AAAA,MAC/C,UAAU;AAAA,MACV,aAAa;AAAA,MACb,YAAY;AAAA,MACZ,iBAAiB,cAAc;AAAA,IACjC;AAAA;AAAA,EAGF,SAAS,YAAY,GAAG;AAAA,IACtB,KAAK;AAAA,MACH,MAAM;AAAA,MACN,OAAO,UAAU;AAAA,IACnB,CAAC;AAAA;AAAA,EAGH,SAAS,IAAI,GAAG;AAAA,IACd,IAAI,WAAW,SAAS;AAAA,MAAU,QAAQ,OAAO,WAAW;AAAA,IAC5D,UAAU;AAAA,IACV,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,iBAAiB,YAAY;AAAA,IAC7B,KAAK,EAAE,MAAM,kBAAkB,YAAY,OAAO,CAAC;AAAA;AAAA,EAGrD,SAAS,OAAO,GAAG;AAAA,IACjB,WAAW;AAAA,IACX,UAAU;AAAA,IACV,OAAO,oBAAoB,QAAQ,IAAI;AAAA,IACvC,KAAK,oBAAoB,WAAW,OAAO;AAAA,IAC3C,KAAK,oBAAoB,YAAY,YAAY;AAAA,IACjD,KAAK,oBAAoB,YAAY,SAAS;AAAA;AAAA,EAGhD,gBAAgB,YAAY;AAAA,EAC5B,OAAO,iBAAiB,QAAQ,IAAI;AAAA,EACpC,KAAK,iBAAiB,WAAW,OAAO;AAAA,EACxC,KAAK,iBAAiB,YAAY,YAAY;AAAA,EAC9C,KAAK,iBAAiB,YAAY,SAAS;AAAA,EAE3C,iBAAiB,YAAY;AAAA,EAC7B,KAAK,EAAE,MAAM,kBAAkB,YAAY,OAAO,CAAC;AAAA,EAEnD,OAAO,EAAE,SAAS,gBAAgB;AAAA;;;ACpO7B,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,mBAAmB;AAAA,GACiB;AAAA,EACpC,MAAM,OAAO,OAAO,cAAc;AAAA,EAClC,IAAI,CAAC;AAAA,IAAM,MAAM,IAAI,MAAM,oCAAoC;AAAA,EAC/D,MAAM,MAAM,IAAI,IACd,OAAO,SAAS,QAAQ,OAAO,MAAM,OAAO,cAC5C,KAAK,SAAS,IAChB;AAAA,EACA,IAAI,CAAC,YAAY,KAAK,IAAI,QAAQ;AAAA,IAChC,MAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD,MAAM,SAAS,OAAO,SAAS;AAAA,EAC/B,IAAI,CAAC,UAAU,IAAI,WAAW,KAAK,SAAS;AAAA,IAC1C,MAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E,OAAO,aACL,WACA,SACI,kBACA,6FACN;AAAA,EACA,OAAO,iBAAiB;AAAA,EACxB,IAAI,CAAC;AAAA,IAAQ,IAAI,aAAa,IAAI,cAAc,KAAK,SAAS,MAAM;AAAA,EACpE,IAAI;AAAA,EACJ,IAAI,SAAS;AAAA,EAEb,SAAS,MAAM,CAAC,OAAsB;AAAA,IACpC,IAAI,UAAU;AAAA,MAAc,SAAS;AAAA,IACrC,IAAI,UAAU,UAAU;AAAA,MAAc;AAAA,IACtC,aAAa,KAAK;AAAA,IAClB,IAAI,UAAU,gBAAgB,UAAU;AAAA,MACtC,QAAQ,WAAW,MAAM;AAAA,QACvB,SAAS;AAAA,QACT,OAAO,QAAQ;AAAA,QACf,iBAAiB,QAAQ;AAAA,SACxB,gBAAgB;AAAA,IACrB,IAAI,UAAU,UAAU;AAAA,MACtB,SAAS;AAAA,MACT,OAAO,QAAQ;AAAA,IACjB;AAAA,IACA,iBAAiB,KAAK;AAAA;AAAA,EAGxB,MAAM,SAAS,wBAAwB;AAAA,IACrC;AAAA,IACA,YAAY,SACR,EAAE,MAAM,UAAU,OAAO,OAAO,WAAW,EAAE,IAC7C,EAAE,MAAM,UAAU,QAAQ,IAAI,OAAO;AAAA,IACzC,YAAY,SAAS,OAAO,aAAa;AAAA,IACzC;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,IAChB;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AAAA,EAED,SAAS,KAAK,GAAG;AAAA,IACf,OAAO,OAAO,QAAQ;AAAA;AAAA,EAGxB,OAAO,iBAAiB,SAAS,KAAK;AAAA,EACtC,OAAO,MAAM,IAAI;AAAA,EAEjB,SAAS,OAAO,GAAG;AAAA,IACjB,aAAa,KAAK;AAAA,IAClB,OAAO,oBAAoB,SAAS,KAAK;AAAA,IACzC,OAAO,QAAQ;AAAA;AAAA,EAGjB,OAAO,EAAE,SAAS,iBAAiB,OAAO,gBAAgB;AAAA;;;ACpFrD,SAAS,oBAAmB,CAAC,SAA+B;AAAA,EACjE,OAAO,QAAQ,SACX,oBAAoB,OAAO,IAC3B,wBAAwB,OAAO;AAAA;",
+  "debugId": "3C364E4A3943864564756E2164756E21",
+  "names": []
+}

package/dist/chunks/{contract-d9skd1n7.js → contract-xjv197ck.js}

@@ -1,7 +1,11 @@
 import {
   MessageRoutingError2,
-  defineDataQueryRoute2
-} from "./contract-ehk50k7e.js";
+  defineDataQueryRoute2,
+  sqlQueryRoute2
+} from "./contract-3bnrf5pf.js";
+import {
+  DataSourceError2
+} from "./contract-nt819swq.js";
 import {
   BRIDGE,
   PARENT_PARAM,
@@ -78,6 +82,11 @@ function createMessageClient2(routes, transport) {
 }
 
 // src/client/iframe.ts
+function rethrowDataMessageError(error) {
+  if (error instanceof MessageRoutingError2)
+    throw new DataAppError2(error.message, error.code, error.requestId);
+  throw error;
+}
 function createIframeTransport2({
   parentOrigin,
   window: frame = window,
@@ -217,15 +226,9 @@ function createIframeTransport2({
         send({ type: "bridge:ready" });
     });
   }
-  const messages = createMessageClient2({ "data:query": defineDataQueryRoute2() }, requestMessage);
-  async function queryData(operation, input, signal) {
-    try {
-      return await messages.request("data:query", { operation, input }, { signal });
-    } catch (error) {
-      if (error instanceof MessageRoutingError2)
-        throw new DataAppError2(error.message, error.code, error.requestId);
-      throw error;
-    }
+  const messages = createMessageClient2({ "data:query": defineDataQueryRoute2(), "data:sql": sqlQueryRoute2 }, requestMessage);
+  function queryOperation(operation, input, signal) {
+    return messages.request("data:query", { operation, input }, { signal }).catch(rethrowDataMessageError);
   }
   function disconnect() {
     send({ type: "bridge:disconnect" });
@@ -253,7 +256,12 @@ function createIframeTransport2({
     send({ type: "bridge:ready" });
   return {
     request: requestMessage,
-    transport: queryData,
+    transport: queryOperation,
+    lakehouse: {
+      queryAll(statement, { limit, signal }) {
+        return messages.request("data:sql", { statement, limit }, { signal }).catch(rethrowDataMessageError);
+      }
+    },
     dispose,
     mode,
     snapshot() {
@@ -370,6 +378,145 @@ function getDataAppTransport2(frame = window) {
   return frame[installedKey];
 }
 
-export { DataAppError2, createHttpTransport2, createMessageClient2, createIframeTransport2, localFrameBridge, installDataAppTransport2, getDataAppTransport2 };
+// src/core/operation.ts
+async function executeDataOperation(operation, value, {
+  operationName,
+  lakehouse,
+  signal: requestSignal,
+  includeSql,
+  requestId
+}) {
+  requestSignal.throwIfAborted();
+  let input;
+  try {
+    input = operation.input(value);
+  } catch {
+    throw new OperationInputError;
+  }
+  const signal = AbortSignal.any([
+    requestSignal,
+    AbortSignal.timeout(operation.policy.maxDurationMs)
+  ]);
+  const execution = createOperationLakehouse(operation, lakehouse, signal, operationName);
+  try {
+    const output = await runOperation(operation, input, {
+      lakehouse: execution.lakehouse,
+      signal
+    });
+    const body = {
+      data: operation.output(output),
+      requestId,
+      queriedAt: new Date().toISOString(),
+      queryIds: execution.queryIds,
+      ...operation.policy.exposeSql && includeSql ? { queries: execution.queries } : {}
+    };
+    const serializedBody = JSON.stringify(body);
+    const responseBytes = new TextEncoder().encode(serializedBody).byteLength;
+    if (responseBytes > (operation.policy.maxResponseBytes ?? 1e6))
+      throw new Error("Response exceeds byte limit.");
+    return { body, serializedBody };
+  } catch (error) {
+    if (signal.aborted && !(error instanceof DataSourceError2))
+      throw new OperationTimeoutError;
+    throw error;
+  }
+}
+function createOperationLakehouse(operation, source, signal, operationName) {
+  const queryIds = [];
+  const queries = [];
+  const lakehouse = {
+    async queryAll(statement, options) {
+      if (!Number.isInteger(options.limit) || options.limit < 1)
+        throw new Error("Query needs a positive row limit.");
+      if (operation.queryNames && !Object.values(operation.queryNames).includes(options.name ?? ""))
+        throw new Error(`Query name is not registered for operation ${operationName}.`);
+      const query = {
+        name: options.name ?? `Query ${queries.length + 1}`,
+        statement
+      };
+      queries.push(query);
+      const limit = Math.min(options.limit, operation.policy.maxQueryRows);
+      let result;
+      try {
+        result = await source.queryAll(statement, {
+          limit,
+          signal: AbortSignal.any([signal, options.signal])
+        });
+      } catch (error) {
+        if (error instanceof DataSourceError2)
+          error.queryName = query.name;
+        throw error;
+      }
+      if (result.rows.length > limit)
+        throw new Error("Result exceeds row limit.");
+      if (result.queryId) {
+        query.queryId = result.queryId;
+        queryIds.push(result.queryId);
+      }
+      return result;
+    }
+  };
+  return { lakehouse, queries, queryIds };
+}
+async function runOperation(operation, input, { lakehouse, signal }) {
+  let abort;
+  try {
+    signal.throwIfAborted();
+    const cancelled = new Promise((_, reject) => {
+      function rejectAborted() {
+        reject(new Error("Request aborted."));
+      }
+      abort = rejectAborted;
+      signal.addEventListener("abort", rejectAborted, { once: true });
+      if (signal.aborted)
+        rejectAborted();
+    });
+    return await Promise.race([
+      cancelled,
+      Promise.resolve().then(() => {
+        signal.throwIfAborted();
+        return operation.run({ lakehouse, signal }, input);
+      })
+    ]);
+  } finally {
+    if (abort)
+      signal.removeEventListener("abort", abort);
+  }
+}
+
+class OperationTimeoutError extends Error {
+}
+
+class OperationInputError extends Error {
+}
+var sourceErrorMessages = {
+  unauthorized: "This app could not authenticate its data connection. Contact the app owner.",
+  forbidden: "This app cannot access the requested data. Contact the app owner.",
+  rate_limited: "The lakehouse is busy. Wait a moment and retry.",
+  query_rejected: "A lakehouse query was rejected. Check the app's data operation.",
+  unavailable: "The lakehouse is unavailable. Check the connection and retry."
+};
+function toDataOperationFailure(error, aborted = false) {
+  if (error instanceof OperationInputError)
+    return {
+      status: 400,
+      code: "invalid_input",
+      message: "Check this operation's inputs."
+    };
+  if (error instanceof DataSourceError2)
+    return {
+      status: error.reason === "rate_limited" ? 429 : 502,
+      code: `source_${error.reason}`,
+      message: sourceErrorMessages[error.reason]
+    };
+  const timedOut = aborted || error instanceof OperationTimeoutError;
+  return {
+    status: timedOut ? 504 : 502,
+    code: timedOut ? "timeout" : "query_failed",
+    message: timedOut ? "The data request timed out." : "The data request failed."
+  };
+}
+
+export { DataAppError2, createHttpTransport2, createMessageClient2, createIframeTransport2, localFrameBridge, installDataAppTransport2, getDataAppTransport2, executeDataOperation, toDataOperationFailure };
 
-//# debugId=8A923FD5B245BF3C64756E2164756E21
+//# debugId=A5D6917EB066FFF364756E2164756E21

package/dist/chunks/contract-xjv197ck.js.map

@@ -0,0 +1,13 @@
+{
+  "version": 3,
+  "sources": ["../src/client/transport.ts", "../src/client/messages.ts", "../src/client/iframe.ts", "../src/core/operation.ts"],
+  "sourcesContent": [
+    "import type { TransportResponse } from '@/src/core/bridge';\n\nexport type DataTransport = (\n  operation: string,\n  input: unknown,\n  signal?: AbortSignal\n) => Promise<TransportResponse>;\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/DataAppError');\n\nexport class DataAppError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    message: string,\n    public readonly code: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'DataAppError';\n  }\n}\n\nexport function createHttpTransport({\n  endpoint = '/api/data',\n  fetch: request = globalThis.fetch,\n}: {\n  endpoint?: string;\n  fetch?: typeof fetch;\n} = {}): DataTransport {\n  async function requestData(\n    operation: string,\n    input: unknown,\n    signal?: AbortSignal\n  ): Promise<TransportResponse> {\n    const response = await request(\n      `${endpoint.replace(/\\/$/, '')}/${encodeURIComponent(operation)}`,\n      {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify(input),\n        signal,\n      }\n    );\n    try {\n      return { status: response.status, body: await response.json() };\n    } catch (error) {\n      if (signal?.aborted) throw error;\n      throw new DataAppError(\n        response.ok ? 'The data response was invalid.' : 'Could not load data.',\n        response.ok ? 'invalid_response' : 'request_failed'\n      );\n    }\n  }\n\n  return requestData;\n}\n",
+    "import {\n  MessageRoutingError,\n  type MessageInput,\n  type MessageOutput,\n  type MessageRoutes,\n  type MessageTransport,\n} from '@/src/core/messages';\n\n/** Both ends validate using the same contracts; the transport owns delivery and cancellation. */\nexport function createMessageClient<const Routes extends MessageRoutes>(\n  routes: Routes,\n  transport: MessageTransport\n) {\n  return {\n    async request<\n      Name extends keyof Routes & string,\n      const Input extends MessageInput<NoInfer<Routes[Name]>>,\n    >(\n      route: Name,\n      payload: Input,\n      { signal }: { signal?: AbortSignal } = {}\n    ): Promise<MessageOutput<Routes[Name], Input>> {\n      signal?.throwIfAborted();\n      if (!Object.hasOwn(routes, route))\n        throw new MessageRoutingError(\n          'unknown_route',\n          'Unknown message route.'\n        );\n      const contract = routes[route]!;\n      let input: unknown;\n      try {\n        input = contract.input(payload);\n      } catch {\n        throw new MessageRoutingError(\n          'invalid_payload',\n          'Invalid message payload.'\n        );\n      }\n      const response = await transport({ route, payload: input }, signal);\n      signal?.throwIfAborted();\n      try {\n        return contract.output(response, input as never) as MessageOutput<\n          Routes[Name],\n          Input\n        >;\n      } catch (error) {\n        if (error instanceof MessageRoutingError) throw error;\n        throw new MessageRoutingError(\n          'invalid_response',\n          'Invalid message response.'\n        );\n      }\n    },\n  };\n}\n",
+    "import {\n  BRIDGE,\n  PARENT_PARAM,\n  MAX_PENDING,\n  REQUEST_TIMEOUT_MS,\n  isBridgeMessage,\n  validId,\n  type BridgeMessage,\n  type TransportResponse,\n} from '@/src/core/bridge';\nimport {\n  defineDataQueryRoute,\n  sqlQueryRoute,\n  MessageRoutingError,\n  type RoutedMessage,\n} from '@/src/core/messages';\nimport type { Lakehouse } from '@/src/core/contract';\nimport { createMessageClient } from '@/src/client/messages';\nimport { DataAppError } from '@/src/client/transport';\n\ntype Pending = {\n  start: () => void;\n  reject: (error: unknown) => void;\n  resolve: (value: unknown) => void;\n};\n\n/** Data clients expose one error type for HTTP and message delivery. */\nfunction rethrowDataMessageError(error: unknown): never {\n  if (error instanceof MessageRoutingError)\n    throw new DataAppError(error.message, error.code, error.requestId);\n  throw error;\n}\n\n/** One bridge per document, shared by all clients and retained across module hot replacement. */\nexport function createIframeTransport({\n  parentOrigin,\n  window: frame = window,\n  timeoutMs = REQUEST_TIMEOUT_MS,\n  mode = 'url',\n  loadScript,\n}: {\n  parentOrigin: string;\n  window?: Window;\n  timeoutMs?: number;\n  mode?: 'url' | 'bundle';\n  loadScript?: (javascript: string) => void;\n}) {\n  if (new URL(parentOrigin).origin !== parentOrigin)\n    throw new Error('Expected an exact parent origin.');\n  const documentId = crypto.randomUUID();\n  let token: string | undefined;\n  let sessionId: string | undefined;\n  let disposed = false;\n  const pending = new Map<string, Pending>();\n  let hostState: unknown;\n  const stateListeners = new Set<(state: unknown) => void>();\n\n  function send(message: Partial<BridgeMessage>) {\n    frame.parent.postMessage(\n      { channel: BRIDGE, version: 1, documentId, sessionId, token, ...message },\n      parentOrigin\n    );\n  }\n\n  function receiveState(state: unknown) {\n    hostState = state;\n    for (const listener of stateListeners) listener(state);\n  }\n\n  function receive(event: MessageEvent) {\n    if (\n      event.origin !== parentOrigin ||\n      event.source !== frame.parent ||\n      !isBridgeMessage(event.data)\n    )\n      return;\n    const message = event.data;\n    if (message.type === 'bridge:connect') {\n      if (mode === 'bundle') {\n        if (!validId(message.token)) return;\n        token = message.token;\n      }\n      send({ type: 'bridge:ready' });\n\n      return;\n    }\n    if (mode === 'bundle' && (!token || message.token !== token)) return;\n    if (message.documentId !== documentId) return;\n    if (message.type === 'bridge:initialize' && validId(message.sessionId)) {\n      if (sessionId && sessionId !== message.sessionId) {\n        for (const entry of pending.values())\n          entry.reject(\n            new DataAppError(\n              'The preview reconnected. Retry the request.',\n              'bridge_reset'\n            )\n          );\n      }\n      const first = !sessionId;\n      sessionId = message.sessionId;\n      if (first) for (const entry of pending.values()) entry.start();\n      receiveState(message.state);\n      if (mode === 'url') send({ type: 'runtime:ready' });\n\n      return;\n    }\n    if (!sessionId || message.sessionId !== sessionId) return;\n    if (message.type === 'state:update') {\n      receiveState(message.state);\n\n      return;\n    }\n    if (\n      message.type === 'script:load' &&\n      mode === 'bundle' &&\n      typeof message.javascript === 'string'\n    ) {\n      loadScript?.(message.javascript);\n\n      return;\n    }\n    if (typeof message.id !== 'string') return;\n    const entry = pending.get(message.id);\n    if (!entry) return;\n    if (message.type === 'bridge:result' && 'response' in message) {\n      entry.resolve(message.response);\n    } else if (\n      message.type === 'bridge:error' &&\n      typeof message.code === 'string' &&\n      typeof message.message === 'string'\n    ) {\n      entry.reject(\n        new MessageRoutingError(\n          message.code,\n          message.message,\n          typeof message.requestId === 'string' ? message.requestId : undefined\n        )\n      );\n    }\n  }\n\n  frame.addEventListener('message', receive);\n\n  function requestMessage(\n    message: RoutedMessage,\n    signal?: AbortSignal\n  ): Promise<unknown> {\n    return new Promise((resolve, reject) => {\n      if (disposed)\n        return reject(\n          new DataAppError('The preview has closed.', 'bridge_closed')\n        );\n      if (signal?.aborted) return reject(signal.reason);\n      if (pending.size >= MAX_PENDING)\n        return reject(\n          new DataAppError('Too many pending data requests.', 'bridge_busy')\n        );\n      const id = crypto.randomUUID();\n      let sent = false;\n\n      function cleanup() {\n        clearTimeout(timer);\n        signal?.removeEventListener('abort', abort);\n        pending.delete(id);\n      }\n\n      function abort() {\n        if (sent) send({ type: 'bridge:cancel', id });\n        cleanup();\n        reject(signal?.reason);\n      }\n\n      const timer = setTimeout(() => {\n        if (sent) send({ type: 'bridge:cancel', id });\n        cleanup();\n        reject(\n          new DataAppError(\n            sessionId\n              ? 'The data request timed out.'\n              : 'The preview shell is unavailable. Reload the preview.',\n            sessionId ? 'timeout' : 'bridge_unavailable'\n          )\n        );\n      }, timeoutMs);\n      const entry: Pending = {\n        start() {\n          if (sent) return;\n          try {\n            send({\n              type: 'bridge:request',\n              id,\n              route: message.route,\n              payload: message.payload,\n            });\n            sent = true;\n          } catch {\n            cleanup();\n            reject(\n              new DataAppError(\n                'The message payload could not be sent.',\n                'invalid_payload'\n              )\n            );\n          }\n        },\n        resolve(value) {\n          cleanup();\n          resolve(value);\n        },\n        reject(error) {\n          cleanup();\n          reject(error);\n        },\n      };\n      pending.set(id, entry);\n      signal?.addEventListener('abort', abort, { once: true });\n      if (sessionId) entry.start();\n      else send({ type: 'bridge:ready' });\n    });\n  }\n\n  const messages = createMessageClient(\n    { 'data:query': defineDataQueryRoute(), 'data:sql': sqlQueryRoute },\n    requestMessage\n  );\n\n  function queryOperation(\n    operation: string,\n    input: unknown,\n    signal?: AbortSignal\n  ): Promise<TransportResponse> {\n    return messages\n      .request('data:query', { operation, input }, { signal })\n      .catch(rethrowDataMessageError);\n  }\n\n  function disconnect() {\n    send({ type: 'bridge:disconnect' });\n    sessionId = undefined;\n    for (const entry of pending.values())\n      entry.reject(\n        new DataAppError('The preview has closed.', 'bridge_closed')\n      );\n  }\n\n  function resume(event: PageTransitionEvent) {\n    if (event.persisted) send({ type: 'bridge:ready' });\n  }\n\n  function dispose() {\n    if (disposed) return;\n    disconnect();\n    disposed = true;\n    frame.removeEventListener('message', receive);\n    frame.removeEventListener('pagehide', disconnect);\n    frame.removeEventListener('pageshow', resume);\n    stateListeners.clear();\n  }\n\n  frame.addEventListener('pagehide', disconnect);\n  frame.addEventListener('pageshow', resume);\n  if (mode === 'url') send({ type: 'bridge:ready' });\n\n  return {\n    request: requestMessage,\n    transport: queryOperation,\n    lakehouse: {\n      queryAll(statement, { limit, signal }) {\n        return messages\n          .request('data:sql', { statement, limit }, { signal })\n          .catch(rethrowDataMessageError);\n      },\n    } satisfies Lakehouse,\n    dispose,\n    mode,\n    snapshot() {\n      return hostState;\n    },\n    subscribe(listener: (state: unknown) => void) {\n      stateListeners.add(listener);\n\n      return () => {\n        stateListeners.delete(listener);\n      };\n    },\n    ready() {\n      send({ type: 'runtime:ready' });\n    },\n    fail() {\n      send({ type: 'runtime:error' });\n    },\n  };\n}\n\nexport type IframeTransport = ReturnType<typeof createIframeTransport>;\n\nconst bridgeKey = Symbol.for('altertable.localFrameBridge');\nconst installedKey = Symbol.for('altertable.installedTransport');\ntype LocalBridge = Pick<\n  ReturnType<typeof createIframeTransport>,\n  'transport'\n> & { connect?: () => Promise<ReturnType<typeof createIframeTransport>> };\ntype FrameWindow = Window & {\n  [bridgeKey]?: LocalBridge;\n  [installedKey]?: ReturnType<typeof createIframeTransport>;\n};\n\n/** The URL opts into local preview; only same-origin server configuration establishes trust. */\nexport function localFrameBridge(window?: Window): LocalBridge | undefined {\n  const activeWindow =\n    window ??\n    (typeof globalThis.window === 'undefined' ? undefined : globalThis.window);\n  if (!activeWindow) return undefined;\n  const frame = activeWindow as FrameWindow;\n  if (frame[bridgeKey]) return frame[bridgeKey];\n  const parentOrigin =\n    new URL(frame.location.href).searchParams.get(PARENT_PARAM) ?? '';\n  if (!parentOrigin) return undefined;\n\n  async function connect(parentOrigin: string) {\n    try {\n      const response = await frame.fetch('/__altertable/parent', {\n        signal: AbortSignal.timeout(5000),\n      });\n      const config = (await response.json()) as { origin?: unknown };\n      if (\n        !response.ok ||\n        config.origin !== parentOrigin ||\n        frame.parent === frame\n      )\n        throw new Error('Invalid local parent configuration.');\n      // Another owner can install a trusted bridge while configuration is pending.\n      if (frame[installedKey]) return frame[installedKey];\n      if (frame[bridgeKey] !== proxy)\n        throw new Error('Preview transport owner changed.');\n      const bridge = createIframeTransport({ parentOrigin, window: frame });\n      frame[bridgeKey] = bridge;\n      frame[installedKey] = bridge;\n\n      return bridge;\n    } catch {\n      throw new DataAppError(\n        'The preview shell could not be verified. Open the URL printed by altertable app dev.',\n        'bridge_unavailable'\n      );\n    }\n  }\n\n  let connection: Promise<ReturnType<typeof createIframeTransport>> | undefined;\n\n  function getConnection() {\n    const installed = frame[installedKey];\n    if (installed) return Promise.resolve(installed);\n    if (!connection) {\n      const attempt = connect(parentOrigin);\n      connection = attempt;\n      // Clear only this failed attempt; retained proxy references can explicitly retry.\n      void attempt.catch(() => {\n        if (connection === attempt) connection = undefined;\n      });\n    }\n\n    return connection;\n  }\n\n  const proxy: LocalBridge = {\n    async transport(operation, input, signal) {\n      signal?.throwIfAborted();\n      const attempt = getConnection();\n      let abort: (() => void) | undefined;\n      try {\n        const bridge = signal\n          ? await Promise.race([\n              attempt,\n              new Promise<never>((_, reject) => {\n                const requestSignal = signal;\n\n                function handleAbort() {\n                  reject(requestSignal.reason);\n                }\n\n                abort = handleAbort;\n                requestSignal.addEventListener('abort', handleAbort, {\n                  once: true,\n                });\n              }),\n            ])\n          : await attempt;\n        signal?.throwIfAborted();\n\n        return bridge.transport(operation, input, signal);\n      } finally {\n        if (abort) signal?.removeEventListener('abort', abort);\n      }\n    },\n    connect: getConnection,\n  };\n  frame[bridgeKey] = proxy;\n  // Static mounting still verifies eagerly, without an unhandled rejection.\n  void getConnection().catch(() => {});\n\n  return proxy;\n}\n\n/** Install an explicitly trusted transport for hosted apps and their URL-backed controls. */\nexport function installDataAppTransport(\n  bridge: ReturnType<typeof createIframeTransport>,\n  frame: Window = window\n) {\n  const target = frame as FrameWindow;\n  if (target[installedKey])\n    throw new Error('A data app transport is already installed.');\n  target[bridgeKey] = bridge;\n  target[installedKey] = bridge;\n\n  return () => {\n    if (target[bridgeKey] === bridge) delete target[bridgeKey];\n    if (target[installedKey] === bridge) delete target[installedKey];\n    bridge.dispose();\n  };\n}\n\n/** The bootstrap installs this before executing app code. URL apps can install an explicit connection. */\nexport function getDataAppTransport(frame: Window = window) {\n  return (frame as FrameWindow)[installedKey];\n}\n",
+    "import {\n  DataSourceError,\n  type DataOperations,\n  type DisclosedQuery,\n  type Lakehouse,\n  type OperationContext,\n} from '@/src/core/contract';\n\ntype Operation = DataOperations[string];\ntype OperationExecutionOptions = {\n  operationName: string;\n  lakehouse: Lakehouse;\n  signal: AbortSignal;\n  /** Include query evidence in the response; this does not keep browser-owned SQL private. */\n  includeSql: boolean;\n  requestId: string;\n};\n\n/** Shared operation execution. Adapters own authorization, delivery, and public errors. */\nexport async function executeDataOperation(\n  operation: Operation,\n  value: unknown,\n  {\n    operationName,\n    lakehouse,\n    signal: requestSignal,\n    includeSql,\n    requestId,\n  }: OperationExecutionOptions\n) {\n  requestSignal.throwIfAborted();\n  let input: unknown;\n  try {\n    input = operation.input(value);\n  } catch {\n    throw new OperationInputError();\n  }\n\n  const signal = AbortSignal.any([\n    requestSignal,\n    AbortSignal.timeout(operation.policy.maxDurationMs),\n  ]);\n  const execution = createOperationLakehouse(\n    operation,\n    lakehouse,\n    signal,\n    operationName\n  );\n  try {\n    const output = await runOperation(operation, input, {\n      lakehouse: execution.lakehouse,\n      signal,\n    });\n    const body = {\n      data: operation.output(output),\n      requestId,\n      queriedAt: new Date().toISOString(),\n      queryIds: execution.queryIds,\n      ...(operation.policy.exposeSql && includeSql\n        ? { queries: execution.queries }\n        : {}),\n    };\n    const serializedBody = JSON.stringify(body);\n    const responseBytes = new TextEncoder().encode(serializedBody).byteLength;\n    if (responseBytes > (operation.policy.maxResponseBytes ?? 1_000_000))\n      throw new Error('Response exceeds byte limit.');\n\n    return { body, serializedBody };\n  } catch (error) {\n    if (signal.aborted && !(error instanceof DataSourceError))\n      throw new OperationTimeoutError();\n    throw error;\n  }\n}\n\n/** Query evidence follows statement invocation order; query IDs retain completion order. */\nfunction createOperationLakehouse(\n  operation: Operation,\n  source: Lakehouse,\n  signal: AbortSignal,\n  operationName: string\n) {\n  const queryIds: string[] = [];\n  const queries: DisclosedQuery[] = [];\n  const lakehouse: Lakehouse = {\n    async queryAll(statement, options) {\n      if (!Number.isInteger(options.limit) || options.limit < 1)\n        throw new Error('Query needs a positive row limit.');\n      if (\n        operation.queryNames &&\n        !Object.values(operation.queryNames).includes(options.name ?? '')\n      )\n        throw new Error(\n          `Query name is not registered for operation ${operationName}.`\n        );\n      const query: DisclosedQuery = {\n        name: options.name ?? `Query ${queries.length + 1}`,\n        statement,\n      };\n      queries.push(query);\n      const limit = Math.min(options.limit, operation.policy.maxQueryRows);\n      let result;\n      try {\n        result = await source.queryAll(statement, {\n          limit,\n          signal: AbortSignal.any([signal, options.signal]),\n        });\n      } catch (error) {\n        if (error instanceof DataSourceError) error.queryName = query.name;\n        throw error;\n      }\n      if (result.rows.length > limit)\n        throw new Error('Result exceeds row limit.');\n      if (result.queryId) {\n        query.queryId = result.queryId;\n        queryIds.push(result.queryId);\n      }\n\n      return result;\n    },\n  };\n\n  return { lakehouse, queries, queryIds };\n}\n\n/** Settle cancellation even when operation code or its lakehouse ignores the signal. */\nasync function runOperation(\n  operation: Operation,\n  input: unknown,\n  { lakehouse, signal }: OperationContext\n) {\n  let abort: (() => void) | undefined;\n  try {\n    signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n      }\n      abort = rejectAborted;\n      signal.addEventListener('abort', rejectAborted, { once: true });\n      if (signal.aborted) rejectAborted();\n    });\n\n    return await Promise.race([\n      cancelled,\n      Promise.resolve().then(() => {\n        signal.throwIfAborted();\n\n        return operation.run({ lakehouse, signal }, input as never);\n      }),\n    ]);\n  } finally {\n    if (abort) signal.removeEventListener('abort', abort);\n  }\n}\n\nclass OperationTimeoutError extends Error {}\n\nclass OperationInputError extends Error {}\n\nconst sourceErrorMessages = {\n  unauthorized:\n    'This app could not authenticate its data connection. Contact the app owner.',\n  forbidden:\n    'This app cannot access the requested data. Contact the app owner.',\n  rate_limited: 'The lakehouse is busy. Wait a moment and retry.',\n  query_rejected:\n    \"A lakehouse query was rejected. Check the app's data operation.\",\n  unavailable: 'The lakehouse is unavailable. Check the connection and retry.',\n};\n\nexport function toDataOperationFailure(error: unknown, aborted = false) {\n  if (error instanceof OperationInputError)\n    return {\n      status: 400,\n      code: 'invalid_input',\n      message: \"Check this operation's inputs.\",\n    };\n  if (error instanceof DataSourceError)\n    return {\n      status: error.reason === 'rate_limited' ? 429 : 502,\n      code: `source_${error.reason}`,\n      message: sourceErrorMessages[error.reason],\n    };\n  const timedOut = aborted || error instanceof OperationTimeoutError;\n  return {\n    status: timedOut ? 504 : 502,\n    code: timedOut ? 'timeout' : 'query_failed',\n    message: timedOut\n      ? 'The data request timed out.'\n      : 'The data request failed.',\n  };\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;AASA,IAAM,aAAa,OAAO,IAAI,mCAAmC;AAAA;AAE1D,MAAM,sBAAqB,MAAM;AAAA,EAYpB;AAAA,EACA;AAAA,GAZR,cAAc;AAAA,UAEhB,OAAO,YAAY,CAAC,OAAyB;AAAA,IACnD,OACE,iBAAiB,SAChB,MAAqC,gBAAgB;AAAA;AAAA,EAI1D,WAAW,CACT,SACgB,MACA,WAChB;AAAA,IACA,MAAM,OAAO;AAAA,IAHG;AAAA,IACA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AAEO,SAAS,oBAAmB;AAAA,EACjC,WAAW;AAAA,EACX,OAAO,UAAU,WAAW;AAAA,IAI1B,CAAC,GAAkB;AAAA,EACrB,eAAe,WAAW,CACxB,WACA,OACA,QAC4B;AAAA,IAC5B,MAAM,WAAW,MAAM,QACrB,GAAG,SAAS,QAAQ,OAAO,EAAE,KAAK,mBAAmB,SAAS,KAC9D;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,KAAK;AAAA,MAC1B;AAAA,IACF,CACF;AAAA,IACA,IAAI;AAAA,MACF,OAAO,EAAE,QAAQ,SAAS,QAAQ,MAAM,MAAM,SAAS,KAAK,EAAE;AAAA,MAC9D,OAAO,OAAO;AAAA,MACd,IAAI,QAAQ;AAAA,QAAS,MAAM;AAAA,MAC3B,MAAM,IAAI,cACR,SAAS,KAAK,mCAAmC,wBACjD,SAAS,KAAK,qBAAqB,gBACrC;AAAA;AAAA;AAAA,EAIJ,OAAO;AAAA;;;ACtDF,SAAS,oBAAuD,CACrE,QACA,WACA;AAAA,EACA,OAAO;AAAA,SACC,QAGL,CACC,OACA,WACE,WAAqC,CAAC,GACK;AAAA,MAC7C,QAAQ,eAAe;AAAA,MACvB,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK;AAAA,QAC9B,MAAM,IAAI,qBACR,iBACA,wBACF;AAAA,MACF,MAAM,WAAW,OAAO;AAAA,MACxB,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,QAAQ,SAAS,MAAM,OAAO;AAAA,QAC9B,MAAM;AAAA,QACN,MAAM,IAAI,qBACR,mBACA,0BACF;AAAA;AAAA,MAEF,MAAM,WAAW,MAAM,UAAU,EAAE,OAAO,SAAS,MAAM,GAAG,MAAM;AAAA,MAClE,QAAQ,eAAe;AAAA,MACvB,IAAI;AAAA,QACF,OAAO,SAAS,OAAO,UAAU,KAAc;AAAA,QAI/C,OAAO,OAAO;AAAA,QACd,IAAI,iBAAiB;AAAA,UAAqB,MAAM;AAAA,QAChD,MAAM,IAAI,qBACR,oBACA,2BACF;AAAA;AAAA;AAAA,EAGN;AAAA;;;AC1BF,SAAS,uBAAuB,CAAC,OAAuB;AAAA,EACtD,IAAI,iBAAiB;AAAA,IACnB,MAAM,IAAI,cAAa,MAAM,SAAS,MAAM,MAAM,MAAM,SAAS;AAAA,EACnE,MAAM;AAAA;AAID,SAAS,sBAAqB;AAAA,EACnC;AAAA,EACA,QAAQ,QAAQ;AAAA,EAChB,YAAY;AAAA,EACZ,OAAO;AAAA,EACP;AAAA,GAOC;AAAA,EACD,IAAI,IAAI,IAAI,YAAY,EAAE,WAAW;AAAA,IACnC,MAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD,MAAM,aAAa,OAAO,WAAW;AAAA,EACrC,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI,WAAW;AAAA,EACf,MAAM,UAAU,IAAI;AAAA,EACpB,IAAI;AAAA,EACJ,MAAM,iBAAiB,IAAI;AAAA,EAE3B,SAAS,IAAI,CAAC,SAAiC;AAAA,IAC7C,MAAM,OAAO,YACX,EAAE,SAAS,QAAQ,SAAS,GAAG,YAAY,WAAW,UAAU,QAAQ,GACxE,YACF;AAAA;AAAA,EAGF,SAAS,YAAY,CAAC,OAAgB;AAAA,IACpC,YAAY;AAAA,IACZ,WAAW,YAAY;AAAA,MAAgB,SAAS,KAAK;AAAA;AAAA,EAGvD,SAAS,OAAO,CAAC,OAAqB;AAAA,IACpC,IACE,MAAM,WAAW,gBACjB,MAAM,WAAW,MAAM,UACvB,CAAC,gBAAgB,MAAM,IAAI;AAAA,MAE3B;AAAA,IACF,MAAM,UAAU,MAAM;AAAA,IACtB,IAAI,QAAQ,SAAS,kBAAkB;AAAA,MACrC,IAAI,SAAS,UAAU;AAAA,QACrB,IAAI,CAAC,QAAQ,QAAQ,KAAK;AAAA,UAAG;AAAA,QAC7B,QAAQ,QAAQ;AAAA,MAClB;AAAA,MACA,KAAK,EAAE,MAAM,eAAe,CAAC;AAAA,MAE7B;AAAA,IACF;AAAA,IACA,IAAI,SAAS,aAAa,CAAC,SAAS,QAAQ,UAAU;AAAA,MAAQ;AAAA,IAC9D,IAAI,QAAQ,eAAe;AAAA,MAAY;AAAA,IACvC,IAAI,QAAQ,SAAS,uBAAuB,QAAQ,QAAQ,SAAS,GAAG;AAAA,MACtE,IAAI,aAAa,cAAc,QAAQ,WAAW;AAAA,QAChD,WAAW,SAAS,QAAQ,OAAO;AAAA,UACjC,MAAM,OACJ,IAAI,cACF,+CACA,cACF,CACF;AAAA,MACJ;AAAA,MACA,MAAM,QAAQ,CAAC;AAAA,MACf,YAAY,QAAQ;AAAA,MACpB,IAAI;AAAA,QAAO,WAAW,SAAS,QAAQ,OAAO;AAAA,UAAG,MAAM,MAAM;AAAA,MAC7D,aAAa,QAAQ,KAAK;AAAA,MAC1B,IAAI,SAAS;AAAA,QAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAAA,MAElD;AAAA,IACF;AAAA,IACA,IAAI,CAAC,aAAa,QAAQ,cAAc;AAAA,MAAW;AAAA,IACnD,IAAI,QAAQ,SAAS,gBAAgB;AAAA,MACnC,aAAa,QAAQ,KAAK;AAAA,MAE1B;AAAA,IACF;AAAA,IACA,IACE,QAAQ,SAAS,iBACjB,SAAS,YACT,OAAO,QAAQ,eAAe,UAC9B;AAAA,MACA,aAAa,QAAQ,UAAU;AAAA,MAE/B;AAAA,IACF;AAAA,IACA,IAAI,OAAO,QAAQ,OAAO;AAAA,MAAU;AAAA,IACpC,MAAM,QAAQ,QAAQ,IAAI,QAAQ,EAAE;AAAA,IACpC,IAAI,CAAC;AAAA,MAAO;AAAA,IACZ,IAAI,QAAQ,SAAS,mBAAmB,cAAc,SAAS;AAAA,MAC7D,MAAM,QAAQ,QAAQ,QAAQ;AAAA,IAChC,EAAO,SACL,QAAQ,SAAS,kBACjB,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,YAAY,UAC3B;AAAA,MACA,MAAM,OACJ,IAAI,qBACF,QAAQ,MACR,QAAQ,SACR,OAAO,QAAQ,cAAc,WAAW,QAAQ,YAAY,SAC9D,CACF;AAAA,IACF;AAAA;AAAA,EAGF,MAAM,iBAAiB,WAAW,OAAO;AAAA,EAEzC,SAAS,cAAc,CACrB,SACA,QACkB;AAAA,IAClB,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,IAAI;AAAA,QACF,OAAO,OACL,IAAI,cAAa,2BAA2B,eAAe,CAC7D;AAAA,MACF,IAAI,QAAQ;AAAA,QAAS,OAAO,OAAO,OAAO,MAAM;AAAA,MAChD,IAAI,QAAQ,QAAQ;AAAA,QAClB,OAAO,OACL,IAAI,cAAa,mCAAmC,aAAa,CACnE;AAAA,MACF,MAAM,KAAK,OAAO,WAAW;AAAA,MAC7B,IAAI,OAAO;AAAA,MAEX,SAAS,OAAO,GAAG;AAAA,QACjB,aAAa,KAAK;AAAA,QAClB,QAAQ,oBAAoB,SAAS,KAAK;AAAA,QAC1C,QAAQ,OAAO,EAAE;AAAA;AAAA,MAGnB,SAAS,KAAK,GAAG;AAAA,QACf,IAAI;AAAA,UAAM,KAAK,EAAE,MAAM,iBAAiB,GAAG,CAAC;AAAA,QAC5C,QAAQ;AAAA,QACR,OAAO,QAAQ,MAAM;AAAA;AAAA,MAGvB,MAAM,QAAQ,WAAW,MAAM;AAAA,QAC7B,IAAI;AAAA,UAAM,KAAK,EAAE,MAAM,iBAAiB,GAAG,CAAC;AAAA,QAC5C,QAAQ;AAAA,QACR,OACE,IAAI,cACF,YACI,gCACA,yDACJ,YAAY,YAAY,oBAC1B,CACF;AAAA,SACC,SAAS;AAAA,MACZ,MAAM,QAAiB;AAAA,QACrB,KAAK,GAAG;AAAA,UACN,IAAI;AAAA,YAAM;AAAA,UACV,IAAI;AAAA,YACF,KAAK;AAAA,cACH,MAAM;AAAA,cACN;AAAA,cACA,OAAO,QAAQ;AAAA,cACf,SAAS,QAAQ;AAAA,YACnB,CAAC;AAAA,YACD,OAAO;AAAA,YACP,MAAM;AAAA,YACN,QAAQ;AAAA,YACR,OACE,IAAI,cACF,0CACA,iBACF,CACF;AAAA;AAAA;AAAA,QAGJ,OAAO,CAAC,OAAO;AAAA,UACb,QAAQ;AAAA,UACR,QAAQ,KAAK;AAAA;AAAA,QAEf,MAAM,CAAC,OAAO;AAAA,UACZ,QAAQ;AAAA,UACR,OAAO,KAAK;AAAA;AAAA,MAEhB;AAAA,MACA,QAAQ,IAAI,IAAI,KAAK;AAAA,MACrB,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AAAA,MACvD,IAAI;AAAA,QAAW,MAAM,MAAM;AAAA,MACtB;AAAA,aAAK,EAAE,MAAM,eAAe,CAAC;AAAA,KACnC;AAAA;AAAA,EAGH,MAAM,WAAW,qBACf,EAAE,cAAc,sBAAqB,GAAG,YAAY,eAAc,GAClE,cACF;AAAA,EAEA,SAAS,cAAc,CACrB,WACA,OACA,QAC4B;AAAA,IAC5B,OAAO,SACJ,QAAQ,cAAc,EAAE,WAAW,MAAM,GAAG,EAAE,OAAO,CAAC,EACtD,MAAM,uBAAuB;AAAA;AAAA,EAGlC,SAAS,UAAU,GAAG;AAAA,IACpB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAAA,IAClC,YAAY;AAAA,IACZ,WAAW,SAAS,QAAQ,OAAO;AAAA,MACjC,MAAM,OACJ,IAAI,cAAa,2BAA2B,eAAe,CAC7D;AAAA;AAAA,EAGJ,SAAS,MAAM,CAAC,OAA4B;AAAA,IAC1C,IAAI,MAAM;AAAA,MAAW,KAAK,EAAE,MAAM,eAAe,CAAC;AAAA;AAAA,EAGpD,SAAS,OAAO,GAAG;AAAA,IACjB,IAAI;AAAA,MAAU;AAAA,IACd,WAAW;AAAA,IACX,WAAW;AAAA,IACX,MAAM,oBAAoB,WAAW,OAAO;AAAA,IAC5C,MAAM,oBAAoB,YAAY,UAAU;AAAA,IAChD,MAAM,oBAAoB,YAAY,MAAM;AAAA,IAC5C,eAAe,MAAM;AAAA;AAAA,EAGvB,MAAM,iBAAiB,YAAY,UAAU;AAAA,EAC7C,MAAM,iBAAiB,YAAY,MAAM;AAAA,EACzC,IAAI,SAAS;AAAA,IAAO,KAAK,EAAE,MAAM,eAAe,CAAC;AAAA,EAEjD,OAAO;AAAA,IACL,SAAS;AAAA,IACT,WAAW;AAAA,IACX,WAAW;AAAA,MACT,QAAQ,CAAC,aAAa,OAAO,UAAU;AAAA,QACrC,OAAO,SACJ,QAAQ,YAAY,EAAE,WAAW,MAAM,GAAG,EAAE,OAAO,CAAC,EACpD,MAAM,uBAAuB;AAAA;AAAA,IAEpC;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,GAAG;AAAA,MACT,OAAO;AAAA;AAAA,IAET,SAAS,CAAC,UAAoC;AAAA,MAC5C,eAAe,IAAI,QAAQ;AAAA,MAE3B,OAAO,MAAM;AAAA,QACX,eAAe,OAAO,QAAQ;AAAA;AAAA;AAAA,IAGlC,KAAK,GAAG;AAAA,MACN,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAAA;AAAA,IAEhC,IAAI,GAAG;AAAA,MACL,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAAA;AAAA,EAElC;AAAA;AAKF,IAAM,YAAY,OAAO,IAAI,6BAA6B;AAC1D,IAAM,eAAe,OAAO,IAAI,+BAA+B;AAWxD,SAAS,gBAAgB,CAAC,SAA0C;AAAA,EACzE,MAAM,eACJ,YACC,OAAO,WAAW,WAAW,cAAc,YAAY,WAAW;AAAA,EACrE,IAAI,CAAC;AAAA,IAAc;AAAA,EACnB,MAAM,QAAQ;AAAA,EACd,IAAI,MAAM;AAAA,IAAY,OAAO,MAAM;AAAA,EACnC,MAAM,eACJ,IAAI,IAAI,MAAM,SAAS,IAAI,EAAE,aAAa,IAAI,YAAY,KAAK;AAAA,EACjE,IAAI,CAAC;AAAA,IAAc;AAAA,EAEnB,eAAe,OAAO,CAAC,cAAsB;AAAA,IAC3C,IAAI;AAAA,MACF,MAAM,WAAW,MAAM,MAAM,MAAM,wBAAwB;AAAA,QACzD,QAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC,CAAC;AAAA,MACD,MAAM,SAAU,MAAM,SAAS,KAAK;AAAA,MACpC,IACE,CAAC,SAAS,MACV,OAAO,WAAW,gBAClB,MAAM,WAAW;AAAA,QAEjB,MAAM,IAAI,MAAM,qCAAqC;AAAA,MAEvD,IAAI,MAAM;AAAA,QAAe,OAAO,MAAM;AAAA,MACtC,IAAI,MAAM,eAAe;AAAA,QACvB,MAAM,IAAI,MAAM,kCAAkC;AAAA,MACpD,MAAM,SAAS,uBAAsB,EAAE,cAAc,QAAQ,MAAM,CAAC;AAAA,MACpE,MAAM,aAAa;AAAA,MACnB,MAAM,gBAAgB;AAAA,MAEtB,OAAO;AAAA,MACP,MAAM;AAAA,MACN,MAAM,IAAI,cACR,wFACA,oBACF;AAAA;AAAA;AAAA,EAIJ,IAAI;AAAA,EAEJ,SAAS,aAAa,GAAG;AAAA,IACvB,MAAM,YAAY,MAAM;AAAA,IACxB,IAAI;AAAA,MAAW,OAAO,QAAQ,QAAQ,SAAS;AAAA,IAC/C,IAAI,CAAC,YAAY;AAAA,MACf,MAAM,UAAU,QAAQ,YAAY;AAAA,MACpC,aAAa;AAAA,MAER,QAAQ,MAAM,MAAM;AAAA,QACvB,IAAI,eAAe;AAAA,UAAS,aAAa;AAAA,OAC1C;AAAA,IACH;AAAA,IAEA,OAAO;AAAA;AAAA,EAGT,MAAM,QAAqB;AAAA,SACnB,UAAS,CAAC,WAAW,OAAO,QAAQ;AAAA,MACxC,QAAQ,eAAe;AAAA,MACvB,MAAM,UAAU,cAAc;AAAA,MAC9B,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,MAAM,SAAS,SACX,MAAM,QAAQ,KAAK;AAAA,UACjB;AAAA,UACA,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,YAChC,MAAM,gBAAgB;AAAA,YAEtB,SAAS,WAAW,GAAG;AAAA,cACrB,OAAO,cAAc,MAAM;AAAA;AAAA,YAG7B,QAAQ;AAAA,YACR,cAAc,iBAAiB,SAAS,aAAa;AAAA,cACnD,MAAM;AAAA,YACR,CAAC;AAAA,WACF;AAAA,QACH,CAAC,IACD,MAAM;AAAA,QACV,QAAQ,eAAe;AAAA,QAEvB,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM;AAAA,gBAChD;AAAA,QACA,IAAI;AAAA,UAAO,QAAQ,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA,IAGzD,SAAS;AAAA,EACX;AAAA,EACA,MAAM,aAAa;AAAA,EAEd,cAAc,EAAE,MAAM,MAAM,EAAE;AAAA,EAEnC,OAAO;AAAA;AAIF,SAAS,wBAAuB,CACrC,QACA,QAAgB,QAChB;AAAA,EACA,MAAM,SAAS;AAAA,EACf,IAAI,OAAO;AAAA,IACT,MAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D,OAAO,aAAa;AAAA,EACpB,OAAO,gBAAgB;AAAA,EAEvB,OAAO,MAAM;AAAA,IACX,IAAI,OAAO,eAAe;AAAA,MAAQ,OAAO,OAAO;AAAA,IAChD,IAAI,OAAO,kBAAkB;AAAA,MAAQ,OAAO,OAAO;AAAA,IACnD,OAAO,QAAQ;AAAA;AAAA;AAKZ,SAAS,oBAAmB,CAAC,QAAgB,QAAQ;AAAA,EAC1D,OAAQ,MAAsB;AAAA;;;ACrZhC,eAAsB,oBAAoB,CACxC,WACA;AAAA,EAEE;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,GAEF;AAAA,EACA,cAAc,eAAe;AAAA,EAC7B,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,QAAQ,UAAU,MAAM,KAAK;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM,IAAI;AAAA;AAAA,EAGZ,MAAM,SAAS,YAAY,IAAI;AAAA,IAC7B;AAAA,IACA,YAAY,QAAQ,UAAU,OAAO,aAAa;AAAA,EACpD,CAAC;AAAA,EACD,MAAM,YAAY,yBAChB,WACA,WACA,QACA,aACF;AAAA,EACA,IAAI;AAAA,IACF,MAAM,SAAS,MAAM,aAAa,WAAW,OAAO;AAAA,MAClD,WAAW,UAAU;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,IACD,MAAM,OAAO;AAAA,MACX,MAAM,UAAU,OAAO,MAAM;AAAA,MAC7B;AAAA,MACA,WAAW,IAAI,KAAK,EAAE,YAAY;AAAA,MAClC,UAAU,UAAU;AAAA,SAChB,UAAU,OAAO,aAAa,aAC9B,EAAE,SAAS,UAAU,QAAQ,IAC7B,CAAC;AAAA,IACP;AAAA,IACA,MAAM,iBAAiB,KAAK,UAAU,IAAI;AAAA,IAC1C,MAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,cAAc,EAAE;AAAA,IAC/D,IAAI,iBAAiB,UAAU,OAAO,oBAAoB;AAAA,MACxD,MAAM,IAAI,MAAM,8BAA8B;AAAA,IAEhD,OAAO,EAAE,MAAM,eAAe;AAAA,IAC9B,OAAO,OAAO;AAAA,IACd,IAAI,OAAO,WAAW,EAAE,iBAAiB;AAAA,MACvC,MAAM,IAAI;AAAA,IACZ,MAAM;AAAA;AAAA;AAKV,SAAS,wBAAwB,CAC/B,WACA,QACA,QACA,eACA;AAAA,EACA,MAAM,WAAqB,CAAC;AAAA,EAC5B,MAAM,UAA4B,CAAC;AAAA,EACnC,MAAM,YAAuB;AAAA,SACrB,SAAQ,CAAC,WAAW,SAAS;AAAA,MACjC,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,QAAQ,QAAQ;AAAA,QACtD,MAAM,IAAI,MAAM,mCAAmC;AAAA,MACrD,IACE,UAAU,cACV,CAAC,OAAO,OAAO,UAAU,UAAU,EAAE,SAAS,QAAQ,QAAQ,EAAE;AAAA,QAEhE,MAAM,IAAI,MACR,8CAA8C,gBAChD;AAAA,MACF,MAAM,QAAwB;AAAA,QAC5B,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,QAChD;AAAA,MACF;AAAA,MACA,QAAQ,KAAK,KAAK;AAAA,MAClB,MAAM,QAAQ,KAAK,IAAI,QAAQ,OAAO,UAAU,OAAO,YAAY;AAAA,MACnE,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,SAAS,MAAM,OAAO,SAAS,WAAW;AAAA,UACxC;AAAA,UACA,QAAQ,YAAY,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC;AAAA,QAClD,CAAC;AAAA,QACD,OAAO,OAAO;AAAA,QACd,IAAI,iBAAiB;AAAA,UAAiB,MAAM,YAAY,MAAM;AAAA,QAC9D,MAAM;AAAA;AAAA,MAER,IAAI,OAAO,KAAK,SAAS;AAAA,QACvB,MAAM,IAAI,MAAM,2BAA2B;AAAA,MAC7C,IAAI,OAAO,SAAS;AAAA,QAClB,MAAM,UAAU,OAAO;AAAA,QACvB,SAAS,KAAK,OAAO,OAAO;AAAA,MAC9B;AAAA,MAEA,OAAO;AAAA;AAAA,EAEX;AAAA,EAEA,OAAO,EAAE,WAAW,SAAS,SAAS;AAAA;AAIxC,eAAe,YAAY,CACzB,WACA,SACE,WAAW,UACb;AAAA,EACA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,eAAe;AAAA,IACtB,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA;AAAA,MAEtC,QAAQ;AAAA,MACR,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MAC9D,IAAI,OAAO;AAAA,QAAS,cAAc;AAAA,KACnC;AAAA,IAED,OAAO,MAAM,QAAQ,KAAK;AAAA,MACxB;AAAA,MACA,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAAA,QAC3B,OAAO,eAAe;AAAA,QAEtB,OAAO,UAAU,IAAI,EAAE,WAAW,OAAO,GAAG,KAAc;AAAA,OAC3D;AAAA,IACH,CAAC;AAAA,YACD;AAAA,IACA,IAAI;AAAA,MAAO,OAAO,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA;AAIxD,MAAM,8BAA8B,MAAM;AAAC;AAAA;AAE3C,MAAM,4BAA4B,MAAM;AAAC;AAEzC,IAAM,sBAAsB;AAAA,EAC1B,cACE;AAAA,EACF,WACE;AAAA,EACF,cAAc;AAAA,EACd,gBACE;AAAA,EACF,aAAa;AACf;AAEO,SAAS,sBAAsB,CAAC,OAAgB,UAAU,OAAO;AAAA,EACtE,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,EACF,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ,MAAM,WAAW,iBAAiB,MAAM;AAAA,MAChD,MAAM,UAAU,MAAM;AAAA,MACtB,SAAS,oBAAoB,MAAM;AAAA,IACrC;AAAA,EACF,MAAM,WAAW,WAAW,iBAAiB;AAAA,EAC7C,OAAO;AAAA,IACL,QAAQ,WAAW,MAAM;AAAA,IACzB,MAAM,WAAW,YAAY;AAAA,IAC7B,SAAS,WACL,gCACA;AAAA,EACN;AAAA;",
+  "debugId": "A5D6917EB066FFF364756E2164756E21",
+  "names": []
+}

package/dist/client/index.js

@@ -2,7 +2,7 @@ import {
   createDataAppNavigation2,
   getDataAppNavigation2,
   createDataClient2
-} from "../chunks/contract-zr4s2g7m.js";
+} from "../chunks/contract-4vrw9zk9.js";
 import {
   DataAppError2,
   createHttpTransport2,
@@ -10,8 +10,10 @@ import {
   createIframeTransport2,
   installDataAppTransport2,
   getDataAppTransport2
-} from "../chunks/contract-d9skd1n7.js";
-import"../chunks/contract-ehk50k7e.js";
+} from "../chunks/contract-xjv197ck.js";
+import"../chunks/contract-nt819swq.js";
+import"../chunks/contract-mev09s5v.js";
+import"../chunks/contract-3bnrf5pf.js";
 export {
   DataAppError2 as DataAppError,
   createDataAppNavigation2 as createDataAppNavigation,
@@ -24,4 +26,4 @@ export {
   installDataAppTransport2 as installDataAppTransport
 };
 
-//# debugId=43A567C4125F87CC64756E2164756E21
+//# debugId=8C4A11AD957CE63364756E2164756E21

package/dist/client/index.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "43A567C4125F87CC64756E2164756E21",
+  "debugId": "8C4A11AD957CE63364756E2164756E21",
   "names": []
 }

package/dist/core/appearance.js

@@ -2,7 +2,7 @@ import {
   parseAppearance2,
   applyAppearance2,
   createThemeController2
-} from "../chunks/contract-14vxdcrs.js";
+} from "../chunks/contract-farfe948.js";
 export {
   applyAppearance2 as applyAppearance,
   createThemeController2 as createThemeController,

package/dist/core/contract.js

@@ -24,8 +24,9 @@ import {
   createMessageRouter2,
   defineDataQueryRoute2,
   navigationUpdateRoute2,
+  sqlQueryRoute2,
   dataAppRoutes2
-} from "../chunks/contract-ehk50k7e.js";
+} from "../chunks/contract-3bnrf5pf.js";
 export {
   DataSourceError2 as DataSourceError,
   MessageRoutingError2 as MessageRoutingError,
@@ -49,7 +50,8 @@ export {
   parseLabel2 as parseLabel,
   parseTrue2 as parseTrue,
   previousDateRange2 as previousDateRange,
-  rowsAsRecords2 as rowsAsRecords
+  rowsAsRecords2 as rowsAsRecords,
+  sqlQueryRoute2 as sqlQueryRoute
 };
 
-//# debugId=2AD65EB8F0F2F7AD64756E2164756E21
+//# debugId=7902CE650ED22CFA64756E2164756E21

package/dist/core/contract.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "2AD65EB8F0F2F7AD64756E2164756E21",
+  "debugId": "7902CE650ED22CFA64756E2164756E21",
   "names": []
 }

package/dist/embed/index.js

@@ -1,12 +1,17 @@
-import"../chunks/contract-ehk50k7e.js";
+import {
+  MessageRoutingError2,
+  sqlQueryRoute2
+} from "../chunks/contract-3bnrf5pf.js";
 import {
   createIframeTransport2,
-  installDataAppTransport2
-} from "../chunks/contract-d9skd1n7.js";
+  installDataAppTransport2,
+  toDataOperationFailure
+} from "../chunks/contract-xjv197ck.js";
+import"../chunks/contract-mev09s5v.js";
+import"../chunks/contract-nt819swq.js";
 import {
-  attachDataAppBridge2,
-  attachDataAppShell2
-} from "../chunks/contract-7gpsee0v.js";
+  attachDataAppBridge2
+} from "../chunks/contract-rrm7s5zp.js";
 import {
   PARENT_PARAM
 } from "../chunks/contract-ryyf6dme.js";
@@ -81,11 +86,40 @@ function createNavigationHandler({
   }
   return navigate;
 }
+// src/embed/sql.ts
+function createSqlQueryHandler(authorize) {
+  async function handleSqlQuery(input, context) {
+    const requestId = crypto.randomUUID();
+    context.signal.throwIfAborted();
+    let lakehouse;
+    try {
+      lakehouse = await authorize(input, context);
+    } catch {
+      context.signal.throwIfAborted();
+      throw new MessageRoutingError2("forbidden", "You cannot run this query.", requestId);
+    }
+    context.signal.throwIfAborted();
+    try {
+      return await lakehouse.queryAll(input.statement, {
+        limit: input.limit,
+        signal: context.signal
+      });
+    } catch (error) {
+      context.signal.throwIfAborted();
+      if (error instanceof MessageRoutingError2)
+        throw error;
+      const failure = toDataOperationFailure(error);
+      throw new MessageRoutingError2(failure.code, failure.message, requestId);
+    }
+  }
+  return handleSqlQuery;
+}
 export {
   attachDataAppBridge2 as attachDataAppBridge,
-  attachDataAppShell2 as attachDataAppShell,
   createNavigationHandler,
+  createSqlQueryHandler,
+  sqlQueryRoute2 as sqlQueryRoute,
   startDataAppBootstrap
 };
 
-//# debugId=1E61B2F0590BD55F64756E2164756E21
+//# debugId=10E8E3B80241E0BC64756E2164756E21