@altertable/data-app 0.63.0 → 0.65.0

package/dist/chunks/contract-g6hky7x6.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/embed/host.ts", "../src/embed/source.ts", "../src/embed/bridge.ts"],
+  "sourcesContent": [
+    "import { createBridgeEndpoint } from '@/src/core/bridge-endpoint';\nimport type { DataAppPresentation } from '@/src/core/presentation';\nimport type { DataAppLogger } from '@/src/core/logger';\nimport {\n  MAX_PENDING,\n  REQUEST_TIMEOUT_MS,\n  validId,\n  type BridgeEventMessage,\n  type BridgeMessage,\n} from '@/src/core/bridge';\n\nimport {\n  MessageRoutingError,\n  type MessageDispatcher,\n} from '@/src/core/messages';\n\nexport type DataAppConnection =\n  | { type: 'origin'; origin: string }\n  | { type: 'opaque'; token: string };\nexport type DataAppStatus =\n  | 'connecting'\n  | 'connected'\n  | 'ready'\n  | 'failed'\n  | 'disconnected';\nexport type DataAppDiagnostic = {\n  direction: 'send' | 'receive';\n  type: BridgeMessage['type'];\n};\n\nexport type DataAppHost = {\n  dispose: () => void;\n  setPresentation: (presentation?: DataAppPresentation) => void;\n  setLogger: (logger?: DataAppLogger) => void;\n};\n\nexport type DataAppHostOptions = {\n  iframe: HTMLIFrameElement;\n  presentation?: DataAppPresentation;\n  logger?: DataAppLogger;\n  onStatusChange?: (status: DataAppStatus) => void;\n  onDiagnostic?: (event: DataAppDiagnostic) => void;\n  onMessage: MessageDispatcher;\n};\n\nexport type DataAppConnectionOptions = DataAppHostOptions & {\n  connection: DataAppConnection;\n  javascript?: string;\n  window?: Window;\n};\n\n/** The bridge owns delivery and cancellation; the routed handler owns validation, authorization and execution. */\nexport function attachDataAppConnection({\n  iframe,\n  connection,\n  javascript,\n  presentation,\n  logger,\n  onStatusChange,\n  onDiagnostic,\n  onMessage,\n  window: host = window,\n}: DataAppConnectionOptions): DataAppHost {\n  const frameOrigin = connection.type === 'origin' ? connection.origin : 'null';\n  if (\n    connection.type === 'origin' &&\n    new URL(frameOrigin).origin !== frameOrigin\n  )\n    throw new Error('Expected an exact frame origin.');\n  if (connection.type === 'opaque' && !validId(connection.token))\n    throw new Error('Invalid sandbox token.');\n  let token = connection.type === 'opaque' ? connection.token : undefined;\n  const targetOrigin = connection.type === 'opaque' ? '*' : frameOrigin;\n  let currentPresentation: DataAppPresentation | undefined;\n  let disposed = false;\n  let documentId: string | undefined;\n  let sessionId: string | undefined;\n  const pending = new Map<string, AbortController>();\n\n  function hostState() {\n    return {\n      search: host.location.search,\n      hash: host.location.hash,\n      ...(currentPresentation ? { presentation: currentPresentation } : {}),\n      logging: logger !== undefined,\n    };\n  }\n\n  function setLogger(value: DataAppLogger | undefined) {\n    if (disposed || value === logger) return;\n    const wasEnabled = logger !== undefined;\n    logger = value;\n    if (wasEnabled !== (logger !== undefined)) publishState();\n  }\n\n  function setPresentation(value: DataAppPresentation | undefined) {\n    if (disposed) return;\n    if (\n      value?.surface === currentPresentation?.surface &&\n      value?.theme === currentPresentation?.theme\n    )\n      return;\n    currentPresentation = value && { ...value };\n    publishState();\n  }\n\n  function cancelAll() {\n    for (const controller of pending.values()) controller.abort();\n    pending.clear();\n  }\n\n  const endpoint = createBridgeEndpoint({\n    role: 'host',\n    origin: frameOrigin,\n    source: () => iframe.contentWindow,\n    opaque: connection.type === 'opaque',\n    context: () => ({ documentId, sessionId, token }),\n    post: message => iframe.contentWindow?.postMessage(message, targetOrigin),\n    diagnostic: (direction, type) => onDiagnostic?.({ direction, type }),\n    invalidRequest: id => {\n      if (pending.has(id)) return;\n      if (pending.size >= MAX_PENDING)\n        error(id, 'bridge_busy', 'Too many pending data requests.');\n      else error(id, 'invalid_message', 'Invalid message route.');\n    },\n    handlers: {\n      ready(message) {\n        if (message.documentId !== documentId) {\n          cancelAll();\n          documentId = message.documentId;\n          sessionId = crypto.randomUUID();\n        }\n        onStatusChange?.('connected');\n        if (disposed) return;\n        send('initialize', { state: hostState() });\n        if (disposed) return;\n        if (javascript !== undefined) send('scriptLoad', { javascript });\n      },\n      runtimeLog({ payload }) {\n        try {\n          logger?.[payload.method](...payload.args);\n        } catch {\n          // A host logger failure must not break bridge delivery.\n        }\n      },\n      runtimeReady() {\n        onStatusChange?.('ready');\n      },\n      runtimeError() {\n        onStatusChange?.('failed');\n      },\n      request(message) {\n        void request(message);\n      },\n      cancel(message) {\n        pending.get(message.id)?.abort();\n        pending.delete(message.id);\n      },\n      disconnect() {\n        cancelAll();\n        documentId = undefined;\n        sessionId = undefined;\n        onStatusChange?.('disconnected');\n      },\n    },\n  });\n  const send = endpoint.send;\n  const receive = endpoint.receive;\n\n  function error(\n    id: string,\n    code: string,\n    message: string,\n    requestId?: string\n  ) {\n    send('error', { id, code, message, requestId });\n  }\n\n  async function request(message: BridgeEventMessage<'request'>) {\n    const id = message.id;\n    if (pending.has(id)) return;\n    if (pending.size >= MAX_PENDING)\n      return error(id, 'bridge_busy', 'Too many pending data requests.');\n    try {\n      const body = JSON.stringify(message.payload);\n      if (\n        message.payload !== undefined &&\n        (typeof body !== 'string' || body.length > 16_384)\n      )\n        throw new Error('Invalid payload');\n    } catch {\n      return error(\n        id,\n        'invalid_payload',\n        'The message payload is invalid or too large.'\n      );\n    }\n    const controller = new AbortController();\n    pending.set(id, controller);\n    const timer = setTimeout(() => {\n      if (pending.get(id) !== controller) return;\n      pending.delete(id);\n      controller.abort();\n      error(id, 'timeout', 'The data request timed out.');\n    }, REQUEST_TIMEOUT_MS);\n    controller.signal.addEventListener('abort', () => clearTimeout(timer), {\n      once: true,\n    });\n    try {\n      const response = await onMessage(\n        { route: message.route, payload: message.payload },\n        { signal: controller.signal }\n      );\n      if (pending.get(id) === controller) send('result', { id, response });\n    } catch (failure) {\n      if (pending.get(id) === controller) {\n        if (failure instanceof MessageRoutingError)\n          error(id, failure.code, failure.message, failure.requestId);\n        else\n          error(\n            id,\n            'request_failed',\n            'The message request failed. Retry the request.'\n          );\n      }\n    } finally {\n      clearTimeout(timer);\n      if (pending.get(id) === controller) pending.delete(id);\n    }\n  }\n\n  function publishState() {\n    if (disposed || !sessionId) return;\n    send('stateUpdate', { state: hostState() });\n  }\n\n  function load() {\n    if (connection.type === 'opaque') token = crypto.randomUUID();\n    cancelAll();\n    documentId = undefined;\n    sessionId = undefined;\n    onStatusChange?.('connecting');\n    send('connect', {});\n  }\n\n  function dispose() {\n    disposed = true;\n    endpoint.dispose();\n    cancelAll();\n    iframe.removeEventListener('load', load);\n    host.removeEventListener('message', receive);\n    host.removeEventListener('popstate', publishState);\n    host.removeEventListener('pagehide', cancelAll);\n  }\n\n  setPresentation(presentation);\n  iframe.addEventListener('load', load);\n  host.addEventListener('message', receive);\n  host.addEventListener('popstate', publishState);\n  host.addEventListener('pagehide', cancelAll);\n  // Reconnect an already-loaded iframe when its host bridge mounts again.\n  onStatusChange?.('connecting');\n  send('connect', {});\n\n  return { dispose, setPresentation, setLogger };\n}\n",
+    "import { PARENT_PARAM } from '@/src/core/bridge';\nimport {\n  attachDataAppConnection,\n  type DataAppStatus,\n  type DataAppHost,\n  type DataAppHostOptions,\n} from '@/src/embed/host';\n\nexport type DataAppSource =\n  | { type: 'url'; url: string }\n  | {\n      type: 'bundle';\n      bootstrapUrl: string;\n      javascript: string;\n    };\nexport type DataAppSourceOptions = DataAppHostOptions & {\n  source: DataAppSource;\n  startupTimeoutMs?: number;\n};\n\n/** Owns loading and sandbox policy. Dispose before replacing the source or retrying. */\nexport function attachDataAppSource({\n  iframe,\n  source,\n  presentation,\n  logger,\n  onMessage,\n  onStatusChange,\n  onDiagnostic,\n  startupTimeoutMs = 30_000,\n}: DataAppSourceOptions): DataAppHost {\n  const host = iframe.ownerDocument.defaultView;\n  if (!host) throw new Error('The iframe requires a host window.');\n  const url = new URL(\n    source.type === 'url' ? source.url : source.bootstrapUrl,\n    host.location.href\n  );\n  if (!/^https?:$/.test(url.protocol))\n    throw new Error('Data apps require an HTTP(S) URL.');\n  const opaque = source.type === 'bundle';\n  if (!opaque && url.origin === host.location.origin)\n    throw new Error('URL data apps require a separate origin from the host.');\n  iframe.setAttribute(\n    'sandbox',\n    opaque\n      ? 'allow-scripts'\n      : 'allow-scripts allow-same-origin allow-downloads allow-popups allow-popups-to-escape-sandbox'\n  );\n  iframe.referrerPolicy = 'no-referrer';\n  if (!opaque) url.searchParams.set(PARENT_PARAM, host.location.origin);\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let failed = false;\n\n  function status(value: DataAppStatus) {\n    if (value === 'connecting') failed = false;\n    if (failed && value !== 'connecting') return;\n    clearTimeout(timer);\n    if (value === 'connecting' || value === 'connected')\n      timer = setTimeout(() => {\n        failed = true;\n        bridge.dispose();\n        onStatusChange?.('failed');\n      }, startupTimeoutMs);\n    if (value === 'failed') {\n      failed = true;\n      bridge.dispose();\n    }\n    onStatusChange?.(value);\n  }\n\n  const bridge = attachDataAppConnection({\n    iframe,\n    connection: opaque\n      ? { type: 'opaque', token: crypto.randomUUID() }\n      : { type: 'origin', origin: url.origin },\n    javascript: opaque ? source.javascript : undefined,\n    presentation,\n    logger,\n    onMessage,\n    onStatusChange: status,\n    onDiagnostic,\n    window: host,\n  });\n\n  function error() {\n    return status('failed');\n  }\n\n  iframe.addEventListener('error', error);\n  iframe.src = url.href;\n\n  function dispose() {\n    clearTimeout(timer);\n    iframe.removeEventListener('error', error);\n    bridge.dispose();\n  }\n\n  return {\n    dispose,\n    setPresentation: bridge.setPresentation,\n    setLogger: bridge.setLogger,\n  };\n}\n",
+    "import {\n  attachDataAppConnection,\n  type DataAppConnectionOptions,\n} from '@/src/embed/host';\nimport {\n  attachDataAppSource,\n  type DataAppSourceOptions,\n} from '@/src/embed/source';\n\nexport type DataAppBridgeOptions =\n  | (DataAppSourceOptions & {\n      connection?: never;\n      window?: never;\n      javascript?: never;\n    })\n  | (DataAppConnectionOptions & { source?: never; startupTimeoutMs?: never });\n\n/** Source mode configures and loads the iframe; connection mode attaches to a host-owned document. */\nexport function attachDataAppBridge(options: DataAppBridgeOptions) {\n  return options.source\n    ? attachDataAppSource(options)\n    : attachDataAppConnection(options);\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;AAoDO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ,OAAO;AAAA,GACyB;AAAA,EACxC,MAAM,cAAc,WAAW,SAAS,WAAW,WAAW,SAAS;AAAA,EACvE,IACE,WAAW,SAAS,YACpB,IAAI,IAAI,WAAW,EAAE,WAAW;AAAA,IAEhC,MAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD,IAAI,WAAW,SAAS,YAAY,CAAC,QAAQ,WAAW,KAAK;AAAA,IAC3D,MAAM,IAAI,MAAM,wBAAwB;AAAA,EAC1C,IAAI,QAAQ,WAAW,SAAS,WAAW,WAAW,QAAQ;AAAA,EAC9D,MAAM,eAAe,WAAW,SAAS,WAAW,MAAM;AAAA,EAC1D,IAAI;AAAA,EACJ,IAAI,WAAW;AAAA,EACf,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,MAAM,UAAU,IAAI;AAAA,EAEpB,SAAS,SAAS,GAAG;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ,KAAK,SAAS;AAAA,MACtB,MAAM,KAAK,SAAS;AAAA,SAChB,sBAAsB,EAAE,cAAc,oBAAoB,IAAI,CAAC;AAAA,MACnE,SAAS,WAAW;AAAA,IACtB;AAAA;AAAA,EAGF,SAAS,SAAS,CAAC,OAAkC;AAAA,IACnD,IAAI,YAAY,UAAU;AAAA,MAAQ;AAAA,IAClC,MAAM,aAAa,WAAW;AAAA,IAC9B,SAAS;AAAA,IACT,IAAI,gBAAgB,WAAW;AAAA,MAAY,aAAa;AAAA;AAAA,EAG1D,SAAS,eAAe,CAAC,OAAwC;AAAA,IAC/D,IAAI;AAAA,MAAU;AAAA,IACd,IACE,OAAO,YAAY,qBAAqB,WACxC,OAAO,UAAU,qBAAqB;AAAA,MAEtC;AAAA,IACF,sBAAsB,SAAS,KAAK,MAAM;AAAA,IAC1C,aAAa;AAAA;AAAA,EAGf,SAAS,SAAS,GAAG;AAAA,IACnB,WAAW,cAAc,QAAQ,OAAO;AAAA,MAAG,WAAW,MAAM;AAAA,IAC5D,QAAQ,MAAM;AAAA;AAAA,EAGhB,MAAM,WAAW,qBAAqB;AAAA,IACpC,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ,MAAM,OAAO;AAAA,IACrB,QAAQ,WAAW,SAAS;AAAA,IAC5B,SAAS,OAAO,EAAE,YAAY,WAAW,MAAM;AAAA,IAC/C,MAAM,aAAW,OAAO,eAAe,YAAY,SAAS,YAAY;AAAA,IACxE,YAAY,CAAC,WAAW,SAAS,eAAe,EAAE,WAAW,KAAK,CAAC;AAAA,IACnE,gBAAgB,QAAM;AAAA,MACpB,IAAI,QAAQ,IAAI,EAAE;AAAA,QAAG;AAAA,MACrB,IAAI,QAAQ,QAAQ;AAAA,QAClB,MAAM,IAAI,eAAe,iCAAiC;AAAA,MACvD;AAAA,cAAM,IAAI,mBAAmB,wBAAwB;AAAA;AAAA,IAE5D,UAAU;AAAA,MACR,KAAK,CAAC,SAAS;AAAA,QACb,IAAI,QAAQ,eAAe,YAAY;AAAA,UACrC,UAAU;AAAA,UACV,aAAa,QAAQ;AAAA,UACrB,YAAY,OAAO,WAAW;AAAA,QAChC;AAAA,QACA,iBAAiB,WAAW;AAAA,QAC5B,IAAI;AAAA,UAAU;AAAA,QACd,KAAK,cAAc,EAAE,OAAO,UAAU,EAAE,CAAC;AAAA,QACzC,IAAI;AAAA,UAAU;AAAA,QACd,IAAI,eAAe;AAAA,UAAW,KAAK,cAAc,EAAE,WAAW,CAAC;AAAA;AAAA,MAEjE,UAAU,GAAG,WAAW;AAAA,QACtB,IAAI;AAAA,UACF,SAAS,QAAQ,QAAQ,GAAG,QAAQ,IAAI;AAAA,UACxC,MAAM;AAAA;AAAA,MAIV,YAAY,GAAG;AAAA,QACb,iBAAiB,OAAO;AAAA;AAAA,MAE1B,YAAY,GAAG;AAAA,QACb,iBAAiB,QAAQ;AAAA;AAAA,MAE3B,OAAO,CAAC,SAAS;AAAA,QACV,QAAQ,OAAO;AAAA;AAAA,MAEtB,MAAM,CAAC,SAAS;AAAA,QACd,QAAQ,IAAI,QAAQ,EAAE,GAAG,MAAM;AAAA,QAC/B,QAAQ,OAAO,QAAQ,EAAE;AAAA;AAAA,MAE3B,UAAU,GAAG;AAAA,QACX,UAAU;AAAA,QACV,aAAa;AAAA,QACb,YAAY;AAAA,QACZ,iBAAiB,cAAc;AAAA;AAAA,IAEnC;AAAA,EACF,CAAC;AAAA,EACD,MAAM,OAAO,SAAS;AAAA,EACtB,MAAM,UAAU,SAAS;AAAA,EAEzB,SAAS,KAAK,CACZ,IACA,MACA,SACA,WACA;AAAA,IACA,KAAK,SAAS,EAAE,IAAI,MAAM,SAAS,UAAU,CAAC;AAAA;AAAA,EAGhD,eAAe,OAAO,CAAC,SAAwC;AAAA,IAC7D,MAAM,KAAK,QAAQ;AAAA,IACnB,IAAI,QAAQ,IAAI,EAAE;AAAA,MAAG;AAAA,IACrB,IAAI,QAAQ,QAAQ;AAAA,MAClB,OAAO,MAAM,IAAI,eAAe,iCAAiC;AAAA,IACnE,IAAI;AAAA,MACF,MAAM,OAAO,KAAK,UAAU,QAAQ,OAAO;AAAA,MAC3C,IACE,QAAQ,YAAY,cACnB,OAAO,SAAS,YAAY,KAAK,SAAS;AAAA,QAE3C,MAAM,IAAI,MAAM,iBAAiB;AAAA,MACnC,MAAM;AAAA,MACN,OAAO,MACL,IACA,mBACA,8CACF;AAAA;AAAA,IAEF,MAAM,aAAa,IAAI;AAAA,IACvB,QAAQ,IAAI,IAAI,UAAU;AAAA,IAC1B,MAAM,QAAQ,WAAW,MAAM;AAAA,MAC7B,IAAI,QAAQ,IAAI,EAAE,MAAM;AAAA,QAAY;AAAA,MACpC,QAAQ,OAAO,EAAE;AAAA,MACjB,WAAW,MAAM;AAAA,MACjB,MAAM,IAAI,WAAW,6BAA6B;AAAA,OACjD,kBAAkB;AAAA,IACrB,WAAW,OAAO,iBAAiB,SAAS,MAAM,aAAa,KAAK,GAAG;AAAA,MACrE,MAAM;AAAA,IACR,CAAC;AAAA,IACD,IAAI;AAAA,MACF,MAAM,WAAW,MAAM,UACrB,EAAE,OAAO,QAAQ,OAAO,SAAS,QAAQ,QAAQ,GACjD,EAAE,QAAQ,WAAW,OAAO,CAC9B;AAAA,MACA,IAAI,QAAQ,IAAI,EAAE,MAAM;AAAA,QAAY,KAAK,UAAU,EAAE,IAAI,SAAS,CAAC;AAAA,MACnE,OAAO,SAAS;AAAA,MAChB,IAAI,QAAQ,IAAI,EAAE,MAAM,YAAY;AAAA,QAClC,IAAI,mBAAmB;AAAA,UACrB,MAAM,IAAI,QAAQ,MAAM,QAAQ,SAAS,QAAQ,SAAS;AAAA,QAE1D;AAAA,gBACE,IACA,kBACA,gDACF;AAAA,MACJ;AAAA,cACA;AAAA,MACA,aAAa,KAAK;AAAA,MAClB,IAAI,QAAQ,IAAI,EAAE,MAAM;AAAA,QAAY,QAAQ,OAAO,EAAE;AAAA;AAAA;AAAA,EAIzD,SAAS,YAAY,GAAG;AAAA,IACtB,IAAI,YAAY,CAAC;AAAA,MAAW;AAAA,IAC5B,KAAK,eAAe,EAAE,OAAO,UAAU,EAAE,CAAC;AAAA;AAAA,EAG5C,SAAS,IAAI,GAAG;AAAA,IACd,IAAI,WAAW,SAAS;AAAA,MAAU,QAAQ,OAAO,WAAW;AAAA,IAC5D,UAAU;AAAA,IACV,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,iBAAiB,YAAY;AAAA,IAC7B,KAAK,WAAW,CAAC,CAAC;AAAA;AAAA,EAGpB,SAAS,OAAO,GAAG;AAAA,IACjB,WAAW;AAAA,IACX,SAAS,QAAQ;AAAA,IACjB,UAAU;AAAA,IACV,OAAO,oBAAoB,QAAQ,IAAI;AAAA,IACvC,KAAK,oBAAoB,WAAW,OAAO;AAAA,IAC3C,KAAK,oBAAoB,YAAY,YAAY;AAAA,IACjD,KAAK,oBAAoB,YAAY,SAAS;AAAA;AAAA,EAGhD,gBAAgB,YAAY;AAAA,EAC5B,OAAO,iBAAiB,QAAQ,IAAI;AAAA,EACpC,KAAK,iBAAiB,WAAW,OAAO;AAAA,EACxC,KAAK,iBAAiB,YAAY,YAAY;AAAA,EAC9C,KAAK,iBAAiB,YAAY,SAAS;AAAA,EAE3C,iBAAiB,YAAY;AAAA,EAC7B,KAAK,WAAW,CAAC,CAAC;AAAA,EAElB,OAAO,EAAE,SAAS,iBAAiB,UAAU;AAAA;;;ACnPxC,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,mBAAmB;AAAA,GACiB;AAAA,EACpC,MAAM,OAAO,OAAO,cAAc;AAAA,EAClC,IAAI,CAAC;AAAA,IAAM,MAAM,IAAI,MAAM,oCAAoC;AAAA,EAC/D,MAAM,MAAM,IAAI,IACd,OAAO,SAAS,QAAQ,OAAO,MAAM,OAAO,cAC5C,KAAK,SAAS,IAChB;AAAA,EACA,IAAI,CAAC,YAAY,KAAK,IAAI,QAAQ;AAAA,IAChC,MAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD,MAAM,SAAS,OAAO,SAAS;AAAA,EAC/B,IAAI,CAAC,UAAU,IAAI,WAAW,KAAK,SAAS;AAAA,IAC1C,MAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E,OAAO,aACL,WACA,SACI,kBACA,6FACN;AAAA,EACA,OAAO,iBAAiB;AAAA,EACxB,IAAI,CAAC;AAAA,IAAQ,IAAI,aAAa,IAAI,cAAc,KAAK,SAAS,MAAM;AAAA,EACpE,IAAI;AAAA,EACJ,IAAI,SAAS;AAAA,EAEb,SAAS,MAAM,CAAC,OAAsB;AAAA,IACpC,IAAI,UAAU;AAAA,MAAc,SAAS;AAAA,IACrC,IAAI,UAAU,UAAU;AAAA,MAAc;AAAA,IACtC,aAAa,KAAK;AAAA,IAClB,IAAI,UAAU,gBAAgB,UAAU;AAAA,MACtC,QAAQ,WAAW,MAAM;AAAA,QACvB,SAAS;AAAA,QACT,OAAO,QAAQ;AAAA,QACf,iBAAiB,QAAQ;AAAA,SACxB,gBAAgB;AAAA,IACrB,IAAI,UAAU,UAAU;AAAA,MACtB,SAAS;AAAA,MACT,OAAO,QAAQ;AAAA,IACjB;AAAA,IACA,iBAAiB,KAAK;AAAA;AAAA,EAGxB,MAAM,SAAS,wBAAwB;AAAA,IACrC;AAAA,IACA,YAAY,SACR,EAAE,MAAM,UAAU,OAAO,OAAO,WAAW,EAAE,IAC7C,EAAE,MAAM,UAAU,QAAQ,IAAI,OAAO;AAAA,IACzC,YAAY,SAAS,OAAO,aAAa;AAAA,IACzC;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,IAChB;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AAAA,EAED,SAAS,KAAK,GAAG;AAAA,IACf,OAAO,OAAO,QAAQ;AAAA;AAAA,EAGxB,OAAO,iBAAiB,SAAS,KAAK;AAAA,EACtC,OAAO,MAAM,IAAI;AAAA,EAEjB,SAAS,OAAO,GAAG;AAAA,IACjB,aAAa,KAAK;AAAA,IAClB,OAAO,oBAAoB,SAAS,KAAK;AAAA,IACzC,OAAO,QAAQ;AAAA;AAAA,EAGjB,OAAO;AAAA,IACL;AAAA,IACA,iBAAiB,OAAO;AAAA,IACxB,WAAW,OAAO;AAAA,EACpB;AAAA;;;ACnFK,SAAS,oBAAmB,CAAC,SAA+B;AAAA,EACjE,OAAO,QAAQ,SACX,oBAAoB,OAAO,IAC3B,wBAAwB,OAAO;AAAA;",
+  "debugId": "5826F4790D0666BF64756E2164756E21",
+  "names": []
+}

package/dist/chunks/{contract-8wdybxj7.js → contract-sm7j7k95.js}

@@ -1,14 +1,12 @@
 import {
   DataSourceError2
-} from "./contract-wd8qe3mt.js";
+} from "./contract-yxbjea23.js";
 import {
-  BRIDGE,
   PARENT_PARAM,
   MAX_PENDING,
   REQUEST_TIMEOUT_MS,
-  isBridgeMessage,
-  validId
-} from "./contract-cxr9t12b.js";
+  createBridgeEndpoint
+} from "./contract-awa2d5b1.js";
 import {
   MessageRoutingError2,
   defineDataQueryRoute2,
@@ -81,6 +79,46 @@ function createMessageClient2(routes, transport) {
   };
 }
 
+// src/client/logger.ts
+function createBridgeLogger(enabled, send) {
+  function resolve(args) {
+    if (args.length === 1 && typeof args[0] === "function") {
+      const value = args[0]();
+      return Array.isArray(value) ? value : [value];
+    }
+    return args.map((arg) => typeof arg === "function" ? arg() : arg);
+  }
+  function write(method, args) {
+    if (!enabled())
+      return;
+    try {
+      send({ method, args: resolve(args) });
+    } catch {}
+  }
+  return {
+    log: (...args) => write("log", args),
+    info: (...args) => write("info", args),
+    warn: (...args) => write("warn", args),
+    error: (...args) => write("error", args)
+  };
+}
+function logBridgeMessage(logger, message) {
+  if (message.type === "runtime:log")
+    return;
+  logger.log(() => {
+    const metadata = { type: message.type };
+    if ("id" in message)
+      metadata.id = message.id;
+    if (message.type === "bridge:request") {
+      metadata.route = message.route;
+      const payload = message.payload;
+      if (message.route === "data:query" && payload && typeof payload === "object" && "operation" in payload && typeof payload.operation === "string")
+        metadata.operation = payload.operation;
+    }
+    return ["Sending message to parent", metadata];
+  });
+}
+
 // src/client/iframe.ts
 function rethrowDataMessageError(error) {
   if (error instanceof MessageRoutingError2)
@@ -103,67 +141,61 @@ function createIframeTransport2({
   const pending = new Map;
   let hostState;
   const stateListeners = new Set;
-  function send(message) {
-    frame.parent.postMessage({ channel: BRIDGE, version: 1, documentId, sessionId, token, ...message }, parentOrigin);
-  }
+  const logger = createBridgeLogger(() => !disposed && !!sessionId && !!hostState && typeof hostState === "object" && ("logging" in hostState) && hostState.logging === true, (entry) => send("runtimeLog", { payload: entry }));
+  const endpoint = createBridgeEndpoint({
+    role: "app",
+    origin: parentOrigin,
+    source: () => frame.parent,
+    opaque: mode === "bundle",
+    context: () => ({ documentId, sessionId, token }),
+    post(message) {
+      frame.parent.postMessage(message, parentOrigin);
+      logBridgeMessage(logger, message);
+    },
+    handlers: {
+      connect(message) {
+        if (mode === "bundle")
+          token = message.token;
+        send("ready", {});
+      },
+      initialize(message) {
+        if (sessionId && sessionId !== message.sessionId) {
+          for (const entry of pending.values())
+            entry.reject(new DataAppError2("The preview reconnected. Retry the request.", "bridge_reset"));
+        }
+        const first = !sessionId;
+        sessionId = message.sessionId;
+        receiveState(message.state);
+        if (first)
+          for (const entry of pending.values())
+            entry.start();
+        if (disposed)
+          return;
+        if (mode === "url")
+          send("runtimeReady", {});
+      },
+      stateUpdate(message) {
+        receiveState(message.state);
+      },
+      scriptLoad(message) {
+        if (mode === "bundle")
+          loadScript?.(message.javascript);
+      },
+      result(message) {
+        pending.get(message.id)?.resolve(message.response);
+      },
+      error(message) {
+        pending.get(message.id)?.reject(new MessageRoutingError2(message.code, message.message, message.requestId));
+      }
+    }
+  });
+  const send = endpoint.send;
+  const receive = endpoint.receive;
   function receiveState(state) {
     hostState = state;
     for (const listener of stateListeners)
       listener(state);
   }
-  function receive(event) {
-    if (event.origin !== parentOrigin || event.source !== frame.parent || !isBridgeMessage(event.data))
-      return;
-    const message = event.data;
-    if (message.type === "bridge:connect") {
-      if (mode === "bundle") {
-        if (!validId(message.token))
-          return;
-        token = message.token;
-      }
-      send({ type: "bridge:ready" });
-      return;
-    }
-    if (mode === "bundle" && (!token || message.token !== token))
-      return;
-    if (message.documentId !== documentId)
-      return;
-    if (message.type === "bridge:initialize" && validId(message.sessionId)) {
-      if (sessionId && sessionId !== message.sessionId) {
-        for (const entry of pending.values())
-          entry.reject(new DataAppError2("The preview reconnected. Retry the request.", "bridge_reset"));
-      }
-      const first = !sessionId;
-      sessionId = message.sessionId;
-      if (first)
-        for (const entry of pending.values())
-          entry.start();
-      receiveState(message.state);
-      if (mode === "url")
-        send({ type: "runtime:ready" });
-      return;
-    }
-    if (!sessionId || message.sessionId !== sessionId)
-      return;
-    if (message.type === "state:update") {
-      receiveState(message.state);
-      return;
-    }
-    if (message.type === "script:load" && mode === "bundle" && typeof message.javascript === "string") {
-      loadScript?.(message.javascript);
-      return;
-    }
-    if (typeof message.id !== "string")
-      return;
-    const entry = pending.get(message.id);
-    if (!entry)
-      return;
-    if (message.type === "bridge:result" && "response" in message) {
-      entry.resolve(message.response);
-    } else if (message.type === "bridge:error" && typeof message.code === "string" && typeof message.message === "string") {
-      entry.reject(new MessageRoutingError2(message.code, message.message, typeof message.requestId === "string" ? message.requestId : undefined));
-    }
-  }
   frame.addEventListener("message", receive);
   function requestMessage(message, signal) {
     return new Promise((resolve, reject) => {
@@ -182,13 +214,13 @@ function createIframeTransport2({
       }
       function abort() {
         if (sent)
-          send({ type: "bridge:cancel", id });
+          send("cancel", { id });
         cleanup();
         reject(signal?.reason);
       }
       const timer = setTimeout(() => {
         if (sent)
-          send({ type: "bridge:cancel", id });
+          send("cancel", { id });
         cleanup();
         reject(new DataAppError2(sessionId ? "The data request timed out." : "The preview shell is unavailable. Reload the preview.", sessionId ? "timeout" : "bridge_unavailable"));
       }, timeoutMs);
@@ -197,8 +229,7 @@ function createIframeTransport2({
           if (sent)
             return;
           try {
-            send({
-              type: "bridge:request",
+            send("request", {
               id,
               route: message.route,
               payload: message.payload
@@ -222,8 +253,8 @@ function createIframeTransport2({
       signal?.addEventListener("abort", abort, { once: true });
       if (sessionId)
         entry.start();
-      else
-        send({ type: "bridge:ready" });
+      else if (mode === "url" || token)
+        send("ready", {});
     });
   }
   const messages = createMessageClient2({ "data:query": defineDataQueryRoute2(), "data:sql": sqlQueryRoute2 }, requestMessage);
@@ -231,20 +262,22 @@ function createIframeTransport2({
     return messages.request("data:query", { operation, input }, { signal }).catch(rethrowDataMessageError);
   }
   function disconnect() {
-    send({ type: "bridge:disconnect" });
+    if (sessionId)
+      send("disconnect", {});
     sessionId = undefined;
     for (const entry of pending.values())
       entry.reject(new DataAppError2("The preview has closed.", "bridge_closed"));
   }
   function resume(event) {
-    if (event.persisted)
-      send({ type: "bridge:ready" });
+    if (event.persisted && (mode === "url" || token))
+      send("ready", {});
   }
   function dispose() {
     if (disposed)
       return;
     disconnect();
     disposed = true;
+    endpoint.dispose();
     frame.removeEventListener("message", receive);
     frame.removeEventListener("pagehide", disconnect);
     frame.removeEventListener("pageshow", resume);
@@ -253,8 +286,9 @@ function createIframeTransport2({
   frame.addEventListener("pagehide", disconnect);
   frame.addEventListener("pageshow", resume);
   if (mode === "url")
-    send({ type: "bridge:ready" });
+    send("ready", {});
   return {
+    logger,
     request: requestMessage,
     transport: queryOperation,
     lakehouse: {
@@ -274,10 +308,12 @@ function createIframeTransport2({
       };
     },
     ready() {
-      send({ type: "runtime:ready" });
+      if (!disposed && sessionId)
+        send("runtimeReady", {});
     },
     fail() {
-      send({ type: "runtime:error" });
+      if (!disposed && sessionId)
+        send("runtimeError", {});
     }
   };
 }
@@ -519,4 +555,4 @@ function toDataOperationFailure(error, aborted = false) {
 
 export { DataAppError2, createHttpTransport2, createMessageClient2, createIframeTransport2, localFrameBridge, installDataAppTransport2, getDataAppTransport2, executeDataOperation, toDataOperationFailure };
 
-//# debugId=4AB92B621002707764756E2164756E21
+//# debugId=07C270EAF2B6B13764756E2164756E21

package/dist/chunks/contract-sm7j7k95.js.map

@@ -0,0 +1,14 @@
+{
+  "version": 3,
+  "sources": ["../src/client/transport.ts", "../src/client/messages.ts", "../src/client/logger.ts", "../src/client/iframe.ts", "../src/core/operation.ts"],
+  "sourcesContent": [
+    "import type { TransportResponse } from '@/src/core/bridge';\n\nexport type DataTransport = (\n  operation: string,\n  input: unknown,\n  signal?: AbortSignal\n) => Promise<TransportResponse>;\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/DataAppError');\n\nexport class DataAppError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    message: string,\n    public readonly code: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'DataAppError';\n  }\n}\n\nexport function createHttpTransport({\n  endpoint = '/api/data',\n  fetch: request = globalThis.fetch,\n}: {\n  endpoint?: string;\n  fetch?: typeof fetch;\n} = {}): DataTransport {\n  async function requestData(\n    operation: string,\n    input: unknown,\n    signal?: AbortSignal\n  ): Promise<TransportResponse> {\n    const response = await request(\n      `${endpoint.replace(/\\/$/, '')}/${encodeURIComponent(operation)}`,\n      {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify(input),\n        signal,\n      }\n    );\n    try {\n      return { status: response.status, body: await response.json() };\n    } catch (error) {\n      if (signal?.aborted) throw error;\n      throw new DataAppError(\n        response.ok ? 'The data response was invalid.' : 'Could not load data.',\n        response.ok ? 'invalid_response' : 'request_failed'\n      );\n    }\n  }\n\n  return requestData;\n}\n",
+    "import {\n  MessageRoutingError,\n  type MessageInput,\n  type MessageOutput,\n  type MessageRoutes,\n  type MessageTransport,\n} from '@/src/core/messages';\n\n/** Both ends validate using the same contracts; the transport owns delivery and cancellation. */\nexport function createMessageClient<const Routes extends MessageRoutes>(\n  routes: Routes,\n  transport: MessageTransport\n) {\n  return {\n    async request<\n      Name extends keyof Routes & string,\n      const Input extends MessageInput<NoInfer<Routes[Name]>>,\n    >(\n      route: Name,\n      payload: Input,\n      { signal }: { signal?: AbortSignal } = {}\n    ): Promise<MessageOutput<Routes[Name], Input>> {\n      signal?.throwIfAborted();\n      if (!Object.hasOwn(routes, route))\n        throw new MessageRoutingError(\n          'unknown_route',\n          'Unknown message route.'\n        );\n      const contract = routes[route]!;\n      let input: unknown;\n      try {\n        input = contract.input(payload);\n      } catch {\n        throw new MessageRoutingError(\n          'invalid_payload',\n          'Invalid message payload.'\n        );\n      }\n      const response = await transport({ route, payload: input }, signal);\n      signal?.throwIfAborted();\n      try {\n        return contract.output(response, input as never) as MessageOutput<\n          Routes[Name],\n          Input\n        >;\n      } catch (error) {\n        if (error instanceof MessageRoutingError) throw error;\n        throw new MessageRoutingError(\n          'invalid_response',\n          'Invalid message response.'\n        );\n      }\n    },\n  };\n}\n",
+    "import type { BridgeMessage } from '@/src/core/bridge';\nimport { type DataAppLogger, type LogEntry } from '@/src/core/logger';\n\n/** Lazy arguments run in the iframe; only resolved values cross the bridge. */\nexport function createBridgeLogger(\n  enabled: () => boolean,\n  send: (entry: LogEntry) => void\n): DataAppLogger {\n  function resolve(args: unknown[]): unknown[] {\n    if (args.length === 1 && typeof args[0] === 'function') {\n      const value: unknown = args[0]();\n      return Array.isArray(value) ? value : [value];\n    }\n    return args.map(arg => (typeof arg === 'function' ? arg() : arg));\n  }\n\n  function write(method: keyof DataAppLogger, args: unknown[]) {\n    if (!enabled()) return;\n    try {\n      send({ method, args: resolve(args) });\n    } catch {\n      // Logging must not interrupt the app or recursively log delivery failures.\n    }\n  }\n\n  return {\n    log: (...args) => write('log', args),\n    info: (...args) => write('info', args),\n    warn: (...args) => write('warn', args),\n    error: (...args) => write('error', args),\n  };\n}\n\n/** Log only delivery metadata; payloads and session credentials stay private. */\nexport function logBridgeMessage(\n  logger: DataAppLogger,\n  message: BridgeMessage\n) {\n  if (message.type === 'runtime:log') return;\n  logger.log(() => {\n    const metadata: {\n      type: BridgeMessage['type'];\n      id?: string;\n      route?: string;\n      operation?: string;\n    } = { type: message.type };\n    if ('id' in message) metadata.id = message.id;\n    if (message.type === 'bridge:request') {\n      metadata.route = message.route;\n      const payload = message.payload;\n      if (\n        message.route === 'data:query' &&\n        payload &&\n        typeof payload === 'object' &&\n        'operation' in payload &&\n        typeof payload.operation === 'string'\n      )\n        metadata.operation = payload.operation;\n    }\n    return ['Sending message to parent', metadata];\n  });\n}\n",
+    "import { createBridgeEndpoint } from '@/src/core/bridge-endpoint';\nimport {\n  PARENT_PARAM,\n  MAX_PENDING,\n  REQUEST_TIMEOUT_MS,\n  type TransportResponse,\n} from '@/src/core/bridge';\nimport {\n  defineDataQueryRoute,\n  sqlQueryRoute,\n  MessageRoutingError,\n  type RoutedMessage,\n} from '@/src/core/messages';\nimport type { Lakehouse } from '@/src/core/contract';\nimport { createMessageClient } from '@/src/client/messages';\nimport { DataAppError } from '@/src/client/transport';\nimport { createBridgeLogger, logBridgeMessage } from '@/src/client/logger';\n\ntype Pending = {\n  start: () => void;\n  reject: (error: unknown) => void;\n  resolve: (value: unknown) => void;\n};\n\n/** Data clients expose one error type for HTTP and message delivery. */\nfunction rethrowDataMessageError(error: unknown): never {\n  if (error instanceof MessageRoutingError)\n    throw new DataAppError(error.message, error.code, error.requestId);\n  throw error;\n}\n\n/** One bridge per document, shared by all clients and retained across module hot replacement. */\nexport function createIframeTransport({\n  parentOrigin,\n  window: frame = window,\n  timeoutMs = REQUEST_TIMEOUT_MS,\n  mode = 'url',\n  loadScript,\n}: {\n  parentOrigin: string;\n  window?: Window;\n  timeoutMs?: number;\n  mode?: 'url' | 'bundle';\n  loadScript?: (javascript: string) => void;\n}) {\n  if (new URL(parentOrigin).origin !== parentOrigin)\n    throw new Error('Expected an exact parent origin.');\n  const documentId = crypto.randomUUID();\n  let token: string | undefined;\n  let sessionId: string | undefined;\n  let disposed = false;\n  const pending = new Map<string, Pending>();\n  let hostState: unknown;\n  const stateListeners = new Set<(state: unknown) => void>();\n  const logger = createBridgeLogger(\n    () =>\n      !disposed &&\n      !!sessionId &&\n      !!hostState &&\n      typeof hostState === 'object' &&\n      'logging' in hostState &&\n      hostState.logging === true,\n    entry => send('runtimeLog', { payload: entry })\n  );\n\n  const endpoint = createBridgeEndpoint({\n    role: 'app',\n    origin: parentOrigin,\n    source: () => frame.parent,\n    opaque: mode === 'bundle',\n    context: () => ({ documentId, sessionId, token }),\n    post(message) {\n      frame.parent.postMessage(message, parentOrigin);\n      logBridgeMessage(logger, message);\n    },\n    handlers: {\n      connect(message) {\n        if (mode === 'bundle') token = message.token;\n        send('ready', {});\n      },\n      initialize(message) {\n        if (sessionId && sessionId !== message.sessionId) {\n          for (const entry of pending.values())\n            entry.reject(\n              new DataAppError(\n                'The preview reconnected. Retry the request.',\n                'bridge_reset'\n              )\n            );\n        }\n        const first = !sessionId;\n        sessionId = message.sessionId;\n        receiveState(message.state);\n        if (first) for (const entry of pending.values()) entry.start();\n        if (disposed) return;\n        if (mode === 'url') send('runtimeReady', {});\n      },\n      stateUpdate(message) {\n        receiveState(message.state);\n      },\n      scriptLoad(message) {\n        if (mode === 'bundle') loadScript?.(message.javascript);\n      },\n      result(message) {\n        pending.get(message.id)?.resolve(message.response);\n      },\n      error(message) {\n        pending\n          .get(message.id)\n          ?.reject(\n            new MessageRoutingError(\n              message.code,\n              message.message,\n              message.requestId\n            )\n          );\n      },\n    },\n  });\n  const send = endpoint.send;\n  const receive = endpoint.receive;\n\n  function receiveState(state: unknown) {\n    hostState = state;\n    for (const listener of stateListeners) listener(state);\n  }\n\n  frame.addEventListener('message', receive);\n\n  function requestMessage(\n    message: RoutedMessage,\n    signal?: AbortSignal\n  ): Promise<unknown> {\n    return new Promise((resolve, reject) => {\n      if (disposed)\n        return reject(\n          new DataAppError('The preview has closed.', 'bridge_closed')\n        );\n      if (signal?.aborted) return reject(signal.reason);\n      if (pending.size >= MAX_PENDING)\n        return reject(\n          new DataAppError('Too many pending data requests.', 'bridge_busy')\n        );\n      const id = crypto.randomUUID();\n      let sent = false;\n\n      function cleanup() {\n        clearTimeout(timer);\n        signal?.removeEventListener('abort', abort);\n        pending.delete(id);\n      }\n\n      function abort() {\n        if (sent) send('cancel', { id });\n        cleanup();\n        reject(signal?.reason);\n      }\n\n      const timer = setTimeout(() => {\n        if (sent) send('cancel', { id });\n        cleanup();\n        reject(\n          new DataAppError(\n            sessionId\n              ? 'The data request timed out.'\n              : 'The preview shell is unavailable. Reload the preview.',\n            sessionId ? 'timeout' : 'bridge_unavailable'\n          )\n        );\n      }, timeoutMs);\n      const entry: Pending = {\n        start() {\n          if (sent) return;\n          try {\n            send('request', {\n              id,\n              route: message.route,\n              payload: message.payload,\n            });\n            sent = true;\n          } catch {\n            cleanup();\n            reject(\n              new DataAppError(\n                'The message payload could not be sent.',\n                'invalid_payload'\n              )\n            );\n          }\n        },\n        resolve(value) {\n          cleanup();\n          resolve(value);\n        },\n        reject(error) {\n          cleanup();\n          reject(error);\n        },\n      };\n      pending.set(id, entry);\n      signal?.addEventListener('abort', abort, { once: true });\n      if (sessionId) entry.start();\n      else if (mode === 'url' || token) send('ready', {});\n    });\n  }\n\n  const messages = createMessageClient(\n    { 'data:query': defineDataQueryRoute(), 'data:sql': sqlQueryRoute },\n    requestMessage\n  );\n\n  function queryOperation(\n    operation: string,\n    input: unknown,\n    signal?: AbortSignal\n  ): Promise<TransportResponse> {\n    return messages\n      .request('data:query', { operation, input }, { signal })\n      .catch(rethrowDataMessageError);\n  }\n\n  function disconnect() {\n    if (sessionId) send('disconnect', {});\n    sessionId = undefined;\n    for (const entry of pending.values())\n      entry.reject(\n        new DataAppError('The preview has closed.', 'bridge_closed')\n      );\n  }\n\n  function resume(event: PageTransitionEvent) {\n    if (event.persisted && (mode === 'url' || token)) send('ready', {});\n  }\n\n  function dispose() {\n    if (disposed) return;\n    disconnect();\n    disposed = true;\n    endpoint.dispose();\n    frame.removeEventListener('message', receive);\n    frame.removeEventListener('pagehide', disconnect);\n    frame.removeEventListener('pageshow', resume);\n    stateListeners.clear();\n  }\n\n  frame.addEventListener('pagehide', disconnect);\n  frame.addEventListener('pageshow', resume);\n  if (mode === 'url') send('ready', {});\n\n  return {\n    logger,\n    request: requestMessage,\n    transport: queryOperation,\n    lakehouse: {\n      queryAll(statement, { limit, signal }) {\n        return messages\n          .request('data:sql', { statement, limit }, { signal })\n          .catch(rethrowDataMessageError);\n      },\n    } satisfies Lakehouse,\n    dispose,\n    mode,\n    snapshot() {\n      return hostState;\n    },\n    subscribe(listener: (state: unknown) => void) {\n      stateListeners.add(listener);\n\n      return () => {\n        stateListeners.delete(listener);\n      };\n    },\n    ready() {\n      if (!disposed && sessionId) send('runtimeReady', {});\n    },\n    fail() {\n      if (!disposed && sessionId) send('runtimeError', {});\n    },\n  };\n}\n\nexport type IframeTransport = ReturnType<typeof createIframeTransport>;\n\nconst bridgeKey = Symbol.for('altertable.localFrameBridge');\nconst installedKey = Symbol.for('altertable.installedTransport');\ntype LocalBridge = Pick<\n  ReturnType<typeof createIframeTransport>,\n  'transport'\n> & { connect?: () => Promise<ReturnType<typeof createIframeTransport>> };\ntype FrameWindow = Window & {\n  [bridgeKey]?: LocalBridge;\n  [installedKey]?: ReturnType<typeof createIframeTransport>;\n};\n\n/** The URL opts into local preview; only same-origin server configuration establishes trust. */\nexport function localFrameBridge(window?: Window): LocalBridge | undefined {\n  const activeWindow =\n    window ??\n    (typeof globalThis.window === 'undefined' ? undefined : globalThis.window);\n  if (!activeWindow) return undefined;\n  const frame = activeWindow as FrameWindow;\n  if (frame[bridgeKey]) return frame[bridgeKey];\n  const parentOrigin =\n    new URL(frame.location.href).searchParams.get(PARENT_PARAM) ?? '';\n  if (!parentOrigin) return undefined;\n\n  async function connect(parentOrigin: string) {\n    try {\n      const response = await frame.fetch('/__altertable/parent', {\n        signal: AbortSignal.timeout(5000),\n      });\n      const config = (await response.json()) as { origin?: unknown };\n      if (\n        !response.ok ||\n        config.origin !== parentOrigin ||\n        frame.parent === frame\n      )\n        throw new Error('Invalid local parent configuration.');\n      // Another owner can install a trusted bridge while configuration is pending.\n      if (frame[installedKey]) return frame[installedKey];\n      if (frame[bridgeKey] !== proxy)\n        throw new Error('Preview transport owner changed.');\n      const bridge = createIframeTransport({ parentOrigin, window: frame });\n      frame[bridgeKey] = bridge;\n      frame[installedKey] = bridge;\n\n      return bridge;\n    } catch {\n      throw new DataAppError(\n        'The preview shell could not be verified. Open the URL printed by altertable app dev.',\n        'bridge_unavailable'\n      );\n    }\n  }\n\n  let connection: Promise<ReturnType<typeof createIframeTransport>> | undefined;\n\n  function getConnection() {\n    const installed = frame[installedKey];\n    if (installed) return Promise.resolve(installed);\n    if (!connection) {\n      const attempt = connect(parentOrigin);\n      connection = attempt;\n      // Clear only this failed attempt; retained proxy references can explicitly retry.\n      void attempt.catch(() => {\n        if (connection === attempt) connection = undefined;\n      });\n    }\n\n    return connection;\n  }\n\n  const proxy: LocalBridge = {\n    async transport(operation, input, signal) {\n      signal?.throwIfAborted();\n      const attempt = getConnection();\n      let abort: (() => void) | undefined;\n      try {\n        const bridge = signal\n          ? await Promise.race([\n              attempt,\n              new Promise<never>((_, reject) => {\n                const requestSignal = signal;\n\n                function handleAbort() {\n                  reject(requestSignal.reason);\n                }\n\n                abort = handleAbort;\n                requestSignal.addEventListener('abort', handleAbort, {\n                  once: true,\n                });\n              }),\n            ])\n          : await attempt;\n        signal?.throwIfAborted();\n\n        return bridge.transport(operation, input, signal);\n      } finally {\n        if (abort) signal?.removeEventListener('abort', abort);\n      }\n    },\n    connect: getConnection,\n  };\n  frame[bridgeKey] = proxy;\n  // Static mounting still verifies eagerly, without an unhandled rejection.\n  void getConnection().catch(() => {});\n\n  return proxy;\n}\n\n/** Install an explicitly trusted transport for hosted apps and their URL-backed controls. */\nexport function installDataAppTransport(\n  bridge: ReturnType<typeof createIframeTransport>,\n  frame: Window = window\n) {\n  const target = frame as FrameWindow;\n  if (target[installedKey])\n    throw new Error('A data app transport is already installed.');\n  target[bridgeKey] = bridge;\n  target[installedKey] = bridge;\n\n  return () => {\n    if (target[bridgeKey] === bridge) delete target[bridgeKey];\n    if (target[installedKey] === bridge) delete target[installedKey];\n    bridge.dispose();\n  };\n}\n\n/** The bootstrap installs this before executing app code. URL apps can install an explicit connection. */\nexport function getDataAppTransport(frame: Window = window) {\n  return (frame as FrameWindow)[installedKey];\n}\n",
+    "import { DataSourceError } from '@/src/core/contract';\nimport type {\n  DataOperations,\n  DisclosedQuery,\n  Lakehouse,\n  OperationContext,\n  DataQueryBody,\n} from '@/src/core/operation-types';\n\ntype Operation = DataOperations[string];\ntype OperationExecutionOptions = {\n  operationName: string;\n  lakehouse: Lakehouse;\n  signal: AbortSignal;\n  /** Include query evidence in the response; this does not keep browser-owned SQL private. */\n  includeSql: boolean;\n  requestId: string;\n};\n\n/** Shared operation execution. Adapters own authorization, delivery, and public errors. */\nexport async function executeDataOperation(\n  operation: Operation,\n  value: unknown,\n  {\n    operationName,\n    lakehouse,\n    signal: requestSignal,\n    includeSql,\n    requestId,\n  }: OperationExecutionOptions\n) {\n  requestSignal.throwIfAborted();\n  let input: unknown;\n  try {\n    input = operation.input(value);\n  } catch {\n    throw new OperationInputError();\n  }\n\n  const signal = AbortSignal.any([\n    requestSignal,\n    AbortSignal.timeout(operation.policy.maxDurationMs),\n  ]);\n  const execution = createOperationLakehouse(\n    operation,\n    lakehouse,\n    signal,\n    operationName\n  );\n  try {\n    const output = await runOperation(operation, input, {\n      lakehouse: execution.lakehouse,\n      signal,\n    });\n    const body: DataQueryBody<unknown> = {\n      data: operation.output(output),\n      requestId,\n      queriedAt: new Date().toISOString(),\n      queryIds: execution.queryIds,\n      ...(operation.policy.exposeSql && includeSql\n        ? { queries: execution.queries }\n        : {}),\n    };\n    const serializedBody = JSON.stringify(body);\n    const responseBytes = new TextEncoder().encode(serializedBody).byteLength;\n    if (responseBytes > (operation.policy.maxResponseBytes ?? 1_000_000))\n      throw new Error('Response exceeds byte limit.');\n\n    return { body, serializedBody };\n  } catch (error) {\n    if (signal.aborted && !(error instanceof DataSourceError))\n      throw new OperationTimeoutError();\n    throw error;\n  }\n}\n\n/** Query evidence follows statement invocation order; query IDs retain completion order. */\nfunction createOperationLakehouse(\n  operation: Operation,\n  source: Lakehouse,\n  signal: AbortSignal,\n  operationName: string\n) {\n  const queryIds: string[] = [];\n  const queries: DisclosedQuery[] = [];\n  const lakehouse: Lakehouse = {\n    async queryAll(statement, options) {\n      if (!Number.isInteger(options.limit) || options.limit < 1)\n        throw new Error('Query needs a positive row limit.');\n      if (\n        operation.queryNames &&\n        !Object.values(operation.queryNames).includes(options.name ?? '')\n      )\n        throw new Error(\n          `Query name is not registered for operation ${operationName}.`\n        );\n      const query: DisclosedQuery = {\n        name: options.name ?? `Query ${queries.length + 1}`,\n        statement,\n      };\n      queries.push(query);\n      const limit = Math.min(options.limit, operation.policy.maxQueryRows);\n      let result;\n      try {\n        result = await source.queryAll(statement, {\n          limit,\n          signal: AbortSignal.any([signal, options.signal]),\n        });\n      } catch (error) {\n        if (error instanceof DataSourceError) error.queryName = query.name;\n        throw error;\n      }\n      if (result.rows.length > limit)\n        throw new Error('Result exceeds row limit.');\n      if (result.queryId) {\n        query.queryId = result.queryId;\n        queryIds.push(result.queryId);\n      }\n\n      return result;\n    },\n  };\n\n  return { lakehouse, queries, queryIds };\n}\n\n/** Settle cancellation even when operation code or its lakehouse ignores the signal. */\nasync function runOperation(\n  operation: Operation,\n  input: unknown,\n  { lakehouse, signal }: OperationContext\n) {\n  let abort: (() => void) | undefined;\n  try {\n    signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n      }\n      abort = rejectAborted;\n      signal.addEventListener('abort', rejectAborted, { once: true });\n      if (signal.aborted) rejectAborted();\n    });\n\n    return await Promise.race([\n      cancelled,\n      Promise.resolve().then(() => {\n        signal.throwIfAborted();\n\n        return operation.run({ lakehouse, signal }, input as never);\n      }),\n    ]);\n  } finally {\n    if (abort) signal.removeEventListener('abort', abort);\n  }\n}\n\nclass OperationTimeoutError extends Error {}\n\nclass OperationInputError extends Error {}\n\nconst sourceErrorMessages = {\n  unauthorized:\n    'This app could not authenticate its data connection. Contact the app owner.',\n  forbidden:\n    'This app cannot access the requested data. Contact the app owner.',\n  rate_limited: 'The lakehouse is busy. Wait a moment and retry.',\n  query_rejected:\n    \"A lakehouse query was rejected. Check the app's data operation.\",\n  unavailable: 'The lakehouse is unavailable. Check the connection and retry.',\n};\n\nexport function toDataOperationFailure(error: unknown, aborted = false) {\n  if (error instanceof OperationInputError)\n    return {\n      status: 400,\n      code: 'invalid_input',\n      message: \"Check this operation's inputs.\",\n    };\n  if (error instanceof DataSourceError)\n    return {\n      status: error.reason === 'rate_limited' ? 429 : 502,\n      code: `source_${error.reason}`,\n      message: sourceErrorMessages[error.reason],\n    };\n  const timedOut = aborted || error instanceof OperationTimeoutError;\n  return {\n    status: timedOut ? 504 : 502,\n    code: timedOut ? 'timeout' : 'query_failed',\n    message: timedOut\n      ? 'The data request timed out.'\n      : 'The data request failed.',\n  };\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;AASA,IAAM,aAAa,OAAO,IAAI,mCAAmC;AAAA;AAE1D,MAAM,sBAAqB,MAAM;AAAA,EAYpB;AAAA,EACA;AAAA,GAZR,cAAc;AAAA,UAEhB,OAAO,YAAY,CAAC,OAAyB;AAAA,IACnD,OACE,iBAAiB,SAChB,MAAqC,gBAAgB;AAAA;AAAA,EAI1D,WAAW,CACT,SACgB,MACA,WAChB;AAAA,IACA,MAAM,OAAO;AAAA,IAHG;AAAA,IACA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AAEO,SAAS,oBAAmB;AAAA,EACjC,WAAW;AAAA,EACX,OAAO,UAAU,WAAW;AAAA,IAI1B,CAAC,GAAkB;AAAA,EACrB,eAAe,WAAW,CACxB,WACA,OACA,QAC4B;AAAA,IAC5B,MAAM,WAAW,MAAM,QACrB,GAAG,SAAS,QAAQ,OAAO,EAAE,KAAK,mBAAmB,SAAS,KAC9D;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,KAAK;AAAA,MAC1B;AAAA,IACF,CACF;AAAA,IACA,IAAI;AAAA,MACF,OAAO,EAAE,QAAQ,SAAS,QAAQ,MAAM,MAAM,SAAS,KAAK,EAAE;AAAA,MAC9D,OAAO,OAAO;AAAA,MACd,IAAI,QAAQ;AAAA,QAAS,MAAM;AAAA,MAC3B,MAAM,IAAI,cACR,SAAS,KAAK,mCAAmC,wBACjD,SAAS,KAAK,qBAAqB,gBACrC;AAAA;AAAA;AAAA,EAIJ,OAAO;AAAA;;;ACtDF,SAAS,oBAAuD,CACrE,QACA,WACA;AAAA,EACA,OAAO;AAAA,SACC,QAGL,CACC,OACA,WACE,WAAqC,CAAC,GACK;AAAA,MAC7C,QAAQ,eAAe;AAAA,MACvB,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK;AAAA,QAC9B,MAAM,IAAI,qBACR,iBACA,wBACF;AAAA,MACF,MAAM,WAAW,OAAO;AAAA,MACxB,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,QAAQ,SAAS,MAAM,OAAO;AAAA,QAC9B,MAAM;AAAA,QACN,MAAM,IAAI,qBACR,mBACA,0BACF;AAAA;AAAA,MAEF,MAAM,WAAW,MAAM,UAAU,EAAE,OAAO,SAAS,MAAM,GAAG,MAAM;AAAA,MAClE,QAAQ,eAAe;AAAA,MACvB,IAAI;AAAA,QACF,OAAO,SAAS,OAAO,UAAU,KAAc;AAAA,QAI/C,OAAO,OAAO;AAAA,QACd,IAAI,iBAAiB;AAAA,UAAqB,MAAM;AAAA,QAChD,MAAM,IAAI,qBACR,oBACA,2BACF;AAAA;AAAA;AAAA,EAGN;AAAA;;;ACjDK,SAAS,kBAAkB,CAChC,SACA,MACe;AAAA,EACf,SAAS,OAAO,CAAC,MAA4B;AAAA,IAC3C,IAAI,KAAK,WAAW,KAAK,OAAO,KAAK,OAAO,YAAY;AAAA,MACtD,MAAM,QAAiB,KAAK,GAAG;AAAA,MAC/B,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAAA,IAC9C;AAAA,IACA,OAAO,KAAK,IAAI,SAAQ,OAAO,QAAQ,aAAa,IAAI,IAAI,GAAI;AAAA;AAAA,EAGlE,SAAS,KAAK,CAAC,QAA6B,MAAiB;AAAA,IAC3D,IAAI,CAAC,QAAQ;AAAA,MAAG;AAAA,IAChB,IAAI;AAAA,MACF,KAAK,EAAE,QAAQ,MAAM,QAAQ,IAAI,EAAE,CAAC;AAAA,MACpC,MAAM;AAAA;AAAA,EAKV,OAAO;AAAA,IACL,KAAK,IAAI,SAAS,MAAM,OAAO,IAAI;AAAA,IACnC,MAAM,IAAI,SAAS,MAAM,QAAQ,IAAI;AAAA,IACrC,MAAM,IAAI,SAAS,MAAM,QAAQ,IAAI;AAAA,IACrC,OAAO,IAAI,SAAS,MAAM,SAAS,IAAI;AAAA,EACzC;AAAA;AAIK,SAAS,gBAAgB,CAC9B,QACA,SACA;AAAA,EACA,IAAI,QAAQ,SAAS;AAAA,IAAe;AAAA,EACpC,OAAO,IAAI,MAAM;AAAA,IACf,MAAM,WAKF,EAAE,MAAM,QAAQ,KAAK;AAAA,IACzB,IAAI,QAAQ;AAAA,MAAS,SAAS,KAAK,QAAQ;AAAA,IAC3C,IAAI,QAAQ,SAAS,kBAAkB;AAAA,MACrC,SAAS,QAAQ,QAAQ;AAAA,MACzB,MAAM,UAAU,QAAQ;AAAA,MACxB,IACE,QAAQ,UAAU,gBAClB,WACA,OAAO,YAAY,YACnB,eAAe,WACf,OAAO,QAAQ,cAAc;AAAA,QAE7B,SAAS,YAAY,QAAQ;AAAA,IACjC;AAAA,IACA,OAAO,CAAC,6BAA6B,QAAQ;AAAA,GAC9C;AAAA;;;ACnCH,SAAS,uBAAuB,CAAC,OAAuB;AAAA,EACtD,IAAI,iBAAiB;AAAA,IACnB,MAAM,IAAI,cAAa,MAAM,SAAS,MAAM,MAAM,MAAM,SAAS;AAAA,EACnE,MAAM;AAAA;AAID,SAAS,sBAAqB;AAAA,EACnC;AAAA,EACA,QAAQ,QAAQ;AAAA,EAChB,YAAY;AAAA,EACZ,OAAO;AAAA,EACP;AAAA,GAOC;AAAA,EACD,IAAI,IAAI,IAAI,YAAY,EAAE,WAAW;AAAA,IACnC,MAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD,MAAM,aAAa,OAAO,WAAW;AAAA,EACrC,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI,WAAW;AAAA,EACf,MAAM,UAAU,IAAI;AAAA,EACpB,IAAI;AAAA,EACJ,MAAM,iBAAiB,IAAI;AAAA,EAC3B,MAAM,SAAS,mBACb,MACE,CAAC,YACD,CAAC,CAAC,aACF,CAAC,CAAC,aACF,OAAO,cAAc,aACrB,aAAa,cACb,UAAU,YAAY,MACxB,WAAS,KAAK,cAAc,EAAE,SAAS,MAAM,CAAC,CAChD;AAAA,EAEA,MAAM,WAAW,qBAAqB;AAAA,IACpC,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ,MAAM,MAAM;AAAA,IACpB,QAAQ,SAAS;AAAA,IACjB,SAAS,OAAO,EAAE,YAAY,WAAW,MAAM;AAAA,IAC/C,IAAI,CAAC,SAAS;AAAA,MACZ,MAAM,OAAO,YAAY,SAAS,YAAY;AAAA,MAC9C,iBAAiB,QAAQ,OAAO;AAAA;AAAA,IAElC,UAAU;AAAA,MACR,OAAO,CAAC,SAAS;AAAA,QACf,IAAI,SAAS;AAAA,UAAU,QAAQ,QAAQ;AAAA,QACvC,KAAK,SAAS,CAAC,CAAC;AAAA;AAAA,MAElB,UAAU,CAAC,SAAS;AAAA,QAClB,IAAI,aAAa,cAAc,QAAQ,WAAW;AAAA,UAChD,WAAW,SAAS,QAAQ,OAAO;AAAA,YACjC,MAAM,OACJ,IAAI,cACF,+CACA,cACF,CACF;AAAA,QACJ;AAAA,QACA,MAAM,QAAQ,CAAC;AAAA,QACf,YAAY,QAAQ;AAAA,QACpB,aAAa,QAAQ,KAAK;AAAA,QAC1B,IAAI;AAAA,UAAO,WAAW,SAAS,QAAQ,OAAO;AAAA,YAAG,MAAM,MAAM;AAAA,QAC7D,IAAI;AAAA,UAAU;AAAA,QACd,IAAI,SAAS;AAAA,UAAO,KAAK,gBAAgB,CAAC,CAAC;AAAA;AAAA,MAE7C,WAAW,CAAC,SAAS;AAAA,QACnB,aAAa,QAAQ,KAAK;AAAA;AAAA,MAE5B,UAAU,CAAC,SAAS;AAAA,QAClB,IAAI,SAAS;AAAA,UAAU,aAAa,QAAQ,UAAU;AAAA;AAAA,MAExD,MAAM,CAAC,SAAS;AAAA,QACd,QAAQ,IAAI,QAAQ,EAAE,GAAG,QAAQ,QAAQ,QAAQ;AAAA;AAAA,MAEnD,KAAK,CAAC,SAAS;AAAA,QACb,QACG,IAAI,QAAQ,EAAE,GACb,OACA,IAAI,qBACF,QAAQ,MACR,QAAQ,SACR,QAAQ,SACV,CACF;AAAA;AAAA,IAEN;AAAA,EACF,CAAC;AAAA,EACD,MAAM,OAAO,SAAS;AAAA,EACtB,MAAM,UAAU,SAAS;AAAA,EAEzB,SAAS,YAAY,CAAC,OAAgB;AAAA,IACpC,YAAY;AAAA,IACZ,WAAW,YAAY;AAAA,MAAgB,SAAS,KAAK;AAAA;AAAA,EAGvD,MAAM,iBAAiB,WAAW,OAAO;AAAA,EAEzC,SAAS,cAAc,CACrB,SACA,QACkB;AAAA,IAClB,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,IAAI;AAAA,QACF,OAAO,OACL,IAAI,cAAa,2BAA2B,eAAe,CAC7D;AAAA,MACF,IAAI,QAAQ;AAAA,QAAS,OAAO,OAAO,OAAO,MAAM;AAAA,MAChD,IAAI,QAAQ,QAAQ;AAAA,QAClB,OAAO,OACL,IAAI,cAAa,mCAAmC,aAAa,CACnE;AAAA,MACF,MAAM,KAAK,OAAO,WAAW;AAAA,MAC7B,IAAI,OAAO;AAAA,MAEX,SAAS,OAAO,GAAG;AAAA,QACjB,aAAa,KAAK;AAAA,QAClB,QAAQ,oBAAoB,SAAS,KAAK;AAAA,QAC1C,QAAQ,OAAO,EAAE;AAAA;AAAA,MAGnB,SAAS,KAAK,GAAG;AAAA,QACf,IAAI;AAAA,UAAM,KAAK,UAAU,EAAE,GAAG,CAAC;AAAA,QAC/B,QAAQ;AAAA,QACR,OAAO,QAAQ,MAAM;AAAA;AAAA,MAGvB,MAAM,QAAQ,WAAW,MAAM;AAAA,QAC7B,IAAI;AAAA,UAAM,KAAK,UAAU,EAAE,GAAG,CAAC;AAAA,QAC/B,QAAQ;AAAA,QACR,OACE,IAAI,cACF,YACI,gCACA,yDACJ,YAAY,YAAY,oBAC1B,CACF;AAAA,SACC,SAAS;AAAA,MACZ,MAAM,QAAiB;AAAA,QACrB,KAAK,GAAG;AAAA,UACN,IAAI;AAAA,YAAM;AAAA,UACV,IAAI;AAAA,YACF,KAAK,WAAW;AAAA,cACd;AAAA,cACA,OAAO,QAAQ;AAAA,cACf,SAAS,QAAQ;AAAA,YACnB,CAAC;AAAA,YACD,OAAO;AAAA,YACP,MAAM;AAAA,YACN,QAAQ;AAAA,YACR,OACE,IAAI,cACF,0CACA,iBACF,CACF;AAAA;AAAA;AAAA,QAGJ,OAAO,CAAC,OAAO;AAAA,UACb,QAAQ;AAAA,UACR,QAAQ,KAAK;AAAA;AAAA,QAEf,MAAM,CAAC,OAAO;AAAA,UACZ,QAAQ;AAAA,UACR,OAAO,KAAK;AAAA;AAAA,MAEhB;AAAA,MACA,QAAQ,IAAI,IAAI,KAAK;AAAA,MACrB,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AAAA,MACvD,IAAI;AAAA,QAAW,MAAM,MAAM;AAAA,MACtB,SAAI,SAAS,SAAS;AAAA,QAAO,KAAK,SAAS,CAAC,CAAC;AAAA,KACnD;AAAA;AAAA,EAGH,MAAM,WAAW,qBACf,EAAE,cAAc,sBAAqB,GAAG,YAAY,eAAc,GAClE,cACF;AAAA,EAEA,SAAS,cAAc,CACrB,WACA,OACA,QAC4B;AAAA,IAC5B,OAAO,SACJ,QAAQ,cAAc,EAAE,WAAW,MAAM,GAAG,EAAE,OAAO,CAAC,EACtD,MAAM,uBAAuB;AAAA;AAAA,EAGlC,SAAS,UAAU,GAAG;AAAA,IACpB,IAAI;AAAA,MAAW,KAAK,cAAc,CAAC,CAAC;AAAA,IACpC,YAAY;AAAA,IACZ,WAAW,SAAS,QAAQ,OAAO;AAAA,MACjC,MAAM,OACJ,IAAI,cAAa,2BAA2B,eAAe,CAC7D;AAAA;AAAA,EAGJ,SAAS,MAAM,CAAC,OAA4B;AAAA,IAC1C,IAAI,MAAM,cAAc,SAAS,SAAS;AAAA,MAAQ,KAAK,SAAS,CAAC,CAAC;AAAA;AAAA,EAGpE,SAAS,OAAO,GAAG;AAAA,IACjB,IAAI;AAAA,MAAU;AAAA,IACd,WAAW;AAAA,IACX,WAAW;AAAA,IACX,SAAS,QAAQ;AAAA,IACjB,MAAM,oBAAoB,WAAW,OAAO;AAAA,IAC5C,MAAM,oBAAoB,YAAY,UAAU;AAAA,IAChD,MAAM,oBAAoB,YAAY,MAAM;AAAA,IAC5C,eAAe,MAAM;AAAA;AAAA,EAGvB,MAAM,iBAAiB,YAAY,UAAU;AAAA,EAC7C,MAAM,iBAAiB,YAAY,MAAM;AAAA,EACzC,IAAI,SAAS;AAAA,IAAO,KAAK,SAAS,CAAC,CAAC;AAAA,EAEpC,OAAO;AAAA,IACL;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,IACX,WAAW;AAAA,MACT,QAAQ,CAAC,aAAa,OAAO,UAAU;AAAA,QACrC,OAAO,SACJ,QAAQ,YAAY,EAAE,WAAW,MAAM,GAAG,EAAE,OAAO,CAAC,EACpD,MAAM,uBAAuB;AAAA;AAAA,IAEpC;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,GAAG;AAAA,MACT,OAAO;AAAA;AAAA,IAET,SAAS,CAAC,UAAoC;AAAA,MAC5C,eAAe,IAAI,QAAQ;AAAA,MAE3B,OAAO,MAAM;AAAA,QACX,eAAe,OAAO,QAAQ;AAAA;AAAA;AAAA,IAGlC,KAAK,GAAG;AAAA,MACN,IAAI,CAAC,YAAY;AAAA,QAAW,KAAK,gBAAgB,CAAC,CAAC;AAAA;AAAA,IAErD,IAAI,GAAG;AAAA,MACL,IAAI,CAAC,YAAY;AAAA,QAAW,KAAK,gBAAgB,CAAC,CAAC;AAAA;AAAA,EAEvD;AAAA;AAKF,IAAM,YAAY,OAAO,IAAI,6BAA6B;AAC1D,IAAM,eAAe,OAAO,IAAI,+BAA+B;AAWxD,SAAS,gBAAgB,CAAC,SAA0C;AAAA,EACzE,MAAM,eACJ,YACC,OAAO,WAAW,WAAW,cAAc,YAAY,WAAW;AAAA,EACrE,IAAI,CAAC;AAAA,IAAc;AAAA,EACnB,MAAM,QAAQ;AAAA,EACd,IAAI,MAAM;AAAA,IAAY,OAAO,MAAM;AAAA,EACnC,MAAM,eACJ,IAAI,IAAI,MAAM,SAAS,IAAI,EAAE,aAAa,IAAI,YAAY,KAAK;AAAA,EACjE,IAAI,CAAC;AAAA,IAAc;AAAA,EAEnB,eAAe,OAAO,CAAC,cAAsB;AAAA,IAC3C,IAAI;AAAA,MACF,MAAM,WAAW,MAAM,MAAM,MAAM,wBAAwB;AAAA,QACzD,QAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC,CAAC;AAAA,MACD,MAAM,SAAU,MAAM,SAAS,KAAK;AAAA,MACpC,IACE,CAAC,SAAS,MACV,OAAO,WAAW,gBAClB,MAAM,WAAW;AAAA,QAEjB,MAAM,IAAI,MAAM,qCAAqC;AAAA,MAEvD,IAAI,MAAM;AAAA,QAAe,OAAO,MAAM;AAAA,MACtC,IAAI,MAAM,eAAe;AAAA,QACvB,MAAM,IAAI,MAAM,kCAAkC;AAAA,MACpD,MAAM,SAAS,uBAAsB,EAAE,cAAc,QAAQ,MAAM,CAAC;AAAA,MACpE,MAAM,aAAa;AAAA,MACnB,MAAM,gBAAgB;AAAA,MAEtB,OAAO;AAAA,MACP,MAAM;AAAA,MACN,MAAM,IAAI,cACR,wFACA,oBACF;AAAA;AAAA;AAAA,EAIJ,IAAI;AAAA,EAEJ,SAAS,aAAa,GAAG;AAAA,IACvB,MAAM,YAAY,MAAM;AAAA,IACxB,IAAI;AAAA,MAAW,OAAO,QAAQ,QAAQ,SAAS;AAAA,IAC/C,IAAI,CAAC,YAAY;AAAA,MACf,MAAM,UAAU,QAAQ,YAAY;AAAA,MACpC,aAAa;AAAA,MAER,QAAQ,MAAM,MAAM;AAAA,QACvB,IAAI,eAAe;AAAA,UAAS,aAAa;AAAA,OAC1C;AAAA,IACH;AAAA,IAEA,OAAO;AAAA;AAAA,EAGT,MAAM,QAAqB;AAAA,SACnB,UAAS,CAAC,WAAW,OAAO,QAAQ;AAAA,MACxC,QAAQ,eAAe;AAAA,MACvB,MAAM,UAAU,cAAc;AAAA,MAC9B,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,MAAM,SAAS,SACX,MAAM,QAAQ,KAAK;AAAA,UACjB;AAAA,UACA,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,YAChC,MAAM,gBAAgB;AAAA,YAEtB,SAAS,WAAW,GAAG;AAAA,cACrB,OAAO,cAAc,MAAM;AAAA;AAAA,YAG7B,QAAQ;AAAA,YACR,cAAc,iBAAiB,SAAS,aAAa;AAAA,cACnD,MAAM;AAAA,YACR,CAAC;AAAA,WACF;AAAA,QACH,CAAC,IACD,MAAM;AAAA,QACV,QAAQ,eAAe;AAAA,QAEvB,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM;AAAA,gBAChD;AAAA,QACA,IAAI;AAAA,UAAO,QAAQ,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA,IAGzD,SAAS;AAAA,EACX;AAAA,EACA,MAAM,aAAa;AAAA,EAEd,cAAc,EAAE,MAAM,MAAM,EAAE;AAAA,EAEnC,OAAO;AAAA;AAIF,SAAS,wBAAuB,CACrC,QACA,QAAgB,QAChB;AAAA,EACA,MAAM,SAAS;AAAA,EACf,IAAI,OAAO;AAAA,IACT,MAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D,OAAO,aAAa;AAAA,EACpB,OAAO,gBAAgB;AAAA,EAEvB,OAAO,MAAM;AAAA,IACX,IAAI,OAAO,eAAe;AAAA,MAAQ,OAAO,OAAO;AAAA,IAChD,IAAI,OAAO,kBAAkB;AAAA,MAAQ,OAAO,OAAO;AAAA,IACnD,OAAO,QAAQ;AAAA;AAAA;AAKZ,SAAS,oBAAmB,CAAC,QAAgB,QAAQ;AAAA,EAC1D,OAAQ,MAAsB;AAAA;;;ACvYhC,eAAsB,oBAAoB,CACxC,WACA;AAAA,EAEE;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,GAEF;AAAA,EACA,cAAc,eAAe;AAAA,EAC7B,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,QAAQ,UAAU,MAAM,KAAK;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM,IAAI;AAAA;AAAA,EAGZ,MAAM,SAAS,YAAY,IAAI;AAAA,IAC7B;AAAA,IACA,YAAY,QAAQ,UAAU,OAAO,aAAa;AAAA,EACpD,CAAC;AAAA,EACD,MAAM,YAAY,yBAChB,WACA,WACA,QACA,aACF;AAAA,EACA,IAAI;AAAA,IACF,MAAM,SAAS,MAAM,aAAa,WAAW,OAAO;AAAA,MAClD,WAAW,UAAU;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,IACD,MAAM,OAA+B;AAAA,MACnC,MAAM,UAAU,OAAO,MAAM;AAAA,MAC7B;AAAA,MACA,WAAW,IAAI,KAAK,EAAE,YAAY;AAAA,MAClC,UAAU,UAAU;AAAA,SAChB,UAAU,OAAO,aAAa,aAC9B,EAAE,SAAS,UAAU,QAAQ,IAC7B,CAAC;AAAA,IACP;AAAA,IACA,MAAM,iBAAiB,KAAK,UAAU,IAAI;AAAA,IAC1C,MAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,cAAc,EAAE;AAAA,IAC/D,IAAI,iBAAiB,UAAU,OAAO,oBAAoB;AAAA,MACxD,MAAM,IAAI,MAAM,8BAA8B;AAAA,IAEhD,OAAO,EAAE,MAAM,eAAe;AAAA,IAC9B,OAAO,OAAO;AAAA,IACd,IAAI,OAAO,WAAW,EAAE,iBAAiB;AAAA,MACvC,MAAM,IAAI;AAAA,IACZ,MAAM;AAAA;AAAA;AAKV,SAAS,wBAAwB,CAC/B,WACA,QACA,QACA,eACA;AAAA,EACA,MAAM,WAAqB,CAAC;AAAA,EAC5B,MAAM,UAA4B,CAAC;AAAA,EACnC,MAAM,YAAuB;AAAA,SACrB,SAAQ,CAAC,WAAW,SAAS;AAAA,MACjC,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,QAAQ,QAAQ;AAAA,QACtD,MAAM,IAAI,MAAM,mCAAmC;AAAA,MACrD,IACE,UAAU,cACV,CAAC,OAAO,OAAO,UAAU,UAAU,EAAE,SAAS,QAAQ,QAAQ,EAAE;AAAA,QAEhE,MAAM,IAAI,MACR,8CAA8C,gBAChD;AAAA,MACF,MAAM,QAAwB;AAAA,QAC5B,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,QAChD;AAAA,MACF;AAAA,MACA,QAAQ,KAAK,KAAK;AAAA,MAClB,MAAM,QAAQ,KAAK,IAAI,QAAQ,OAAO,UAAU,OAAO,YAAY;AAAA,MACnE,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,SAAS,MAAM,OAAO,SAAS,WAAW;AAAA,UACxC;AAAA,UACA,QAAQ,YAAY,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC;AAAA,QAClD,CAAC;AAAA,QACD,OAAO,OAAO;AAAA,QACd,IAAI,iBAAiB;AAAA,UAAiB,MAAM,YAAY,MAAM;AAAA,QAC9D,MAAM;AAAA;AAAA,MAER,IAAI,OAAO,KAAK,SAAS;AAAA,QACvB,MAAM,IAAI,MAAM,2BAA2B;AAAA,MAC7C,IAAI,OAAO,SAAS;AAAA,QAClB,MAAM,UAAU,OAAO;AAAA,QACvB,SAAS,KAAK,OAAO,OAAO;AAAA,MAC9B;AAAA,MAEA,OAAO;AAAA;AAAA,EAEX;AAAA,EAEA,OAAO,EAAE,WAAW,SAAS,SAAS;AAAA;AAIxC,eAAe,YAAY,CACzB,WACA,SACE,WAAW,UACb;AAAA,EACA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,eAAe;AAAA,IACtB,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA;AAAA,MAEtC,QAAQ;AAAA,MACR,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MAC9D,IAAI,OAAO;AAAA,QAAS,cAAc;AAAA,KACnC;AAAA,IAED,OAAO,MAAM,QAAQ,KAAK;AAAA,MACxB;AAAA,MACA,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAAA,QAC3B,OAAO,eAAe;AAAA,QAEtB,OAAO,UAAU,IAAI,EAAE,WAAW,OAAO,GAAG,KAAc;AAAA,OAC3D;AAAA,IACH,CAAC;AAAA,YACD;AAAA,IACA,IAAI;AAAA,MAAO,OAAO,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA;AAIxD,MAAM,8BAA8B,MAAM;AAAC;AAAA;AAE3C,MAAM,4BAA4B,MAAM;AAAC;AAEzC,IAAM,sBAAsB;AAAA,EAC1B,cACE;AAAA,EACF,WACE;AAAA,EACF,cAAc;AAAA,EACd,gBACE;AAAA,EACF,aAAa;AACf;AAEO,SAAS,sBAAsB,CAAC,OAAgB,UAAU,OAAO;AAAA,EACtE,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,EACF,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ,MAAM,WAAW,iBAAiB,MAAM;AAAA,MAChD,MAAM,UAAU,MAAM;AAAA,MACtB,SAAS,oBAAoB,MAAM;AAAA,IACrC;AAAA,EACF,MAAM,WAAW,WAAW,iBAAiB;AAAA,EAC7C,OAAO;AAAA,IACL,QAAQ,WAAW,MAAM;AAAA,IACzB,MAAM,WAAW,YAAY;AAAA,IAC7B,SAAS,WACL,gCACA;AAAA,EACN;AAAA;",
+  "debugId": "07C270EAF2B6B13764756E2164756E21",
+  "names": []
+}

package/dist/chunks/{contract-farfe948.js → contract-txjy0en2.js}

@@ -1,7 +1,3 @@
-import {
-  invariant
-} from "./contract-8q35dcyh.js";
-
 // src/core/appearance.ts
 var defaults = {
   theme: "light",
@@ -34,38 +30,42 @@ function font(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 120 && !/[;{}()]/.test(value);
 }
 function parseAppearance2(value) {
-  if (value === undefined)
-    return {
-      ...defaults,
-      chartColors: [...defaults.chartColors],
-      typography: { ...defaults.typography }
-    };
-  invariant(record(value) && Object.keys(value).every((key) => [
-    "theme",
-    "baseColor",
-    "accentColor",
-    "darkAccentColor",
-    "chartColors",
-    "density",
-    "cornerRadius",
-    "elevation",
-    "typography"
-  ].includes(key)), "Invalid appearance settings.");
-  const typography = value.typography;
-  const validFields = (value.theme === undefined || oneOf(value.theme, ["light", "dark", "system"])) && (value.baseColor === undefined || oneOf(value.baseColor, ["neutral", "slate", "warm"])) && (value.accentColor === undefined || color(value.accentColor)) && (value.darkAccentColor === undefined || color(value.darkAccentColor)) && (value.chartColors === undefined || Array.isArray(value.chartColors) && value.chartColors.length >= 1 && value.chartColors.length <= 8 && value.chartColors.every(color)) && (value.density === undefined || oneOf(value.density, ["compact", "comfortable", "spacious"])) && (value.cornerRadius === undefined || oneOf(value.cornerRadius, ["none", "small", "medium", "large"])) && (value.elevation === undefined || oneOf(value.elevation, ["flat", "subtle", "raised"])) && (typography === undefined || record(typography) && Object.keys(typography).every((key) => key === "body" || key === "heading") && (typography.body === undefined || font(typography.body)) && (typography.heading === undefined || font(typography.heading)));
-  invariant(validFields, "Invalid appearance settings.");
+  if (!record(value))
+    return normalizeAppearance2();
+  const typography = record(value.typography) ? value.typography : {};
+  return normalizeAppearance2({
+    theme: oneOf(value.theme, ["light", "dark", "system"]) ? value.theme : undefined,
+    baseColor: oneOf(value.baseColor, ["neutral", "slate", "warm"]) ? value.baseColor : undefined,
+    accentColor: color(value.accentColor) ? value.accentColor : undefined,
+    darkAccentColor: color(value.darkAccentColor) ? value.darkAccentColor : undefined,
+    chartColors: Array.isArray(value.chartColors) && value.chartColors.length >= 1 && value.chartColors.length <= 8 && value.chartColors.every(color) ? value.chartColors : undefined,
+    density: oneOf(value.density, ["compact", "comfortable", "spacious"]) ? value.density : undefined,
+    cornerRadius: oneOf(value.cornerRadius, [
+      "none",
+      "small",
+      "medium",
+      "large"
+    ]) ? value.cornerRadius : undefined,
+    elevation: oneOf(value.elevation, ["flat", "subtle", "raised"]) ? value.elevation : undefined,
+    typography: {
+      body: font(typography.body) ? typography.body : undefined,
+      heading: font(typography.heading) ? typography.heading : undefined
+    }
+  });
+}
+function normalizeAppearance2(value = {}) {
   return {
     theme: value.theme ?? defaults.theme,
     baseColor: value.baseColor ?? defaults.baseColor,
     accentColor: value.accentColor ?? defaults.accentColor,
-    darkAccentColor: value.darkAccentColor ?? (value.accentColor === undefined ? defaults.darkAccentColor : undefined),
-    chartColors: value.chartColors ?? defaults.chartColors,
     density: value.density ?? defaults.density,
     cornerRadius: value.cornerRadius ?? defaults.cornerRadius,
     elevation: value.elevation ?? defaults.elevation,
+    darkAccentColor: value.darkAccentColor ?? (value.accentColor === undefined ? defaults.darkAccentColor : undefined),
+    chartColors: [...value.chartColors ?? defaults.chartColors],
     typography: {
-      body: record(typography) && typeof typography.body === "string" ? typography.body : defaults.typography.body,
-      heading: record(typography) && typeof typography.heading === "string" ? typography.heading : defaults.typography.heading
+      body: value.typography?.body ?? defaults.typography.body,
+      heading: value.typography?.heading ?? defaults.typography.heading
     }
   };
 }
@@ -98,7 +98,7 @@ function fontStack(family) {
   return family === "system" ? "-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, ui-sans-serif, sans-serif" : `${JSON.stringify(family)}, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, ui-sans-serif, sans-serif`;
 }
 function applyAppearance2(value) {
-  const settings = parseAppearance2(value);
+  const settings = normalizeAppearance2(value);
   const root = document.documentElement;
   const preference = window.matchMedia("(prefers-color-scheme: dark)");
   const [xs, sm, md, lg, xl] = spaces[settings.density];
@@ -183,6 +183,6 @@ function createThemeController2(initialTheme = "light") {
   };
 }
 
-export { parseAppearance2, applyAppearance2, createThemeController2 };
+export { parseAppearance2, normalizeAppearance2, applyAppearance2, createThemeController2 };
 
-//# debugId=90CD7598768B570C64756E2164756E21
+//# debugId=E968EAFDC43C9C1764756E2164756E21

package/dist/chunks/contract-txjy0en2.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/core/appearance.ts"],
+  "sourcesContent": [
+    "/**\n * Brand settings; parsing is portable, while theme application requires the browser.\n * @module @altertable/data-app/appearance\n */\nexport type Theme = 'light' | 'dark';\nexport type ThemePreference = Theme | 'system';\n\nexport type AppearanceSettings = {\n  theme: ThemePreference;\n  baseColor: 'neutral' | 'slate' | 'warm';\n  accentColor: string;\n  darkAccentColor?: string;\n  chartColors: string[];\n  density: 'compact' | 'comfortable' | 'spacious';\n  cornerRadius: 'none' | 'small' | 'medium' | 'large';\n  elevation: 'flat' | 'subtle' | 'raised';\n  typography: { body: string; heading: string };\n};\n\n/** App-authored overrides; omitted fields use the package defaults. */\nexport type AppearanceOptions = Partial<\n  Omit<AppearanceSettings, 'typography'>\n> & { typography?: Partial<AppearanceSettings['typography']> };\n\nexport type ThemeController = {\n  getTheme: () => ThemePreference;\n  setTheme: (theme: ThemePreference) => void;\n  subscribe: (listener: () => void) => () => void;\n};\n\nconst defaults: AppearanceSettings = {\n  theme: 'light',\n  baseColor: 'neutral',\n  accentColor: '#405d47',\n  darkAccentColor: '#a6c4ad',\n  chartColors: [\n    '#285fc0',\n    '#a95319',\n    '#147862',\n    '#7243aa',\n    '#aa3958',\n    '#475569',\n  ],\n  density: 'comfortable',\n  cornerRadius: 'medium',\n  elevation: 'subtle',\n  typography: { body: 'system', heading: 'system' },\n};\n\nfunction record(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction oneOf<T extends string>(\n  value: unknown,\n  options: readonly T[]\n): value is T {\n  return typeof value === 'string' && options.includes(value as T);\n}\n\nfunction color(value: unknown): value is string {\n  return typeof value === 'string' && /^#[0-9a-fA-F]{6}$/.test(value);\n}\n\nfunction font(value: unknown): value is string {\n  return (\n    typeof value === 'string' &&\n    value.length > 0 &&\n    value.length <= 120 &&\n    !/[;{}()]/.test(value)\n  );\n}\n\n/** Preserve supported external settings and use defaults for invalid fields. */\nexport function parseAppearance(value: unknown): AppearanceSettings {\n  if (!record(value)) return normalizeAppearance();\n  const typography = record(value.typography) ? value.typography : {};\n\n  return normalizeAppearance({\n    theme: oneOf(value.theme, ['light', 'dark', 'system'])\n      ? value.theme\n      : undefined,\n    baseColor: oneOf(value.baseColor, ['neutral', 'slate', 'warm'])\n      ? value.baseColor\n      : undefined,\n    accentColor: color(value.accentColor) ? value.accentColor : undefined,\n    darkAccentColor: color(value.darkAccentColor)\n      ? value.darkAccentColor\n      : undefined,\n    chartColors:\n      Array.isArray(value.chartColors) &&\n      value.chartColors.length >= 1 &&\n      value.chartColors.length <= 8 &&\n      value.chartColors.every(color)\n        ? value.chartColors\n        : undefined,\n    density: oneOf(value.density, ['compact', 'comfortable', 'spacious'])\n      ? value.density\n      : undefined,\n    cornerRadius: oneOf(value.cornerRadius, [\n      'none',\n      'small',\n      'medium',\n      'large',\n    ])\n      ? value.cornerRadius\n      : undefined,\n    elevation: oneOf(value.elevation, ['flat', 'subtle', 'raised'])\n      ? value.elevation\n      : undefined,\n    typography: {\n      body: font(typography.body) ? typography.body : undefined,\n      heading: font(typography.heading) ? typography.heading : undefined,\n    },\n  });\n}\n\n/** Resolve typed app settings without repeating authoring checks at runtime. */\nexport function normalizeAppearance(\n  value: AppearanceOptions = {}\n): AppearanceSettings {\n  return {\n    theme: value.theme ?? defaults.theme,\n    baseColor: value.baseColor ?? defaults.baseColor,\n    accentColor: value.accentColor ?? defaults.accentColor,\n    density: value.density ?? defaults.density,\n    cornerRadius: value.cornerRadius ?? defaults.cornerRadius,\n    elevation: value.elevation ?? defaults.elevation,\n    darkAccentColor:\n      value.darkAccentColor ??\n      (value.accentColor === undefined ? defaults.darkAccentColor : undefined),\n    chartColors: [...(value.chartColors ?? defaults.chartColors)],\n    typography: {\n      body: value.typography?.body ?? defaults.typography.body,\n      heading: value.typography?.heading ?? defaults.typography.heading,\n    },\n  };\n}\n\nconst palettes = {\n  neutral: {\n    light: ['#ffffff', '#ffffff', '#f6f7f7', '#202124', '#687078', '#e3e6e8'],\n    dark: ['#151719', '#202326', '#292d31', '#f2f3f4', '#aeb5bc', '#3b4248'],\n  },\n  slate: {\n    light: ['#f8fafc', '#ffffff', '#f1f5f9', '#17212f', '#607083', '#dce3ea'],\n    dark: ['#111820', '#1b2530', '#263340', '#f0f4f8', '#a8b5c3', '#3a4857'],\n  },\n  warm: {\n    light: ['#fbfaf8', '#ffffff', '#f5f2ed', '#292723', '#736e66', '#e8e2da'],\n    dark: ['#1b1916', '#25221e', '#302c27', '#f5f1eb', '#bcb3a8', '#494239'],\n  },\n} as const;\n\nconst spaces = {\n  compact: ['4px', '8px', '12px', '18px', '24px'],\n  comfortable: ['5px', '10px', '16px', '24px', '32px'],\n  spacious: ['6px', '12px', '20px', '30px', '40px'],\n} as const;\n\nconst radii = {\n  none: ['0px', '0px', '0px'],\n  small: ['4px', '7px', '9px'],\n  medium: ['7px', '12px', '16px'],\n  large: ['10px', '18px', '24px'],\n} as const;\n\nfunction fontStack(family: string): string {\n  return family === 'system'\n    ? \"-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, ui-sans-serif, sans-serif\"\n    : `${JSON.stringify(family)}, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, ui-sans-serif, sans-serif`;\n}\n\n/**\n * Install semantic tokens on the document root, including portaled UI. Returns a cleanup for\n * system-theme listening.\n */\nexport function applyAppearance(value?: AppearanceOptions): () => void {\n  const settings = normalizeAppearance(value);\n  const root = document.documentElement;\n  const preference = window.matchMedia('(prefers-color-scheme: dark)');\n  const [xs, sm, md, lg, xl] = spaces[settings.density];\n  const [control, surface, overlay] = radii[settings.cornerRadius];\n  const tokens: Record<string, string> = {\n    '--at-font': fontStack(settings.typography.body),\n    '--at-font-heading': fontStack(settings.typography.heading),\n    '--at-space-xs': xs,\n    '--at-space-sm': sm,\n    '--at-space-md': md,\n    '--at-space-lg': lg,\n    '--at-space-xl': xl,\n    '--at-layout-gap': `clamp(${md}, 2.5vw, ${lg})`,\n    '--at-radius-control': control,\n    '--at-radius-surface': surface,\n    '--at-radius-overlay': overlay,\n    '--at-shadow-overlay':\n      settings.elevation === 'flat'\n        ? 'none'\n        : settings.elevation === 'raised'\n          ? '0 24px 72px rgb(0 0 0 / 24%)'\n          : '0 18px 50px rgb(0 0 0 / 16%)',\n    '--at-shadow-surface':\n      settings.elevation === 'flat'\n        ? 'none'\n        : settings.elevation === 'raised'\n          ? '0 8px 28px rgb(20 28 40 / 10%)'\n          : '0 3px 16px rgb(20 28 40 / 5%)',\n  };\n\n  function applyColors(): void {\n    const dark =\n      settings.theme === 'dark' ||\n      (settings.theme === 'system' && preference.matches);\n    const [background, surfaceColor, subtle, text, muted, border] =\n      palettes[settings.baseColor][dark ? 'dark' : 'light'];\n    const accent = dark\n      ? (settings.darkAccentColor ??\n        `color-mix(in srgb, ${settings.accentColor} 50%, white)`)\n      : settings.accentColor;\n    settings.chartColors.forEach((chartColor, index) => {\n      tokens[`--at-chart-${index + 1}`] = dark\n        ? `color-mix(in srgb, ${chartColor} 60%, white)`\n        : chartColor;\n    });\n    Object.assign(tokens, {\n      '--at-background': background,\n      '--at-surface': surfaceColor,\n      '--at-subtle': subtle,\n      '--at-text': text,\n      '--at-muted': muted,\n      '--at-border': border,\n      '--at-accent': accent,\n      '--at-focus-color': muted,\n      '--at-control-hover-border': `color-mix(in srgb, ${muted} 45%, ${border})`,\n      '--at-accent-hover': `color-mix(in srgb, ${accent} 80%, ${dark ? 'white' : 'black'})`,\n      '--at-accent-subtle': `color-mix(in srgb, ${accent} ${dark ? 22 : 12}%, ${surfaceColor})`,\n      '--at-on-accent': dark ? background : '#ffffff',\n      '--at-danger': dark ? '#f97066' : '#b42318',\n      '--at-backdrop': dark ? 'rgb(0 0 0 / 55%)' : 'rgb(15 23 30 / 22%)',\n      '--at-code-surface': dark ? '#242a31' : '#f4f6f9',\n      '--at-code-text': dark ? '#e5e9ef' : '#273242',\n    });\n    root.style.colorScheme = dark ? 'dark' : 'light';\n    for (const [name, token] of Object.entries(tokens))\n      root.style.setProperty(name, token);\n  }\n  applyColors();\n  if (settings.theme === 'system')\n    preference.addEventListener('change', applyColors);\n\n  return () => {\n    preference.removeEventListener('change', applyColors);\n  };\n}\n\n/** Persist a viewer theme preference. Applying appearance belongs to the UI owner. */\nexport function createThemeController(\n  initialTheme: ThemePreference = 'light'\n): ThemeController {\n  const storageKey = 'altertable.data-app.theme';\n  let theme = initialTheme;\n  try {\n    const saved = window.localStorage.getItem(storageKey);\n    if (oneOf(saved, ['light', 'dark', 'system'])) theme = saved;\n  } catch {\n    // Storage can be unavailable in private browsing or embedded contexts.\n  }\n  const listeners = new Set<() => void>();\n\n  return {\n    getTheme() {\n      return theme;\n    },\n    setTheme(nextTheme) {\n      if (nextTheme === theme) return;\n      theme = nextTheme;\n      try {\n        window.localStorage.setItem(storageKey, theme);\n      } catch {\n        // The selection still applies to this page.\n      }\n      listeners.forEach(listener => listener());\n    },\n    subscribe(listener) {\n      listeners.add(listener);\n\n      return () => listeners.delete(listener);\n    },\n  };\n}\n"
+  ],
+  "mappings": ";AA8BA,IAAM,WAA+B;AAAA,EACnC,OAAO;AAAA,EACP,WAAW;AAAA,EACX,aAAa;AAAA,EACb,iBAAiB;AAAA,EACjB,aAAa;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,SAAS;AAAA,EACT,cAAc;AAAA,EACd,WAAW;AAAA,EACX,YAAY,EAAE,MAAM,UAAU,SAAS,SAAS;AAClD;AAEA,SAAS,MAAM,CAAC,OAAkD;AAAA,EAChE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAAA;AAG5E,SAAS,KAAuB,CAC9B,OACA,SACY;AAAA,EACZ,OAAO,OAAO,UAAU,YAAY,QAAQ,SAAS,KAAU;AAAA;AAGjE,SAAS,KAAK,CAAC,OAAiC;AAAA,EAC9C,OAAO,OAAO,UAAU,YAAY,oBAAoB,KAAK,KAAK;AAAA;AAGpE,SAAS,IAAI,CAAC,OAAiC;AAAA,EAC7C,OACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,MAAM,UAAU,OAChB,CAAC,UAAU,KAAK,KAAK;AAAA;AAKlB,SAAS,gBAAe,CAAC,OAAoC;AAAA,EAClE,IAAI,CAAC,OAAO,KAAK;AAAA,IAAG,OAAO,qBAAoB;AAAA,EAC/C,MAAM,aAAa,OAAO,MAAM,UAAU,IAAI,MAAM,aAAa,CAAC;AAAA,EAElE,OAAO,qBAAoB;AAAA,IACzB,OAAO,MAAM,MAAM,OAAO,CAAC,SAAS,QAAQ,QAAQ,CAAC,IACjD,MAAM,QACN;AAAA,IACJ,WAAW,MAAM,MAAM,WAAW,CAAC,WAAW,SAAS,MAAM,CAAC,IAC1D,MAAM,YACN;AAAA,IACJ,aAAa,MAAM,MAAM,WAAW,IAAI,MAAM,cAAc;AAAA,IAC5D,iBAAiB,MAAM,MAAM,eAAe,IACxC,MAAM,kBACN;AAAA,IACJ,aACE,MAAM,QAAQ,MAAM,WAAW,KAC/B,MAAM,YAAY,UAAU,KAC5B,MAAM,YAAY,UAAU,KAC5B,MAAM,YAAY,MAAM,KAAK,IACzB,MAAM,cACN;AAAA,IACN,SAAS,MAAM,MAAM,SAAS,CAAC,WAAW,eAAe,UAAU,CAAC,IAChE,MAAM,UACN;AAAA,IACJ,cAAc,MAAM,MAAM,cAAc;AAAA,MACtC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC,IACG,MAAM,eACN;AAAA,IACJ,WAAW,MAAM,MAAM,WAAW,CAAC,QAAQ,UAAU,QAAQ,CAAC,IAC1D,MAAM,YACN;AAAA,IACJ,YAAY;AAAA,MACV,MAAM,KAAK,WAAW,IAAI,IAAI,WAAW,OAAO;AAAA,MAChD,SAAS,KAAK,WAAW,OAAO,IAAI,WAAW,UAAU;AAAA,IAC3D;AAAA,EACF,CAAC;AAAA;AAII,SAAS,oBAAmB,CACjC,QAA2B,CAAC,GACR;AAAA,EACpB,OAAO;AAAA,IACL,OAAO,MAAM,SAAS,SAAS;AAAA,IAC/B,WAAW,MAAM,aAAa,SAAS;AAAA,IACvC,aAAa,MAAM,eAAe,SAAS;AAAA,IAC3C,SAAS,MAAM,WAAW,SAAS;AAAA,IACnC,cAAc,MAAM,gBAAgB,SAAS;AAAA,IAC7C,WAAW,MAAM,aAAa,SAAS;AAAA,IACvC,iBACE,MAAM,oBACL,MAAM,gBAAgB,YAAY,SAAS,kBAAkB;AAAA,IAChE,aAAa,CAAC,GAAI,MAAM,eAAe,SAAS,WAAY;AAAA,IAC5D,YAAY;AAAA,MACV,MAAM,MAAM,YAAY,QAAQ,SAAS,WAAW;AAAA,MACpD,SAAS,MAAM,YAAY,WAAW,SAAS,WAAW;AAAA,IAC5D;AAAA,EACF;AAAA;AAGF,IAAM,WAAW;AAAA,EACf,SAAS;AAAA,IACP,OAAO,CAAC,WAAW,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,IACxE,MAAM,CAAC,WAAW,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,EACzE;AAAA,EACA,OAAO;AAAA,IACL,OAAO,CAAC,WAAW,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,IACxE,MAAM,CAAC,WAAW,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,EACzE;AAAA,EACA,MAAM;AAAA,IACJ,OAAO,CAAC,WAAW,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,IACxE,MAAM,CAAC,WAAW,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,EACzE;AACF;AAEA,IAAM,SAAS;AAAA,EACb,SAAS,CAAC,OAAO,OAAO,QAAQ,QAAQ,MAAM;AAAA,EAC9C,aAAa,CAAC,OAAO,QAAQ,QAAQ,QAAQ,MAAM;AAAA,EACnD,UAAU,CAAC,OAAO,QAAQ,QAAQ,QAAQ,MAAM;AAClD;AAEA,IAAM,QAAQ;AAAA,EACZ,MAAM,CAAC,OAAO,OAAO,KAAK;AAAA,EAC1B,OAAO,CAAC,OAAO,OAAO,KAAK;AAAA,EAC3B,QAAQ,CAAC,OAAO,QAAQ,MAAM;AAAA,EAC9B,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAChC;AAEA,SAAS,SAAS,CAAC,QAAwB;AAAA,EACzC,OAAO,WAAW,WACd,qFACA,GAAG,KAAK,UAAU,MAAM;AAAA;AAOvB,SAAS,gBAAe,CAAC,OAAuC;AAAA,EACrE,MAAM,WAAW,qBAAoB,KAAK;AAAA,EAC1C,MAAM,OAAO,SAAS;AAAA,EACtB,MAAM,aAAa,OAAO,WAAW,8BAA8B;AAAA,EACnE,OAAO,IAAI,IAAI,IAAI,IAAI,MAAM,OAAO,SAAS;AAAA,EAC7C,OAAO,SAAS,SAAS,WAAW,MAAM,SAAS;AAAA,EACnD,MAAM,SAAiC;AAAA,IACrC,aAAa,UAAU,SAAS,WAAW,IAAI;AAAA,IAC/C,qBAAqB,UAAU,SAAS,WAAW,OAAO;AAAA,IAC1D,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,mBAAmB,SAAS,cAAc;AAAA,IAC1C,uBAAuB;AAAA,IACvB,uBAAuB;AAAA,IACvB,uBAAuB;AAAA,IACvB,uBACE,SAAS,cAAc,SACnB,SACA,SAAS,cAAc,WACrB,iCACA;AAAA,IACR,uBACE,SAAS,cAAc,SACnB,SACA,SAAS,cAAc,WACrB,mCACA;AAAA,EACV;AAAA,EAEA,SAAS,WAAW,GAAS;AAAA,IAC3B,MAAM,OACJ,SAAS,UAAU,UAClB,SAAS,UAAU,YAAY,WAAW;AAAA,IAC7C,OAAO,YAAY,cAAc,QAAQ,MAAM,OAAO,UACpD,SAAS,SAAS,WAAW,OAAO,SAAS;AAAA,IAC/C,MAAM,SAAS,OACV,SAAS,mBACV,sBAAsB,SAAS,4BAC/B,SAAS;AAAA,IACb,SAAS,YAAY,QAAQ,CAAC,YAAY,UAAU;AAAA,MAClD,OAAO,cAAc,QAAQ,OAAO,OAChC,sBAAsB,2BACtB;AAAA,KACL;AAAA,IACD,OAAO,OAAO,QAAQ;AAAA,MACpB,mBAAmB;AAAA,MACnB,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,aAAa;AAAA,MACb,cAAc;AAAA,MACd,eAAe;AAAA,MACf,eAAe;AAAA,MACf,oBAAoB;AAAA,MACpB,6BAA6B,sBAAsB,cAAc;AAAA,MACjE,qBAAqB,sBAAsB,eAAe,OAAO,UAAU;AAAA,MAC3E,sBAAsB,sBAAsB,UAAU,OAAO,KAAK,QAAQ;AAAA,MAC1E,kBAAkB,OAAO,aAAa;AAAA,MACtC,eAAe,OAAO,YAAY;AAAA,MAClC,iBAAiB,OAAO,qBAAqB;AAAA,MAC7C,qBAAqB,OAAO,YAAY;AAAA,MACxC,kBAAkB,OAAO,YAAY;AAAA,IACvC,CAAC;AAAA,IACD,KAAK,MAAM,cAAc,OAAO,SAAS;AAAA,IACzC,YAAY,MAAM,UAAU,OAAO,QAAQ,MAAM;AAAA,MAC/C,KAAK,MAAM,YAAY,MAAM,KAAK;AAAA;AAAA,EAEtC,YAAY;AAAA,EACZ,IAAI,SAAS,UAAU;AAAA,IACrB,WAAW,iBAAiB,UAAU,WAAW;AAAA,EAEnD,OAAO,MAAM;AAAA,IACX,WAAW,oBAAoB,UAAU,WAAW;AAAA;AAAA;AAKjD,SAAS,sBAAqB,CACnC,eAAgC,SACf;AAAA,EACjB,MAAM,aAAa;AAAA,EACnB,IAAI,QAAQ;AAAA,EACZ,IAAI;AAAA,IACF,MAAM,QAAQ,OAAO,aAAa,QAAQ,UAAU;AAAA,IACpD,IAAI,MAAM,OAAO,CAAC,SAAS,QAAQ,QAAQ,CAAC;AAAA,MAAG,QAAQ;AAAA,IACvD,MAAM;AAAA,EAGR,MAAM,YAAY,IAAI;AAAA,EAEtB,OAAO;AAAA,IACL,QAAQ,GAAG;AAAA,MACT,OAAO;AAAA;AAAA,IAET,QAAQ,CAAC,WAAW;AAAA,MAClB,IAAI,cAAc;AAAA,QAAO;AAAA,MACzB,QAAQ;AAAA,MACR,IAAI;AAAA,QACF,OAAO,aAAa,QAAQ,YAAY,KAAK;AAAA,QAC7C,MAAM;AAAA,MAGR,UAAU,QAAQ,cAAY,SAAS,CAAC;AAAA;AAAA,IAE1C,SAAS,CAAC,UAAU;AAAA,MAClB,UAAU,IAAI,QAAQ;AAAA,MAEtB,OAAO,MAAM,UAAU,OAAO,QAAQ;AAAA;AAAA,EAE1C;AAAA;",
+  "debugId": "E968EAFDC43C9C1764756E2164756E21",
+  "names": []
+}

package/dist/chunks/contract-wz59z8pq.js.map

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["../src/core/config.ts"],
   "sourcesContent": [
-    "/**\n * App identity and display scope shared by browser and server.\n * @module @altertable/data-app/config\n */\nexport type DataAppConfig = {\n  title: string;\n  /** Display labels; scope does not grant data access. */\n  scope: { organization: string; environment: string };\n  appearance: unknown;\n};\n\nexport function dataAppTitle(\n  config: Pick<DataAppConfig, 'title' | 'scope'>\n): string {\n  return `${config.title} • ${config.scope.organization}/${config.scope.environment} • Altertable app`;\n}\n"
+    "/**\n * App identity and display scope shared by browser and server.\n * @module @altertable/data-app/config\n */\nimport type { AppearanceOptions } from '@/src/core/appearance';\n\nexport type DataAppConfig = {\n  title: string;\n  /** Display labels; scope does not grant data access. */\n  scope: { organization: string; environment: string };\n  appearance: AppearanceOptions;\n};\n\nexport function dataAppTitle(\n  config: Pick<DataAppConfig, 'title' | 'scope'>\n): string {\n  return `${config.title} • ${config.scope.organization}/${config.scope.environment} • Altertable app`;\n}\n"
   ],
-  "mappings": ";AAWO,SAAS,aAAY,CAC1B,QACQ;AAAA,EACR,OAAO,GAAG,OAAO,WAAW,OAAO,MAAM,gBAAgB,OAAO,MAAM;AAAA;",
+  "mappings": ";AAaO,SAAS,aAAY,CAC1B,QACQ;AAAA,EACR,OAAO,GAAG,OAAO,WAAW,OAAO,MAAM,gBAAgB,OAAO,MAAM;AAAA;",
   "debugId": "B8EA593317DFC02A64756E2164756E21",
   "names": []
 }

package/dist/chunks/{contract-wd8qe3mt.js → contract-yxbjea23.js}

@@ -1,13 +1,16 @@
 import {
   formatDateRange2
 } from "./contract-mev09s5v.js";
-import {
-  invariant
-} from "./contract-8q35dcyh.js";
 
 // src/core/contract.ts
 import { parseDate, today } from "@internationalized/date";
 
+// src/core/invariant.ts
+function invariant(condition, message) {
+  if (!condition)
+    throw new Error(`Invariant failed: ${message}`);
+}
+
 // src/core/dimension.ts
 var allSelection = { kind: "all" };
 function dimensionMemberKey(member) {
@@ -16,7 +19,6 @@ function dimensionMemberKey(member) {
 function dimensionFilter2(config) {
   const { key, label, selection, valueType } = config;
   const options = config.options ?? [];
-  invariant(!!config.options !== !!config.facet, "Choose fixed options or one facet operation.");
   const optionKeys = options.map((option) => dimensionMemberKey({ kind: "value", value: option.value }));
   invariant(!!key && options.length <= 200 && new Set(optionKeys).size === options.length, "Dimension options need a key, at most 200 distinct values.");
   invariant(options.every((option) => typeof option.value === valueType && !!option.label.trim() && (option.count === undefined || Number.isSafeInteger(option.count) && option.count >= 0)), "Dimension options need typed values, labels, and nonnegative counts.");
@@ -321,6 +323,6 @@ function connectionCheck2() {
   });
 }
 
-export { dimensionMemberKey, dimensionFilter2, parseDimensionSelection2, parseFacetOptions2, dimensionPredicate2, parseEmptyInput2, parseTrue2, previousDateRange2, defineDateRangeContract2, parseDateRangeInput2, parseCount2, parseLabel2, rowsAsRecords2, defineQueryNames2, DataSourceError2, defineOperation2, connectionQueryNames2, connectionCheck2 };
+export { invariant, dimensionMemberKey, dimensionFilter2, parseDimensionSelection2, parseFacetOptions2, dimensionPredicate2, parseEmptyInput2, parseTrue2, previousDateRange2, defineDateRangeContract2, parseDateRangeInput2, parseCount2, parseLabel2, rowsAsRecords2, defineQueryNames2, DataSourceError2, defineOperation2, connectionQueryNames2, connectionCheck2 };
 
-//# debugId=C0344E56C3A0436364756E2164756E21
+//# debugId=44D567B58A731E4A64756E2164756E21