@altertable/data-app 0.66.0 → 0.67.0

package/dist/worker.js

@@ -1,3 +1,23 @@
+// src/embed/runtime-html.ts
+var PAGE_CSP = "default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src data: blob:; connect-src 'none'; form-action 'none'; base-uri 'none'";
+var inlineBootstrap = '(()=>{function q(){if(typeof crypto.randomUUID==="function")return crypto.randomUUID();let e=crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=Array.from(e,(r)=>r.toString(16).padStart(2,"0"));return[t.slice(0,4),t.slice(4,6),t.slice(6,8),t.slice(8,10),t.slice(10)].map((r)=>r.join("")).join("-")}function X(e){if(!e||typeof e!=="object")return!1;let t=e;return(t.method==="log"||t.method==="info"||t.method==="warn"||t.method==="error")&&Array.isArray(t.args)&&t.args.length<=128}var U="altertable:data-app";var J=128,Z=60000;function M(e){return typeof e==="string"&&/^[a-zA-Z0-9_-]{1,128}$/.test(e)}function g({wire:e,from:t,session:r,parse:n}){return{wire:e,from:t,session:r,parse:n}}function j(e){if(!M(e.id))throw Error("Invalid request ID.");return e.id}function L(e,t){let r=e[t];if(typeof r!=="string")throw Error(`Invalid ${t}.`);return r}function A(){return{}}var m={channel:U,version:1,events:{connect:g({wire:"bridge:connect",from:"host",session:"none",parse:A}),ready:g({wire:"bridge:ready",from:"app",session:"none",parse:A}),initialize:g({wire:"bridge:initialize",from:"host",session:"establish",parse:(e)=>({state:e.state})}),request:g({wire:"bridge:request",from:"app",session:"current",parse:(e)=>{let t=L(e,"route");if(!t||t.length>256)throw Error("Invalid message route.");return{id:j(e),route:t,payload:e.payload}}}),result:g({wire:"bridge:result",from:"host",session:"current",parse:(e)=>{if(!Object.hasOwn(e,"response"))throw Error("Missing response.");return{id:j(e),response:e.response}}}),error:g({wire:"bridge:error",from:"host",session:"current",parse:(e)=>{if(e.requestId!==void 0&&typeof e.requestId!=="string")throw Error("Invalid requestId.");return{id:j(e),code:L(e,"code"),message:L(e,"message"),...e.requestId===void 0?{}:{requestId:e.requestId}}}}),cancel:g({wire:"bridge:cancel",from:"app",session:"current",parse:(e)=>({id:j(e)})}),disconnect:g({wire:"bridge:disconnect",from:"app",session:"current",parse:A}),scriptLoad:g({wire:"script:load",from:"host",session:"current",parse:(e)=>({javascript:L(e,"javascript")})}),stateUpdate:g({wire:"state:update",from:"host",session:"current",parse:(e)=>({state:e.state})}),runtimeLog:g({wire:"runtime:log",from:"app",session:"current",parse:(e)=>{if(!X(e.payload))throw Error("Invalid log entry.");return{payload:e.payload}}}),runtimeReady:g({wire:"runtime:ready",from:"app",session:"current",parse:A}),runtimeError:g({wire:"runtime:error",from:"app",session:"current",parse:A})}},_=new Map;for(let e of Object.keys(m.events)){let t=m.events[e].wire;if(_.has(t))throw Error(`Duplicate bridge event: ${t}`);_.set(t,e)}function C(e){return _.get(e)}function F(e){if(!e||typeof e!=="object")return;let t=e;if(t.channel!==U||t.version!==m.version||typeof t.type!=="string"||typeof t.documentId!=="string"||!t.documentId||t.documentId.length>128||t.sessionId!==void 0&&!M(t.sessionId)||t.token!==void 0&&typeof t.token!=="string")return;return t}function W(e,t){try{return{channel:U,version:m.version,documentId:e.documentId,...e.sessionId===void 0?{}:{sessionId:e.sessionId},...e.token===void 0?{}:{token:e.token},type:t.wire,...t.parse(e)}}catch{return}}function Y(e){let t=F(e);if(!t)return;let r=C(t.type);if(!r)return;let n=m.events[r];if(n.session!=="none"&&t.sessionId===void 0)return;return W(t,n)}function ee({role:e,origin:t,source:r,opaque:n,context:o,post:d,diagnostic:a,invalidRequest:u,handlers:l}){let c=!1;function p(b,R){if(c)throw Error("The bridge endpoint has closed.");let i=m.events[b],f=o(),k=Y({...R,channel:m.channel,version:m.version,type:i.wire,documentId:b==="connect"?"host":f.documentId,sessionId:f.sessionId,token:n?f.token:void 0});if(!k||n&&!M(f.token))throw Error("The bridge is not ready to send this event.");if(a?.("send",i.wire),c)return;d(k)}function v(b){let R=r();if(c||!R||b.origin!==t||b.source!==R)return;let i=F(b.data);if(!i)return;let f=o(),k=e==="app"&&i.type===m.events.connect.wire;if(n&&(k?!M(i.token):!f.token||i.token!==f.token))return;let B=C(i.type);if(!B)return;let x=m.events[B];if(x.from===e)return;if(x.session==="establish"){if(i.documentId!==f.documentId||i.sessionId===void 0)return}else if(x.session==="current"){if(!f.sessionId||i.sessionId!==f.sessionId||i.documentId!==f.documentId)return}let N=W(i,x);if(!N){if(e==="host"&&B==="request"&&M(i.id))u?.(i.id);return}if(a?.("receive",x.wire),c)return;let T=l[B];T(N)}return{send:p,receive:v,dispose(){c=!0}}}function ge(e){return e===null||typeof e==="string"||typeof e==="boolean"||typeof e==="number"&&Number.isFinite(e)}function V(e){return!!e&&typeof e==="object"&&!Array.isArray(e)&&Object.values(e).every(ge)}var te=Symbol.for("@altertable/data-app/MessageRoutingError");class h extends Error{code;requestId;[te]=!0;static[Symbol.hasInstance](e){return e instanceof Error&&e[te]===!0}constructor(e,t,r){super(t);this.code=e;this.requestId=r;this.name="MessageRoutingError"}}function me(e){return e}function re(e){return{operations:e,input(t){if(!t||typeof t!=="object")throw Error("Invalid query.");let r=t;if(typeof r.operation!=="string"||!r.operation||r.operation.length>256||r.operation.includes("/"))throw Error("Invalid operation.");let n=e&&Object.hasOwn(e,r.operation)?e[r.operation]:void 0;if(e&&!n)throw Error("Unknown operation.");return{operation:r.operation,input:n?n.input(r.input):r.input}},output(t,r){if(!t||typeof t!=="object")throw Error("Invalid data response.");let n=t;if(!Number.isInteger(n.status)||n.status<100||n.status>599||!n.body||typeof n.body!=="object"||Array.isArray(n.body))throw Error("Invalid data response.");let o=n.body;if(n.status<200||n.status>=300){let a=o.error;throw new h(typeof a?.code==="string"?a.code:"request_failed",typeof a?.message==="string"?a.message:"Could not load data.",typeof a?.requestId==="string"?a.requestId:void 0)}if(!("data"in o)||typeof o.requestId!=="string"||typeof o.queriedAt!=="string"||!Array.isArray(o.queryIds)||!o.queryIds.every((a)=>typeof a==="string"))throw Error("Invalid data envelope.");if(o.queries!==void 0&&(!Array.isArray(o.queries)||!o.queries.every((a)=>a&&typeof a==="object"&&typeof a.name==="string"&&typeof a.statement==="string"&&(a.params===void 0||V(a.params))&&(a.queryId===void 0||typeof a.queryId==="string"))))throw Error("Invalid query evidence.");let d=e?.[r.operation];return{status:n.status,body:{...o,data:d?d.output(o.data):o.data}}}}}var ne=me({input(e){if(!e||typeof e!=="object")throw Error("Invalid SQL query.");let t=e;if(typeof t.statement!=="string"||!t.statement.trim()||typeof t.limit!=="number"||!Number.isSafeInteger(t.limit)||t.limit<1||t.params!==void 0&&!V(t.params))throw Error("Invalid SQL query.");return{statement:t.statement,limit:t.limit,...t.params===void 0?{}:{params:t.params}}},output(e,t){if(!e||typeof e!=="object")throw Error("Invalid query result.");let r=e;if(!Array.isArray(r.columns)||!r.columns.every((n)=>n&&typeof n.name==="string"&&(n.type===void 0||typeof n.type==="string"))||!Array.isArray(r.rows)||r.rows.length>t.limit||!r.rows.every((n)=>Array.isArray(n)&&n.length===r.columns.length)||r.queryId!==void 0&&typeof r.queryId!=="string")throw Error("Invalid query result.");return{columns:r.columns,rows:r.rows,...r.queryId===void 0?{}:{queryId:r.queryId}}}});function oe(e,t){return{async request(r,n,{signal:o}={}){if(o?.throwIfAborted(),!Object.hasOwn(e,r))throw new h("unknown_route","Unknown message route.");let d=e[r],a;try{a=d.input(n)}catch{throw new h("invalid_payload","Invalid message payload.")}let u=await t({route:r,payload:a},o);o?.throwIfAborted();try{return d.output(u,a)}catch(l){if(l instanceof h)throw l;throw new h("invalid_response","Invalid message response.")}}}}var se=Symbol.for("@altertable/data-app/DataAppError");class E extends Error{code;requestId;[se]=!0;static[Symbol.hasInstance](e){return e instanceof Error&&e[se]===!0}constructor(e,t,r){super(e);this.code=t;this.requestId=r;this.name="DataAppError"}}function ae(e,t){function r(o){if(o.length===1&&typeof o[0]==="function"){let d=o[0]();return Array.isArray(d)?d:[d]}return o.map((d)=>typeof d==="function"?d():d)}function n(o,d){if(!e())return;try{t({method:o,args:r(d)})}catch{}}return{log:(...o)=>n("log",o),info:(...o)=>n("info",o),warn:(...o)=>n("warn",o),error:(...o)=>n("error",o)}}function ie(e,t){if(t.type==="runtime:log")return;e.log(()=>{let r={type:t.type};if("id"in t)r.id=t.id;if(t.type==="bridge:request"){r.route=t.route;let n=t.payload;if(t.route==="data:query"&&n&&typeof n==="object"&&"operation"in n&&typeof n.operation==="string")r.operation=n.operation}return["Sending message to parent",r]})}function de(e){if(e instanceof h)throw new E(e.message,e.code,e.requestId);throw e}function ue({parentOrigin:e,window:t=window,timeoutMs:r=Z,mode:n="url",loadScript:o}){if(new URL(e).origin!==e)throw Error("Expected an exact parent origin.");let d=q(),a,u,l=!1,c=new Map,p,v=new Set,b=ae(()=>!l&&!!u&&!!p&&typeof p==="object"&&("logging"in p)&&p.logging===!0,(s)=>i("runtimeLog",{payload:s})),R=ee({role:"app",origin:e,source:()=>t.parent,opaque:n==="bundle",context:()=>({documentId:d,sessionId:u,token:a}),post(s){t.parent.postMessage(s,e),ie(b,s)},handlers:{connect(s){if(n==="bundle")a=s.token;i("ready",{})},initialize(s){if(u&&u!==s.sessionId)for(let I of c.values())I.reject(new E("The preview reconnected. Retry the request.","bridge_reset"));let y=!u;if(u=s.sessionId,k(s.state),y)for(let I of c.values())I.start();if(l)return;if(n==="url")i("runtimeReady",{})},stateUpdate(s){k(s.state)},scriptLoad(s){if(n==="bundle")o?.(s.javascript)},result(s){c.get(s.id)?.resolve(s.response)},error(s){c.get(s.id)?.reject(new h(s.code,s.message,s.requestId))}}}),{send:i,receive:f}=R;function k(s){p=s;for(let y of v)y(s)}t.addEventListener("message",f);function B(s,y){return new Promise((I,w)=>{if(l)return w(new E("The preview has closed.","bridge_closed"));if(y?.aborted)return w(y.reason);if(c.size>=J)return w(new E("Too many pending data requests.","bridge_busy"));let O=q(),Q=!1;function P(){clearTimeout(ye),y?.removeEventListener("abort",G),c.delete(O)}function G(){if(Q)i("cancel",{id:O});P(),w(y?.reason)}let ye=setTimeout(()=>{if(Q)i("cancel",{id:O});P(),w(new E(u?"The data request timed out.":"The preview shell is unavailable. Reload the preview.",u?"timeout":"bridge_unavailable"))},r),K={start(){if(Q)return;try{i("request",{id:O,route:s.route,payload:s.payload}),Q=!0}catch{P(),w(new E("The message payload could not be sent.","invalid_payload"))}},resolve(S){P(),I(S)},reject(S){P(),w(S)}};if(c.set(O,K),y?.addEventListener("abort",G,{once:!0}),u)K.start();else if(n==="url"||a)i("ready",{})})}let x=oe({"data:query":re(),"data:sql":ne},B);function N(s,y,I){return x.request("data:query",{operation:s,input:y},{signal:I}).catch(de)}function T(){if(u)i("disconnect",{});u=void 0;for(let s of c.values())s.reject(new E("The preview has closed.","bridge_closed"))}function H(s){if(s.persisted&&(n==="url"||a))i("ready",{})}function fe(){if(l)return;T(),l=!0,R.dispose(),t.removeEventListener("message",f),t.removeEventListener("pagehide",T),t.removeEventListener("pageshow",H),v.clear()}if(t.addEventListener("pagehide",T),t.addEventListener("pageshow",H),n==="url")i("ready",{});return{logger:b,request:B,transport:N,lakehouse:{queryAll(s,{limit:y,signal:I,params:w}){return x.request("data:sql",{statement:s,limit:y,...w===void 0?{}:{params:w}},{signal:I}).catch(de)}},dispose:fe,mode:n,snapshot(){return p},subscribe(s){return v.add(s),()=>{v.delete(s)}},ready(){if(!l&&u)i("runtimeReady",{})},fail(){if(!l&&u)i("runtimeError",{})}}}var z=Symbol.for("altertable.localFrameBridge"),D=Symbol.for("altertable.installedTransport");function pe(e,t=window){let r=t;if(r[D])throw Error("A data app transport is already installed.");return r[z]=e,r[D]=e,()=>{if(r[z]===e)delete r[z];if(r[D]===e)delete r[D];e.dispose()}}function ce({parentOrigin:e,window:t=window}){let r,n=!1,o=`altertable-data-app-${q()}.js`,d=ue({parentOrigin:e,window:t,mode:"bundle",loadScript(p){if(r!==void 0){if(p===r)if(n)d.fail();else d.ready();else d.fail();return}r=p;try{let v=t.document.createElement("script");if(v.textContent=`${p}\n//# sourceURL=${o}`,t.document.body.append(v),!n)d.ready()}catch{a()}}});function a(){n=!0,d.fail()}function u(p){if(p.filename===o)a()}function l(p){if(p.reason instanceof Error&&p.reason.stack?.includes(o))a()}t.addEventListener("error",u),t.addEventListener("unhandledrejection",l);let c=pe(d,t);return()=>{t.removeEventListener("error",u),t.removeEventListener("unhandledrejection",l),c()}}var le=document.currentScript?.dataset.parentOrigin;if(!le)throw Error("Missing trusted parent origin.");ce({parentOrigin:le});})();\n'.replace(/<\/script/gi, (match) => `<\\${match.slice(1)}`);
+function runtimeHtml(parentOrigin) {
+  const attribute = parentOrigin.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("'", "&#39;");
+  return `<!doctype html>
+<html>
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width,initial-scale=1">
+    <meta http-equiv="Content-Security-Policy" content="${PAGE_CSP}">
+  </head>
+  <body>
+    <div id="root"></div>
+    <script data-parent-origin="${attribute}">${inlineBootstrap}</script>
+  </body>
+</html>
+`;
+}
+
 // src/worker/trusted-parent.ts
 function exactOrigin(value) {
   const url = new URL(value);
@@ -46,743 +66,6 @@ function trustedParent(config, searchParams) {
 
 // src/worker/index.ts
 var TOKEN_RE = /^(?=.{1,63}$)[a-z0-9]+(?:-[a-z0-9]+)+-app-[1-9][0-9]*$/;
-var PAGE_CSP = "default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src data: blob:; connect-src 'none'; form-action 'none'; base-uri 'none'";
-var inlineBootstrap = `(() => {
-  // src/core/logger.ts
-  function isLogEntry(value) {
-    if (!value || typeof value !== "object")
-      return false;
-    const entry = value;
-    return (entry.method === "log" || entry.method === "info" || entry.method === "warn" || entry.method === "error") && Array.isArray(entry.args) && entry.args.length <= 128;
-  }
-
-  // src/core/bridge.ts
-  var BRIDGE = "altertable:data-app";
-  var MAX_PENDING = 128;
-  var REQUEST_TIMEOUT_MS = 60000;
-  function validId(value) {
-    return typeof value === "string" && /^[a-zA-Z0-9_-]{1,128}$/.test(value);
-  }
-  function event({
-    wire,
-    from,
-    session,
-    parse
-  }) {
-    return { wire, from, session, parse };
-  }
-  function id(fields) {
-    if (!validId(fields.id))
-      throw new Error("Invalid request ID.");
-    return fields.id;
-  }
-  function string(fields, key) {
-    const value = fields[key];
-    if (typeof value !== "string")
-      throw new Error(\`Invalid \${key}.\`);
-    return value;
-  }
-  function empty() {
-    return {};
-  }
-  var bridgeProtocol = {
-    channel: BRIDGE,
-    version: 1,
-    events: {
-      connect: event({
-        wire: "bridge:connect",
-        from: "host",
-        session: "none",
-        parse: empty
-      }),
-      ready: event({
-        wire: "bridge:ready",
-        from: "app",
-        session: "none",
-        parse: empty
-      }),
-      initialize: event({
-        wire: "bridge:initialize",
-        from: "host",
-        session: "establish",
-        parse: (fields) => ({ state: fields.state })
-      }),
-      request: event({
-        wire: "bridge:request",
-        from: "app",
-        session: "current",
-        parse: (fields) => {
-          const route = string(fields, "route");
-          if (!route || route.length > 256)
-            throw new Error("Invalid message route.");
-          return { id: id(fields), route, payload: fields.payload };
-        }
-      }),
-      result: event({
-        wire: "bridge:result",
-        from: "host",
-        session: "current",
-        parse: (fields) => {
-          if (!Object.hasOwn(fields, "response"))
-            throw new Error("Missing response.");
-          return { id: id(fields), response: fields.response };
-        }
-      }),
-      error: event({
-        wire: "bridge:error",
-        from: "host",
-        session: "current",
-        parse: (fields) => {
-          if (fields.requestId !== undefined && typeof fields.requestId !== "string")
-            throw new Error("Invalid requestId.");
-          return {
-            id: id(fields),
-            code: string(fields, "code"),
-            message: string(fields, "message"),
-            ...fields.requestId === undefined ? {} : { requestId: fields.requestId }
-          };
-        }
-      }),
-      cancel: event({
-        wire: "bridge:cancel",
-        from: "app",
-        session: "current",
-        parse: (fields) => ({ id: id(fields) })
-      }),
-      disconnect: event({
-        wire: "bridge:disconnect",
-        from: "app",
-        session: "current",
-        parse: empty
-      }),
-      scriptLoad: event({
-        wire: "script:load",
-        from: "host",
-        session: "current",
-        parse: (fields) => ({ javascript: string(fields, "javascript") })
-      }),
-      stateUpdate: event({
-        wire: "state:update",
-        from: "host",
-        session: "current",
-        parse: (fields) => ({ state: fields.state })
-      }),
-      runtimeLog: event({
-        wire: "runtime:log",
-        from: "app",
-        session: "current",
-        parse: (fields) => {
-          if (!isLogEntry(fields.payload))
-            throw new Error("Invalid log entry.");
-          return { payload: fields.payload };
-        }
-      }),
-      runtimeReady: event({
-        wire: "runtime:ready",
-        from: "app",
-        session: "current",
-        parse: empty
-      }),
-      runtimeError: event({
-        wire: "runtime:error",
-        from: "app",
-        session: "current",
-        parse: empty
-      })
-    }
-  };
-  var byWire = new Map;
-  for (const name of Object.keys(bridgeProtocol.events)) {
-    const wire = bridgeProtocol.events[name].wire;
-    if (byWire.has(wire))
-      throw new Error(\`Duplicate bridge event: \${wire}\`);
-    byWire.set(wire, name);
-  }
-  function bridgeEventName(wire) {
-    return byWire.get(wire);
-  }
-  function parseBridgeEnvelope(value) {
-    if (!value || typeof value !== "object")
-      return;
-    const fields = value;
-    if (fields.channel !== BRIDGE || fields.version !== bridgeProtocol.version || typeof fields.type !== "string" || typeof fields.documentId !== "string" || !fields.documentId || fields.documentId.length > 128 || fields.sessionId !== undefined && !validId(fields.sessionId) || fields.token !== undefined && typeof fields.token !== "string")
-      return;
-    return fields;
-  }
-  function parseBridgePayload(envelope, definition) {
-    try {
-      return {
-        channel: BRIDGE,
-        version: bridgeProtocol.version,
-        documentId: envelope.documentId,
-        ...envelope.sessionId === undefined ? {} : { sessionId: envelope.sessionId },
-        ...envelope.token === undefined ? {} : { token: envelope.token },
-        type: definition.wire,
-        ...definition.parse(envelope)
-      };
-    } catch {
-      return;
-    }
-  }
-  function parseBridgeMessage(value) {
-    const envelope = parseBridgeEnvelope(value);
-    if (!envelope)
-      return;
-    const name = bridgeEventName(envelope.type);
-    if (!name)
-      return;
-    const definition = bridgeProtocol.events[name];
-    if (definition.session !== "none" && envelope.sessionId === undefined)
-      return;
-    return parseBridgePayload(envelope, definition);
-  }
-
-  // src/core/bridge-endpoint.ts
-  function createBridgeEndpoint({
-    role,
-    origin,
-    source,
-    opaque,
-    context,
-    post,
-    diagnostic,
-    invalidRequest,
-    handlers
-  }) {
-    let disposed = false;
-    function send(name, payload) {
-      if (disposed)
-        throw new Error("The bridge endpoint has closed.");
-      const definition = bridgeProtocol.events[name];
-      const current = context();
-      const message = parseBridgeMessage({
-        ...payload,
-        channel: bridgeProtocol.channel,
-        version: bridgeProtocol.version,
-        type: definition.wire,
-        documentId: name === "connect" ? "host" : current.documentId,
-        sessionId: current.sessionId,
-        token: opaque ? current.token : undefined
-      });
-      if (!message || opaque && !validId(current.token))
-        throw new Error("The bridge is not ready to send this event.");
-      diagnostic?.("send", definition.wire);
-      if (disposed)
-        return;
-      post(message);
-    }
-    function receive(event) {
-      const peer = source();
-      if (disposed || !peer || event.origin !== origin || event.source !== peer)
-        return;
-      const envelope = parseBridgeEnvelope(event.data);
-      if (!envelope)
-        return;
-      const current = context();
-      const connecting = role === "app" && envelope.type === bridgeProtocol.events.connect.wire;
-      if (opaque && (connecting ? !validId(envelope.token) : !current.token || envelope.token !== current.token))
-        return;
-      const name = bridgeEventName(envelope.type);
-      if (!name)
-        return;
-      const definition = bridgeProtocol.events[name];
-      if (definition.from === role)
-        return;
-      if (definition.session === "establish") {
-        if (envelope.documentId !== current.documentId || envelope.sessionId === undefined)
-          return;
-      } else if (definition.session === "current") {
-        if (!current.sessionId || envelope.sessionId !== current.sessionId || envelope.documentId !== current.documentId)
-          return;
-      }
-      const message = parseBridgePayload(envelope, definition);
-      if (!message) {
-        if (role === "host" && name === "request" && validId(envelope.id))
-          invalidRequest?.(envelope.id);
-        return;
-      }
-      diagnostic?.("receive", definition.wire);
-      if (disposed)
-        return;
-      const handler = handlers[name];
-      handler(message);
-    }
-    return {
-      send,
-      receive,
-      dispose() {
-        disposed = true;
-      }
-    };
-  }
-
-  // src/core/messages.ts
-  var errorBrand = Symbol.for("@altertable/data-app/MessageRoutingError");
-
-  class MessageRoutingError extends Error {
-    code;
-    requestId;
-    [errorBrand] = true;
-    static [Symbol.hasInstance](value) {
-      return value instanceof Error && value[errorBrand] === true;
-    }
-    constructor(code, message, requestId) {
-      super(message);
-      this.code = code;
-      this.requestId = requestId;
-      this.name = "MessageRoutingError";
-    }
-  }
-  function defineMessageRoute(route) {
-    return route;
-  }
-  function defineDataQueryRoute(operations) {
-    return {
-      operations,
-      input(value) {
-        if (!value || typeof value !== "object")
-          throw new Error("Invalid query.");
-        const request = value;
-        if (typeof request.operation !== "string" || !request.operation || request.operation.length > 256 || request.operation.includes("/"))
-          throw new Error("Invalid operation.");
-        const operation = operations && Object.hasOwn(operations, request.operation) ? operations[request.operation] : undefined;
-        if (operations && !operation)
-          throw new Error("Unknown operation.");
-        return {
-          operation: request.operation,
-          input: operation ? operation.input(request.input) : request.input
-        };
-      },
-      output(value, input) {
-        if (!value || typeof value !== "object")
-          throw new Error("Invalid data response.");
-        const response = value;
-        if (!Number.isInteger(response.status) || response.status < 100 || response.status > 599 || !response.body || typeof response.body !== "object" || Array.isArray(response.body))
-          throw new Error("Invalid data response.");
-        const body = response.body;
-        if (response.status < 200 || response.status >= 300) {
-          const failure = body.error;
-          throw new MessageRoutingError(typeof failure?.code === "string" ? failure.code : "request_failed", typeof failure?.message === "string" ? failure.message : "Could not load data.", typeof failure?.requestId === "string" ? failure.requestId : undefined);
-        }
-        if (!("data" in body) || typeof body.requestId !== "string" || typeof body.queriedAt !== "string" || !Array.isArray(body.queryIds) || !body.queryIds.every((id) => typeof id === "string"))
-          throw new Error("Invalid data envelope.");
-        if (body.queries !== undefined && (!Array.isArray(body.queries) || !body.queries.every((query) => query && typeof query === "object" && typeof query.name === "string" && typeof query.statement === "string" && (query.queryId === undefined || typeof query.queryId === "string"))))
-          throw new Error("Invalid query evidence.");
-        const operation = operations?.[input.operation];
-        return {
-          status: response.status,
-          body: {
-            ...body,
-            data: operation ? operation.output(body.data) : body.data
-          }
-        };
-      }
-    };
-  }
-  var sqlQueryRoute = defineMessageRoute({
-    input(value) {
-      if (!value || typeof value !== "object")
-        throw new Error("Invalid SQL query.");
-      const query = value;
-      if (typeof query.statement !== "string" || !query.statement.trim() || typeof query.limit !== "number" || !Number.isSafeInteger(query.limit) || query.limit < 1)
-        throw new Error("Invalid SQL query.");
-      return { statement: query.statement, limit: query.limit };
-    },
-    output(value, input) {
-      if (!value || typeof value !== "object")
-        throw new Error("Invalid query result.");
-      const result = value;
-      if (!Array.isArray(result.columns) || !result.columns.every((column) => column && typeof column.name === "string" && (column.type === undefined || typeof column.type === "string")) || !Array.isArray(result.rows) || result.rows.length > input.limit || !result.rows.every((row) => Array.isArray(row) && row.length === result.columns.length) || result.queryId !== undefined && typeof result.queryId !== "string")
-        throw new Error("Invalid query result.");
-      return {
-        columns: result.columns,
-        rows: result.rows,
-        ...result.queryId === undefined ? {} : { queryId: result.queryId }
-      };
-    }
-  });
-
-  // src/client/messages.ts
-  function createMessageClient(routes, transport) {
-    return {
-      async request(route, payload, { signal } = {}) {
-        signal?.throwIfAborted();
-        if (!Object.hasOwn(routes, route))
-          throw new MessageRoutingError("unknown_route", "Unknown message route.");
-        const contract = routes[route];
-        let input;
-        try {
-          input = contract.input(payload);
-        } catch {
-          throw new MessageRoutingError("invalid_payload", "Invalid message payload.");
-        }
-        const response = await transport({ route, payload: input }, signal);
-        signal?.throwIfAborted();
-        try {
-          return contract.output(response, input);
-        } catch (error) {
-          if (error instanceof MessageRoutingError)
-            throw error;
-          throw new MessageRoutingError("invalid_response", "Invalid message response.");
-        }
-      }
-    };
-  }
-
-  // src/client/transport.ts
-  var errorBrand2 = Symbol.for("@altertable/data-app/DataAppError");
-
-  class DataAppError extends Error {
-    code;
-    requestId;
-    [errorBrand2] = true;
-    static [Symbol.hasInstance](value) {
-      return value instanceof Error && value[errorBrand2] === true;
-    }
-    constructor(message, code, requestId) {
-      super(message);
-      this.code = code;
-      this.requestId = requestId;
-      this.name = "DataAppError";
-    }
-  }
-
-  // src/client/logger.ts
-  function createBridgeLogger(enabled, send) {
-    function resolve(args) {
-      if (args.length === 1 && typeof args[0] === "function") {
-        const value = args[0]();
-        return Array.isArray(value) ? value : [value];
-      }
-      return args.map((arg) => typeof arg === "function" ? arg() : arg);
-    }
-    function write(method, args) {
-      if (!enabled())
-        return;
-      try {
-        send({ method, args: resolve(args) });
-      } catch {}
-    }
-    return {
-      log: (...args) => write("log", args),
-      info: (...args) => write("info", args),
-      warn: (...args) => write("warn", args),
-      error: (...args) => write("error", args)
-    };
-  }
-  function logBridgeMessage(logger, message) {
-    if (message.type === "runtime:log")
-      return;
-    logger.log(() => {
-      const metadata = { type: message.type };
-      if ("id" in message)
-        metadata.id = message.id;
-      if (message.type === "bridge:request") {
-        metadata.route = message.route;
-        const payload = message.payload;
-        if (message.route === "data:query" && payload && typeof payload === "object" && "operation" in payload && typeof payload.operation === "string")
-          metadata.operation = payload.operation;
-      }
-      return ["Sending message to parent", metadata];
-    });
-  }
-
-  // src/client/iframe.ts
-  function rethrowDataMessageError(error) {
-    if (error instanceof MessageRoutingError)
-      throw new DataAppError(error.message, error.code, error.requestId);
-    throw error;
-  }
-  function createIframeTransport({
-    parentOrigin,
-    window: frame = window,
-    timeoutMs = REQUEST_TIMEOUT_MS,
-    mode = "url",
-    loadScript
-  }) {
-    if (new URL(parentOrigin).origin !== parentOrigin)
-      throw new Error("Expected an exact parent origin.");
-    const documentId = crypto.randomUUID();
-    let token;
-    let sessionId;
-    let disposed = false;
-    const pending = new Map;
-    let hostState;
-    const stateListeners = new Set;
-    const logger = createBridgeLogger(() => !disposed && !!sessionId && !!hostState && typeof hostState === "object" && ("logging" in hostState) && hostState.logging === true, (entry) => send("runtimeLog", { payload: entry }));
-    const endpoint = createBridgeEndpoint({
-      role: "app",
-      origin: parentOrigin,
-      source: () => frame.parent,
-      opaque: mode === "bundle",
-      context: () => ({ documentId, sessionId, token }),
-      post(message) {
-        frame.parent.postMessage(message, parentOrigin);
-        logBridgeMessage(logger, message);
-      },
-      handlers: {
-        connect(message) {
-          if (mode === "bundle")
-            token = message.token;
-          send("ready", {});
-        },
-        initialize(message) {
-          if (sessionId && sessionId !== message.sessionId) {
-            for (const entry of pending.values())
-              entry.reject(new DataAppError("The preview reconnected. Retry the request.", "bridge_reset"));
-          }
-          const first = !sessionId;
-          sessionId = message.sessionId;
-          receiveState(message.state);
-          if (first)
-            for (const entry of pending.values())
-              entry.start();
-          if (disposed)
-            return;
-          if (mode === "url")
-            send("runtimeReady", {});
-        },
-        stateUpdate(message) {
-          receiveState(message.state);
-        },
-        scriptLoad(message) {
-          if (mode === "bundle")
-            loadScript?.(message.javascript);
-        },
-        result(message) {
-          pending.get(message.id)?.resolve(message.response);
-        },
-        error(message) {
-          pending.get(message.id)?.reject(new MessageRoutingError(message.code, message.message, message.requestId));
-        }
-      }
-    });
-    const send = endpoint.send;
-    const receive = endpoint.receive;
-    function receiveState(state) {
-      hostState = state;
-      for (const listener of stateListeners)
-        listener(state);
-    }
-    frame.addEventListener("message", receive);
-    function requestMessage(message, signal) {
-      return new Promise((resolve, reject) => {
-        if (disposed)
-          return reject(new DataAppError("The preview has closed.", "bridge_closed"));
-        if (signal?.aborted)
-          return reject(signal.reason);
-        if (pending.size >= MAX_PENDING)
-          return reject(new DataAppError("Too many pending data requests.", "bridge_busy"));
-        const id = crypto.randomUUID();
-        let sent = false;
-        function cleanup() {
-          clearTimeout(timer);
-          signal?.removeEventListener("abort", abort);
-          pending.delete(id);
-        }
-        function abort() {
-          if (sent)
-            send("cancel", { id });
-          cleanup();
-          reject(signal?.reason);
-        }
-        const timer = setTimeout(() => {
-          if (sent)
-            send("cancel", { id });
-          cleanup();
-          reject(new DataAppError(sessionId ? "The data request timed out." : "The preview shell is unavailable. Reload the preview.", sessionId ? "timeout" : "bridge_unavailable"));
-        }, timeoutMs);
-        const entry = {
-          start() {
-            if (sent)
-              return;
-            try {
-              send("request", {
-                id,
-                route: message.route,
-                payload: message.payload
-              });
-              sent = true;
-            } catch {
-              cleanup();
-              reject(new DataAppError("The message payload could not be sent.", "invalid_payload"));
-            }
-          },
-          resolve(value) {
-            cleanup();
-            resolve(value);
-          },
-          reject(error) {
-            cleanup();
-            reject(error);
-          }
-        };
-        pending.set(id, entry);
-        signal?.addEventListener("abort", abort, { once: true });
-        if (sessionId)
-          entry.start();
-        else if (mode === "url" || token)
-          send("ready", {});
-      });
-    }
-    const messages = createMessageClient({ "data:query": defineDataQueryRoute(), "data:sql": sqlQueryRoute }, requestMessage);
-    function queryOperation(operation, input, signal) {
-      return messages.request("data:query", { operation, input }, { signal }).catch(rethrowDataMessageError);
-    }
-    function disconnect() {
-      if (sessionId)
-        send("disconnect", {});
-      sessionId = undefined;
-      for (const entry of pending.values())
-        entry.reject(new DataAppError("The preview has closed.", "bridge_closed"));
-    }
-    function resume(event) {
-      if (event.persisted && (mode === "url" || token))
-        send("ready", {});
-    }
-    function dispose() {
-      if (disposed)
-        return;
-      disconnect();
-      disposed = true;
-      endpoint.dispose();
-      frame.removeEventListener("message", receive);
-      frame.removeEventListener("pagehide", disconnect);
-      frame.removeEventListener("pageshow", resume);
-      stateListeners.clear();
-    }
-    frame.addEventListener("pagehide", disconnect);
-    frame.addEventListener("pageshow", resume);
-    if (mode === "url")
-      send("ready", {});
-    return {
-      logger,
-      request: requestMessage,
-      transport: queryOperation,
-      lakehouse: {
-        queryAll(statement, { limit, signal }) {
-          return messages.request("data:sql", { statement, limit }, { signal }).catch(rethrowDataMessageError);
-        }
-      },
-      dispose,
-      mode,
-      snapshot() {
-        return hostState;
-      },
-      subscribe(listener) {
-        stateListeners.add(listener);
-        return () => {
-          stateListeners.delete(listener);
-        };
-      },
-      ready() {
-        if (!disposed && sessionId)
-          send("runtimeReady", {});
-      },
-      fail() {
-        if (!disposed && sessionId)
-          send("runtimeError", {});
-      }
-    };
-  }
-  var bridgeKey = Symbol.for("altertable.localFrameBridge");
-  var installedKey = Symbol.for("altertable.installedTransport");
-  function installDataAppTransport(bridge, frame = window) {
-    const target = frame;
-    if (target[installedKey])
-      throw new Error("A data app transport is already installed.");
-    target[bridgeKey] = bridge;
-    target[installedKey] = bridge;
-    return () => {
-      if (target[bridgeKey] === bridge)
-        delete target[bridgeKey];
-      if (target[installedKey] === bridge)
-        delete target[installedKey];
-      bridge.dispose();
-    };
-  }
-
-  // src/embed/bootstrap.ts
-  function startDataAppBootstrap({
-    parentOrigin,
-    window: frame = window
-  }) {
-    let loaded;
-    let failed = false;
-    const bundleSource = \`altertable-data-app-\${crypto.randomUUID()}.js\`;
-    const bridge = createIframeTransport({
-      parentOrigin,
-      window: frame,
-      mode: "bundle",
-      loadScript(javascript) {
-        if (loaded !== undefined) {
-          if (javascript === loaded) {
-            if (failed)
-              bridge.fail();
-            else
-              bridge.ready();
-          } else
-            bridge.fail();
-          return;
-        }
-        loaded = javascript;
-        try {
-          const script = frame.document.createElement("script");
-          script.textContent = \`\${javascript}
-//# sourceURL=\${bundleSource}\`;
-          frame.document.body.append(script);
-          if (!failed)
-            bridge.ready();
-        } catch {
-          reportError();
-        }
-      }
-    });
-    function reportError() {
-      failed = true;
-      bridge.fail();
-    }
-    function reportBundleError(event) {
-      if (event.filename === bundleSource)
-        reportError();
-    }
-    function reportBundleRejection(event) {
-      if (event.reason instanceof Error && event.reason.stack?.includes(bundleSource))
-        reportError();
-    }
-    frame.addEventListener("error", reportBundleError);
-    frame.addEventListener("unhandledrejection", reportBundleRejection);
-    const uninstall = installDataAppTransport(bridge, frame);
-    return () => {
-      frame.removeEventListener("error", reportBundleError);
-      frame.removeEventListener("unhandledrejection", reportBundleRejection);
-      uninstall();
-    };
-  }
-
-  // src/embed/standalone.ts
-  var parentOrigin = document.currentScript?.dataset.parentOrigin;
-  if (!parentOrigin)
-    throw new Error("Missing trusted parent origin.");
-  startDataAppBootstrap({ parentOrigin });
-})();
-`.replace(/<\/script/gi, (match) => `<\\${match.slice(1)}`);
-function runtimeHtml(parentOrigin) {
-  const attribute = parentOrigin.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("'", "&#39;");
-  return `<!doctype html>
-<html>
-  <head>
-    <meta charset="utf-8">
-    <meta name="viewport" content="width=device-width,initial-scale=1">
-    <meta http-equiv="Content-Security-Policy" content="${PAGE_CSP}">
-  </head>
-  <body>
-    <div id="root"></div>
-    <script data-parent-origin="${attribute}">${inlineBootstrap}</script>
-  </body>
-</html>
-`;
-}
 function isPreviewHost(hostname, domainName) {
   const suffix = `.${domainName}`;
   return hostname.endsWith(suffix) && TOKEN_RE.test(hostname.slice(0, -suffix.length));