@altertable/data-app 0.66.0 → 0.67.0

package/dist/chunks/{contract-13j5zb3c.js → index-ktmvs916.js}

@@ -1,14 +1,15 @@
 import {
+  randomUuid,
   PARENT_PARAM,
   MAX_PENDING,
   REQUEST_TIMEOUT_MS,
   createBridgeEndpoint
-} from "./contract-awa2d5b1.js";
+} from "./index-f5cnbrjz.js";
 import {
   MessageRoutingError2,
   defineDataQueryRoute2,
   sqlQueryRoute2
-} from "./contract-tf8c3qpv.js";
+} from "./index-qd5xgx6y.js";
 
 // src/client/transport.ts
 var errorBrand = Symbol.for("@altertable/data-app/DataAppError");
@@ -131,7 +132,7 @@ function createIframeTransport2({
 }) {
   if (new URL(parentOrigin).origin !== parentOrigin)
     throw new Error("Expected an exact parent origin.");
-  const documentId = crypto.randomUUID();
+  const documentId = randomUuid();
   let token;
   let sessionId;
   let disposed = false;
@@ -202,7 +203,7 @@ function createIframeTransport2({
         return reject(signal.reason);
       if (pending.size >= MAX_PENDING)
         return reject(new DataAppError2("Too many pending data requests.", "bridge_busy"));
-      const id = crypto.randomUUID();
+      const id = randomUuid();
       let sent = false;
       function cleanup() {
         clearTimeout(timer);
@@ -289,8 +290,8 @@ function createIframeTransport2({
     request: requestMessage,
     transport: queryOperation,
     lakehouse: {
-      queryAll(statement, { limit, signal }) {
-        return messages.request("data:sql", { statement, limit }, { signal }).catch(rethrowDataMessageError);
+      queryAll(statement, { limit, signal, params }) {
+        return messages.request("data:sql", { statement, limit, ...params === undefined ? {} : { params } }, { signal }).catch(rethrowDataMessageError);
       }
     },
     dispose,
@@ -413,4 +414,4 @@ function getDataAppTransport2(frame = window) {
 
 export { DataAppError2, createHttpTransport2, createMessageClient2, createIframeTransport2, localFrameBridge, installDataAppTransport2, getDataAppTransport2 };
 
-//# debugId=F13D3D498CB70AA064756E2164756E21
+//# debugId=F5878FE6A9FBABAD64756E2164756E21

package/dist/chunks/index-ktmvs916.js.map

@@ -0,0 +1,13 @@
+{
+  "version": 3,
+  "sources": ["../src/client/transport.ts", "../src/client/messages.ts", "../src/client/logger.ts", "../src/client/iframe.ts"],
+  "sourcesContent": [
+    "import type { TransportResponse } from '@/src/core/bridge';\n\nexport type DataTransport = (\n  operation: string,\n  input: unknown,\n  signal?: AbortSignal\n) => Promise<TransportResponse>;\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/DataAppError');\n\nexport class DataAppError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    message: string,\n    public readonly code: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'DataAppError';\n  }\n}\n\nexport function createHttpTransport({\n  endpoint = '/api/data',\n  fetch: request = globalThis.fetch,\n}: {\n  endpoint?: string;\n  fetch?: typeof fetch;\n} = {}): DataTransport {\n  async function requestData(\n    operation: string,\n    input: unknown,\n    signal?: AbortSignal\n  ): Promise<TransportResponse> {\n    const response = await request(\n      `${endpoint.replace(/\\/$/, '')}/${encodeURIComponent(operation)}`,\n      {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify(input),\n        signal,\n      }\n    );\n    try {\n      return { status: response.status, body: await response.json() };\n    } catch (error) {\n      if (signal?.aborted) throw error;\n      throw new DataAppError(\n        response.ok ? 'The data response was invalid.' : 'Could not load data.',\n        response.ok ? 'invalid_response' : 'request_failed'\n      );\n    }\n  }\n\n  return requestData;\n}\n",
+    "import {\n  MessageRoutingError,\n  type MessageInput,\n  type MessageOutput,\n  type MessageRoutes,\n  type MessageTransport,\n} from '@/src/core/messages';\n\n/** Both ends validate using the same contracts; the transport owns delivery and cancellation. */\nexport function createMessageClient<const Routes extends MessageRoutes>(\n  routes: Routes,\n  transport: MessageTransport\n) {\n  return {\n    async request<\n      Name extends keyof Routes & string,\n      const Input extends MessageInput<NoInfer<Routes[Name]>>,\n    >(\n      route: Name,\n      payload: Input,\n      { signal }: { signal?: AbortSignal } = {}\n    ): Promise<MessageOutput<Routes[Name], Input>> {\n      signal?.throwIfAborted();\n      if (!Object.hasOwn(routes, route))\n        throw new MessageRoutingError(\n          'unknown_route',\n          'Unknown message route.'\n        );\n      const contract = routes[route]!;\n      let input: unknown;\n      try {\n        input = contract.input(payload);\n      } catch {\n        throw new MessageRoutingError(\n          'invalid_payload',\n          'Invalid message payload.'\n        );\n      }\n      const response = await transport({ route, payload: input }, signal);\n      signal?.throwIfAborted();\n      try {\n        return contract.output(response, input as never) as MessageOutput<\n          Routes[Name],\n          Input\n        >;\n      } catch (error) {\n        if (error instanceof MessageRoutingError) throw error;\n        throw new MessageRoutingError(\n          'invalid_response',\n          'Invalid message response.'\n        );\n      }\n    },\n  };\n}\n",
+    "import type { BridgeMessage } from '@/src/core/bridge';\nimport { type DataAppLogger, type LogEntry } from '@/src/core/logger';\n\n/** Lazy arguments run in the iframe; only resolved values cross the bridge. */\nexport function createBridgeLogger(\n  enabled: () => boolean,\n  send: (entry: LogEntry) => void\n): DataAppLogger {\n  function resolve(args: unknown[]): unknown[] {\n    if (args.length === 1 && typeof args[0] === 'function') {\n      const value: unknown = args[0]();\n      return Array.isArray(value) ? value : [value];\n    }\n    return args.map(arg => (typeof arg === 'function' ? arg() : arg));\n  }\n\n  function write(method: keyof DataAppLogger, args: unknown[]) {\n    if (!enabled()) return;\n    try {\n      send({ method, args: resolve(args) });\n    } catch {\n      // Logging must not interrupt the app or recursively log delivery failures.\n    }\n  }\n\n  return {\n    log: (...args) => write('log', args),\n    info: (...args) => write('info', args),\n    warn: (...args) => write('warn', args),\n    error: (...args) => write('error', args),\n  };\n}\n\n/** Log only delivery metadata; payloads and session credentials stay private. */\nexport function logBridgeMessage(\n  logger: DataAppLogger,\n  message: BridgeMessage\n) {\n  if (message.type === 'runtime:log') return;\n  logger.log(() => {\n    const metadata: {\n      type: BridgeMessage['type'];\n      id?: string;\n      route?: string;\n      operation?: string;\n    } = { type: message.type };\n    if ('id' in message) metadata.id = message.id;\n    if (message.type === 'bridge:request') {\n      metadata.route = message.route;\n      const payload = message.payload;\n      if (\n        message.route === 'data:query' &&\n        payload &&\n        typeof payload === 'object' &&\n        'operation' in payload &&\n        typeof payload.operation === 'string'\n      )\n        metadata.operation = payload.operation;\n    }\n    return ['Sending message to parent', metadata];\n  });\n}\n",
+    "import { randomUuid } from '@/src/core/uuid';\nimport { createBridgeEndpoint } from '@/src/core/bridge-endpoint';\nimport {\n  PARENT_PARAM,\n  MAX_PENDING,\n  REQUEST_TIMEOUT_MS,\n  type TransportResponse,\n} from '@/src/core/bridge';\nimport {\n  defineDataQueryRoute,\n  sqlQueryRoute,\n  MessageRoutingError,\n  type RoutedMessage,\n} from '@/src/core/messages';\nimport type { Lakehouse } from '@/src/core/contract';\nimport { createMessageClient } from '@/src/client/messages';\nimport { DataAppError } from '@/src/client/transport';\nimport { createBridgeLogger, logBridgeMessage } from '@/src/client/logger';\n\ntype Pending = {\n  start: () => void;\n  reject: (error: unknown) => void;\n  resolve: (value: unknown) => void;\n};\n\n/** Data clients expose one error type for HTTP and message delivery. */\nfunction rethrowDataMessageError(error: unknown): never {\n  if (error instanceof MessageRoutingError)\n    throw new DataAppError(error.message, error.code, error.requestId);\n  throw error;\n}\n\n/** One bridge per document, shared by all clients and retained across module hot replacement. */\nexport function createIframeTransport({\n  parentOrigin,\n  window: frame = window,\n  timeoutMs = REQUEST_TIMEOUT_MS,\n  mode = 'url',\n  loadScript,\n}: {\n  parentOrigin: string;\n  window?: Window;\n  timeoutMs?: number;\n  mode?: 'url' | 'bundle';\n  loadScript?: (javascript: string) => void;\n}) {\n  if (new URL(parentOrigin).origin !== parentOrigin)\n    throw new Error('Expected an exact parent origin.');\n  const documentId = randomUuid();\n  let token: string | undefined;\n  let sessionId: string | undefined;\n  let disposed = false;\n  const pending = new Map<string, Pending>();\n  let hostState: unknown;\n  const stateListeners = new Set<(state: unknown) => void>();\n  const logger = createBridgeLogger(\n    () =>\n      !disposed &&\n      !!sessionId &&\n      !!hostState &&\n      typeof hostState === 'object' &&\n      'logging' in hostState &&\n      hostState.logging === true,\n    entry => send('runtimeLog', { payload: entry })\n  );\n\n  const endpoint = createBridgeEndpoint({\n    role: 'app',\n    origin: parentOrigin,\n    source: () => frame.parent,\n    opaque: mode === 'bundle',\n    context: () => ({ documentId, sessionId, token }),\n    post(message) {\n      frame.parent.postMessage(message, parentOrigin);\n      logBridgeMessage(logger, message);\n    },\n    handlers: {\n      connect(message) {\n        if (mode === 'bundle') token = message.token;\n        send('ready', {});\n      },\n      initialize(message) {\n        if (sessionId && sessionId !== message.sessionId) {\n          for (const entry of pending.values())\n            entry.reject(\n              new DataAppError(\n                'The preview reconnected. Retry the request.',\n                'bridge_reset'\n              )\n            );\n        }\n        const first = !sessionId;\n        sessionId = message.sessionId;\n        receiveState(message.state);\n        if (first) for (const entry of pending.values()) entry.start();\n        if (disposed) return;\n        if (mode === 'url') send('runtimeReady', {});\n      },\n      stateUpdate(message) {\n        receiveState(message.state);\n      },\n      scriptLoad(message) {\n        if (mode === 'bundle') loadScript?.(message.javascript);\n      },\n      result(message) {\n        pending.get(message.id)?.resolve(message.response);\n      },\n      error(message) {\n        pending\n          .get(message.id)\n          ?.reject(\n            new MessageRoutingError(\n              message.code,\n              message.message,\n              message.requestId\n            )\n          );\n      },\n    },\n  });\n  const send = endpoint.send;\n  const receive = endpoint.receive;\n\n  function receiveState(state: unknown) {\n    hostState = state;\n    for (const listener of stateListeners) listener(state);\n  }\n\n  frame.addEventListener('message', receive);\n\n  function requestMessage(\n    message: RoutedMessage,\n    signal?: AbortSignal\n  ): Promise<unknown> {\n    return new Promise((resolve, reject) => {\n      if (disposed)\n        return reject(\n          new DataAppError('The preview has closed.', 'bridge_closed')\n        );\n      if (signal?.aborted) return reject(signal.reason);\n      if (pending.size >= MAX_PENDING)\n        return reject(\n          new DataAppError('Too many pending data requests.', 'bridge_busy')\n        );\n      const id = randomUuid();\n      let sent = false;\n\n      function cleanup() {\n        clearTimeout(timer);\n        signal?.removeEventListener('abort', abort);\n        pending.delete(id);\n      }\n\n      function abort() {\n        if (sent) send('cancel', { id });\n        cleanup();\n        reject(signal?.reason);\n      }\n\n      const timer = setTimeout(() => {\n        if (sent) send('cancel', { id });\n        cleanup();\n        reject(\n          new DataAppError(\n            sessionId\n              ? 'The data request timed out.'\n              : 'The preview shell is unavailable. Reload the preview.',\n            sessionId ? 'timeout' : 'bridge_unavailable'\n          )\n        );\n      }, timeoutMs);\n      const entry: Pending = {\n        start() {\n          if (sent) return;\n          try {\n            send('request', {\n              id,\n              route: message.route,\n              payload: message.payload,\n            });\n            sent = true;\n          } catch {\n            cleanup();\n            reject(\n              new DataAppError(\n                'The message payload could not be sent.',\n                'invalid_payload'\n              )\n            );\n          }\n        },\n        resolve(value) {\n          cleanup();\n          resolve(value);\n        },\n        reject(error) {\n          cleanup();\n          reject(error);\n        },\n      };\n      pending.set(id, entry);\n      signal?.addEventListener('abort', abort, { once: true });\n      if (sessionId) entry.start();\n      else if (mode === 'url' || token) send('ready', {});\n    });\n  }\n\n  const messages = createMessageClient(\n    { 'data:query': defineDataQueryRoute(), 'data:sql': sqlQueryRoute },\n    requestMessage\n  );\n\n  function queryOperation(\n    operation: string,\n    input: unknown,\n    signal?: AbortSignal\n  ): Promise<TransportResponse> {\n    return messages\n      .request('data:query', { operation, input }, { signal })\n      .catch(rethrowDataMessageError);\n  }\n\n  function disconnect() {\n    if (sessionId) send('disconnect', {});\n    sessionId = undefined;\n    for (const entry of pending.values())\n      entry.reject(\n        new DataAppError('The preview has closed.', 'bridge_closed')\n      );\n  }\n\n  function resume(event: PageTransitionEvent) {\n    if (event.persisted && (mode === 'url' || token)) send('ready', {});\n  }\n\n  function dispose() {\n    if (disposed) return;\n    disconnect();\n    disposed = true;\n    endpoint.dispose();\n    frame.removeEventListener('message', receive);\n    frame.removeEventListener('pagehide', disconnect);\n    frame.removeEventListener('pageshow', resume);\n    stateListeners.clear();\n  }\n\n  frame.addEventListener('pagehide', disconnect);\n  frame.addEventListener('pageshow', resume);\n  if (mode === 'url') send('ready', {});\n\n  return {\n    logger,\n    request: requestMessage,\n    transport: queryOperation,\n    lakehouse: {\n      queryAll(statement, { limit, signal, params }) {\n        return messages\n          .request(\n            'data:sql',\n            { statement, limit, ...(params === undefined ? {} : { params }) },\n            { signal }\n          )\n          .catch(rethrowDataMessageError);\n      },\n    } satisfies Lakehouse,\n    dispose,\n    mode,\n    snapshot() {\n      return hostState;\n    },\n    subscribe(listener: (state: unknown) => void) {\n      stateListeners.add(listener);\n\n      return () => {\n        stateListeners.delete(listener);\n      };\n    },\n    ready() {\n      if (!disposed && sessionId) send('runtimeReady', {});\n    },\n    fail() {\n      if (!disposed && sessionId) send('runtimeError', {});\n    },\n  };\n}\n\nexport type IframeTransport = ReturnType<typeof createIframeTransport>;\n\nconst bridgeKey = Symbol.for('altertable.localFrameBridge');\nconst installedKey = Symbol.for('altertable.installedTransport');\ntype LocalBridge = Pick<\n  ReturnType<typeof createIframeTransport>,\n  'transport'\n> & { connect?: () => Promise<ReturnType<typeof createIframeTransport>> };\ntype FrameWindow = Window & {\n  [bridgeKey]?: LocalBridge;\n  [installedKey]?: ReturnType<typeof createIframeTransport>;\n};\n\n/** The URL opts into local preview; only same-origin server configuration establishes trust. */\nexport function localFrameBridge(window?: Window): LocalBridge | undefined {\n  const activeWindow =\n    window ??\n    (typeof globalThis.window === 'undefined' ? undefined : globalThis.window);\n  if (!activeWindow) return undefined;\n  const frame = activeWindow as FrameWindow;\n  if (frame[bridgeKey]) return frame[bridgeKey];\n  const parentOrigin =\n    new URL(frame.location.href).searchParams.get(PARENT_PARAM) ?? '';\n  if (!parentOrigin) return undefined;\n\n  async function connect(parentOrigin: string) {\n    try {\n      const response = await frame.fetch('/__altertable/parent', {\n        signal: AbortSignal.timeout(5000),\n      });\n      const config = (await response.json()) as { origin?: unknown };\n      if (\n        !response.ok ||\n        config.origin !== parentOrigin ||\n        frame.parent === frame\n      )\n        throw new Error('Invalid local parent configuration.');\n      // Another owner can install a trusted bridge while configuration is pending.\n      if (frame[installedKey]) return frame[installedKey];\n      if (frame[bridgeKey] !== proxy)\n        throw new Error('Preview transport owner changed.');\n      const bridge = createIframeTransport({ parentOrigin, window: frame });\n      frame[bridgeKey] = bridge;\n      frame[installedKey] = bridge;\n\n      return bridge;\n    } catch {\n      throw new DataAppError(\n        'The preview shell could not be verified. Open the URL printed by altertable app dev.',\n        'bridge_unavailable'\n      );\n    }\n  }\n\n  let connection: Promise<ReturnType<typeof createIframeTransport>> | undefined;\n\n  function getConnection() {\n    const installed = frame[installedKey];\n    if (installed) return Promise.resolve(installed);\n    if (!connection) {\n      const attempt = connect(parentOrigin);\n      connection = attempt;\n      // Clear only this failed attempt; retained proxy references can explicitly retry.\n      void attempt.catch(() => {\n        if (connection === attempt) connection = undefined;\n      });\n    }\n\n    return connection;\n  }\n\n  const proxy: LocalBridge = {\n    async transport(operation, input, signal) {\n      signal?.throwIfAborted();\n      const attempt = getConnection();\n      let abort: (() => void) | undefined;\n      try {\n        const bridge = signal\n          ? await Promise.race([\n              attempt,\n              new Promise<never>((_, reject) => {\n                const requestSignal = signal;\n\n                function handleAbort() {\n                  reject(requestSignal.reason);\n                }\n\n                abort = handleAbort;\n                requestSignal.addEventListener('abort', handleAbort, {\n                  once: true,\n                });\n              }),\n            ])\n          : await attempt;\n        signal?.throwIfAborted();\n\n        return bridge.transport(operation, input, signal);\n      } finally {\n        if (abort) signal?.removeEventListener('abort', abort);\n      }\n    },\n    connect: getConnection,\n  };\n  frame[bridgeKey] = proxy;\n  // Static mounting still verifies eagerly, without an unhandled rejection.\n  void getConnection().catch(() => {});\n\n  return proxy;\n}\n\n/** Install an explicitly trusted transport for hosted apps and their URL-backed controls. */\nexport function installDataAppTransport(\n  bridge: ReturnType<typeof createIframeTransport>,\n  frame: Window = window\n) {\n  const target = frame as FrameWindow;\n  if (target[installedKey])\n    throw new Error('A data app transport is already installed.');\n  target[bridgeKey] = bridge;\n  target[installedKey] = bridge;\n\n  return () => {\n    if (target[bridgeKey] === bridge) delete target[bridgeKey];\n    if (target[installedKey] === bridge) delete target[installedKey];\n    bridge.dispose();\n  };\n}\n\n/** The bootstrap installs this before executing app code. URL apps can install an explicit connection. */\nexport function getDataAppTransport(frame: Window = window) {\n  return (frame as FrameWindow)[installedKey];\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;AASA,IAAM,aAAa,OAAO,IAAI,mCAAmC;AAAA;AAE1D,MAAM,sBAAqB,MAAM;AAAA,EAYpB;AAAA,EACA;AAAA,GAZR,cAAc;AAAA,UAEhB,OAAO,YAAY,CAAC,OAAyB;AAAA,IACnD,OACE,iBAAiB,SAChB,MAAqC,gBAAgB;AAAA;AAAA,EAI1D,WAAW,CACT,SACgB,MACA,WAChB;AAAA,IACA,MAAM,OAAO;AAAA,IAHG;AAAA,IACA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AAEO,SAAS,oBAAmB;AAAA,EACjC,WAAW;AAAA,EACX,OAAO,UAAU,WAAW;AAAA,IAI1B,CAAC,GAAkB;AAAA,EACrB,eAAe,WAAW,CACxB,WACA,OACA,QAC4B;AAAA,IAC5B,MAAM,WAAW,MAAM,QACrB,GAAG,SAAS,QAAQ,OAAO,EAAE,KAAK,mBAAmB,SAAS,KAC9D;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,KAAK;AAAA,MAC1B;AAAA,IACF,CACF;AAAA,IACA,IAAI;AAAA,MACF,OAAO,EAAE,QAAQ,SAAS,QAAQ,MAAM,MAAM,SAAS,KAAK,EAAE;AAAA,MAC9D,OAAO,OAAO;AAAA,MACd,IAAI,QAAQ;AAAA,QAAS,MAAM;AAAA,MAC3B,MAAM,IAAI,cACR,SAAS,KAAK,mCAAmC,wBACjD,SAAS,KAAK,qBAAqB,gBACrC;AAAA;AAAA;AAAA,EAIJ,OAAO;AAAA;;;ACtDF,SAAS,oBAAuD,CACrE,QACA,WACA;AAAA,EACA,OAAO;AAAA,SACC,QAGL,CACC,OACA,WACE,WAAqC,CAAC,GACK;AAAA,MAC7C,QAAQ,eAAe;AAAA,MACvB,IAAI,CAAC,OAAO,OAAO,QAAQ,KAAK;AAAA,QAC9B,MAAM,IAAI,qBACR,iBACA,wBACF;AAAA,MACF,MAAM,WAAW,OAAO;AAAA,MACxB,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,QAAQ,SAAS,MAAM,OAAO;AAAA,QAC9B,MAAM;AAAA,QACN,MAAM,IAAI,qBACR,mBACA,0BACF;AAAA;AAAA,MAEF,MAAM,WAAW,MAAM,UAAU,EAAE,OAAO,SAAS,MAAM,GAAG,MAAM;AAAA,MAClE,QAAQ,eAAe;AAAA,MACvB,IAAI;AAAA,QACF,OAAO,SAAS,OAAO,UAAU,KAAc;AAAA,QAI/C,OAAO,OAAO;AAAA,QACd,IAAI,iBAAiB;AAAA,UAAqB,MAAM;AAAA,QAChD,MAAM,IAAI,qBACR,oBACA,2BACF;AAAA;AAAA;AAAA,EAGN;AAAA;;;ACjDK,SAAS,kBAAkB,CAChC,SACA,MACe;AAAA,EACf,SAAS,OAAO,CAAC,MAA4B;AAAA,IAC3C,IAAI,KAAK,WAAW,KAAK,OAAO,KAAK,OAAO,YAAY;AAAA,MACtD,MAAM,QAAiB,KAAK,GAAG;AAAA,MAC/B,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAAA,IAC9C;AAAA,IACA,OAAO,KAAK,IAAI,SAAQ,OAAO,QAAQ,aAAa,IAAI,IAAI,GAAI;AAAA;AAAA,EAGlE,SAAS,KAAK,CAAC,QAA6B,MAAiB;AAAA,IAC3D,IAAI,CAAC,QAAQ;AAAA,MAAG;AAAA,IAChB,IAAI;AAAA,MACF,KAAK,EAAE,QAAQ,MAAM,QAAQ,IAAI,EAAE,CAAC;AAAA,MACpC,MAAM;AAAA;AAAA,EAKV,OAAO;AAAA,IACL,KAAK,IAAI,SAAS,MAAM,OAAO,IAAI;AAAA,IACnC,MAAM,IAAI,SAAS,MAAM,QAAQ,IAAI;AAAA,IACrC,MAAM,IAAI,SAAS,MAAM,QAAQ,IAAI;AAAA,IACrC,OAAO,IAAI,SAAS,MAAM,SAAS,IAAI;AAAA,EACzC;AAAA;AAIK,SAAS,gBAAgB,CAC9B,QACA,SACA;AAAA,EACA,IAAI,QAAQ,SAAS;AAAA,IAAe;AAAA,EACpC,OAAO,IAAI,MAAM;AAAA,IACf,MAAM,WAKF,EAAE,MAAM,QAAQ,KAAK;AAAA,IACzB,IAAI,QAAQ;AAAA,MAAS,SAAS,KAAK,QAAQ;AAAA,IAC3C,IAAI,QAAQ,SAAS,kBAAkB;AAAA,MACrC,SAAS,QAAQ,QAAQ;AAAA,MACzB,MAAM,UAAU,QAAQ;AAAA,MACxB,IACE,QAAQ,UAAU,gBAClB,WACA,OAAO,YAAY,YACnB,eAAe,WACf,OAAO,QAAQ,cAAc;AAAA,QAE7B,SAAS,YAAY,QAAQ;AAAA,IACjC;AAAA,IACA,OAAO,CAAC,6BAA6B,QAAQ;AAAA,GAC9C;AAAA;;;AClCH,SAAS,uBAAuB,CAAC,OAAuB;AAAA,EACtD,IAAI,iBAAiB;AAAA,IACnB,MAAM,IAAI,cAAa,MAAM,SAAS,MAAM,MAAM,MAAM,SAAS;AAAA,EACnE,MAAM;AAAA;AAID,SAAS,sBAAqB;AAAA,EACnC;AAAA,EACA,QAAQ,QAAQ;AAAA,EAChB,YAAY;AAAA,EACZ,OAAO;AAAA,EACP;AAAA,GAOC;AAAA,EACD,IAAI,IAAI,IAAI,YAAY,EAAE,WAAW;AAAA,IACnC,MAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD,MAAM,aAAa,WAAW;AAAA,EAC9B,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI,WAAW;AAAA,EACf,MAAM,UAAU,IAAI;AAAA,EACpB,IAAI;AAAA,EACJ,MAAM,iBAAiB,IAAI;AAAA,EAC3B,MAAM,SAAS,mBACb,MACE,CAAC,YACD,CAAC,CAAC,aACF,CAAC,CAAC,aACF,OAAO,cAAc,aACrB,aAAa,cACb,UAAU,YAAY,MACxB,WAAS,KAAK,cAAc,EAAE,SAAS,MAAM,CAAC,CAChD;AAAA,EAEA,MAAM,WAAW,qBAAqB;AAAA,IACpC,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ,MAAM,MAAM;AAAA,IACpB,QAAQ,SAAS;AAAA,IACjB,SAAS,OAAO,EAAE,YAAY,WAAW,MAAM;AAAA,IAC/C,IAAI,CAAC,SAAS;AAAA,MACZ,MAAM,OAAO,YAAY,SAAS,YAAY;AAAA,MAC9C,iBAAiB,QAAQ,OAAO;AAAA;AAAA,IAElC,UAAU;AAAA,MACR,OAAO,CAAC,SAAS;AAAA,QACf,IAAI,SAAS;AAAA,UAAU,QAAQ,QAAQ;AAAA,QACvC,KAAK,SAAS,CAAC,CAAC;AAAA;AAAA,MAElB,UAAU,CAAC,SAAS;AAAA,QAClB,IAAI,aAAa,cAAc,QAAQ,WAAW;AAAA,UAChD,WAAW,SAAS,QAAQ,OAAO;AAAA,YACjC,MAAM,OACJ,IAAI,cACF,+CACA,cACF,CACF;AAAA,QACJ;AAAA,QACA,MAAM,QAAQ,CAAC;AAAA,QACf,YAAY,QAAQ;AAAA,QACpB,aAAa,QAAQ,KAAK;AAAA,QAC1B,IAAI;AAAA,UAAO,WAAW,SAAS,QAAQ,OAAO;AAAA,YAAG,MAAM,MAAM;AAAA,QAC7D,IAAI;AAAA,UAAU;AAAA,QACd,IAAI,SAAS;AAAA,UAAO,KAAK,gBAAgB,CAAC,CAAC;AAAA;AAAA,MAE7C,WAAW,CAAC,SAAS;AAAA,QACnB,aAAa,QAAQ,KAAK;AAAA;AAAA,MAE5B,UAAU,CAAC,SAAS;AAAA,QAClB,IAAI,SAAS;AAAA,UAAU,aAAa,QAAQ,UAAU;AAAA;AAAA,MAExD,MAAM,CAAC,SAAS;AAAA,QACd,QAAQ,IAAI,QAAQ,EAAE,GAAG,QAAQ,QAAQ,QAAQ;AAAA;AAAA,MAEnD,KAAK,CAAC,SAAS;AAAA,QACb,QACG,IAAI,QAAQ,EAAE,GACb,OACA,IAAI,qBACF,QAAQ,MACR,QAAQ,SACR,QAAQ,SACV,CACF;AAAA;AAAA,IAEN;AAAA,EACF,CAAC;AAAA,EACD,MAAM,OAAO,SAAS;AAAA,EACtB,MAAM,UAAU,SAAS;AAAA,EAEzB,SAAS,YAAY,CAAC,OAAgB;AAAA,IACpC,YAAY;AAAA,IACZ,WAAW,YAAY;AAAA,MAAgB,SAAS,KAAK;AAAA;AAAA,EAGvD,MAAM,iBAAiB,WAAW,OAAO;AAAA,EAEzC,SAAS,cAAc,CACrB,SACA,QACkB;AAAA,IAClB,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,IAAI;AAAA,QACF,OAAO,OACL,IAAI,cAAa,2BAA2B,eAAe,CAC7D;AAAA,MACF,IAAI,QAAQ;AAAA,QAAS,OAAO,OAAO,OAAO,MAAM;AAAA,MAChD,IAAI,QAAQ,QAAQ;AAAA,QAClB,OAAO,OACL,IAAI,cAAa,mCAAmC,aAAa,CACnE;AAAA,MACF,MAAM,KAAK,WAAW;AAAA,MACtB,IAAI,OAAO;AAAA,MAEX,SAAS,OAAO,GAAG;AAAA,QACjB,aAAa,KAAK;AAAA,QAClB,QAAQ,oBAAoB,SAAS,KAAK;AAAA,QAC1C,QAAQ,OAAO,EAAE;AAAA;AAAA,MAGnB,SAAS,KAAK,GAAG;AAAA,QACf,IAAI;AAAA,UAAM,KAAK,UAAU,EAAE,GAAG,CAAC;AAAA,QAC/B,QAAQ;AAAA,QACR,OAAO,QAAQ,MAAM;AAAA;AAAA,MAGvB,MAAM,QAAQ,WAAW,MAAM;AAAA,QAC7B,IAAI;AAAA,UAAM,KAAK,UAAU,EAAE,GAAG,CAAC;AAAA,QAC/B,QAAQ;AAAA,QACR,OACE,IAAI,cACF,YACI,gCACA,yDACJ,YAAY,YAAY,oBAC1B,CACF;AAAA,SACC,SAAS;AAAA,MACZ,MAAM,QAAiB;AAAA,QACrB,KAAK,GAAG;AAAA,UACN,IAAI;AAAA,YAAM;AAAA,UACV,IAAI;AAAA,YACF,KAAK,WAAW;AAAA,cACd;AAAA,cACA,OAAO,QAAQ;AAAA,cACf,SAAS,QAAQ;AAAA,YACnB,CAAC;AAAA,YACD,OAAO;AAAA,YACP,MAAM;AAAA,YACN,QAAQ;AAAA,YACR,OACE,IAAI,cACF,0CACA,iBACF,CACF;AAAA;AAAA;AAAA,QAGJ,OAAO,CAAC,OAAO;AAAA,UACb,QAAQ;AAAA,UACR,QAAQ,KAAK;AAAA;AAAA,QAEf,MAAM,CAAC,OAAO;AAAA,UACZ,QAAQ;AAAA,UACR,OAAO,KAAK;AAAA;AAAA,MAEhB;AAAA,MACA,QAAQ,IAAI,IAAI,KAAK;AAAA,MACrB,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AAAA,MACvD,IAAI;AAAA,QAAW,MAAM,MAAM;AAAA,MACtB,SAAI,SAAS,SAAS;AAAA,QAAO,KAAK,SAAS,CAAC,CAAC;AAAA,KACnD;AAAA;AAAA,EAGH,MAAM,WAAW,qBACf,EAAE,cAAc,sBAAqB,GAAG,YAAY,eAAc,GAClE,cACF;AAAA,EAEA,SAAS,cAAc,CACrB,WACA,OACA,QAC4B;AAAA,IAC5B,OAAO,SACJ,QAAQ,cAAc,EAAE,WAAW,MAAM,GAAG,EAAE,OAAO,CAAC,EACtD,MAAM,uBAAuB;AAAA;AAAA,EAGlC,SAAS,UAAU,GAAG;AAAA,IACpB,IAAI;AAAA,MAAW,KAAK,cAAc,CAAC,CAAC;AAAA,IACpC,YAAY;AAAA,IACZ,WAAW,SAAS,QAAQ,OAAO;AAAA,MACjC,MAAM,OACJ,IAAI,cAAa,2BAA2B,eAAe,CAC7D;AAAA;AAAA,EAGJ,SAAS,MAAM,CAAC,OAA4B;AAAA,IAC1C,IAAI,MAAM,cAAc,SAAS,SAAS;AAAA,MAAQ,KAAK,SAAS,CAAC,CAAC;AAAA;AAAA,EAGpE,SAAS,OAAO,GAAG;AAAA,IACjB,IAAI;AAAA,MAAU;AAAA,IACd,WAAW;AAAA,IACX,WAAW;AAAA,IACX,SAAS,QAAQ;AAAA,IACjB,MAAM,oBAAoB,WAAW,OAAO;AAAA,IAC5C,MAAM,oBAAoB,YAAY,UAAU;AAAA,IAChD,MAAM,oBAAoB,YAAY,MAAM;AAAA,IAC5C,eAAe,MAAM;AAAA;AAAA,EAGvB,MAAM,iBAAiB,YAAY,UAAU;AAAA,EAC7C,MAAM,iBAAiB,YAAY,MAAM;AAAA,EACzC,IAAI,SAAS;AAAA,IAAO,KAAK,SAAS,CAAC,CAAC;AAAA,EAEpC,OAAO;AAAA,IACL;AAAA,IACA,SAAS;AAAA,IACT,WAAW;AAAA,IACX,WAAW;AAAA,MACT,QAAQ,CAAC,aAAa,OAAO,QAAQ,UAAU;AAAA,QAC7C,OAAO,SACJ,QACC,YACA,EAAE,WAAW,UAAW,WAAW,YAAY,CAAC,IAAI,EAAE,OAAO,EAAG,GAChE,EAAE,OAAO,CACX,EACC,MAAM,uBAAuB;AAAA;AAAA,IAEpC;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,GAAG;AAAA,MACT,OAAO;AAAA;AAAA,IAET,SAAS,CAAC,UAAoC;AAAA,MAC5C,eAAe,IAAI,QAAQ;AAAA,MAE3B,OAAO,MAAM;AAAA,QACX,eAAe,OAAO,QAAQ;AAAA;AAAA;AAAA,IAGlC,KAAK,GAAG;AAAA,MACN,IAAI,CAAC,YAAY;AAAA,QAAW,KAAK,gBAAgB,CAAC,CAAC;AAAA;AAAA,IAErD,IAAI,GAAG;AAAA,MACL,IAAI,CAAC,YAAY;AAAA,QAAW,KAAK,gBAAgB,CAAC,CAAC;AAAA;AAAA,EAEvD;AAAA;AAKF,IAAM,YAAY,OAAO,IAAI,6BAA6B;AAC1D,IAAM,eAAe,OAAO,IAAI,+BAA+B;AAWxD,SAAS,gBAAgB,CAAC,SAA0C;AAAA,EACzE,MAAM,eACJ,YACC,OAAO,WAAW,WAAW,cAAc,YAAY,WAAW;AAAA,EACrE,IAAI,CAAC;AAAA,IAAc;AAAA,EACnB,MAAM,QAAQ;AAAA,EACd,IAAI,MAAM;AAAA,IAAY,OAAO,MAAM;AAAA,EACnC,MAAM,eACJ,IAAI,IAAI,MAAM,SAAS,IAAI,EAAE,aAAa,IAAI,YAAY,KAAK;AAAA,EACjE,IAAI,CAAC;AAAA,IAAc;AAAA,EAEnB,eAAe,OAAO,CAAC,cAAsB;AAAA,IAC3C,IAAI;AAAA,MACF,MAAM,WAAW,MAAM,MAAM,MAAM,wBAAwB;AAAA,QACzD,QAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC,CAAC;AAAA,MACD,MAAM,SAAU,MAAM,SAAS,KAAK;AAAA,MACpC,IACE,CAAC,SAAS,MACV,OAAO,WAAW,gBAClB,MAAM,WAAW;AAAA,QAEjB,MAAM,IAAI,MAAM,qCAAqC;AAAA,MAEvD,IAAI,MAAM;AAAA,QAAe,OAAO,MAAM;AAAA,MACtC,IAAI,MAAM,eAAe;AAAA,QACvB,MAAM,IAAI,MAAM,kCAAkC;AAAA,MACpD,MAAM,SAAS,uBAAsB,EAAE,cAAc,QAAQ,MAAM,CAAC;AAAA,MACpE,MAAM,aAAa;AAAA,MACnB,MAAM,gBAAgB;AAAA,MAEtB,OAAO;AAAA,MACP,MAAM;AAAA,MACN,MAAM,IAAI,cACR,wFACA,oBACF;AAAA;AAAA;AAAA,EAIJ,IAAI;AAAA,EAEJ,SAAS,aAAa,GAAG;AAAA,IACvB,MAAM,YAAY,MAAM;AAAA,IACxB,IAAI;AAAA,MAAW,OAAO,QAAQ,QAAQ,SAAS;AAAA,IAC/C,IAAI,CAAC,YAAY;AAAA,MACf,MAAM,UAAU,QAAQ,YAAY;AAAA,MACpC,aAAa;AAAA,MAER,QAAQ,MAAM,MAAM;AAAA,QACvB,IAAI,eAAe;AAAA,UAAS,aAAa;AAAA,OAC1C;AAAA,IACH;AAAA,IAEA,OAAO;AAAA;AAAA,EAGT,MAAM,QAAqB;AAAA,SACnB,UAAS,CAAC,WAAW,OAAO,QAAQ;AAAA,MACxC,QAAQ,eAAe;AAAA,MACvB,MAAM,UAAU,cAAc;AAAA,MAC9B,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,MAAM,SAAS,SACX,MAAM,QAAQ,KAAK;AAAA,UACjB;AAAA,UACA,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,YAChC,MAAM,gBAAgB;AAAA,YAEtB,SAAS,WAAW,GAAG;AAAA,cACrB,OAAO,cAAc,MAAM;AAAA;AAAA,YAG7B,QAAQ;AAAA,YACR,cAAc,iBAAiB,SAAS,aAAa;AAAA,cACnD,MAAM;AAAA,YACR,CAAC;AAAA,WACF;AAAA,QACH,CAAC,IACD,MAAM;AAAA,QACV,QAAQ,eAAe;AAAA,QAEvB,OAAO,OAAO,UAAU,WAAW,OAAO,MAAM;AAAA,gBAChD;AAAA,QACA,IAAI;AAAA,UAAO,QAAQ,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA,IAGzD,SAAS;AAAA,EACX;AAAA,EACA,MAAM,aAAa;AAAA,EAEd,cAAc,EAAE,MAAM,MAAM,EAAE;AAAA,EAEnC,OAAO;AAAA;AAIF,SAAS,wBAAuB,CACrC,QACA,QAAgB,QAChB;AAAA,EACA,MAAM,SAAS;AAAA,EACf,IAAI,OAAO;AAAA,IACT,MAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D,OAAO,aAAa;AAAA,EACpB,OAAO,gBAAgB;AAAA,EAEvB,OAAO,MAAM;AAAA,IACX,IAAI,OAAO,eAAe;AAAA,MAAQ,OAAO,OAAO;AAAA,IAChD,IAAI,OAAO,kBAAkB;AAAA,MAAQ,OAAO,OAAO;AAAA,IACnD,OAAO,QAAQ;AAAA;AAAA;AAKZ,SAAS,oBAAmB,CAAC,QAAgB,QAAQ;AAAA,EAC1D,OAAQ,MAAsB;AAAA;",
+  "debugId": "F5878FE6A9FBABAD64756E2164756E21",
+  "names": []
+}

package/dist/chunks/index-mt93ff2b.js

@@ -0,0 +1,28 @@
+import {
+  defineOperation2
+} from "./index-ag0cgnvq.js";
+import {
+  snapshotQueries
+} from "./index-qd5xgx6y.js";
+
+// src/core/config.ts
+function defineDataApp2(config) {
+  const queries = snapshotQueries(config.queries);
+  return Object.freeze({
+    ...config,
+    queries,
+    defineOperation(operation) {
+      return defineOperation2({
+        ...operation,
+        queries
+      });
+    }
+  });
+}
+function dataAppTitle2(config) {
+  return `${config.title} • ${config.scope.organization}/${config.scope.environment} • Altertable app`;
+}
+
+export { defineDataApp2, dataAppTitle2 };
+
+//# debugId=BF0300C757D4413D64756E2164756E21

package/dist/chunks/index-mt93ff2b.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/core/config.ts"],
+  "sourcesContent": [
+    "/**\n * App configuration shared by browser and server.\n * @module @altertable/data-app\n */\nimport { defineOperation } from '@/src/core/contract';\nimport type { AppearanceOptions } from '@/src/core/appearance';\nimport { snapshotQueries, type QueryDefinitions } from '@/src/core/queries';\nexport type { QueryDefinitions, QueryParameterValue } from '@/src/core/queries';\n\nexport type DataAppConfig<Queries extends QueryDefinitions = QueryDefinitions> =\n  {\n    title: string;\n    /** Display labels; scope does not grant data access. */\n    scope: { organization: string; environment: string };\n    /** Explain what the app helps readers explore. */\n    description: string;\n    /** Omit to use the standard appearance. */\n    appearance?: AppearanceOptions;\n    /** Named SQL statements and parameter defaults used by app operations. */\n    queries: Queries;\n  };\n\ntype ImmutableQueries<Queries extends QueryDefinitions> = {\n  readonly [Name in keyof Queries]: {\n    readonly statement: Queries[Name]['statement'];\n    readonly params: {\n      readonly [Param in keyof Queries[Name]['params']]: Readonly<\n        Queries[Name]['params'][Param]\n      >;\n    };\n  };\n};\n\n/** An app declaration with operations bound to its query registry. */\nexport type DataAppDefinition<\n  Queries extends QueryDefinitions = QueryDefinitions,\n> = Readonly<Omit<DataAppConfig<Queries>, 'queries'>> & {\n  readonly queries: ImmutableQueries<Queries>;\n  defineOperation<Input, Output>(\n    operation: Omit<\n      Parameters<typeof defineOperation<Input, Output, Queries>>[0],\n      'queries'\n    >\n  ): ReturnType<typeof defineOperation<Input, Output, Queries>>;\n};\n\n/**\n * Define the app's query source of truth while preserving exact query and parameter names.\n * Use `app.defineOperation()` to bind operations to these queries. Pass the app once\n * to `mountDataApp({ app, component })` or `<DataAppProvider app={app}>`.\n * The app owns an immutable snapshot of its registry; later input mutations do not change it.\n * This declaration does not execute queries or mount UI. Static apps use `queries: {}`.\n *\n * Declare exactly one module-level const initialized with `defineDataApp({ ... })` in the app's\n * declaration source. For the future backend extractor, the argument is read before bundling\n * by resolving the named `defineDataApp` import from `@altertable/data-app`, including aliases.\n * Variable name is arbitrary;\n * export only for imports by other modules. The argument must be a direct object literal\n * containing schema-valid objects, arrays, strings (including templates without interpolation),\n * finite signed numbers, booleans, and null. No spreads, computed keys, references, calls,\n * or callbacks inside it. Extraction must validate data without evaluating app code.\n * TypeScript checks the shape, not AST syntax. Keep executable composition outside the call.\n *\n * SQL passes unchanged to the backend, which interprets placeholders such as `$orgId`.\n * Declare every parameter with `{ defaultValue: value }` or `{}` for a required value.\n * Values are finite numbers, strings, booleans, or null, never SQL fragments or identifiers.\n * Caller values override defaults; trusted server `queryParams` cannot be overridden.\n */\nexport function defineDataApp<const Queries extends QueryDefinitions>(\n  config: DataAppConfig<Queries>\n): DataAppDefinition<Queries> {\n  const queries = snapshotQueries(config.queries) as Queries &\n    ImmutableQueries<Queries>;\n  return Object.freeze({\n    ...config,\n    queries,\n    defineOperation<Input, Output>(\n      operation: Omit<\n        Parameters<typeof defineOperation<Input, Output, Queries>>[0],\n        'queries'\n      >\n    ) {\n      return defineOperation<Input, Output, Queries>({\n        ...operation,\n        queries,\n      });\n    },\n  });\n}\n\nexport function dataAppTitle(\n  config: Pick<DataAppConfig, 'title' | 'scope'>\n): string {\n  return `${config.title} • ${config.scope.organization}/${config.scope.environment} • Altertable app`;\n}\n"
+  ],
+  "mappings": ";;;;;;;;AAoEO,SAAS,cAAqD,CACnE,QAC4B;AAAA,EAC5B,MAAM,UAAU,gBAAgB,OAAO,OAAO;AAAA,EAE9C,OAAO,OAAO,OAAO;AAAA,OAChB;AAAA,IACH;AAAA,IACA,eAA8B,CAC5B,WAIA;AAAA,MACA,OAAO,iBAAwC;AAAA,WAC1C;AAAA,QACH;AAAA,MACF,CAAC;AAAA;AAAA,EAEL,CAAC;AAAA;AAGI,SAAS,aAAY,CAC1B,QACQ;AAAA,EACR,OAAO,GAAG,OAAO,WAAW,OAAO,MAAM,gBAAgB,OAAO,MAAM;AAAA;",
+  "debugId": "BF0300C757D4413D64756E2164756E21",
+  "names": []
+}

package/dist/chunks/{contract-tf8c3qpv.js → index-qd5xgx6y.js}

@@ -1,3 +1,40 @@
+// src/core/invariant.ts
+function invariant(condition, message) {
+  if (!condition)
+    throw new Error(`Invariant failed: ${message}`);
+}
+
+// src/core/queries.ts
+function isQueryParameterValue(value) {
+  return value === null || typeof value === "string" || typeof value === "boolean" || typeof value === "number" && Number.isFinite(value);
+}
+function isQueryParameters(value) {
+  return !!value && typeof value === "object" && !Array.isArray(value) && Object.values(value).every(isQueryParameterValue);
+}
+function snapshotQueries(definitions) {
+  return Object.freeze(Object.fromEntries(Object.entries(definitions).map(([name, query]) => {
+    invariant(!!name.trim() && !!query.statement.trim(), "Queries need a name and SQL statement.");
+    const params = Object.freeze(Object.fromEntries(Object.entries(query.params).map(([key, declaration]) => {
+      invariant(!Object.hasOwn(declaration, "defaultValue") || isQueryParameterValue(declaration.defaultValue), `Invalid default for parameter ${key} in query ${name}.`);
+      return [key, Object.freeze({ ...declaration })];
+    })));
+    return [name, Object.freeze({ statement: query.statement, params })];
+  })));
+}
+function resolveQueryParameters(declarations, values, context) {
+  invariant(values && typeof values === "object" && !Array.isArray(values), "Supply query parameter values as an object.");
+  for (const key of Object.keys(values)) {
+    invariant(Object.hasOwn(declarations, key), `Unknown parameter ${key}.`);
+    invariant(!Object.hasOwn(context, key), `Cannot override context parameter ${key}.`);
+  }
+  return Object.fromEntries(Object.entries(declarations).map(([key, declaration]) => {
+    const value = Object.hasOwn(context, key) ? context[key] : Object.hasOwn(values, key) ? values[key] : declaration.defaultValue;
+    invariant(value !== undefined, `Missing parameter ${key}.`);
+    invariant(isQueryParameterValue(value), `Parameter ${key} must be a scalar value.`);
+    return [key, value];
+  }));
+}
+
 // src/core/navigation.ts
 function validLocation(value) {
   if (!value || typeof value !== "object")
@@ -98,7 +135,7 @@ function defineDataQueryRoute2(operations) {
       }
       if (!("data" in body) || typeof body.requestId !== "string" || typeof body.queriedAt !== "string" || !Array.isArray(body.queryIds) || !body.queryIds.every((id) => typeof id === "string"))
         throw new Error("Invalid data envelope.");
-      if (body.queries !== undefined && (!Array.isArray(body.queries) || !body.queries.every((query) => query && typeof query === "object" && typeof query.name === "string" && typeof query.statement === "string" && (query.queryId === undefined || typeof query.queryId === "string"))))
+      if (body.queries !== undefined && (!Array.isArray(body.queries) || !body.queries.every((query) => query && typeof query === "object" && typeof query.name === "string" && typeof query.statement === "string" && (query.params === undefined || isQueryParameters(query.params)) && (query.queryId === undefined || typeof query.queryId === "string"))))
         throw new Error("Invalid query evidence.");
       const operation = operations?.[input.operation];
       return {
@@ -136,9 +173,13 @@ var sqlQueryRoute2 = defineMessageRoute2({
     if (!value || typeof value !== "object")
       throw new Error("Invalid SQL query.");
     const query = value;
-    if (typeof query.statement !== "string" || !query.statement.trim() || typeof query.limit !== "number" || !Number.isSafeInteger(query.limit) || query.limit < 1)
+    if (typeof query.statement !== "string" || !query.statement.trim() || typeof query.limit !== "number" || !Number.isSafeInteger(query.limit) || query.limit < 1 || query.params !== undefined && !isQueryParameters(query.params))
       throw new Error("Invalid SQL query.");
-    return { statement: query.statement, limit: query.limit };
+    return {
+      statement: query.statement,
+      limit: query.limit,
+      ...query.params === undefined ? {} : { params: query.params }
+    };
   },
   output(value, input) {
     if (!value || typeof value !== "object")
@@ -158,6 +199,6 @@ var dataAppRoutes2 = {
   "navigation:update": navigationUpdateRoute2
 };
 
-export { validLocation, MessageRoutingError2, defineMessageRoute2, createMessageRouter2, defineDataQueryRoute2, navigationUpdateRoute2, sqlQueryRoute2, dataAppRoutes2 };
+export { invariant, snapshotQueries, resolveQueryParameters, validLocation, MessageRoutingError2, defineMessageRoute2, createMessageRouter2, defineDataQueryRoute2, navigationUpdateRoute2, sqlQueryRoute2, dataAppRoutes2 };
 
-//# debugId=7AD0B2977AA9174364756E2164756E21
+//# debugId=6D70F2841935946464756E2164756E21

package/dist/chunks/index-qd5xgx6y.js.map

@@ -0,0 +1,13 @@
+{
+  "version": 3,
+  "sources": ["../src/core/invariant.ts", "../src/core/queries.ts", "../src/core/navigation.ts", "../src/core/messages.ts"],
+  "sourcesContent": [
+    "/** Assert an author or data contract while preserving a useful failure message. */\nexport function invariant(\n  condition: unknown,\n  message: string\n): asserts condition {\n  if (!condition) throw new Error(`Invariant failed: ${message}`);\n}\n",
+    "import { invariant } from '@/src/core/invariant';\n\nexport type QueryParameterValue = string | number | boolean | null;\ntype QueryDefinition = {\n  statement: string;\n  params: Readonly<Record<string, { defaultValue?: QueryParameterValue }>>;\n};\nexport type QueryDefinitions = Readonly<Record<string, QueryDefinition>>;\n\n/** Parameters are scalar SQL values, never identifiers or SQL fragments. */\nexport type QueryParameters = Readonly<Record<string, QueryParameterValue>>;\n\nfunction isQueryParameterValue(value: unknown): value is QueryParameterValue {\n  return (\n    value === null ||\n    typeof value === 'string' ||\n    typeof value === 'boolean' ||\n    (typeof value === 'number' && Number.isFinite(value))\n  );\n}\n\nexport function isQueryParameters(value: unknown): value is QueryParameters {\n  return (\n    !!value &&\n    typeof value === 'object' &&\n    !Array.isArray(value) &&\n    Object.values(value).every(isQueryParameterValue)\n  );\n}\n\n/** Retain authored statements and defaults, rejecting empty SQL and invalid scalar defaults. */\nexport function snapshotQueries(\n  definitions: QueryDefinitions\n): QueryDefinitions {\n  return Object.freeze(\n    Object.fromEntries(\n      Object.entries(definitions).map(([name, query]) => {\n        invariant(\n          !!name.trim() && !!query.statement.trim(),\n          'Queries need a name and SQL statement.'\n        );\n        const params = Object.freeze(\n          Object.fromEntries(\n            Object.entries(query.params).map(([key, declaration]) => {\n              invariant(\n                !Object.hasOwn(declaration, 'defaultValue') ||\n                  isQueryParameterValue(declaration.defaultValue),\n                `Invalid default for parameter ${key} in query ${name}.`\n              );\n              return [key, Object.freeze({ ...declaration })];\n            })\n          )\n        );\n        return [name, Object.freeze({ statement: query.statement, params })];\n      })\n    )\n  );\n}\n\n/** Context owns protected values; callers supply filters; defaults fill remaining declarations. */\nexport function resolveQueryParameters(\n  declarations: QueryDefinition['params'],\n  values: Partial<QueryParameters>,\n  context: QueryParameters\n): QueryParameters {\n  invariant(\n    values && typeof values === 'object' && !Array.isArray(values),\n    'Supply query parameter values as an object.'\n  );\n  for (const key of Object.keys(values)) {\n    invariant(Object.hasOwn(declarations, key), `Unknown parameter ${key}.`);\n    invariant(\n      !Object.hasOwn(context, key),\n      `Cannot override context parameter ${key}.`\n    );\n  }\n  return Object.fromEntries(\n    Object.entries(declarations).map(([key, declaration]) => {\n      const value = Object.hasOwn(context, key)\n        ? context[key]\n        : Object.hasOwn(values, key)\n          ? values[key]\n          : declaration.defaultValue;\n      invariant(value !== undefined, `Missing parameter ${key}.`);\n      invariant(\n        isQueryParameterValue(value),\n        `Parameter ${key} must be a scalar value.`\n      );\n      return [key, value];\n    })\n  );\n}\n",
+    "/** App-owned URL state shared by controls, frame adapters, and host navigation. */\nexport type AppLocation = { search: string; hash: string };\nexport type HistoryMode = 'push' | 'replace';\nexport type NavigationUpdate = AppLocation & {\n  mode: HistoryMode;\n  title?: string;\n};\n\nexport function validLocation(value: unknown): value is AppLocation {\n  if (!value || typeof value !== 'object') return false;\n  const message = value as { search?: unknown; hash?: unknown };\n  return (\n    typeof message.search === 'string' &&\n    message.search.length <= 16_384 &&\n    (message.search === '' || message.search.startsWith('?')) &&\n    typeof message.hash === 'string' &&\n    message.hash.length <= 4096 &&\n    (message.hash === '' || message.hash.startsWith('#'))\n  );\n}\n",
+    "import { isQueryParameters, type QueryParameters } from '@/src/core/queries';\nimport type {\n  TransportResponse,\n  QueryResult,\n  OperationContracts,\n  DataQueryInput,\n  DataQueryBody,\n  OutputOf,\n} from '@/src/core/operation-types';\nexport type {\n  OperationContracts,\n  DataQueryInput,\n  DataQueryBody,\n} from '@/src/core/operation-types';\nimport { validLocation, type NavigationUpdate } from '@/src/core/navigation';\nexport type { NavigationUpdate } from '@/src/core/navigation';\n\nexport type MessageContext = { signal: AbortSignal };\nexport type RoutedMessage = { route: string; payload: unknown };\nexport type MessageDispatcher = (\n  message: unknown,\n  context: MessageContext\n) => Promise<unknown>;\nexport type MessageTransport = (\n  message: RoutedMessage,\n  signal?: AbortSignal\n) => Promise<unknown>;\nexport type MessageRoute<Input, Output> = {\n  input: (value: unknown) => Input;\n  output: (value: unknown, input: Input) => Output;\n};\nexport type MessageRoutes = Record<\n  string,\n  {\n    input: (value: unknown) => unknown;\n    output: (value: unknown, input: never) => unknown;\n  }\n>;\nexport type MessageInput<Route extends MessageRoutes[string]> = ReturnType<\n  Route['input']\n>;\nexport type MessageHandlers<Routes extends MessageRoutes> = {\n  [Name in keyof Routes]: (\n    payload: MessageInput<Routes[Name]>,\n    context: MessageContext\n  ) =>\n    | ReturnType<Routes[Name]['output']>\n    | Promise<ReturnType<Routes[Name]['output']>>;\n};\n\n// A bootstrap and its app may bundle independent copies in the same window.\nconst errorBrand = Symbol.for('@altertable/data-app/MessageRoutingError');\n\n/** Only these deliberate, public failures cross the message boundary. Other errors stay private. */\nexport class MessageRoutingError extends Error {\n  readonly [errorBrand] = true;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [errorBrand]?: unknown })[errorBrand] === true\n    );\n  }\n\n  constructor(\n    public readonly code: string,\n    message: string,\n    public readonly requestId?: string\n  ) {\n    super(message);\n    this.name = 'MessageRoutingError';\n  }\n}\n\nexport function defineMessageRoute<Input, Output>(\n  route: MessageRoute<Input, Output>\n): MessageRoute<Input, Output> {\n  return route;\n}\n\n/** Contracts are shared; handlers are supplied by the host and never belong in the app bundle. */\nexport function createMessageRouter<const Routes extends MessageRoutes>(\n  routes: Routes,\n  handlers: MessageHandlers<NoInfer<Routes>>\n) {\n  const registered = new Map(\n    Object.entries(routes).map(([name, contract]) => {\n      const handler = handlers[name];\n      if (!name || name.length > 256 || typeof handler !== 'function')\n        throw new Error(\n          'Each message route requires a handler and a bounded name.'\n        );\n\n      return [name, { contract, handler }] as const;\n    })\n  );\n\n  async function dispatch(\n    value: unknown,\n    context: MessageContext\n  ): Promise<unknown> {\n    if (\n      !value ||\n      typeof value !== 'object' ||\n      typeof (value as RoutedMessage).route !== 'string'\n    )\n      throw new MessageRoutingError(\n        'invalid_message',\n        'Invalid routed message.'\n      );\n    const message = value as RoutedMessage;\n    const entry = registered.get(message.route);\n    if (!entry)\n      throw new MessageRoutingError('unknown_route', 'Unknown message route.');\n    let payload: unknown;\n    try {\n      payload = entry.contract.input(message.payload);\n    } catch {\n      throw new MessageRoutingError(\n        'invalid_payload',\n        'Invalid message payload.'\n      );\n    }\n    context.signal.throwIfAborted();\n    let result: unknown;\n    try {\n      result = await entry.handler(payload as never, context);\n    } catch (error) {\n      if (context.signal.aborted) throw context.signal.reason;\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'request_failed',\n        'The message request failed. Retry the request.'\n      );\n    }\n    context.signal.throwIfAborted();\n    try {\n      return entry.contract.output(result, payload as never);\n    } catch (error) {\n      if (error instanceof MessageRoutingError) throw error;\n      throw new MessageRoutingError(\n        'invalid_response',\n        'Invalid message response.'\n      );\n    }\n  }\n\n  return { dispatch };\n}\n\nexport type DataQueryRoute<Operations extends OperationContracts> =\n  MessageRoute<DataQueryInput<Operations>, TransportResponse> & {\n    operations: Operations | undefined;\n  };\nexport type MessageOutput<Route extends MessageRoutes[string], Input> =\n  Route extends DataQueryRoute<infer Operations>\n    ? Input extends { operation: infer Name extends keyof Operations }\n      ? TransportResponse<DataQueryBody<OutputOf<Operations[Name]>>>\n      : never\n    : ReturnType<Route['output']>;\n\n/** Omit contracts only in generic hosts such as the CLI shell, where Bun validates operations. */\nexport function defineDataQueryRoute<\n  Operations extends OperationContracts = OperationContracts,\n>(operations?: Operations): DataQueryRoute<Operations> {\n  return {\n    operations,\n    input(value) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid query.');\n      const request = value as { operation?: unknown; input?: unknown };\n      if (\n        typeof request.operation !== 'string' ||\n        !request.operation ||\n        request.operation.length > 256 ||\n        request.operation.includes('/')\n      )\n        throw new Error('Invalid operation.');\n      const operation =\n        operations && Object.hasOwn(operations, request.operation)\n          ? operations[request.operation]\n          : undefined;\n      if (operations && !operation) throw new Error('Unknown operation.');\n\n      return {\n        operation: request.operation,\n        input: operation ? operation.input(request.input) : request.input,\n      } as DataQueryInput<Operations>;\n    },\n    output(value, input) {\n      if (!value || typeof value !== 'object')\n        throw new Error('Invalid data response.');\n      const response = value as TransportResponse;\n      if (\n        !Number.isInteger(response.status) ||\n        response.status < 100 ||\n        response.status > 599 ||\n        !response.body ||\n        typeof response.body !== 'object' ||\n        Array.isArray(response.body)\n      )\n        throw new Error('Invalid data response.');\n      const body = response.body as DataQueryBody<unknown> & {\n        error?: { code?: unknown; message?: unknown; requestId?: unknown };\n      };\n      if (response.status < 200 || response.status >= 300) {\n        const failure = body.error;\n        throw new MessageRoutingError(\n          typeof failure?.code === 'string' ? failure.code : 'request_failed',\n          typeof failure?.message === 'string'\n            ? failure.message\n            : 'Could not load data.',\n          typeof failure?.requestId === 'string' ? failure.requestId : undefined\n        );\n      }\n      if (\n        !('data' in body) ||\n        typeof body.requestId !== 'string' ||\n        typeof body.queriedAt !== 'string' ||\n        !Array.isArray(body.queryIds) ||\n        !body.queryIds.every(id => typeof id === 'string')\n      )\n        throw new Error('Invalid data envelope.');\n      if (\n        body.queries !== undefined &&\n        (!Array.isArray(body.queries) ||\n          !body.queries.every(\n            query =>\n              query &&\n              typeof query === 'object' &&\n              typeof query.name === 'string' &&\n              typeof query.statement === 'string' &&\n              (query.params === undefined || isQueryParameters(query.params)) &&\n              (query.queryId === undefined || typeof query.queryId === 'string')\n          ))\n      )\n        throw new Error('Invalid query evidence.');\n      const operation = operations?.[input.operation];\n\n      return {\n        status: response.status,\n        body: {\n          ...body,\n          data: operation ? operation.output(body.data) : body.data,\n        },\n      };\n    },\n  };\n}\n\nexport const navigationUpdateRoute = /* @__PURE__ */ defineMessageRoute({\n  input(value: unknown): NavigationUpdate {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid navigation.');\n    const input = value as NavigationUpdate;\n    if (\n      !validLocation(input) ||\n      (input.mode !== 'push' && input.mode !== 'replace') ||\n      (input.title !== undefined &&\n        (typeof input.title !== 'string' || input.title.length > 512))\n    )\n      throw new Error('Invalid navigation.');\n\n    return {\n      search: input.search,\n      hash: input.hash,\n      mode: input.mode,\n      ...(input.title === undefined ? {} : { title: input.title }),\n    };\n  },\n  output(value: unknown): null {\n    if (value !== null) throw new Error('Invalid navigation response.');\n\n    return null;\n  },\n});\nexport type SqlQueryInput = {\n  statement: string;\n  limit: number;\n  params?: QueryParameters;\n};\n\n/** SQL delivery for browser-owned operations. Hosts must enforce backend access and resource limits. */\nexport const sqlQueryRoute = defineMessageRoute({\n  input(value: unknown): SqlQueryInput {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid SQL query.');\n    const query = value as {\n      statement?: unknown;\n      limit?: unknown;\n      params?: unknown;\n    };\n    if (\n      typeof query.statement !== 'string' ||\n      !query.statement.trim() ||\n      typeof query.limit !== 'number' ||\n      !Number.isSafeInteger(query.limit) ||\n      query.limit < 1 ||\n      (query.params !== undefined && !isQueryParameters(query.params))\n    )\n      throw new Error('Invalid SQL query.');\n\n    return {\n      statement: query.statement,\n      limit: query.limit,\n      ...(query.params === undefined\n        ? {}\n        : { params: query.params as QueryParameters }),\n    };\n  },\n  output(value: unknown, input: SqlQueryInput): QueryResult {\n    if (!value || typeof value !== 'object')\n      throw new Error('Invalid query result.');\n    const result = value as QueryResult;\n    if (\n      !Array.isArray(result.columns) ||\n      !result.columns.every(\n        column =>\n          column &&\n          typeof column.name === 'string' &&\n          (column.type === undefined || typeof column.type === 'string')\n      ) ||\n      !Array.isArray(result.rows) ||\n      result.rows.length > input.limit ||\n      !result.rows.every(\n        row => Array.isArray(row) && row.length === result.columns.length\n      ) ||\n      (result.queryId !== undefined && typeof result.queryId !== 'string')\n    )\n      throw new Error('Invalid query result.');\n\n    return {\n      columns: result.columns,\n      rows: result.rows,\n      ...(result.queryId === undefined ? {} : { queryId: result.queryId }),\n    };\n  },\n});\n\nexport const dataAppRoutes = {\n  'data:query': /* @__PURE__ */ defineDataQueryRoute(),\n  'navigation:update': navigationUpdateRoute,\n};\n"
+  ],
+  "mappings": ";AACO,SAAS,SAAS,CACvB,WACA,SACmB;AAAA,EACnB,IAAI,CAAC;AAAA,IAAW,MAAM,IAAI,MAAM,qBAAqB,SAAS;AAAA;;;ACOhE,SAAS,qBAAqB,CAAC,OAA8C;AAAA,EAC3E,OACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAO,UAAU,aAChB,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK;AAAA;AAIhD,SAAS,iBAAiB,CAAC,OAA0C;AAAA,EAC1E,OACE,CAAC,CAAC,SACF,OAAO,UAAU,YACjB,CAAC,MAAM,QAAQ,KAAK,KACpB,OAAO,OAAO,KAAK,EAAE,MAAM,qBAAqB;AAAA;AAK7C,SAAS,eAAe,CAC7B,aACkB;AAAA,EAClB,OAAO,OAAO,OACZ,OAAO,YACL,OAAO,QAAQ,WAAW,EAAE,IAAI,EAAE,MAAM,WAAW;AAAA,IACjD,UACE,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,MAAM,UAAU,KAAK,GACxC,wCACF;AAAA,IACA,MAAM,SAAS,OAAO,OACpB,OAAO,YACL,OAAO,QAAQ,MAAM,MAAM,EAAE,IAAI,EAAE,KAAK,iBAAiB;AAAA,MACvD,UACE,CAAC,OAAO,OAAO,aAAa,cAAc,KACxC,sBAAsB,YAAY,YAAY,GAChD,iCAAiC,gBAAgB,OACnD;AAAA,MACA,OAAO,CAAC,KAAK,OAAO,OAAO,KAAK,YAAY,CAAC,CAAC;AAAA,KAC/C,CACH,CACF;AAAA,IACA,OAAO,CAAC,MAAM,OAAO,OAAO,EAAE,WAAW,MAAM,WAAW,OAAO,CAAC,CAAC;AAAA,GACpE,CACH,CACF;AAAA;AAIK,SAAS,sBAAsB,CACpC,cACA,QACA,SACiB;AAAA,EACjB,UACE,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAC7D,6CACF;AAAA,EACA,WAAW,OAAO,OAAO,KAAK,MAAM,GAAG;AAAA,IACrC,UAAU,OAAO,OAAO,cAAc,GAAG,GAAG,qBAAqB,MAAM;AAAA,IACvE,UACE,CAAC,OAAO,OAAO,SAAS,GAAG,GAC3B,qCAAqC,MACvC;AAAA,EACF;AAAA,EACA,OAAO,OAAO,YACZ,OAAO,QAAQ,YAAY,EAAE,IAAI,EAAE,KAAK,iBAAiB;AAAA,IACvD,MAAM,QAAQ,OAAO,OAAO,SAAS,GAAG,IACpC,QAAQ,OACR,OAAO,OAAO,QAAQ,GAAG,IACvB,OAAO,OACP,YAAY;AAAA,IAClB,UAAU,UAAU,WAAW,qBAAqB,MAAM;AAAA,IAC1D,UACE,sBAAsB,KAAK,GAC3B,aAAa,6BACf;AAAA,IACA,OAAO,CAAC,KAAK,KAAK;AAAA,GACnB,CACH;AAAA;;;AClFK,SAAS,aAAa,CAAC,OAAsC;AAAA,EAClE,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,IAAU,OAAO;AAAA,EAChD,MAAM,UAAU;AAAA,EAChB,OACE,OAAO,QAAQ,WAAW,YAC1B,QAAQ,OAAO,UAAU,UACxB,QAAQ,WAAW,MAAM,QAAQ,OAAO,WAAW,GAAG,MACvD,OAAO,QAAQ,SAAS,YACxB,QAAQ,KAAK,UAAU,SACtB,QAAQ,SAAS,MAAM,QAAQ,KAAK,WAAW,GAAG;AAAA;;;ACkCvD,IAAM,aAAa,OAAO,IAAI,0CAA0C;AAAA;AAGjE,MAAM,6BAA4B,MAAM;AAAA,EAW3B;AAAA,EAEA;AAAA,GAZR,cAAc;AAAA,UAEhB,OAAO,YAAY,CAAC,OAAyB;AAAA,IACnD,OACE,iBAAiB,SAChB,MAAqC,gBAAgB;AAAA;AAAA,EAI1D,WAAW,CACO,MAChB,SACgB,WAChB;AAAA,IACA,MAAM,OAAO;AAAA,IAJG;AAAA,IAEA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AAEO,SAAS,mBAAiC,CAC/C,OAC6B;AAAA,EAC7B,OAAO;AAAA;AAIF,SAAS,oBAAuD,CACrE,QACA,UACA;AAAA,EACA,MAAM,aAAa,IAAI,IACrB,OAAO,QAAQ,MAAM,EAAE,IAAI,EAAE,MAAM,cAAc;AAAA,IAC/C,MAAM,UAAU,SAAS;AAAA,IACzB,IAAI,CAAC,QAAQ,KAAK,SAAS,OAAO,OAAO,YAAY;AAAA,MACnD,MAAM,IAAI,MACR,2DACF;AAAA,IAEF,OAAO,CAAC,MAAM,EAAE,UAAU,QAAQ,CAAC;AAAA,GACpC,CACH;AAAA,EAEA,eAAe,QAAQ,CACrB,OACA,SACkB;AAAA,IAClB,IACE,CAAC,SACD,OAAO,UAAU,YACjB,OAAQ,MAAwB,UAAU;AAAA,MAE1C,MAAM,IAAI,qBACR,mBACA,yBACF;AAAA,IACF,MAAM,UAAU;AAAA,IAChB,MAAM,QAAQ,WAAW,IAAI,QAAQ,KAAK;AAAA,IAC1C,IAAI,CAAC;AAAA,MACH,MAAM,IAAI,qBAAoB,iBAAiB,wBAAwB;AAAA,IACzE,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,UAAU,MAAM,SAAS,MAAM,QAAQ,OAAO;AAAA,MAC9C,MAAM;AAAA,MACN,MAAM,IAAI,qBACR,mBACA,0BACF;AAAA;AAAA,IAEF,QAAQ,OAAO,eAAe;AAAA,IAC9B,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,MAAM,MAAM,QAAQ,SAAkB,OAAO;AAAA,MACtD,OAAO,OAAO;AAAA,MACd,IAAI,QAAQ,OAAO;AAAA,QAAS,MAAM,QAAQ,OAAO;AAAA,MACjD,IAAI,iBAAiB;AAAA,QAAqB,MAAM;AAAA,MAChD,MAAM,IAAI,qBACR,kBACA,gDACF;AAAA;AAAA,IAEF,QAAQ,OAAO,eAAe;AAAA,IAC9B,IAAI;AAAA,MACF,OAAO,MAAM,SAAS,OAAO,QAAQ,OAAgB;AAAA,MACrD,OAAO,OAAO;AAAA,MACd,IAAI,iBAAiB;AAAA,QAAqB,MAAM;AAAA,MAChD,MAAM,IAAI,qBACR,oBACA,2BACF;AAAA;AAAA;AAAA,EAIJ,OAAO,EAAE,SAAS;AAAA;AAeb,SAAS,qBAEf,CAAC,YAAqD;AAAA,EACrD,OAAO;AAAA,IACL;AAAA,IACA,KAAK,CAAC,OAAO;AAAA,MACX,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,QAC7B,MAAM,IAAI,MAAM,gBAAgB;AAAA,MAClC,MAAM,UAAU;AAAA,MAChB,IACE,OAAO,QAAQ,cAAc,YAC7B,CAAC,QAAQ,aACT,QAAQ,UAAU,SAAS,OAC3B,QAAQ,UAAU,SAAS,GAAG;AAAA,QAE9B,MAAM,IAAI,MAAM,oBAAoB;AAAA,MACtC,MAAM,YACJ,cAAc,OAAO,OAAO,YAAY,QAAQ,SAAS,IACrD,WAAW,QAAQ,aACnB;AAAA,MACN,IAAI,cAAc,CAAC;AAAA,QAAW,MAAM,IAAI,MAAM,oBAAoB;AAAA,MAElE,OAAO;AAAA,QACL,WAAW,QAAQ;AAAA,QACnB,OAAO,YAAY,UAAU,MAAM,QAAQ,KAAK,IAAI,QAAQ;AAAA,MAC9D;AAAA;AAAA,IAEF,MAAM,CAAC,OAAO,OAAO;AAAA,MACnB,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,QAC7B,MAAM,IAAI,MAAM,wBAAwB;AAAA,MAC1C,MAAM,WAAW;AAAA,MACjB,IACE,CAAC,OAAO,UAAU,SAAS,MAAM,KACjC,SAAS,SAAS,OAClB,SAAS,SAAS,OAClB,CAAC,SAAS,QACV,OAAO,SAAS,SAAS,YACzB,MAAM,QAAQ,SAAS,IAAI;AAAA,QAE3B,MAAM,IAAI,MAAM,wBAAwB;AAAA,MAC1C,MAAM,OAAO,SAAS;AAAA,MAGtB,IAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAAK;AAAA,QACnD,MAAM,UAAU,KAAK;AAAA,QACrB,MAAM,IAAI,qBACR,OAAO,SAAS,SAAS,WAAW,QAAQ,OAAO,kBACnD,OAAO,SAAS,YAAY,WACxB,QAAQ,UACR,wBACJ,OAAO,SAAS,cAAc,WAAW,QAAQ,YAAY,SAC/D;AAAA,MACF;AAAA,MACA,IACE,EAAE,UAAU,SACZ,OAAO,KAAK,cAAc,YAC1B,OAAO,KAAK,cAAc,YAC1B,CAAC,MAAM,QAAQ,KAAK,QAAQ,KAC5B,CAAC,KAAK,SAAS,MAAM,QAAM,OAAO,OAAO,QAAQ;AAAA,QAEjD,MAAM,IAAI,MAAM,wBAAwB;AAAA,MAC1C,IACE,KAAK,YAAY,cAChB,CAAC,MAAM,QAAQ,KAAK,OAAO,KAC1B,CAAC,KAAK,QAAQ,MACZ,WACE,SACA,OAAO,UAAU,YACjB,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,cAAc,aAC1B,MAAM,WAAW,aAAa,kBAAkB,MAAM,MAAM,OAC5D,MAAM,YAAY,aAAa,OAAO,MAAM,YAAY,SAC7D;AAAA,QAEF,MAAM,IAAI,MAAM,yBAAyB;AAAA,MAC3C,MAAM,YAAY,aAAa,MAAM;AAAA,MAErC,OAAO;AAAA,QACL,QAAQ,SAAS;AAAA,QACjB,MAAM;AAAA,aACD;AAAA,UACH,MAAM,YAAY,UAAU,OAAO,KAAK,IAAI,IAAI,KAAK;AAAA,QACvD;AAAA,MACF;AAAA;AAAA,EAEJ;AAAA;AAGK,IAAM,yCAAwC,oBAAmB;AAAA,EACtE,KAAK,CAAC,OAAkC;AAAA,IACtC,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,MAC7B,MAAM,IAAI,MAAM,qBAAqB;AAAA,IACvC,MAAM,QAAQ;AAAA,IACd,IACE,CAAC,cAAc,KAAK,KACnB,MAAM,SAAS,UAAU,MAAM,SAAS,aACxC,MAAM,UAAU,cACd,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM,SAAS;AAAA,MAE3D,MAAM,IAAI,MAAM,qBAAqB;AAAA,IAEvC,OAAO;AAAA,MACL,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,MAAM,MAAM;AAAA,SACR,MAAM,UAAU,YAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;AAAA,IAC5D;AAAA;AAAA,EAEF,MAAM,CAAC,OAAsB;AAAA,IAC3B,IAAI,UAAU;AAAA,MAAM,MAAM,IAAI,MAAM,8BAA8B;AAAA,IAElE,OAAO;AAAA;AAEX,CAAC;AAQM,IAAM,iBAAgB,oBAAmB;AAAA,EAC9C,KAAK,CAAC,OAA+B;AAAA,IACnC,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,MAC7B,MAAM,IAAI,MAAM,oBAAoB;AAAA,IACtC,MAAM,QAAQ;AAAA,IAKd,IACE,OAAO,MAAM,cAAc,YAC3B,CAAC,MAAM,UAAU,KAAK,KACtB,OAAO,MAAM,UAAU,YACvB,CAAC,OAAO,cAAc,MAAM,KAAK,KACjC,MAAM,QAAQ,KACb,MAAM,WAAW,aAAa,CAAC,kBAAkB,MAAM,MAAM;AAAA,MAE9D,MAAM,IAAI,MAAM,oBAAoB;AAAA,IAEtC,OAAO;AAAA,MACL,WAAW,MAAM;AAAA,MACjB,OAAO,MAAM;AAAA,SACT,MAAM,WAAW,YACjB,CAAC,IACD,EAAE,QAAQ,MAAM,OAA0B;AAAA,IAChD;AAAA;AAAA,EAEF,MAAM,CAAC,OAAgB,OAAmC;AAAA,IACxD,IAAI,CAAC,SAAS,OAAO,UAAU;AAAA,MAC7B,MAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC,MAAM,SAAS;AAAA,IACf,IACE,CAAC,MAAM,QAAQ,OAAO,OAAO,KAC7B,CAAC,OAAO,QAAQ,MACd,YACE,UACA,OAAO,OAAO,SAAS,aACtB,OAAO,SAAS,aAAa,OAAO,OAAO,SAAS,SACzD,KACA,CAAC,MAAM,QAAQ,OAAO,IAAI,KAC1B,OAAO,KAAK,SAAS,MAAM,SAC3B,CAAC,OAAO,KAAK,MACX,SAAO,MAAM,QAAQ,GAAG,KAAK,IAAI,WAAW,OAAO,QAAQ,MAC7D,KACC,OAAO,YAAY,aAAa,OAAO,OAAO,YAAY;AAAA,MAE3D,MAAM,IAAI,MAAM,uBAAuB;AAAA,IAEzC,OAAO;AAAA,MACL,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO;AAAA,SACT,OAAO,YAAY,YAAY,CAAC,IAAI,EAAE,SAAS,OAAO,QAAQ;AAAA,IACpE;AAAA;AAEJ,CAAC;AAEM,IAAM,iBAAgB;AAAA,EAC3B,8BAA8B,sBAAqB;AAAA,EACnD,qBAAqB;AACvB;",
+  "debugId": "6D70F2841935946464756E2164756E21",
+  "names": []
+}

package/dist/chunks/{contract-pk603qj7.js → index-x69p7cv7.js}

@@ -1,14 +1,14 @@
 import {
   DataSourceError2
-} from "./contract-rfbakka4.js";
+} from "./index-ag0cgnvq.js";
 
 // src/core/operation.ts
 async function executeDataOperation(operation, value, {
   operationName,
   lakehouse,
   signal: requestSignal,
-  includeSql,
-  requestId
+  requestId,
+  queryParams
 }) {
   requestSignal.throwIfAborted();
   let input;
@@ -25,14 +25,15 @@ async function executeDataOperation(operation, value, {
   try {
     const output = await runOperation(operation, input, {
       lakehouse: execution.lakehouse,
-      signal
+      signal,
+      queryParams
     });
     const body = {
       data: operation.output(output),
       requestId,
       queriedAt: new Date().toISOString(),
       queryIds: execution.queryIds,
-      ...operation.policy.exposeSql && includeSql ? { queries: execution.queries } : {}
+      queries: execution.queries
     };
     const serializedBody = JSON.stringify(body);
     const responseBytes = new TextEncoder().encode(serializedBody).byteLength;
@@ -56,7 +57,8 @@ function createOperationLakehouse(operation, source, signal, operationName) {
         throw new Error(`Query name is not registered for operation ${operationName}.`);
       const query = {
         name: options.name ?? `Query ${queries.length + 1}`,
-        statement
+        statement,
+        ...options.params === undefined ? {} : { params: options.params }
       };
       queries.push(query);
       const limit = Math.min(options.limit, operation.policy.maxQueryRows);
@@ -64,6 +66,7 @@ function createOperationLakehouse(operation, source, signal, operationName) {
       try {
         result = await source.queryAll(statement, {
           limit,
+          ...options.params === undefined ? {} : { params: options.params },
           signal: AbortSignal.any([signal, options.signal])
         });
       } catch (error) {
@@ -82,7 +85,7 @@ function createOperationLakehouse(operation, source, signal, operationName) {
   };
   return { lakehouse, queries, queryIds };
 }
-async function runOperation(operation, input, { lakehouse, signal }) {
+async function runOperation(operation, input, { lakehouse, signal, queryParams }) {
   let abort;
   try {
     signal.throwIfAborted();
@@ -99,7 +102,7 @@ async function runOperation(operation, input, { lakehouse, signal }) {
       cancelled,
       Promise.resolve().then(() => {
         signal.throwIfAborted();
-        return operation.run({ lakehouse, signal }, input);
+        return operation.run({ lakehouse, signal, queryParams }, input);
       })
     ]);
   } finally {
@@ -143,4 +146,4 @@ function toDataOperationFailure(error, aborted = false) {
 
 export { executeDataOperation, toDataOperationFailure };
 
-//# debugId=066EC66CC0EAE1FD64756E2164756E21
+//# debugId=9709B0C78964A4A864756E2164756E21

package/dist/chunks/index-x69p7cv7.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/core/operation.ts"],
+  "sourcesContent": [
+    "import { DataSourceError } from '@/src/core/contract';\nimport type {\n  DataOperations,\n  DisclosedQuery,\n  Lakehouse,\n  OperationContext,\n  DataQueryBody,\n} from '@/src/core/operation-types';\n\ntype Operation = DataOperations[string];\ntype OperationExecutionOptions = {\n  operationName: string;\n  lakehouse: Lakehouse;\n  signal: AbortSignal;\n  requestId: string;\n  queryParams?: OperationContext['queryParams'];\n};\n\n/** Shared operation execution. Adapters own authorization, delivery, and public errors. */\nexport async function executeDataOperation(\n  operation: Operation,\n  value: unknown,\n  {\n    operationName,\n    lakehouse,\n    signal: requestSignal,\n    requestId,\n    queryParams,\n  }: OperationExecutionOptions\n) {\n  requestSignal.throwIfAborted();\n  let input: unknown;\n  try {\n    input = operation.input(value);\n  } catch {\n    throw new OperationInputError();\n  }\n\n  const signal = AbortSignal.any([\n    requestSignal,\n    AbortSignal.timeout(operation.policy.maxDurationMs),\n  ]);\n  const execution = createOperationLakehouse(\n    operation,\n    lakehouse,\n    signal,\n    operationName\n  );\n  try {\n    const output = await runOperation(operation, input, {\n      lakehouse: execution.lakehouse,\n      signal,\n      queryParams,\n    });\n    const body: DataQueryBody<unknown> = {\n      data: operation.output(output),\n      requestId,\n      queriedAt: new Date().toISOString(),\n      queryIds: execution.queryIds,\n      queries: execution.queries,\n    };\n    const serializedBody = JSON.stringify(body);\n    const responseBytes = new TextEncoder().encode(serializedBody).byteLength;\n    if (responseBytes > (operation.policy.maxResponseBytes ?? 1_000_000))\n      throw new Error('Response exceeds byte limit.');\n\n    return { body, serializedBody };\n  } catch (error) {\n    if (signal.aborted && !(error instanceof DataSourceError))\n      throw new OperationTimeoutError();\n    throw error;\n  }\n}\n\n/** Query evidence follows statement invocation order; query IDs retain completion order. */\nfunction createOperationLakehouse(\n  operation: Operation,\n  source: Lakehouse,\n  signal: AbortSignal,\n  operationName: string\n) {\n  const queryIds: string[] = [];\n  const queries: DisclosedQuery[] = [];\n  const lakehouse: Lakehouse = {\n    async queryAll(statement, options) {\n      if (!Number.isInteger(options.limit) || options.limit < 1)\n        throw new Error('Query needs a positive row limit.');\n      if (\n        operation.queryNames &&\n        !Object.values(operation.queryNames).includes(options.name ?? '')\n      )\n        throw new Error(\n          `Query name is not registered for operation ${operationName}.`\n        );\n      const query: DisclosedQuery = {\n        name: options.name ?? `Query ${queries.length + 1}`,\n        statement,\n        ...(options.params === undefined ? {} : { params: options.params }),\n      };\n      queries.push(query);\n      const limit = Math.min(options.limit, operation.policy.maxQueryRows);\n      let result;\n      try {\n        result = await source.queryAll(statement, {\n          limit,\n          ...(options.params === undefined ? {} : { params: options.params }),\n          signal: AbortSignal.any([signal, options.signal]),\n        });\n      } catch (error) {\n        if (error instanceof DataSourceError) error.queryName = query.name;\n        throw error;\n      }\n      if (result.rows.length > limit)\n        throw new Error('Result exceeds row limit.');\n      if (result.queryId) {\n        query.queryId = result.queryId;\n        queryIds.push(result.queryId);\n      }\n\n      return result;\n    },\n  };\n\n  return { lakehouse, queries, queryIds };\n}\n\n/** Settle cancellation even when operation code or its lakehouse ignores the signal. */\nasync function runOperation(\n  operation: Operation,\n  input: unknown,\n  { lakehouse, signal, queryParams }: OperationContext\n) {\n  let abort: (() => void) | undefined;\n  try {\n    signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n      }\n      abort = rejectAborted;\n      signal.addEventListener('abort', rejectAborted, { once: true });\n      if (signal.aborted) rejectAborted();\n    });\n\n    return await Promise.race([\n      cancelled,\n      Promise.resolve().then(() => {\n        signal.throwIfAborted();\n\n        return operation.run(\n          { lakehouse, signal, queryParams },\n          input as never\n        );\n      }),\n    ]);\n  } finally {\n    if (abort) signal.removeEventListener('abort', abort);\n  }\n}\n\nclass OperationTimeoutError extends Error {}\n\nclass OperationInputError extends Error {}\n\nconst sourceErrorMessages = {\n  unauthorized:\n    'This app could not authenticate its data connection. Contact the app owner.',\n  forbidden:\n    'This app cannot access the requested data. Contact the app owner.',\n  rate_limited: 'The lakehouse is busy. Wait a moment and retry.',\n  query_rejected:\n    \"A lakehouse query was rejected. Check the app's data operation.\",\n  unavailable: 'The lakehouse is unavailable. Check the connection and retry.',\n};\n\nexport function toDataOperationFailure(error: unknown, aborted = false) {\n  if (error instanceof OperationInputError)\n    return {\n      status: 400,\n      code: 'invalid_input',\n      message: \"Check this operation's inputs.\",\n    };\n  if (error instanceof DataSourceError)\n    return {\n      status: error.reason === 'rate_limited' ? 429 : 502,\n      code: `source_${error.reason}`,\n      message: sourceErrorMessages[error.reason],\n    };\n  const timedOut = aborted || error instanceof OperationTimeoutError;\n  return {\n    status: timedOut ? 504 : 502,\n    code: timedOut ? 'timeout' : 'query_failed',\n    message: timedOut\n      ? 'The data request timed out.'\n      : 'The data request failed.',\n  };\n}\n"
+  ],
+  "mappings": ";;;;;AAmBA,eAAsB,oBAAoB,CACxC,WACA;AAAA,EAEE;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,GAEF;AAAA,EACA,cAAc,eAAe;AAAA,EAC7B,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,QAAQ,UAAU,MAAM,KAAK;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM,IAAI;AAAA;AAAA,EAGZ,MAAM,SAAS,YAAY,IAAI;AAAA,IAC7B;AAAA,IACA,YAAY,QAAQ,UAAU,OAAO,aAAa;AAAA,EACpD,CAAC;AAAA,EACD,MAAM,YAAY,yBAChB,WACA,WACA,QACA,aACF;AAAA,EACA,IAAI;AAAA,IACF,MAAM,SAAS,MAAM,aAAa,WAAW,OAAO;AAAA,MAClD,WAAW,UAAU;AAAA,MACrB;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,MAAM,OAA+B;AAAA,MACnC,MAAM,UAAU,OAAO,MAAM;AAAA,MAC7B;AAAA,MACA,WAAW,IAAI,KAAK,EAAE,YAAY;AAAA,MAClC,UAAU,UAAU;AAAA,MACpB,SAAS,UAAU;AAAA,IACrB;AAAA,IACA,MAAM,iBAAiB,KAAK,UAAU,IAAI;AAAA,IAC1C,MAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,cAAc,EAAE;AAAA,IAC/D,IAAI,iBAAiB,UAAU,OAAO,oBAAoB;AAAA,MACxD,MAAM,IAAI,MAAM,8BAA8B;AAAA,IAEhD,OAAO,EAAE,MAAM,eAAe;AAAA,IAC9B,OAAO,OAAO;AAAA,IACd,IAAI,OAAO,WAAW,EAAE,iBAAiB;AAAA,MACvC,MAAM,IAAI;AAAA,IACZ,MAAM;AAAA;AAAA;AAKV,SAAS,wBAAwB,CAC/B,WACA,QACA,QACA,eACA;AAAA,EACA,MAAM,WAAqB,CAAC;AAAA,EAC5B,MAAM,UAA4B,CAAC;AAAA,EACnC,MAAM,YAAuB;AAAA,SACrB,SAAQ,CAAC,WAAW,SAAS;AAAA,MACjC,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,QAAQ,QAAQ;AAAA,QACtD,MAAM,IAAI,MAAM,mCAAmC;AAAA,MACrD,IACE,UAAU,cACV,CAAC,OAAO,OAAO,UAAU,UAAU,EAAE,SAAS,QAAQ,QAAQ,EAAE;AAAA,QAEhE,MAAM,IAAI,MACR,8CAA8C,gBAChD;AAAA,MACF,MAAM,QAAwB;AAAA,QAC5B,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,QAChD;AAAA,WACI,QAAQ,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;AAAA,MACnE;AAAA,MACA,QAAQ,KAAK,KAAK;AAAA,MAClB,MAAM,QAAQ,KAAK,IAAI,QAAQ,OAAO,UAAU,OAAO,YAAY;AAAA,MACnE,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,SAAS,MAAM,OAAO,SAAS,WAAW;AAAA,UACxC;AAAA,aACI,QAAQ,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;AAAA,UACjE,QAAQ,YAAY,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC;AAAA,QAClD,CAAC;AAAA,QACD,OAAO,OAAO;AAAA,QACd,IAAI,iBAAiB;AAAA,UAAiB,MAAM,YAAY,MAAM;AAAA,QAC9D,MAAM;AAAA;AAAA,MAER,IAAI,OAAO,KAAK,SAAS;AAAA,QACvB,MAAM,IAAI,MAAM,2BAA2B;AAAA,MAC7C,IAAI,OAAO,SAAS;AAAA,QAClB,MAAM,UAAU,OAAO;AAAA,QACvB,SAAS,KAAK,OAAO,OAAO;AAAA,MAC9B;AAAA,MAEA,OAAO;AAAA;AAAA,EAEX;AAAA,EAEA,OAAO,EAAE,WAAW,SAAS,SAAS;AAAA;AAIxC,eAAe,YAAY,CACzB,WACA,SACE,WAAW,QAAQ,eACrB;AAAA,EACA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,eAAe;AAAA,IACtB,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA;AAAA,MAEtC,QAAQ;AAAA,MACR,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MAC9D,IAAI,OAAO;AAAA,QAAS,cAAc;AAAA,KACnC;AAAA,IAED,OAAO,MAAM,QAAQ,KAAK;AAAA,MACxB;AAAA,MACA,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAAA,QAC3B,OAAO,eAAe;AAAA,QAEtB,OAAO,UAAU,IACf,EAAE,WAAW,QAAQ,YAAY,GACjC,KACF;AAAA,OACD;AAAA,IACH,CAAC;AAAA,YACD;AAAA,IACA,IAAI;AAAA,MAAO,OAAO,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA;AAIxD,MAAM,8BAA8B,MAAM;AAAC;AAAA;AAE3C,MAAM,4BAA4B,MAAM;AAAC;AAEzC,IAAM,sBAAsB;AAAA,EAC1B,cACE;AAAA,EACF,WACE;AAAA,EACF,cAAc;AAAA,EACd,gBACE;AAAA,EACF,aAAa;AACf;AAEO,SAAS,sBAAsB,CAAC,OAAgB,UAAU,OAAO;AAAA,EACtE,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,EACF,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ,MAAM,WAAW,iBAAiB,MAAM;AAAA,MAChD,MAAM,UAAU,MAAM;AAAA,MACtB,SAAS,oBAAoB,MAAM;AAAA,IACrC;AAAA,EACF,MAAM,WAAW,WAAW,iBAAiB;AAAA,EAC7C,OAAO;AAAA,IACL,QAAQ,WAAW,MAAM;AAAA,IACzB,MAAM,WAAW,YAAY;AAAA,IAC7B,SAAS,WACL,gCACA;AAAA,EACN;AAAA;",
+  "debugId": "9709B0C78964A4A864756E2164756E21",
+  "names": []
+}

package/dist/client/index.js

@@ -1,14 +1,14 @@
-import"../chunks/contract-mev09s5v.js";
-import"../chunks/contract-rfbakka4.js";
+import"../chunks/index-mev09s5v.js";
+import"../chunks/index-ag0cgnvq.js";
 import {
   createDataClient2
-} from "../chunks/contract-19ckn3n7.js";
-import"../chunks/contract-pk603qj7.js";
+} from "../chunks/index-23dktynd.js";
+import"../chunks/index-x69p7cv7.js";
 import {
   createDataAppNavigation2,
   getDataAppNavigation2,
   createAnnotationClient2
-} from "../chunks/contract-e11m4y7f.js";
+} from "../chunks/index-ev2b5aaf.js";
 import {
   DataAppError2,
   createHttpTransport2,
@@ -16,7 +16,7 @@ import {
   createIframeTransport2,
   installDataAppTransport2,
   getDataAppTransport2
-} from "../chunks/contract-13j5zb3c.js";
+} from "../chunks/index-ktmvs916.js";
 export {
   DataAppError2 as DataAppError,
   createAnnotationClient2 as createAnnotationClient,

package/dist/core/appearance.js

@@ -3,7 +3,7 @@ import {
   normalizeAppearance2,
   applyAppearance2,
   createThemeController2
-} from "../chunks/contract-m6n8ctfc.js";
+} from "../chunks/index-m6n8ctfc.js";
 export {
   applyAppearance2 as applyAppearance,
   createThemeController2 as createThemeController,

package/dist/core/config.js

@@ -1,8 +1,12 @@
 import {
+  defineDataApp2,
   dataAppTitle2
-} from "../chunks/contract-wz59z8pq.js";
+} from "../chunks/index-mt93ff2b.js";
+import"../chunks/index-ag0cgnvq.js";
+import"../chunks/index-mev09s5v.js";
 export {
-  dataAppTitle2 as dataAppTitle
+  dataAppTitle2 as dataAppTitle,
+  defineDataApp2 as defineDataApp
 };
 
-//# debugId=4C9942F1F4C00CDF64756E2164756E21
+//# debugId=5A57128DDD16D15C64756E2164756E21

package/dist/core/config.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "4C9942F1F4C00CDF64756E2164756E21",
+  "debugId": "5A57128DDD16D15C64756E2164756E21",
   "names": []
 }

package/dist/core/contract.js

@@ -6,8 +6,13 @@ import {
   parseDataAppAnnotationDraft2,
   annotationDraftRoute2,
   annotationEditorStateRoute2,
+  annotationSendRoute2,
   annotationUpdateRoute2,
   annotationModeRoute2,
+  numberFilter2,
+  booleanFilter2,
+  parseNumberSelection2,
+  parseBooleanSelection2,
   parseEmptyInput2,
   parseTrue2,
   previousDateRange2,
@@ -19,9 +24,8 @@ import {
   defineQueryNames2,
   DataSourceError2,
   defineOperation2,
-  connectionQueryNames2,
   connectionCheck2
-} from "../chunks/contract-rfbakka4.js";
+} from "../chunks/index-ag0cgnvq.js";
 import {
   MessageRoutingError2,
   defineMessageRoute2,
@@ -30,17 +34,18 @@ import {
   navigationUpdateRoute2,
   sqlQueryRoute2,
   dataAppRoutes2
-} from "../chunks/contract-tf8c3qpv.js";
-import"../chunks/contract-mev09s5v.js";
+} from "../chunks/index-qd5xgx6y.js";
+import"../chunks/index-mev09s5v.js";
 export {
   DataSourceError2 as DataSourceError,
   MessageRoutingError2 as MessageRoutingError,
   annotationDraftRoute2 as annotationDraftRoute,
   annotationEditorStateRoute2 as annotationEditorStateRoute,
   annotationModeRoute2 as annotationModeRoute,
+  annotationSendRoute2 as annotationSendRoute,
   annotationUpdateRoute2 as annotationUpdateRoute,
+  booleanFilter2 as booleanFilter,
   connectionCheck2 as connectionCheck,
-  connectionQueryNames2 as connectionQueryNames,
   createMessageRouter2 as createMessageRouter,
   dataAppRoutes2 as dataAppRoutes,
   defineDataQueryRoute2 as defineDataQueryRoute,
@@ -51,6 +56,8 @@ export {
   dimensionFilter2 as dimensionFilter,
   dimensionPredicate2 as dimensionPredicate,
   navigationUpdateRoute2 as navigationUpdateRoute,
+  numberFilter2 as numberFilter,
+  parseBooleanSelection2 as parseBooleanSelection,
   parseCount2 as parseCount,
   parseDataAppAnnotationDraft2 as parseDataAppAnnotationDraft,
   parseDateRangeInput2 as parseDateRangeInput,
@@ -58,10 +65,11 @@ export {
   parseEmptyInput2 as parseEmptyInput,
   parseFacetOptions2 as parseFacetOptions,
   parseLabel2 as parseLabel,
+  parseNumberSelection2 as parseNumberSelection,
   parseTrue2 as parseTrue,
   previousDateRange2 as previousDateRange,
   rowsAsRecords2 as rowsAsRecords,
   sqlQueryRoute2 as sqlQueryRoute
 };
 
-//# debugId=649F65BA0E25DA4F64756E2164756E21
+//# debugId=C972F356188A80AA64756E2164756E21

package/dist/core/contract.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "649F65BA0E25DA4F64756E2164756E21",
+  "debugId": "C972F356188A80AA64756E2164756E21",
   "names": []
 }

package/dist/core/format.js

@@ -5,7 +5,7 @@ import {
   formatCount2,
   pluralize2,
   formatPercent2
-} from "../chunks/contract-mev09s5v.js";
+} from "../chunks/index-mev09s5v.js";
 export {
   formatCount2 as formatCount,
   formatDateRange2 as formatDateRange,