@altertable/data-app 0.66.0 → 0.67.0

package/dist/embed/index.js

@@ -1,21 +1,22 @@
-import"../chunks/contract-mev09s5v.js";
-import"../chunks/contract-rfbakka4.js";
+import"../chunks/index-mev09s5v.js";
+import"../chunks/index-ag0cgnvq.js";
 import {
   attachDataAppBridge2
-} from "../chunks/contract-h8a6f559.js";
+} from "../chunks/index-dq7b35fn.js";
 import {
   toDataOperationFailure
-} from "../chunks/contract-pk603qj7.js";
+} from "../chunks/index-x69p7cv7.js";
 import {
   createIframeTransport2,
   installDataAppTransport2
-} from "../chunks/contract-13j5zb3c.js";
+} from "../chunks/index-ktmvs916.js";
 import {
+  randomUuid,
   PARENT_PARAM
-} from "../chunks/contract-awa2d5b1.js";
+} from "../chunks/index-f5cnbrjz.js";
 import {
   MessageRoutingError2
-} from "../chunks/contract-tf8c3qpv.js";
+} from "../chunks/index-qd5xgx6y.js";
 // src/embed/bootstrap.ts
 function startDataAppBootstrap({
   parentOrigin,
@@ -23,7 +24,7 @@ function startDataAppBootstrap({
 }) {
   let loaded;
   let failed = false;
-  const bundleSource = `altertable-data-app-${crypto.randomUUID()}.js`;
+  const bundleSource = `altertable-data-app-${randomUuid()}.js`;
   const bridge = createIframeTransport2({
     parentOrigin,
     window: frame,
@@ -100,7 +101,7 @@ function createNavigationHandler({
 // src/embed/sql.ts
 function createSqlQueryHandler(authorize) {
   async function handleSqlQuery(input, context) {
-    const requestId = crypto.randomUUID();
+    const requestId = randomUuid();
     context.signal.throwIfAborted();
     let lakehouse;
     try {
@@ -113,6 +114,7 @@ function createSqlQueryHandler(authorize) {
     try {
       return await lakehouse.queryAll(input.statement, {
         limit: input.limit,
+        ...input.params === undefined ? {} : { params: input.params },
         signal: context.signal
       });
     } catch (error) {
@@ -132,4 +134,4 @@ export {
   startDataAppBootstrap
 };
 
-//# debugId=F2CF00E7F4701B1364756E2164756E21
+//# debugId=EC331A28899915F964756E2164756E21

package/dist/embed/index.js.map

@@ -2,11 +2,11 @@
   "version": 3,
   "sources": ["../src/embed/bootstrap.ts", "../src/embed/navigation.ts", "../src/embed/sql.ts"],
   "sourcesContent": [
-    "import {\n  createIframeTransport,\n  installDataAppTransport,\n} from '@/src/client/iframe';\n\n/** Run from a trusted bootstrap page in an allow-scripts-only iframe. CSP can prohibit network access. */\nexport function startDataAppBootstrap({\n  parentOrigin,\n  window: frame = window,\n}: {\n  parentOrigin: string;\n  window?: Window;\n}) {\n  let loaded: string | undefined;\n  let failed = false;\n  const bundleSource = `altertable-data-app-${crypto.randomUUID()}.js`;\n  const bridge = createIframeTransport({\n    parentOrigin,\n    window: frame,\n    mode: 'bundle',\n    loadScript(javascript) {\n      if (loaded !== undefined) {\n        if (javascript === loaded) {\n          if (failed) bridge.fail();\n          else bridge.ready();\n        } else bridge.fail();\n\n        return;\n      }\n      loaded = javascript;\n      try {\n        const script = frame.document.createElement('script');\n        script.textContent = `${javascript}\\n//# sourceURL=${bundleSource}`;\n        frame.document.body.append(script);\n        if (!failed) bridge.ready();\n      } catch {\n        reportError();\n      }\n    },\n  });\n\n  function reportError() {\n    failed = true;\n    bridge.fail();\n  }\n\n  function reportBundleError(event: ErrorEvent) {\n    if (event.filename === bundleSource) reportError();\n  }\n\n  function reportBundleRejection(event: PromiseRejectionEvent) {\n    if (\n      event.reason instanceof Error &&\n      event.reason.stack?.includes(bundleSource)\n    )\n      reportError();\n  }\n\n  frame.addEventListener('error', reportBundleError);\n  frame.addEventListener('unhandledrejection', reportBundleRejection);\n  const uninstall = installDataAppTransport(bridge, frame);\n\n  return () => {\n    frame.removeEventListener('error', reportBundleError);\n    frame.removeEventListener('unhandledrejection', reportBundleRejection);\n    uninstall();\n  };\n}\n",
+    "import { randomUuid } from '@/src/core/uuid';\nimport {\n  createIframeTransport,\n  installDataAppTransport,\n} from '@/src/client/iframe';\n\n/** Run from a trusted bootstrap page in an allow-scripts-only iframe. CSP can prohibit network access. */\nexport function startDataAppBootstrap({\n  parentOrigin,\n  window: frame = window,\n}: {\n  parentOrigin: string;\n  window?: Window;\n}) {\n  let loaded: string | undefined;\n  let failed = false;\n  const bundleSource = `altertable-data-app-${randomUuid()}.js`;\n  const bridge = createIframeTransport({\n    parentOrigin,\n    window: frame,\n    mode: 'bundle',\n    loadScript(javascript) {\n      if (loaded !== undefined) {\n        if (javascript === loaded) {\n          if (failed) bridge.fail();\n          else bridge.ready();\n        } else bridge.fail();\n\n        return;\n      }\n      loaded = javascript;\n      try {\n        const script = frame.document.createElement('script');\n        script.textContent = `${javascript}\\n//# sourceURL=${bundleSource}`;\n        frame.document.body.append(script);\n        if (!failed) bridge.ready();\n      } catch {\n        reportError();\n      }\n    },\n  });\n\n  function reportError() {\n    failed = true;\n    bridge.fail();\n  }\n\n  function reportBundleError(event: ErrorEvent) {\n    if (event.filename === bundleSource) reportError();\n  }\n\n  function reportBundleRejection(event: PromiseRejectionEvent) {\n    if (\n      event.reason instanceof Error &&\n      event.reason.stack?.includes(bundleSource)\n    )\n      reportError();\n  }\n\n  frame.addEventListener('error', reportBundleError);\n  frame.addEventListener('unhandledrejection', reportBundleRejection);\n  const uninstall = installDataAppTransport(bridge, frame);\n\n  return () => {\n    frame.removeEventListener('error', reportBundleError);\n    frame.removeEventListener('unhandledrejection', reportBundleRejection);\n    uninstall();\n  };\n}\n",
     "import { PARENT_PARAM } from '@/src/core/bridge';\nimport type { NavigationUpdate } from '@/src/core/messages';\n\n/** Override this handler for framework routers. Reserved host parameters survive app navigation. */\nexport function createNavigationHandler({\n  window: host = window,\n  reservedSearchParams = [],\n}: {\n  window?: Window;\n  reservedSearchParams?: readonly string[];\n} = {}) {\n  function navigate(input: NavigationUpdate): null {\n    const previous = new URL(host.location.href);\n    const url = new URL(previous);\n    url.search = input.search;\n    url.searchParams.delete(PARENT_PARAM);\n    for (const name of reservedSearchParams) {\n      url.searchParams.delete(name);\n      for (const value of previous.searchParams.getAll(name))\n        url.searchParams.append(name, value);\n    }\n    url.hash = input.hash;\n    if (url.href !== host.location.href)\n      host.history[input.mode === 'push' ? 'pushState' : 'replaceState'](\n        null,\n        '',\n        url\n      );\n    if (input.title !== undefined) host.document.title = input.title;\n\n    return null;\n  }\n\n  return navigate;\n}\n",
-    "import type { Lakehouse } from '@/src/core/contract';\nimport { toDataOperationFailure } from '@/src/core/operation';\nimport {\n  MessageRoutingError,\n  type MessageContext,\n  type SqlQueryInput,\n} from '@/src/core/messages';\n\n/** Authorize every SQL request and supply a backend that independently enforces access and query limits. */\nexport function createSqlQueryHandler(\n  authorize: (\n    query: SqlQueryInput,\n    context: MessageContext\n  ) => Promise<Lakehouse>\n) {\n  async function handleSqlQuery(input: SqlQueryInput, context: MessageContext) {\n    const requestId = crypto.randomUUID();\n    context.signal.throwIfAborted();\n    let lakehouse: Lakehouse;\n    try {\n      lakehouse = await authorize(input, context);\n    } catch {\n      context.signal.throwIfAborted();\n      throw new MessageRoutingError(\n        'forbidden',\n        'You cannot run this query.',\n        requestId\n      );\n    }\n    context.signal.throwIfAborted();\n    try {\n      return await lakehouse.queryAll(input.statement, {\n        limit: input.limit,\n        signal: context.signal,\n      });\n    } catch (error) {\n      context.signal.throwIfAborted();\n      if (error instanceof MessageRoutingError) throw error;\n      const failure = toDataOperationFailure(error);\n      throw new MessageRoutingError(failure.code, failure.message, requestId);\n    }\n  }\n\n  return handleSqlQuery;\n}\n"
+    "import { randomUuid } from '@/src/core/uuid';\nimport type { Lakehouse } from '@/src/core/contract';\nimport { toDataOperationFailure } from '@/src/core/operation';\nimport {\n  MessageRoutingError,\n  type MessageContext,\n  type SqlQueryInput,\n} from '@/src/core/messages';\n\n/** Authorize every SQL request and supply a backend that independently enforces access and query limits. */\nexport function createSqlQueryHandler(\n  authorize: (\n    query: SqlQueryInput,\n    context: MessageContext\n  ) => Promise<Lakehouse>\n) {\n  async function handleSqlQuery(input: SqlQueryInput, context: MessageContext) {\n    const requestId = randomUuid();\n    context.signal.throwIfAborted();\n    let lakehouse: Lakehouse;\n    try {\n      lakehouse = await authorize(input, context);\n    } catch {\n      context.signal.throwIfAborted();\n      throw new MessageRoutingError(\n        'forbidden',\n        'You cannot run this query.',\n        requestId\n      );\n    }\n    context.signal.throwIfAborted();\n    try {\n      return await lakehouse.queryAll(input.statement, {\n        limit: input.limit,\n        ...(input.params === undefined ? {} : { params: input.params }),\n        signal: context.signal,\n      });\n    } catch (error) {\n      context.signal.throwIfAborted();\n      if (error instanceof MessageRoutingError) throw error;\n      const failure = toDataOperationFailure(error);\n      throw new MessageRoutingError(failure.code, failure.message, requestId);\n    }\n  }\n\n  return handleSqlQuery;\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;AAMO,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA,QAAQ,QAAQ;AAAA,GAIf;AAAA,EACD,IAAI;AAAA,EACJ,IAAI,SAAS;AAAA,EACb,MAAM,eAAe,uBAAuB,OAAO,WAAW;AAAA,EAC9D,MAAM,SAAS,uBAAsB;AAAA,IACnC;AAAA,IACA,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,UAAU,CAAC,YAAY;AAAA,MACrB,IAAI,WAAW,WAAW;AAAA,QACxB,IAAI,eAAe,QAAQ;AAAA,UACzB,IAAI;AAAA,YAAQ,OAAO,KAAK;AAAA,UACnB;AAAA,mBAAO,MAAM;AAAA,QACpB,EAAO;AAAA,iBAAO,KAAK;AAAA,QAEnB;AAAA,MACF;AAAA,MACA,SAAS;AAAA,MACT,IAAI;AAAA,QACF,MAAM,SAAS,MAAM,SAAS,cAAc,QAAQ;AAAA,QACpD,OAAO,cAAc,GAAG;AAAA,gBAA6B;AAAA,QACrD,MAAM,SAAS,KAAK,OAAO,MAAM;AAAA,QACjC,IAAI,CAAC;AAAA,UAAQ,OAAO,MAAM;AAAA,QAC1B,MAAM;AAAA,QACN,YAAY;AAAA;AAAA;AAAA,EAGlB,CAAC;AAAA,EAED,SAAS,WAAW,GAAG;AAAA,IACrB,SAAS;AAAA,IACT,OAAO,KAAK;AAAA;AAAA,EAGd,SAAS,iBAAiB,CAAC,OAAmB;AAAA,IAC5C,IAAI,MAAM,aAAa;AAAA,MAAc,YAAY;AAAA;AAAA,EAGnD,SAAS,qBAAqB,CAAC,OAA8B;AAAA,IAC3D,IACE,MAAM,kBAAkB,SACxB,MAAM,OAAO,OAAO,SAAS,YAAY;AAAA,MAEzC,YAAY;AAAA;AAAA,EAGhB,MAAM,iBAAiB,SAAS,iBAAiB;AAAA,EACjD,MAAM,iBAAiB,sBAAsB,qBAAqB;AAAA,EAClE,MAAM,YAAY,yBAAwB,QAAQ,KAAK;AAAA,EAEvD,OAAO,MAAM;AAAA,IACX,MAAM,oBAAoB,SAAS,iBAAiB;AAAA,IACpD,MAAM,oBAAoB,sBAAsB,qBAAqB;AAAA,IACrE,UAAU;AAAA;AAAA;;AC7DP,SAAS,uBAAuB;AAAA,EACrC,QAAQ,OAAO;AAAA,EACf,uBAAuB,CAAC;AAAA,IAItB,CAAC,GAAG;AAAA,EACN,SAAS,QAAQ,CAAC,OAA+B;AAAA,IAC/C,MAAM,WAAW,IAAI,IAAI,KAAK,SAAS,IAAI;AAAA,IAC3C,MAAM,MAAM,IAAI,IAAI,QAAQ;AAAA,IAC5B,IAAI,SAAS,MAAM;AAAA,IACnB,IAAI,aAAa,OAAO,YAAY;AAAA,IACpC,WAAW,QAAQ,sBAAsB;AAAA,MACvC,IAAI,aAAa,OAAO,IAAI;AAAA,MAC5B,WAAW,SAAS,SAAS,aAAa,OAAO,IAAI;AAAA,QACnD,IAAI,aAAa,OAAO,MAAM,KAAK;AAAA,IACvC;AAAA,IACA,IAAI,OAAO,MAAM;AAAA,IACjB,IAAI,IAAI,SAAS,KAAK,SAAS;AAAA,MAC7B,KAAK,QAAQ,MAAM,SAAS,SAAS,cAAc,gBACjD,MACA,IACA,GACF;AAAA,IACF,IAAI,MAAM,UAAU;AAAA,MAAW,KAAK,SAAS,QAAQ,MAAM;AAAA,IAE3D,OAAO;AAAA;AAAA,EAGT,OAAO;AAAA;;ACxBF,SAAS,qBAAqB,CACnC,WAIA;AAAA,EACA,eAAe,cAAc,CAAC,OAAsB,SAAyB;AAAA,IAC3E,MAAM,YAAY,OAAO,WAAW;AAAA,IACpC,QAAQ,OAAO,eAAe;AAAA,IAC9B,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,YAAY,MAAM,UAAU,OAAO,OAAO;AAAA,MAC1C,MAAM;AAAA,MACN,QAAQ,OAAO,eAAe;AAAA,MAC9B,MAAM,IAAI,qBACR,aACA,8BACA,SACF;AAAA;AAAA,IAEF,QAAQ,OAAO,eAAe;AAAA,IAC9B,IAAI;AAAA,MACF,OAAO,MAAM,UAAU,SAAS,MAAM,WAAW;AAAA,QAC/C,OAAO,MAAM;AAAA,QACb,QAAQ,QAAQ;AAAA,MAClB,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,QAAQ,OAAO,eAAe;AAAA,MAC9B,IAAI,iBAAiB;AAAA,QAAqB,MAAM;AAAA,MAChD,MAAM,UAAU,uBAAuB,KAAK;AAAA,MAC5C,MAAM,IAAI,qBAAoB,QAAQ,MAAM,QAAQ,SAAS,SAAS;AAAA;AAAA;AAAA,EAI1E,OAAO;AAAA;",
-  "debugId": "F2CF00E7F4701B1364756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;AAOO,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA,QAAQ,QAAQ;AAAA,GAIf;AAAA,EACD,IAAI;AAAA,EACJ,IAAI,SAAS;AAAA,EACb,MAAM,eAAe,uBAAuB,WAAW;AAAA,EACvD,MAAM,SAAS,uBAAsB;AAAA,IACnC;AAAA,IACA,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,UAAU,CAAC,YAAY;AAAA,MACrB,IAAI,WAAW,WAAW;AAAA,QACxB,IAAI,eAAe,QAAQ;AAAA,UACzB,IAAI;AAAA,YAAQ,OAAO,KAAK;AAAA,UACnB;AAAA,mBAAO,MAAM;AAAA,QACpB,EAAO;AAAA,iBAAO,KAAK;AAAA,QAEnB;AAAA,MACF;AAAA,MACA,SAAS;AAAA,MACT,IAAI;AAAA,QACF,MAAM,SAAS,MAAM,SAAS,cAAc,QAAQ;AAAA,QACpD,OAAO,cAAc,GAAG;AAAA,gBAA6B;AAAA,QACrD,MAAM,SAAS,KAAK,OAAO,MAAM;AAAA,QACjC,IAAI,CAAC;AAAA,UAAQ,OAAO,MAAM;AAAA,QAC1B,MAAM;AAAA,QACN,YAAY;AAAA;AAAA;AAAA,EAGlB,CAAC;AAAA,EAED,SAAS,WAAW,GAAG;AAAA,IACrB,SAAS;AAAA,IACT,OAAO,KAAK;AAAA;AAAA,EAGd,SAAS,iBAAiB,CAAC,OAAmB;AAAA,IAC5C,IAAI,MAAM,aAAa;AAAA,MAAc,YAAY;AAAA;AAAA,EAGnD,SAAS,qBAAqB,CAAC,OAA8B;AAAA,IAC3D,IACE,MAAM,kBAAkB,SACxB,MAAM,OAAO,OAAO,SAAS,YAAY;AAAA,MAEzC,YAAY;AAAA;AAAA,EAGhB,MAAM,iBAAiB,SAAS,iBAAiB;AAAA,EACjD,MAAM,iBAAiB,sBAAsB,qBAAqB;AAAA,EAClE,MAAM,YAAY,yBAAwB,QAAQ,KAAK;AAAA,EAEvD,OAAO,MAAM;AAAA,IACX,MAAM,oBAAoB,SAAS,iBAAiB;AAAA,IACpD,MAAM,oBAAoB,sBAAsB,qBAAqB;AAAA,IACrE,UAAU;AAAA;AAAA;;AC9DP,SAAS,uBAAuB;AAAA,EACrC,QAAQ,OAAO;AAAA,EACf,uBAAuB,CAAC;AAAA,IAItB,CAAC,GAAG;AAAA,EACN,SAAS,QAAQ,CAAC,OAA+B;AAAA,IAC/C,MAAM,WAAW,IAAI,IAAI,KAAK,SAAS,IAAI;AAAA,IAC3C,MAAM,MAAM,IAAI,IAAI,QAAQ;AAAA,IAC5B,IAAI,SAAS,MAAM;AAAA,IACnB,IAAI,aAAa,OAAO,YAAY;AAAA,IACpC,WAAW,QAAQ,sBAAsB;AAAA,MACvC,IAAI,aAAa,OAAO,IAAI;AAAA,MAC5B,WAAW,SAAS,SAAS,aAAa,OAAO,IAAI;AAAA,QACnD,IAAI,aAAa,OAAO,MAAM,KAAK;AAAA,IACvC;AAAA,IACA,IAAI,OAAO,MAAM;AAAA,IACjB,IAAI,IAAI,SAAS,KAAK,SAAS;AAAA,MAC7B,KAAK,QAAQ,MAAM,SAAS,SAAS,cAAc,gBACjD,MACA,IACA,GACF;AAAA,IACF,IAAI,MAAM,UAAU;AAAA,MAAW,KAAK,SAAS,QAAQ,MAAM;AAAA,IAE3D,OAAO;AAAA;AAAA,EAGT,OAAO;AAAA;;ACvBF,SAAS,qBAAqB,CACnC,WAIA;AAAA,EACA,eAAe,cAAc,CAAC,OAAsB,SAAyB;AAAA,IAC3E,MAAM,YAAY,WAAW;AAAA,IAC7B,QAAQ,OAAO,eAAe;AAAA,IAC9B,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,YAAY,MAAM,UAAU,OAAO,OAAO;AAAA,MAC1C,MAAM;AAAA,MACN,QAAQ,OAAO,eAAe;AAAA,MAC9B,MAAM,IAAI,qBACR,aACA,8BACA,SACF;AAAA;AAAA,IAEF,QAAQ,OAAO,eAAe;AAAA,IAC9B,IAAI;AAAA,MACF,OAAO,MAAM,UAAU,SAAS,MAAM,WAAW;AAAA,QAC/C,OAAO,MAAM;AAAA,WACT,MAAM,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;AAAA,QAC7D,QAAQ,QAAQ;AAAA,MAClB,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,QAAQ,OAAO,eAAe;AAAA,MAC9B,IAAI,iBAAiB;AAAA,QAAqB,MAAM;AAAA,MAChD,MAAM,UAAU,uBAAuB,KAAK;AAAA,MAC5C,MAAM,IAAI,qBAAoB,QAAQ,MAAM,QAAQ,SAAS,SAAS;AAAA;AAAA;AAAA,EAI1E,OAAO;AAAA;",
+  "debugId": "EC331A28899915F964756E2164756E21",
   "names": []
 }

package/dist/index.js

@@ -0,0 +1,12 @@
+import"./chunks/index-mev09s5v.js";
+import"./chunks/index-ag0cgnvq.js";
+import {
+  defineDataApp2,
+  dataAppTitle2
+} from "./chunks/index-mt93ff2b.js";
+export {
+  dataAppTitle2 as dataAppTitle,
+  defineDataApp2 as defineDataApp
+};
+
+//# debugId=B467CF45B7F40DB364756E2164756E21

package/dist/index.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "B467CF45B7F40DB364756E2164756E21",
+  "names": []
+}

package/dist/local.js

@@ -1,19 +1,6 @@
 // @bun
 // src/core/contract.ts
 import { parseDate, today } from "@internationalized/date";
-
-// src/core/invariant.ts
-function invariant(condition, message) {
-  if (!condition)
-    throw new Error(`Invariant failed: ${message}`);
-}
-
-// src/core/contract.ts
-function defineQueryNames(names) {
-  const values = Object.values(names);
-  invariant(values.every((name) => !!name.trim()) && new Set(values).size === values.length, "Query names must be nonempty and unique.");
-  return names;
-}
 var sourceErrorBrand = Symbol.for("@altertable/data-app/DataSourceError");
 
 class DataSourceError extends Error {
@@ -31,17 +18,14 @@ class DataSourceError extends Error {
     this.name = "DataSourceError";
   }
 }
-var connectionQueryNames = defineQueryNames({
-  connection: "connection-check"
-});
 
 // src/core/operation.ts
 async function executeDataOperation(operation, value, {
   operationName,
   lakehouse,
   signal: requestSignal,
-  includeSql,
-  requestId
+  requestId,
+  queryParams
 }) {
   requestSignal.throwIfAborted();
   let input;
@@ -58,14 +42,15 @@ async function executeDataOperation(operation, value, {
   try {
     const output = await runOperation(operation, input, {
       lakehouse: execution.lakehouse,
-      signal
+      signal,
+      queryParams
     });
     const body = {
       data: operation.output(output),
       requestId,
       queriedAt: new Date().toISOString(),
       queryIds: execution.queryIds,
-      ...operation.policy.exposeSql && includeSql ? { queries: execution.queries } : {}
+      queries: execution.queries
     };
     const serializedBody = JSON.stringify(body);
     const responseBytes = new TextEncoder().encode(serializedBody).byteLength;
@@ -89,7 +74,8 @@ function createOperationLakehouse(operation, source, signal, operationName) {
         throw new Error(`Query name is not registered for operation ${operationName}.`);
       const query = {
         name: options.name ?? `Query ${queries.length + 1}`,
-        statement
+        statement,
+        ...options.params === undefined ? {} : { params: options.params }
       };
       queries.push(query);
       const limit = Math.min(options.limit, operation.policy.maxQueryRows);
@@ -97,6 +83,7 @@ function createOperationLakehouse(operation, source, signal, operationName) {
       try {
         result = await source.queryAll(statement, {
           limit,
+          ...options.params === undefined ? {} : { params: options.params },
           signal: AbortSignal.any([signal, options.signal])
         });
       } catch (error) {
@@ -115,7 +102,7 @@ function createOperationLakehouse(operation, source, signal, operationName) {
   };
   return { lakehouse, queries, queryIds };
 }
-async function runOperation(operation, input, { lakehouse, signal }) {
+async function runOperation(operation, input, { lakehouse, signal, queryParams }) {
   let abort;
   try {
     signal.throwIfAborted();
@@ -132,7 +119,7 @@ async function runOperation(operation, input, { lakehouse, signal }) {
       cancelled,
       Promise.resolve().then(() => {
         signal.throwIfAborted();
-        return operation.run({ lakehouse, signal }, input);
+        return operation.run({ lakehouse, signal, queryParams }, input);
       })
     ]);
   } finally {
@@ -223,10 +210,10 @@ function createDataHandler(operations, authorize) {
     try {
       const { serializedBody } = await executeDataOperation(operation, input, {
         lakehouse: access.lakehouse,
-        includeSql: access.canDiscloseSql,
         signal,
         requestId,
-        operationName: name
+        operationName: name,
+        queryParams: access.queryParams
       });
       return new Response(serializedBody, {
         headers: {
@@ -311,8 +298,7 @@ function serveLocalApp({
     idleTimeout: 60,
     routes: { "/": page },
     fetch: createDataHandler(operations, async () => ({
-      lakehouse: localLakehouse(),
-      canDiscloseSql: true
+      lakehouse: localLakehouse()
     }))
   });
   console.log(`${title} running at ${server.url}`);
@@ -320,7 +306,7 @@ function serveLocalApp({
 }
 function localLakehouse(environment = process.env, request = fetch) {
   return {
-    async queryAll(statement, { limit, signal }) {
+    async queryAll(statement, { limit, signal, params }) {
       const proxyUrl = environment.ALTERTABLE_DATA_PROXY_URL;
       const proxyToken = environment.ALTERTABLE_DATA_PROXY_TOKEN;
       const username = environment.ALTERTABLE_LAKEHOUSE_USERNAME;
@@ -338,7 +324,11 @@ function localLakehouse(environment = process.env, request = fetch) {
             authorization: proxyUrl ? `Bearer ${proxyToken}` : `Basic ${Buffer.from(`${username}:${password}`).toString("base64")}`,
             "content-type": "application/json"
           },
-          body: JSON.stringify({ statement, limit }),
+          body: JSON.stringify({
+            statement,
+            limit,
+            ...params === undefined ? {} : { params }
+          }),
           signal
         });
       } catch (error) {
@@ -417,4 +407,4 @@ export {
   serveLocalApp
 };
 
-//# debugId=FB183031B1F856D564756E2164756E21
+//# debugId=E6005345F1D6B04A64756E2164756E21

package/dist/local.js.map

@@ -1,14 +1,13 @@
 {
   "version": 3,
-  "sources": ["../src/core/contract.ts", "../src/core/invariant.ts", "../src/core/operation.ts", "../src/server/handler.ts", "../src/server/local.ts"],
+  "sources": ["../src/core/contract.ts", "../src/core/operation.ts", "../src/server/handler.ts", "../src/server/local.ts"],
   "sourcesContent": [
-    "/**\n * Shared operation contracts and input/output validation for browser and server.\n * @module @altertable/data-app/contract\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/contract.md\n */\nimport { parseDate, today } from '@internationalized/date';\nimport { formatDateRange } from '@/src/core/format';\nimport { invariant } from '@/src/core/invariant';\nimport type { DateRange as DateRangeInput } from '@/src/core/date-range';\nimport type {\n  QueryResult,\n  DataOperation,\n  OperationContext,\n} from '@/src/core/operation-types';\nexport type {\n  QueryResult,\n  DisclosedQuery,\n  Lakehouse,\n  OperationContext,\n  DataOperation,\n  DataOperations,\n} from '@/src/core/operation-types';\n\nexport function parseEmptyInput(value: unknown): Record<string, never> {\n  invariant(\n    typeof value === 'object' &&\n      value !== null &&\n      !Array.isArray(value) &&\n      Object.keys(value).length === 0,\n    'This operation takes no inputs.'\n  );\n\n  return {};\n}\n\nexport function parseTrue(value: unknown): true {\n  invariant(value === true, 'Expected a successful check.');\n\n  return true;\n}\n\nexport type { DateRange as DateRangeInput } from '@/src/core/date-range';\nexport type DateRangeRequest = {\n  range: DateRangeInput;\n  comparison: DateRangeInput | null;\n};\n\n/** The immediately preceding, equally long set of calendar days. */\nexport function previousDateRange({\n  start,\n  end,\n}: DateRangeInput): DateRangeInput {\n  const first = parseDate(start);\n  const last = parseDate(end);\n  const days =\n    (last.toDate('UTC').getTime() - first.toDate('UTC').getTime()) /\n      86_400_000 +\n    1;\n  invariant(days >= 1, 'Date range must start before it ends.');\n  const previousEnd = first.subtract({ days: 1 });\n\n  return {\n    start: previousEnd.subtract({ days: days - 1 }).toString(),\n    end: previousEnd.toString(),\n  };\n}\n\nexport type ReportingPeriod =\n  | { kind: 'rolling'; amount: number; unit: 'hour' | 'day'; end: string }\n  | { kind: 'calendar'; start: string; end: string; timeZone: string };\n\nexport type DateRangeContractOptions = {\n  minDate?: string;\n  maxDate?: string | (() => string);\n  maxRangeDays: number;\n  timeZone: string;\n  completeDays?: boolean;\n};\n\n/** One source policy for the server parser, URL variable, and displayed reporting period. */\nexport function defineDateRangeContract(options: DateRangeContractOptions) {\n  invariant(\n    Number.isInteger(options.maxRangeDays) && options.maxRangeDays > 0,\n    'Date range needs a positive maxRangeDays.'\n  );\n  if (options.minDate) parseDate(options.minDate);\n  if (typeof options.maxDate === 'string') parseDate(options.maxDate);\n  today(options.timeZone);\n\n  function bounds() {\n    const latest = today(options.timeZone).subtract({\n      days: options.completeDays === false ? 0 : 1,\n    });\n    const sourceMax =\n      typeof options.maxDate === 'function'\n        ? options.maxDate()\n        : options.maxDate;\n    const maxDate =\n      sourceMax && parseDate(sourceMax).compare(latest) < 0\n        ? parseDate(sourceMax).toString()\n        : latest.toString();\n\n    return {\n      minDate: options.minDate,\n      maxDate,\n      maxRangeDays: options.maxRangeDays,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function period({ start, end }: DateRangeInput): ReportingPeriod {\n    return {\n      kind: 'calendar',\n      start,\n      end,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function describeInput(input: DateRangeInput) {\n    return `${formatDateRange(input)} ${options.timeZone}`;\n  }\n\n  function comparison(input: DateRangeInput): DateRangeInput | null {\n    const previous = previousDateRange(input);\n\n    return options.minDate && previous.start < options.minDate\n      ? null\n      : previous;\n  }\n\n  function request(value: unknown, compare = false): DateRangeRequest {\n    const range = parseDateRangeInput(value, bounds());\n    const previous = compare ? comparison(range) : null;\n    invariant(\n      !compare || previous,\n      'Comparison is outside available source coverage.'\n    );\n\n    return { range, comparison: previous };\n  }\n\n  function parseRequest(value: unknown): DateRangeRequest {\n    invariant(value && typeof value === 'object', 'Choose a date range.');\n    const input = value as Record<string, unknown>;\n    const parsed = request(input.range, input.comparison != null);\n    if (input.comparison != null) {\n      const supplied = parseDateRangeInput(input.comparison, bounds());\n      invariant(\n        supplied.start === parsed.comparison?.start &&\n          supplied.end === parsed.comparison?.end,\n        'Comparison must be the preceding equal-length range.'\n      );\n    }\n\n    return parsed;\n  }\n\n  return {\n    request,\n    parseRequest,\n    bounds,\n    parse(value: unknown) {\n      return parseDateRangeInput(value, bounds());\n    },\n    period,\n    comparison,\n    describeInput,\n    view: { period, describeInput },\n  };\n}\n\nexport type DateRangeContract = ReturnType<typeof defineDateRangeContract>;\n\n/** Validate calendar dates and a bounded inclusive range on the server. */\nexport function parseDateRangeInput(\n  value: unknown,\n  {\n    minDate,\n    maxDate,\n    maxRangeDays,\n  }: { minDate?: string; maxDate?: string; maxRangeDays: number }\n): DateRangeInput {\n  invariant(\n    value && typeof value === 'object' && !Array.isArray(value),\n    'Choose a date range.'\n  );\n  const { start, end } = value as Record<string, unknown>;\n\n  function day(input: unknown): number {\n    invariant(\n      typeof input === 'string' && /^\\d{4}-\\d{2}-\\d{2}$/.test(input),\n      'Dates must be YYYY-MM-DD.'\n    );\n    const timestamp = Date.parse(`${input}T00:00:00Z`);\n    invariant(\n      Number.isFinite(timestamp) &&\n        new Date(timestamp).toISOString().slice(0, 10) === input,\n      'Choose valid calendar dates.'\n    );\n\n    return timestamp;\n  }\n  const first = day(start);\n  const last = day(end);\n  invariant(\n    Number.isInteger(maxRangeDays) && maxRangeDays > 0,\n    'Maximum range days must be positive.'\n  );\n  invariant(\n    first <= last &&\n      (last - first) / 86_400_000 < maxRangeDays &&\n      (minDate === undefined || first >= day(minDate)) &&\n      (maxDate === undefined || last <= day(maxDate)),\n    `Choose up to ${maxRangeDays} days within the available range.`\n  );\n\n  return { start: start as string, end: end as string };\n}\n\n/** Accepts numeric strings from DuckDB; rejects negative, fractional, and unsafe integers. */\nexport function parseCount(value: unknown): number {\n  const number =\n    typeof value === 'number' || typeof value === 'string'\n      ? Number(value)\n      : NaN;\n  invariant(\n    Number.isSafeInteger(number) &&\n      number >= 0 &&\n      (typeof value !== 'string' || !!value.trim()),\n    'Invalid count in query result.'\n  );\n\n  return number;\n}\n\nexport function parseLabel(value: unknown, maxLength = 100): string {\n  invariant(\n    typeof value === 'string' && !!value && value.length <= maxLength,\n    'Invalid label in query result.'\n  );\n\n  return value;\n}\n\n/** Rejects missing or duplicate columns and rows whose width differs from the column list. */\nexport function rowsAsRecords(\n  result: QueryResult,\n  requiredColumns: readonly string[]\n): Record<string, unknown>[] {\n  const names = result.columns.map(column => column.name);\n  invariant(\n    new Set(names).size === names.length &&\n      requiredColumns.every(name => names.includes(name)),\n    'Query result columns do not match the expected shape.'\n  );\n\n  return result.rows.map(row => {\n    invariant(\n      row.length === names.length,\n      'Query result row has the wrong width.'\n    );\n\n    return Object.fromEntries(names.map((name, index) => [name, row[index]]));\n  });\n}\n\nexport function defineQueryNames<const Names extends Record<string, string>>(\n  names: Names\n): Names {\n  const values = Object.values(names);\n  invariant(\n    values.every(name => !!name.trim()) &&\n      new Set(values).size === values.length,\n    'Query names must be nonempty and unique.'\n  );\n\n  return names;\n}\n\nconst sourceErrorBrand = Symbol.for('@altertable/data-app/DataSourceError');\n\nexport class DataSourceError extends Error {\n  readonly [sourceErrorBrand] = true;\n  queryName?: string;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [sourceErrorBrand]?: unknown })[sourceErrorBrand] === true\n    );\n  }\n\n  constructor(\n    public readonly reason:\n      | 'unauthorized'\n      | 'forbidden'\n      | 'rate_limited'\n      | 'query_rejected'\n      | 'unavailable',\n    public readonly status?: number\n  ) {\n    super(`Data source ${reason}${status ? ` (${status})` : ''}.`);\n    this.name = 'DataSourceError';\n  }\n}\n\nexport type OperationQuery<Names extends Readonly<Record<string, string>>> = (\n  name: Names[keyof Names],\n  statement: string,\n  options?: { limit?: number }\n) => Promise<QueryResult>;\n\nexport function defineOperation<\n  Input,\n  Output,\n  const Names extends Readonly<Record<string, string>> = Record<string, never>,\n>(\n  operation: Omit<DataOperation<Input, Output>, 'run' | 'queryNames'> & {\n    queryNames?: Names;\n    run: (\n      context: OperationContext & { query: OperationQuery<NoInfer<Names>> },\n      input: Input\n    ) => Promise<Output>;\n  }\n): DataOperation<Input, Output> & { queryNames?: Names } {\n  invariant(\n    Array.isArray(operation.checks) &&\n      operation.checks.length > 0 &&\n      Number.isInteger(operation.policy.maxQueryRows) &&\n      operation.policy.maxQueryRows > 0 &&\n      Number.isInteger(operation.policy.maxDurationMs) &&\n      operation.policy.maxDurationMs > 0 &&\n      (operation.policy.maxResponseBytes === undefined ||\n        (Number.isInteger(operation.policy.maxResponseBytes) &&\n          operation.policy.maxResponseBytes > 0)),\n    'Each data operation needs check inputs and positive row and duration limits.'\n  );\n  if (operation.queryNames) defineQueryNames(operation.queryNames);\n  for (const input of operation.checks) operation.input(input);\n\n  return {\n    ...operation,\n    run(context, input) {\n      function query(\n        name: Names[keyof Names],\n        statement: string,\n        options?: { limit?: number }\n      ): Promise<QueryResult> {\n        invariant(\n          operation.queryNames &&\n            Object.values(operation.queryNames).includes(name),\n          `Unknown query name: ${name}.`\n        );\n\n        return context.lakehouse.queryAll(statement, {\n          name,\n          limit: options?.limit ?? operation.policy.maxQueryRows,\n          signal: context.signal,\n        });\n      }\n\n      return operation.run({ ...context, query }, input);\n    },\n  };\n}\n\nexport const connectionQueryNames = defineQueryNames({\n  connection: 'connection-check',\n});\n\n/** Success requires a bounded SQL query; it does not establish access to a particular dataset. */\nexport function connectionCheck(): DataOperation<Record<string, never>, true> {\n  return defineOperation({\n    input: parseEmptyInput,\n    output: parseTrue,\n    checks: [{}],\n    queryNames: connectionQueryNames,\n    policy: { maxQueryRows: 1, maxDurationMs: 15_000, exposeSql: true },\n    async run({ query }): Promise<true> {\n      await query(\n        connectionQueryNames.connection,\n        'SELECT 1 AS connection_check'\n      );\n\n      return true;\n    },\n  });\n}\n\nexport {\n  dimensionFilter,\n  parseDimensionSelection,\n  parseFacetOptions,\n  dimensionPredicate,\n} from '@/src/core/dimension';\nexport type {\n  DimensionSelection,\n  DimensionMember,\n  DimensionOption,\n  DimensionVariable,\n  DimensionFilterOptions,\n} from '@/src/core/dimension';\n\nexport {\n  createMessageRouter,\n  defineMessageRoute,\n  defineDataQueryRoute,\n  MessageRoutingError,\n  dataAppRoutes,\n  navigationUpdateRoute,\n  sqlQueryRoute,\n} from '@/src/core/messages';\nexport type {\n  MessageContext,\n  RoutedMessage,\n  MessageDispatcher,\n  MessageTransport,\n  MessageRoute,\n  MessageRoutes,\n  MessageInput,\n  MessageHandlers,\n  MessageOutput,\n  OperationContracts,\n  DataQueryInput,\n  DataQueryBody,\n  DataQueryRoute,\n  NavigationUpdate,\n  SqlQueryInput,\n} from '@/src/core/messages';\nexport type { TransportResponse } from '@/src/core/bridge';\n\nexport {\n  annotationDraftRoute,\n  annotationModeRoute,\n  annotationEditorStateRoute,\n  annotationUpdateRoute,\n  parseDataAppAnnotationDraft,\n} from '@/src/core/annotations';\nexport type {\n  DataAppAnnotationDraft,\n  DataAppAnnotationPresentation,\n} from '@/src/core/annotations';\n",
-    "/** Assert an author or data contract while preserving a useful failure message. */\nexport function invariant(\n  condition: unknown,\n  message: string\n): asserts condition {\n  if (!condition) throw new Error(`Invariant failed: ${message}`);\n}\n",
-    "import { DataSourceError } from '@/src/core/contract';\nimport type {\n  DataOperations,\n  DisclosedQuery,\n  Lakehouse,\n  OperationContext,\n  DataQueryBody,\n} from '@/src/core/operation-types';\n\ntype Operation = DataOperations[string];\ntype OperationExecutionOptions = {\n  operationName: string;\n  lakehouse: Lakehouse;\n  signal: AbortSignal;\n  /** Include query evidence in the response; this does not keep browser-owned SQL private. */\n  includeSql: boolean;\n  requestId: string;\n};\n\n/** Shared operation execution. Adapters own authorization, delivery, and public errors. */\nexport async function executeDataOperation(\n  operation: Operation,\n  value: unknown,\n  {\n    operationName,\n    lakehouse,\n    signal: requestSignal,\n    includeSql,\n    requestId,\n  }: OperationExecutionOptions\n) {\n  requestSignal.throwIfAborted();\n  let input: unknown;\n  try {\n    input = operation.input(value);\n  } catch {\n    throw new OperationInputError();\n  }\n\n  const signal = AbortSignal.any([\n    requestSignal,\n    AbortSignal.timeout(operation.policy.maxDurationMs),\n  ]);\n  const execution = createOperationLakehouse(\n    operation,\n    lakehouse,\n    signal,\n    operationName\n  );\n  try {\n    const output = await runOperation(operation, input, {\n      lakehouse: execution.lakehouse,\n      signal,\n    });\n    const body: DataQueryBody<unknown> = {\n      data: operation.output(output),\n      requestId,\n      queriedAt: new Date().toISOString(),\n      queryIds: execution.queryIds,\n      ...(operation.policy.exposeSql && includeSql\n        ? { queries: execution.queries }\n        : {}),\n    };\n    const serializedBody = JSON.stringify(body);\n    const responseBytes = new TextEncoder().encode(serializedBody).byteLength;\n    if (responseBytes > (operation.policy.maxResponseBytes ?? 1_000_000))\n      throw new Error('Response exceeds byte limit.');\n\n    return { body, serializedBody };\n  } catch (error) {\n    if (signal.aborted && !(error instanceof DataSourceError))\n      throw new OperationTimeoutError();\n    throw error;\n  }\n}\n\n/** Query evidence follows statement invocation order; query IDs retain completion order. */\nfunction createOperationLakehouse(\n  operation: Operation,\n  source: Lakehouse,\n  signal: AbortSignal,\n  operationName: string\n) {\n  const queryIds: string[] = [];\n  const queries: DisclosedQuery[] = [];\n  const lakehouse: Lakehouse = {\n    async queryAll(statement, options) {\n      if (!Number.isInteger(options.limit) || options.limit < 1)\n        throw new Error('Query needs a positive row limit.');\n      if (\n        operation.queryNames &&\n        !Object.values(operation.queryNames).includes(options.name ?? '')\n      )\n        throw new Error(\n          `Query name is not registered for operation ${operationName}.`\n        );\n      const query: DisclosedQuery = {\n        name: options.name ?? `Query ${queries.length + 1}`,\n        statement,\n      };\n      queries.push(query);\n      const limit = Math.min(options.limit, operation.policy.maxQueryRows);\n      let result;\n      try {\n        result = await source.queryAll(statement, {\n          limit,\n          signal: AbortSignal.any([signal, options.signal]),\n        });\n      } catch (error) {\n        if (error instanceof DataSourceError) error.queryName = query.name;\n        throw error;\n      }\n      if (result.rows.length > limit)\n        throw new Error('Result exceeds row limit.');\n      if (result.queryId) {\n        query.queryId = result.queryId;\n        queryIds.push(result.queryId);\n      }\n\n      return result;\n    },\n  };\n\n  return { lakehouse, queries, queryIds };\n}\n\n/** Settle cancellation even when operation code or its lakehouse ignores the signal. */\nasync function runOperation(\n  operation: Operation,\n  input: unknown,\n  { lakehouse, signal }: OperationContext\n) {\n  let abort: (() => void) | undefined;\n  try {\n    signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n      }\n      abort = rejectAborted;\n      signal.addEventListener('abort', rejectAborted, { once: true });\n      if (signal.aborted) rejectAborted();\n    });\n\n    return await Promise.race([\n      cancelled,\n      Promise.resolve().then(() => {\n        signal.throwIfAborted();\n\n        return operation.run({ lakehouse, signal }, input as never);\n      }),\n    ]);\n  } finally {\n    if (abort) signal.removeEventListener('abort', abort);\n  }\n}\n\nclass OperationTimeoutError extends Error {}\n\nclass OperationInputError extends Error {}\n\nconst sourceErrorMessages = {\n  unauthorized:\n    'This app could not authenticate its data connection. Contact the app owner.',\n  forbidden:\n    'This app cannot access the requested data. Contact the app owner.',\n  rate_limited: 'The lakehouse is busy. Wait a moment and retry.',\n  query_rejected:\n    \"A lakehouse query was rejected. Check the app's data operation.\",\n  unavailable: 'The lakehouse is unavailable. Check the connection and retry.',\n};\n\nexport function toDataOperationFailure(error: unknown, aborted = false) {\n  if (error instanceof OperationInputError)\n    return {\n      status: 400,\n      code: 'invalid_input',\n      message: \"Check this operation's inputs.\",\n    };\n  if (error instanceof DataSourceError)\n    return {\n      status: error.reason === 'rate_limited' ? 429 : 502,\n      code: `source_${error.reason}`,\n      message: sourceErrorMessages[error.reason],\n    };\n  const timedOut = aborted || error instanceof OperationTimeoutError;\n  return {\n    status: timedOut ? 504 : 502,\n    code: timedOut ? 'timeout' : 'query_failed',\n    message: timedOut\n      ? 'The data request timed out.'\n      : 'The data request failed.',\n  };\n}\n",
-    "import {\n  executeDataOperation,\n  toDataOperationFailure,\n} from '@/src/core/operation';\nimport {\n  DataSourceError,\n  type DataOperations,\n  type Lakehouse,\n} from '@/src/core/contract';\n\n/** Authorization result for one viewer request. A hosted adapter must scope its lakehouse client. */\nexport type RequestAccess = { lakehouse: Lakehouse; canDiscloseSql: boolean };\n\n/**\n * Execute named operations on the server. The app supplies operations and viewer authorization.\n * JSON, Origin, and Fetch Metadata checks reject cross-site browser POSTs; they do not\n * authenticate another local process. SQL is returned only when both the operation and\n * authorization result permit disclosure.\n */\nexport function createDataHandler(\n  operations: DataOperations,\n  authorize: (request: Request, operation: string) => Promise<RequestAccess>\n) {\n  async function handleDataRequest(request: Request): Promise<Response> {\n    const requestId = crypto.randomUUID();\n    const url = new URL(request.url);\n    if (!url.pathname.startsWith('/api/data/'))\n      return new Response('Not found', { status: 404 });\n    const encodedName = url.pathname.slice('/api/data/'.length);\n    if (!encodedName || encodedName.includes('/'))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    let name: string;\n    try {\n      name = decodeURIComponent(encodedName);\n    } catch {\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    }\n    if (!Object.hasOwn(operations, name))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    if (request.method !== 'POST')\n      return problem(405, 'method_not_allowed', 'Use POST.', requestId);\n    if (\n      request.headers\n        .get('content-type')\n        ?.split(';')[0]\n        ?.trim()\n        .toLowerCase() !== 'application/json'\n    )\n      return problem(\n        415,\n        'unsupported_media_type',\n        'Use application/json.',\n        requestId\n      );\n    const origin = request.headers.get('origin');\n    const fetchSite = request.headers.get('sec-fetch-site');\n    const fetchMode = request.headers.get('sec-fetch-mode');\n    if (\n      (origin !== null && origin !== url.origin) ||\n      (fetchSite !== null && fetchSite !== 'same-origin') ||\n      (fetchSite !== null && origin === null) ||\n      (fetchMode !== null &&\n        fetchMode !== 'cors' &&\n        fetchMode !== 'same-origin')\n    )\n      return problem(\n        403,\n        'cross_origin_request',\n        'The data request must come from this app.',\n        requestId\n      );\n    let access: RequestAccess;\n    try {\n      access = await authorize(request, name);\n    } catch {\n      return problem(\n        403,\n        'forbidden',\n        'You cannot run this data operation.',\n        requestId\n      );\n    }\n    const operation = operations[name]!;\n    let input: unknown;\n    if (request.signal.aborted)\n      return problem(504, 'timeout', 'The data request timed out.', requestId);\n    try {\n      const body = await readInput(request);\n      input = JSON.parse(body);\n    } catch (error) {\n      if (error instanceof InputTooLargeError)\n        return problem(\n          413,\n          'input_too_large',\n          'Input is too large.',\n          requestId\n        );\n\n      return problem(\n        400,\n        'invalid_input',\n        \"Check this operation's inputs.\",\n        requestId\n      );\n    }\n    const signal = request.signal;\n    try {\n      const { serializedBody } = await executeDataOperation(operation, input, {\n        lakehouse: access.lakehouse,\n        includeSql: access.canDiscloseSql,\n        signal,\n        requestId,\n        operationName: name,\n      });\n      return new Response(serializedBody, {\n        headers: {\n          'cache-control': 'no-store',\n          'content-type': 'application/json',\n        },\n      });\n    } catch (error) {\n      const source = error instanceof DataSourceError ? error : null;\n      console.error(\n        `Data operation ${name} failed (${requestId}): ${source ? `${source.reason}${source.status ? ` (${source.status})` : ''}${source.queryName ? ` in ${source.queryName}` : ''}` : error instanceof Error ? error.name : 'unknown'}`\n      );\n      const failure = toDataOperationFailure(error, signal.aborted);\n\n      return problem(failure.status, failure.code, failure.message, requestId);\n    }\n  }\n\n  return handleDataRequest;\n}\n\nfunction problem(\n  status: number,\n  code: string,\n  message: string,\n  requestId: string\n): Response {\n  return Response.json(\n    { error: { code, message, requestId } },\n    { status, headers: { 'cache-control': 'no-store' } }\n  );\n}\n\nconst MAX_INPUT_BYTES = 16_384;\nclass InputTooLargeError extends Error {}\n\n/** Count encoded bytes before retaining chunks; cancellation also interrupts waiting reads. */\nasync function readInput(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return '';\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  let abort: (() => void) | undefined;\n\n  function cancelReader() {\n    // The source's cancel algorithm may never settle; the handler must still respond.\n    void reader!.cancel().catch(() => {});\n  }\n\n  try {\n    request.signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n        cancelReader();\n      }\n      abort = rejectAborted;\n      request.signal.addEventListener('abort', rejectAborted, { once: true });\n      if (request.signal.aborted) rejectAborted();\n    });\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), cancelled]);\n      if (done) break;\n      size += value.byteLength;\n      if (size > MAX_INPUT_BYTES) {\n        cancelReader();\n        throw new InputTooLargeError();\n      }\n      chunks.push(value);\n    }\n    const bytes = new Uint8Array(size);\n    let offset = 0;\n    for (const chunk of chunks) {\n      bytes.set(chunk, offset);\n      offset += chunk.byteLength;\n    }\n\n    return new TextDecoder().decode(bytes);\n  } finally {\n    if (abort) request.signal.removeEventListener('abort', abort);\n    reader.releaseLock();\n  }\n}\n",
-    "/**\n * Bun local-development serving and server-only lakehouse access.\n * @module @altertable/data-app/server/bun\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/server-bun.md\n */\nimport {\n  DataSourceError,\n  type Lakehouse,\n  type QueryResult,\n} from '@/src/core/contract';\nimport type { DataOperations } from '@/src/core/contract';\nimport { createDataHandler } from '@/src/server/handler';\n\n/** Serve one app on localhost through the CLI's lakehouse proxy during development.\n * Hosted servers must authorize every viewer and must use `createDataHandler` directly. */\nexport function serveLocalApp({\n  page,\n  operations,\n  title,\n  port = Number(process.env.PORT ?? 25837),\n}: {\n  page: Bun.HTMLBundle;\n  operations: DataOperations;\n  title: string;\n  port?: number;\n}) {\n  const server = Bun.serve({\n    hostname: '127.0.0.1',\n    port,\n    development: process.env.NODE_ENV !== 'production',\n    idleTimeout: 60,\n    routes: { '/': page },\n    fetch: createDataHandler(operations, async () => ({\n      lakehouse: localLakehouse(),\n      canDiscloseSql: true,\n    })),\n  });\n  console.log(`${title} running at ${server.url}`);\n\n  return server;\n}\n\n/** Server-only lakehouse adapter. Local development uses the selected CLI profile's proxy. */\nexport function localLakehouse(\n  environment: Record<string, string | undefined> = process.env,\n  request: typeof fetch = fetch\n): Lakehouse {\n  return {\n    async queryAll(statement, { limit, signal }) {\n      const proxyUrl = environment.ALTERTABLE_DATA_PROXY_URL;\n      const proxyToken = environment.ALTERTABLE_DATA_PROXY_TOKEN;\n      const username = environment.ALTERTABLE_LAKEHOUSE_USERNAME;\n      const password = environment.ALTERTABLE_LAKEHOUSE_PASSWORD;\n      if (!proxyUrl && (!username || !password))\n        throw new DataSourceError('unauthorized');\n      if (proxyUrl && !proxyToken) throw new DataSourceError('unauthorized');\n      const base =\n        proxyUrl ??\n        environment.ALTERTABLE_API_BASE ??\n        'https://api.altertable.ai';\n      let response: Response;\n      try {\n        response = await request(\n          new URL('query', `${base.replace(/\\/$/, '')}/`),\n          {\n            method: 'POST',\n            headers: {\n              authorization: proxyUrl\n                ? `Bearer ${proxyToken}`\n                : `Basic ${Buffer.from(`${username}:${password}`).toString('base64')}`,\n              'content-type': 'application/json',\n            },\n            body: JSON.stringify({ statement, limit }),\n            signal,\n          }\n        );\n      } catch (error) {\n        if (signal.aborted) throw error;\n        throw new DataSourceError('unavailable');\n      }\n      if (!response.ok) {\n        const reason =\n          response.status === 401\n            ? 'unauthorized'\n            : response.status === 403\n              ? 'forbidden'\n              : response.status === 429\n                ? 'rate_limited'\n                : response.status === 400 || response.status === 422\n                  ? 'query_rejected'\n                  : 'unavailable';\n        throw new DataSourceError(reason, response.status);\n      }\n      const body = await readQueryBody(response);\n\n      return parseQueryResult(body, limit);\n    },\n  };\n}\n\nasync function readQueryBody(response: Response): Promise<string> {\n  const reader = response.body?.getReader();\n  if (!reader) throw new Error('Query response is empty.');\n  const decoder = new TextDecoder();\n  let body = '';\n  let bytes = 0;\n  while (true) {\n    const chunk = await reader.read();\n    if (chunk.done) break;\n    bytes += chunk.value.byteLength;\n    if (bytes > 5_000_000) {\n      await reader.cancel();\n      throw new Error('Query response is too large.');\n    }\n    body += decoder.decode(chunk.value, { stream: true });\n  }\n  body += decoder.decode();\n\n  return body;\n}\n\nfunction parseQueryResult(body: string, limit: number): QueryResult {\n  const lines = body\n    .trimEnd()\n    .split('\\n')\n    .filter(line => line.trim());\n  if (!lines.length) throw new Error('Query response is empty.');\n  const metadata: unknown = JSON.parse(lines[0]!);\n  if (\n    !metadata ||\n    typeof metadata !== 'object' ||\n    Array.isArray(metadata) ||\n    ('query_id' in metadata &&\n      metadata.query_id !== undefined &&\n      typeof metadata.query_id !== 'string')\n  )\n    throw new Error('Invalid query metadata.');\n  const queryId =\n    'query_id' in metadata\n      ? (metadata.query_id as string | undefined)\n      : undefined;\n  let firstRowIndex = 1;\n  let columns: QueryResult['columns'] = [];\n  if (lines[firstRowIndex]) {\n    const columnDefinitions = JSON.parse(lines[firstRowIndex]!) as unknown;\n    if (\n      Array.isArray(columnDefinitions) &&\n      columnDefinitions.every(\n        value =>\n          typeof value === 'string' ||\n          (typeof value === 'object' && value !== null && 'name' in value)\n      )\n    ) {\n      columns = columnDefinitions.map(value =>\n        typeof value === 'string' ? { name: value } : parseColumn(value)\n      );\n      firstRowIndex++;\n    }\n  }\n  const rows = lines.slice(firstRowIndex).map(line => {\n    const row: unknown = JSON.parse(line);\n    if (\n      !Array.isArray(row) ||\n      (firstRowIndex === 2 && row.length !== columns.length)\n    )\n      throw new Error('Invalid query row.');\n\n    return row;\n  });\n  if (rows.length > limit)\n    throw new Error('Lakehouse returned more rows than requested.');\n\n  return { columns, rows, queryId };\n}\n\nfunction parseColumn(value: unknown): QueryResult['columns'][number] {\n  if (\n    !value ||\n    typeof value !== 'object' ||\n    !('name' in value) ||\n    typeof value.name !== 'string' ||\n    ('type' in value &&\n      value.type !== undefined &&\n      typeof value.type !== 'string')\n  )\n    throw new Error('Invalid query column.');\n\n  return {\n    name: value.name,\n    ...('type' in value && value.type !== undefined\n      ? { type: value.type as string }\n      : {}),\n  };\n}\n"
+    "/**\n * Shared operation contracts and input/output validation for browser and server.\n * @module @altertable/data-app/contract\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/contract.md\n */\nimport { parseDate, today } from '@internationalized/date';\nimport { formatDateRange } from '@/src/core/format';\nimport { invariant } from '@/src/core/invariant';\nimport {\n  snapshotQueries,\n  resolveQueryParameters,\n  type QueryDefinitions,\n  type QueryParameters,\n  type QueryParameterValue,\n} from '@/src/core/queries';\nexport type {\n  QueryDefinitions,\n  QueryParameters,\n  QueryParameterValue,\n} from '@/src/core/queries';\nimport type { DateRange as DateRangeInput } from '@/src/core/date-range';\nimport type {\n  QueryResult,\n  DataOperation,\n  OperationContext,\n} from '@/src/core/operation-types';\nexport type {\n  QueryResult,\n  DisclosedQuery,\n  Lakehouse,\n  OperationContext,\n  DataOperation,\n  DataOperations,\n} from '@/src/core/operation-types';\n\nexport function parseEmptyInput(value: unknown): Record<string, never> {\n  invariant(\n    typeof value === 'object' &&\n      value !== null &&\n      !Array.isArray(value) &&\n      Object.keys(value).length === 0,\n    'This operation takes no inputs.'\n  );\n\n  return {};\n}\n\nexport function parseTrue(value: unknown): true {\n  invariant(value === true, 'Expected a successful check.');\n\n  return true;\n}\n\nexport type { DateRange as DateRangeInput } from '@/src/core/date-range';\nexport type DateRangeRequest = {\n  range: DateRangeInput;\n  comparison: DateRangeInput | null;\n};\n\n/** The immediately preceding, equally long set of calendar days. */\nexport function previousDateRange({\n  start,\n  end,\n}: DateRangeInput): DateRangeInput {\n  const first = parseDate(start);\n  const last = parseDate(end);\n  const days =\n    (last.toDate('UTC').getTime() - first.toDate('UTC').getTime()) /\n      86_400_000 +\n    1;\n  invariant(days >= 1, 'Date range must start before it ends.');\n  const previousEnd = first.subtract({ days: 1 });\n\n  return {\n    start: previousEnd.subtract({ days: days - 1 }).toString(),\n    end: previousEnd.toString(),\n  };\n}\n\nexport type ReportingPeriod =\n  | { kind: 'rolling'; amount: number; unit: 'hour' | 'day'; end: string }\n  | { kind: 'calendar'; start: string; end: string; timeZone: string };\n\nexport type DateRangeContractOptions = {\n  minDate?: string;\n  maxDate?: string | (() => string);\n  maxRangeDays: number;\n  timeZone: string;\n  completeDays?: boolean;\n};\n\n/** One source policy for the server parser, URL variable, and displayed reporting period. */\nexport function defineDateRangeContract(options: DateRangeContractOptions) {\n  invariant(\n    Number.isInteger(options.maxRangeDays) && options.maxRangeDays > 0,\n    'Date range needs a positive maxRangeDays.'\n  );\n  if (options.minDate) parseDate(options.minDate);\n  if (typeof options.maxDate === 'string') parseDate(options.maxDate);\n  today(options.timeZone);\n\n  function bounds() {\n    const latest = today(options.timeZone).subtract({\n      days: options.completeDays === false ? 0 : 1,\n    });\n    const sourceMax =\n      typeof options.maxDate === 'function'\n        ? options.maxDate()\n        : options.maxDate;\n    const maxDate =\n      sourceMax && parseDate(sourceMax).compare(latest) < 0\n        ? parseDate(sourceMax).toString()\n        : latest.toString();\n\n    return {\n      minDate: options.minDate,\n      maxDate,\n      maxRangeDays: options.maxRangeDays,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function period({ start, end }: DateRangeInput): ReportingPeriod {\n    return {\n      kind: 'calendar',\n      start,\n      end,\n      timeZone: options.timeZone,\n    };\n  }\n\n  function describeInput(input: DateRangeInput) {\n    return `${formatDateRange(input)} ${options.timeZone}`;\n  }\n\n  function comparison(input: DateRangeInput): DateRangeInput | null {\n    const previous = previousDateRange(input);\n\n    return options.minDate && previous.start < options.minDate\n      ? null\n      : previous;\n  }\n\n  function request(value: unknown, compare = false): DateRangeRequest {\n    const range = parseDateRangeInput(value, bounds());\n    const previous = compare ? comparison(range) : null;\n    invariant(\n      !compare || previous,\n      'Comparison is outside available source coverage.'\n    );\n\n    return { range, comparison: previous };\n  }\n\n  function parseRequest(value: unknown): DateRangeRequest {\n    invariant(value && typeof value === 'object', 'Choose a date range.');\n    const input = value as Record<string, unknown>;\n    const parsed = request(input.range, input.comparison != null);\n    if (input.comparison != null) {\n      const supplied = parseDateRangeInput(input.comparison, bounds());\n      invariant(\n        supplied.start === parsed.comparison?.start &&\n          supplied.end === parsed.comparison?.end,\n        'Comparison must be the preceding equal-length range.'\n      );\n    }\n\n    return parsed;\n  }\n\n  return {\n    request,\n    parseRequest,\n    bounds,\n    parse(value: unknown) {\n      return parseDateRangeInput(value, bounds());\n    },\n    period,\n    comparison,\n    describeInput,\n    view: { period, describeInput },\n  };\n}\n\nexport type DateRangeContract = ReturnType<typeof defineDateRangeContract>;\n\n/** Validate calendar dates and a bounded inclusive range on the server. */\nexport function parseDateRangeInput(\n  value: unknown,\n  {\n    minDate,\n    maxDate,\n    maxRangeDays,\n  }: { minDate?: string; maxDate?: string; maxRangeDays: number }\n): DateRangeInput {\n  invariant(\n    value && typeof value === 'object' && !Array.isArray(value),\n    'Choose a date range.'\n  );\n  const { start, end } = value as Record<string, unknown>;\n\n  function day(input: unknown): number {\n    invariant(\n      typeof input === 'string' && /^\\d{4}-\\d{2}-\\d{2}$/.test(input),\n      'Dates must be YYYY-MM-DD.'\n    );\n    const timestamp = Date.parse(`${input}T00:00:00Z`);\n    invariant(\n      Number.isFinite(timestamp) &&\n        new Date(timestamp).toISOString().slice(0, 10) === input,\n      'Choose valid calendar dates.'\n    );\n\n    return timestamp;\n  }\n  const first = day(start);\n  const last = day(end);\n  invariant(\n    Number.isInteger(maxRangeDays) && maxRangeDays > 0,\n    'Maximum range days must be positive.'\n  );\n  invariant(\n    first <= last &&\n      (last - first) / 86_400_000 < maxRangeDays &&\n      (minDate === undefined || first >= day(minDate)) &&\n      (maxDate === undefined || last <= day(maxDate)),\n    `Choose up to ${maxRangeDays} days within the available range.`\n  );\n\n  return { start: start as string, end: end as string };\n}\n\n/** Accepts numeric strings from DuckDB; rejects negative, fractional, and unsafe integers. */\nexport function parseCount(value: unknown): number {\n  const number =\n    typeof value === 'number' || typeof value === 'string'\n      ? Number(value)\n      : NaN;\n  invariant(\n    Number.isSafeInteger(number) &&\n      number >= 0 &&\n      (typeof value !== 'string' || !!value.trim()),\n    'Invalid count in query result.'\n  );\n\n  return number;\n}\n\nexport function parseLabel(value: unknown, maxLength = 100): string {\n  invariant(\n    typeof value === 'string' && !!value && value.length <= maxLength,\n    'Invalid label in query result.'\n  );\n\n  return value;\n}\n\n/** Rejects missing or duplicate columns and rows whose width differs from the column list. */\nexport function rowsAsRecords(\n  result: QueryResult,\n  requiredColumns: readonly string[]\n): Record<string, unknown>[] {\n  const names = result.columns.map(column => column.name);\n  invariant(\n    new Set(names).size === names.length &&\n      requiredColumns.every(name => names.includes(name)),\n    'Query result columns do not match the expected shape.'\n  );\n\n  return result.rows.map(row => {\n    invariant(\n      row.length === names.length,\n      'Query result row has the wrong width.'\n    );\n\n    return Object.fromEntries(names.map((name, index) => [name, row[index]]));\n  });\n}\n\nexport function defineQueryNames<const Names extends Record<string, string>>(\n  names: Names\n): Names {\n  const values = Object.values(names);\n  invariant(\n    values.every(name => !!name.trim()) &&\n      new Set(values).size === values.length,\n    'Query names must be nonempty and unique.'\n  );\n\n  return names;\n}\n\nconst sourceErrorBrand = Symbol.for('@altertable/data-app/DataSourceError');\n\nexport class DataSourceError extends Error {\n  readonly [sourceErrorBrand] = true;\n  queryName?: string;\n\n  static [Symbol.hasInstance](value: unknown): boolean {\n    return (\n      value instanceof Error &&\n      (value as { [sourceErrorBrand]?: unknown })[sourceErrorBrand] === true\n    );\n  }\n\n  constructor(\n    public readonly reason:\n      | 'unauthorized'\n      | 'forbidden'\n      | 'rate_limited'\n      | 'query_rejected'\n      | 'unavailable',\n    public readonly status?: number\n  ) {\n    super(`Data source ${reason}${status ? ` (${status})` : ''}.`);\n    this.name = 'DataSourceError';\n  }\n}\n\ntype RegisteredQueryParameters<\n  Queries extends QueryDefinitions,\n  Name extends keyof Queries,\n> = keyof Queries[Name]['params'] extends never\n  ? Record<string, never>\n  : Partial<Record<keyof Queries[Name]['params'], QueryParameterValue>>;\n\nexport type RegisteredQuery<Queries extends QueryDefinitions> = <\n  Name extends keyof Queries & string,\n  const Params extends object = {},\n>(\n  name: Name,\n  params?: Params &\n    NoInfer<RegisteredQueryParameters<Queries, Name>> &\n    NoInfer<\n      Record<Exclude<keyof Params, keyof Queries[Name]['params']>, never>\n    > &\n    NoInfer<Params extends (...args: never[]) => unknown ? never : object>,\n  options?: { limit?: number }\n) => Promise<QueryResult>;\n\nexport function defineOperation<\n  Input,\n  Output,\n  const Queries extends QueryDefinitions,\n>(\n  operation: Omit<DataOperation<Input, Output>, 'run' | 'queryNames'> & {\n    queries: Queries;\n    run: (\n      context: Pick<OperationContext, 'signal'> & {\n        query: RegisteredQuery<NoInfer<Queries>>;\n      },\n      input: Input\n    ) => Promise<Output>;\n  }\n): Omit<DataOperation<Input, Output>, 'queryNames'> & {\n  queryNames: { readonly [Name in keyof Queries & string]: Name };\n} {\n  invariant(\n    Array.isArray(operation.checks) &&\n      operation.checks.length > 0 &&\n      Number.isInteger(operation.policy.maxQueryRows) &&\n      operation.policy.maxQueryRows > 0 &&\n      Number.isInteger(operation.policy.maxDurationMs) &&\n      operation.policy.maxDurationMs > 0 &&\n      (operation.policy.maxResponseBytes === undefined ||\n        (Number.isInteger(operation.policy.maxResponseBytes) &&\n          operation.policy.maxResponseBytes > 0)),\n    'Each data operation needs check inputs and positive row and duration limits.'\n  );\n  const queries = snapshotQueries(operation.queries);\n  const queryNames = Object.fromEntries(\n    Object.keys(queries).map(name => [name, name])\n  ) as { readonly [Name in keyof Queries & string]: Name };\n  for (const input of operation.checks) operation.input(input);\n\n  return {\n    ...operation,\n    queryNames,\n    run(context, input) {\n      function query(\n        name: keyof Queries & string,\n        values: Partial<QueryParameters> = {},\n        options?: { limit?: number }\n      ) {\n        invariant(Object.hasOwn(queries, name), `Unknown query name: ${name}.`);\n        const definition = queries[name]!;\n        const params = resolveQueryParameters(\n          definition.params,\n          values,\n          context.queryParams ?? {}\n        );\n        return context.lakehouse.queryAll(definition.statement, {\n          name,\n          params,\n          limit: options?.limit ?? operation.policy.maxQueryRows,\n          signal: context.signal,\n        });\n      }\n      return operation.run({ signal: context.signal, query }, input);\n    },\n  };\n}\n\n/** A connectivity probe uses the app's registered connection query. */\nexport function connectionCheck<\n  const Queries extends QueryDefinitions & {\n    connection: QueryDefinitions[string];\n  },\n>(queries: Queries) {\n  return defineOperation({\n    queries,\n    input: parseEmptyInput,\n    output: parseTrue,\n    checks: [{}],\n    policy: { maxQueryRows: 1, maxDurationMs: 15_000 },\n    async run({ query }): Promise<true> {\n      await query('connection');\n      return true;\n    },\n  });\n}\n\nexport {\n  dimensionFilter,\n  parseDimensionSelection,\n  parseFacetOptions,\n  dimensionPredicate,\n} from '@/src/core/dimension';\nexport type {\n  DimensionSelection,\n  DimensionMember,\n  DimensionOption,\n  DimensionVariable,\n  DimensionFilterOptions,\n} from '@/src/core/dimension';\n\nexport {\n  createMessageRouter,\n  defineMessageRoute,\n  defineDataQueryRoute,\n  MessageRoutingError,\n  dataAppRoutes,\n  navigationUpdateRoute,\n  sqlQueryRoute,\n} from '@/src/core/messages';\nexport type {\n  MessageContext,\n  RoutedMessage,\n  MessageDispatcher,\n  MessageTransport,\n  MessageRoute,\n  MessageRoutes,\n  MessageInput,\n  MessageHandlers,\n  MessageOutput,\n  OperationContracts,\n  DataQueryInput,\n  DataQueryBody,\n  DataQueryRoute,\n  NavigationUpdate,\n  SqlQueryInput,\n} from '@/src/core/messages';\nexport type { TransportResponse } from '@/src/core/bridge';\n\nexport {\n  annotationDraftRoute,\n  annotationModeRoute,\n  annotationEditorStateRoute,\n  annotationSendRoute,\n  annotationUpdateRoute,\n  parseDataAppAnnotationDraft,\n} from '@/src/core/annotations';\nexport type {\n  DataAppAnnotationDraft,\n  DataAppAnnotationPresentation,\n} from '@/src/core/annotations';\n\nexport {\n  numberFilter,\n  booleanFilter,\n  parseNumberSelection,\n  parseBooleanSelection,\n} from '@/src/core/filters';\nexport type {\n  NumberSelection,\n  NumberOperator,\n  NumberFilter,\n  BooleanSelection,\n  BooleanFilter,\n} from '@/src/core/filters';\n",
+    "import { DataSourceError } from '@/src/core/contract';\nimport type {\n  DataOperations,\n  DisclosedQuery,\n  Lakehouse,\n  OperationContext,\n  DataQueryBody,\n} from '@/src/core/operation-types';\n\ntype Operation = DataOperations[string];\ntype OperationExecutionOptions = {\n  operationName: string;\n  lakehouse: Lakehouse;\n  signal: AbortSignal;\n  requestId: string;\n  queryParams?: OperationContext['queryParams'];\n};\n\n/** Shared operation execution. Adapters own authorization, delivery, and public errors. */\nexport async function executeDataOperation(\n  operation: Operation,\n  value: unknown,\n  {\n    operationName,\n    lakehouse,\n    signal: requestSignal,\n    requestId,\n    queryParams,\n  }: OperationExecutionOptions\n) {\n  requestSignal.throwIfAborted();\n  let input: unknown;\n  try {\n    input = operation.input(value);\n  } catch {\n    throw new OperationInputError();\n  }\n\n  const signal = AbortSignal.any([\n    requestSignal,\n    AbortSignal.timeout(operation.policy.maxDurationMs),\n  ]);\n  const execution = createOperationLakehouse(\n    operation,\n    lakehouse,\n    signal,\n    operationName\n  );\n  try {\n    const output = await runOperation(operation, input, {\n      lakehouse: execution.lakehouse,\n      signal,\n      queryParams,\n    });\n    const body: DataQueryBody<unknown> = {\n      data: operation.output(output),\n      requestId,\n      queriedAt: new Date().toISOString(),\n      queryIds: execution.queryIds,\n      queries: execution.queries,\n    };\n    const serializedBody = JSON.stringify(body);\n    const responseBytes = new TextEncoder().encode(serializedBody).byteLength;\n    if (responseBytes > (operation.policy.maxResponseBytes ?? 1_000_000))\n      throw new Error('Response exceeds byte limit.');\n\n    return { body, serializedBody };\n  } catch (error) {\n    if (signal.aborted && !(error instanceof DataSourceError))\n      throw new OperationTimeoutError();\n    throw error;\n  }\n}\n\n/** Query evidence follows statement invocation order; query IDs retain completion order. */\nfunction createOperationLakehouse(\n  operation: Operation,\n  source: Lakehouse,\n  signal: AbortSignal,\n  operationName: string\n) {\n  const queryIds: string[] = [];\n  const queries: DisclosedQuery[] = [];\n  const lakehouse: Lakehouse = {\n    async queryAll(statement, options) {\n      if (!Number.isInteger(options.limit) || options.limit < 1)\n        throw new Error('Query needs a positive row limit.');\n      if (\n        operation.queryNames &&\n        !Object.values(operation.queryNames).includes(options.name ?? '')\n      )\n        throw new Error(\n          `Query name is not registered for operation ${operationName}.`\n        );\n      const query: DisclosedQuery = {\n        name: options.name ?? `Query ${queries.length + 1}`,\n        statement,\n        ...(options.params === undefined ? {} : { params: options.params }),\n      };\n      queries.push(query);\n      const limit = Math.min(options.limit, operation.policy.maxQueryRows);\n      let result;\n      try {\n        result = await source.queryAll(statement, {\n          limit,\n          ...(options.params === undefined ? {} : { params: options.params }),\n          signal: AbortSignal.any([signal, options.signal]),\n        });\n      } catch (error) {\n        if (error instanceof DataSourceError) error.queryName = query.name;\n        throw error;\n      }\n      if (result.rows.length > limit)\n        throw new Error('Result exceeds row limit.');\n      if (result.queryId) {\n        query.queryId = result.queryId;\n        queryIds.push(result.queryId);\n      }\n\n      return result;\n    },\n  };\n\n  return { lakehouse, queries, queryIds };\n}\n\n/** Settle cancellation even when operation code or its lakehouse ignores the signal. */\nasync function runOperation(\n  operation: Operation,\n  input: unknown,\n  { lakehouse, signal, queryParams }: OperationContext\n) {\n  let abort: (() => void) | undefined;\n  try {\n    signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n      }\n      abort = rejectAborted;\n      signal.addEventListener('abort', rejectAborted, { once: true });\n      if (signal.aborted) rejectAborted();\n    });\n\n    return await Promise.race([\n      cancelled,\n      Promise.resolve().then(() => {\n        signal.throwIfAborted();\n\n        return operation.run(\n          { lakehouse, signal, queryParams },\n          input as never\n        );\n      }),\n    ]);\n  } finally {\n    if (abort) signal.removeEventListener('abort', abort);\n  }\n}\n\nclass OperationTimeoutError extends Error {}\n\nclass OperationInputError extends Error {}\n\nconst sourceErrorMessages = {\n  unauthorized:\n    'This app could not authenticate its data connection. Contact the app owner.',\n  forbidden:\n    'This app cannot access the requested data. Contact the app owner.',\n  rate_limited: 'The lakehouse is busy. Wait a moment and retry.',\n  query_rejected:\n    \"A lakehouse query was rejected. Check the app's data operation.\",\n  unavailable: 'The lakehouse is unavailable. Check the connection and retry.',\n};\n\nexport function toDataOperationFailure(error: unknown, aborted = false) {\n  if (error instanceof OperationInputError)\n    return {\n      status: 400,\n      code: 'invalid_input',\n      message: \"Check this operation's inputs.\",\n    };\n  if (error instanceof DataSourceError)\n    return {\n      status: error.reason === 'rate_limited' ? 429 : 502,\n      code: `source_${error.reason}`,\n      message: sourceErrorMessages[error.reason],\n    };\n  const timedOut = aborted || error instanceof OperationTimeoutError;\n  return {\n    status: timedOut ? 504 : 502,\n    code: timedOut ? 'timeout' : 'query_failed',\n    message: timedOut\n      ? 'The data request timed out.'\n      : 'The data request failed.',\n  };\n}\n",
+    "import {\n  executeDataOperation,\n  toDataOperationFailure,\n} from '@/src/core/operation';\nimport {\n  DataSourceError,\n  type DataOperations,\n  type Lakehouse,\n  type QueryParameters,\n} from '@/src/core/contract';\n\n/** Authorization result for one viewer request. A hosted adapter must scope its lakehouse client. */\nexport type RequestAccess = {\n  lakehouse: Lakehouse;\n  /** Trusted values shared across queries; each query uses only its declared keys. */\n  queryParams?: QueryParameters;\n};\n\n/**\n * Execute named operations on the server. The app supplies operations and viewer authorization.\n * JSON, Origin, and Fetch Metadata checks reject cross-site browser POSTs; they do not\n * authenticate another local process. Query evidence accompanies every result.\n */\nexport function createDataHandler(\n  operations: DataOperations,\n  authorize: (request: Request, operation: string) => Promise<RequestAccess>\n) {\n  async function handleDataRequest(request: Request): Promise<Response> {\n    const requestId = crypto.randomUUID();\n    const url = new URL(request.url);\n    if (!url.pathname.startsWith('/api/data/'))\n      return new Response('Not found', { status: 404 });\n    const encodedName = url.pathname.slice('/api/data/'.length);\n    if (!encodedName || encodedName.includes('/'))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    let name: string;\n    try {\n      name = decodeURIComponent(encodedName);\n    } catch {\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    }\n    if (!Object.hasOwn(operations, name))\n      return problem(404, 'not_found', 'Unknown data operation.', requestId);\n    if (request.method !== 'POST')\n      return problem(405, 'method_not_allowed', 'Use POST.', requestId);\n    if (\n      request.headers\n        .get('content-type')\n        ?.split(';')[0]\n        ?.trim()\n        .toLowerCase() !== 'application/json'\n    )\n      return problem(\n        415,\n        'unsupported_media_type',\n        'Use application/json.',\n        requestId\n      );\n    const origin = request.headers.get('origin');\n    const fetchSite = request.headers.get('sec-fetch-site');\n    const fetchMode = request.headers.get('sec-fetch-mode');\n    if (\n      (origin !== null && origin !== url.origin) ||\n      (fetchSite !== null && fetchSite !== 'same-origin') ||\n      (fetchSite !== null && origin === null) ||\n      (fetchMode !== null &&\n        fetchMode !== 'cors' &&\n        fetchMode !== 'same-origin')\n    )\n      return problem(\n        403,\n        'cross_origin_request',\n        'The data request must come from this app.',\n        requestId\n      );\n    let access: RequestAccess;\n    try {\n      access = await authorize(request, name);\n    } catch {\n      return problem(\n        403,\n        'forbidden',\n        'You cannot run this data operation.',\n        requestId\n      );\n    }\n    const operation = operations[name]!;\n    let input: unknown;\n    if (request.signal.aborted)\n      return problem(504, 'timeout', 'The data request timed out.', requestId);\n    try {\n      const body = await readInput(request);\n      input = JSON.parse(body);\n    } catch (error) {\n      if (error instanceof InputTooLargeError)\n        return problem(\n          413,\n          'input_too_large',\n          'Input is too large.',\n          requestId\n        );\n\n      return problem(\n        400,\n        'invalid_input',\n        \"Check this operation's inputs.\",\n        requestId\n      );\n    }\n    const signal = request.signal;\n    try {\n      const { serializedBody } = await executeDataOperation(operation, input, {\n        lakehouse: access.lakehouse,\n        signal,\n        requestId,\n        operationName: name,\n        queryParams: access.queryParams,\n      });\n      return new Response(serializedBody, {\n        headers: {\n          'cache-control': 'no-store',\n          'content-type': 'application/json',\n        },\n      });\n    } catch (error) {\n      const source = error instanceof DataSourceError ? error : null;\n      console.error(\n        `Data operation ${name} failed (${requestId}): ${source ? `${source.reason}${source.status ? ` (${source.status})` : ''}${source.queryName ? ` in ${source.queryName}` : ''}` : error instanceof Error ? error.name : 'unknown'}`\n      );\n      const failure = toDataOperationFailure(error, signal.aborted);\n\n      return problem(failure.status, failure.code, failure.message, requestId);\n    }\n  }\n\n  return handleDataRequest;\n}\n\nfunction problem(\n  status: number,\n  code: string,\n  message: string,\n  requestId: string\n): Response {\n  return Response.json(\n    { error: { code, message, requestId } },\n    { status, headers: { 'cache-control': 'no-store' } }\n  );\n}\n\nconst MAX_INPUT_BYTES = 16_384;\nclass InputTooLargeError extends Error {}\n\n/** Count encoded bytes before retaining chunks; cancellation also interrupts waiting reads. */\nasync function readInput(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n  if (!reader) return '';\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n  let abort: (() => void) | undefined;\n\n  function cancelReader() {\n    // The source's cancel algorithm may never settle; the handler must still respond.\n    void reader!.cancel().catch(() => {});\n  }\n\n  try {\n    request.signal.throwIfAborted();\n    const cancelled = new Promise<never>((_, reject) => {\n      function rejectAborted() {\n        reject(new Error('Request aborted.'));\n        cancelReader();\n      }\n      abort = rejectAborted;\n      request.signal.addEventListener('abort', rejectAborted, { once: true });\n      if (request.signal.aborted) rejectAborted();\n    });\n    while (true) {\n      const { done, value } = await Promise.race([reader.read(), cancelled]);\n      if (done) break;\n      size += value.byteLength;\n      if (size > MAX_INPUT_BYTES) {\n        cancelReader();\n        throw new InputTooLargeError();\n      }\n      chunks.push(value);\n    }\n    const bytes = new Uint8Array(size);\n    let offset = 0;\n    for (const chunk of chunks) {\n      bytes.set(chunk, offset);\n      offset += chunk.byteLength;\n    }\n\n    return new TextDecoder().decode(bytes);\n  } finally {\n    if (abort) request.signal.removeEventListener('abort', abort);\n    reader.releaseLock();\n  }\n}\n",
+    "/**\n * Bun local-development serving and server-only lakehouse access.\n * @module @altertable/data-app/server/bun\n * @see https://github.com/altertable-ai/data-app/blob/main/docs/server-bun.md\n */\nimport {\n  DataSourceError,\n  type Lakehouse,\n  type QueryResult,\n} from '@/src/core/contract';\nimport type { DataOperations } from '@/src/core/contract';\nimport { createDataHandler } from '@/src/server/handler';\n\n/** Serve one app on localhost through the CLI's lakehouse proxy during development.\n * Hosted servers must authorize every viewer and must use `createDataHandler` directly. */\nexport function serveLocalApp({\n  page,\n  operations,\n  title,\n  port = Number(process.env.PORT ?? 25837),\n}: {\n  page: Bun.HTMLBundle;\n  operations: DataOperations;\n  title: string;\n  port?: number;\n}) {\n  const server = Bun.serve({\n    hostname: '127.0.0.1',\n    port,\n    development: process.env.NODE_ENV !== 'production',\n    idleTimeout: 60,\n    routes: { '/': page },\n    fetch: createDataHandler(operations, async () => ({\n      lakehouse: localLakehouse(),\n    })),\n  });\n  console.log(`${title} running at ${server.url}`);\n\n  return server;\n}\n\n/** Server-only lakehouse adapter. Local development uses the selected CLI profile's proxy. */\nexport function localLakehouse(\n  environment: Record<string, string | undefined> = process.env,\n  request: typeof fetch = fetch\n): Lakehouse {\n  return {\n    async queryAll(statement, { limit, signal, params }) {\n      const proxyUrl = environment.ALTERTABLE_DATA_PROXY_URL;\n      const proxyToken = environment.ALTERTABLE_DATA_PROXY_TOKEN;\n      const username = environment.ALTERTABLE_LAKEHOUSE_USERNAME;\n      const password = environment.ALTERTABLE_LAKEHOUSE_PASSWORD;\n      if (!proxyUrl && (!username || !password))\n        throw new DataSourceError('unauthorized');\n      if (proxyUrl && !proxyToken) throw new DataSourceError('unauthorized');\n      const base =\n        proxyUrl ??\n        environment.ALTERTABLE_API_BASE ??\n        'https://api.altertable.ai';\n      let response: Response;\n      try {\n        response = await request(\n          new URL('query', `${base.replace(/\\/$/, '')}/`),\n          {\n            method: 'POST',\n            headers: {\n              authorization: proxyUrl\n                ? `Bearer ${proxyToken}`\n                : `Basic ${Buffer.from(`${username}:${password}`).toString('base64')}`,\n              'content-type': 'application/json',\n            },\n            body: JSON.stringify({\n              statement,\n              limit,\n              ...(params === undefined ? {} : { params }),\n            }),\n            signal,\n          }\n        );\n      } catch (error) {\n        if (signal.aborted) throw error;\n        throw new DataSourceError('unavailable');\n      }\n      if (!response.ok) {\n        const reason =\n          response.status === 401\n            ? 'unauthorized'\n            : response.status === 403\n              ? 'forbidden'\n              : response.status === 429\n                ? 'rate_limited'\n                : response.status === 400 || response.status === 422\n                  ? 'query_rejected'\n                  : 'unavailable';\n        throw new DataSourceError(reason, response.status);\n      }\n      const body = await readQueryBody(response);\n\n      return parseQueryResult(body, limit);\n    },\n  };\n}\n\nasync function readQueryBody(response: Response): Promise<string> {\n  const reader = response.body?.getReader();\n  if (!reader) throw new Error('Query response is empty.');\n  const decoder = new TextDecoder();\n  let body = '';\n  let bytes = 0;\n  while (true) {\n    const chunk = await reader.read();\n    if (chunk.done) break;\n    bytes += chunk.value.byteLength;\n    if (bytes > 5_000_000) {\n      await reader.cancel();\n      throw new Error('Query response is too large.');\n    }\n    body += decoder.decode(chunk.value, { stream: true });\n  }\n  body += decoder.decode();\n\n  return body;\n}\n\nfunction parseQueryResult(body: string, limit: number): QueryResult {\n  const lines = body\n    .trimEnd()\n    .split('\\n')\n    .filter(line => line.trim());\n  if (!lines.length) throw new Error('Query response is empty.');\n  const metadata: unknown = JSON.parse(lines[0]!);\n  if (\n    !metadata ||\n    typeof metadata !== 'object' ||\n    Array.isArray(metadata) ||\n    ('query_id' in metadata &&\n      metadata.query_id !== undefined &&\n      typeof metadata.query_id !== 'string')\n  )\n    throw new Error('Invalid query metadata.');\n  const queryId =\n    'query_id' in metadata\n      ? (metadata.query_id as string | undefined)\n      : undefined;\n  let firstRowIndex = 1;\n  let columns: QueryResult['columns'] = [];\n  if (lines[firstRowIndex]) {\n    const columnDefinitions = JSON.parse(lines[firstRowIndex]!) as unknown;\n    if (\n      Array.isArray(columnDefinitions) &&\n      columnDefinitions.every(\n        value =>\n          typeof value === 'string' ||\n          (typeof value === 'object' && value !== null && 'name' in value)\n      )\n    ) {\n      columns = columnDefinitions.map(value =>\n        typeof value === 'string' ? { name: value } : parseColumn(value)\n      );\n      firstRowIndex++;\n    }\n  }\n  const rows = lines.slice(firstRowIndex).map(line => {\n    const row: unknown = JSON.parse(line);\n    if (\n      !Array.isArray(row) ||\n      (firstRowIndex === 2 && row.length !== columns.length)\n    )\n      throw new Error('Invalid query row.');\n\n    return row;\n  });\n  if (rows.length > limit)\n    throw new Error('Lakehouse returned more rows than requested.');\n\n  return { columns, rows, queryId };\n}\n\nfunction parseColumn(value: unknown): QueryResult['columns'][number] {\n  if (\n    !value ||\n    typeof value !== 'object' ||\n    !('name' in value) ||\n    typeof value.name !== 'string' ||\n    ('type' in value &&\n      value.type !== undefined &&\n      typeof value.type !== 'string')\n  )\n    throw new Error('Invalid query column.');\n\n  return {\n    name: value.name,\n    ...('type' in value && value.type !== undefined\n      ? { type: value.type as string }\n      : {}),\n  };\n}\n"
   ],
-  "mappings": ";;AAKA;;;ACJO,SAAS,SAAS,CACvB,WACA,SACmB;AAAA,EACnB,IAAI,CAAC;AAAA,IAAW,MAAM,IAAI,MAAM,qBAAqB,SAAS;AAAA;;;ADsQzD,SAAS,gBAA4D,CAC1E,OACO;AAAA,EACP,MAAM,SAAS,OAAO,OAAO,KAAK;AAAA,EAClC,UACE,OAAO,MAAM,UAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,KAChC,IAAI,IAAI,MAAM,EAAE,SAAS,OAAO,QAClC,0CACF;AAAA,EAEA,OAAO;AAAA;AAGT,IAAM,mBAAmB,OAAO,IAAI,sCAAsC;AAAA;AAEnE,MAAM,wBAAwB,MAAM;AAAA,EAYvB;AAAA,EAMA;AAAA,GAjBR,oBAAoB;AAAA,EAC9B;AAAA,UAEQ,OAAO,YAAY,CAAC,OAAyB;AAAA,IACnD,OACE,iBAAiB,SAChB,MAA2C,sBAAsB;AAAA;AAAA,EAItE,WAAW,CACO,QAMA,QAChB;AAAA,IACA,MAAM,eAAe,SAAS,SAAS,KAAK,YAAY,KAAK;AAAA,IAR7C;AAAA,IAMA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AA8DO,IAAM,uBAAuB,iBAAiB;AAAA,EACnD,YAAY;AACd,CAAC;;;AE7VD,eAAsB,oBAAoB,CACxC,WACA;AAAA,EAEE;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,GAEF;AAAA,EACA,cAAc,eAAe;AAAA,EAC7B,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,QAAQ,UAAU,MAAM,KAAK;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM,IAAI;AAAA;AAAA,EAGZ,MAAM,SAAS,YAAY,IAAI;AAAA,IAC7B;AAAA,IACA,YAAY,QAAQ,UAAU,OAAO,aAAa;AAAA,EACpD,CAAC;AAAA,EACD,MAAM,YAAY,yBAChB,WACA,WACA,QACA,aACF;AAAA,EACA,IAAI;AAAA,IACF,MAAM,SAAS,MAAM,aAAa,WAAW,OAAO;AAAA,MAClD,WAAW,UAAU;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,IACD,MAAM,OAA+B;AAAA,MACnC,MAAM,UAAU,OAAO,MAAM;AAAA,MAC7B;AAAA,MACA,WAAW,IAAI,KAAK,EAAE,YAAY;AAAA,MAClC,UAAU,UAAU;AAAA,SAChB,UAAU,OAAO,aAAa,aAC9B,EAAE,SAAS,UAAU,QAAQ,IAC7B,CAAC;AAAA,IACP;AAAA,IACA,MAAM,iBAAiB,KAAK,UAAU,IAAI;AAAA,IAC1C,MAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,cAAc,EAAE;AAAA,IAC/D,IAAI,iBAAiB,UAAU,OAAO,oBAAoB;AAAA,MACxD,MAAM,IAAI,MAAM,8BAA8B;AAAA,IAEhD,OAAO,EAAE,MAAM,eAAe;AAAA,IAC9B,OAAO,OAAO;AAAA,IACd,IAAI,OAAO,WAAW,EAAE,iBAAiB;AAAA,MACvC,MAAM,IAAI;AAAA,IACZ,MAAM;AAAA;AAAA;AAKV,SAAS,wBAAwB,CAC/B,WACA,QACA,QACA,eACA;AAAA,EACA,MAAM,WAAqB,CAAC;AAAA,EAC5B,MAAM,UAA4B,CAAC;AAAA,EACnC,MAAM,YAAuB;AAAA,SACrB,SAAQ,CAAC,WAAW,SAAS;AAAA,MACjC,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,QAAQ,QAAQ;AAAA,QACtD,MAAM,IAAI,MAAM,mCAAmC;AAAA,MACrD,IACE,UAAU,cACV,CAAC,OAAO,OAAO,UAAU,UAAU,EAAE,SAAS,QAAQ,QAAQ,EAAE;AAAA,QAEhE,MAAM,IAAI,MACR,8CAA8C,gBAChD;AAAA,MACF,MAAM,QAAwB;AAAA,QAC5B,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,QAChD;AAAA,MACF;AAAA,MACA,QAAQ,KAAK,KAAK;AAAA,MAClB,MAAM,QAAQ,KAAK,IAAI,QAAQ,OAAO,UAAU,OAAO,YAAY;AAAA,MACnE,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,SAAS,MAAM,OAAO,SAAS,WAAW;AAAA,UACxC;AAAA,UACA,QAAQ,YAAY,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC;AAAA,QAClD,CAAC;AAAA,QACD,OAAO,OAAO;AAAA,QACd,IAAI,iBAAiB;AAAA,UAAiB,MAAM,YAAY,MAAM;AAAA,QAC9D,MAAM;AAAA;AAAA,MAER,IAAI,OAAO,KAAK,SAAS;AAAA,QACvB,MAAM,IAAI,MAAM,2BAA2B;AAAA,MAC7C,IAAI,OAAO,SAAS;AAAA,QAClB,MAAM,UAAU,OAAO;AAAA,QACvB,SAAS,KAAK,OAAO,OAAO;AAAA,MAC9B;AAAA,MAEA,OAAO;AAAA;AAAA,EAEX;AAAA,EAEA,OAAO,EAAE,WAAW,SAAS,SAAS;AAAA;AAIxC,eAAe,YAAY,CACzB,WACA,SACE,WAAW,UACb;AAAA,EACA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,eAAe;AAAA,IACtB,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA;AAAA,MAEtC,QAAQ;AAAA,MACR,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MAC9D,IAAI,OAAO;AAAA,QAAS,cAAc;AAAA,KACnC;AAAA,IAED,OAAO,MAAM,QAAQ,KAAK;AAAA,MACxB;AAAA,MACA,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAAA,QAC3B,OAAO,eAAe;AAAA,QAEtB,OAAO,UAAU,IAAI,EAAE,WAAW,OAAO,GAAG,KAAc;AAAA,OAC3D;AAAA,IACH,CAAC;AAAA,YACD;AAAA,IACA,IAAI;AAAA,MAAO,OAAO,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA;AAIxD,MAAM,8BAA8B,MAAM;AAAC;AAAA;AAE3C,MAAM,4BAA4B,MAAM;AAAC;AAEzC,IAAM,sBAAsB;AAAA,EAC1B,cACE;AAAA,EACF,WACE;AAAA,EACF,cAAc;AAAA,EACd,gBACE;AAAA,EACF,aAAa;AACf;AAEO,SAAS,sBAAsB,CAAC,OAAgB,UAAU,OAAO;AAAA,EACtE,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,EACF,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ,MAAM,WAAW,iBAAiB,MAAM;AAAA,MAChD,MAAM,UAAU,MAAM;AAAA,MACtB,SAAS,oBAAoB,MAAM;AAAA,IACrC;AAAA,EACF,MAAM,WAAW,WAAW,iBAAiB;AAAA,EAC7C,OAAO;AAAA,IACL,QAAQ,WAAW,MAAM;AAAA,IACzB,MAAM,WAAW,YAAY;AAAA,IAC7B,SAAS,WACL,gCACA;AAAA,EACN;AAAA;;;AC7KK,SAAS,iBAAiB,CAC/B,YACA,WACA;AAAA,EACA,eAAe,iBAAiB,CAAC,SAAqC;AAAA,IACpE,MAAM,YAAY,OAAO,WAAW;AAAA,IACpC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAAA,IAC/B,IAAI,CAAC,IAAI,SAAS,WAAW,YAAY;AAAA,MACvC,OAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD,MAAM,cAAc,IAAI,SAAS,MAAM,aAAa,MAAM;AAAA,IAC1D,IAAI,CAAC,eAAe,YAAY,SAAS,GAAG;AAAA,MAC1C,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,mBAAmB,WAAW;AAAA,MACrC,MAAM;AAAA,MACN,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA;AAAA,IAEvE,IAAI,CAAC,OAAO,OAAO,YAAY,IAAI;AAAA,MACjC,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI,QAAQ,WAAW;AAAA,MACrB,OAAO,QAAQ,KAAK,sBAAsB,aAAa,SAAS;AAAA,IAClE,IACE,QAAQ,QACL,IAAI,cAAc,GACjB,MAAM,GAAG,EAAE,IACX,KAAK,EACN,YAAY,MAAM;AAAA,MAErB,OAAO,QACL,KACA,0BACA,yBACA,SACF;AAAA,IACF,MAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAAA,IAC3C,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,IACG,WAAW,QAAQ,WAAW,IAAI,UAClC,cAAc,QAAQ,cAAc,iBACpC,cAAc,QAAQ,WAAW,QACjC,cAAc,QACb,cAAc,UACd,cAAc;AAAA,MAEhB,OAAO,QACL,KACA,wBACA,6CACA,SACF;AAAA,IACF,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,MAAM,UAAU,SAAS,IAAI;AAAA,MACtC,MAAM;AAAA,MACN,OAAO,QACL,KACA,aACA,uCACA,SACF;AAAA;AAAA,IAEF,MAAM,YAAY,WAAW;AAAA,IAC7B,IAAI;AAAA,IACJ,IAAI,QAAQ,OAAO;AAAA,MACjB,OAAO,QAAQ,KAAK,WAAW,+BAA+B,SAAS;AAAA,IACzE,IAAI;AAAA,MACF,MAAM,OAAO,MAAM,UAAU,OAAO;AAAA,MACpC,QAAQ,KAAK,MAAM,IAAI;AAAA,MACvB,OAAO,OAAO;AAAA,MACd,IAAI,iBAAiB;AAAA,QACnB,OAAO,QACL,KACA,mBACA,uBACA,SACF;AAAA,MAEF,OAAO,QACL,KACA,iBACA,kCACA,SACF;AAAA;AAAA,IAEF,MAAM,SAAS,QAAQ;AAAA,IACvB,IAAI;AAAA,MACF,QAAQ,mBAAmB,MAAM,qBAAqB,WAAW,OAAO;AAAA,QACtE,WAAW,OAAO;AAAA,QAClB,YAAY,OAAO;AAAA,QACnB;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB,CAAC;AAAA,MACD,OAAO,IAAI,SAAS,gBAAgB;AAAA,QAClC,SAAS;AAAA,UACP,iBAAiB;AAAA,UACjB,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,MAAM,SAAS,iBAAiB,kBAAkB,QAAQ;AAAA,MAC1D,QAAQ,MACN,kBAAkB,gBAAgB,eAAe,SAAS,GAAG,OAAO,SAAS,OAAO,SAAS,KAAK,OAAO,YAAY,KAAK,OAAO,YAAY,OAAO,OAAO,cAAc,OAAO,iBAAiB,QAAQ,MAAM,OAAO,WACxN;AAAA,MACA,MAAM,UAAU,uBAAuB,OAAO,OAAO,OAAO;AAAA,MAE5D,OAAO,QAAQ,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,SAAS,SAAS;AAAA;AAAA;AAAA,EAI3E,OAAO;AAAA;AAGT,SAAS,OAAO,CACd,QACA,MACA,SACA,WACU;AAAA,EACV,OAAO,SAAS,KACd,EAAE,OAAO,EAAE,MAAM,SAAS,UAAU,EAAE,GACtC,EAAE,QAAQ,SAAS,EAAE,iBAAiB,WAAW,EAAE,CACrD;AAAA;AAGF,IAAM,kBAAkB;AAAA;AACxB,MAAM,2BAA2B,MAAM;AAAC;AAGxC,eAAe,SAAS,CAAC,SAAmC;AAAA,EAC1D,MAAM,SAAS,QAAQ,MAAM,UAAU;AAAA,EACvC,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EACpB,MAAM,SAAuB,CAAC;AAAA,EAC9B,IAAI,OAAO;AAAA,EACX,IAAI;AAAA,EAEJ,SAAS,YAAY,GAAG;AAAA,IAEjB,OAAQ,OAAO,EAAE,MAAM,MAAM,EAAE;AAAA;AAAA,EAGtC,IAAI;AAAA,IACF,QAAQ,OAAO,eAAe;AAAA,IAC9B,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,QACpC,aAAa;AAAA;AAAA,MAEf,QAAQ;AAAA,MACR,QAAQ,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MACtE,IAAI,QAAQ,OAAO;AAAA,QAAS,cAAc;AAAA,KAC3C;AAAA,IACD,OAAO,MAAM;AAAA,MACX,QAAQ,MAAM,UAAU,MAAM,QAAQ,KAAK,CAAC,OAAO,KAAK,GAAG,SAAS,CAAC;AAAA,MACrE,IAAI;AAAA,QAAM;AAAA,MACV,QAAQ,MAAM;AAAA,MACd,IAAI,OAAO,iBAAiB;AAAA,QAC1B,aAAa;AAAA,QACb,MAAM,IAAI;AAAA,MACZ;AAAA,MACA,OAAO,KAAK,KAAK;AAAA,IACnB;AAAA,IACA,MAAM,QAAQ,IAAI,WAAW,IAAI;AAAA,IACjC,IAAI,SAAS;AAAA,IACb,WAAW,SAAS,QAAQ;AAAA,MAC1B,MAAM,IAAI,OAAO,MAAM;AAAA,MACvB,UAAU,MAAM;AAAA,IAClB;AAAA,IAEA,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,YACrC;AAAA,IACA,IAAI;AAAA,MAAO,QAAQ,OAAO,oBAAoB,SAAS,KAAK;AAAA,IAC5D,OAAO,YAAY;AAAA;AAAA;;;AClLhB,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO,OAAO,QAAQ,IAAI,QAAQ,KAAK;AAAA,GAMtC;AAAA,EACD,MAAM,SAAS,IAAI,MAAM;AAAA,IACvB,UAAU;AAAA,IACV;AAAA,IACA,aAAa;AAAA,IACb,aAAa;AAAA,IACb,QAAQ,EAAE,KAAK,KAAK;AAAA,IACpB,OAAO,kBAAkB,YAAY,aAAa;AAAA,MAChD,WAAW,eAAe;AAAA,MAC1B,gBAAgB;AAAA,IAClB,EAAE;AAAA,EACJ,CAAC;AAAA,EACD,QAAQ,IAAI,GAAG,oBAAoB,OAAO,KAAK;AAAA,EAE/C,OAAO;AAAA;AAIF,SAAS,cAAc,CAC5B,cAAkD,QAAQ,KAC1D,UAAwB,OACb;AAAA,EACX,OAAO;AAAA,SACC,SAAQ,CAAC,aAAa,OAAO,UAAU;AAAA,MAC3C,MAAM,WAAW,YAAY;AAAA,MAC7B,MAAM,aAAa,YAAY;AAAA,MAC/B,MAAM,WAAW,YAAY;AAAA,MAC7B,MAAM,WAAW,YAAY;AAAA,MAC7B,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;AAAA,QAC9B,MAAM,IAAI,gBAAgB,cAAc;AAAA,MAC1C,IAAI,YAAY,CAAC;AAAA,QAAY,MAAM,IAAI,gBAAgB,cAAc;AAAA,MACrE,MAAM,OACJ,YACA,YAAY,uBACZ;AAAA,MACF,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,WAAW,MAAM,QACf,IAAI,IAAI,SAAS,GAAG,KAAK,QAAQ,OAAO,EAAE,IAAI,GAC9C;AAAA,UACE,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,eAAe,WACX,UAAU,eACV,SAAS,OAAO,KAAK,GAAG,YAAY,UAAU,EAAE,SAAS,QAAQ;AAAA,YACrE,gBAAgB;AAAA,UAClB;AAAA,UACA,MAAM,KAAK,UAAU,EAAE,WAAW,MAAM,CAAC;AAAA,UACzC;AAAA,QACF,CACF;AAAA,QACA,OAAO,OAAO;AAAA,QACd,IAAI,OAAO;AAAA,UAAS,MAAM;AAAA,QAC1B,MAAM,IAAI,gBAAgB,aAAa;AAAA;AAAA,MAEzC,IAAI,CAAC,SAAS,IAAI;AAAA,QAChB,MAAM,SACJ,SAAS,WAAW,MAChB,iBACA,SAAS,WAAW,MAClB,cACA,SAAS,WAAW,MAClB,iBACA,SAAS,WAAW,OAAO,SAAS,WAAW,MAC7C,mBACA;AAAA,QACZ,MAAM,IAAI,gBAAgB,QAAQ,SAAS,MAAM;AAAA,MACnD;AAAA,MACA,MAAM,OAAO,MAAM,cAAc,QAAQ;AAAA,MAEzC,OAAO,iBAAiB,MAAM,KAAK;AAAA;AAAA,EAEvC;AAAA;AAGF,eAAe,aAAa,CAAC,UAAqC;AAAA,EAChE,MAAM,SAAS,SAAS,MAAM,UAAU;AAAA,EACxC,IAAI,CAAC;AAAA,IAAQ,MAAM,IAAI,MAAM,0BAA0B;AAAA,EACvD,MAAM,UAAU,IAAI;AAAA,EACpB,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,OAAO,MAAM;AAAA,IACX,MAAM,QAAQ,MAAM,OAAO,KAAK;AAAA,IAChC,IAAI,MAAM;AAAA,MAAM;AAAA,IAChB,SAAS,MAAM,MAAM;AAAA,IACrB,IAAI,QAAQ,SAAW;AAAA,MACrB,MAAM,OAAO,OAAO;AAAA,MACpB,MAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AAAA,IACA,QAAQ,QAAQ,OAAO,MAAM,OAAO,EAAE,QAAQ,KAAK,CAAC;AAAA,EACtD;AAAA,EACA,QAAQ,QAAQ,OAAO;AAAA,EAEvB,OAAO;AAAA;AAGT,SAAS,gBAAgB,CAAC,MAAc,OAA4B;AAAA,EAClE,MAAM,QAAQ,KACX,QAAQ,EACR,MAAM;AAAA,CAAI,EACV,OAAO,UAAQ,KAAK,KAAK,CAAC;AAAA,EAC7B,IAAI,CAAC,MAAM;AAAA,IAAQ,MAAM,IAAI,MAAM,0BAA0B;AAAA,EAC7D,MAAM,WAAoB,KAAK,MAAM,MAAM,EAAG;AAAA,EAC9C,IACE,CAAC,YACD,OAAO,aAAa,YACpB,MAAM,QAAQ,QAAQ,KACrB,cAAc,YACb,SAAS,aAAa,aACtB,OAAO,SAAS,aAAa;AAAA,IAE/B,MAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C,MAAM,UACJ,cAAc,WACT,SAAS,WACV;AAAA,EACN,IAAI,gBAAgB;AAAA,EACpB,IAAI,UAAkC,CAAC;AAAA,EACvC,IAAI,MAAM,gBAAgB;AAAA,IACxB,MAAM,oBAAoB,KAAK,MAAM,MAAM,cAAe;AAAA,IAC1D,IACE,MAAM,QAAQ,iBAAiB,KAC/B,kBAAkB,MAChB,WACE,OAAO,UAAU,YAChB,OAAO,UAAU,YAAY,UAAU,SAAQ,UAAU,MAC9D,GACA;AAAA,MACA,UAAU,kBAAkB,IAAI,WAC9B,OAAO,UAAU,WAAW,EAAE,MAAM,MAAM,IAAI,YAAY,KAAK,CACjE;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,MAAM,MAAM,aAAa,EAAE,IAAI,UAAQ;AAAA,IAClD,MAAM,MAAe,KAAK,MAAM,IAAI;AAAA,IACpC,IACE,CAAC,MAAM,QAAQ,GAAG,KACjB,kBAAkB,KAAK,IAAI,WAAW,QAAQ;AAAA,MAE/C,MAAM,IAAI,MAAM,oBAAoB;AAAA,IAEtC,OAAO;AAAA,GACR;AAAA,EACD,IAAI,KAAK,SAAS;AAAA,IAChB,MAAM,IAAI,MAAM,8CAA8C;AAAA,EAEhE,OAAO,EAAE,SAAS,MAAM,QAAQ;AAAA;AAGlC,SAAS,WAAW,CAAC,OAAgD;AAAA,EACnE,IACE,CAAC,SACD,OAAO,UAAU,YACjB,EAAE,UAAU,UACZ,OAAO,MAAM,SAAS,YACrB,UAAU,SACT,MAAM,SAAS,aACf,OAAO,MAAM,SAAS;AAAA,IAExB,MAAM,IAAI,MAAM,uBAAuB;AAAA,EAEzC,OAAO;AAAA,IACL,MAAM,MAAM;AAAA,OACR,UAAU,SAAS,MAAM,SAAS,YAClC,EAAE,MAAM,MAAM,KAAe,IAC7B,CAAC;AAAA,EACP;AAAA;",
-  "debugId": "FB183031B1F856D564756E2164756E21",
+  "mappings": ";;AAKA;AA+RA,IAAM,mBAAmB,OAAO,IAAI,sCAAsC;AAAA;AAEnE,MAAM,wBAAwB,MAAM;AAAA,EAYvB;AAAA,EAMA;AAAA,GAjBR,oBAAoB;AAAA,EAC9B;AAAA,UAEQ,OAAO,YAAY,CAAC,OAAyB;AAAA,IACnD,OACE,iBAAiB,SAChB,MAA2C,sBAAsB;AAAA;AAAA,EAItE,WAAW,CACO,QAMA,QAChB;AAAA,IACA,MAAM,eAAe,SAAS,SAAS,KAAK,YAAY,KAAK;AAAA,IAR7C;AAAA,IAMA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;;;AC1SA,eAAsB,oBAAoB,CACxC,WACA;AAAA,EAEE;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,GAEF;AAAA,EACA,cAAc,eAAe;AAAA,EAC7B,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,QAAQ,UAAU,MAAM,KAAK;AAAA,IAC7B,MAAM;AAAA,IACN,MAAM,IAAI;AAAA;AAAA,EAGZ,MAAM,SAAS,YAAY,IAAI;AAAA,IAC7B;AAAA,IACA,YAAY,QAAQ,UAAU,OAAO,aAAa;AAAA,EACpD,CAAC;AAAA,EACD,MAAM,YAAY,yBAChB,WACA,WACA,QACA,aACF;AAAA,EACA,IAAI;AAAA,IACF,MAAM,SAAS,MAAM,aAAa,WAAW,OAAO;AAAA,MAClD,WAAW,UAAU;AAAA,MACrB;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,MAAM,OAA+B;AAAA,MACnC,MAAM,UAAU,OAAO,MAAM;AAAA,MAC7B;AAAA,MACA,WAAW,IAAI,KAAK,EAAE,YAAY;AAAA,MAClC,UAAU,UAAU;AAAA,MACpB,SAAS,UAAU;AAAA,IACrB;AAAA,IACA,MAAM,iBAAiB,KAAK,UAAU,IAAI;AAAA,IAC1C,MAAM,gBAAgB,IAAI,YAAY,EAAE,OAAO,cAAc,EAAE;AAAA,IAC/D,IAAI,iBAAiB,UAAU,OAAO,oBAAoB;AAAA,MACxD,MAAM,IAAI,MAAM,8BAA8B;AAAA,IAEhD,OAAO,EAAE,MAAM,eAAe;AAAA,IAC9B,OAAO,OAAO;AAAA,IACd,IAAI,OAAO,WAAW,EAAE,iBAAiB;AAAA,MACvC,MAAM,IAAI;AAAA,IACZ,MAAM;AAAA;AAAA;AAKV,SAAS,wBAAwB,CAC/B,WACA,QACA,QACA,eACA;AAAA,EACA,MAAM,WAAqB,CAAC;AAAA,EAC5B,MAAM,UAA4B,CAAC;AAAA,EACnC,MAAM,YAAuB;AAAA,SACrB,SAAQ,CAAC,WAAW,SAAS;AAAA,MACjC,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,QAAQ,QAAQ;AAAA,QACtD,MAAM,IAAI,MAAM,mCAAmC;AAAA,MACrD,IACE,UAAU,cACV,CAAC,OAAO,OAAO,UAAU,UAAU,EAAE,SAAS,QAAQ,QAAQ,EAAE;AAAA,QAEhE,MAAM,IAAI,MACR,8CAA8C,gBAChD;AAAA,MACF,MAAM,QAAwB;AAAA,QAC5B,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS;AAAA,QAChD;AAAA,WACI,QAAQ,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;AAAA,MACnE;AAAA,MACA,QAAQ,KAAK,KAAK;AAAA,MAClB,MAAM,QAAQ,KAAK,IAAI,QAAQ,OAAO,UAAU,OAAO,YAAY;AAAA,MACnE,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,SAAS,MAAM,OAAO,SAAS,WAAW;AAAA,UACxC;AAAA,aACI,QAAQ,WAAW,YAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;AAAA,UACjE,QAAQ,YAAY,IAAI,CAAC,QAAQ,QAAQ,MAAM,CAAC;AAAA,QAClD,CAAC;AAAA,QACD,OAAO,OAAO;AAAA,QACd,IAAI,iBAAiB;AAAA,UAAiB,MAAM,YAAY,MAAM;AAAA,QAC9D,MAAM;AAAA;AAAA,MAER,IAAI,OAAO,KAAK,SAAS;AAAA,QACvB,MAAM,IAAI,MAAM,2BAA2B;AAAA,MAC7C,IAAI,OAAO,SAAS;AAAA,QAClB,MAAM,UAAU,OAAO;AAAA,QACvB,SAAS,KAAK,OAAO,OAAO;AAAA,MAC9B;AAAA,MAEA,OAAO;AAAA;AAAA,EAEX;AAAA,EAEA,OAAO,EAAE,WAAW,SAAS,SAAS;AAAA;AAIxC,eAAe,YAAY,CACzB,WACA,SACE,WAAW,QAAQ,eACrB;AAAA,EACA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,OAAO,eAAe;AAAA,IACtB,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA;AAAA,MAEtC,QAAQ;AAAA,MACR,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MAC9D,IAAI,OAAO;AAAA,QAAS,cAAc;AAAA,KACnC;AAAA,IAED,OAAO,MAAM,QAAQ,KAAK;AAAA,MACxB;AAAA,MACA,QAAQ,QAAQ,EAAE,KAAK,MAAM;AAAA,QAC3B,OAAO,eAAe;AAAA,QAEtB,OAAO,UAAU,IACf,EAAE,WAAW,QAAQ,YAAY,GACjC,KACF;AAAA,OACD;AAAA,IACH,CAAC;AAAA,YACD;AAAA,IACA,IAAI;AAAA,MAAO,OAAO,oBAAoB,SAAS,KAAK;AAAA;AAAA;AAAA;AAIxD,MAAM,8BAA8B,MAAM;AAAC;AAAA;AAE3C,MAAM,4BAA4B,MAAM;AAAC;AAEzC,IAAM,sBAAsB;AAAA,EAC1B,cACE;AAAA,EACF,WACE;AAAA,EACF,cAAc;AAAA,EACd,gBACE;AAAA,EACF,aAAa;AACf;AAEO,SAAS,sBAAsB,CAAC,OAAgB,UAAU,OAAO;AAAA,EACtE,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAAA,EACF,IAAI,iBAAiB;AAAA,IACnB,OAAO;AAAA,MACL,QAAQ,MAAM,WAAW,iBAAiB,MAAM;AAAA,MAChD,MAAM,UAAU,MAAM;AAAA,MACtB,SAAS,oBAAoB,MAAM;AAAA,IACrC;AAAA,EACF,MAAM,WAAW,WAAW,iBAAiB;AAAA,EAC7C,OAAO;AAAA,IACL,QAAQ,WAAW,MAAM;AAAA,IACzB,MAAM,WAAW,YAAY;AAAA,IAC7B,SAAS,WACL,gCACA;AAAA,EACN;AAAA;;;AC5KK,SAAS,iBAAiB,CAC/B,YACA,WACA;AAAA,EACA,eAAe,iBAAiB,CAAC,SAAqC;AAAA,IACpE,MAAM,YAAY,OAAO,WAAW;AAAA,IACpC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAAA,IAC/B,IAAI,CAAC,IAAI,SAAS,WAAW,YAAY;AAAA,MACvC,OAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClD,MAAM,cAAc,IAAI,SAAS,MAAM,aAAa,MAAM;AAAA,IAC1D,IAAI,CAAC,eAAe,YAAY,SAAS,GAAG;AAAA,MAC1C,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,OAAO,mBAAmB,WAAW;AAAA,MACrC,MAAM;AAAA,MACN,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA;AAAA,IAEvE,IAAI,CAAC,OAAO,OAAO,YAAY,IAAI;AAAA,MACjC,OAAO,QAAQ,KAAK,aAAa,2BAA2B,SAAS;AAAA,IACvE,IAAI,QAAQ,WAAW;AAAA,MACrB,OAAO,QAAQ,KAAK,sBAAsB,aAAa,SAAS;AAAA,IAClE,IACE,QAAQ,QACL,IAAI,cAAc,GACjB,MAAM,GAAG,EAAE,IACX,KAAK,EACN,YAAY,MAAM;AAAA,MAErB,OAAO,QACL,KACA,0BACA,yBACA,SACF;AAAA,IACF,MAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAAA,IAC3C,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,MAAM,YAAY,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IACtD,IACG,WAAW,QAAQ,WAAW,IAAI,UAClC,cAAc,QAAQ,cAAc,iBACpC,cAAc,QAAQ,WAAW,QACjC,cAAc,QACb,cAAc,UACd,cAAc;AAAA,MAEhB,OAAO,QACL,KACA,wBACA,6CACA,SACF;AAAA,IACF,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,MAAM,UAAU,SAAS,IAAI;AAAA,MACtC,MAAM;AAAA,MACN,OAAO,QACL,KACA,aACA,uCACA,SACF;AAAA;AAAA,IAEF,MAAM,YAAY,WAAW;AAAA,IAC7B,IAAI;AAAA,IACJ,IAAI,QAAQ,OAAO;AAAA,MACjB,OAAO,QAAQ,KAAK,WAAW,+BAA+B,SAAS;AAAA,IACzE,IAAI;AAAA,MACF,MAAM,OAAO,MAAM,UAAU,OAAO;AAAA,MACpC,QAAQ,KAAK,MAAM,IAAI;AAAA,MACvB,OAAO,OAAO;AAAA,MACd,IAAI,iBAAiB;AAAA,QACnB,OAAO,QACL,KACA,mBACA,uBACA,SACF;AAAA,MAEF,OAAO,QACL,KACA,iBACA,kCACA,SACF;AAAA;AAAA,IAEF,MAAM,SAAS,QAAQ;AAAA,IACvB,IAAI;AAAA,MACF,QAAQ,mBAAmB,MAAM,qBAAqB,WAAW,OAAO;AAAA,QACtE,WAAW,OAAO;AAAA,QAClB;AAAA,QACA;AAAA,QACA,eAAe;AAAA,QACf,aAAa,OAAO;AAAA,MACtB,CAAC;AAAA,MACD,OAAO,IAAI,SAAS,gBAAgB;AAAA,QAClC,SAAS;AAAA,UACP,iBAAiB;AAAA,UACjB,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,MACD,OAAO,OAAO;AAAA,MACd,MAAM,SAAS,iBAAiB,kBAAkB,QAAQ;AAAA,MAC1D,QAAQ,MACN,kBAAkB,gBAAgB,eAAe,SAAS,GAAG,OAAO,SAAS,OAAO,SAAS,KAAK,OAAO,YAAY,KAAK,OAAO,YAAY,OAAO,OAAO,cAAc,OAAO,iBAAiB,QAAQ,MAAM,OAAO,WACxN;AAAA,MACA,MAAM,UAAU,uBAAuB,OAAO,OAAO,OAAO;AAAA,MAE5D,OAAO,QAAQ,QAAQ,QAAQ,QAAQ,MAAM,QAAQ,SAAS,SAAS;AAAA;AAAA;AAAA,EAI3E,OAAO;AAAA;AAGT,SAAS,OAAO,CACd,QACA,MACA,SACA,WACU;AAAA,EACV,OAAO,SAAS,KACd,EAAE,OAAO,EAAE,MAAM,SAAS,UAAU,EAAE,GACtC,EAAE,QAAQ,SAAS,EAAE,iBAAiB,WAAW,EAAE,CACrD;AAAA;AAGF,IAAM,kBAAkB;AAAA;AACxB,MAAM,2BAA2B,MAAM;AAAC;AAGxC,eAAe,SAAS,CAAC,SAAmC;AAAA,EAC1D,MAAM,SAAS,QAAQ,MAAM,UAAU;AAAA,EACvC,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EACpB,MAAM,SAAuB,CAAC;AAAA,EAC9B,IAAI,OAAO;AAAA,EACX,IAAI;AAAA,EAEJ,SAAS,YAAY,GAAG;AAAA,IAEjB,OAAQ,OAAO,EAAE,MAAM,MAAM,EAAE;AAAA;AAAA,EAGtC,IAAI;AAAA,IACF,QAAQ,OAAO,eAAe;AAAA,IAC9B,MAAM,YAAY,IAAI,QAAe,CAAC,GAAG,WAAW;AAAA,MAClD,SAAS,aAAa,GAAG;AAAA,QACvB,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,QACpC,aAAa;AAAA;AAAA,MAEf,QAAQ;AAAA,MACR,QAAQ,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,MACtE,IAAI,QAAQ,OAAO;AAAA,QAAS,cAAc;AAAA,KAC3C;AAAA,IACD,OAAO,MAAM;AAAA,MACX,QAAQ,MAAM,UAAU,MAAM,QAAQ,KAAK,CAAC,OAAO,KAAK,GAAG,SAAS,CAAC;AAAA,MACrE,IAAI;AAAA,QAAM;AAAA,MACV,QAAQ,MAAM;AAAA,MACd,IAAI,OAAO,iBAAiB;AAAA,QAC1B,aAAa;AAAA,QACb,MAAM,IAAI;AAAA,MACZ;AAAA,MACA,OAAO,KAAK,KAAK;AAAA,IACnB;AAAA,IACA,MAAM,QAAQ,IAAI,WAAW,IAAI;AAAA,IACjC,IAAI,SAAS;AAAA,IACb,WAAW,SAAS,QAAQ;AAAA,MAC1B,MAAM,IAAI,OAAO,MAAM;AAAA,MACvB,UAAU,MAAM;AAAA,IAClB;AAAA,IAEA,OAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,YACrC;AAAA,IACA,IAAI;AAAA,MAAO,QAAQ,OAAO,oBAAoB,SAAS,KAAK;AAAA,IAC5D,OAAO,YAAY;AAAA;AAAA;;;ACtLhB,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO,OAAO,QAAQ,IAAI,QAAQ,KAAK;AAAA,GAMtC;AAAA,EACD,MAAM,SAAS,IAAI,MAAM;AAAA,IACvB,UAAU;AAAA,IACV;AAAA,IACA,aAAa;AAAA,IACb,aAAa;AAAA,IACb,QAAQ,EAAE,KAAK,KAAK;AAAA,IACpB,OAAO,kBAAkB,YAAY,aAAa;AAAA,MAChD,WAAW,eAAe;AAAA,IAC5B,EAAE;AAAA,EACJ,CAAC;AAAA,EACD,QAAQ,IAAI,GAAG,oBAAoB,OAAO,KAAK;AAAA,EAE/C,OAAO;AAAA;AAIF,SAAS,cAAc,CAC5B,cAAkD,QAAQ,KAC1D,UAAwB,OACb;AAAA,EACX,OAAO;AAAA,SACC,SAAQ,CAAC,aAAa,OAAO,QAAQ,UAAU;AAAA,MACnD,MAAM,WAAW,YAAY;AAAA,MAC7B,MAAM,aAAa,YAAY;AAAA,MAC/B,MAAM,WAAW,YAAY;AAAA,MAC7B,MAAM,WAAW,YAAY;AAAA,MAC7B,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;AAAA,QAC9B,MAAM,IAAI,gBAAgB,cAAc;AAAA,MAC1C,IAAI,YAAY,CAAC;AAAA,QAAY,MAAM,IAAI,gBAAgB,cAAc;AAAA,MACrE,MAAM,OACJ,YACA,YAAY,uBACZ;AAAA,MACF,IAAI;AAAA,MACJ,IAAI;AAAA,QACF,WAAW,MAAM,QACf,IAAI,IAAI,SAAS,GAAG,KAAK,QAAQ,OAAO,EAAE,IAAI,GAC9C;AAAA,UACE,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,eAAe,WACX,UAAU,eACV,SAAS,OAAO,KAAK,GAAG,YAAY,UAAU,EAAE,SAAS,QAAQ;AAAA,YACrE,gBAAgB;AAAA,UAClB;AAAA,UACA,MAAM,KAAK,UAAU;AAAA,YACnB;AAAA,YACA;AAAA,eACI,WAAW,YAAY,CAAC,IAAI,EAAE,OAAO;AAAA,UAC3C,CAAC;AAAA,UACD;AAAA,QACF,CACF;AAAA,QACA,OAAO,OAAO;AAAA,QACd,IAAI,OAAO;AAAA,UAAS,MAAM;AAAA,QAC1B,MAAM,IAAI,gBAAgB,aAAa;AAAA;AAAA,MAEzC,IAAI,CAAC,SAAS,IAAI;AAAA,QAChB,MAAM,SACJ,SAAS,WAAW,MAChB,iBACA,SAAS,WAAW,MAClB,cACA,SAAS,WAAW,MAClB,iBACA,SAAS,WAAW,OAAO,SAAS,WAAW,MAC7C,mBACA;AAAA,QACZ,MAAM,IAAI,gBAAgB,QAAQ,SAAS,MAAM;AAAA,MACnD;AAAA,MACA,MAAM,OAAO,MAAM,cAAc,QAAQ;AAAA,MAEzC,OAAO,iBAAiB,MAAM,KAAK;AAAA;AAAA,EAEvC;AAAA;AAGF,eAAe,aAAa,CAAC,UAAqC;AAAA,EAChE,MAAM,SAAS,SAAS,MAAM,UAAU;AAAA,EACxC,IAAI,CAAC;AAAA,IAAQ,MAAM,IAAI,MAAM,0BAA0B;AAAA,EACvD,MAAM,UAAU,IAAI;AAAA,EACpB,IAAI,OAAO;AAAA,EACX,IAAI,QAAQ;AAAA,EACZ,OAAO,MAAM;AAAA,IACX,MAAM,QAAQ,MAAM,OAAO,KAAK;AAAA,IAChC,IAAI,MAAM;AAAA,MAAM;AAAA,IAChB,SAAS,MAAM,MAAM;AAAA,IACrB,IAAI,QAAQ,SAAW;AAAA,MACrB,MAAM,OAAO,OAAO;AAAA,MACpB,MAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AAAA,IACA,QAAQ,QAAQ,OAAO,MAAM,OAAO,EAAE,QAAQ,KAAK,CAAC;AAAA,EACtD;AAAA,EACA,QAAQ,QAAQ,OAAO;AAAA,EAEvB,OAAO;AAAA;AAGT,SAAS,gBAAgB,CAAC,MAAc,OAA4B;AAAA,EAClE,MAAM,QAAQ,KACX,QAAQ,EACR,MAAM;AAAA,CAAI,EACV,OAAO,UAAQ,KAAK,KAAK,CAAC;AAAA,EAC7B,IAAI,CAAC,MAAM;AAAA,IAAQ,MAAM,IAAI,MAAM,0BAA0B;AAAA,EAC7D,MAAM,WAAoB,KAAK,MAAM,MAAM,EAAG;AAAA,EAC9C,IACE,CAAC,YACD,OAAO,aAAa,YACpB,MAAM,QAAQ,QAAQ,KACrB,cAAc,YACb,SAAS,aAAa,aACtB,OAAO,SAAS,aAAa;AAAA,IAE/B,MAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C,MAAM,UACJ,cAAc,WACT,SAAS,WACV;AAAA,EACN,IAAI,gBAAgB;AAAA,EACpB,IAAI,UAAkC,CAAC;AAAA,EACvC,IAAI,MAAM,gBAAgB;AAAA,IACxB,MAAM,oBAAoB,KAAK,MAAM,MAAM,cAAe;AAAA,IAC1D,IACE,MAAM,QAAQ,iBAAiB,KAC/B,kBAAkB,MAChB,WACE,OAAO,UAAU,YAChB,OAAO,UAAU,YAAY,UAAU,SAAQ,UAAU,MAC9D,GACA;AAAA,MACA,UAAU,kBAAkB,IAAI,WAC9B,OAAO,UAAU,WAAW,EAAE,MAAM,MAAM,IAAI,YAAY,KAAK,CACjE;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,MAAM,MAAM,aAAa,EAAE,IAAI,UAAQ;AAAA,IAClD,MAAM,MAAe,KAAK,MAAM,IAAI;AAAA,IACpC,IACE,CAAC,MAAM,QAAQ,GAAG,KACjB,kBAAkB,KAAK,IAAI,WAAW,QAAQ;AAAA,MAE/C,MAAM,IAAI,MAAM,oBAAoB;AAAA,IAEtC,OAAO;AAAA,GACR;AAAA,EACD,IAAI,KAAK,SAAS;AAAA,IAChB,MAAM,IAAI,MAAM,8CAA8C;AAAA,EAEhE,OAAO,EAAE,SAAS,MAAM,QAAQ;AAAA;AAGlC,SAAS,WAAW,CAAC,OAAgD;AAAA,EACnE,IACE,CAAC,SACD,OAAO,UAAU,YACjB,EAAE,UAAU,UACZ,OAAO,MAAM,SAAS,YACrB,UAAU,SACT,MAAM,SAAS,aACf,OAAO,MAAM,SAAS;AAAA,IAExB,MAAM,IAAI,MAAM,uBAAuB;AAAA,EAEzC,OAAO;AAAA,IACL,MAAM,MAAM;AAAA,OACR,UAAU,SAAS,MAAM,SAAS,YAClC,EAAE,MAAM,MAAM,KAAe,IAC7B,CAAC;AAAA,EACP;AAAA;",
+  "debugId": "E6005345F1D6B04A64756E2164756E21",
   "names": []
 }

package/dist/react/embed/index.js

@@ -1,6 +1,6 @@
 import {
   attachDataAppBridge2
-} from "../../chunks/contract-h8a6f559.js";
+} from "../../chunks/index-dq7b35fn.js";
 
 // src/react/embed/bridge.tsx
 import {

package/dist/react/embed/index.js.map

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["../src/react/embed/bridge.tsx"],
   "sourcesContent": [
-    "import {\n  useRef,\n  useLayoutEffect,\n  useEffect,\n  useState,\n  type ComponentRef,\n  type ComponentPropsWithoutRef,\n} from 'react';\nimport {\n  attachDataAppBridge,\n  type DataAppBridgeOptions,\n} from '@/src/embed/bridge';\nimport type { DataAppConnection, DataAppHost } from '@/src/embed/host';\nimport type { DataAppSource } from '@/src/embed/source';\n\nexport type DataAppBridgeProps = Pick<\n  DataAppBridgeOptions,\n  'onMessage' | 'onStatusChange' | 'onDiagnostic' | 'presentation' | 'logger'\n> &\n  (\n    | {\n        source: DataAppSource;\n        title: string;\n        startupTimeoutMs?: number;\n        iframeProps?: Omit<\n          ComponentPropsWithoutRef<'iframe'>,\n          | 'src'\n          | 'srcDoc'\n          | 'sandbox'\n          | 'referrerPolicy'\n          | 'loading'\n          | 'children'\n          | 'title'\n        >;\n        iframe?: never;\n        connection?: never;\n      }\n    | {\n        iframe: ComponentRef<'iframe'> | null;\n        connection: DataAppConnection;\n        source?: never;\n        title?: never;\n        startupTimeoutMs?: never;\n        iframeProps?: never;\n      }\n  );\n\n/** Owns iframe setup and delivery. The consuming shell owns loading, error UI, and retries. */\nexport function DataAppBridge(props: DataAppBridgeProps) {\n  if (props.source) {\n    const source = props.source;\n    const identity = JSON.stringify(\n      source.type === 'url'\n        ? [source.type, source.url]\n        : [source.type, source.bootstrapUrl, source.javascript]\n    );\n\n    return <SourceBridge key={identity} {...props} />;\n  }\n\n  return <ConnectionBridge {...props} />;\n}\n\ntype SourceBridgeProps = Extract<DataAppBridgeProps, { source: DataAppSource }>;\ntype ConnectionBridgeProps = Extract<\n  DataAppBridgeProps,\n  { connection: DataAppConnection }\n>;\n\nfunction useBridgeState(props: DataAppBridgeProps) {\n  const hostRef = useRef<DataAppHost | undefined>(undefined);\n  const handlers = useRef(props);\n\n  useLayoutEffect(() => {\n    handlers.current = props;\n  });\n\n  useEffect(() => {\n    hostRef.current?.setPresentation(props.presentation);\n    hostRef.current?.setLogger(props.logger);\n  });\n\n  return { hostRef, handlers };\n}\n\nfunction SourceBridge(props: SourceBridgeProps) {\n  const { source, title, iframeProps, startupTimeoutMs } = props;\n  const [iframe, setIframe] = useState<ComponentRef<'iframe'> | null>(null);\n  const { hostRef, handlers } = useBridgeState(props);\n  const type = source.type;\n  const url = source.type === 'url' ? source.url : source.bootstrapUrl;\n  const javascript = source.type === 'bundle' ? source.javascript : undefined;\n\n  useEffect(() => {\n    if (!iframe) return;\n\n    const bridge = attachDataAppBridge({\n      iframe,\n      source:\n        type === 'url'\n          ? { type, url }\n          : {\n              type,\n              bootstrapUrl: url,\n              javascript: javascript!,\n            },\n      startupTimeoutMs,\n      presentation: handlers.current.presentation,\n      logger: handlers.current.logger,\n      onMessage(request, context) {\n        return handlers.current.onMessage(request, context);\n      },\n      onStatusChange(status) {\n        return handlers.current.onStatusChange?.(status);\n      },\n      onDiagnostic(event) {\n        return handlers.current.onDiagnostic?.(event);\n      },\n    });\n    hostRef.current = bridge;\n\n    return () => {\n      hostRef.current = undefined;\n      bridge.dispose();\n    };\n  }, [iframe, type, url, javascript, startupTimeoutMs, hostRef, handlers]);\n\n  return (\n    <iframe {...iframeProps} loading=\"eager\" ref={setIframe} title={title} />\n  );\n}\n\nfunction ConnectionBridge(props: ConnectionBridgeProps) {\n  const { iframe, connection } = props;\n  const { hostRef, handlers } = useBridgeState(props);\n  const identity =\n    connection.type === 'origin' ? connection.origin : connection.token;\n  const type = connection.type;\n\n  useEffect(() => {\n    const host = iframe?.ownerDocument.defaultView;\n    if (!iframe || !host) return;\n\n    const bridge = attachDataAppBridge({\n      iframe,\n      connection:\n        type === 'origin'\n          ? { type, origin: identity }\n          : { type, token: identity },\n      window: host,\n      presentation: handlers.current.presentation,\n      logger: handlers.current.logger,\n      onMessage(request, context) {\n        return handlers.current.onMessage(request, context);\n      },\n      onStatusChange(status) {\n        return handlers.current.onStatusChange?.(status);\n      },\n      onDiagnostic(event) {\n        return handlers.current.onDiagnostic?.(event);\n      },\n    });\n    hostRef.current = bridge;\n\n    return () => {\n      hostRef.current = undefined;\n      bridge.dispose();\n    };\n  }, [iframe, type, identity, hostRef, handlers]);\n\n  return null;\n}\n"
+    "import {\n  useRef,\n  useLayoutEffect,\n  useEffect,\n  useState,\n  type ComponentRef,\n  type ComponentPropsWithoutRef,\n} from 'react';\nimport {\n  attachDataAppBridge,\n  type DataAppBridgeOptions,\n} from '@/src/embed/bridge';\nimport type { DataAppConnection, DataAppHost } from '@/src/embed/host';\nimport type { DataAppSource } from '@/src/embed/source';\n\nexport type DataAppBridgeProps = Pick<\n  DataAppBridgeOptions,\n  'onMessage' | 'onStatusChange' | 'onDiagnostic' | 'presentation' | 'logger'\n> &\n  (\n    | {\n        source: DataAppSource;\n        title: string;\n        startupTimeoutMs?: number;\n        iframeProps?: Omit<\n          ComponentPropsWithoutRef<'iframe'>,\n          | 'src'\n          | 'srcDoc'\n          | 'sandbox'\n          | 'referrerPolicy'\n          | 'loading'\n          | 'children'\n          | 'title'\n        >;\n        iframe?: never;\n        connection?: never;\n      }\n    | {\n        iframe: ComponentRef<'iframe'> | null;\n        connection: DataAppConnection;\n        source?: never;\n        title?: never;\n        startupTimeoutMs?: never;\n        iframeProps?: never;\n      }\n  );\n\n/** Owns iframe setup and delivery. The consuming shell owns loading, error UI, and retries. */\nexport function DataAppBridge(props: DataAppBridgeProps) {\n  if (props.source) {\n    const source = props.source;\n    const identity = JSON.stringify(\n      source.type === 'url'\n        ? [source.type, source.url]\n        : [source.type, source.bootstrapUrl, source.javascript]\n    );\n\n    return <SourceBridge key={identity} {...props} />;\n  }\n\n  return <ConnectionBridge {...props} />;\n}\n\ntype SourceBridgeProps = Extract<DataAppBridgeProps, { source: DataAppSource }>;\ntype ConnectionBridgeProps = Extract<\n  DataAppBridgeProps,\n  { connection: DataAppConnection }\n>;\n\nfunction useBridgeState(props: DataAppBridgeProps) {\n  const hostRef = useRef<DataAppHost | undefined>(undefined);\n  const handlers = useRef(props);\n\n  useLayoutEffect(() => {\n    handlers.current = props;\n  });\n\n  useEffect(() => {\n    hostRef.current?.setPresentation(props.presentation);\n    hostRef.current?.setLogger(props.logger);\n  });\n\n  return { hostRef, handlers };\n}\n\nfunction SourceBridge(props: SourceBridgeProps) {\n  const { source, title, iframeProps, startupTimeoutMs } = props;\n  const [iframe, setIframe] = useState<ComponentRef<'iframe'> | null>(null);\n  const { hostRef, handlers } = useBridgeState(props);\n  const type = source.type;\n  const url = source.type === 'url' ? source.url : source.bootstrapUrl;\n  const javascript = source.type === 'bundle' ? source.javascript : undefined;\n\n  useEffect(() => {\n    if (!iframe) return;\n\n    const bridge = attachDataAppBridge({\n      iframe,\n      source:\n        type === 'url'\n          ? { type, url: url! }\n          : {\n              type,\n              bootstrapUrl: url,\n              javascript: javascript!,\n            },\n      startupTimeoutMs,\n      presentation: handlers.current.presentation,\n      logger: handlers.current.logger,\n      onMessage(request, context) {\n        return handlers.current.onMessage(request, context);\n      },\n      onStatusChange(status) {\n        return handlers.current.onStatusChange?.(status);\n      },\n      onDiagnostic(event) {\n        return handlers.current.onDiagnostic?.(event);\n      },\n    });\n    hostRef.current = bridge;\n\n    return () => {\n      hostRef.current = undefined;\n      bridge.dispose();\n    };\n  }, [iframe, type, url, javascript, startupTimeoutMs, hostRef, handlers]);\n\n  return (\n    <iframe {...iframeProps} loading=\"eager\" ref={setIframe} title={title} />\n  );\n}\n\nfunction ConnectionBridge(props: ConnectionBridgeProps) {\n  const { iframe, connection } = props;\n  const { hostRef, handlers } = useBridgeState(props);\n  const identity =\n    connection.type === 'origin' ? connection.origin : connection.token;\n  const type = connection.type;\n\n  useEffect(() => {\n    const host = iframe?.ownerDocument.defaultView;\n    if (!iframe || !host) return;\n\n    const bridge = attachDataAppBridge({\n      iframe,\n      connection:\n        type === 'origin'\n          ? { type, origin: identity }\n          : { type, token: identity },\n      window: host,\n      presentation: handlers.current.presentation,\n      logger: handlers.current.logger,\n      onMessage(request, context) {\n        return handlers.current.onMessage(request, context);\n      },\n      onStatusChange(status) {\n        return handlers.current.onStatusChange?.(status);\n      },\n      onDiagnostic(event) {\n        return handlers.current.onDiagnostic?.(event);\n      },\n    });\n    hostRef.current = bridge;\n\n    return () => {\n      hostRef.current = undefined;\n      bridge.dispose();\n    };\n  }, [iframe, type, identity, hostRef, handlers]);\n\n  return null;\n}\n"
   ],
-  "mappings": ";;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAgDO,SAAS,aAAa,CAAC,OAA2B;AAAA,EACvD,IAAI,MAAM,QAAQ;AAAA,IAChB,MAAM,SAAS,MAAM;AAAA,IACrB,MAAM,WAAW,KAAK,UACpB,OAAO,SAAS,QACZ,CAAC,OAAO,MAAM,OAAO,GAAG,IACxB,CAAC,OAAO,MAAM,OAAO,cAAc,OAAO,UAAU,CAC1D;AAAA,IAEA,uBAAO,IAAC,cAAD;AAAA,SAAiC;AAAA,OAAd,QAAqB;AAAA,EACjD;AAAA,EAEA,uBAAO,IAAC,kBAAD;AAAA,OAAsB;AAAA,GAAO;AAAA;AAStC,SAAS,cAAc,CAAC,OAA2B;AAAA,EACjD,MAAM,UAAU,OAAgC,SAAS;AAAA,EACzD,MAAM,WAAW,OAAO,KAAK;AAAA,EAE7B,gBAAgB,MAAM;AAAA,IACpB,SAAS,UAAU;AAAA,GACpB;AAAA,EAED,UAAU,MAAM;AAAA,IACd,QAAQ,SAAS,gBAAgB,MAAM,YAAY;AAAA,IACnD,QAAQ,SAAS,UAAU,MAAM,MAAM;AAAA,GACxC;AAAA,EAED,OAAO,EAAE,SAAS,SAAS;AAAA;AAG7B,SAAS,YAAY,CAAC,OAA0B;AAAA,EAC9C,QAAQ,QAAQ,OAAO,aAAa,qBAAqB;AAAA,EACzD,OAAO,QAAQ,aAAa,SAAwC,IAAI;AAAA,EACxE,QAAQ,SAAS,aAAa,eAAe,KAAK;AAAA,EAClD,MAAM,OAAO,OAAO;AAAA,EACpB,MAAM,MAAM,OAAO,SAAS,QAAQ,OAAO,MAAM,OAAO;AAAA,EACxD,MAAM,aAAa,OAAO,SAAS,WAAW,OAAO,aAAa;AAAA,EAElE,UAAU,MAAM;AAAA,IACd,IAAI,CAAC;AAAA,MAAQ;AAAA,IAEb,MAAM,SAAS,qBAAoB;AAAA,MACjC;AAAA,MACA,QACE,SAAS,QACL,EAAE,MAAM,IAAI,IACZ;AAAA,QACE;AAAA,QACA,cAAc;AAAA,QACd;AAAA,MACF;AAAA,MACN;AAAA,MACA,cAAc,SAAS,QAAQ;AAAA,MAC/B,QAAQ,SAAS,QAAQ;AAAA,MACzB,SAAS,CAAC,SAAS,SAAS;AAAA,QAC1B,OAAO,SAAS,QAAQ,UAAU,SAAS,OAAO;AAAA;AAAA,MAEpD,cAAc,CAAC,QAAQ;AAAA,QACrB,OAAO,SAAS,QAAQ,iBAAiB,MAAM;AAAA;AAAA,MAEjD,YAAY,CAAC,OAAO;AAAA,QAClB,OAAO,SAAS,QAAQ,eAAe,KAAK;AAAA;AAAA,IAEhD,CAAC;AAAA,IACD,QAAQ,UAAU;AAAA,IAElB,OAAO,MAAM;AAAA,MACX,QAAQ,UAAU;AAAA,MAClB,OAAO,QAAQ;AAAA;AAAA,KAEhB,CAAC,QAAQ,MAAM,KAAK,YAAY,kBAAkB,SAAS,QAAQ,CAAC;AAAA,EAEvE,uBACE,IAAC,UAAD;AAAA,OAAY;AAAA,IAAa,SAAQ;AAAA,IAAQ,KAAK;AAAA,IAAW;AAAA,GAAc;AAAA;AAI3E,SAAS,gBAAgB,CAAC,OAA8B;AAAA,EACtD,QAAQ,QAAQ,eAAe;AAAA,EAC/B,QAAQ,SAAS,aAAa,eAAe,KAAK;AAAA,EAClD,MAAM,WACJ,WAAW,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,EAChE,MAAM,OAAO,WAAW;AAAA,EAExB,UAAU,MAAM;AAAA,IACd,MAAM,OAAO,QAAQ,cAAc;AAAA,IACnC,IAAI,CAAC,UAAU,CAAC;AAAA,MAAM;AAAA,IAEtB,MAAM,SAAS,qBAAoB;AAAA,MACjC;AAAA,MACA,YACE,SAAS,WACL,EAAE,MAAM,QAAQ,SAAS,IACzB,EAAE,MAAM,OAAO,SAAS;AAAA,MAC9B,QAAQ;AAAA,MACR,cAAc,SAAS,QAAQ;AAAA,MAC/B,QAAQ,SAAS,QAAQ;AAAA,MACzB,SAAS,CAAC,SAAS,SAAS;AAAA,QAC1B,OAAO,SAAS,QAAQ,UAAU,SAAS,OAAO;AAAA;AAAA,MAEpD,cAAc,CAAC,QAAQ;AAAA,QACrB,OAAO,SAAS,QAAQ,iBAAiB,MAAM;AAAA;AAAA,MAEjD,YAAY,CAAC,OAAO;AAAA,QAClB,OAAO,SAAS,QAAQ,eAAe,KAAK;AAAA;AAAA,IAEhD,CAAC;AAAA,IACD,QAAQ,UAAU;AAAA,IAElB,OAAO,MAAM;AAAA,MACX,QAAQ,UAAU;AAAA,MAClB,OAAO,QAAQ;AAAA;AAAA,KAEhB,CAAC,QAAQ,MAAM,UAAU,SAAS,QAAQ,CAAC;AAAA,EAE9C,OAAO;AAAA;",
+  "mappings": ";;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAgDO,SAAS,aAAa,CAAC,OAA2B;AAAA,EACvD,IAAI,MAAM,QAAQ;AAAA,IAChB,MAAM,SAAS,MAAM;AAAA,IACrB,MAAM,WAAW,KAAK,UACpB,OAAO,SAAS,QACZ,CAAC,OAAO,MAAM,OAAO,GAAG,IACxB,CAAC,OAAO,MAAM,OAAO,cAAc,OAAO,UAAU,CAC1D;AAAA,IAEA,uBAAO,IAAC,cAAD;AAAA,SAAiC;AAAA,OAAd,QAAqB;AAAA,EACjD;AAAA,EAEA,uBAAO,IAAC,kBAAD;AAAA,OAAsB;AAAA,GAAO;AAAA;AAStC,SAAS,cAAc,CAAC,OAA2B;AAAA,EACjD,MAAM,UAAU,OAAgC,SAAS;AAAA,EACzD,MAAM,WAAW,OAAO,KAAK;AAAA,EAE7B,gBAAgB,MAAM;AAAA,IACpB,SAAS,UAAU;AAAA,GACpB;AAAA,EAED,UAAU,MAAM;AAAA,IACd,QAAQ,SAAS,gBAAgB,MAAM,YAAY;AAAA,IACnD,QAAQ,SAAS,UAAU,MAAM,MAAM;AAAA,GACxC;AAAA,EAED,OAAO,EAAE,SAAS,SAAS;AAAA;AAG7B,SAAS,YAAY,CAAC,OAA0B;AAAA,EAC9C,QAAQ,QAAQ,OAAO,aAAa,qBAAqB;AAAA,EACzD,OAAO,QAAQ,aAAa,SAAwC,IAAI;AAAA,EACxE,QAAQ,SAAS,aAAa,eAAe,KAAK;AAAA,EAClD,MAAM,OAAO,OAAO;AAAA,EACpB,MAAM,MAAM,OAAO,SAAS,QAAQ,OAAO,MAAM,OAAO;AAAA,EACxD,MAAM,aAAa,OAAO,SAAS,WAAW,OAAO,aAAa;AAAA,EAElE,UAAU,MAAM;AAAA,IACd,IAAI,CAAC;AAAA,MAAQ;AAAA,IAEb,MAAM,SAAS,qBAAoB;AAAA,MACjC;AAAA,MACA,QACE,SAAS,QACL,EAAE,MAAM,IAAU,IAClB;AAAA,QACE;AAAA,QACA,cAAc;AAAA,QACd;AAAA,MACF;AAAA,MACN;AAAA,MACA,cAAc,SAAS,QAAQ;AAAA,MAC/B,QAAQ,SAAS,QAAQ;AAAA,MACzB,SAAS,CAAC,SAAS,SAAS;AAAA,QAC1B,OAAO,SAAS,QAAQ,UAAU,SAAS,OAAO;AAAA;AAAA,MAEpD,cAAc,CAAC,QAAQ;AAAA,QACrB,OAAO,SAAS,QAAQ,iBAAiB,MAAM;AAAA;AAAA,MAEjD,YAAY,CAAC,OAAO;AAAA,QAClB,OAAO,SAAS,QAAQ,eAAe,KAAK;AAAA;AAAA,IAEhD,CAAC;AAAA,IACD,QAAQ,UAAU;AAAA,IAElB,OAAO,MAAM;AAAA,MACX,QAAQ,UAAU;AAAA,MAClB,OAAO,QAAQ;AAAA;AAAA,KAEhB,CAAC,QAAQ,MAAM,KAAK,YAAY,kBAAkB,SAAS,QAAQ,CAAC;AAAA,EAEvE,uBACE,IAAC,UAAD;AAAA,OAAY;AAAA,IAAa,SAAQ;AAAA,IAAQ,KAAK;AAAA,IAAW;AAAA,GAAc;AAAA;AAI3E,SAAS,gBAAgB,CAAC,OAA8B;AAAA,EACtD,QAAQ,QAAQ,eAAe;AAAA,EAC/B,QAAQ,SAAS,aAAa,eAAe,KAAK;AAAA,EAClD,MAAM,WACJ,WAAW,SAAS,WAAW,WAAW,SAAS,WAAW;AAAA,EAChE,MAAM,OAAO,WAAW;AAAA,EAExB,UAAU,MAAM;AAAA,IACd,MAAM,OAAO,QAAQ,cAAc;AAAA,IACnC,IAAI,CAAC,UAAU,CAAC;AAAA,MAAM;AAAA,IAEtB,MAAM,SAAS,qBAAoB;AAAA,MACjC;AAAA,MACA,YACE,SAAS,WACL,EAAE,MAAM,QAAQ,SAAS,IACzB,EAAE,MAAM,OAAO,SAAS;AAAA,MAC9B,QAAQ;AAAA,MACR,cAAc,SAAS,QAAQ;AAAA,MAC/B,QAAQ,SAAS,QAAQ;AAAA,MACzB,SAAS,CAAC,SAAS,SAAS;AAAA,QAC1B,OAAO,SAAS,QAAQ,UAAU,SAAS,OAAO;AAAA;AAAA,MAEpD,cAAc,CAAC,QAAQ;AAAA,QACrB,OAAO,SAAS,QAAQ,iBAAiB,MAAM;AAAA;AAAA,MAEjD,YAAY,CAAC,OAAO;AAAA,QAClB,OAAO,SAAS,QAAQ,eAAe,KAAK;AAAA;AAAA,IAEhD,CAAC;AAAA,IACD,QAAQ,UAAU;AAAA,IAElB,OAAO,MAAM;AAAA,MACX,QAAQ,UAAU;AAAA,MAClB,OAAO,QAAQ;AAAA;AAAA,KAEhB,CAAC,QAAQ,MAAM,UAAU,SAAS,QAAQ,CAAC;AAAA,EAE9C,OAAO;AAAA;",
   "debugId": "B4EEBF8F19FDFE1F64756E2164756E21",
   "names": []
 }