@walkthru-earth/objex 1.2.0 → 1.2.1

package/dist/components/browser/FileTreeSidebar.svelte

@@ -356,7 +356,7 @@ async function expandToPath(path: string) {
 				? await findNodeAtRoot(accumulatedPath)
 				: await findNodeInParent(parentNode, accumulatedPath);
 
-		if (!node || !node.entry.is_dir) break;
+		if (!node?.entry.is_dir) break;
 
 		if (node.children.length === 0) {
 			await loadChildren(node);

package/dist/components/layout/Sidebar.svelte

@@ -57,6 +57,33 @@ $effect(() => {
 	}
 });
 
+// Auto-detected ?url= buckets are saved anonymously (zero-click demo flow).
+// If the first LIST returns 401/403, the bucket is actually private — flip
+// the connection to non-anonymous and open the credential dialog so the
+// user can paste keys instead of seeing a silent failure.
+$effect(() => {
+	const conn = browser.authRequired;
+	if (!conn) return;
+	handleAuthRequired(conn);
+});
+
+async function handleAuthRequired(conn: Connection) {
+	browser.clearAuthRequired();
+	await connections.update(conn.id, {
+		name: conn.name,
+		provider: conn.provider,
+		endpoint: conn.endpoint,
+		bucket: conn.bucket,
+		region: conn.region,
+		anonymous: false,
+		authMethod: conn.authMethod,
+		rootPrefix: conn.rootPrefix
+	});
+	const updated = connections.getById(conn.id);
+	if (!updated) return;
+	await ensureCredentials(updated);
+}
+
 async function handleAutoDetection() {
 	const url = new URL(window.location.href);
 	const rawUrl = url.searchParams.get('url');

package/dist/components/viewers/ArchiveViewer.svelte

@@ -29,7 +29,7 @@ import {
 	streamZipEntriesFromUrl
 } from '../../utils/archive';
 import { formatFileSize } from '../../utils/format';
-import { buildHttpsUrl } from '../../utils/url.js';
+import { buildHttpsUrlAsync } from '../../utils/url.js';
 
 let { tab }: { tab: Tab } = $props();
 
@@ -177,7 +177,7 @@ async function loadZip() {
 	const signal = abortController!.signal;
 
 	if (tab.source === 'remote') {
-		const url = buildHttpsUrl(tab);
+		const url = await buildHttpsUrlAsync(tab);
 		try {
 			scanning = true;
 			for await (const batch of streamZipEntriesFromUrl(url, signal)) {
@@ -208,7 +208,7 @@ async function loadTar() {
 	const signal = abortController!.signal;
 
 	if (tab.source === 'remote') {
-		const url = buildHttpsUrl(tab);
+		const url = await buildHttpsUrlAsync(tab);
 		try {
 			scanning = true;
 			remoteUrl = url;
@@ -240,7 +240,7 @@ async function loadTarGz() {
 
 	// For remote URLs: stream-fetch → decompress → parse progressively
 	if (tab.source === 'remote' || tab.source === 'url') {
-		const url = buildHttpsUrl(tab);
+		const url = await buildHttpsUrlAsync(tab);
 		try {
 			scanning = true;
 			const decompressedChunks: Uint8Array[] = [];

package/dist/components/viewers/CodeViewer.svelte

@@ -11,7 +11,7 @@ import type { Tab } from '../../types';
 import { copyToClipboard } from '../../utils/clipboard.js';
 import { handleLoadError } from '../../utils/error.js';
 import { extensionToShikiLang, highlightCode } from '../../utils/shiki';
-import { buildHttpsUrl } from '../../utils/url.js';
+import { buildHttpsUrl, buildHttpsUrlAsync, canStreamDirectly } from '../../utils/url.js';
 import { getUrlView, updateUrlView } from '../../utils/url-state.js';
 import { openZarrTab } from '../../utils/zarr-tab.js';
 
@@ -96,7 +96,23 @@ const stacBadgeKey = $derived<Record<string, string>>({
 	'stac-collection': 'code.stacCollection',
 	'stac-item': 'code.stacItem'
 });
-const styleUrl = $derived(buildHttpsUrl(tab));
+// Third-party iframes can't route through the storage adapter, so the URL
+// must carry auth. Public/SAS connections resolve synchronously; `signed-s3`
+// must wait for the presign so the iframe never loads a bare `s3://` href.
+let styleUrl = $state('');
+$effect(() => {
+	const id = tab.id;
+	styleUrl = canStreamDirectly(tab) ? buildHttpsUrl(tab) : '';
+	let cancelled = false;
+	(async () => {
+		const url = await buildHttpsUrlAsync(tab);
+		if (cancelled || id !== tab.id) return;
+		styleUrl = url;
+	})();
+	return () => {
+		cancelled = true;
+	};
+});
 const stacBrowserSrc = $derived(
 	`https://radiantearth.github.io/stac-browser/#/external/${styleUrl}`
 );
@@ -481,7 +497,7 @@ async function copyCode() {
 		</div>
 	</div>
 
-	{#if viewMode === 'stac-browser'}
+	{#if viewMode === 'stac-browser' && styleUrl}
 		<div class="flex-1 overflow-hidden">
 			<iframe
 				src={stacBrowserSrc}
@@ -490,7 +506,7 @@ async function copyCode() {
 				allow="fullscreen"
 			></iframe>
 		</div>
-	{:else if viewMode === 'kepler'}
+	{:else if viewMode === 'kepler' && styleUrl}
 		<div class="flex-1 overflow-hidden">
 			<iframe
 				src={keplerSrc}
@@ -499,7 +515,7 @@ async function copyCode() {
 				allow="fullscreen"
 			></iframe>
 		</div>
-	{:else if viewMode === 'maputnik'}
+	{:else if viewMode === 'maputnik' && styleUrl}
 		<div class="flex-1 overflow-hidden">
 			<iframe
 				src={maputnikSrc}

package/dist/components/viewers/CogViewer.svelte

@@ -27,7 +27,7 @@ import {
 	resolveProj4Def,
 	selectCogPipeline
 } from '../../utils/cog.js';
-import { buildHttpsUrl } from '../../utils/url.js';
+import { buildHttpsUrlAsync } from '../../utils/url.js';
 import CogControls from './CogControls.svelte';
 import MapContainer from './map/MapContainer.svelte';
 
@@ -57,6 +57,7 @@ let proj4DefRef: string | null = null;
 let sampleFormatRef = 1;
 let isTiledRef = true;
 let clickHandlerRef: ((e: maplibregl.MapMouseEvent) => void) | null = null;
+let resolvedHttpsUrl: string | null = null;
 // True when the library-default uint pipeline will run. LinearRescale only
 // operates on already-normalized RGB 0..1, so the slider is meaningful only
 // here, and only for non-palette data (palette renders through Colormap).
@@ -104,6 +105,7 @@ $effect(() => {
 		overlayRef = null;
 		geotiffRef = null;
 		proj4DefRef = null;
+		resolvedHttpsUrl = null;
 		loading = true;
 		error = null;
 		cogInfo = null;
@@ -165,7 +167,9 @@ async function loadCog(map: maplibregl.Map) {
 	const signal = abortController.signal;
 
 	try {
-		const url = buildHttpsUrl(tab);
+		const url = await buildHttpsUrlAsync(tab);
+		if (signal.aborted) return;
+		resolvedHttpsUrl = url;
 
 		// Pre-flight: read first IFD to check if tiled (single range request).
 		let isTiled = true;
@@ -187,6 +191,19 @@ async function loadCog(map: maplibregl.Map) {
 			}
 		} catch (preflightErr) {
 			if (signal.aborted) return;
+			// `@developmentseed/geotiff` throws "Only tiff supported version:<n>"
+			// when the first 4 bytes don't match II*\0 / MM\0* / II+\0 / MM\0+.
+			// This happens on files that advertise image/tiff but are corrupt,
+			// encrypted, or a different format entirely (GDAL reports "not
+			// recognized as being in a supported file format" on the same file).
+			// Surface a clear message and bail — COGLayer would re-invoke the
+			// same loader and throw the identical error uncaught during update.
+			const msg = preflightErr instanceof Error ? preflightErr.message : String(preflightErr);
+			if (/Only tiff supported version|not a tiff|Invalid.*magic/i.test(msg)) {
+				error = t('map.cogInvalidTiff');
+				loading = false;
+				return;
+			}
 		}
 
 		// Store refs for pixel inspection and rebuild
@@ -255,7 +272,7 @@ function buildAndAddLayer(
 	// Apply upstream-bug workarounds in place (overview filter, 4326 bbox clamp).
 	if (preflightGeotiff) normalizeCogGeotiff(preflightGeotiff);
 
-	const cogInput = preflightGeotiff ?? buildHttpsUrl(tab);
+	const cogInput = preflightGeotiff ?? resolvedHttpsUrl ?? '';
 
 	const layer = new COGLayer({
 		// Stable id per tab so rebuilds on band/style change don't force deck.gl
@@ -384,6 +401,7 @@ function cleanup() {
 	geotiffRef = null;
 	proj4DefRef = null;
 	pixelValue = null;
+	resolvedHttpsUrl = null;
 }
 
 $effect(() => {

package/dist/components/viewers/CopcViewer.svelte

@@ -1,10 +1,28 @@
 <script lang="ts">
 import type { Tab } from '../../types';
-import { buildHttpsUrl } from '../../utils/url.js';
+import { buildHttpsUrlAsync } from '../../utils/url.js';
 
 let { tab }: { tab: Tab } = $props();
 
-const fileUrl = $derived(tab.source === 'url' ? tab.path : (buildHttpsUrl(tab) ?? ''));
+let fileUrl = $state('');
+
+$effect(() => {
+	const id = tab.id;
+	let cancelled = false;
+	(async () => {
+		if (tab.source === 'url') {
+			fileUrl = tab.path;
+			return;
+		}
+		const url = await buildHttpsUrlAsync(tab);
+		if (cancelled || id !== tab.id) return;
+		fileUrl = url;
+	})();
+	return () => {
+		cancelled = true;
+	};
+});
+
 const viewerUrl = $derived(
 	fileUrl ? `https://viewer.copc.io/?copc=${encodeURIComponent(fileUrl)}` : ''
 );

package/dist/components/viewers/FlatGeobufViewer.svelte

@@ -19,7 +19,7 @@ import {
 	hoverCursor,
 	loadDeckModules
 } from '../../utils/deck.js';
-import { buildHttpsUrl } from '../../utils/url.js';
+import { buildHttpsUrlAsync } from '../../utils/url.js';
 import AttributeTable from './map/AttributeTable.svelte';
 import MapContainer from './map/MapContainer.svelte';
 
@@ -55,6 +55,7 @@ let mapReadyPromise: Promise<void> | null = null;
 // Stored from preview for load-all (skip index)
 let storedHeader: HeaderMeta | null = null;
 let storedFeatureOffset = 0;
+let signedUrl: string | null = null;
 
 // proj4 converter for reprojecting from source CRS → WGS84
 let proj4Forward: ((coord: [number, number]) => [number, number]) | null = null;
@@ -217,6 +218,7 @@ function cleanup() {
 	dataVersion = 0;
 	storedHeader = null;
 	storedFeatureOffset = 0;
+	signedUrl = null;
 	proj4Forward = null;
 }
 
@@ -261,9 +263,14 @@ async function loadFlatGeobuf() {
 		await mapReadyPromise;
 		if (!overlay) return;
 
+		// Sign once per load so header + feature stream share the same signature.
+		// Cached across loadAllFeatures() so the "Load all" button doesn't re-sign.
+		const url = await buildHttpsUrlAsync(tab);
+		signedUrl = url;
+
 		// Read header via range requests (fast: 1-2 small requests)
 		// Gets metadata + feature offset to skip the spatial index
-		await readHeaderWithRangeRequests();
+		await readHeaderWithRangeRequests(url);
 
 		// Set up on-the-fly reprojection if the file uses a non-WGS84 CRS
 		proj4Forward = null;
@@ -298,7 +305,7 @@ async function loadFlatGeobuf() {
 		}
 
 		// Stream features (skips index if header was read, else sequential)
-		await streamFeatures(settings.featureLimit);
+		await streamFeatures(url, settings.featureLimit);
 	} catch (err) {
 		console.error('[FGB]', 'loadFlatGeobuf error:', err);
 		if (err instanceof DOMException && err.name === 'AbortError') return;
@@ -314,9 +321,7 @@ async function loadFlatGeobuf() {
  * Read header via range requests (fast: 1-2 small requests).
  * Stores header + feature offset for the composite stream approach.
  */
-async function readHeaderWithRangeRequests(): Promise<boolean> {
-	const url = buildHttpsUrl(tab);
-
+async function readHeaderWithRangeRequests(url: string): Promise<boolean> {
 	let reader: HttpReader;
 	try {
 		reader = await HttpReader.open(url, false);
@@ -357,7 +362,9 @@ async function loadAllFeatures() {
 	try {
 		features = [];
 		featureCount = 0;
-		await streamFeatures();
+		const url = signedUrl ?? (await buildHttpsUrlAsync(tab));
+		signedUrl = url;
+		await streamFeatures(url);
 	} catch (err) {
 		console.error('[FGB]', 'loadAllFeatures error:', err);
 		if (err instanceof DOMException && err.name === 'AbortError') return;
@@ -372,10 +379,9 @@ async function loadAllFeatures() {
  * Stream features sequentially.
  * If storedHeader is available, skips the index with a Range request + composite stream.
  */
-async function streamFeatures(limit?: number) {
+async function streamFeatures(url: string, limit?: number) {
 	const ac = new AbortController();
 	abortController = ac;
-	const url = buildHttpsUrl(tab);
 	const t0 = performance.now();
 
 	let iter: AsyncGenerator;

package/dist/components/viewers/PmtilesViewer.svelte

@@ -11,7 +11,7 @@ import { t } from '../../i18n/index.svelte.js';
 import { tabResources } from '../../stores/tab-resources.svelte.js';
 import type { Tab } from '../../types';
 import { loadPmtiles, type PmtilesMetadata } from '../../utils/pmtiles';
-import { buildHttpsUrl } from '../../utils/url.js';
+import { buildHttpsUrlAsync } from '../../utils/url.js';
 import { getUrlView, updateUrlView } from '../../utils/url-state.js';
 
 let { tab }: { tab: Tab } = $props();
@@ -73,7 +73,7 @@ async function load() {
 	error = null;
 
 	try {
-		pmtilesUrl = buildHttpsUrl(tab);
+		pmtilesUrl = await buildHttpsUrlAsync(tab);
 		const result = await loadPmtiles(pmtilesUrl);
 		pmtilesInstance = result.pmtiles;
 		metadata = result.metadata;

package/dist/components/viewers/StacMapViewer.svelte

@@ -1,20 +1,36 @@
 <script lang="ts">
 import type { Tab } from '../../types';
-import { buildHttpsUrl } from '../../utils/url.js';
+import { buildHttpsUrlAsync } from '../../utils/url.js';
 
 let { tab }: { tab: Tab } = $props();
 
-const fileUrl = $derived(buildHttpsUrl(tab));
+let fileUrl = $state('');
+
+$effect(() => {
+	const id = tab.id;
+	let cancelled = false;
+	(async () => {
+		const url = await buildHttpsUrlAsync(tab);
+		if (cancelled || id !== tab.id) return;
+		fileUrl = url;
+	})();
+	return () => {
+		cancelled = true;
+	};
+});
+
 const iframeSrc = $derived(
-	`https://developmentseed.org/stac-map?href=${encodeURIComponent(fileUrl)}`
+	fileUrl ? `https://developmentseed.org/stac-map?href=${encodeURIComponent(fileUrl)}` : ''
 );
 </script>
 
 <div class="relative flex h-full overflow-hidden">
-	<iframe
-		src={iframeSrc}
-		class="h-full w-full border-0"
-		title="STAC Map"
-		allow="fullscreen"
-	></iframe>
+	{#if iframeSrc}
+		<iframe
+			src={iframeSrc}
+			class="h-full w-full border-0"
+			title="STAC Map"
+			allow="fullscreen"
+		></iframe>
+	{/if}
 </div>

package/dist/components/viewers/TableViewer.svelte

@@ -11,7 +11,8 @@ import {
 	QueryCancelledError,
 	type QueryHandle,
 	type ResolvedTableSource,
-	resolveTableSource
+	resolveTableSource,
+	resolveTableSourceAsync
 } from '../../query/index.js';
 import { queryHistory } from '../../stores/query-history.svelte.js';
 import { settings } from '../../stores/settings.svelte.js';
@@ -61,6 +62,8 @@ let viewMode = $state<'table' | 'map' | 'stac' | 'info'>(
 );
 let sqlQuery = $state('');
 let customSql = $state('');
+// Presigned URL for the source-cooperative parquet-table iframe (external fetcher).
+let parquetIframeUrl = $state('');
 let queryRunning = $state(false);
 let executionTimeMs = $state(0);
 
@@ -98,8 +101,12 @@ const columnTypes = $derived(Object.fromEntries(schema.map((f) => [f.name, f.typ
 // Columns for display — exclude internal __wkb helper
 const displayColumns = $derived(columns.filter((c) => c !== '__wkb'));
 
-function buildDefaultSql(offset = 0): string {
-	const resolved = resolveTableSource(tab);
+let resolvedSource: ResolvedTableSource | null = null;
+
+function buildDefaultSql(
+	offset = 0,
+	resolved: ResolvedTableSource = resolvedSource ?? resolveTableSource(tab)
+): string {
 	const source = resolved.ref;
 
 	let sql: string;
@@ -204,6 +211,8 @@ $effect(() => {
 		geoCol = null;
 		knownGeomType = undefined;
 		metadataBounds = null;
+		resolvedSource = null;
+		parquetIframeUrl = '';
 		error = null;
 	});
 	return unregister;
@@ -268,6 +277,10 @@ async function forceCancel() {
 
 async function loadTable() {
 	const thisGen = ++loadGeneration;
+	// Snapshot reactive values once. Reading `$derived` across awaits after the
+	// component's effect is torn down returns Svelte's destroyed-signal sentinel,
+	// which throws "can't convert symbol to string" in downstream template literals.
+	const cid = connId;
 
 	// Cancel in-flight query from a previous load to prevent duplicate concurrent queries
 	if (activeHandle) {
@@ -287,13 +300,19 @@ async function loadTable() {
 	loadStage = t('table.preparingQuery');
 	loadProgress = [];
 
-	// Set SQL eagerly so editor shows the query while loading
-	const initialSql = buildDefaultSql(0);
-	sqlQuery = initialSql;
-	customSql = initialSql;
+	resolvedSource = null;
+	const eagerSql = buildDefaultSql(0);
+	sqlQuery = eagerSql;
+	customSql = eagerSql;
 
 	try {
-		const resolved: ResolvedTableSource = resolveTableSource(tab);
+		const resolved: ResolvedTableSource = await resolveTableSourceAsync(tab);
+		if (thisGen !== loadGeneration) return;
+		resolvedSource = resolved;
+		const resolvedSql = buildDefaultSql(0, resolved);
+		sqlQuery = resolvedSql;
+		// Only overwrite the editor if the user hasn't edited it during the presign await.
+		if (customSql === eagerSql) customSql = resolvedSql;
 		const isFileSource = resolved.isFileSource;
 		const fileUrl = resolved.fileUrl ?? '';
 		const httpsUrl = isFileSource ? buildHttpsUrl(tab) : '';
@@ -301,6 +320,11 @@ async function loadTable() {
 		const isParquet = isFileSource && /\.parquet$/i.test(tab.path);
 		const streamable = isFileSource && canStreamDirectly(tab);
 
+		// Parquet-table iframe fetches from its own origin. `resolved.fileUrl`
+		// is already the presigned HTTPS URL for signed-s3 (or the public URL
+		// for anonymous / SAS), so reuse it instead of signing a second time.
+		if (isParquet) parquetIframeUrl = fileUrl;
+
 		// Start DuckDB boot immediately (runs in parallel with hyparquet)
 		loadStage = t('table.initEngine');
 		const enginePromise = getQueryEngine();
@@ -448,7 +472,7 @@ async function loadTable() {
 		// Disable conversion for this connection and fall back to BLOB handling.
 		if (metaFromHyparquet && isLegacyGeoParquet && geoCol) {
 			try {
-				await engine.query(connId, 'SET enable_geoparquet_conversion = false');
+				await engine.query(cid, 'SET enable_geoparquet_conversion = false');
 				geoColType = 'BLOB';
 			} catch {
 				// Setting failed — DuckDB may still handle it gracefully
@@ -460,7 +484,7 @@ async function loadTable() {
 		// reads GeoParquet as GEOMETRY('EPSG:...') with CRS embedded in the type.
 		if (metaFromHyparquet && geoCol && !isLegacyGeoParquet) {
 			try {
-				const duckSchema = await engine.getSchema(connId, resolved);
+				const duckSchema = await engine.getSchema(cid, resolved);
 				if (thisGen !== loadGeneration) return;
 				const duckGeoField = duckSchema.find((f: { name: string }) => f.name === geoCol);
 				if (duckGeoField) {
@@ -490,7 +514,7 @@ async function loadTable() {
 		// (native Parquet GEOMETRY without "geo" KV metadata), use DuckDB
 		if (metaFromHyparquet && needsDuckDbCrs && geoCol) {
 			try {
-				sourceCrs = await engine.detectCrs(connId, resolved, geoCol);
+				sourceCrs = await engine.detectCrs(cid, resolved, geoCol);
 				if (thisGen !== loadGeneration) return;
 				if (sourceCrs) {
 					loadProgress = [...loadProgress, { label: t('progress.crs'), value: sourceCrs }];
@@ -520,7 +544,7 @@ async function loadTable() {
 			];
 
 			if (engine.getSchemaAndCrs) {
-				const result = await engine.getSchemaAndCrs(connId, resolved, findGeoColumn);
+				const result = await engine.getSchemaAndCrs(cid, resolved, findGeoColumn);
 				if (thisGen !== loadGeneration) return;
 				schema = result.schema;
 				columns = schema.map((f) => f.name);
@@ -547,7 +571,7 @@ async function loadTable() {
 					}
 				}
 			} else {
-				schema = await engine.getSchema(connId, resolved);
+				schema = await engine.getSchema(cid, resolved);
 				if (thisGen !== loadGeneration) return;
 				columns = schema.map((f) => f.name);
 				const colPreview =
@@ -568,7 +592,7 @@ async function loadTable() {
 						...loadProgress,
 						{ label: t('progress.geometry'), value: `${detectedGeoCol} (${geoColType})` }
 					];
-					sourceCrs = await engine.detectCrs(connId, resolved, detectedGeoCol);
+					sourceCrs = await engine.detectCrs(cid, resolved, detectedGeoCol);
 					if (thisGen !== loadGeneration) return;
 					if (sourceCrs) {
 						loadProgress = [...loadProgress, { label: t('progress.crs'), value: sourceCrs }];
@@ -599,7 +623,7 @@ async function loadTable() {
 		// Retry with enable_geoparquet_conversion=false and BLOB handling.
 		if (!result && error && isParquet && geoCol && !isLegacyGeoParquet) {
 			try {
-				await engine.query(connId, 'SET enable_geoparquet_conversion = false');
+				await engine.query(cid, 'SET enable_geoparquet_conversion = false');
 				geoColType = 'BLOB';
 				sqlQuery = buildDefaultSql(0);
 				customSql = sqlQuery;
@@ -673,7 +697,7 @@ async function loadTable() {
 			} else {
 				loadStage = t('table.countingRows');
 				engine
-					.getRowCount(connId, resolved)
+					.getRowCount(cid, resolved)
 					.then((count) => {
 						if (thisGen === loadGeneration) {
 							totalRows = count;
@@ -695,11 +719,14 @@ async function loadTable() {
 }
 
 async function executeQuery(sql: string) {
+	// Snapshot `connId` — reading the $derived after the effect is destroyed
+	// returns a Symbol sentinel and crashes downstream template literals.
+	const cid = connId;
 	try {
 		const engine = await getQueryEngine();
 
 		if (engine.queryCancellable) {
-			const handle = engine.queryCancellable(connId, sql);
+			const handle = engine.queryCancellable(cid, sql);
 			activeHandle = handle;
 			try {
 				const result = await handle.result;
@@ -716,7 +743,7 @@ async function executeQuery(sql: string) {
 			}
 		}
 
-		const result = await engine.query(connId, sql);
+		const result = await engine.query(cid, sql);
 		columns = result.columns;
 		rows = result.rows;
 		return result;
@@ -746,6 +773,8 @@ async function loadPage(page: number) {
 }
 
 async function runCustomSql() {
+	// Snapshot before any await — see note in executeQuery.
+	const cid = connId;
 	queryRunning = true;
 	error = null;
 	isCustomQuery = true;
@@ -768,7 +797,7 @@ async function runCustomSql() {
 			timestamp: Date.now(),
 			durationMs: executionTimeMs,
 			rowCount: rows.length,
-			connectionId: connId || undefined
+			connectionId: cid || undefined
 		});
 	} catch (err) {
 		executionTimeMs = Math.round(performance.now() - start);
@@ -780,7 +809,7 @@ async function runCustomSql() {
 			durationMs: executionTimeMs,
 			rowCount: 0,
 			error: error ?? undefined,
-			connectionId: connId || undefined
+			connectionId: cid || undefined
 		});
 	} finally {
 		queryRunning = false;
@@ -984,7 +1013,7 @@ function setStacView() {
 			<FileInfo
 				entries={loadProgress}
 				{schema}
-				parquetUrl={/\.parquet$/i.test(tab.path) ? buildHttpsUrl(tab) : ''}
+				parquetUrl={/\.parquet$/i.test(tab.path) ? parquetIframeUrl : ''}
 			/>
 		</div>
 	{:else if viewMode === 'stac'}

package/dist/components/viewers/ZarrMapViewer.svelte

@@ -5,7 +5,7 @@ import { onDestroy, untrack } from 'svelte';
 import { t } from '../../i18n/index.svelte.js';
 import { tabResources } from '../../stores/tab-resources.svelte.js';
 import type { Tab } from '../../types';
-import { buildHttpsUrl } from '../../utils/url.js';
+import { buildHttpsUrlAsync } from '../../utils/url.js';
 import {
 	ensureCodecsRegistered,
 	extractZarrStoreUrl,
@@ -372,7 +372,7 @@ async function addZarrLayer(map: maplibregl.Map) {
 		await ensureCodecsRegistered();
 		const { ZarrLayer } = await import('@carbonplan/zarr-layer');
 
-		const storeUrl = buildStoreUrl();
+		const storeUrl = await buildStoreUrl();
 		const selector = buildSelector();
 
 		const opts: any = {
@@ -452,8 +452,8 @@ async function addZarrLayer(map: maplibregl.Map) {
 	}
 }
 
-function buildStoreUrl(): string {
-	const rawUrl = buildHttpsUrl(tab).replace(/\/+$/, '');
+async function buildStoreUrl(): Promise<string> {
+	const rawUrl = (await buildHttpsUrlAsync(tab)).replace(/\/+$/, '');
 	return extractZarrStoreUrl(rawUrl) ?? rawUrl;
 }
 

package/dist/components/viewers/ZarrViewer.svelte

@@ -9,7 +9,7 @@ import {
 } from '../ui/resizable/index.js';
 import { t } from '../../i18n/index.svelte.js';
 import type { Tab } from '../../types';
-import { buildHttpsUrl } from '../../utils/url.js';
+import { buildHttpsUrlAsync } from '../../utils/url.js';
 import { getUrlView, updateUrlView } from '../../utils/url-state.js';
 import {
 	computeChunkCount,
@@ -120,7 +120,7 @@ async function loadHierarchy() {
 	error = null;
 
 	try {
-		const rawUrl = buildHttpsUrl(tab).replace(/\/+$/, '');
+		const rawUrl = (await buildHttpsUrlAsync(tab)).replace(/\/+$/, '');
 		const url = extractZarrStoreUrl(rawUrl) ?? rawUrl;
 		const storeName = tab.name.replace(/\.(zarr|zr3)$/, '');
 

package/dist/components/viewers/pmtiles/PmtilesMapView.svelte

@@ -12,7 +12,6 @@ import type { Tab } from '../../../types';
 import { setupSelectionLayer, updateSelection } from '../../../utils/map-selection.js';
 import { buildPmtilesLayers, getPmtilesProtocol, type PmtilesMetadata } from '../../../utils/pmtiles';
 import { layerHue } from '../../../utils/pmtiles-tile.js';
-import { buildHttpsUrl } from '../../../utils/url.js';
 import AttributeTable from '../map/AttributeTable.svelte';
 import MapContainer from '../map/MapContainer.svelte';
 

package/dist/i18n/ar.js

@@ -342,6 +342,7 @@ export const ar = {
     'map.flatgeobufInfo': 'معلومات FlatGeobuf',
     'map.cogInfo': 'معلومات COG',
     'map.cogCorsError': 'تعذّر تحميل COG: الخادم لا يسمح بطلبات عبر النطاقات (CORS). يجب استضافة الملف مع تفعيل ترويسات CORS.',
+    'map.cogInvalidTiff': 'هذا الملف ليس ملف TIFF صالح. نوع المحتوى image/tiff لكن الأجزاء الأولى من الملف لا تطابق توقيع TIFF، قد يكون الملف تالفاً أو مشفّراً أو مُعنوناً بشكل خاطئ.',
     'map.cogUnsupportedFormat': 'يستخدم هذا الملف صيغة {{type}} غير مدعومة لعرض الخريطة. يمكن عرض ملفات COG بصيغة RGB فقط.',
     'map.noGeoColumn': 'لم يتم اكتشاف عمود هندسي في المخطط',
     'map.noData': 'لا تتوفر بيانات لعرض الخريطة',