feat: static embedding for serverless buckaroo rendering by paddymul · Pull Request #560 · buckaroo-data/buckaroo

paddymul · 2026-02-23T20:07:59Z

Summary

Closes #553. Adds a static-only rendering path: Python generates a self-contained artifact with parquet-b64 serialized data, JS renders it without any server connection.

buckaroo.prepare_buckaroo_artifact(df) — generates a dict with df_data, df_viewer_config, summary_stats_data, all parquet b64
buckaroo.to_html(df) — generates a complete HTML page referencing static-embed.js
BuckarooStaticTable React component — resolves parquet b64 payloads, renders DFViewer
static-embed.tsx esbuild entry point for static HTML pages
Registers AG-Grid v35 modules (PinnedRowModule, CellStyleModule, etc.) for full feature support
Handles hyparquet BigInt→Number conversion in parseParquetRow

Files changed

buckaroo/artifact.py — Python artifact generation (pandas, polars, file paths)
packages/buckaroo-js-core/src/components/BuckarooStaticTable.tsx — React component
packages/js/static-embed.tsx — esbuild entry point
packages/buckaroo-js-core/src/index.ts — added named exports
packages/buckaroo-js-core/src/components/DFViewerParts/resolveDFData.ts — BigInt fix
packages/buckaroo-js-core/src/components/DFViewerParts/DFViewerInfinite.tsx — AG-Grid v35 module registration

Test plan

17 Python unit tests (tests/unit/artifact_test.py) — parquet b64 format, JSON serialization, polars, file paths
6 Playwright integration tests (pw-tests/static-embed.spec.ts) — table renders, correct headers, data values, summary stats pinned rows with dtype info, histogram row present
Existing test suites pass (basic_widget, serialization_utils, widget_extension)

🤖 Generated with Claude Code

github-actions · 2026-02-23T20:18:40Z

📦 TestPyPI package published

pip install --index-strategy unsafe-best-match --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple/ buckaroo==0.12.12.dev22418221000

or with uv:

uv pip install --index-strategy unsafe-best-match --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple/ buckaroo==0.12.12.dev22418221000

MCP server for Claude Code

claude mcp add buckaroo-table -- uvx --from "buckaroo[mcp]==0.12.12.dev22418221000" --index-strategy unsafe-best-match --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple/ buckaroo-table

Add --minify and --sourcemap flags to the widget.js build command. widget.js drops from 3.5 MB to 1.8 MB. standalone.js also gets --sourcemap. Add *.js.map to .gitignore for the new sourcemaps. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Bump all @ag-grid-community/* packages from ^32.3.3 to ^32.3.9 to pick up bug fixes before the v33 migration. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Replace lodash (CJS) with lodash-es (ESM) as a runtime dependency. lodash-es allows bundlers (vite, esbuild) to tree-shake unused functions. Keep lodash in devDependencies for Jest (mapped via moduleNameMapper). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Replace `import * as _ from "lodash-es"` with named imports like `import { map, filter, keys } from "lodash-es"` across all files. Remove unused lodash imports from 10 files that didn't use any lodash functions. This ensures all bundlers (including esbuild) can tree-shake unused lodash functions. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Consolidate 6 @ag-grid-community/* packages into 2 unified packages (ag-grid-community + ag-grid-react). v33 improves internal tree-shaking. - Rewrite all imports across 16 source files - Rename CSS variables: --ag-grid-size → --ag-spacing, --ag-alpine-active-color → --ag-accent-color, --ag-range-selection-background-color-3 → --ag-range-selection-background-color - ESM bundle: 2,277 KB → 1,722 KB (-24.4%) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Zero breaking changes. Version bump only. ESM bundle: 1,722 KB → 1,773 KB (+3%) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add suppressNoRowsOverlay to infinite row model grid options (v35 adds default overlays that flash during data loading). ESM bundle: 1,773 KB → 1,827 KB (+3%) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add prepare_buckaroo_artifact() and to_html() for generating self-contained static HTML tables without a notebook kernel or server. Both df_data and summary_stats are serialized as parquet b64 for compact transport. Python: buckaroo/artifact.py with pandas, polars, and file path support. JS: BuckarooStaticTable component + static-embed.tsx esbuild entry point. Fix: register AG-Grid v35 modules (PinnedRow, CellStyle, etc.) and handle hyparquet BigInt→Number conversion in parseParquetRow. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Remove stale per-project pnpm-lock.yaml that still referenced @ag-grid-community v32 packages. Align deploy-ghpage and publish-storybook workflows with checks.yml by using explicit pnpm install --frozen-lockfile from the workspace root. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

The Deploy step was pushing to gh-pages on PR builds, racing with the deploy-ghpage workflow and causing push failures. Only deploy when merging to main. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

paddymul · 2026-02-24T13:56:07Z

@codex

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 9d46a541ab

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-02-24T14:01:01Z

buckaroo/artifact.py

+</head>
+<body>
+<div id="root"></div>
+<script>window.__BUCKAROO_ARTIFACT__ = {artifact_json};</script>


Escape embedded artifact JSON before injecting into script

The HTML template writes artifact_json directly into an inline <script> tag, but json.dumps does not escape </script> sequences; if a dataframe-derived field in df_viewer_config (for example a column/header name) contains that substring, the browser terminates the script early and treats the remainder as executable HTML/JS. This creates an XSS vector whenever untrusted data is rendered to static HTML.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-02-24T14:01:01Z

packages/buckaroo-js-core/src/components/DFViewerParts/resolveDFData.ts

+        } else if (typeof val === 'bigint') {
+            // hyparquet decodes INT64 as BigInt; convert to Number for JSON compat
+            parsed[key] = Number(val);


Preserve INT64 precision when decoding parquet BigInt values

Converting hyparquet bigint values with Number(...) silently loses precision for values above 2^53-1, so static embeds can corrupt large integer IDs/timestamps and then sort/filter on incorrect values. This regression is introduced by coercing every bigint cell to a JS number during parquet row parsing.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-02-24T14:01:01Z

buckaroo/artifact.py

+        elif suffix in ('.json', '.jsonl', '.ndjson'):
+            return pl.read_ndjson(path)


Read .json paths with a JSON parser in the Polars branch

The Polars path routes .json files through pl.read_ndjson, which expects newline-delimited JSON; standard JSON files (array/object form) that work in the pandas fallback will fail whenever Polars is installed. This makes prepare_buckaroo_artifact(<json path>) behavior environment-dependent and breaks valid .json inputs.

Useful? React with 👍 / 👎.

The test was mocking `@ag-grid-community/react` (old modular path) but the component now imports from `ag-grid-react` (v35 monolithic path). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

paddymul force-pushed the feat/static-embed branch from 28c27f7 to 8c7f441 Compare February 23, 2026 20:16

paddymul temporarily deployed to testpypi February 23, 2026 20:18 — with GitHub Actions Inactive

paddymul temporarily deployed to testpypi February 23, 2026 20:24 — with GitHub Actions Inactive

paddymul and others added 10 commits February 23, 2026 22:56

perf: align AG Grid to latest v32 patch (32.3.9)

78e7492

Bump all @ag-grid-community/* packages from ^32.3.3 to ^32.3.9 to pick up bug fixes before the v33 migration. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

perf: upgrade AG Grid v33 → v34

73dbe1c

Zero breaking changes. Version bump only. ESM bundle: 1,722 KB → 1,773 KB (+3%) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

perf: upgrade AG Grid v34 → v35

68a54ed

Add suppressNoRowsOverlay to infinite row model grid options (v35 adds default overlays that flash during data loading). ESM bundle: 1,773 KB → 1,827 KB (+3%) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

fix: remove unused imports flagged by ruff

026ca3a

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

paddymul force-pushed the feat/static-embed branch from 2791206 to 8874674 Compare February 24, 2026 04:03

paddymul temporarily deployed to testpypi February 24, 2026 04:04 — with GitHub Actions Inactive

ci: skip storybook gh-pages deploy on PRs

9d46a54

The Deploy step was pushing to gh-pages on PR builds, racing with the deploy-ghpage workflow and causing push failures. Only deploy when merging to main. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

paddymul temporarily deployed to testpypi February 24, 2026 04:07 — with GitHub Actions Inactive

chatgpt-codex-connector bot reviewed Feb 24, 2026

View reviewed changes

Merge branch 'main' into feat/static-embed

0e8048d

paddymul temporarily deployed to testpypi February 24, 2026 22:14 — with GitHub Actions Inactive

Merge branch 'main' into feat/static-embed

7a34f79

paddymul temporarily deployed to testpypi February 25, 2026 22:08 — with GitHub Actions Inactive

fix: update AG Grid mock path in test for v35 upgrade

b3a29e3

The test was mocking `@ag-grid-community/react` (old modular path) but the component now imports from `ag-grid-react` (v35 monolithic path). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

paddymul temporarily deployed to testpypi February 25, 2026 22:13 — with GitHub Actions Inactive

paddymul mentioned this pull request Feb 26, 2026

Make it easier to statically embed buckaroo #553

Open

1 task

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: static embedding for serverless buckaroo rendering#560

feat: static embedding for serverless buckaroo rendering#560
paddymul wants to merge 14 commits intomainfrom
feat/static-embed

paddymul commented Feb 23, 2026

Uh oh!

github-actions bot commented Feb 23, 2026 •

edited

Loading

Uh oh!

paddymul commented Feb 24, 2026

Uh oh!

chatgpt-codex-connector bot left a comment

Uh oh!

chatgpt-codex-connector bot Feb 24, 2026

Uh oh!

chatgpt-codex-connector bot Feb 24, 2026

Uh oh!

chatgpt-codex-connector bot Feb 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

		elif suffix in ('.json', '.jsonl', '.ndjson'):
		return pl.read_ndjson(path)

Conversation

paddymul commented Feb 23, 2026

Summary

Files changed

Test plan

Uh oh!

github-actions bot commented Feb 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📦 TestPyPI package published

MCP server for Claude Code

Uh oh!

paddymul commented Feb 24, 2026

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector bot Feb 24, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector bot Feb 24, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector bot Feb 24, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions bot commented Feb 23, 2026 •

edited

Loading