feat: decode inline Arrow IPC + warehouse-compat fallback

docs/docs/api/appkit/Class.AppKitError.md

@@ -43,6 +43,7 @@ console.error(error.toJSON()); // Safe for logging, sensitive values redacted
 ```ts
 new AppKitError(message: string, options?: {
   cause?: Error;
+  clientMessage?: string;
   context?: Record<string, unknown>;
 }): AppKitError;
 ```
@@ -52,8 +53,9 @@ new AppKitError(message: string, options?: {
 | Parameter | Type |
 | ------ | ------ |
 | `message` | `string` |
-| `options?` | \{ `cause?`: `Error`; `context?`: `Record`\<`string`, `unknown`\>; \} |
+| `options?` | \{ `cause?`: `Error`; `clientMessage?`: `string`; `context?`: `Record`\<`string`, `unknown`\>; \} |
 | `options.cause?` | `Error` |
+| `options.clientMessage?` | `string` |
 | `options.context?` | `Record`\<`string`, `unknown`\> |
 
 #### Returns
@@ -68,6 +70,24 @@ Error.constructor
 
 ## Properties
 
+### \_clientMessage?
+
+```ts
+protected readonly optional _clientMessage: string;
+```
+
+Client-safe error message. When set, callers serializing the error to
+a client (SSE, HTTP body) MUST prefer `clientMessage` over `message`
+— `message` may contain raw upstream / SDK text including statement
+fragments, internal object names, and correlation IDs.
+
+Subclasses can set this in their constructor for a fixed sanitized
+string. When unset, `clientMessage` defaults to a generic per-code
+string (see the getter), and the raw `message` is kept server-side
+only.
+
+***
+
 ### cause?
 
 ```ts
@@ -122,6 +142,23 @@ abstract readonly statusCode: number;
 
 HTTP status code suggestion (can be overridden)
 
+## Accessors
+
+### clientMessage
+
+#### Get Signature
+
+```ts
+get clientMessage(): string;
+```
+
+Sanitized message safe to forward to clients. Override in subclasses
+if a more specific default is appropriate.
+
+##### Returns
+
+`string`
+
 ## Methods
 
 ### toJSON()

docs/docs/api/appkit/Class.AuthenticationError.md

@@ -21,6 +21,7 @@ throw new AuthenticationError("Failed to generate credentials", { cause: origina
 ```ts
 new AuthenticationError(message: string, options?: {
   cause?: Error;
+  clientMessage?: string;
   context?: Record<string, unknown>;
 }): AuthenticationError;
 ```
@@ -30,8 +31,9 @@ new AuthenticationError(message: string, options?: {
 | Parameter | Type |
 | ------ | ------ |
 | `message` | `string` |
-| `options?` | \{ `cause?`: `Error`; `context?`: `Record`\<`string`, `unknown`\>; \} |
+| `options?` | \{ `cause?`: `Error`; `clientMessage?`: `string`; `context?`: `Record`\<`string`, `unknown`\>; \} |
 | `options.cause?` | `Error` |
+| `options.clientMessage?` | `string` |
 | `options.context?` | `Record`\<`string`, `unknown`\> |
 
 #### Returns
@@ -44,6 +46,28 @@ new AuthenticationError(message: string, options?: {
 
 ## Properties
 
+### \_clientMessage?
+
+```ts
+protected readonly optional _clientMessage: string;
+```
+
+Client-safe error message. When set, callers serializing the error to
+a client (SSE, HTTP body) MUST prefer `clientMessage` over `message`
+— `message` may contain raw upstream / SDK text including statement
+fragments, internal object names, and correlation IDs.
+
+Subclasses can set this in their constructor for a fixed sanitized
+string. When unset, `clientMessage` defaults to a generic per-code
+string (see the getter), and the raw `message` is kept server-side
+only.
+
+#### Inherited from
+
+[`AppKitError`](Class.AppKitError.md).[`_clientMessage`](Class.AppKitError.md#_clientmessage)
+
+***
+
 ### cause?
 
 ```ts
@@ -112,6 +136,27 @@ HTTP status code suggestion (can be overridden)
 
 [`AppKitError`](Class.AppKitError.md).[`statusCode`](Class.AppKitError.md#statuscode)
 
+## Accessors
+
+### clientMessage
+
+#### Get Signature
+
+```ts
+get clientMessage(): string;
+```
+
+Sanitized message safe to forward to clients. Override in subclasses
+if a more specific default is appropriate.
+
+##### Returns
+
+`string`
+
+#### Inherited from
+
+[`AppKitError`](Class.AppKitError.md).[`clientMessage`](Class.AppKitError.md#clientmessage)
+
 ## Methods
 
 ### toJSON()

docs/docs/api/appkit/Class.ConfigurationError.md

@@ -21,6 +21,7 @@ throw new ConfigurationError("Warehouse ID not found", { context: { env: "produc
 ```ts
 new ConfigurationError(message: string, options?: {
   cause?: Error;
+  clientMessage?: string;
   context?: Record<string, unknown>;
 }): ConfigurationError;
 ```
@@ -30,8 +31,9 @@ new ConfigurationError(message: string, options?: {
 | Parameter | Type |
 | ------ | ------ |
 | `message` | `string` |
-| `options?` | \{ `cause?`: `Error`; `context?`: `Record`\<`string`, `unknown`\>; \} |
+| `options?` | \{ `cause?`: `Error`; `clientMessage?`: `string`; `context?`: `Record`\<`string`, `unknown`\>; \} |
 | `options.cause?` | `Error` |
+| `options.clientMessage?` | `string` |
 | `options.context?` | `Record`\<`string`, `unknown`\> |
 
 #### Returns
@@ -44,6 +46,28 @@ new ConfigurationError(message: string, options?: {
 
 ## Properties
 
+### \_clientMessage?
+
+```ts
+protected readonly optional _clientMessage: string;
+```
+
+Client-safe error message. When set, callers serializing the error to
+a client (SSE, HTTP body) MUST prefer `clientMessage` over `message`
+— `message` may contain raw upstream / SDK text including statement
+fragments, internal object names, and correlation IDs.
+
+Subclasses can set this in their constructor for a fixed sanitized
+string. When unset, `clientMessage` defaults to a generic per-code
+string (see the getter), and the raw `message` is kept server-side
+only.
+
+#### Inherited from
+
+[`AppKitError`](Class.AppKitError.md).[`_clientMessage`](Class.AppKitError.md#_clientmessage)
+
+***
+
 ### cause?
 
 ```ts
@@ -112,6 +136,27 @@ HTTP status code suggestion (can be overridden)
 
 [`AppKitError`](Class.AppKitError.md).[`statusCode`](Class.AppKitError.md#statuscode)
 
+## Accessors
+
+### clientMessage
+
+#### Get Signature
+
+```ts
+get clientMessage(): string;
+```
+
+Sanitized message safe to forward to clients. Override in subclasses
+if a more specific default is appropriate.
+
+##### Returns
+
+`string`
+
+#### Inherited from
+
+[`AppKitError`](Class.AppKitError.md).[`clientMessage`](Class.AppKitError.md#clientmessage)
+
 ## Methods
 
 ### toJSON()

docs/docs/api/appkit/Class.ConnectionError.md

@@ -21,6 +21,7 @@ throw new ConnectionError("No response received from SQL Warehouse API");
 ```ts
 new ConnectionError(message: string, options?: {
   cause?: Error;
+  clientMessage?: string;
   context?: Record<string, unknown>;
 }): ConnectionError;
 ```
@@ -30,8 +31,9 @@ new ConnectionError(message: string, options?: {
 | Parameter | Type |
 | ------ | ------ |
 | `message` | `string` |
-| `options?` | \{ `cause?`: `Error`; `context?`: `Record`\<`string`, `unknown`\>; \} |
+| `options?` | \{ `cause?`: `Error`; `clientMessage?`: `string`; `context?`: `Record`\<`string`, `unknown`\>; \} |
 | `options.cause?` | `Error` |
+| `options.clientMessage?` | `string` |
 | `options.context?` | `Record`\<`string`, `unknown`\> |
 
 #### Returns
@@ -44,6 +46,28 @@ new ConnectionError(message: string, options?: {
 
 ## Properties
 
+### \_clientMessage?
+
+```ts
+protected readonly optional _clientMessage: string;
+```
+
+Client-safe error message. When set, callers serializing the error to
+a client (SSE, HTTP body) MUST prefer `clientMessage` over `message`
+— `message` may contain raw upstream / SDK text including statement
+fragments, internal object names, and correlation IDs.
+
+Subclasses can set this in their constructor for a fixed sanitized
+string. When unset, `clientMessage` defaults to a generic per-code
+string (see the getter), and the raw `message` is kept server-side
+only.
+
+#### Inherited from
+
+[`AppKitError`](Class.AppKitError.md).[`_clientMessage`](Class.AppKitError.md#_clientmessage)
+
+***
+
 ### cause?
 
 ```ts
@@ -112,6 +136,27 @@ HTTP status code suggestion (can be overridden)
 
 [`AppKitError`](Class.AppKitError.md).[`statusCode`](Class.AppKitError.md#statuscode)
 
+## Accessors
+
+### clientMessage
+
+#### Get Signature
+
+```ts
+get clientMessage(): string;
+```
+
+Sanitized message safe to forward to clients. Override in subclasses
+if a more specific default is appropriate.
+
+##### Returns
+
+`string`
+
+#### Inherited from
+
+[`AppKitError`](Class.AppKitError.md).[`clientMessage`](Class.AppKitError.md#clientmessage)
+
 ## Methods
 
 ### toJSON()