@malloy-publisher/server 0.0.220 → 0.0.222

package/dist/app/assets/{index-B3NcDPbp.js → index-DcCw_qxr.js}

@@ -1,4 +1,4 @@
-import{aI as ci}from"./index-BxDMCn3s.js";import{r as di}from"./index-w_0OQJgZ.js";function pi(u,re){for(var j=0;j<re.length;j++){const N=re[j];if(typeof N!="string"&&!Array.isArray(N)){for(const E in N)if(E!=="default"&&!(E in u)){const S=Object.getOwnPropertyDescriptor(N,E);S&&Object.defineProperty(u,E,S.get?S:{enumerable:!0,get:()=>N[E]})}}}return Object.freeze(Object.defineProperty(u,Symbol.toStringTag,{value:"Module"}))}var bt={},ut={},Or;function Vt(){if(Or)return ut;Or=1,Object.defineProperty(ut,"__esModule",{value:!0}),ut.isChainOp=u,ut.isStringCondition=re,ut.isStringFilter=j,ut.isBooleanFilter=N,ut.isNumberFilter=E,ut.isTemporalFilter=S,ut.isFilterExpression=w,ut.isFilterable=y;function u(o){return["and","or",","].includes(o)}function re(o){return["starts","ends","contains","="].includes(o.operator)}function j(o){return typeof o=="object"&&o!==null&&"operator"in o&&typeof o.operator=="string"&&["starts","ends","contains","=","~","null","empty","and","or",",","()"].includes(o.operator)}function N(o){return typeof o=="object"&&o!==null&&"operator"in o&&typeof o.operator=="string"&&["null","true","false","=false","=true"].includes(o.operator)}function E(o){return typeof o=="object"&&o!==null&&"operator"in o&&typeof o.operator=="string"&&["range","<=",">=","!=","=",">","<","and","or","()","null"].includes(o.operator)}function S(o){return typeof o=="object"&&o!==null&&"operator"in o&&typeof o.operator=="string"&&["literal","before","after","to","for","in","and","or","in_last","this","last","next","()","null"].includes(o.operator)}function w(o){return typeof o=="object"&&o!==null&&"operator"in o}function y(o){return["string","number","boolean","timestamp","timestamptz","date"].includes(o)}return ut}var Pt={},Er;function hi(){return Er||(Er=1,Object.defineProperty(Pt,"__esModule",{value:!0}),Pt.BooleanFilterExpression=void 0,Pt.BooleanFilterExpression={parse(u){var re;if(u.match(/^\s*$/))return{parsed:null,log:[]};const j={parsed:null,log:[]};let N=u.toLowerCase().trim().replace(/\s\s+/," "),E=!1;if(N.startsWith("not ")&&(E=!0,N=N.slice(4)),N==="true")j.parsed={operator:"true"};else if(N==="=true")j.parsed={operator:"=true"};else if(N==="false")j.parsed={operator:"false"};else if(N==="=false")j.parsed={operator:"=false"};else if(N==="null")j.parsed={operator:"null"};else{const S=u.match(/[^\s]/),w=S&&(re=S.index)!==null&&re!==void 0?re:0;j.log=[{message:`Illegal boolean filter '${N}'. Must be one of true,=true,false,=false,null`,severity:"error",startIndex:w,endIndex:w+u.length-1}]}return E&&j.parsed&&(j.parsed.not=!0),j},unparse(u){return u===null?"":(u.not?"not ":"")+u.operator}}),Pt}var pr={},Ue={},kr;function Ht(){if(kr)return Ue;kr=1,Object.defineProperty(Ue,"__esModule",{value:!0}),Ue.maybeNot=re,Ue.unescape=j,Ue.escape=N,Ue.matchOp=S,Ue.conjoin=y,Ue.joinNumbers=o,Ue.mkRange=d,Ue.mkValues=t,Ue.numNot=D,Ue.temporalNot=x,Ue.joinTemporal=Z,Ue.timeLiteral=ee,Ue.mkUnits=ce;const u=Vt();function re(O){const[A,b]=O;return A&&b&&(0,u.isStringFilter)(b)?{...b,not:!0}:b}function j(O){return O.replace(/\\(.)/g,"$1")}function N(O){const A=O.toLowerCase();return A==="null"||A==="empty"?"\\"+O:O.replace(/([,; |()\\%_-])/g,"\\$1")}function E(O){let A=!1,b=!1,B=0,de=!1;const Fe=O.length;for(let ve=0;ve<Fe;ve+=1){const Ye=O[ve];if(Ye===" "||Ye==="	"){B+=1;continue}B=0,Ye==="%"?(de=!0,ve===0&&(A=!0),b=!0):(b=!1,Ye==="\\"?ve+=1:Ye==="_"&&(de=!0))}return{hasLike:de,percentEnd:b&&Fe>1,percentStart:A&&Fe>1,endSpace:B}}function S(O){let A=O.trimStart();const{hasLike:b,percentEnd:B,percentStart:de,endSpace:Fe}=E(A);if(Fe>0&&(A=A.slice(0,-Fe)),b){if(de&&B){const ve=A.slice(1,-1);if(!E(ve).hasLike&&ve.length>0)return{operator:"contains",values:[j(ve)]}}else if(B){const ve=A.slice(0,-1);if(!E(ve).hasLike)return{operator:"starts",values:[j(ve)]}}else if(de){const ve=A.slice(1);if(!E(ve).hasLike)return{operator:"ends",values:[j(ve)]}}return{operator:"~",escaped_values:[A]}}return A.toLowerCase()==="null"?{operator:"null"}:A.toLowerCase()==="empty"?{operator:"empty"}:{operator:"=",values:[j(A)]}}function w(O,A){var b,B;return O.operator===A.operator&&((b=O.not)!==null&&b!==void 0?b:!1)===((B=A.not)!==null&&B!==void 0?B:!1)}function y(O,A,b){if(A=A.toLowerCase(),(0,u.isStringFilter)(O)&&(0,u.isStringFilter)(b)){if(A===","){if(O.operator==="~"&&w(O,b))return{...O,escaped_values:[...O.escaped_values,...b.escaped_values]};if((0,u.isStringCondition)(O)&&w(O,b))return{...O,values:[...O.values,...b.values]}}const B=A===","?",":A==="|"?"or":A===";"?"and":void 0;if(B)return O.operator===B?{...O,members:[...O.members,b]}:{operator:B,members:[O,b]}}return null}function o(O,A,b){if(A=A.toLowerCase(),(0,u.isNumberFilter)(O)&&(0,u.isNumberFilter)(b)){if(A==="or"&&O.operator==="="&&w(O,b)){const B={operator:"=",values:[...O.values,...b.values]};return O.not&&(B.not=!0),B}if(A==="and"||A==="or")return O.operator===A?{...O,members:[...O.members,b]}:{operator:A,members:[O,b]}}return null}function d(O,A,b,B){return{operator:"range",startValue:A,startOperator:O==="("?">":">=",endValue:b,endOperator:B===")"?"<":"<="}}function t(O,A){return{values:[O,...A]}}function D(O,A){return(0,u.isNumberFilter)(O)&&A?O.operator==="="?{operator:"!=",values:O.values}:O.operator==="!="?{operator:"=",values:O.values}:{...O,not:!0}:O}function x(O,A){if((0,u.isTemporalFilter)(O)&&A){if("not"in O){const b={...O};return O.not?delete b.not:b.not=!0,b}return{...O,not:!0}}return O}function Z(O,A,b){return A=A.toLowerCase(),(0,u.isTemporalFilter)(O)&&(0,u.isTemporalFilter)(b)&&(A==="and"||A==="or")?O.operator===A?{...O,members:[...O.members,b]}:{operator:A,members:[O,b]}:null}function ee(O,A){const b={moment:"literal",literal:O};return A&&(b.units=A),b}function ce(O){switch(O.toLowerCase()){case"second":case"seconds":return"second";case"minute":case"minutes":return"minute";case"hour":case"hours":return"hour";case"day":case"days":return"day";case"week":case"weeks":return"week";case"month":case"months":return"month";case"quarter":case"quarters":return"quarter";case"year":case"years":return"year"}}return Ue}var hr,Rr;function mi(){if(Rr)return hr;Rr=1;const{numNot:u,mkRange:re,joinNumbers:j,mkValues:N}=Ht();function E(o,d){function t(){this.constructor=o}t.prototype=d.prototype,o.prototype=new t}function S(o,d,t,D){var x=Error.call(this,o);return Object.setPrototypeOf&&Object.setPrototypeOf(x,S.prototype),x.expected=d,x.found=t,x.location=D,x.name="SyntaxError",x}E(S,Error);function w(o,d,t){return t=t||" ",o.length>d?o:(d-=o.length,t+=t.repeat(d),o+t.slice(0,d))}S.prototype.format=function(o){var d="Error: "+this.message;if(this.location){var t=null,D;for(D=0;D<o.length;D++)if(o[D].source===this.location.source){t=o[D].text.split(/\r\n|\n|\r/g);break}var x=this.location.start,Z=this.location.source&&typeof this.location.source.offset=="function"?this.location.source.offset(x):x,ee=this.location.source+":"+Z.line+":"+Z.column;if(t){var ce=this.location.end,O=w("",Z.line.toString().length," "),A=t[x.line-1],b=x.line===ce.line?ce.column:A.length+1,B=b-x.column||1;d+=`
+import{aI as ci}from"./index-Cr-asgoV.js";import{r as di}from"./index-w_0OQJgZ.js";function pi(u,re){for(var j=0;j<re.length;j++){const N=re[j];if(typeof N!="string"&&!Array.isArray(N)){for(const E in N)if(E!=="default"&&!(E in u)){const S=Object.getOwnPropertyDescriptor(N,E);S&&Object.defineProperty(u,E,S.get?S:{enumerable:!0,get:()=>N[E]})}}}return Object.freeze(Object.defineProperty(u,Symbol.toStringTag,{value:"Module"}))}var bt={},ut={},Or;function Vt(){if(Or)return ut;Or=1,Object.defineProperty(ut,"__esModule",{value:!0}),ut.isChainOp=u,ut.isStringCondition=re,ut.isStringFilter=j,ut.isBooleanFilter=N,ut.isNumberFilter=E,ut.isTemporalFilter=S,ut.isFilterExpression=w,ut.isFilterable=y;function u(o){return["and","or",","].includes(o)}function re(o){return["starts","ends","contains","="].includes(o.operator)}function j(o){return typeof o=="object"&&o!==null&&"operator"in o&&typeof o.operator=="string"&&["starts","ends","contains","=","~","null","empty","and","or",",","()"].includes(o.operator)}function N(o){return typeof o=="object"&&o!==null&&"operator"in o&&typeof o.operator=="string"&&["null","true","false","=false","=true"].includes(o.operator)}function E(o){return typeof o=="object"&&o!==null&&"operator"in o&&typeof o.operator=="string"&&["range","<=",">=","!=","=",">","<","and","or","()","null"].includes(o.operator)}function S(o){return typeof o=="object"&&o!==null&&"operator"in o&&typeof o.operator=="string"&&["literal","before","after","to","for","in","and","or","in_last","this","last","next","()","null"].includes(o.operator)}function w(o){return typeof o=="object"&&o!==null&&"operator"in o}function y(o){return["string","number","boolean","timestamp","timestamptz","date"].includes(o)}return ut}var Pt={},Er;function hi(){return Er||(Er=1,Object.defineProperty(Pt,"__esModule",{value:!0}),Pt.BooleanFilterExpression=void 0,Pt.BooleanFilterExpression={parse(u){var re;if(u.match(/^\s*$/))return{parsed:null,log:[]};const j={parsed:null,log:[]};let N=u.toLowerCase().trim().replace(/\s\s+/," "),E=!1;if(N.startsWith("not ")&&(E=!0,N=N.slice(4)),N==="true")j.parsed={operator:"true"};else if(N==="=true")j.parsed={operator:"=true"};else if(N==="false")j.parsed={operator:"false"};else if(N==="=false")j.parsed={operator:"=false"};else if(N==="null")j.parsed={operator:"null"};else{const S=u.match(/[^\s]/),w=S&&(re=S.index)!==null&&re!==void 0?re:0;j.log=[{message:`Illegal boolean filter '${N}'. Must be one of true,=true,false,=false,null`,severity:"error",startIndex:w,endIndex:w+u.length-1}]}return E&&j.parsed&&(j.parsed.not=!0),j},unparse(u){return u===null?"":(u.not?"not ":"")+u.operator}}),Pt}var pr={},Ue={},kr;function Ht(){if(kr)return Ue;kr=1,Object.defineProperty(Ue,"__esModule",{value:!0}),Ue.maybeNot=re,Ue.unescape=j,Ue.escape=N,Ue.matchOp=S,Ue.conjoin=y,Ue.joinNumbers=o,Ue.mkRange=d,Ue.mkValues=t,Ue.numNot=D,Ue.temporalNot=x,Ue.joinTemporal=Z,Ue.timeLiteral=ee,Ue.mkUnits=ce;const u=Vt();function re(O){const[A,b]=O;return A&&b&&(0,u.isStringFilter)(b)?{...b,not:!0}:b}function j(O){return O.replace(/\\(.)/g,"$1")}function N(O){const A=O.toLowerCase();return A==="null"||A==="empty"?"\\"+O:O.replace(/([,; |()\\%_-])/g,"\\$1")}function E(O){let A=!1,b=!1,B=0,de=!1;const Fe=O.length;for(let ve=0;ve<Fe;ve+=1){const Ye=O[ve];if(Ye===" "||Ye==="	"){B+=1;continue}B=0,Ye==="%"?(de=!0,ve===0&&(A=!0),b=!0):(b=!1,Ye==="\\"?ve+=1:Ye==="_"&&(de=!0))}return{hasLike:de,percentEnd:b&&Fe>1,percentStart:A&&Fe>1,endSpace:B}}function S(O){let A=O.trimStart();const{hasLike:b,percentEnd:B,percentStart:de,endSpace:Fe}=E(A);if(Fe>0&&(A=A.slice(0,-Fe)),b){if(de&&B){const ve=A.slice(1,-1);if(!E(ve).hasLike&&ve.length>0)return{operator:"contains",values:[j(ve)]}}else if(B){const ve=A.slice(0,-1);if(!E(ve).hasLike)return{operator:"starts",values:[j(ve)]}}else if(de){const ve=A.slice(1);if(!E(ve).hasLike)return{operator:"ends",values:[j(ve)]}}return{operator:"~",escaped_values:[A]}}return A.toLowerCase()==="null"?{operator:"null"}:A.toLowerCase()==="empty"?{operator:"empty"}:{operator:"=",values:[j(A)]}}function w(O,A){var b,B;return O.operator===A.operator&&((b=O.not)!==null&&b!==void 0?b:!1)===((B=A.not)!==null&&B!==void 0?B:!1)}function y(O,A,b){if(A=A.toLowerCase(),(0,u.isStringFilter)(O)&&(0,u.isStringFilter)(b)){if(A===","){if(O.operator==="~"&&w(O,b))return{...O,escaped_values:[...O.escaped_values,...b.escaped_values]};if((0,u.isStringCondition)(O)&&w(O,b))return{...O,values:[...O.values,...b.values]}}const B=A===","?",":A==="|"?"or":A===";"?"and":void 0;if(B)return O.operator===B?{...O,members:[...O.members,b]}:{operator:B,members:[O,b]}}return null}function o(O,A,b){if(A=A.toLowerCase(),(0,u.isNumberFilter)(O)&&(0,u.isNumberFilter)(b)){if(A==="or"&&O.operator==="="&&w(O,b)){const B={operator:"=",values:[...O.values,...b.values]};return O.not&&(B.not=!0),B}if(A==="and"||A==="or")return O.operator===A?{...O,members:[...O.members,b]}:{operator:A,members:[O,b]}}return null}function d(O,A,b,B){return{operator:"range",startValue:A,startOperator:O==="("?">":">=",endValue:b,endOperator:B===")"?"<":"<="}}function t(O,A){return{values:[O,...A]}}function D(O,A){return(0,u.isNumberFilter)(O)&&A?O.operator==="="?{operator:"!=",values:O.values}:O.operator==="!="?{operator:"=",values:O.values}:{...O,not:!0}:O}function x(O,A){if((0,u.isTemporalFilter)(O)&&A){if("not"in O){const b={...O};return O.not?delete b.not:b.not=!0,b}return{...O,not:!0}}return O}function Z(O,A,b){return A=A.toLowerCase(),(0,u.isTemporalFilter)(O)&&(0,u.isTemporalFilter)(b)&&(A==="and"||A==="or")?O.operator===A?{...O,members:[...O.members,b]}:{operator:A,members:[O,b]}:null}function ee(O,A){const b={moment:"literal",literal:O};return A&&(b.units=A),b}function ce(O){switch(O.toLowerCase()){case"second":case"seconds":return"second";case"minute":case"minutes":return"minute";case"hour":case"hours":return"hour";case"day":case"days":return"day";case"week":case"weeks":return"week";case"month":case"months":return"month";case"quarter":case"quarters":return"quarter";case"year":case"years":return"year"}}return Ue}var hr,Rr;function mi(){if(Rr)return hr;Rr=1;const{numNot:u,mkRange:re,joinNumbers:j,mkValues:N}=Ht();function E(o,d){function t(){this.constructor=o}t.prototype=d.prototype,o.prototype=new t}function S(o,d,t,D){var x=Error.call(this,o);return Object.setPrototypeOf&&Object.setPrototypeOf(x,S.prototype),x.expected=d,x.found=t,x.location=D,x.name="SyntaxError",x}E(S,Error);function w(o,d,t){return t=t||" ",o.length>d?o:(d-=o.length,t+=t.repeat(d),o+t.slice(0,d))}S.prototype.format=function(o){var d="Error: "+this.message;if(this.location){var t=null,D;for(D=0;D<o.length;D++)if(o[D].source===this.location.source){t=o[D].text.split(/\r\n|\n|\r/g);break}var x=this.location.start,Z=this.location.source&&typeof this.location.source.offset=="function"?this.location.source.offset(x):x,ee=this.location.source+":"+Z.line+":"+Z.column;if(t){var ce=this.location.end,O=w("",Z.line.toString().length," "),A=t[x.line-1],b=x.line===ce.line?ce.column:A.length+1,B=b-x.column||1;d+=`
  --> `+ee+`
 `+O+` |
 `+Z.line+" | "+A+`

package/dist/app/index.html

@@ -11,7 +11,7 @@
          href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap"
       />
       <title>Malloy Publisher</title>
-     <script type="module" crossorigin src="/assets/index-BxDMCn3s.js"></script>
+     <script type="module" crossorigin src="/assets/index-Cr-asgoV.js"></script>
      <link rel="stylesheet" crossorigin href="/assets/index-5eLCcNmP.css">
    </head>
    <body>

package/dist/package_load_worker.mjs

@@ -11713,12 +11713,30 @@ function unwrapQuotedExpression(body) {
 }
 
 // src/service/package_manifest.ts
+var FRESHNESS_FALLBACKS = ["live", "stale_ok", "fail"];
+function parseFreshness(raw) {
+  if (!raw || typeof raw !== "object") {
+    return null;
+  }
+  const { window: window2, fallback } = raw;
+  const freshness = {};
+  if (typeof window2 === "string") {
+    freshness.window = window2;
+  }
+  if (typeof fallback === "string" && FRESHNESS_FALLBACKS.includes(fallback)) {
+    freshness.fallback = fallback;
+  }
+  return freshness;
+}
 function parsePackageMaterialization(raw) {
   if (!raw || typeof raw !== "object") {
     return null;
   }
-  const schedule = raw.schedule;
-  return { schedule: typeof schedule === "string" ? schedule : null };
+  const { schedule, freshness } = raw;
+  return {
+    schedule: typeof schedule === "string" ? schedule : null,
+    freshness: parseFreshness(freshness)
+  };
 }
 
 // src/service/source_extraction.ts

package/dist/server.mjs

@@ -249957,6 +249957,14 @@ class ModelController {
 // src/controller/package.controller.ts
 init_constants();
 init_errors();
+function formatPublishRejections(pkg, exploresOverride) {
+  const message = [
+    pkg.formatInvalidExplores(exploresOverride),
+    pkg.formatInvalidSchedule()
+  ].filter(Boolean).join(`
+`);
+  return message || undefined;
+}
 
 class PackageController {
   environmentStore;
@@ -249997,7 +250005,7 @@ class PackageController {
     let result;
     if (body.location) {
       const bodyLocation = body.location;
-      result = await environment.installPackage(packageName, (stagingPath) => this.downloadInto(environmentName, packageName, bodyLocation, stagingPath), (pkg) => pkg.formatInvalidExplores());
+      result = await environment.installPackage(packageName, (stagingPath) => this.downloadInto(environmentName, packageName, bodyLocation, stagingPath), (pkg) => formatPublishRejections(pkg));
     } else {
       result = await environment.addPackage(packageName);
     }
@@ -250005,7 +250013,7 @@ class PackageController {
       throw new Error(`Failed to create package ${packageName}`);
     }
     if (!body.location) {
-      const invalidMsg = result.formatInvalidExplores();
+      const invalidMsg = formatPublishRejections(result);
       if (invalidMsg) {
         await environment.unloadPackage(packageName).catch(() => {});
         throw new BadRequestError(invalidMsg);
@@ -250030,7 +250038,7 @@ class PackageController {
     const environment = await this.environmentStore.getEnvironment(environmentName, false);
     if (body.location) {
       const bodyLocation = body.location;
-      await environment.installPackage(packageName, (stagingPath) => this.downloadInto(environmentName, packageName, bodyLocation, stagingPath), (pkg) => pkg.formatInvalidExplores(body.explores?.map(normalizeModelPath)));
+      await environment.installPackage(packageName, (stagingPath) => this.downloadInto(environmentName, packageName, bodyLocation, stagingPath), (pkg) => formatPublishRejections(pkg, body.explores?.map(normalizeModelPath)));
     }
     const result = await environment.updatePackage(packageName, body);
     await this.environmentStore.addPackageToDatabase(environmentName, packageName);
@@ -258525,6 +258533,7 @@ function deriveBuildPlan(graphs, sources, connectionDigests, sourceNames, source
   for (const [sourceID, source] of Object.entries(sources)) {
     if (include && !include.has(source.name))
       continue;
+    const annotationFields = deriveAnnotationFields(source);
     wireSources[sourceID] = {
       name: source.name,
       sourceID: source.sourceID,
@@ -258532,8 +258541,10 @@ function deriveBuildPlan(graphs, sources, connectionDigests, sourceNames, source
       dialect: source.dialectName,
       sourceEntityId: computeSourceEntityId(source, connectionDigests),
       sql: source.getSQL(),
+      sharing: annotationFields.sharing ?? null,
+      refresh: annotationFields.refresh ?? null,
       columns: deriveColumns(source),
-      annotationFields: deriveAnnotationFields(source),
+      annotationFields,
       modelPath: sourceModelPaths?.[sourceID]
     };
   }
@@ -258699,7 +258710,8 @@ class Package {
       queryableSources: outcome.packageMetadata.queryableSources,
       manifestLocation: outcome.packageMetadata.manifestLocation ?? null,
       materialization: outcome.packageMetadata.materialization ?? {
-        schedule: null
+        schedule: null,
+        freshness: null
       }
     };
     const models = new Map;
@@ -258753,6 +258765,13 @@ class Package {
         detail: invalidMsg
       });
     }
+    const invalidSchedule = pkg.formatInvalidSchedule();
+    if (invalidSchedule) {
+      logger.warn(`Package ${packageName} has an invalid cron schedule`, {
+        packageName,
+        detail: invalidSchedule
+      });
+    }
     pkg.logEmptyDiscoveryWarnings();
     return pkg;
   }
@@ -258824,6 +258843,17 @@ class Package {
   }
   formatInvalidExplores(exploresOverride) {
     return this.exploreWarnings(exploresOverride).join(`
+`);
+  }
+  scheduleWarnings() {
+    const schedule = this.packageMetadata.materialization?.schedule;
+    if (!schedule)
+      return [];
+    const sources = Object.values(this.buildPlan?.sources ?? {});
+    return sources.filter((source) => source.sharing !== "private").map((source) => `materialization.schedule (cron) in ${PACKAGE_MANIFEST_NAME} requires every ` + `persist source to declare '#@ persist ... sharing=private'; source ` + `'${source.name}' resolves to ${source.sharing ? `'${source.sharing}'` : "unset"}. Declare 'materialization.freshness.window' instead (the control plane ` + `schedules refreshes from it), or mark every persist source sharing=private.`);
+  }
+  formatInvalidSchedule() {
+    return this.scheduleWarnings().join(`
 `);
   }
   emptyDiscoveryWarnings() {

package/package.json

@@ -1,7 +1,7 @@
 {
    "name": "@malloy-publisher/server",
    "description": "Malloy Publisher Server",
-   "version": "0.0.220",
+   "version": "0.0.222",
    "main": "dist/server.mjs",
    "bin": {
       "malloy-publisher": "dist/server.mjs"

package/src/controller/package.controller.spec.ts

@@ -18,6 +18,7 @@ describe("PackageController.addPackage explores validation", () => {
          "Invalid explores entry 'missing.malloy' in publisher.json: file not found";
       const mockPackage = {
          formatInvalidExplores: () => invalidMsg,
+         formatInvalidSchedule: () => "",
       };
       const unloadPackage = sinon.stub().resolves(undefined);
       const deletePackage = sinon.stub().resolves(undefined);
@@ -52,7 +53,10 @@ describe("PackageController.addPackage explores validation", () => {
       // controller passes a validator and does NOT call delete/unload itself.
       const invalidMsg =
          "Invalid explores entry 'missing.malloy' in publisher.json: file not found";
-      const mockPackage = { formatInvalidExplores: () => invalidMsg };
+      const mockPackage = {
+         formatInvalidExplores: () => invalidMsg,
+         formatInvalidSchedule: () => "",
+      };
       // installPackage mimics the real contract: invoke the validator and, if it
       // returns a message, throw BadRequestError (after its internal rollback).
       const installPackage = sinon
@@ -100,6 +104,7 @@ describe("PackageController.addPackage explores validation", () => {
    it("persists when explores are valid (no-location)", async () => {
       const mockPackage = {
          formatInvalidExplores: () => "",
+         formatInvalidSchedule: () => "",
       };
       const addPackage = sinon.stub().resolves(mockPackage);
       const getEnvironment = sinon.stub().resolves({ addPackage });
@@ -122,6 +127,88 @@ describe("PackageController.addPackage explores validation", () => {
    });
 });
 
+describe("PackageController.addPackage cron schedule validation", () => {
+   afterEach(() => {
+      sinon.restore();
+   });
+
+   it("rejects a publish whose cron fails the private-only gate (no-location path)", async () => {
+      // Valid explores but an invalid materialization cron: the publish must
+      // still 400 (strict-at-publish, same split as explores — load merely
+      // warns) and roll back via unloadPackage.
+      const cronMsg =
+         "materialization.schedule (cron) in publisher.json requires every " +
+         "persist source to declare '#@ persist ... sharing=private'; source " +
+         "'orders' resolves to unset.";
+      const mockPackage = {
+         formatInvalidExplores: () => "",
+         formatInvalidSchedule: () => cronMsg,
+      };
+      const unloadPackage = sinon.stub().resolves(undefined);
+      const addPackage = sinon.stub().resolves(mockPackage);
+      const environment = { addPackage, unloadPackage };
+      const getEnvironment = sinon.stub().resolves(environment);
+      const addPackageToDatabase = sinon.stub().resolves(undefined);
+      const environmentStore = {
+         publisherConfigIsFrozen: false,
+         getEnvironment,
+         addPackageToDatabase,
+      } as unknown as EnvironmentStore;
+
+      const controller = new PackageController(environmentStore);
+
+      await expect(
+         controller.addPackage("env", { name: "pkg", description: "test" }),
+      ).rejects.toThrow(cronMsg);
+
+      expect(unloadPackage.calledOnceWith("pkg")).toBe(true);
+      expect(addPackageToDatabase.called).toBe(false);
+   });
+
+   it("location path: the cron gate runs inside installPackage's rollback window", async () => {
+      const cronMsg =
+         "materialization.schedule (cron) in publisher.json requires every " +
+         "persist source to declare '#@ persist ... sharing=private'.";
+      const mockPackage = {
+         formatInvalidExplores: () => "",
+         formatInvalidSchedule: () => cronMsg,
+      };
+      const installPackage = sinon
+         .stub()
+         .callsFake(
+            async (
+               _name: string,
+               _downloader: unknown,
+               validate?: (pkg: unknown) => string | undefined,
+            ) => {
+               const msg = validate?.(mockPackage);
+               if (msg) throw new BadRequestError(msg);
+               return mockPackage;
+            },
+         );
+      const environment = { installPackage };
+      const getEnvironment = sinon.stub().resolves(environment);
+      const addPackageToDatabase = sinon.stub().resolves(undefined);
+      const environmentStore = {
+         publisherConfigIsFrozen: false,
+         getEnvironment,
+         addPackageToDatabase,
+      } as unknown as EnvironmentStore;
+
+      const controller = new PackageController(environmentStore);
+
+      await expect(
+         controller.addPackage("env", {
+            name: "pkg",
+            description: "test",
+            location: "gs://bucket/pkg.zip",
+         }),
+      ).rejects.toThrow(cronMsg);
+
+      expect(addPackageToDatabase.called).toBe(false);
+   });
+});
+
 describe("PackageController.updatePackage explores validation", () => {
    afterEach(() => {
       sinon.restore();
@@ -138,6 +225,7 @@ describe("PackageController.updatePackage explores validation", () => {
       const mockPackage = {
          formatInvalidExplores: (override?: string[]) =>
             override?.includes("nope.malloy") ? invalidMsg : "",
+         formatInvalidSchedule: () => "",
       };
       const installPackage = sinon
          .stub()

package/src/controller/package.controller.ts

@@ -5,6 +5,30 @@ import { EnvironmentStore } from "../service/environment_store";
 
 type ApiPackage = components["schemas"]["Package"];
 
+/**
+ * Everything that is strict-at-publish, joined into one 400 message (or
+ * undefined when the package is publishable): invalid explores entries plus
+ * the materialization cron gate (a package-level `schedule` requires every
+ * persist source to resolve to explicit `sharing=private` — see
+ * Package.scheduleWarnings). At startup/reload both are warn-only instead
+ * (fail-safe; see Package.loadViaWorker).
+ */
+function formatPublishRejections(
+   pkg: {
+      formatInvalidExplores(exploresOverride?: string[]): string;
+      formatInvalidSchedule(): string;
+   },
+   exploresOverride?: string[],
+): string | undefined {
+   const message = [
+      pkg.formatInvalidExplores(exploresOverride),
+      pkg.formatInvalidSchedule(),
+   ]
+      .filter(Boolean)
+      .join("\n");
+   return message || undefined;
+}
+
 export class PackageController {
    private environmentStore: EnvironmentStore;
 
@@ -100,7 +124,7 @@ export class PackageController {
                   bodyLocation,
                   stagingPath,
                ),
-            (pkg) => pkg.formatInvalidExplores(),
+            (pkg) => formatPublishRejections(pkg),
          );
       } else {
          result = await environment.addPackage(packageName);
@@ -114,7 +138,7 @@ export class PackageController {
       }
 
       if (!body.location) {
-         const invalidMsg = result.formatInvalidExplores();
+         const invalidMsg = formatPublishRejections(result);
          if (invalidMsg) {
             await environment.unloadPackage(packageName).catch(() => {
                /* best-effort; the package is not persisted below */
@@ -177,7 +201,8 @@ export class PackageController {
                   stagingPath,
                ),
             (pkg) =>
-               pkg.formatInvalidExplores(
+               formatPublishRejections(
+                  pkg,
                   body.explores?.map(normalizeModelPath),
                ),
          );

package/src/package_load/package_load_pool.ts

@@ -81,6 +81,7 @@ import { fileURLToPath, pathToFileURL } from "url";
 
 import { ModelCompilationError } from "../errors";
 import { logger } from "../logger";
+import type { PackageMaterializationConfig } from "../service/package_manifest";
 import type {
    ConnectionMetadataRequest,
    ConnectionMetadataResponse,
@@ -233,7 +234,7 @@ export interface LoadPackageOutcome {
       explores?: string[];
       queryableSources?: "declared" | "all";
       manifestLocation?: string | null;
-      materialization?: { schedule: string | null } | null;
+      materialization?: PackageMaterializationConfig | null;
    };
    models: Array<
       Omit<SerializedModel, "modelDef" | "sourceInfos"> & {

package/src/package_load/package_load_worker.ts

@@ -83,7 +83,10 @@ import { HackyDataStylesAccumulator } from "../data_styles";
 import { ModelCompilationError } from "../errors";
 import { validateAuthorizeProbes } from "../service/authorize";
 import { type FilterDefinition } from "../service/filter";
-import { parsePackageMaterialization } from "../service/package_manifest";
+import {
+   PackageMaterializationConfig,
+   parsePackageMaterialization,
+} from "../service/package_manifest";
 import {
    extractQueriesFromModelDef,
    extractSourcesFromModelDef,
@@ -383,7 +386,7 @@ async function readPackageMetadata(packagePath: string): Promise<{
    explores?: string[];
    queryableSources?: "declared" | "all";
    manifestLocation?: string | null;
-   materialization?: { schedule: string | null } | null;
+   materialization?: PackageMaterializationConfig | null;
 }> {
    const manifestPath = path.join(packagePath, PACKAGE_MANIFEST_NAME);
    const contents = await fs.promises.readFile(manifestPath, "utf8");

package/src/package_load/protocol.ts

@@ -65,6 +65,7 @@
  */
 
 import type { SQLSourceDef, TableSourceDef } from "@malloydata/malloy";
+import type { PackageMaterializationConfig } from "../service/package_manifest";
 
 // ──────────────────────────────────────────────────────────────────────
 // Direction: main ──▶ worker (load-package job)
@@ -179,7 +180,7 @@ export interface LoadPackageResult {
       explores?: string[];
       queryableSources?: "declared" | "all";
       manifestLocation?: string | null;
-      materialization?: { schedule: string | null } | null;
+      materialization?: PackageMaterializationConfig | null;
    };
    models: SerializedModel[];
    /** Wall-clock ms inside the worker for the full package load. */

package/src/service/build_plan.spec.ts

@@ -212,6 +212,50 @@ describe("deriveBuildPlan", () => {
       });
    });
 
+   it("reports declared sharing/refresh verbatim and null when unset", () => {
+      // The control plane distinguishes unset from an explicit `shared` (it
+      // applies the platform default itself), so the publisher must report
+      // the declared value verbatim — never substitute the default.
+      const declared = fakeSource({
+         name: "declared",
+         sourceEntityId: "bid-d",
+         annotationFields: {
+            name: "d_table",
+            sharing: "private",
+            refresh: "incremental",
+         },
+      });
+      const unset = fakeSource({ name: "unset", sourceEntityId: "bid-u" });
+      const plan = deriveBuildPlan(
+         [
+            {
+               connectionName: "duckdb",
+               nodes: [
+                  [
+                     { sourceID: "declared@m", dependsOn: [] },
+                     { sourceID: "unset@m", dependsOn: [] },
+                  ],
+               ],
+            },
+         ] as unknown as Parameters<typeof deriveBuildPlan>[0],
+         { "declared@m": declared, "unset@m": unset },
+         { duckdb: "dig" },
+      );
+
+      expect(plan.sources["declared@m"].sharing).toBe("private");
+      expect(plan.sources["declared@m"].refresh).toBe("incremental");
+      // The raw annotation map still carries every field alongside the typed
+      // projections.
+      expect(plan.sources["declared@m"].annotationFields).toEqual({
+         name: "d_table",
+         sharing: "private",
+         refresh: "incremental",
+      });
+      // Unset is null — not "shared" — on the wire.
+      expect(plan.sources["unset@m"].sharing).toBeNull();
+      expect(plan.sources["unset@m"].refresh).toBeNull();
+   });
+
    it("honors the sourceNames filter", () => {
       const a = fakeSource({ name: "a", sourceEntityId: "bid-a" });
       const b = fakeSource({ name: "b", sourceEntityId: "bid-b" });

package/src/service/build_plan.ts

@@ -307,6 +307,7 @@ export function deriveBuildPlan(
    const wireSources: Record<string, WirePersistSourcePlan> = {};
    for (const [sourceID, source] of Object.entries(sources)) {
       if (include && !include.has(source.name)) continue;
+      const annotationFields = deriveAnnotationFields(source);
       wireSources[sourceID] = {
          name: source.name,
          sourceID: source.sourceID,
@@ -314,8 +315,16 @@ export function deriveBuildPlan(
          dialect: source.dialectName,
          sourceEntityId: computeSourceEntityId(source, connectionDigests),
          sql: source.getSQL(),
+         // Declared `#@ persist` scope/refresh knobs, reported VERBATIM (null
+         // = unset). The control plane applies the platform default (unset =>
+         // shared) itself, so the publisher must never substitute it — unset
+         // has to stay distinguishable from an explicit `shared`. The source's
+         // own annotation is the most-specific declaration layer, and the only
+         // one that exists today.
+         sharing: annotationFields.sharing ?? null,
+         refresh: annotationFields.refresh ?? null,
          columns: deriveColumns(source),
-         annotationFields: deriveAnnotationFields(source),
+         annotationFields,
          modelPath: sourceModelPaths?.[sourceID],
       };
    }

package/src/service/materialization_cron_gate.spec.ts

@@ -0,0 +1,137 @@
+import { afterEach, beforeEach, describe, expect, it } from "bun:test";
+import * as fs from "fs/promises";
+import * as os from "os";
+import * as path from "path";
+
+import { Environment } from "./environment";
+import type { Package } from "./package";
+
+/**
+ * The publish gate for the package-level materialization cron (§9.4
+ * artifact-anchored scheduling): a declared `materialization.schedule` is the
+ * power tier and is valid only when every persist source in the compiled
+ * build plan resolves to an explicit `sharing=private`. These tests run a real
+ * `Environment` + `Package.create` over temp dirs, so they also prove
+ * end-to-end that the pinned compiler ACCEPTS `sharing=` / `refresh=` keys in
+ * the `#@ persist` annotation and that the values survive to the wire build
+ * plan verbatim (unset stays null — never defaulted to "shared").
+ */
+describe("materialization cron gate", () => {
+   let rootDir: string;
+   let envPath: string;
+
+   async function loadPackage(model: string, schedule?: string) {
+      const dir = path.join(envPath, "pkg");
+      await fs.mkdir(dir, { recursive: true });
+      await fs.writeFile(
+         path.join(dir, "publisher.json"),
+         JSON.stringify({
+            name: "pkg",
+            description: "fixture",
+            ...(schedule ? { materialization: { schedule } } : {}),
+         }),
+      );
+      await fs.writeFile(path.join(dir, "model.malloy"), model);
+      const env = await Environment.create("testEnv", envPath, []);
+      await env.addPackage("pkg");
+      return env.getPackage("pkg", false);
+   }
+
+   function sourceByName(pkg: Package, name: string) {
+      const sources = pkg.getBuildPlan()?.sources ?? {};
+      const found = Object.values(sources).find((s) => s.name === name);
+      if (!found) throw new Error(`persist source '${name}' not in build plan`);
+      return found;
+   }
+
+   beforeEach(async () => {
+      rootDir = await fs.mkdtemp(path.join(os.tmpdir(), "publisher-cron-"));
+      envPath = path.join(rootDir, "env");
+      await fs.mkdir(envPath, { recursive: true });
+   });
+
+   afterEach(async () => {
+      await fs.rm(rootDir, { recursive: true, force: true }).catch(() => {});
+   });
+
+   const MIXED_MODEL = `##! experimental.persistence
+
+#@ persist name="priv_table" sharing=private refresh=incremental
+source: priv is duckdb.sql("SELECT 1 as x")
+
+#@ persist name="open_table" sharing=shared
+source: open is duckdb.sql("SELECT 2 as x")
+
+#@ persist name="unset_table"
+source: unspecified is duckdb.sql("SELECT 3 as x")
+`;
+
+   const ALL_PRIVATE_MODEL = `##! experimental.persistence
+
+#@ persist name="a_table" sharing=private
+source: a is duckdb.sql("SELECT 1 as x")
+
+#@ persist name="b_table" sharing=private refresh=full
+source: b is duckdb.sql("SELECT 2 as x")
+`;
+
+   it(
+      "surfaces declared sharing/refresh verbatim on the build plan (null when unset)",
+      async () => {
+         const pkg = await loadPackage(MIXED_MODEL);
+
+         const priv = sourceByName(pkg, "priv");
+         expect(priv.sharing).toBe("private");
+         expect(priv.refresh).toBe("incremental");
+
+         const open = sourceByName(pkg, "open");
+         expect(open.sharing).toBe("shared");
+         expect(open.refresh).toBeNull();
+
+         // Unset must be reported as null — distinguishable from an explicit
+         // "shared" — because the control plane applies the platform default
+         // (unset => shared) itself.
+         const unspecified = sourceByName(pkg, "unspecified");
+         expect(unspecified.sharing).toBeNull();
+         expect(unspecified.refresh).toBeNull();
+      },
+      { timeout: 30000 },
+   );
+
+   it(
+      "rejects a cron over shared/unset persist sources, pointing at freshness.window",
+      async () => {
+         const pkg = await loadPackage(MIXED_MODEL, "0 6 * * *");
+
+         const warnings = pkg.scheduleWarnings();
+         // One actionable message per offending source; the compliant private
+         // source is not flagged.
+         expect(warnings).toHaveLength(2);
+         const joined = pkg.formatInvalidSchedule();
+         expect(joined).toContain("'open' resolves to 'shared'");
+         expect(joined).toContain("'unspecified' resolves to unset");
+         expect(joined).not.toContain("'priv'");
+         expect(joined).toContain("materialization.freshness.window");
+      },
+      { timeout: 30000 },
+   );
+
+   it(
+      "allows a cron when every persist source is explicitly private",
+      async () => {
+         const pkg = await loadPackage(ALL_PRIVATE_MODEL, "0 6 * * *");
+         expect(pkg.scheduleWarnings()).toEqual([]);
+         expect(pkg.formatInvalidSchedule()).toBe("");
+      },
+      { timeout: 30000 },
+   );
+
+   it(
+      "is inert when no cron is declared, whatever the sources' sharing",
+      async () => {
+         const pkg = await loadPackage(MIXED_MODEL);
+         expect(pkg.scheduleWarnings()).toEqual([]);
+      },
+      { timeout: 30000 },
+   );
+});