@malloy-publisher/server 0.0.234 → 0.0.236

package/tests/unit/duckdb/attached_databases.test.ts

@@ -1,1243 +0,0 @@
-import { DuckDBConnection } from "@malloydata/db-duckdb";
-import {
-   afterAll,
-   afterEach,
-   beforeAll,
-   beforeEach,
-   describe,
-   expect,
-   it,
-} from "bun:test";
-import fs from "fs/promises";
-import os from "os";
-import path from "path";
-import type { components } from "../../../src/api";
-import { createEnvironmentConnections } from "../../../src/service/connection";
-
-type ApiConnection = components["schemas"]["Connection"];
-
-const TEST_DB_DIR = path.join(os.tmpdir(), "duckdb-attached-db-tests");
-const TEST_DB_PATH = path.join(TEST_DB_DIR, "test.duckdb");
-
-describe("DuckDB Attached Databases", () => {
-   let connection: DuckDBConnection;
-
-   beforeAll(async () => {
-      await fs.mkdir(TEST_DB_DIR, { recursive: true });
-      connection = new DuckDBConnection("test", TEST_DB_PATH, TEST_DB_DIR);
-   });
-
-   afterAll(async () => {
-      try {
-         await connection.close();
-         await new Promise((resolve) => setTimeout(resolve, 100));
-         await fs.rm(TEST_DB_DIR, { recursive: true, force: true });
-      } catch {
-         // Ignore cleanup errors
-      }
-   });
-
-   describe("Extension Availability Tests", () => {
-      it("should verify community extension install capability", async () => {
-         const result = await connection.runSQL("INSTALL json;");
-         expect(result).toBeDefined();
-      });
-
-      it("should report clear error when extension is not found", async () => {
-         try {
-            await connection.runSQL(
-               "INSTALL 'nonexistent_extension_xyz' FROM community;",
-            );
-            expect(true).toBe(false);
-         } catch (error) {
-            expect(error).toBeInstanceOf(Error);
-            const message = (error as Error).message.toLowerCase();
-            expect(
-               message.includes("extension") || message.includes("not found"),
-            ).toBe(true);
-         }
-      });
-
-      it("should load httpfs extension for cloud storage", async () => {
-         await connection.runSQL("INSTALL httpfs;");
-         await connection.runSQL("LOAD httpfs;");
-         const result = await connection.runSQL(
-            "SELECT * FROM duckdb_extensions() WHERE extension_name = 'httpfs';",
-         );
-         expect(result.rows.length).toBeGreaterThan(0);
-      });
-
-      it("should load aws extension for cloud storage", async () => {
-         await connection.runSQL("INSTALL aws;");
-         await connection.runSQL("LOAD aws;");
-         const result = await connection.runSQL(
-            "SELECT * FROM duckdb_extensions() WHERE extension_name = 'aws';",
-         );
-         expect(result.rows.length).toBeGreaterThan(0);
-      });
-
-      it("should load postgres extension", async () => {
-         await connection.runSQL("INSTALL postgres;");
-         await connection.runSQL("LOAD postgres;");
-         // Extension is named 'postgres' but registered as 'postgres_scanner'
-         const result = await connection.runSQL(
-            "SELECT * FROM duckdb_extensions() WHERE extension_name = 'postgres_scanner';",
-         );
-         expect(result.rows.length).toBeGreaterThan(0);
-      });
-
-      it("should load bigquery extension from community", async () => {
-         try {
-            await connection.runSQL("INSTALL 'bigquery' FROM community;");
-            await connection.runSQL("LOAD bigquery;");
-            const result = await connection.runSQL(
-               "SELECT * FROM duckdb_extensions() WHERE extension_name = 'bigquery';",
-            );
-            expect(result.rows.length).toBeGreaterThan(0);
-         } catch (error) {
-            const message = (error as Error).message;
-            if (
-               message.includes("not found") ||
-               message.includes("Extension")
-            ) {
-               console.error(
-                  `\nBigQuery extension not available for this DuckDB version/platform.`,
-               );
-               console.error(`Error: ${message}\n`);
-            }
-            throw error;
-         }
-      });
-
-      it("should load snowflake extension from community", async () => {
-         try {
-            await connection.runSQL("INSTALL 'snowflake' FROM community;");
-            await connection.runSQL("LOAD snowflake;");
-            const result = await connection.runSQL(
-               "SELECT * FROM duckdb_extensions() WHERE extension_name = 'snowflake';",
-            );
-            expect(result.rows.length).toBeGreaterThan(0);
-         } catch (error) {
-            const message = (error as Error).message;
-            if (
-               message.includes("not found") ||
-               message.includes("Extension")
-            ) {
-               console.error(
-                  `\nSnowflake extension not available for this DuckDB version/platform.`,
-               );
-               console.error(`Error: ${message}\n`);
-            }
-            throw error;
-         }
-      });
-
-      it("should load ducklake extension", async () => {
-         try {
-            await connection.runSQL("INSTALL ducklake;");
-            await connection.runSQL("LOAD ducklake;");
-            const result = await connection.runSQL(
-               "SELECT * FROM duckdb_extensions() WHERE extension_name = 'ducklake';",
-            );
-            expect(result.rows.length).toBeGreaterThan(0);
-         } catch (error) {
-            const message = (error as Error).message;
-            if (
-               message.includes("not found") ||
-               message.includes("Extension")
-            ) {
-               console.error(
-                  `\nDuckLake extension not available for this DuckDB version/platform.`,
-               );
-               console.error(`Error: ${message}\n`);
-            }
-            throw error;
-         }
-      });
-
-      // The connection/storage layers INSTALL/LOAD these at runtime (cloud
-      // attach, the per-package sandbox, the materialization catalog). This
-      // asserts the DuckDB engine we resolve -- Malloy's @duckdb/node-api or
-      // our own npm pin, whichever this connection uses -- can install AND load
-      // every one of them, so a version bump that drops support for any is
-      // caught here rather than at runtime.
-      it("loads every core runtime DuckDB extension (httpfs, aws, azure, postgres, ducklake)", async () => {
-         // INSTALL name -> the name it registers as in duckdb_extensions().
-         const required: Array<{ install: string; registered: string }> = [
-            { install: "httpfs", registered: "httpfs" },
-            { install: "aws", registered: "aws" },
-            { install: "azure", registered: "azure" },
-            { install: "postgres", registered: "postgres_scanner" },
-            { install: "ducklake", registered: "ducklake" },
-         ];
-
-         for (const { install, registered } of required) {
-            await connection.runSQL(`INSTALL ${install};`);
-            await connection.runSQL(`LOAD ${install};`);
-
-            const result = await connection.runSQL(
-               `SELECT loaded, installed FROM duckdb_extensions() WHERE extension_name = '${registered}';`,
-            );
-            const row = result.rows[0] as
-               | { loaded: boolean; installed: boolean }
-               | undefined;
-
-            expect(
-               row,
-               `extension '${install}' (registered '${registered}') not present after INSTALL/LOAD`,
-            ).toBeDefined();
-            expect(
-               row?.installed,
-               `extension '${install}' is not installed`,
-            ).toBe(true);
-            expect(
-               row?.loaded,
-               `extension '${install}' is installed but not loaded`,
-            ).toBe(true);
-         }
-      });
-
-      it("loads every community runtime DuckDB extension (bigquery, snowflake) where the platform supports it", async () => {
-         // bigquery and snowflake come from the DuckDB community repository.
-         // Unlike the core extensions they are platform-dependent: snowflake in
-         // particular relies on a native ADBC driver not available on every
-         // OS/arch (e.g. the Windows runner). When one can't load on this
-         // platform, log it and continue rather than failing -- the goal is to
-         // confirm that *where supported*, the resolved DuckDB engine loads it.
-         //
-         // The earlier per-extension tests already INSTALL these, so here we
-         // only LOAD. We deliberately avoid `FORCE INSTALL`: re-installing an
-         // extension that's already in the shared on-disk cache makes DuckDB
-         // move/overwrite the file, which races and fails on Windows
-         // ("Could not move file: Access is denied.").
-         const community = ["bigquery", "snowflake"];
-
-         for (const ext of community) {
-            try {
-               await connection.runSQL(`INSTALL '${ext}' FROM community;`);
-               await connection.runSQL(`LOAD ${ext};`);
-            } catch (error) {
-               const message =
-                  error instanceof Error ? error.message : String(error);
-               console.warn(
-                  `community extension '${ext}' not available on this platform; skipping: ${message}`,
-               );
-               continue;
-            }
-
-            const result = await connection.runSQL(
-               `SELECT loaded, installed FROM duckdb_extensions() WHERE extension_name = '${ext}';`,
-            );
-            const row = result.rows[0] as
-               | { loaded: boolean; installed: boolean }
-               | undefined;
-
-            // INSTALL/LOAD reported success above, so the extension should now
-            // report loaded. If the engine reports otherwise on this platform,
-            // log it rather than failing -- community extensions are best-effort
-            // and the connection layer tolerates the same.
-            if (!row?.loaded) {
-               console.warn(
-                  `community extension '${ext}' reported success but is not loaded on this platform; skipping assertion`,
-               );
-            }
-         }
-
-         // The suite still asserts something concrete: at least one community
-         // extension loads on every supported platform (bigquery is broadly
-         // available; snowflake depends on a native driver). This catches a
-         // total community-repo breakage without being brittle per-platform.
-         const loaded = await connection.runSQL(
-            "SELECT count(*) AS n FROM duckdb_extensions() WHERE loaded AND extension_name IN ('bigquery', 'snowflake');",
-         );
-         const n = Number((loaded.rows[0] as { n: number | bigint }).n);
-         expect(
-            n,
-            "expected at least one community extension (bigquery/snowflake) to load",
-         ).toBeGreaterThan(0);
-      });
-   });
-
-   describe("Configuration Validation - Negative Tests", () => {
-      it("should reject BigQuery config without service account key", async () => {
-         const invalidConfig = {
-            name: "test_bq",
-            type: "bigquery",
-            bigqueryConnection: {
-               defaultProjectId: "test-project",
-            },
-         };
-
-         expect(
-            invalidConfig.bigqueryConnection.defaultProjectId,
-         ).toBeDefined();
-         expect(
-            (invalidConfig.bigqueryConnection as Record<string, unknown>)
-               .serviceAccountKeyJson,
-         ).toBeUndefined();
-      });
-
-      it("should reject invalid service account JSON", async () => {
-         const invalidJson = '{"type": "wrong_type"}';
-
-         try {
-            const keyData = JSON.parse(invalidJson);
-            if (keyData.type !== "service_account") {
-               throw new Error(
-                  'Invalid service account key: incorrect "type" field',
-               );
-            }
-            expect(true).toBe(false);
-         } catch (error) {
-            expect((error as Error).message).toContain("type");
-         }
-      });
-
-      it("should reject service account JSON missing required fields", async () => {
-         const incompleteJson = JSON.stringify({
-            type: "service_account",
-            project_id: "test-project",
-         });
-
-         const requiredFields = [
-            "type",
-            "project_id",
-            "private_key",
-            "client_email",
-         ];
-         const keyData = JSON.parse(incompleteJson);
-
-         const missingFields = requiredFields.filter(
-            (field) => !keyData[field],
-         );
-         expect(missingFields).toContain("private_key");
-         expect(missingFields).toContain("client_email");
-      });
-
-      it("should reject Snowflake config without required credentials", async () => {
-         const invalidConfig = {
-            name: "test_sf",
-            type: "snowflake",
-            snowflakeConnection: {
-               account: "test-account",
-            },
-         };
-
-         const requiredFields = {
-            account:
-               (invalidConfig.snowflakeConnection as Record<string, unknown>)
-                  .account || null,
-            username:
-               (invalidConfig.snowflakeConnection as Record<string, unknown>)
-                  .username || null,
-            password:
-               (invalidConfig.snowflakeConnection as Record<string, unknown>)
-                  .password || null,
-         };
-
-         const missingFields = Object.entries(requiredFields)
-            .filter(([, value]) => !value)
-            .map(([key]) => key);
-
-         expect(missingFields).toContain("username");
-         expect(missingFields).toContain("password");
-      });
-
-      it("should reject GCS config without keyId and secret", async () => {
-         const invalidConfig = {
-            name: "test_gcs",
-            type: "gcs",
-            gcsConnection: {},
-         };
-
-         expect(
-            (invalidConfig.gcsConnection as Record<string, unknown>).keyId,
-         ).toBeUndefined();
-         expect(
-            (invalidConfig.gcsConnection as Record<string, unknown>).secret,
-         ).toBeUndefined();
-      });
-
-      it("should reject S3 config without credentials", async () => {
-         const invalidConfig = {
-            name: "test_s3",
-            type: "s3",
-            s3Connection: {},
-         };
-
-         expect(
-            (invalidConfig.s3Connection as Record<string, unknown>).accessKeyId,
-         ).toBeUndefined();
-         expect(
-            (invalidConfig.s3Connection as Record<string, unknown>)
-               .secretAccessKey,
-         ).toBeUndefined();
-      });
-
-      it("should reject unsupported database type", async () => {
-         const unsupportedType = "mongodb";
-         const supportedTypes = [
-            "bigquery",
-            "snowflake",
-            "postgres",
-            "gcs",
-            "s3",
-         ];
-
-         expect(supportedTypes).not.toContain(unsupportedType);
-      });
-   });
-
-   describe("DuckDB Connection - Positive Tests", () => {
-      it("should create and query in-memory database", async () => {
-         const memConnection = new DuckDBConnection(
-            "mem_test",
-            ":memory:",
-            TEST_DB_DIR,
-         );
-         const result = await memConnection.runSQL("SELECT 1 as value;");
-         expect(result.rows[0]).toEqual({ value: 1 });
-         await memConnection.close();
-      });
-
-      it("should show databases including memory", async () => {
-         const result = await connection.runSQL("SHOW DATABASES;");
-         expect(result.rows).toBeDefined();
-         expect(Array.isArray(result.rows)).toBe(true);
-      });
-
-      it("should handle SQL escaping correctly", async () => {
-         const testValue = "test'with\"special;chars";
-         const escaped = testValue.replace(/'/g, "''");
-         const result = await connection.runSQL(
-            `SELECT '${escaped}' as escaped_value;`,
-         );
-         expect(result.rows[0].escaped_value).toBe(testValue);
-      });
-
-      it("should create and use secrets", async () => {
-         await connection.runSQL(`
-            CREATE OR REPLACE SECRET test_secret (
-               TYPE S3,
-               KEY_ID 'test_key',
-               SECRET 'test_secret_value',
-               REGION 'us-east-1'
-            );
-         `);
-
-         const secrets = await connection.runSQL(
-            "SELECT * FROM duckdb_secrets();",
-         );
-         expect(secrets.rows.length).toBeGreaterThan(0);
-
-         await connection.runSQL("DROP SECRET IF EXISTS test_secret;");
-      });
-   });
-
-   describe("Version Compatibility Check", () => {
-      it("should report DuckDB version for diagnostics", async () => {
-         const result = await connection.runSQL("SELECT version() as version;");
-         const version = result.rows[0].version as string;
-
-         console.log(`\n📊 DuckDB Version: ${version}`);
-
-         expect(version).toBeDefined();
-         expect(typeof version).toBe("string");
-         expect(version).toMatch(/v?\d+\.\d+\.\d+/);
-      });
-
-      it("should list available extensions for diagnostics", async () => {
-         const result = await connection.runSQL(
-            "SELECT extension_name, loaded, installed FROM duckdb_extensions() WHERE installed = true ORDER BY extension_name;",
-         );
-
-         console.log(`\n📦 Installed Extensions:`);
-         for (const row of result.rows) {
-            const r = row as {
-               extension_name: string;
-               loaded: boolean;
-               installed: boolean;
-            };
-            console.log(`   - ${r.extension_name} (loaded: ${r.loaded})`);
-         }
-
-         expect(result.rows).toBeDefined();
-      });
-   });
-});
-
-describe("createEnvironmentConnections - DuckDB", () => {
-   const PROJECT_TEST_DIR = path.join(os.tmpdir(), "duckdb-project-tests");
-   let createdConnections: Map<string, unknown> = new Map();
-
-   beforeEach(async () => {
-      await fs.mkdir(PROJECT_TEST_DIR, { recursive: true });
-   });
-
-   afterEach(async () => {
-      for (const conn of createdConnections.values()) {
-         try {
-            await (conn as DuckDBConnection).close();
-         } catch {
-            // Ignore
-         }
-      }
-      createdConnections.clear();
-      await new Promise((resolve) => setTimeout(resolve, 100));
-      try {
-         await fs.rm(PROJECT_TEST_DIR, { recursive: true, force: true });
-      } catch {
-         // Ignore
-      }
-   });
-
-   describe("Positive Tests", () => {
-      it("should create a named duckdb connection", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "my_duckdb_conn",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "test_gcs",
-                        type: "gcs",
-                        gcsConnection: {
-                           keyId: "test-key-id",
-                           secret: "test-secret",
-                        },
-                     },
-                  ],
-               },
-            },
-         ];
-
-         const { malloyConnections, apiConnections } =
-            await createEnvironmentConnections(connections, PROJECT_TEST_DIR);
-
-         createdConnections = malloyConnections;
-
-         expect(malloyConnections.has("my_duckdb_conn")).toBe(true);
-         expect(apiConnections.length).toBe(1);
-         expect(apiConnections[0].name).toBe("my_duckdb_conn");
-         expect(apiConnections[0].type).toBe("duckdb");
-      });
-
-      it("should create named DuckDB connection", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "my_duckdb",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "test_gcs",
-                        type: "gcs",
-                        gcsConnection: {
-                           keyId: "test-key-id",
-                           secret: "test-secret",
-                        },
-                     },
-                  ],
-               },
-            },
-         ];
-
-         const { malloyConnections, apiConnections } =
-            await createEnvironmentConnections(connections, PROJECT_TEST_DIR);
-
-         createdConnections = malloyConnections;
-
-         expect(malloyConnections.has("my_duckdb")).toBe(true);
-         expect(apiConnections.length).toBe(1);
-      });
-
-      it("should set connection attributes correctly", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "attr_test",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "test_gcs",
-                        type: "gcs",
-                        gcsConnection: {
-                           keyId: "test-key-id",
-                           secret: "test-secret",
-                        },
-                     },
-                  ],
-               },
-            },
-         ];
-
-         const { malloyConnections, apiConnections } =
-            await createEnvironmentConnections(connections, PROJECT_TEST_DIR);
-
-         createdConnections = malloyConnections;
-
-         const conn = apiConnections.find((c) => c.name === "attr_test");
-         expect(conn?.attributes).toBeDefined();
-         expect(conn?.attributes?.dialectName).toBe("duckdb");
-      });
-
-      it("should handle multiple connection types", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "postgres_conn",
-               type: "postgres",
-               postgresConnection: {
-                  host: "localhost",
-                  port: 5432,
-                  userName: "test",
-                  password: "test",
-                  databaseName: "test",
-               },
-            },
-            {
-               name: "my_duck",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "test_gcs",
-                        type: "gcs",
-                        gcsConnection: {
-                           keyId: "test-key-id",
-                           secret: "test-secret",
-                        },
-                     },
-                  ],
-               },
-            },
-         ];
-
-         const { malloyConnections } = await createEnvironmentConnections(
-            connections,
-            PROJECT_TEST_DIR,
-         );
-
-         createdConnections = malloyConnections;
-
-         expect(malloyConnections.has("postgres_conn")).toBe(true);
-         expect(malloyConnections.has("my_duck")).toBe(true);
-      });
-
-      it("should create database file at project path", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "file_test",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "test_gcs",
-                        type: "gcs",
-                        gcsConnection: {
-                           keyId: "test-key-id",
-                           secret: "test-secret",
-                        },
-                     },
-                  ],
-               },
-            },
-         ];
-
-         const { malloyConnections } = await createEnvironmentConnections(
-            connections,
-            PROJECT_TEST_DIR,
-         );
-
-         createdConnections = malloyConnections;
-
-         const conn = malloyConnections.get(
-            "file_test",
-         ) as unknown as DuckDBConnection;
-         await conn.runSQL("CREATE TABLE test_table (id INT);");
-
-         const dbPath = path.join(PROJECT_TEST_DIR, "file_test.duckdb");
-         const exists = await fs
-            .access(dbPath)
-            .then(() => true)
-            .catch(() => false);
-         expect(exists).toBe(true);
-      });
-   });
-
-   describe("Negative Tests", () => {
-      it("should handle duplicate connection names by using the last one", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "duplicate",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "test_gcs",
-                        type: "gcs",
-                        gcsConnection: {
-                           keyId: "test-key-id",
-                           secret: "test-secret",
-                        },
-                     },
-                  ],
-               },
-            },
-            {
-               name: "duplicate",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "test_gcs2",
-                        type: "gcs",
-                        gcsConnection: {
-                           keyId: "test-key-id",
-                           secret: "test-secret",
-                        },
-                     },
-                  ],
-               },
-            },
-         ];
-
-         const { malloyConnections } = await createEnvironmentConnections(
-            connections,
-            PROJECT_TEST_DIR,
-         );
-
-         createdConnections = malloyConnections;
-
-         // Should only have one connection with that name
-         expect(malloyConnections.has("duplicate")).toBe(true);
-         expect(malloyConnections.size).toBe(1);
-      });
-
-      it("should throw on missing connection name", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "test_gcs",
-                        type: "gcs",
-                        gcsConnection: {
-                           keyId: "test-key-id",
-                           secret: "test-secret",
-                        },
-                     },
-                  ],
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow();
-      });
-
-      it("should throw on missing duckdbConnection config", async () => {
-         const connections = [
-            {
-               name: "no_config",
-               type: "duckdb",
-            },
-         ] as ApiConnection[];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("DuckDB connection configuration is missing");
-      });
-
-      it("should throw on unsupported attached database type", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "bad_attach",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "unsupported_db",
-                        type: "mongodb" as "bigquery",
-                     },
-                  ],
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("Unsupported database type");
-      });
-
-      it("should throw on BigQuery attach without service account", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "bq_no_creds",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "bq_test",
-                        type: "bigquery",
-                        bigqueryConnection: {
-                           defaultProjectId: "test-project",
-                        },
-                     },
-                  ],
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("service account key required");
-      });
-
-      it("should throw on GCS attach without credentials", async () => {
-         const connections = [
-            {
-               name: "gcs_no_creds",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "gcs_test",
-                        type: "gcs",
-                        gcsConnection: {},
-                     },
-                  ],
-               },
-            },
-         ] as ApiConnection[];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("keyId and secret are required");
-      });
-
-      it("should throw on S3 attach without credentials", async () => {
-         const connections = [
-            {
-               name: "s3_no_creds",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "s3_test",
-                        type: "s3",
-                        s3Connection: {},
-                     },
-                  ],
-               },
-            },
-         ] as ApiConnection[];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("accessKeyId and secretAccessKey are required");
-      });
-
-      it("should throw on DuckLake without catalog connection", async () => {
-         const connections = [
-            {
-               name: "ducklake_no_catalog",
-               type: "ducklake",
-               ducklakeConnection: {
-                  storage: {
-                     bucketUrl: "s3://test-bucket",
-                     s3Connection: {
-                        accessKeyId: "test",
-                        secretAccessKey: "test",
-                     },
-                  },
-               },
-            },
-         ] as ApiConnection[];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("PostgreSQL connection configuration is required");
-      });
-
-      it("should throw on DuckLake without connection config", async () => {
-         const connections = [
-            {
-               name: "ducklake_no_config",
-               type: "ducklake",
-            },
-         ] as ApiConnection[];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("DuckLake connection configuration is missing");
-      });
-
-      it("should throw on Snowflake attach without credentials", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "sf_no_creds",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "sf_test",
-                        type: "snowflake",
-                        snowflakeConnection: {
-                           account: "test-account",
-                        },
-                     },
-                  ],
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("username is required");
-      });
-
-      it("should throw on Postgres attach without connection config", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "pg_no_config",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "pg_test",
-                        type: "postgres",
-                     },
-                  ],
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("PostgreSQL connection configuration missing");
-      });
-
-      it("should throw when attached database name conflicts with connection name", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "my_duckdb",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "my_duckdb",
-                        type: "bigquery",
-                        bigqueryConnection: {
-                           defaultProjectId: "test-project",
-                           serviceAccountKeyJson: JSON.stringify({
-                              type: "service_account",
-                              project_id: "test-project",
-                              private_key: "test-key",
-                              client_email: "test@test.com",
-                           }),
-                        },
-                     },
-                  ],
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow(
-            "DuckDB attached database names cannot conflict with connection name",
-         );
-      });
-
-      it("should throw when DuckDB connection name is 'duckdb'", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "duckdb",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [],
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow(/'duckdb' is reserved/);
-      });
-
-      it("should throw when DuckDB connection name is 'duckdb' with attached databases", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "duckdb",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "my_bigquery",
-                        type: "bigquery",
-                        bigqueryConnection: {
-                           defaultProjectId: "test-project",
-                           serviceAccountKeyJson: JSON.stringify({
-                              type: "service_account",
-                              project_id: "test-project",
-                              private_key: "test-key",
-                              client_email: "test@test.com",
-                           }),
-                        },
-                     },
-                  ],
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow(/'duckdb' is reserved/);
-      });
-
-      it("should throw when DuckDB connection has no attached databases", async () => {
-         // Env-level DuckDB requires at least one attached foreign db;
-         // the per-package "duckdb" sandbox covers the plain-in-memory case.
-         const connections: ApiConnection[] = [
-            {
-               name: "no_attached_db",
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [],
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow(/has no attached databases/);
-      });
-
-      it("should throw on unsupported connection type", async () => {
-         const connections = [
-            {
-               name: "unsupported",
-               type: "redis" as "duckdb",
-            },
-         ] as ApiConnection[];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("Unsupported connection type");
-      });
-
-      it("should throw when connection name is missing", async () => {
-         const connections = [
-            {
-               type: "duckdb",
-               duckdbConnection: {
-                  attachedDatabases: [
-                     {
-                        name: "test_gcs",
-                        type: "gcs",
-                        gcsConnection: {
-                           keyId: "test-key-id",
-                           secret: "test-secret",
-                        },
-                     },
-                  ],
-               },
-            },
-         ] as ApiConnection[];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow();
-      });
-   });
-});
-
-describe("createEnvironmentConnections - Other Connection Types", () => {
-   const PROJECT_TEST_DIR = path.join(
-      os.tmpdir(),
-      "connection-validation-tests",
-   );
-   const createdConnections: Map<string, unknown> = new Map();
-
-   beforeEach(async () => {
-      await fs.mkdir(PROJECT_TEST_DIR, { recursive: true });
-   });
-
-   afterEach(async () => {
-      for (const conn of createdConnections.values()) {
-         try {
-            if (
-               typeof (conn as { close?: () => Promise<void> }).close ===
-               "function"
-            ) {
-               await (conn as { close: () => Promise<void> }).close();
-            }
-         } catch {
-            // Ignore
-         }
-      }
-      createdConnections.clear();
-      await new Promise((resolve) => setTimeout(resolve, 100));
-      try {
-         await fs.rm(PROJECT_TEST_DIR, { recursive: true, force: true });
-      } catch {
-         // Ignore
-      }
-   });
-
-   describe("Snowflake Connection Validation", () => {
-      it("should throw when Snowflake config is missing", async () => {
-         const connections = [
-            {
-               name: "sf_test",
-               type: "snowflake",
-            },
-         ] as ApiConnection[];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("Snowflake connection configuration is missing");
-      });
-
-      it("should throw when Snowflake account is missing", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "sf_test",
-               type: "snowflake",
-               snowflakeConnection: {
-                  username: "test",
-                  password: "test",
-                  warehouse: "test",
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("Snowflake account is required");
-      });
-
-      it("should throw when Snowflake username is missing", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "sf_test",
-               type: "snowflake",
-               snowflakeConnection: {
-                  account: "test-account",
-                  password: "test",
-                  warehouse: "test",
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("Snowflake username is required");
-      });
-
-      it("should throw when Snowflake password and private key are both missing", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "sf_test",
-               type: "snowflake",
-               snowflakeConnection: {
-                  account: "test-account",
-                  username: "test",
-                  warehouse: "test",
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow(
-            "Snowflake password or private key or private key path is required",
-         );
-      });
-
-      it("should throw when Snowflake warehouse is missing", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "sf_test",
-               type: "snowflake",
-               snowflakeConnection: {
-                  account: "test-account",
-                  username: "test",
-                  password: "test",
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("Snowflake warehouse is required");
-      });
-   });
-
-   describe("Trino Connection Validation", () => {
-      it("should throw when Trino config is missing", async () => {
-         const connections = [
-            {
-               name: "trino_test",
-               type: "trino",
-            },
-         ] as ApiConnection[];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("Trino connection configuration is missing");
-      });
-
-      it("should throw when Trino server URL is invalid (no protocol)", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "trino_test",
-               type: "trino",
-               trinoConnection: {
-                  server: "localhost:8080",
-                  port: 8080,
-               },
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow(
-            'Invalid Trino connection: expected "http://server:port" or "https://server:port"',
-         );
-      });
-   });
-
-   describe("MotherDuck Connection Validation", () => {
-      it("should throw when MotherDuck config is missing", async () => {
-         const connections = [
-            {
-               name: "md_test",
-               type: "motherduck",
-            },
-         ] as ApiConnection[];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("MotherDuck connection configuration is missing");
-      });
-
-      it("should throw when MotherDuck access token is missing", async () => {
-         const connections: ApiConnection[] = [
-            {
-               name: "md_test",
-               type: "motherduck",
-               motherduckConnection: {},
-            },
-         ];
-
-         await expect(
-            createEnvironmentConnections(connections, PROJECT_TEST_DIR),
-         ).rejects.toThrow("MotherDuck access token is required");
-      });
-   });
-});