@malloy-publisher/server 0.0.235 → 0.0.236

package/dist/app/api-doc.yaml

@@ -208,6 +208,8 @@ paths:
             application/json:
               schema:
                 $ref: "#/components/schemas/Environment"
+        "400":
+          $ref: "#/components/responses/BadRequest"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "500":
@@ -282,6 +284,8 @@ paths:
             application/json:
               schema:
                 $ref: "#/components/schemas/Environment"
+        "400":
+          $ref: "#/components/responses/BadRequest"
         "401":
           $ref: "#/components/responses/Unauthorized"
         "500":
@@ -2667,6 +2671,31 @@ components:
           description: List of database connections configured for this environment
           items:
             $ref: "#/components/schemas/Connection"
+        storageDestinations:
+          type: array
+          description: |
+            Warehouses that materialization builds write to and that
+            materialized queries are served from. A disjoint set from
+            `connections` - a destination is never resolvable by name from a
+            model, and never listed or fetchable through the connection
+            endpoints. Names are independent of `connections`, so the same name
+            may appear in both lists and mean two different warehouses.
+
+            Reads (including the status endpoint) report only `name` and `type`,
+            never the config - a destination's warehouse credentials are the
+            operator's, not any caller's. Writes carry the full config and
+            replace the stored list; omitting the field leaves it untouched. An
+            entry that names a stored destination and carries no config is read
+            as "keep this one", so echoing back what a read returned does not
+            strip the stored configs.
+
+            A write is all-or-nothing: because the list replaces what is stored,
+            a value that is not a list of usable destinations is refused with
+            400 naming every defect, and none of it is applied - on create as
+            well as on update. Sending an empty list is the way to clear the
+            destinations.
+          items:
+            $ref: "#/components/schemas/Connection"
         packages:
           type: array
           description: List of Malloy packages in this environment
@@ -2862,11 +2891,11 @@ components:
               sourceName:
                 type: string
                 description: The materialized source served from storage.
-              storageConnectionName:
+              storageDestinationName:
                 type: string
                 description: >-
-                  The registered DuckDB/DuckLake connection the physical table
-                  lives in.
+                  The storage destination the physical table lives in (an entry
+                  in `storageDestinations`, not a connection).
               tablePath:
                 type: string
                 description: The physical table the source is served from.
@@ -4642,14 +4671,15 @@ components:
         destination:
           type: string
           description: >-
-            Optional name of a registered DuckDB/DuckLake connection to
-            materialize INTO (the `storage=` authoring axis). Absent means build
-            into the persist source's own warehouse — the default, unchanged
-            (colocated) path. When present, the build runs
+            Optional name of a storage destination to materialize INTO (the
+            `storage=` authoring axis) — an entry in the environment's
+            `storageDestinations`, which is a disjoint set from `connections`.
+            Absent means build into the persist source's own warehouse — the
+            default, unchanged (colocated) path. When present, the build runs
             a native per-engine query-passthrough CTAS on a build-scoped session
-            for this connection (the source computes; only results cross), and
-            the manifest records the destination connection + captured schema so
-            the source can later be served cross-dialect from the destination.
+            for that destination (the source computes; only results cross), and
+            the manifest records the destination + captured schema so
+            the source can later be served cross-dialect from it.
             The name resolves generically against registered connections; any
             managed-tier alias is resolved by the host upstream and never
             reaches the publisher.
@@ -4695,16 +4725,16 @@ components:
           description: >-
             The persist source's own connection (the source warehouse). For a
             `storage=`-materialized entry this is where the data is READ FROM;
-            the physical table lives in `storageConnectionName`.
-        storageConnectionName:
+            the physical table lives in `storageDestinationName`.
+        storageDestinationName:
           type: string
           description: >-
             When the source was materialized into a `storage=` destination, the
-            name of the registered DuckDB/DuckLake connection the physical table
-            physically lives in (distinct from `connectionName`, the source
-            warehouse). Absent for the default in-warehouse path, where the table
-            lives in `connectionName`. The serve path resolves and reads the
-            table on this connection.
+            name of the storage destination the physical table physically lives
+            in — an entry in `storageDestinations`, NOT a connection (distinct
+            from `connectionName`, the source warehouse). Absent for the default
+            in-warehouse path, where the table lives in `connectionName`. The
+            serve path resolves and reads the table on that destination.
         schema:
           type: array
           description: >-

package/dist/package_load_worker.mjs

@@ -11468,6 +11468,8 @@ function internalErrorToHttpError(error) {
     return httpError(400, error.message);
   } else if (error instanceof ConnectionNotFoundError) {
     return httpError(404, error.message);
+  } else if (error instanceof DestinationNotFoundError) {
+    return httpError(422, error.message);
   } else if (error instanceof ConnectionAuthError) {
     return httpError(422, error.message);
   } else if (error instanceof UnsupportedCatalogFormatError) {
@@ -11503,7 +11505,7 @@ function httpError(code, message) {
     }
   };
 }
-var NotImplementedError, BadRequestError, EnvironmentNotFoundError, PackageNotFoundError, ModelNotFoundError, ConnectionNotFoundError, ConnectionError, ConnectionAuthError, UnsupportedCatalogFormatError, ModelCompilationError, MaterializationEligibilityError, FrozenConfigError, AccessDeniedError, NotQueryableError, MaterializationNotFoundError, MaterializationConflictError, InvalidStateTransitionError, ServiceUnavailableError, PayloadTooLargeError, QueryTimeoutError;
+var NotImplementedError, BadRequestError, EnvironmentNotFoundError, PackageNotFoundError, ModelNotFoundError, ConnectionNotFoundError, ConnectionError, DestinationNotFoundError, ConnectionAuthError, UnsupportedCatalogFormatError, ModelCompilationError, MaterializationEligibilityError, FrozenConfigError, AccessDeniedError, NotQueryableError, MaterializationNotFoundError, MaterializationConflictError, InvalidStateTransitionError, ServiceUnavailableError, PayloadTooLargeError, QueryTimeoutError;
 var init_errors = __esm(() => {
   init_constants();
   NotImplementedError = class NotImplementedError extends Error {
@@ -11541,6 +11543,11 @@ var init_errors = __esm(() => {
       super(message);
     }
   };
+  DestinationNotFoundError = class DestinationNotFoundError extends Error {
+    constructor(message) {
+      super(message);
+    }
+  };
   ConnectionAuthError = class ConnectionAuthError extends Error {
     constructor(message) {
       super(message);