@malloy-publisher/server 0.2.6 → 0.3.0

package/dist/package_load_worker.mjs

@@ -2354,725 +2354,265 @@ var init_telemetry = __esm(() => {
   import_api = __toESM(require_src(), 1);
 });
 
-// src/errors.ts
-import { MalloyError } from "@malloydata/malloy";
-function internalErrorToHttpError(error) {
-  if (error instanceof BadRequestError) {
-    return httpError(400, error.message);
-  } else if (error instanceof FrozenConfigError) {
-    return httpError(403, error.message);
-  } else if (error instanceof AccessDeniedError) {
-    return httpError(403, error.message);
-  } else if (error instanceof EnvironmentNotFoundError) {
-    return httpError(404, error.message);
-  } else if (error instanceof PackageNotFoundError) {
-    return httpError(404, error.message);
-  } else if (error instanceof ModelNotFoundError) {
-    return httpError(404, error.message);
-  } else if (error instanceof DashboardNotFoundError) {
-    return httpError(404, error.message);
-  } else if (error instanceof NotQueryableError) {
-    return httpError(404, error.message);
-  } else if (error instanceof MalloyError) {
-    return httpError(400, error.message);
-  } else if (error instanceof TableNotFoundError) {
-    return httpError(404, error.message, "TABLE_NOT_FOUND");
-  } else if (error instanceof ConnectionNotFoundError) {
-    return httpError(404, error.message);
-  } else if (error instanceof DestinationNotFoundError) {
-    return httpError(422, error.message);
-  } else if (error instanceof ConnectionAuthError) {
-    return httpError(422, error.message);
-  } else if (error instanceof UnsupportedCatalogFormatError) {
-    return httpError(422, error.message);
-  } else if (error instanceof MaterializationEligibilityError) {
-    return httpError(422, error.message);
-  } else if (error instanceof ModelCompilationError) {
-    return httpError(424, error.message);
-  } else if (error instanceof ConnectionError) {
-    return httpError(502, error.message);
-  } else if (error instanceof MaterializationNotFoundError) {
-    return httpError(404, error.message);
-  } else if (error instanceof MaterializationConflictError) {
-    return httpError(409, error.message);
-  } else if (error instanceof InvalidStateTransitionError) {
-    return httpError(409, error.message);
-  } else if (error instanceof ServiceUnavailableError) {
-    return httpError(503, error.message);
-  } else if (error instanceof PayloadTooLargeError) {
-    return httpError(413, error.message);
-  } else if (error instanceof QueryTimeoutError) {
-    return httpError(504, error.message);
-  } else if (error instanceof NotImplementedError) {
-    return httpError(501, error.message);
-  } else {
-    return httpError(500, error.message);
+// ../../node_modules/logform/format.js
+var require_format = __commonJS((exports, module) => {
+  class InvalidFormatError extends Error {
+    constructor(formatFn) {
+      super(`Format functions must be synchronous taking a two arguments: (info, opts)
+Found: ${formatFn.toString().split(`
+`)[0]}
+`);
+      Error.captureStackTrace(this, InvalidFormatError);
+    }
   }
-}
-function httpError(code, message, reason) {
-  return {
-    status: code,
-    json: {
-      code,
-      message,
-      ...reason ? { reason } : {}
+  module.exports = (formatFn) => {
+    if (formatFn.length > 2) {
+      throw new InvalidFormatError(formatFn);
     }
-  };
-}
-var NotImplementedError, BadRequestError, InvalidArgumentError, EnvironmentNotFoundError, PackageNotFoundError, ModelNotFoundError, DashboardNotFoundError, ConnectionNotFoundError, TableNotFoundError, ConnectionError, DestinationNotFoundError, ConnectionAuthError, UnsupportedCatalogFormatError, ModelCompilationError, MaterializationEligibilityError, PublisherConfigError, FrozenConfigError, AccessDeniedError, NotQueryableError, MaterializationNotFoundError, MaterializationConflictError, InvalidStateTransitionError, ServiceUnavailableError, PayloadTooLargeError, ResponseUnserializableError, QueryTimeoutError;
-var init_errors = __esm(() => {
-  init_constants();
-  NotImplementedError = class NotImplementedError extends Error {
-    constructor(message) {
-      super(message);
+    function Format(options = {}) {
+      this.options = options;
     }
-  };
-  BadRequestError = class BadRequestError extends Error {
-    constructor(message) {
-      super(message);
+    Format.prototype.transform = formatFn;
+    function createFormatWrap(opts) {
+      return new Format(opts);
     }
+    createFormatWrap.Format = Format;
+    return createFormatWrap;
   };
-  InvalidArgumentError = class InvalidArgumentError extends BadRequestError {
-  };
-  EnvironmentNotFoundError = class EnvironmentNotFoundError extends Error {
-    constructor(message) {
-      super(message);
-    }
+});
+
+// ../../node_modules/@colors/colors/lib/styles.js
+var require_styles = __commonJS((exports, module) => {
+  var styles = {};
+  module["exports"] = styles;
+  var codes = {
+    reset: [0, 0],
+    bold: [1, 22],
+    dim: [2, 22],
+    italic: [3, 23],
+    underline: [4, 24],
+    inverse: [7, 27],
+    hidden: [8, 28],
+    strikethrough: [9, 29],
+    black: [30, 39],
+    red: [31, 39],
+    green: [32, 39],
+    yellow: [33, 39],
+    blue: [34, 39],
+    magenta: [35, 39],
+    cyan: [36, 39],
+    white: [37, 39],
+    gray: [90, 39],
+    grey: [90, 39],
+    brightRed: [91, 39],
+    brightGreen: [92, 39],
+    brightYellow: [93, 39],
+    brightBlue: [94, 39],
+    brightMagenta: [95, 39],
+    brightCyan: [96, 39],
+    brightWhite: [97, 39],
+    bgBlack: [40, 49],
+    bgRed: [41, 49],
+    bgGreen: [42, 49],
+    bgYellow: [43, 49],
+    bgBlue: [44, 49],
+    bgMagenta: [45, 49],
+    bgCyan: [46, 49],
+    bgWhite: [47, 49],
+    bgGray: [100, 49],
+    bgGrey: [100, 49],
+    bgBrightRed: [101, 49],
+    bgBrightGreen: [102, 49],
+    bgBrightYellow: [103, 49],
+    bgBrightBlue: [104, 49],
+    bgBrightMagenta: [105, 49],
+    bgBrightCyan: [106, 49],
+    bgBrightWhite: [107, 49],
+    blackBG: [40, 49],
+    redBG: [41, 49],
+    greenBG: [42, 49],
+    yellowBG: [43, 49],
+    blueBG: [44, 49],
+    magentaBG: [45, 49],
+    cyanBG: [46, 49],
+    whiteBG: [47, 49]
   };
-  PackageNotFoundError = class PackageNotFoundError extends Error {
-    constructor(message) {
-      super(message);
-    }
+  Object.keys(codes).forEach(function(key) {
+    var val = codes[key];
+    var style = styles[key] = [];
+    style.open = "\x1B[" + val[0] + "m";
+    style.close = "\x1B[" + val[1] + "m";
+  });
+});
+
+// ../../node_modules/@colors/colors/lib/system/has-flag.js
+var require_has_flag = __commonJS((exports, module) => {
+  module.exports = function(flag, argv) {
+    argv = argv || process.argv || [];
+    var terminatorPos = argv.indexOf("--");
+    var prefix = /^-{1,2}/.test(flag) ? "" : "--";
+    var pos = argv.indexOf(prefix + flag);
+    return pos !== -1 && (terminatorPos === -1 ? true : pos < terminatorPos);
   };
-  ModelNotFoundError = class ModelNotFoundError extends Error {
-    constructor(message) {
-      super(message);
+});
+
+// ../../node_modules/@colors/colors/lib/system/supports-colors.js
+var require_supports_colors = __commonJS((exports, module) => {
+  var os2 = __require("os");
+  var hasFlag = require_has_flag();
+  var env = process.env;
+  var forceColor = undefined;
+  if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false")) {
+    forceColor = false;
+  } else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
+    forceColor = true;
+  }
+  if ("FORCE_COLOR" in env) {
+    forceColor = env.FORCE_COLOR.length === 0 || parseInt(env.FORCE_COLOR, 10) !== 0;
+  }
+  function translateLevel(level) {
+    if (level === 0) {
+      return false;
     }
-  };
-  DashboardNotFoundError = class DashboardNotFoundError extends Error {
-    constructor(message) {
-      super(message);
+    return {
+      level,
+      hasBasic: true,
+      has256: level >= 2,
+      has16m: level >= 3
+    };
+  }
+  function supportsColor(stream) {
+    if (forceColor === false) {
+      return 0;
     }
-  };
-  ConnectionNotFoundError = class ConnectionNotFoundError extends Error {
-    constructor(message) {
-      super(message);
+    if (hasFlag("color=16m") || hasFlag("color=full") || hasFlag("color=truecolor")) {
+      return 3;
     }
-  };
-  TableNotFoundError = class TableNotFoundError extends Error {
-    constructor(message) {
-      super(message);
+    if (hasFlag("color=256")) {
+      return 2;
     }
-  };
-  ConnectionError = class ConnectionError extends Error {
-    constructor(message) {
-      super(message);
+    if (stream && !stream.isTTY && forceColor !== true) {
+      return 0;
     }
-  };
-  DestinationNotFoundError = class DestinationNotFoundError extends Error {
-    constructor(message) {
-      super(message);
+    var min = forceColor ? 1 : 0;
+    if (process.platform === "win32") {
+      var osRelease = os2.release().split(".");
+      if (Number(process.versions.node.split(".")[0]) >= 8 && Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
+        return Number(osRelease[2]) >= 14931 ? 3 : 2;
+      }
+      return 1;
     }
-  };
-  ConnectionAuthError = class ConnectionAuthError extends Error {
-    constructor(message) {
-      super(message);
+    if ("CI" in env) {
+      if (["TRAVIS", "CIRCLECI", "APPVEYOR", "GITLAB_CI"].some(function(sign) {
+        return sign in env;
+      }) || env.CI_NAME === "codeship") {
+        return 1;
+      }
+      return min;
     }
-  };
-  UnsupportedCatalogFormatError = class UnsupportedCatalogFormatError extends Error {
-    constructor(message) {
-      super(message);
+    if ("TEAMCITY_VERSION" in env) {
+      return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env.TEAMCITY_VERSION) ? 1 : 0;
     }
-  };
-  ModelCompilationError = class ModelCompilationError extends Error {
-    constructor(error) {
-      super(error.message);
-    }
-  };
-  MaterializationEligibilityError = class MaterializationEligibilityError extends Error {
-    reason;
-    constructor(error) {
-      super(error.message);
-      this.name = "MaterializationEligibilityError";
-      this.reason = error.reason;
-    }
-  };
-  PublisherConfigError = class PublisherConfigError extends Error {
-    constructor(configName, cause) {
-      super(`Could not read ${configName}: ${cause instanceof Error ? cause.message : String(cause)}. Fix the file, or move it aside to fall back to the bundled default.`);
-      this.name = "PublisherConfigError";
-      this.cause = cause;
-    }
-  };
-  FrozenConfigError = class FrozenConfigError extends Error {
-    constructor(message = `Publisher config can't be updated when ${PUBLISHER_CONFIG_NAME} has { "frozenConfig": true }`) {
-      super(message);
-    }
-  };
-  AccessDeniedError = class AccessDeniedError extends Error {
-    constructor(message) {
-      super(message);
-      this.name = "AccessDeniedError";
-    }
-  };
-  NotQueryableError = class NotQueryableError extends Error {
-    constructor(message) {
-      super(message);
-      this.name = "NotQueryableError";
-    }
-  };
-  MaterializationNotFoundError = class MaterializationNotFoundError extends Error {
-    constructor(message) {
-      super(message);
-    }
-  };
-  MaterializationConflictError = class MaterializationConflictError extends Error {
-    constructor(message) {
-      super(message);
+    if ("TERM_PROGRAM" in env) {
+      var version = parseInt((env.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
+      switch (env.TERM_PROGRAM) {
+        case "iTerm.app":
+          return version >= 3 ? 3 : 2;
+        case "Hyper":
+          return 3;
+        case "Apple_Terminal":
+          return 2;
+      }
     }
-  };
-  InvalidStateTransitionError = class InvalidStateTransitionError extends Error {
-    constructor(message) {
-      super(message);
+    if (/-256(color)?$/i.test(env.TERM)) {
+      return 2;
     }
-  };
-  ServiceUnavailableError = class ServiceUnavailableError extends Error {
-    constructor(message) {
-      super(message);
+    if (/^screen|^xterm|^vt100|^rxvt|color|ansi|cygwin|linux/i.test(env.TERM)) {
+      return 1;
     }
-  };
-  PayloadTooLargeError = class PayloadTooLargeError extends Error {
-    constructor(message) {
-      super(message);
-      this.name = "PayloadTooLargeError";
+    if ("COLORTERM" in env) {
+      return 1;
     }
-  };
-  ResponseUnserializableError = class ResponseUnserializableError extends PayloadTooLargeError {
-    constructor(message) {
-      super(message);
-      this.name = "ResponseUnserializableError";
+    if (env.TERM === "dumb") {
+      return min;
     }
+    return min;
+  }
+  function getSupportLevel(stream) {
+    var level = supportsColor(stream);
+    return translateLevel(level);
+  }
+  module.exports = {
+    supportsColor: getSupportLevel,
+    stdout: getSupportLevel(process.stdout),
+    stderr: getSupportLevel(process.stderr)
   };
-  QueryTimeoutError = class QueryTimeoutError extends Error {
-    constructor(message) {
-      super(message);
-    }
-  };
-});
-
-// src/service/authorize.ts
-import { payloadOf, routeOf } from "@malloydata/malloy";
-function noteRoute(text) {
-  return routeOf({ value: text.trimStart() });
-}
-function notePayload(text) {
-  return payloadOf({ value: text.trimStart() }) ?? "";
-}
-function authorizeNoteContent(text) {
-  return noteRoute(text) === AUTHORIZE_ROUTE ? notePayload(text) : undefined;
-}
-function assertNoCallerAuthorizeAnnotation(callerText) {
-  if (!AUTHORIZE_ANNOTATION_ANYWHERE.test(callerText))
-    return;
-  throw new BadRequestError("An `authorize` annotation is not permitted in caller-submitted Malloy " + "text. Access gates are declared by the model author on the source; a " + "request cannot introduce, replace, or relax one. To validate a gate " + "you are authoring, save it to the package's model file and reload the " + "package — model load validates every `#(authorize)` annotation it " + "declares.");
-}
-function containsAuthorizeAnnotationTag(texts) {
-  return texts.some((text) => authorizeNoteContent(text) !== undefined);
-}
-function collectAuthorizeNearMisses(texts) {
-  const found = [];
-  for (const text of texts) {
-    const trimmed = text.trimStart();
-    const route = noteRoute(trimmed);
-    if (route === AUTHORIZE_ROUTE)
-      continue;
-    const nearMiss = route === undefined ? MALFORMED_AUTHORIZE_ATTEMPT.test(trimmed) : route === "" ? MOTLY_AUTHORIZE_PAYLOAD.test(notePayload(trimmed)) : route.toLowerCase() === AUTHORIZE_ROUTE;
-    if (!nearMiss)
-      continue;
-    found.push(trimmed.split(/[\r\n]/, 1)[0]);
-  }
-  return found;
-}
-function assertNoAuthorizeNearMisses(found) {
-  if (found.length === 0)
-    return;
-  const unique = [...new Set(found)];
-  throw new ModelCompilationError({
-    message: `These annotations are not \`authorize\` gates and nothing enforces ` + `them:
-${unique.map((t) => `  - \`${t}\``).join(`
-`)}
-` + `Malloy routes an annotation by its prefix, and only ` + `\`#(authorize)\` (or \`##(authorize)\`, or the block form ` + `\`#|(authorize)\`) reaches the authorize route — a space after the ` + `\`#\`, spaces inside the brackets, or anything trailing the closing ` + `bracket makes it a plain tag Malloy hands to something else. Write ` + `\`#(authorize) <expression>\` on its own line directly above the ` + `\`source:\` statement you mean to protect (unquoted — the quoted ` + `string form is retired). This is refused rather than interpreted: ` + `guessing at the ` + `intent would let publisher start enforcing a filter on a package that ` + `has been serving every row.`
-  });
-}
-function describeMisplacedAuthorizeAnnotation(f) {
-  if (f.kind === "query")
-    return `on query "${f.name}"`;
-  if (f.kind === "file")
-    return "at the file level (`##(authorize)`)";
-  return `on field "${f.fieldName}" of source "${f.name}"`;
-}
-function assertNoMisplacedAuthorizeAnnotations(found) {
-  if (found.length === 0)
-    return;
-  const positions = found.map((f) => `  - ${describeMisplacedAuthorizeAnnotation(f)}`).join(`
-`);
-  throw new ModelCompilationError({
-    message: `An \`#(authorize)\` annotation is never enforced at:
-${positions}
-` + `A gate only applies where model load looks for one — a \`source:\`'s ` + `own annotation, or one it inherits from an \`extend\`/query-source ` + `base. File-level \`##(authorize)\` is deprecated and no longer ` + `enforced anywhere, so it always lands here: declare \`#(authorize)\` ` + `on each \`source:\` it was meant to protect instead. Every other ` + `position above should move to the \`source:\` statement it is meant ` + `to protect.`
-  });
-}
-function referencedGivenNames(expr) {
-  const scanned = expr.replace(STRING_LITERAL_PATTERN, "''");
-  const names = [];
-  const seen = new Set;
-  for (const match of scanned.matchAll(GIVEN_REF_PATTERN)) {
-    const name = match[1];
-    if (!seen.has(name)) {
-      seen.add(name);
-      names.push(name);
-    }
-  }
-  return names;
-}
-function quoteMalloyIdentifier(name) {
-  return "`" + name.replace(/\\/g, "\\\\").replace(/`/g, "\\`") + "`";
-}
-function buildRowLevelProbe(graftTarget, filterText) {
-  return `run: ${quoteMalloyIdentifier(graftTarget)} extend { where: ${filterText} } -> { select: __authorize_probe is 1; limit: 1 }`;
-}
-function liftProbeFilterCondition(prepared, label, filterText) {
-  const filterList = prepared._query?.structRef?.filterList;
-  if (!Array.isArray(filterList) || filterList.length === 0) {
-    throw new Error(`${label} carries no filter condition`);
-  }
-  const lifted = filterList[filterList.length - 1];
-  if (lifted.code !== filterText) {
-    throw new Error(`${label} carries the wrong condition — expected "${filterText}", got "${lifted.code ?? ""}"`);
-  }
-  if (!lifted.isSourceFilter) {
-    throw new Error(`${label} carries a condition that is not a source filter`);
-  }
-  return lifted;
-}
-function gateFilterText(exprs) {
-  return exprs.map((e) => `(${e})`).join(" or ");
-}
-async function liftRowLevelCondition(compiler, sourceName, exprs) {
-  const filterText = gateFilterText(exprs);
-  const prepared = await compiler.loadQuery(buildRowLevelProbe(sourceName, filterText)).getPreparedQuery();
-  return liftProbeFilterCondition(prepared, `row-level probe for "${sourceName}"`, filterText);
-}
-async function validateAuthorizeProbes(compiler, options) {
-  const ownNotesOf = options.authorizeOwnNotes ?? new Map;
-  for (const [sourceName, groups] of options.authorizeMap ?? []) {
-    for (const exprs of groups) {
-      if (exprs.length === 0)
-        continue;
-      let condition;
-      try {
-        condition = await liftRowLevelCondition(compiler, sourceName, exprs);
-      } catch (err) {
-        const detail = err instanceof Error ? err.message : String(err);
-        const ownNotes = ownNotesOf.get(sourceName) ?? [];
-        if (ownNotes.length === 0) {
-          options.onRowLevelGateRejected?.("entry_point_unexpressible");
-          options.onRowLevelGateUnexpressible?.(sourceName, detail);
-          continue;
-        }
-        throw new ModelCompilationError({
-          message: `Invalid #(authorize) annotation on source "${sourceName}" ` + `[${exprs.join(" | ")}]: ${detail}`
-        });
-      }
-      options.onOwnRowLevelConditionCompiled?.(sourceName, condition);
-    }
-  }
-}
-function isLegacyQuotedPayload(payload) {
-  const trimmed = payload.trim();
-  return WHOLE_BODY_QUOTED_STRING.test(trimmed) || WHOLE_BODY_SINGLE_QUOTED_STRING.test(trimmed);
-}
-function unquoteLegacyGatePayload(payload) {
-  const trimmed = payload.trim();
-  const inner = trimmed.slice(1, -1);
-  return trimmed[0] === "'" ? inner.replace(SINGLE_QUOTE_ESCAPE, "$1") : inner.replace(DOUBLE_QUOTE_ESCAPE, "$1");
-}
-function parseAuthorizeAnnotation(annotation) {
-  const content = authorizeNoteContent(annotation);
-  if (content === undefined)
-    return null;
-  const trimmed = content.trim();
-  if (trimmed.length === 0) {
-    throw new Error("authorize annotation has an empty expression body");
-  }
-  return trimmed;
-}
-function collectAuthorizeExprs(annotations) {
-  const exprs = [];
-  for (const annotation of annotations) {
-    const expr = parseAuthorizeAnnotation(annotation);
-    if (expr !== null) {
-      exprs.push(expr);
-    }
-  }
-  return exprs;
-}
-function findMultipleAuthorizeGates(authorizeOwnNotes) {
-  const found = [];
-  for (const [sourceName, notes] of authorizeOwnNotes) {
-    if (notes.length > 1) {
-      found.push({ sourceName, texts: notes.map((note) => note.text) });
-    }
-  }
-  return found;
-}
-function assertAtMostOneAuthorizeGate(found) {
-  if (found.length === 0)
-    return;
-  const positions = found.map(({ sourceName, texts }) => `  - source "${sourceName}" declares ${texts.length}:
-` + texts.map((t) => `      \`${t.trim().split(/[\r\n]/, 1)[0]}\``).join(`
-`)).join(`
-`);
-  throw new ModelCompilationError({
-    message: `A source may declare at most one \`#(authorize)\` annotation:
-${positions}
-` + `Combine multiple conditions into one expression with \`or\` instead of ` + `repeating the annotation, e.g. ` + "`#(authorize) $ROLE = 'admin' or org_id in $GROUPS`."
-  });
-}
-function findLegacyStringGates(authorizeOwnNotes) {
-  const found = [];
-  for (const [sourceName, notes] of authorizeOwnNotes) {
-    const legacyNotes = notes.filter((note) => {
-      const content = authorizeNoteContent(note.text);
-      return content !== undefined && isLegacyQuotedPayload(content);
-    });
-    if (legacyNotes.length === 0)
-      continue;
-    const exprs = collectAuthorizeExprs(legacyNotes.map((note) => note.text));
-    if (exprs.length > 0) {
-      found.push({ sourceName, exprs });
-    }
-  }
-  return found;
-}
-function assertNoLegacyStringGate(found) {
-  if (found.length === 0)
-    return;
-  const rewrites = found.flatMap(({ sourceName, exprs }) => exprs.map((expr) => `  - source "${sourceName}": replace \`#(authorize) ${expr}\`` + ` with
-      #(authorize) ${unquoteLegacyGatePayload(expr)}`)).join(`
-`);
-  throw new ModelCompilationError({
-    message: `The string form of \`#(authorize)\` (a Malloy-quoted expression on ` + `the \`source:\` line) is no longer accepted. Replace it with the ` + `unquoted expression, carried by an \`#(authorize)\` annotation on ` + `its own line directly above the \`source:\` line:
-${rewrites}
-` + `Test that the rewrite gates the same rows and check the row count ` + `matches what the string form served.`
-  });
-}
-var AUTHORIZE_ROUTE = "authorize", AUTHORIZE_TAG_LIKE, AUTHORIZE_ANNOTATION_ANYWHERE, MOTLY_AUTHORIZE_PAYLOAD, MALFORMED_AUTHORIZE_ATTEMPT, GIVEN_REF_PATTERN, SINGLE_QUOTE_ESCAPE, DOUBLE_QUOTE_ESCAPE, STRING_LITERAL_PATTERN, everyMemberOf = () => (...members) => members, ROW_LEVEL_GATE_REJECTION_CAUSES, WHOLE_BODY_QUOTED_STRING, WHOLE_BODY_SINGLE_QUOTED_STRING;
-var init_authorize = __esm(() => {
-  init_errors();
-  AUTHORIZE_TAG_LIKE = String.raw`##?\|?[ \t]*[([{<]?[ \t]*authorize(?=[)\]}>]|[ \t]|$)`;
-  AUTHORIZE_ANNOTATION_ANYWHERE = new RegExp(AUTHORIZE_TAG_LIKE, "iu");
-  MOTLY_AUTHORIZE_PAYLOAD = /^[ \t]*[([{<][ \t]*authorize[ \t]*[)\]}>]/iu;
-  MALFORMED_AUTHORIZE_ATTEMPT = /^##?\|?[ \t]*[([{<]?[ \t]*authorize/iu;
-  GIVEN_REF_PATTERN = /\$([A-Za-z_][A-Za-z0-9_]*)/g;
-  SINGLE_QUOTE_ESCAPE = /\\(['\\])/g;
-  DOUBLE_QUOTE_ESCAPE = /\\(["\\])/g;
-  STRING_LITERAL_PATTERN = /'(?:\\.|[^'\\])*'|"(?:\\.|[^"\\])*"/g;
-  ROW_LEVEL_GATE_REJECTION_CAUSES = everyMemberOf()("unreachable_given", "entry_point_unexpressible", "source_line_gate_no_given_reference", "source_line_gate_negated_membership", "legacy_string_gate", "given_usage_unresolvable", "unclassifiable_condition");
-  WHOLE_BODY_QUOTED_STRING = /^"(?:\\.|[^"\\])*"$/;
-  WHOLE_BODY_SINGLE_QUOTED_STRING = /^'(?:\\.|[^'\\])*'$/;
-});
-
-// src/authorize_metrics.ts
-function recordAuthorizeGuardRejection(field) {
-  guardRejectionCounter ??= publisherMeter().createCounter("publisher_authorize_guard_rejected_total", {
-    description: "Requests rejected with 400 for declaring an `#(authorize)` annotation in caller-submitted Malloy text. Label: field ('query'|'source_name'|'query_name'|'compile_source')."
-  });
-  guardRejectionCounter.add(1, { field });
-}
-function recordAuthorizeBypass(entryPoint) {
-  bypassCounter ??= publisherMeter().createCounter("publisher_authorize_bypass_total", {
-    description: "Gate evaluations skipped because the request carried an authorize bypass (private data-management path). Label: entry_point ('source'|'runnable'). Any nonzero value on a path that should not use the bypass is a finding — see the paired `authorize bypass` audit log line for org/package/model/source."
-  });
-  bypassCounter.add(1, { entry_point: entryPoint });
-}
-function recordRowLevelGateDecision(decision) {
-  rowLevelDecisionCounter ??= publisherMeter().createCounter("publisher_authorize_row_level_total", {
-    description: "How a row-level `#(authorize)` gate resolved a request. Label: decision ('denied_by_gate'|'empty_after_filter'). 'denied_by_gate' is the fail-closed refusal when the gate could not be applied; 'empty_after_filter' is a successful response with zero rows after the filter matched none, which is NOT an error."
-  });
-  rowLevelDecisionCounter.add(1, { decision });
-}
-function recordRowLevelGateRejected(cause) {
-  rowLevelRejectionCounter ??= publisherMeter().createCounter("publisher_authorize_row_level_rejected_total", {
-    description: "Row-level `#(authorize)` gates that were refused, warned about, or could not be resolved. Label: cause (" + ROW_LEVEL_GATE_REJECTION_CAUSES.map((c) => `'${c}'`).join("|") + "). Only 'legacy_string_gate' fails the whole model load. 'entry_point_unexpressible', 'source_line_gate_no_given_reference' and 'source_line_gate_negated_membership' warn at load and leave the model servable. 'unreachable_given', 'given_usage_unresolvable' and 'unclassifiable_condition' are request-time only — that entry point denies every request. Alert on any nonzero value since the last publish; the request-time causes also make this a rate signal, so see the doc above before writing an alert."
-  });
-  rowLevelRejectionCounter.add(1, { cause });
-}
-var guardRejectionCounter = null, bypassCounter = null, rowLevelDecisionCounter = null, rowLevelRejectionCounter = null;
-var init_authorize_metrics = __esm(() => {
-  init_telemetry();
-  init_authorize();
-});
-
-// ../../node_modules/logform/format.js
-var require_format = __commonJS((exports, module) => {
-  class InvalidFormatError extends Error {
-    constructor(formatFn) {
-      super(`Format functions must be synchronous taking a two arguments: (info, opts)
-Found: ${formatFn.toString().split(`
-`)[0]}
-`);
-      Error.captureStackTrace(this, InvalidFormatError);
-    }
-  }
-  module.exports = (formatFn) => {
-    if (formatFn.length > 2) {
-      throw new InvalidFormatError(formatFn);
-    }
-    function Format(options = {}) {
-      this.options = options;
-    }
-    Format.prototype.transform = formatFn;
-    function createFormatWrap(opts) {
-      return new Format(opts);
-    }
-    createFormatWrap.Format = Format;
-    return createFormatWrap;
-  };
-});
-
-// ../../node_modules/@colors/colors/lib/styles.js
-var require_styles = __commonJS((exports, module) => {
-  var styles = {};
-  module["exports"] = styles;
-  var codes = {
-    reset: [0, 0],
-    bold: [1, 22],
-    dim: [2, 22],
-    italic: [3, 23],
-    underline: [4, 24],
-    inverse: [7, 27],
-    hidden: [8, 28],
-    strikethrough: [9, 29],
-    black: [30, 39],
-    red: [31, 39],
-    green: [32, 39],
-    yellow: [33, 39],
-    blue: [34, 39],
-    magenta: [35, 39],
-    cyan: [36, 39],
-    white: [37, 39],
-    gray: [90, 39],
-    grey: [90, 39],
-    brightRed: [91, 39],
-    brightGreen: [92, 39],
-    brightYellow: [93, 39],
-    brightBlue: [94, 39],
-    brightMagenta: [95, 39],
-    brightCyan: [96, 39],
-    brightWhite: [97, 39],
-    bgBlack: [40, 49],
-    bgRed: [41, 49],
-    bgGreen: [42, 49],
-    bgYellow: [43, 49],
-    bgBlue: [44, 49],
-    bgMagenta: [45, 49],
-    bgCyan: [46, 49],
-    bgWhite: [47, 49],
-    bgGray: [100, 49],
-    bgGrey: [100, 49],
-    bgBrightRed: [101, 49],
-    bgBrightGreen: [102, 49],
-    bgBrightYellow: [103, 49],
-    bgBrightBlue: [104, 49],
-    bgBrightMagenta: [105, 49],
-    bgBrightCyan: [106, 49],
-    bgBrightWhite: [107, 49],
-    blackBG: [40, 49],
-    redBG: [41, 49],
-    greenBG: [42, 49],
-    yellowBG: [43, 49],
-    blueBG: [44, 49],
-    magentaBG: [45, 49],
-    cyanBG: [46, 49],
-    whiteBG: [47, 49]
-  };
-  Object.keys(codes).forEach(function(key) {
-    var val = codes[key];
-    var style = styles[key] = [];
-    style.open = "\x1B[" + val[0] + "m";
-    style.close = "\x1B[" + val[1] + "m";
-  });
-});
-
-// ../../node_modules/@colors/colors/lib/system/has-flag.js
-var require_has_flag = __commonJS((exports, module) => {
-  module.exports = function(flag, argv) {
-    argv = argv || process.argv || [];
-    var terminatorPos = argv.indexOf("--");
-    var prefix = /^-{1,2}/.test(flag) ? "" : "--";
-    var pos = argv.indexOf(prefix + flag);
-    return pos !== -1 && (terminatorPos === -1 ? true : pos < terminatorPos);
-  };
-});
-
-// ../../node_modules/@colors/colors/lib/system/supports-colors.js
-var require_supports_colors = __commonJS((exports, module) => {
-  var os2 = __require("os");
-  var hasFlag = require_has_flag();
-  var env = process.env;
-  var forceColor = undefined;
-  if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false")) {
-    forceColor = false;
-  } else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
-    forceColor = true;
-  }
-  if ("FORCE_COLOR" in env) {
-    forceColor = env.FORCE_COLOR.length === 0 || parseInt(env.FORCE_COLOR, 10) !== 0;
-  }
-  function translateLevel(level) {
-    if (level === 0) {
-      return false;
-    }
-    return {
-      level,
-      hasBasic: true,
-      has256: level >= 2,
-      has16m: level >= 3
-    };
-  }
-  function supportsColor(stream) {
-    if (forceColor === false) {
-      return 0;
-    }
-    if (hasFlag("color=16m") || hasFlag("color=full") || hasFlag("color=truecolor")) {
-      return 3;
-    }
-    if (hasFlag("color=256")) {
-      return 2;
-    }
-    if (stream && !stream.isTTY && forceColor !== true) {
-      return 0;
-    }
-    var min = forceColor ? 1 : 0;
-    if (process.platform === "win32") {
-      var osRelease = os2.release().split(".");
-      if (Number(process.versions.node.split(".")[0]) >= 8 && Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
-        return Number(osRelease[2]) >= 14931 ? 3 : 2;
-      }
-      return 1;
-    }
-    if ("CI" in env) {
-      if (["TRAVIS", "CIRCLECI", "APPVEYOR", "GITLAB_CI"].some(function(sign) {
-        return sign in env;
-      }) || env.CI_NAME === "codeship") {
-        return 1;
-      }
-      return min;
-    }
-    if ("TEAMCITY_VERSION" in env) {
-      return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env.TEAMCITY_VERSION) ? 1 : 0;
-    }
-    if ("TERM_PROGRAM" in env) {
-      var version = parseInt((env.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
-      switch (env.TERM_PROGRAM) {
-        case "iTerm.app":
-          return version >= 3 ? 3 : 2;
-        case "Hyper":
-          return 3;
-        case "Apple_Terminal":
-          return 2;
-      }
-    }
-    if (/-256(color)?$/i.test(env.TERM)) {
-      return 2;
-    }
-    if (/^screen|^xterm|^vt100|^rxvt|color|ansi|cygwin|linux/i.test(env.TERM)) {
-      return 1;
-    }
-    if ("COLORTERM" in env) {
-      return 1;
-    }
-    if (env.TERM === "dumb") {
-      return min;
-    }
-    return min;
-  }
-  function getSupportLevel(stream) {
-    var level = supportsColor(stream);
-    return translateLevel(level);
-  }
-  module.exports = {
-    supportsColor: getSupportLevel,
-    stdout: getSupportLevel(process.stdout),
-    stderr: getSupportLevel(process.stderr)
-  };
-});
-
-// ../../node_modules/@colors/colors/lib/custom/trap.js
-var require_trap = __commonJS((exports, module) => {
-  module["exports"] = function runTheTrap(text, options) {
-    var result = "";
-    text = text || "Run the trap, drop the bass";
-    text = text.split("");
-    var trap = {
-      a: ["@", "Ą", "Ⱥ", "Ʌ", "Δ", "Λ", "Д"],
-      b: ["ß", "Ɓ", "Ƀ", "ɮ", "β", "฿"],
-      c: ["©", "Ȼ", "Ͼ"],
-      d: ["Ð", "Ɗ", "Ԁ", "ԁ", "Ԃ", "ԃ"],
-      e: [
-        "Ë",
-        "ĕ",
-        "Ǝ",
-        "ɘ",
-        "Σ",
-        "ξ",
-        "Ҽ",
-        "੬"
-      ],
-      f: ["Ӻ"],
-      g: ["ɢ"],
-      h: ["Ħ", "ƕ", "Ң", "Һ", "Ӈ", "Ԋ"],
-      i: ["༏"],
-      j: ["Ĵ"],
-      k: ["ĸ", "Ҡ", "Ӄ", "Ԟ"],
-      l: ["Ĺ"],
-      m: ["ʍ", "Ӎ", "ӎ", "Ԡ", "ԡ", "൩"],
-      n: ["Ñ", "ŋ", "Ɲ", "Ͷ", "Π", "Ҋ"],
-      o: [
-        "Ø",
-        "õ",
-        "ø",
-        "Ǿ",
-        "ʘ",
-        "Ѻ",
-        "ם",
-        "۝",
-        "๏"
-      ],
-      p: ["Ƿ", "Ҏ"],
-      q: ["্"],
-      r: ["®", "Ʀ", "Ȑ", "Ɍ", "ʀ", "Я"],
-      s: ["§", "Ϟ", "ϟ", "Ϩ"],
-      t: ["Ł", "Ŧ", "ͳ"],
-      u: ["Ʊ", "Ս"],
-      v: ["ט"],
-      w: ["Ш", "Ѡ", "Ѽ", "൰"],
-      x: ["Ҳ", "Ӿ", "Ӽ", "ӽ"],
-      y: ["¥", "Ұ", "Ӌ"],
-      z: ["Ƶ", "ɀ"]
-    };
-    text.forEach(function(c) {
-      c = c.toLowerCase();
-      var chars = trap[c] || [" "];
-      var rand = Math.floor(Math.random() * chars.length);
-      if (typeof trap[c] !== "undefined") {
-        result += trap[c][rand];
-      } else {
-        result += c;
-      }
-    });
-    return result;
+});
+
+// ../../node_modules/@colors/colors/lib/custom/trap.js
+var require_trap = __commonJS((exports, module) => {
+  module["exports"] = function runTheTrap(text, options) {
+    var result = "";
+    text = text || "Run the trap, drop the bass";
+    text = text.split("");
+    var trap = {
+      a: ["@", "Ą", "Ⱥ", "Ʌ", "Δ", "Λ", "Д"],
+      b: ["ß", "Ɓ", "Ƀ", "ɮ", "β", "฿"],
+      c: ["©", "Ȼ", "Ͼ"],
+      d: ["Ð", "Ɗ", "Ԁ", "ԁ", "Ԃ", "ԃ"],
+      e: [
+        "Ë",
+        "ĕ",
+        "Ǝ",
+        "ɘ",
+        "Σ",
+        "ξ",
+        "Ҽ",
+        "੬"
+      ],
+      f: ["Ӻ"],
+      g: ["ɢ"],
+      h: ["Ħ", "ƕ", "Ң", "Һ", "Ӈ", "Ԋ"],
+      i: ["༏"],
+      j: ["Ĵ"],
+      k: ["ĸ", "Ҡ", "Ӄ", "Ԟ"],
+      l: ["Ĺ"],
+      m: ["ʍ", "Ӎ", "ӎ", "Ԡ", "ԡ", "൩"],
+      n: ["Ñ", "ŋ", "Ɲ", "Ͷ", "Π", "Ҋ"],
+      o: [
+        "Ø",
+        "õ",
+        "ø",
+        "Ǿ",
+        "ʘ",
+        "Ѻ",
+        "ם",
+        "۝",
+        "๏"
+      ],
+      p: ["Ƿ", "Ҏ"],
+      q: ["্"],
+      r: ["®", "Ʀ", "Ȑ", "Ɍ", "ʀ", "Я"],
+      s: ["§", "Ϟ", "ϟ", "Ϩ"],
+      t: ["Ł", "Ŧ", "ͳ"],
+      u: ["Ʊ", "Ս"],
+      v: ["ט"],
+      w: ["Ш", "Ѡ", "Ѽ", "൰"],
+      x: ["Ҳ", "Ӿ", "Ӽ", "ӽ"],
+      y: ["¥", "Ұ", "Ӌ"],
+      z: ["Ƶ", "ɀ"]
+    };
+    text.forEach(function(c) {
+      c = c.toLowerCase();
+      var chars = trap[c] || [" "];
+      var rand = Math.floor(Math.random() * chars.length);
+      if (typeof trap[c] !== "undefined") {
+        result += trap[c][rand];
+      } else {
+        result += c;
+      }
+    });
+    return result;
   };
 });
 
@@ -12270,20 +11810,187 @@ var require_stack_trace = __commonJS((exports) => {
   };
 });
 
-// ../../node_modules/winston/lib/winston/exception-stream.js
-var require_exception_stream = __commonJS((exports, module) => {
+// ../../node_modules/winston/lib/winston/exception-stream.js
+var require_exception_stream = __commonJS((exports, module) => {
+  var { Writable } = require_readable();
+  module.exports = class ExceptionStream extends Writable {
+    constructor(transport) {
+      super({ objectMode: true });
+      if (!transport) {
+        throw new Error("ExceptionStream requires a TransportStream instance.");
+      }
+      this.handleExceptions = true;
+      this.transport = transport;
+    }
+    _write(info, enc, callback) {
+      if (info.exception) {
+        return this.transport.log(info, callback);
+      }
+      callback();
+      return true;
+    }
+  };
+});
+
+// ../../node_modules/winston/lib/winston/exception-handler.js
+var require_exception_handler = __commonJS((exports, module) => {
+  var os2 = __require("os");
+  var asyncForEach = require_forEach();
+  var debug = require_node3()("winston:exception");
+  var once = require_one_time();
+  var stackTrace = require_stack_trace();
+  var ExceptionStream = require_exception_stream();
+  module.exports = class ExceptionHandler {
+    constructor(logger) {
+      if (!logger) {
+        throw new Error("Logger is required to handle exceptions");
+      }
+      this.logger = logger;
+      this.handlers = new Map;
+    }
+    handle(...args) {
+      args.forEach((arg) => {
+        if (Array.isArray(arg)) {
+          return arg.forEach((handler) => this._addHandler(handler));
+        }
+        this._addHandler(arg);
+      });
+      if (!this.catcher) {
+        this.catcher = this._uncaughtException.bind(this);
+        process.on("uncaughtException", this.catcher);
+      }
+    }
+    unhandle() {
+      if (this.catcher) {
+        process.removeListener("uncaughtException", this.catcher);
+        this.catcher = false;
+        Array.from(this.handlers.values()).forEach((wrapper) => this.logger.unpipe(wrapper));
+      }
+    }
+    getAllInfo(err) {
+      let message = null;
+      if (err) {
+        message = typeof err === "string" ? err : err.message;
+      }
+      return {
+        error: err,
+        level: "error",
+        message: [
+          `uncaughtException: ${message || "(no error message)"}`,
+          err && err.stack || "  No stack trace"
+        ].join(`
+`),
+        stack: err && err.stack,
+        exception: true,
+        date: new Date().toString(),
+        process: this.getProcessInfo(),
+        os: this.getOsInfo(),
+        trace: this.getTrace(err)
+      };
+    }
+    getProcessInfo() {
+      return {
+        pid: process.pid,
+        uid: process.getuid ? process.getuid() : null,
+        gid: process.getgid ? process.getgid() : null,
+        cwd: process.cwd(),
+        execPath: process.execPath,
+        version: process.version,
+        argv: process.argv,
+        memoryUsage: process.memoryUsage()
+      };
+    }
+    getOsInfo() {
+      return {
+        loadavg: os2.loadavg(),
+        uptime: os2.uptime()
+      };
+    }
+    getTrace(err) {
+      const trace = err ? stackTrace.parse(err) : stackTrace.get();
+      return trace.map((site) => {
+        return {
+          column: site.getColumnNumber(),
+          file: site.getFileName(),
+          function: site.getFunctionName(),
+          line: site.getLineNumber(),
+          method: site.getMethodName(),
+          native: site.isNative()
+        };
+      });
+    }
+    _addHandler(handler) {
+      if (!this.handlers.has(handler)) {
+        handler.handleExceptions = true;
+        const wrapper = new ExceptionStream(handler);
+        this.handlers.set(handler, wrapper);
+        this.logger.pipe(wrapper);
+      }
+    }
+    _uncaughtException(err) {
+      const info = this.getAllInfo(err);
+      const handlers = this._getExceptionHandlers();
+      let doExit = typeof this.logger.exitOnError === "function" ? this.logger.exitOnError(err) : this.logger.exitOnError;
+      let timeout;
+      if (!handlers.length && doExit) {
+        console.warn("winston: exitOnError cannot be true with no exception handlers.");
+        console.warn("winston: not exiting process.");
+        doExit = false;
+      }
+      function gracefulExit() {
+        debug("doExit", doExit);
+        debug("process._exiting", process._exiting);
+        if (doExit && !process._exiting) {
+          if (timeout) {
+            clearTimeout(timeout);
+          }
+          process.exit(1);
+        }
+      }
+      if (!handlers || handlers.length === 0) {
+        return process.nextTick(gracefulExit);
+      }
+      asyncForEach(handlers, (handler, next) => {
+        const done = once(next);
+        const transport = handler.transport || handler;
+        function onDone(event) {
+          return () => {
+            debug(event);
+            done();
+          };
+        }
+        transport._ending = true;
+        transport.once("finish", onDone("finished"));
+        transport.once("error", onDone("error"));
+      }, () => doExit && gracefulExit());
+      this.logger.log(info);
+      if (doExit) {
+        timeout = setTimeout(gracefulExit, 3000);
+      }
+    }
+    _getExceptionHandlers() {
+      return this.logger.transports.filter((wrap) => {
+        const transport = wrap.transport || wrap;
+        return transport.handleExceptions;
+      });
+    }
+  };
+});
+
+// ../../node_modules/winston/lib/winston/rejection-stream.js
+var require_rejection_stream = __commonJS((exports, module) => {
   var { Writable } = require_readable();
-  module.exports = class ExceptionStream extends Writable {
+  module.exports = class RejectionStream extends Writable {
     constructor(transport) {
       super({ objectMode: true });
       if (!transport) {
-        throw new Error("ExceptionStream requires a TransportStream instance.");
+        throw new Error("RejectionStream requires a TransportStream instance.");
       }
-      this.handleExceptions = true;
+      this.handleRejections = true;
       this.transport = transport;
     }
     _write(info, enc, callback) {
-      if (info.exception) {
+      if (info.rejection) {
         return this.transport.log(info, callback);
       }
       callback();
@@ -12292,18 +11999,18 @@ var require_exception_stream = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/winston/lib/winston/exception-handler.js
-var require_exception_handler = __commonJS((exports, module) => {
+// ../../node_modules/winston/lib/winston/rejection-handler.js
+var require_rejection_handler = __commonJS((exports, module) => {
   var os2 = __require("os");
   var asyncForEach = require_forEach();
-  var debug = require_node3()("winston:exception");
+  var debug = require_node3()("winston:rejection");
   var once = require_one_time();
   var stackTrace = require_stack_trace();
-  var ExceptionStream = require_exception_stream();
-  module.exports = class ExceptionHandler {
+  var RejectionStream = require_rejection_stream();
+  module.exports = class RejectionHandler {
     constructor(logger) {
       if (!logger) {
-        throw new Error("Logger is required to handle exceptions");
+        throw new Error("Logger is required to handle rejections");
       }
       this.logger = logger;
       this.handlers = new Map;
@@ -12316,13 +12023,13 @@ var require_exception_handler = __commonJS((exports, module) => {
         this._addHandler(arg);
       });
       if (!this.catcher) {
-        this.catcher = this._uncaughtException.bind(this);
-        process.on("uncaughtException", this.catcher);
+        this.catcher = this._unhandledRejection.bind(this);
+        process.on("unhandledRejection", this.catcher);
       }
     }
     unhandle() {
       if (this.catcher) {
-        process.removeListener("uncaughtException", this.catcher);
+        process.removeListener("unhandledRejection", this.catcher);
         this.catcher = false;
         Array.from(this.handlers.values()).forEach((wrapper) => this.logger.unpipe(wrapper));
       }
@@ -12336,12 +12043,12 @@ var require_exception_handler = __commonJS((exports, module) => {
         error: err,
         level: "error",
         message: [
-          `uncaughtException: ${message || "(no error message)"}`,
+          `unhandledRejection: ${message || "(no error message)"}`,
           err && err.stack || "  No stack trace"
         ].join(`
 `),
         stack: err && err.stack,
-        exception: true,
+        rejection: true,
         date: new Date().toString(),
         process: this.getProcessInfo(),
         os: this.getOsInfo(),
@@ -12381,940 +12088,1254 @@ var require_exception_handler = __commonJS((exports, module) => {
     }
     _addHandler(handler) {
       if (!this.handlers.has(handler)) {
-        handler.handleExceptions = true;
-        const wrapper = new ExceptionStream(handler);
+        handler.handleRejections = true;
+        const wrapper = new RejectionStream(handler);
         this.handlers.set(handler, wrapper);
         this.logger.pipe(wrapper);
       }
     }
-    _uncaughtException(err) {
-      const info = this.getAllInfo(err);
-      const handlers = this._getExceptionHandlers();
-      let doExit = typeof this.logger.exitOnError === "function" ? this.logger.exitOnError(err) : this.logger.exitOnError;
-      let timeout;
-      if (!handlers.length && doExit) {
-        console.warn("winston: exitOnError cannot be true with no exception handlers.");
-        console.warn("winston: not exiting process.");
-        doExit = false;
+    _unhandledRejection(err) {
+      const info = this.getAllInfo(err);
+      const handlers = this._getRejectionHandlers();
+      let doExit = typeof this.logger.exitOnError === "function" ? this.logger.exitOnError(err) : this.logger.exitOnError;
+      let timeout;
+      if (!handlers.length && doExit) {
+        console.warn("winston: exitOnError cannot be true with no rejection handlers.");
+        console.warn("winston: not exiting process.");
+        doExit = false;
+      }
+      function gracefulExit() {
+        debug("doExit", doExit);
+        debug("process._exiting", process._exiting);
+        if (doExit && !process._exiting) {
+          if (timeout) {
+            clearTimeout(timeout);
+          }
+          process.exit(1);
+        }
+      }
+      if (!handlers || handlers.length === 0) {
+        return process.nextTick(gracefulExit);
+      }
+      asyncForEach(handlers, (handler, next) => {
+        const done = once(next);
+        const transport = handler.transport || handler;
+        function onDone(event) {
+          return () => {
+            debug(event);
+            done();
+          };
+        }
+        transport._ending = true;
+        transport.once("finish", onDone("finished"));
+        transport.once("error", onDone("error"));
+      }, () => doExit && gracefulExit());
+      this.logger.log(info);
+      if (doExit) {
+        timeout = setTimeout(gracefulExit, 3000);
+      }
+    }
+    _getRejectionHandlers() {
+      return this.logger.transports.filter((wrap) => {
+        const transport = wrap.transport || wrap;
+        return transport.handleRejections;
+      });
+    }
+  };
+});
+
+// ../../node_modules/winston/lib/winston/profiler.js
+var require_profiler = __commonJS((exports, module) => {
+  class Profiler {
+    constructor(logger) {
+      const Logger = require_logger();
+      if (typeof logger !== "object" || Array.isArray(logger) || !(logger instanceof Logger)) {
+        throw new Error("Logger is required for profiling");
+      } else {
+        this.logger = logger;
+        this.start = Date.now();
+      }
+    }
+    done(...args) {
+      if (typeof args[args.length - 1] === "function") {
+        console.warn("Callback function no longer supported as of winston@3.0.0");
+        args.pop();
+      }
+      const info = typeof args[args.length - 1] === "object" ? args.pop() : {};
+      info.level = info.level || "info";
+      info.durationMs = Date.now() - this.start;
+      return this.logger.write(info);
+    }
+  }
+  module.exports = Profiler;
+});
+
+// ../../node_modules/winston/lib/winston/logger.js
+var require_logger = __commonJS((exports, module) => {
+  var { Stream, Transform } = require_readable();
+  var asyncForEach = require_forEach();
+  var { LEVEL, SPLAT } = require_triple_beam();
+  var isStream = require_is_stream();
+  var ExceptionHandler = require_exception_handler();
+  var RejectionHandler = require_rejection_handler();
+  var LegacyTransportStream = require_legacy();
+  var Profiler = require_profiler();
+  var { warn } = require_common();
+  var config = require_config2();
+  var formatRegExp = /%[scdjifoO%]/g;
+
+  class Logger extends Transform {
+    constructor(options) {
+      super({ objectMode: true });
+      this.configure(options);
+    }
+    child(defaultRequestMetadata) {
+      const logger = this;
+      return Object.create(logger, {
+        write: {
+          value: function(info) {
+            const infoClone = Object.assign({}, defaultRequestMetadata, info);
+            if (info instanceof Error) {
+              infoClone.stack = info.stack;
+              infoClone.message = info.message;
+            }
+            logger.write(infoClone);
+          }
+        }
+      });
+    }
+    configure({
+      silent,
+      format,
+      defaultMeta,
+      levels,
+      level = "info",
+      exitOnError = true,
+      transports,
+      colors,
+      emitErrs,
+      formatters,
+      padLevels,
+      rewriters,
+      stripColors,
+      exceptionHandlers,
+      rejectionHandlers
+    } = {}) {
+      if (this.transports.length) {
+        this.clear();
+      }
+      this.silent = silent;
+      this.format = format || this.format || require_json()();
+      this.defaultMeta = defaultMeta || null;
+      this.levels = levels || this.levels || config.npm.levels;
+      this.level = level;
+      if (this.exceptions) {
+        this.exceptions.unhandle();
+      }
+      if (this.rejections) {
+        this.rejections.unhandle();
+      }
+      this.exceptions = new ExceptionHandler(this);
+      this.rejections = new RejectionHandler(this);
+      this.profilers = {};
+      this.exitOnError = exitOnError;
+      if (transports) {
+        transports = Array.isArray(transports) ? transports : [transports];
+        transports.forEach((transport) => this.add(transport));
+      }
+      if (colors || emitErrs || formatters || padLevels || rewriters || stripColors) {
+        throw new Error([
+          "{ colors, emitErrs, formatters, padLevels, rewriters, stripColors } were removed in winston@3.0.0.",
+          "Use a custom winston.format(function) instead.",
+          "See: https://github.com/winstonjs/winston/tree/master/UPGRADE-3.0.md"
+        ].join(`
+`));
+      }
+      if (exceptionHandlers) {
+        this.exceptions.handle(exceptionHandlers);
+      }
+      if (rejectionHandlers) {
+        this.rejections.handle(rejectionHandlers);
+      }
+    }
+    isLevelEnabled(level) {
+      const givenLevelValue = getLevelValue(this.levels, level);
+      if (givenLevelValue === null) {
+        return false;
+      }
+      const configuredLevelValue = getLevelValue(this.levels, this.level);
+      if (configuredLevelValue === null) {
+        return false;
+      }
+      if (!this.transports || this.transports.length === 0) {
+        return configuredLevelValue >= givenLevelValue;
+      }
+      const index = this.transports.findIndex((transport) => {
+        let transportLevelValue = getLevelValue(this.levels, transport.level);
+        if (transportLevelValue === null) {
+          transportLevelValue = configuredLevelValue;
+        }
+        return transportLevelValue >= givenLevelValue;
+      });
+      return index !== -1;
+    }
+    log(level, msg, ...splat) {
+      if (arguments.length === 1) {
+        level[LEVEL] = level.level;
+        this._addDefaultMeta(level);
+        this.write(level);
+        return this;
+      }
+      if (arguments.length === 2) {
+        if (msg && typeof msg === "object") {
+          msg[LEVEL] = msg.level = level;
+          this._addDefaultMeta(msg);
+          this.write(msg);
+          return this;
+        }
+        msg = { [LEVEL]: level, level, message: msg };
+        this._addDefaultMeta(msg);
+        this.write(msg);
+        return this;
+      }
+      const [meta] = splat;
+      if (typeof meta === "object" && meta !== null) {
+        const tokens = msg && msg.match && msg.match(formatRegExp);
+        if (!tokens) {
+          const info = Object.assign({}, this.defaultMeta, meta, {
+            [LEVEL]: level,
+            [SPLAT]: splat,
+            level,
+            message: msg
+          });
+          if (meta.message)
+            info.message = `${info.message} ${meta.message}`;
+          if (meta.stack)
+            info.stack = meta.stack;
+          if (meta.cause)
+            info.cause = meta.cause;
+          this.write(info);
+          return this;
+        }
+      }
+      this.write(Object.assign({}, this.defaultMeta, {
+        [LEVEL]: level,
+        [SPLAT]: splat,
+        level,
+        message: msg
+      }));
+      return this;
+    }
+    _transform(info, enc, callback) {
+      if (this.silent) {
+        return callback();
       }
-      function gracefulExit() {
-        debug("doExit", doExit);
-        debug("process._exiting", process._exiting);
-        if (doExit && !process._exiting) {
-          if (timeout) {
-            clearTimeout(timeout);
-          }
-          process.exit(1);
-        }
+      if (!info[LEVEL]) {
+        info[LEVEL] = info.level;
       }
-      if (!handlers || handlers.length === 0) {
-        return process.nextTick(gracefulExit);
+      if (!this.levels[info[LEVEL]] && this.levels[info[LEVEL]] !== 0) {
+        console.error("[winston] Unknown logger level: %s", info[LEVEL]);
       }
-      asyncForEach(handlers, (handler, next) => {
-        const done = once(next);
-        const transport = handler.transport || handler;
-        function onDone(event) {
-          return () => {
-            debug(event);
-            done();
-          };
-        }
-        transport._ending = true;
-        transport.once("finish", onDone("finished"));
-        transport.once("error", onDone("error"));
-      }, () => doExit && gracefulExit());
-      this.logger.log(info);
-      if (doExit) {
-        timeout = setTimeout(gracefulExit, 3000);
+      if (!this._readableState.pipes) {
+        console.error("[winston] Attempt to write logs with no transports, which can increase memory usage: %j", info);
+      }
+      try {
+        this.push(this.format.transform(info, this.format.options));
+      } finally {
+        this._writableState.sync = false;
+        callback();
       }
     }
-    _getExceptionHandlers() {
-      return this.logger.transports.filter((wrap) => {
-        const transport = wrap.transport || wrap;
-        return transport.handleExceptions;
-      });
+    _final(callback) {
+      const transports = this.transports.slice();
+      asyncForEach(transports, (transport, next) => {
+        if (!transport || transport.finished)
+          return setImmediate(next);
+        transport.once("finish", next);
+        transport.end();
+      }, callback);
     }
-  };
-});
-
-// ../../node_modules/winston/lib/winston/rejection-stream.js
-var require_rejection_stream = __commonJS((exports, module) => {
-  var { Writable } = require_readable();
-  module.exports = class RejectionStream extends Writable {
-    constructor(transport) {
-      super({ objectMode: true });
-      if (!transport) {
-        throw new Error("RejectionStream requires a TransportStream instance.");
+    add(transport) {
+      const target = !isStream(transport) || transport.log.length > 2 ? new LegacyTransportStream({ transport }) : transport;
+      if (!target._writableState || !target._writableState.objectMode) {
+        throw new Error("Transports must WritableStreams in objectMode. Set { objectMode: true }.");
       }
-      this.handleRejections = true;
-      this.transport = transport;
-    }
-    _write(info, enc, callback) {
-      if (info.rejection) {
-        return this.transport.log(info, callback);
+      this._onEvent("error", target);
+      this._onEvent("warn", target);
+      this.pipe(target);
+      if (transport.handleExceptions) {
+        this.exceptions.handle();
       }
-      callback();
-      return true;
-    }
-  };
-});
-
-// ../../node_modules/winston/lib/winston/rejection-handler.js
-var require_rejection_handler = __commonJS((exports, module) => {
-  var os2 = __require("os");
-  var asyncForEach = require_forEach();
-  var debug = require_node3()("winston:rejection");
-  var once = require_one_time();
-  var stackTrace = require_stack_trace();
-  var RejectionStream = require_rejection_stream();
-  module.exports = class RejectionHandler {
-    constructor(logger) {
-      if (!logger) {
-        throw new Error("Logger is required to handle rejections");
+      if (transport.handleRejections) {
+        this.rejections.handle();
       }
-      this.logger = logger;
-      this.handlers = new Map;
+      return this;
     }
-    handle(...args) {
-      args.forEach((arg) => {
-        if (Array.isArray(arg)) {
-          return arg.forEach((handler) => this._addHandler(handler));
-        }
-        this._addHandler(arg);
-      });
-      if (!this.catcher) {
-        this.catcher = this._unhandledRejection.bind(this);
-        process.on("unhandledRejection", this.catcher);
+    remove(transport) {
+      if (!transport)
+        return this;
+      let target = transport;
+      if (!isStream(transport) || transport.log.length > 2) {
+        target = this.transports.filter((match) => match.transport === transport)[0];
       }
-    }
-    unhandle() {
-      if (this.catcher) {
-        process.removeListener("unhandledRejection", this.catcher);
-        this.catcher = false;
-        Array.from(this.handlers.values()).forEach((wrapper) => this.logger.unpipe(wrapper));
+      if (target) {
+        this.unpipe(target);
       }
+      return this;
     }
-    getAllInfo(err) {
-      let message = null;
-      if (err) {
-        message = typeof err === "string" ? err : err.message;
-      }
-      return {
-        error: err,
-        level: "error",
-        message: [
-          `unhandledRejection: ${message || "(no error message)"}`,
-          err && err.stack || "  No stack trace"
-        ].join(`
-`),
-        stack: err && err.stack,
-        rejection: true,
-        date: new Date().toString(),
-        process: this.getProcessInfo(),
-        os: this.getOsInfo(),
-        trace: this.getTrace(err)
-      };
+    clear() {
+      this.unpipe();
+      return this;
     }
-    getProcessInfo() {
-      return {
-        pid: process.pid,
-        uid: process.getuid ? process.getuid() : null,
-        gid: process.getgid ? process.getgid() : null,
-        cwd: process.cwd(),
-        execPath: process.execPath,
-        version: process.version,
-        argv: process.argv,
-        memoryUsage: process.memoryUsage()
-      };
+    close() {
+      this.exceptions.unhandle();
+      this.rejections.unhandle();
+      this.clear();
+      this.emit("close");
+      return this;
     }
-    getOsInfo() {
-      return {
-        loadavg: os2.loadavg(),
-        uptime: os2.uptime()
+    setLevels() {
+      warn.deprecated("setLevels");
+    }
+    query(options, callback) {
+      if (typeof options === "function") {
+        callback = options;
+        options = {};
+      }
+      options = options || {};
+      const results = {};
+      const queryObject = Object.assign({}, options.query || {});
+      function queryTransport(transport, next) {
+        if (options.query && typeof transport.formatQuery === "function") {
+          options.query = transport.formatQuery(queryObject);
+        }
+        transport.query(options, (err, res) => {
+          if (err) {
+            return next(err);
+          }
+          if (typeof transport.formatResults === "function") {
+            res = transport.formatResults(res, options.format);
+          }
+          next(null, res);
+        });
+      }
+      function addResults(transport, next) {
+        queryTransport(transport, (err, result) => {
+          if (next) {
+            result = err || result;
+            if (result) {
+              results[transport.name] = result;
+            }
+            next();
+          }
+          next = null;
+        });
+      }
+      asyncForEach(this.transports.filter((transport) => !!transport.query), addResults, () => callback(null, results));
+    }
+    stream(options = {}) {
+      const out = new Stream;
+      const streams = [];
+      out._streams = streams;
+      out.destroy = () => {
+        let i = streams.length;
+        while (i--) {
+          streams[i].destroy();
+        }
       };
-    }
-    getTrace(err) {
-      const trace = err ? stackTrace.parse(err) : stackTrace.get();
-      return trace.map((site) => {
-        return {
-          column: site.getColumnNumber(),
-          file: site.getFileName(),
-          function: site.getFunctionName(),
-          line: site.getLineNumber(),
-          method: site.getMethodName(),
-          native: site.isNative()
-        };
+      this.transports.filter((transport) => !!transport.stream).forEach((transport) => {
+        const str = transport.stream(options);
+        if (!str) {
+          return;
+        }
+        streams.push(str);
+        str.on("log", (log) => {
+          log.transport = log.transport || [];
+          log.transport.push(transport.name);
+          out.emit("log", log);
+        });
+        str.on("error", (err) => {
+          err.transport = err.transport || [];
+          err.transport.push(transport.name);
+          out.emit("error", err);
+        });
       });
+      return out;
     }
-    _addHandler(handler) {
-      if (!this.handlers.has(handler)) {
-        handler.handleRejections = true;
-        const wrapper = new RejectionStream(handler);
-        this.handlers.set(handler, wrapper);
-        this.logger.pipe(wrapper);
-      }
+    startTimer() {
+      return new Profiler(this);
     }
-    _unhandledRejection(err) {
-      const info = this.getAllInfo(err);
-      const handlers = this._getRejectionHandlers();
-      let doExit = typeof this.logger.exitOnError === "function" ? this.logger.exitOnError(err) : this.logger.exitOnError;
-      let timeout;
-      if (!handlers.length && doExit) {
-        console.warn("winston: exitOnError cannot be true with no rejection handlers.");
-        console.warn("winston: not exiting process.");
-        doExit = false;
-      }
-      function gracefulExit() {
-        debug("doExit", doExit);
-        debug("process._exiting", process._exiting);
-        if (doExit && !process._exiting) {
-          if (timeout) {
-            clearTimeout(timeout);
-          }
-          process.exit(1);
-        }
-      }
-      if (!handlers || handlers.length === 0) {
-        return process.nextTick(gracefulExit);
-      }
-      asyncForEach(handlers, (handler, next) => {
-        const done = once(next);
-        const transport = handler.transport || handler;
-        function onDone(event) {
-          return () => {
-            debug(event);
-            done();
-          };
+    profile(id, ...args) {
+      const time = Date.now();
+      if (this.profilers[id]) {
+        const timeEnd = this.profilers[id];
+        delete this.profilers[id];
+        if (typeof args[args.length - 2] === "function") {
+          console.warn("Callback function no longer supported as of winston@3.0.0");
+          args.pop();
         }
-        transport._ending = true;
-        transport.once("finish", onDone("finished"));
-        transport.once("error", onDone("error"));
-      }, () => doExit && gracefulExit());
-      this.logger.log(info);
-      if (doExit) {
-        timeout = setTimeout(gracefulExit, 3000);
+        const info = typeof args[args.length - 1] === "object" ? args.pop() : {};
+        info.level = info.level || "info";
+        info.durationMs = time - timeEnd;
+        info.message = info.message || id;
+        return this.write(info);
       }
+      this.profilers[id] = time;
+      return this;
     }
-    _getRejectionHandlers() {
-      return this.logger.transports.filter((wrap) => {
-        const transport = wrap.transport || wrap;
-        return transport.handleRejections;
-      });
+    handleExceptions(...args) {
+      console.warn("Deprecated: .handleExceptions() will be removed in winston@4. Use .exceptions.handle()");
+      this.exceptions.handle(...args);
     }
-  };
-});
-
-// ../../node_modules/winston/lib/winston/profiler.js
-var require_profiler = __commonJS((exports, module) => {
-  class Profiler {
-    constructor(logger) {
-      const Logger = require_logger();
-      if (typeof logger !== "object" || Array.isArray(logger) || !(logger instanceof Logger)) {
-        throw new Error("Logger is required for profiling");
-      } else {
-        this.logger = logger;
-        this.start = Date.now();
+    unhandleExceptions(...args) {
+      console.warn("Deprecated: .unhandleExceptions() will be removed in winston@4. Use .exceptions.unhandle()");
+      this.exceptions.unhandle(...args);
+    }
+    cli() {
+      throw new Error([
+        "Logger.cli() was removed in winston@3.0.0",
+        "Use a custom winston.formats.cli() instead.",
+        "See: https://github.com/winstonjs/winston/tree/master/UPGRADE-3.0.md"
+      ].join(`
+`));
+    }
+    _onEvent(event, transport) {
+      function transportEvent(err) {
+        if (event === "error" && !this.transports.includes(transport)) {
+          this.add(transport);
+        }
+        this.emit(event, err, transport);
+      }
+      if (!transport["__winston" + event]) {
+        transport["__winston" + event] = transportEvent.bind(this);
+        transport.on(event, transport["__winston" + event]);
       }
     }
-    done(...args) {
-      if (typeof args[args.length - 1] === "function") {
-        console.warn("Callback function no longer supported as of winston@3.0.0");
-        args.pop();
+    _addDefaultMeta(msg) {
+      if (this.defaultMeta) {
+        Object.assign(msg, this.defaultMeta);
       }
-      const info = typeof args[args.length - 1] === "object" ? args.pop() : {};
-      info.level = info.level || "info";
-      info.durationMs = Date.now() - this.start;
-      return this.logger.write(info);
     }
   }
-  module.exports = Profiler;
-});
-
-// ../../node_modules/winston/lib/winston/logger.js
-var require_logger = __commonJS((exports, module) => {
-  var { Stream, Transform } = require_readable();
-  var asyncForEach = require_forEach();
-  var { LEVEL, SPLAT } = require_triple_beam();
-  var isStream = require_is_stream();
-  var ExceptionHandler = require_exception_handler();
-  var RejectionHandler = require_rejection_handler();
-  var LegacyTransportStream = require_legacy();
-  var Profiler = require_profiler();
-  var { warn } = require_common();
-  var config = require_config2();
-  var formatRegExp = /%[scdjifoO%]/g;
-
-  class Logger extends Transform {
-    constructor(options) {
-      super({ objectMode: true });
-      this.configure(options);
+  function getLevelValue(levels, level) {
+    const value = levels[level];
+    if (!value && value !== 0) {
+      return null;
     }
-    child(defaultRequestMetadata) {
-      const logger = this;
-      return Object.create(logger, {
-        write: {
-          value: function(info) {
-            const infoClone = Object.assign({}, defaultRequestMetadata, info);
-            if (info instanceof Error) {
-              infoClone.stack = info.stack;
-              infoClone.message = info.message;
-            }
-            logger.write(infoClone);
-          }
-        }
-      });
+    return value;
+  }
+  Object.defineProperty(Logger.prototype, "transports", {
+    configurable: false,
+    enumerable: true,
+    get() {
+      const { pipes } = this._readableState;
+      return !Array.isArray(pipes) ? [pipes].filter(Boolean) : pipes;
     }
-    configure({
-      silent,
-      format,
-      defaultMeta,
-      levels,
-      level = "info",
-      exitOnError = true,
-      transports,
-      colors,
-      emitErrs,
-      formatters,
-      padLevels,
-      rewriters,
-      stripColors,
-      exceptionHandlers,
-      rejectionHandlers
-    } = {}) {
-      if (this.transports.length) {
-        this.clear();
-      }
-      this.silent = silent;
-      this.format = format || this.format || require_json()();
-      this.defaultMeta = defaultMeta || null;
-      this.levels = levels || this.levels || config.npm.levels;
-      this.level = level;
-      if (this.exceptions) {
-        this.exceptions.unhandle();
-      }
-      if (this.rejections) {
-        this.rejections.unhandle();
-      }
-      this.exceptions = new ExceptionHandler(this);
-      this.rejections = new RejectionHandler(this);
-      this.profilers = {};
-      this.exitOnError = exitOnError;
-      if (transports) {
-        transports = Array.isArray(transports) ? transports : [transports];
-        transports.forEach((transport) => this.add(transport));
-      }
-      if (colors || emitErrs || formatters || padLevels || rewriters || stripColors) {
-        throw new Error([
-          "{ colors, emitErrs, formatters, padLevels, rewriters, stripColors } were removed in winston@3.0.0.",
-          "Use a custom winston.format(function) instead.",
-          "See: https://github.com/winstonjs/winston/tree/master/UPGRADE-3.0.md"
-        ].join(`
-`));
-      }
-      if (exceptionHandlers) {
-        this.exceptions.handle(exceptionHandlers);
-      }
-      if (rejectionHandlers) {
-        this.rejections.handle(rejectionHandlers);
+  });
+  module.exports = Logger;
+});
+
+// ../../node_modules/winston/lib/winston/create-logger.js
+var require_create_logger = __commonJS((exports, module) => {
+  var { LEVEL } = require_triple_beam();
+  var config = require_config2();
+  var Logger = require_logger();
+  var debug = require_node3()("winston:create-logger");
+  function isLevelEnabledFunctionName(level) {
+    return "is" + level.charAt(0).toUpperCase() + level.slice(1) + "Enabled";
+  }
+  module.exports = function(opts = {}) {
+    opts.levels = opts.levels || config.npm.levels;
+
+    class DerivedLogger extends Logger {
+      constructor(options) {
+        super(options);
       }
     }
-    isLevelEnabled(level) {
-      const givenLevelValue = getLevelValue(this.levels, level);
-      if (givenLevelValue === null) {
-        return false;
-      }
-      const configuredLevelValue = getLevelValue(this.levels, this.level);
-      if (configuredLevelValue === null) {
-        return false;
-      }
-      if (!this.transports || this.transports.length === 0) {
-        return configuredLevelValue >= givenLevelValue;
+    const logger = new DerivedLogger(opts);
+    Object.keys(opts.levels).forEach(function(level) {
+      debug('Define prototype method for "%s"', level);
+      if (level === "log") {
+        console.warn('Level "log" not defined: conflicts with the method "log". Use a different level name.');
+        return;
       }
-      const index = this.transports.findIndex((transport) => {
-        let transportLevelValue = getLevelValue(this.levels, transport.level);
-        if (transportLevelValue === null) {
-          transportLevelValue = configuredLevelValue;
+      DerivedLogger.prototype[level] = function(...args) {
+        const self2 = this || logger;
+        if (args.length === 1) {
+          const [msg] = args;
+          const info = msg && msg.message && msg || { message: msg };
+          info.level = info[LEVEL] = level;
+          self2._addDefaultMeta(info);
+          self2.write(info);
+          return this || logger;
         }
-        return transportLevelValue >= givenLevelValue;
-      });
-      return index !== -1;
-    }
-    log(level, msg, ...splat) {
-      if (arguments.length === 1) {
-        level[LEVEL] = level.level;
-        this._addDefaultMeta(level);
-        this.write(level);
-        return this;
-      }
-      if (arguments.length === 2) {
-        if (msg && typeof msg === "object") {
-          msg[LEVEL] = msg.level = level;
-          this._addDefaultMeta(msg);
-          this.write(msg);
-          return this;
+        if (args.length === 0) {
+          self2.log(level, "");
+          return self2;
         }
-        msg = { [LEVEL]: level, level, message: msg };
-        this._addDefaultMeta(msg);
-        this.write(msg);
-        return this;
-      }
-      const [meta] = splat;
-      if (typeof meta === "object" && meta !== null) {
-        const tokens = msg && msg.match && msg.match(formatRegExp);
-        if (!tokens) {
-          const info = Object.assign({}, this.defaultMeta, meta, {
-            [LEVEL]: level,
-            [SPLAT]: splat,
-            level,
-            message: msg
-          });
-          if (meta.message)
-            info.message = `${info.message} ${meta.message}`;
-          if (meta.stack)
-            info.stack = meta.stack;
-          if (meta.cause)
-            info.cause = meta.cause;
-          this.write(info);
-          return this;
+        return self2.log(level, ...args);
+      };
+      DerivedLogger.prototype[isLevelEnabledFunctionName(level)] = function() {
+        return (this || logger).isLevelEnabled(level);
+      };
+    });
+    return logger;
+  };
+});
+
+// ../../node_modules/winston/lib/winston/container.js
+var require_container = __commonJS((exports, module) => {
+  var createLogger = require_create_logger();
+  module.exports = class Container {
+    constructor(options = {}) {
+      this.loggers = new Map;
+      this.options = options;
+    }
+    add(id, options) {
+      if (!this.loggers.has(id)) {
+        options = Object.assign({}, options || this.options);
+        const existing = options.transports || this.options.transports;
+        if (existing) {
+          options.transports = Array.isArray(existing) ? existing.slice() : [existing];
+        } else {
+          options.transports = [];
         }
+        const logger = createLogger(options);
+        logger.on("close", () => this._delete(id));
+        this.loggers.set(id, logger);
       }
-      this.write(Object.assign({}, this.defaultMeta, {
-        [LEVEL]: level,
-        [SPLAT]: splat,
-        level,
-        message: msg
-      }));
-      return this;
+      return this.loggers.get(id);
     }
-    _transform(info, enc, callback) {
-      if (this.silent) {
-        return callback();
+    get(id, options) {
+      return this.add(id, options);
+    }
+    has(id) {
+      return !!this.loggers.has(id);
+    }
+    close(id) {
+      if (id) {
+        return this._removeLogger(id);
       }
-      if (!info[LEVEL]) {
-        info[LEVEL] = info.level;
+      this.loggers.forEach((val, key) => this._removeLogger(key));
+    }
+    _removeLogger(id) {
+      if (!this.loggers.has(id)) {
+        return;
       }
-      if (!this.levels[info[LEVEL]] && this.levels[info[LEVEL]] !== 0) {
-        console.error("[winston] Unknown logger level: %s", info[LEVEL]);
+      const logger = this.loggers.get(id);
+      logger.close();
+      this._delete(id);
+    }
+    _delete(id) {
+      this.loggers.delete(id);
+    }
+  };
+});
+
+// ../../node_modules/winston/lib/winston.js
+var require_winston = __commonJS((exports) => {
+  var logform = require_logform();
+  var { warn } = require_common();
+  exports.version = require_package().version;
+  exports.transports = require_transports();
+  exports.config = require_config2();
+  exports.addColors = logform.levels;
+  exports.format = logform.format;
+  exports.createLogger = require_create_logger();
+  exports.Logger = require_logger();
+  exports.ExceptionHandler = require_exception_handler();
+  exports.RejectionHandler = require_rejection_handler();
+  exports.Container = require_container();
+  exports.Transport = require_winston_transport();
+  exports.loggers = new exports.Container;
+  var defaultLogger = exports.createLogger();
+  Object.keys(exports.config.npm.levels).concat([
+    "log",
+    "query",
+    "stream",
+    "add",
+    "remove",
+    "clear",
+    "profile",
+    "startTimer",
+    "handleExceptions",
+    "unhandleExceptions",
+    "handleRejections",
+    "unhandleRejections",
+    "configure",
+    "child"
+  ]).forEach((method) => exports[method] = (...args) => defaultLogger[method](...args));
+  Object.defineProperty(exports, "level", {
+    get() {
+      return defaultLogger.level;
+    },
+    set(val) {
+      defaultLogger.level = val;
+    }
+  });
+  Object.defineProperty(exports, "exceptions", {
+    get() {
+      return defaultLogger.exceptions;
+    }
+  });
+  Object.defineProperty(exports, "rejections", {
+    get() {
+      return defaultLogger.rejections;
+    }
+  });
+  ["exitOnError"].forEach((prop) => {
+    Object.defineProperty(exports, prop, {
+      get() {
+        return defaultLogger[prop];
+      },
+      set(val) {
+        defaultLogger[prop] = val;
       }
-      if (!this._readableState.pipes) {
-        console.error("[winston] Attempt to write logs with no transports, which can increase memory usage: %j", info);
+    });
+  });
+  Object.defineProperty(exports, "default", {
+    get() {
+      return {
+        exceptionHandlers: defaultLogger.exceptionHandlers,
+        rejectionHandlers: defaultLogger.rejectionHandlers,
+        transports: defaultLogger.transports
+      };
+    }
+  });
+  warn.deprecated(exports, "setLevels");
+  warn.forFunctions(exports, "useFormat", ["cli"]);
+  warn.forProperties(exports, "useFormat", ["padLevels", "stripColors"]);
+  warn.forFunctions(exports, "deprecated", [
+    "addRewriter",
+    "addFilter",
+    "clone",
+    "extend"
+  ]);
+  warn.forProperties(exports, "deprecated", ["emitErrs", "levelLength"]);
+});
+
+// src/logger.ts
+function extractTraceIdFromTraceparent(traceparent) {
+  if (!traceparent) {
+    return;
+  }
+  const parts = traceparent.split("-");
+  const traceId = parts.length >= 2 ? parts[1] : parts.length == 1 ? parts[0] : undefined;
+  if (traceId && traceId.length === 32 && /^[0-9a-fA-F]{32}$/.test(traceId)) {
+    return traceId;
+  }
+  return;
+}
+function formatDuration(durationMs) {
+  if (durationMs >= 1000) {
+    const seconds = durationMs / 1000;
+    return `${seconds.toFixed(2)}s`;
+  }
+  return `${durationMs.toFixed(2)}ms`;
+}
+function redactSensitive(value, seen = new WeakSet) {
+  if (value === null || typeof value !== "object" || value instanceof Date) {
+    return value;
+  }
+  if (seen.has(value)) {
+    return "[Circular]";
+  }
+  seen.add(value);
+  if (Array.isArray(value)) {
+    return value.map((item) => redactSensitive(item, seen));
+  }
+  const result = {};
+  for (const [key, val] of Object.entries(value)) {
+    result[key] = SENSITIVE_KEYS.has(key.toLowerCase()) ? REDACTED : redactSensitive(val, seen);
+  }
+  return result;
+}
+function buildAxiosErrorLog(error) {
+  if (error.response) {
+    return {
+      message: "Axios server-side error",
+      meta: {
+        url: error.response.config.url,
+        status: error.response.status,
+        headers: redactSensitive(error.response.headers),
+        data: redactSensitive(error.response.data)
       }
-      try {
-        this.push(this.format.transform(info, this.format.options));
-      } finally {
-        this._writableState.sync = false;
-        callback();
+    };
+  }
+  if (error.request) {
+    return {
+      message: "Axios client-side error",
+      meta: {
+        method: error.config?.method,
+        url: error.config?.url,
+        code: error.code
       }
+    };
+  }
+  return {
+    message: "Axios unknown error",
+    meta: { message: error.message }
+  };
+}
+var import_winston, isTelemetryEnabled, VALID_LOG_LEVELS, getLogLevel = () => {
+  if (process.env.LOG_LEVEL) {
+    const logLevel = process.env.LOG_LEVEL.toLowerCase();
+    if (VALID_LOG_LEVELS.includes(logLevel)) {
+      return logLevel;
+    } else {
+      console.error(`Invalid log level: ${process.env.LOG_LEVEL}. Valid log levels are: ${VALID_LOG_LEVELS.join(", ")}. Defaulting to "debug".`);
     }
-    _final(callback) {
-      const transports = this.transports.slice();
-      asyncForEach(transports, (transport, next) => {
-        if (!transport || transport.finished)
-          return setImmediate(next);
-        transport.once("finish", next);
-        transport.end();
-      }, callback);
-    }
-    add(transport) {
-      const target = !isStream(transport) || transport.log.length > 2 ? new LegacyTransportStream({ transport }) : transport;
-      if (!target._writableState || !target._writableState.objectMode) {
-        throw new Error("Transports must WritableStreams in objectMode. Set { objectMode: true }.");
-      }
-      this._onEvent("error", target);
-      this._onEvent("warn", target);
-      this.pipe(target);
-      if (transport.handleExceptions) {
-        this.exceptions.handle();
-      }
-      if (transport.handleRejections) {
-        this.rejections.handle();
-      }
-      return this;
+  }
+  return "debug";
+}, logger, DISABLE_RESPONSE_LOGGING, SENSITIVE_KEY_NAMES, SENSITIVE_KEYS, REDACTED = "[REDACTED]", loggerMiddleware = (req, res, next) => {
+  const startTime = performance.now();
+  const resJson = res.json;
+  res.json = (body) => {
+    res.locals.body = body;
+    return resJson.call(res, body);
+  };
+  res.on("finish", () => {
+    const endTime = performance.now();
+    const durationMs = endTime - startTime;
+    const traceparent = req.headers["traceparent"];
+    const traceId = extractTraceIdFromTraceparent(traceparent);
+    const logMetadata = {
+      statusCode: res.statusCode,
+      duration: formatDuration(durationMs),
+      payload: redactSensitive(req.body),
+      params: req.params,
+      query: req.query
+    };
+    if (!DISABLE_RESPONSE_LOGGING) {
+      logMetadata.response = redactSensitive(res.locals.body);
     }
-    remove(transport) {
-      if (!transport)
-        return this;
-      let target = transport;
-      if (!isStream(transport) || transport.log.length > 2) {
-        target = this.transports.filter((match) => match.transport === transport)[0];
-      }
-      if (target) {
-        this.unpipe(target);
-      }
-      return this;
+    if (traceId) {
+      logMetadata.traceId = traceId;
     }
-    clear() {
-      this.unpipe();
-      return this;
+    if (req.url !== "/metrics" && req.url !== "/health" && req.url !== "/health/liveness" && req.url !== "/health/readiness") {
+      logger.info(`${req.method} ${req.url}`, logMetadata);
     }
-    close() {
-      this.exceptions.unhandle();
-      this.rejections.unhandle();
-      this.clear();
-      this.emit("close");
-      return this;
+  });
+  next();
+}, logAxiosError = (error) => {
+  const { message, meta } = buildAxiosErrorLog(error);
+  logger.error(message, meta);
+};
+var init_logger = __esm(() => {
+  import_winston = __toESM(require_winston(), 1);
+  isTelemetryEnabled = Boolean(process.env.OTEL_EXPORTER_OTLP_ENDPOINT);
+  VALID_LOG_LEVELS = ["error", "warn", "info", "verbose", "debug", "silly"];
+  logger = import_winston.default.createLogger({
+    level: getLogLevel(),
+    format: isTelemetryEnabled ? import_winston.default.format.combine(import_winston.default.format.uncolorize(), import_winston.default.format.timestamp(), import_winston.default.format.errors({ stack: true }), import_winston.default.format.json()) : import_winston.default.format.combine(import_winston.default.format.colorize(), import_winston.default.format.simple()),
+    transports: [new import_winston.default.transports.Console]
+  });
+  DISABLE_RESPONSE_LOGGING = process.env.DISABLE_RESPONSE_LOGGING === "true" || process.env.DISABLE_RESPONSE_LOGGING === "1";
+  SENSITIVE_KEY_NAMES = [
+    "password",
+    "connectionString",
+    "serviceAccountKeyJson",
+    "privateKey",
+    "privateKeyPass",
+    "secret",
+    "secretAccessKey",
+    "sessionToken",
+    "sasUrl",
+    "clientSecret",
+    "oauthClientSecret",
+    "peakaKey",
+    "token",
+    "accessToken",
+    "apiKey",
+    "api_key",
+    "authorization",
+    "proxy-authorization",
+    "cookie",
+    "set-cookie",
+    "x-api-key"
+  ];
+  SENSITIVE_KEYS = new Set(SENSITIVE_KEY_NAMES.map((name) => name.toLowerCase()));
+});
+
+// src/errors.ts
+import { MalloyError } from "@malloydata/malloy";
+function logInternalFailure(summary, error, level = "error") {
+  const strip = (value) => value.replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029]/g, " ");
+  const message = error.message ?? "";
+  const stack = error.stack ?? "";
+  const framesOnly = stack.startsWith(`${error.name}: ${message}`) ? stack.slice(`${error.name}: ${message}`.length).replace(/^\r?\n/, "") : stack;
+  logger[level](summary, {
+    error: {
+      name: error.name,
+      message: strip(message).slice(0, MAX_LOGGED_DETAIL_CHARS),
+      stack: strip(framesOnly).slice(0, MAX_LOGGED_DETAIL_CHARS)
     }
-    setLevels() {
-      warn.deprecated("setLevels");
+  });
+}
+function internalErrorToHttpError(error) {
+  if (error instanceof BadRequestError) {
+    return httpError(400, error.message);
+  } else if (error instanceof FrozenConfigError) {
+    return httpError(403, error.message);
+  } else if (error instanceof AccessDeniedError) {
+    return httpError(403, error.message);
+  } else if (error instanceof EnvironmentNotFoundError) {
+    return httpError(404, error.message);
+  } else if (error instanceof PackageNotFoundError) {
+    return httpError(404, error.message);
+  } else if (error instanceof ModelNotFoundError) {
+    return httpError(404, error.message);
+  } else if (error instanceof DashboardNotFoundError) {
+    return httpError(404, error.message);
+  } else if (error instanceof NotQueryableError) {
+    return httpError(404, error.message);
+  } else if (error instanceof MalloyError) {
+    return httpError(400, error.message);
+  } else if (error instanceof TableNotFoundError) {
+    return httpError(404, error.message, "TABLE_NOT_FOUND");
+  } else if (error instanceof ConnectionNotFoundError) {
+    return httpError(404, error.message);
+  } else if (error instanceof DestinationNotFoundError) {
+    return httpError(422, error.message);
+  } else if (error instanceof ConnectionAuthError) {
+    return httpError(422, error.message);
+  } else if (error instanceof UnsupportedCatalogFormatError) {
+    return httpError(422, error.message);
+  } else if (error instanceof MaterializationEligibilityError) {
+    return httpError(422, error.message);
+  } else if (error instanceof ModelCompilationError) {
+    return httpError(424, error.message);
+  } else if (error instanceof ConnectionError) {
+    if (error.callerSafe) {
+      return httpError(502, error.message);
     }
-    query(options, callback) {
-      if (typeof options === "function") {
-        callback = options;
-        options = {};
-      }
-      options = options || {};
-      const results = {};
-      const queryObject = Object.assign({}, options.query || {});
-      function queryTransport(transport, next) {
-        if (options.query && typeof transport.formatQuery === "function") {
-          options.query = transport.formatQuery(queryObject);
-        }
-        transport.query(options, (err, res) => {
-          if (err) {
-            return next(err);
-          }
-          if (typeof transport.formatResults === "function") {
-            res = transport.formatResults(res, options.format);
-          }
-          next(null, res);
-        });
-      }
-      function addResults(transport, next) {
-        queryTransport(transport, (err, result) => {
-          if (next) {
-            result = err || result;
-            if (result) {
-              results[transport.name] = result;
-            }
-            next();
-          }
-          next = null;
-        });
-      }
-      asyncForEach(this.transports.filter((transport) => !!transport.query), addResults, () => callback(null, results));
+    logInternalFailure("Upstream connection error", error, "warn");
+    return httpError(502, GENERIC_UPSTREAM_MESSAGE);
+  } else if (error instanceof MaterializationNotFoundError) {
+    return httpError(404, error.message);
+  } else if (error instanceof MaterializationConflictError) {
+    return httpError(409, error.message);
+  } else if (error instanceof InvalidStateTransitionError) {
+    return httpError(409, error.message);
+  } else if (error instanceof ServiceUnavailableError) {
+    return httpError(503, error.message);
+  } else if (error instanceof PayloadTooLargeError) {
+    return httpError(413, error.message);
+  } else if (error instanceof QueryTimeoutError) {
+    return httpError(504, error.message);
+  } else if (error instanceof NotImplementedError) {
+    return httpError(501, error.message);
+  } else {
+    logInternalFailure("Unhandled internal error", error);
+    return httpError(500, GENERIC_INTERNAL_MESSAGE);
+  }
+}
+function httpError(code, message, reason) {
+  return {
+    status: code,
+    json: {
+      code,
+      message,
+      ...reason ? { reason } : {}
     }
-    stream(options = {}) {
-      const out = new Stream;
-      const streams = [];
-      out._streams = streams;
-      out.destroy = () => {
-        let i = streams.length;
-        while (i--) {
-          streams[i].destroy();
-        }
-      };
-      this.transports.filter((transport) => !!transport.stream).forEach((transport) => {
-        const str = transport.stream(options);
-        if (!str) {
-          return;
-        }
-        streams.push(str);
-        str.on("log", (log) => {
-          log.transport = log.transport || [];
-          log.transport.push(transport.name);
-          out.emit("log", log);
-        });
-        str.on("error", (err) => {
-          err.transport = err.transport || [];
-          err.transport.push(transport.name);
-          out.emit("error", err);
-        });
-      });
-      return out;
+  };
+}
+var GENERIC_INTERNAL_MESSAGE = "Internal server error.", GENERIC_UPSTREAM_MESSAGE = "Upstream connection error.", MAX_LOGGED_DETAIL_CHARS = 2000, NotImplementedError, BadRequestError, InvalidArgumentError, EnvironmentNotFoundError, PackageNotFoundError, ModelNotFoundError, DashboardNotFoundError, ConnectionNotFoundError, TableNotFoundError, ConnectionError, DestinationNotFoundError, ConnectionAuthError, UnsupportedCatalogFormatError, ModelCompilationError, MaterializationEligibilityError, PublisherConfigError, FrozenConfigError, AccessDeniedError, NotQueryableError, MaterializationNotFoundError, MaterializationConflictError, InvalidStateTransitionError, ServiceUnavailableError, PayloadTooLargeError, ResponseUnserializableError, QueryTimeoutError;
+var init_errors = __esm(() => {
+  init_constants();
+  init_logger();
+  NotImplementedError = class NotImplementedError extends Error {
+    constructor(message) {
+      super(message);
     }
-    startTimer() {
-      return new Profiler(this);
+  };
+  BadRequestError = class BadRequestError extends Error {
+    constructor(message) {
+      super(message);
     }
-    profile(id, ...args) {
-      const time = Date.now();
-      if (this.profilers[id]) {
-        const timeEnd = this.profilers[id];
-        delete this.profilers[id];
-        if (typeof args[args.length - 2] === "function") {
-          console.warn("Callback function no longer supported as of winston@3.0.0");
-          args.pop();
-        }
-        const info = typeof args[args.length - 1] === "object" ? args.pop() : {};
-        info.level = info.level || "info";
-        info.durationMs = time - timeEnd;
-        info.message = info.message || id;
-        return this.write(info);
-      }
-      this.profilers[id] = time;
-      return this;
+  };
+  InvalidArgumentError = class InvalidArgumentError extends BadRequestError {
+  };
+  EnvironmentNotFoundError = class EnvironmentNotFoundError extends Error {
+    constructor(message) {
+      super(message);
     }
-    handleExceptions(...args) {
-      console.warn("Deprecated: .handleExceptions() will be removed in winston@4. Use .exceptions.handle()");
-      this.exceptions.handle(...args);
+  };
+  PackageNotFoundError = class PackageNotFoundError extends Error {
+    constructor(message) {
+      super(message);
     }
-    unhandleExceptions(...args) {
-      console.warn("Deprecated: .unhandleExceptions() will be removed in winston@4. Use .exceptions.unhandle()");
-      this.exceptions.unhandle(...args);
+  };
+  ModelNotFoundError = class ModelNotFoundError extends Error {
+    constructor(message) {
+      super(message);
     }
-    cli() {
-      throw new Error([
-        "Logger.cli() was removed in winston@3.0.0",
-        "Use a custom winston.formats.cli() instead.",
-        "See: https://github.com/winstonjs/winston/tree/master/UPGRADE-3.0.md"
-      ].join(`
-`));
+  };
+  DashboardNotFoundError = class DashboardNotFoundError extends Error {
+    constructor(message) {
+      super(message);
     }
-    _onEvent(event, transport) {
-      function transportEvent(err) {
-        if (event === "error" && !this.transports.includes(transport)) {
-          this.add(transport);
-        }
-        this.emit(event, err, transport);
-      }
-      if (!transport["__winston" + event]) {
-        transport["__winston" + event] = transportEvent.bind(this);
-        transport.on(event, transport["__winston" + event]);
-      }
+  };
+  ConnectionNotFoundError = class ConnectionNotFoundError extends Error {
+    constructor(message) {
+      super(message);
     }
-    _addDefaultMeta(msg) {
-      if (this.defaultMeta) {
-        Object.assign(msg, this.defaultMeta);
-      }
+  };
+  TableNotFoundError = class TableNotFoundError extends Error {
+    constructor(message) {
+      super(message);
     }
-  }
-  function getLevelValue(levels, level) {
-    const value = levels[level];
-    if (!value && value !== 0) {
-      return null;
+  };
+  ConnectionError = class ConnectionError extends Error {
+    callerSafe;
+    constructor(message, options) {
+      super(message);
+      this.callerSafe = options?.callerSafe ?? false;
     }
-    return value;
-  }
-  Object.defineProperty(Logger.prototype, "transports", {
-    configurable: false,
-    enumerable: true,
-    get() {
-      const { pipes } = this._readableState;
-      return !Array.isArray(pipes) ? [pipes].filter(Boolean) : pipes;
+  };
+  DestinationNotFoundError = class DestinationNotFoundError extends Error {
+    constructor(message) {
+      super(message);
     }
-  });
-  module.exports = Logger;
-});
-
-// ../../node_modules/winston/lib/winston/create-logger.js
-var require_create_logger = __commonJS((exports, module) => {
-  var { LEVEL } = require_triple_beam();
-  var config = require_config2();
-  var Logger = require_logger();
-  var debug = require_node3()("winston:create-logger");
-  function isLevelEnabledFunctionName(level) {
-    return "is" + level.charAt(0).toUpperCase() + level.slice(1) + "Enabled";
-  }
-  module.exports = function(opts = {}) {
-    opts.levels = opts.levels || config.npm.levels;
-
-    class DerivedLogger extends Logger {
-      constructor(options) {
-        super(options);
-      }
+  };
+  ConnectionAuthError = class ConnectionAuthError extends Error {
+    constructor(message) {
+      super(message);
     }
-    const logger = new DerivedLogger(opts);
-    Object.keys(opts.levels).forEach(function(level) {
-      debug('Define prototype method for "%s"', level);
-      if (level === "log") {
-        console.warn('Level "log" not defined: conflicts with the method "log". Use a different level name.');
-        return;
-      }
-      DerivedLogger.prototype[level] = function(...args) {
-        const self2 = this || logger;
-        if (args.length === 1) {
-          const [msg] = args;
-          const info = msg && msg.message && msg || { message: msg };
-          info.level = info[LEVEL] = level;
-          self2._addDefaultMeta(info);
-          self2.write(info);
-          return this || logger;
-        }
-        if (args.length === 0) {
-          self2.log(level, "");
-          return self2;
-        }
-        return self2.log(level, ...args);
-      };
-      DerivedLogger.prototype[isLevelEnabledFunctionName(level)] = function() {
-        return (this || logger).isLevelEnabled(level);
-      };
-    });
-    return logger;
   };
-});
-
-// ../../node_modules/winston/lib/winston/container.js
-var require_container = __commonJS((exports, module) => {
-  var createLogger = require_create_logger();
-  module.exports = class Container {
-    constructor(options = {}) {
-      this.loggers = new Map;
-      this.options = options;
+  UnsupportedCatalogFormatError = class UnsupportedCatalogFormatError extends Error {
+    constructor(message) {
+      super(message);
     }
-    add(id, options) {
-      if (!this.loggers.has(id)) {
-        options = Object.assign({}, options || this.options);
-        const existing = options.transports || this.options.transports;
-        if (existing) {
-          options.transports = Array.isArray(existing) ? existing.slice() : [existing];
-        } else {
-          options.transports = [];
-        }
-        const logger = createLogger(options);
-        logger.on("close", () => this._delete(id));
-        this.loggers.set(id, logger);
-      }
-      return this.loggers.get(id);
+  };
+  ModelCompilationError = class ModelCompilationError extends Error {
+    constructor(error) {
+      super(error.message);
     }
-    get(id, options) {
-      return this.add(id, options);
+  };
+  MaterializationEligibilityError = class MaterializationEligibilityError extends Error {
+    reason;
+    constructor(error) {
+      super(error.message);
+      this.name = "MaterializationEligibilityError";
+      this.reason = error.reason;
     }
-    has(id) {
-      return !!this.loggers.has(id);
+  };
+  PublisherConfigError = class PublisherConfigError extends Error {
+    constructor(configName, cause) {
+      super(`Could not read ${configName}: ${cause instanceof Error ? cause.message : String(cause)}. Fix the file, or move it aside to fall back to the bundled default.`);
+      this.name = "PublisherConfigError";
+      this.cause = cause;
+    }
+  };
+  FrozenConfigError = class FrozenConfigError extends Error {
+    constructor(message = `Publisher config can't be updated when ${PUBLISHER_CONFIG_NAME} has { "frozenConfig": true }`) {
+      super(message);
+    }
+  };
+  AccessDeniedError = class AccessDeniedError extends Error {
+    constructor(message) {
+      super(message);
+      this.name = "AccessDeniedError";
+    }
+  };
+  NotQueryableError = class NotQueryableError extends Error {
+    constructor(message) {
+      super(message);
+      this.name = "NotQueryableError";
     }
-    close(id) {
-      if (id) {
-        return this._removeLogger(id);
-      }
-      this.loggers.forEach((val, key) => this._removeLogger(key));
+  };
+  MaterializationNotFoundError = class MaterializationNotFoundError extends Error {
+    constructor(message) {
+      super(message);
     }
-    _removeLogger(id) {
-      if (!this.loggers.has(id)) {
-        return;
-      }
-      const logger = this.loggers.get(id);
-      logger.close();
-      this._delete(id);
+  };
+  MaterializationConflictError = class MaterializationConflictError extends Error {
+    constructor(message) {
+      super(message);
     }
-    _delete(id) {
-      this.loggers.delete(id);
+  };
+  InvalidStateTransitionError = class InvalidStateTransitionError extends Error {
+    constructor(message) {
+      super(message);
     }
   };
-});
-
-// ../../node_modules/winston/lib/winston.js
-var require_winston = __commonJS((exports) => {
-  var logform = require_logform();
-  var { warn } = require_common();
-  exports.version = require_package().version;
-  exports.transports = require_transports();
-  exports.config = require_config2();
-  exports.addColors = logform.levels;
-  exports.format = logform.format;
-  exports.createLogger = require_create_logger();
-  exports.Logger = require_logger();
-  exports.ExceptionHandler = require_exception_handler();
-  exports.RejectionHandler = require_rejection_handler();
-  exports.Container = require_container();
-  exports.Transport = require_winston_transport();
-  exports.loggers = new exports.Container;
-  var defaultLogger = exports.createLogger();
-  Object.keys(exports.config.npm.levels).concat([
-    "log",
-    "query",
-    "stream",
-    "add",
-    "remove",
-    "clear",
-    "profile",
-    "startTimer",
-    "handleExceptions",
-    "unhandleExceptions",
-    "handleRejections",
-    "unhandleRejections",
-    "configure",
-    "child"
-  ]).forEach((method) => exports[method] = (...args) => defaultLogger[method](...args));
-  Object.defineProperty(exports, "level", {
-    get() {
-      return defaultLogger.level;
-    },
-    set(val) {
-      defaultLogger.level = val;
+  ServiceUnavailableError = class ServiceUnavailableError extends Error {
+    constructor(message) {
+      super(message);
     }
-  });
-  Object.defineProperty(exports, "exceptions", {
-    get() {
-      return defaultLogger.exceptions;
+  };
+  PayloadTooLargeError = class PayloadTooLargeError extends Error {
+    constructor(message) {
+      super(message);
+      this.name = "PayloadTooLargeError";
     }
-  });
-  Object.defineProperty(exports, "rejections", {
-    get() {
-      return defaultLogger.rejections;
+  };
+  ResponseUnserializableError = class ResponseUnserializableError extends PayloadTooLargeError {
+    constructor(message) {
+      super(message);
+      this.name = "ResponseUnserializableError";
     }
-  });
-  ["exitOnError"].forEach((prop) => {
-    Object.defineProperty(exports, prop, {
-      get() {
-        return defaultLogger[prop];
-      },
-      set(val) {
-        defaultLogger[prop] = val;
-      }
-    });
-  });
-  Object.defineProperty(exports, "default", {
-    get() {
-      return {
-        exceptionHandlers: defaultLogger.exceptionHandlers,
-        rejectionHandlers: defaultLogger.rejectionHandlers,
-        transports: defaultLogger.transports
-      };
+  };
+  QueryTimeoutError = class QueryTimeoutError extends Error {
+    constructor(message) {
+      super(message);
     }
-  });
-  warn.deprecated(exports, "setLevels");
-  warn.forFunctions(exports, "useFormat", ["cli"]);
-  warn.forProperties(exports, "useFormat", ["padLevels", "stripColors"]);
-  warn.forFunctions(exports, "deprecated", [
-    "addRewriter",
-    "addFilter",
-    "clone",
-    "extend"
-  ]);
-  warn.forProperties(exports, "deprecated", ["emitErrs", "levelLength"]);
+  };
 });
 
-// src/logger.ts
-function extractTraceIdFromTraceparent(traceparent) {
-  if (!traceparent) {
+// src/service/authorize.ts
+import { payloadOf, routeOf } from "@malloydata/malloy";
+function noteRoute(text) {
+  return routeOf({ value: text.trimStart() });
+}
+function notePayload(text) {
+  return payloadOf({ value: text.trimStart() }) ?? "";
+}
+function authorizeNoteContent(text) {
+  return noteRoute(text) === AUTHORIZE_ROUTE ? notePayload(text) : undefined;
+}
+function assertNoCallerAuthorizeAnnotation(callerText) {
+  if (!AUTHORIZE_ANNOTATION_ANYWHERE.test(callerText))
     return;
+  throw new BadRequestError("An `authorize` annotation is not permitted in caller-submitted Malloy " + "text. Access gates are declared by the model author on the source; a " + "request cannot introduce, replace, or relax one. To validate a gate " + "you are authoring, save it to the package's model file and reload the " + "package — model load validates every `#(authorize)` annotation it " + "declares.");
+}
+function containsAuthorizeAnnotationTag(texts) {
+  return texts.some((text) => authorizeNoteContent(text) !== undefined);
+}
+function collectAuthorizeNearMisses(texts) {
+  const found = [];
+  for (const text of texts) {
+    const trimmed = text.trimStart();
+    const route = noteRoute(trimmed);
+    if (route === AUTHORIZE_ROUTE)
+      continue;
+    const nearMiss = route === undefined ? MALFORMED_AUTHORIZE_ATTEMPT.test(trimmed) : route === "" ? MOTLY_AUTHORIZE_PAYLOAD.test(notePayload(trimmed)) : route.toLowerCase() === AUTHORIZE_ROUTE;
+    if (!nearMiss)
+      continue;
+    found.push(trimmed.split(/[\r\n]/, 1)[0]);
   }
-  const parts = traceparent.split("-");
-  const traceId = parts.length >= 2 ? parts[1] : parts.length == 1 ? parts[0] : undefined;
-  if (traceId && traceId.length === 32 && /^[0-9a-fA-F]{32}$/.test(traceId)) {
-    return traceId;
+  return found;
+}
+function assertNoAuthorizeNearMisses(found) {
+  if (found.length === 0)
+    return;
+  const unique = [...new Set(found)];
+  throw new ModelCompilationError({
+    message: `These annotations are not \`authorize\` gates and nothing enforces ` + `them:
+${unique.map((t) => `  - \`${t}\``).join(`
+`)}
+` + `Malloy routes an annotation by its prefix, and only ` + `\`#(authorize)\` (or \`##(authorize)\`, or the block form ` + `\`#|(authorize)\`) reaches the authorize route — a space after the ` + `\`#\`, spaces inside the brackets, or anything trailing the closing ` + `bracket makes it a plain tag Malloy hands to something else. Write ` + `\`#(authorize) <expression>\` on its own line directly above the ` + `\`source:\` statement you mean to protect (unquoted — the quoted ` + `string form is retired). This is refused rather than interpreted: ` + `guessing at the ` + `intent would let publisher start enforcing a filter on a package that ` + `has been serving every row.`
+  });
+}
+function describeMisplacedAuthorizeAnnotation(f) {
+  if (f.kind === "query")
+    return `on query "${f.name}"`;
+  if (f.kind === "file")
+    return "at the file level (`##(authorize)`)";
+  return `on field "${f.fieldName}" of source "${f.name}"`;
+}
+function assertNoMisplacedAuthorizeAnnotations(found) {
+  if (found.length === 0)
+    return;
+  const positions = found.map((f) => `  - ${describeMisplacedAuthorizeAnnotation(f)}`).join(`
+`);
+  throw new ModelCompilationError({
+    message: `An \`#(authorize)\` annotation is never enforced at:
+${positions}
+` + `A gate only applies where model load looks for one — a \`source:\`'s ` + `own annotation, or one it inherits from an \`extend\`/query-source ` + `base. File-level \`##(authorize)\` is deprecated and no longer ` + `enforced anywhere, so it always lands here: declare \`#(authorize)\` ` + `on each \`source:\` it was meant to protect instead. Every other ` + `position above should move to the \`source:\` statement it is meant ` + `to protect.`
+  });
+}
+function referencedGivenNames(expr) {
+  const scanned = expr.replace(STRING_LITERAL_PATTERN, "''");
+  const names = [];
+  const seen = new Set;
+  for (const match of scanned.matchAll(GIVEN_REF_PATTERN)) {
+    const name = match[1];
+    if (!seen.has(name)) {
+      seen.add(name);
+      names.push(name);
+    }
   }
-  return;
+  return names;
 }
-function formatDuration(durationMs) {
-  if (durationMs >= 1000) {
-    const seconds = durationMs / 1000;
-    return `${seconds.toFixed(2)}s`;
+function quoteMalloyIdentifier(name) {
+  return "`" + name.replace(/\\/g, "\\\\").replace(/`/g, "\\`") + "`";
+}
+function buildRowLevelProbe(graftTarget, filterText) {
+  return `run: ${quoteMalloyIdentifier(graftTarget)} extend { where: ${filterText} } -> { select: __authorize_probe is 1; limit: 1 }`;
+}
+function liftProbeFilterCondition(prepared, label, filterText) {
+  const filterList = prepared._query?.structRef?.filterList;
+  if (!Array.isArray(filterList) || filterList.length === 0) {
+    throw new Error(`${label} carries no filter condition`);
+  }
+  const lifted = filterList[filterList.length - 1];
+  if (lifted.code !== filterText) {
+    throw new Error(`${label} carries the wrong condition — expected "${filterText}", got "${lifted.code ?? ""}"`);
+  }
+  if (!lifted.isSourceFilter) {
+    throw new Error(`${label} carries a condition that is not a source filter`);
+  }
+  return lifted;
+}
+function gateFilterText(exprs) {
+  return exprs.map((e) => `(${e})`).join(" or ");
+}
+async function liftRowLevelCondition(compiler, sourceName, exprs) {
+  const filterText = gateFilterText(exprs);
+  const prepared = await compiler.loadQuery(buildRowLevelProbe(sourceName, filterText)).getPreparedQuery();
+  return liftProbeFilterCondition(prepared, `row-level probe for "${sourceName}"`, filterText);
+}
+async function validateAuthorizeProbes(compiler, options) {
+  const ownNotesOf = options.authorizeOwnNotes ?? new Map;
+  for (const [sourceName, groups] of options.authorizeMap ?? []) {
+    for (const exprs of groups) {
+      if (exprs.length === 0)
+        continue;
+      let condition;
+      try {
+        condition = await liftRowLevelCondition(compiler, sourceName, exprs);
+      } catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        const ownNotes = ownNotesOf.get(sourceName) ?? [];
+        if (ownNotes.length === 0) {
+          options.onRowLevelGateRejected?.("entry_point_unexpressible");
+          options.onRowLevelGateUnexpressible?.(sourceName, detail);
+          continue;
+        }
+        throw new ModelCompilationError({
+          message: `Invalid #(authorize) annotation on source "${sourceName}" ` + `[${exprs.join(" | ")}]: ${detail}`
+        });
+      }
+      options.onOwnRowLevelConditionCompiled?.(sourceName, condition);
+    }
   }
-  return `${durationMs.toFixed(2)}ms`;
 }
-function redactSensitive(value, seen = new WeakSet) {
-  if (value === null || typeof value !== "object" || value instanceof Date) {
-    return value;
-  }
-  if (seen.has(value)) {
-    return "[Circular]";
-  }
-  seen.add(value);
-  if (Array.isArray(value)) {
-    return value.map((item) => redactSensitive(item, seen));
-  }
-  const result = {};
-  for (const [key, val] of Object.entries(value)) {
-    result[key] = SENSITIVE_KEYS.has(key.toLowerCase()) ? REDACTED : redactSensitive(val, seen);
-  }
-  return result;
+function isLegacyQuotedPayload(payload) {
+  const trimmed = payload.trim();
+  return WHOLE_BODY_QUOTED_STRING.test(trimmed) || WHOLE_BODY_SINGLE_QUOTED_STRING.test(trimmed);
 }
-function buildAxiosErrorLog(error) {
-  if (error.response) {
-    return {
-      message: "Axios server-side error",
-      meta: {
-        url: error.response.config.url,
-        status: error.response.status,
-        headers: redactSensitive(error.response.headers),
-        data: redactSensitive(error.response.data)
-      }
-    };
-  }
-  if (error.request) {
-    return {
-      message: "Axios client-side error",
-      meta: {
-        method: error.config?.method,
-        url: error.config?.url,
-        code: error.code
-      }
-    };
+function unquoteLegacyGatePayload(payload) {
+  const trimmed = payload.trim();
+  const inner = trimmed.slice(1, -1);
+  return trimmed[0] === "'" ? inner.replace(SINGLE_QUOTE_ESCAPE, "$1") : inner.replace(DOUBLE_QUOTE_ESCAPE, "$1");
+}
+function parseAuthorizeAnnotation(annotation) {
+  const content = authorizeNoteContent(annotation);
+  if (content === undefined)
+    return null;
+  const trimmed = content.trim();
+  if (trimmed.length === 0) {
+    throw new Error("authorize annotation has an empty expression body");
   }
-  return {
-    message: "Axios unknown error",
-    meta: { message: error.message }
-  };
+  return trimmed;
 }
-var import_winston, isTelemetryEnabled, VALID_LOG_LEVELS, getLogLevel = () => {
-  if (process.env.LOG_LEVEL) {
-    const logLevel = process.env.LOG_LEVEL.toLowerCase();
-    if (VALID_LOG_LEVELS.includes(logLevel)) {
-      return logLevel;
-    } else {
-      console.error(`Invalid log level: ${process.env.LOG_LEVEL}. Valid log levels are: ${VALID_LOG_LEVELS.join(", ")}. Defaulting to "debug".`);
+function collectAuthorizeExprs(annotations) {
+  const exprs = [];
+  for (const annotation of annotations) {
+    const expr = parseAuthorizeAnnotation(annotation);
+    if (expr !== null) {
+      exprs.push(expr);
     }
   }
-  return "debug";
-}, logger, DISABLE_RESPONSE_LOGGING, SENSITIVE_KEY_NAMES, SENSITIVE_KEYS, REDACTED = "[REDACTED]", loggerMiddleware = (req, res, next) => {
-  const startTime = performance.now();
-  const resJson = res.json;
-  res.json = (body) => {
-    res.locals.body = body;
-    return resJson.call(res, body);
-  };
-  res.on("finish", () => {
-    const endTime = performance.now();
-    const durationMs = endTime - startTime;
-    const traceparent = req.headers["traceparent"];
-    const traceId = extractTraceIdFromTraceparent(traceparent);
-    const logMetadata = {
-      statusCode: res.statusCode,
-      duration: formatDuration(durationMs),
-      payload: redactSensitive(req.body),
-      params: req.params,
-      query: req.query
-    };
-    if (!DISABLE_RESPONSE_LOGGING) {
-      logMetadata.response = redactSensitive(res.locals.body);
-    }
-    if (traceId) {
-      logMetadata.traceId = traceId;
+  return exprs;
+}
+function findMultipleAuthorizeGates(authorizeOwnNotes) {
+  const found = [];
+  for (const [sourceName, notes] of authorizeOwnNotes) {
+    if (notes.length > 1) {
+      found.push({ sourceName, texts: notes.map((note) => note.text) });
     }
-    if (req.url !== "/metrics" && req.url !== "/health" && req.url !== "/health/liveness" && req.url !== "/health/readiness") {
-      logger.info(`${req.method} ${req.url}`, logMetadata);
+  }
+  return found;
+}
+function assertAtMostOneAuthorizeGate(found) {
+  if (found.length === 0)
+    return;
+  const positions = found.map(({ sourceName, texts }) => `  - source "${sourceName}" declares ${texts.length}:
+` + texts.map((t) => `      \`${t.trim().split(/[\r\n]/, 1)[0]}\``).join(`
+`)).join(`
+`);
+  throw new ModelCompilationError({
+    message: `A source may declare at most one \`#(authorize)\` annotation:
+${positions}
+` + `Combine multiple conditions into one expression with \`or\` instead of ` + `repeating the annotation, e.g. ` + "`#(authorize) $ROLE = 'admin' or org_id in $GROUPS`."
+  });
+}
+function findLegacyStringGates(authorizeOwnNotes) {
+  const found = [];
+  for (const [sourceName, notes] of authorizeOwnNotes) {
+    const legacyNotes = notes.filter((note) => {
+      const content = authorizeNoteContent(note.text);
+      return content !== undefined && isLegacyQuotedPayload(content);
+    });
+    if (legacyNotes.length === 0)
+      continue;
+    const exprs = collectAuthorizeExprs(legacyNotes.map((note) => note.text));
+    if (exprs.length > 0) {
+      found.push({ sourceName, exprs });
     }
+  }
+  return found;
+}
+function assertNoLegacyStringGate(found) {
+  if (found.length === 0)
+    return;
+  const rewrites = found.flatMap(({ sourceName, exprs }) => exprs.map((expr) => `  - source "${sourceName}": replace \`#(authorize) ${expr}\`` + ` with
+      #(authorize) ${unquoteLegacyGatePayload(expr)}`)).join(`
+`);
+  throw new ModelCompilationError({
+    message: `The string form of \`#(authorize)\` (a Malloy-quoted expression on ` + `the \`source:\` line) is no longer accepted. Replace it with the ` + `unquoted expression, carried by an \`#(authorize)\` annotation on ` + `its own line directly above the \`source:\` line:
+${rewrites}
+` + `Test that the rewrite gates the same rows and check the row count ` + `matches what the string form served.`
   });
-  next();
-}, logAxiosError = (error) => {
-  const { message, meta } = buildAxiosErrorLog(error);
-  logger.error(message, meta);
-};
-var init_logger = __esm(() => {
-  import_winston = __toESM(require_winston(), 1);
-  isTelemetryEnabled = Boolean(process.env.OTEL_EXPORTER_OTLP_ENDPOINT);
-  VALID_LOG_LEVELS = ["error", "warn", "info", "verbose", "debug", "silly"];
-  logger = import_winston.default.createLogger({
-    level: getLogLevel(),
-    format: isTelemetryEnabled ? import_winston.default.format.combine(import_winston.default.format.uncolorize(), import_winston.default.format.timestamp(), import_winston.default.format.errors({ stack: true }), import_winston.default.format.json()) : import_winston.default.format.combine(import_winston.default.format.colorize(), import_winston.default.format.simple()),
-    transports: [new import_winston.default.transports.Console]
+}
+var AUTHORIZE_ROUTE = "authorize", AUTHORIZE_TAG_LIKE, AUTHORIZE_ANNOTATION_ANYWHERE, MOTLY_AUTHORIZE_PAYLOAD, MALFORMED_AUTHORIZE_ATTEMPT, GIVEN_REF_PATTERN, SINGLE_QUOTE_ESCAPE, DOUBLE_QUOTE_ESCAPE, STRING_LITERAL_PATTERN, everyMemberOf = () => (...members) => members, ROW_LEVEL_GATE_REJECTION_CAUSES, WHOLE_BODY_QUOTED_STRING, WHOLE_BODY_SINGLE_QUOTED_STRING;
+var init_authorize = __esm(() => {
+  init_errors();
+  AUTHORIZE_TAG_LIKE = String.raw`##?\|?[ \t]*[([{<]?[ \t]*authorize(?=[)\]}>]|[ \t]|$)`;
+  AUTHORIZE_ANNOTATION_ANYWHERE = new RegExp(AUTHORIZE_TAG_LIKE, "iu");
+  MOTLY_AUTHORIZE_PAYLOAD = /^[ \t]*[([{<][ \t]*authorize[ \t]*[)\]}>]/iu;
+  MALFORMED_AUTHORIZE_ATTEMPT = /^##?\|?[ \t]*[([{<]?[ \t]*authorize/iu;
+  GIVEN_REF_PATTERN = /\$([A-Za-z_][A-Za-z0-9_]*)/g;
+  SINGLE_QUOTE_ESCAPE = /\\(['\\])/g;
+  DOUBLE_QUOTE_ESCAPE = /\\(["\\])/g;
+  STRING_LITERAL_PATTERN = /'(?:\\.|[^'\\])*'|"(?:\\.|[^"\\])*"/g;
+  ROW_LEVEL_GATE_REJECTION_CAUSES = everyMemberOf()("unreachable_given", "entry_point_unexpressible", "source_line_gate_no_given_reference", "source_line_gate_negated_membership", "legacy_string_gate", "given_usage_unresolvable", "unclassifiable_condition");
+  WHOLE_BODY_QUOTED_STRING = /^"(?:\\.|[^"\\])*"$/;
+  WHOLE_BODY_SINGLE_QUOTED_STRING = /^'(?:\\.|[^'\\])*'$/;
+});
+
+// src/authorize_metrics.ts
+function recordAuthorizeGuardRejection(field) {
+  guardRejectionCounter ??= publisherMeter().createCounter("publisher_authorize_guard_rejected_total", {
+    description: "Requests rejected with 400 for declaring an `#(authorize)` annotation in caller-submitted Malloy text. Label: field ('query'|'source_name'|'query_name'|'compile_source')."
   });
-  DISABLE_RESPONSE_LOGGING = process.env.DISABLE_RESPONSE_LOGGING === "true" || process.env.DISABLE_RESPONSE_LOGGING === "1";
-  SENSITIVE_KEY_NAMES = [
-    "password",
-    "connectionString",
-    "serviceAccountKeyJson",
-    "privateKey",
-    "privateKeyPass",
-    "secret",
-    "secretAccessKey",
-    "sessionToken",
-    "sasUrl",
-    "clientSecret",
-    "oauthClientSecret",
-    "peakaKey",
-    "token",
-    "accessToken",
-    "apiKey",
-    "api_key",
-    "authorization",
-    "proxy-authorization",
-    "cookie",
-    "set-cookie",
-    "x-api-key"
-  ];
-  SENSITIVE_KEYS = new Set(SENSITIVE_KEY_NAMES.map((name) => name.toLowerCase()));
+  guardRejectionCounter.add(1, { field });
+}
+function recordAuthorizeBypass(entryPoint) {
+  bypassCounter ??= publisherMeter().createCounter("publisher_authorize_bypass_total", {
+    description: "Gate evaluations skipped because the request carried an authorize bypass (private data-management path). Label: entry_point ('source'|'runnable'). Any nonzero value on a path that should not use the bypass is a finding — see the paired `authorize bypass` audit log line for org/package/model/source."
+  });
+  bypassCounter.add(1, { entry_point: entryPoint });
+}
+function recordRowLevelGateDecision(decision) {
+  rowLevelDecisionCounter ??= publisherMeter().createCounter("publisher_authorize_row_level_total", {
+    description: "How a row-level `#(authorize)` gate resolved a request. Label: decision ('denied_by_gate'|'empty_after_filter'). 'denied_by_gate' is the fail-closed refusal when the gate could not be applied; 'empty_after_filter' is a successful response with zero rows after the filter matched none, which is NOT an error."
+  });
+  rowLevelDecisionCounter.add(1, { decision });
+}
+function recordRowLevelGateRejected(cause) {
+  rowLevelRejectionCounter ??= publisherMeter().createCounter("publisher_authorize_row_level_rejected_total", {
+    description: "Row-level `#(authorize)` gates that were refused, warned about, or could not be resolved. Label: cause (" + ROW_LEVEL_GATE_REJECTION_CAUSES.map((c) => `'${c}'`).join("|") + "). Only 'legacy_string_gate' fails the whole model load. 'entry_point_unexpressible', 'source_line_gate_no_given_reference' and 'source_line_gate_negated_membership' warn at load and leave the model servable. 'unreachable_given', 'given_usage_unresolvable' and 'unclassifiable_condition' are request-time only — that entry point denies every request. Alert on any nonzero value since the last publish; the request-time causes also make this a rate signal, so see the doc above before writing an alert."
+  });
+  rowLevelRejectionCounter.add(1, { cause });
+}
+var guardRejectionCounter = null, bypassCounter = null, rowLevelDecisionCounter = null, rowLevelRejectionCounter = null;
+var init_authorize_metrics = __esm(() => {
+  init_telemetry();
+  init_authorize();
 });
 
 // src/data_styles.ts
@@ -14799,6 +14820,9 @@ var init_motly = __esm(() => {
 });
 
 // src/service/given.ts
+import {
+  isSourceDef as isSourceDef5
+} from "@malloydata/malloy";
 function presentText(tag, ...path) {
   const raw = tagText(tag, ...path);
   return raw !== undefined && raw.trim() !== "" ? raw : undefined;
@@ -14854,8 +14878,78 @@ function malloyGivenToApi(given) {
     default: given._internal?.defaultText
   };
 }
+function collectGivenRefs(value, into) {
+  if (Array.isArray(value)) {
+    for (const item of value)
+      collectGivenRefs(item, into);
+    return;
+  }
+  if (value === null || typeof value !== "object")
+    return;
+  const node = value;
+  if (node.node === "given" && typeof node.refName === "string") {
+    into.add(node.refName);
+  }
+  for (const child of Object.values(node))
+    collectGivenRefs(child, into);
+}
+function suggestGivenLookup(modelDef, authorizeBySource, surfaced) {
+  const registry = modelDef.givens ?? {};
+  const bySource = new Map;
+  const byQuery = new Map;
+  for (const obj of Object.values(modelDef.contents)) {
+    if (isSourceDef5(obj)) {
+      const name = obj.as || obj.name;
+      const refs = new Set;
+      collectGivenRefs(obj.filterList, refs);
+      for (const expr of authorizeBySource(name) ?? []) {
+        for (const given of referencedGivenNames(expr))
+          refs.add(given);
+      }
+      bySource.set(name, Array.from(refs));
+    } else if (obj.type === "query") {
+      const query = obj;
+      byQuery.set(query.as || query.name, {
+        own: (query.givenUsage ?? []).map((usage) => registry[usage.id]?.name).filter((n) => n !== undefined),
+        source: typeof query.structRef === "string" ? query.structRef : undefined
+      });
+    }
+  }
+  const narrow = (names) => Array.from(new Set(names)).filter((name) => surfaced === undefined || surfaced.has(name));
+  return {
+    forSource: (name) => {
+      const found = bySource.get(name);
+      return found && narrow(found);
+    },
+    forQuery: (name) => {
+      const found = byQuery.get(name);
+      if (!found)
+        return;
+      return narrow([
+        ...found.own,
+        ...found.source ? bySource.get(found.source) ?? [] : []
+      ]);
+    }
+  };
+}
+function suggestGivenNames(suggest, lookup) {
+  const names = suggest.query !== undefined ? lookup.forQuery(suggest.query) : suggest.source !== undefined ? lookup.forSource(suggest.source) : undefined;
+  return names && names.length > 0 ? names : undefined;
+}
+function attachSuggestGivenNames(givens, lookup) {
+  for (const given of givens ?? []) {
+    if (!given.suggest)
+      continue;
+    const names = suggestGivenNames(given.suggest, lookup);
+    if (names)
+      given.suggest.givenNames = names;
+    else
+      delete given.suggest.givenNames;
+  }
+}
 var init_given = __esm(() => {
   init_annotations();
+  init_authorize();
   init_motly();
 });
 
@@ -14893,7 +14987,7 @@ init_gate_dimension();
 var import_recursive_readdir = __toESM(require_recursive_readdir(), 1);
 import {
   contextOverlay,
-  isSourceDef as isSourceDef5,
+  isSourceDef as isSourceDef6,
   MalloyConfig,
   MalloyError as MalloyError2,
   modelDefToModelInfo,
@@ -15394,6 +15488,7 @@ async function compileMalloyModel(job, malloyConfig, modelPath) {
     authorizeOwnNotes,
     attributedAuthorizeOwnNotes
   } = extractSources(modelDef, givens);
+  attachSuggestGivenNames(givens, suggestGivenLookup(modelDef, (name) => sources.find((source) => source.name === name)?.authorize, new Set((givens ?? []).map((given) => given.name))));
   const queryResult = extractQueries(modelDef);
   const queries = queryResult.queries;
   assertPartitionAnnotationsValid(modelDef);
@@ -15413,7 +15508,7 @@ async function compileMalloyModel(job, malloyConfig, modelPath) {
     onRowLevelGateUnexpressible: authorizeWarningCollection.onRowLevelGateUnexpressible,
     onOwnRowLevelConditionCompiled: (sourceName, condition) => {
       const struct = modelDef.contents[sourceName];
-      if (!struct || !isSourceDef5(struct))
+      if (!struct || !isSourceDef6(struct))
         return;
       validateSourceLineGateGivenUsage(sourceName, struct, condition.refSummary, condition.e, modelDef, (cause, detail) => {
         recordRowLevelGateRejected(cause);
@@ -15532,6 +15627,7 @@ async function compileNotebookModel(job, malloyConfig, modelPath) {
     finalSourceInfos = collected.sourceInfos;
     const extracted = extractSources(finalModelDef, finalGivens);
     finalSources = extracted.sources;
+    attachSuggestGivenNames(finalGivens, suggestGivenLookup(finalModelDef, (name) => extracted.sources.find((source) => source.name === name)?.authorize, new Set((finalGivens ?? []).map((given) => given.name))));
     finalFilterMap = extracted.filterMap;
     const finalQueryResult = extractQueries(finalModelDef);
     finalQueries = finalQueryResult.queries;
@@ -15552,7 +15648,7 @@ async function compileNotebookModel(job, malloyConfig, modelPath) {
       onRowLevelGateUnexpressible: authorizeWarningCollection.onRowLevelGateUnexpressible,
       onOwnRowLevelConditionCompiled: (sourceName, condition) => {
         const struct = finalCompiledModelDef.contents[sourceName];
-        if (!struct || !isSourceDef5(struct))
+        if (!struct || !isSourceDef6(struct))
           return;
         validateSourceLineGateGivenUsage(sourceName, struct, condition.refSummary, condition.e, finalCompiledModelDef, (cause, detail) => {
           recordRowLevelGateRejected(cause);