@malloy-publisher/server 0.9.4 → 0.9.6

package/dist/app/index.html

@@ -16,7 +16,7 @@ SPDX-License-Identifier: MIT
          href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap"
       />
       <title>Malloy Publisher</title>
-     <script type="module" crossorigin src="/assets/index-BZEvIUf-.js"></script>
+     <script type="module" crossorigin src="/assets/index-BIqIsMFr.js"></script>
      <link rel="stylesheet" crossorigin href="/assets/index-DUqldpo0.css">
    </head>
    <body>

package/dist/package_load_worker.mjs

@@ -1108,10 +1108,14 @@ var require_recursive_readdir = __commonJS((exports, module) => {
 
 // src/constants.ts
 import os from "os";
+import path from "path";
+function installRecordPath(environmentPath, packageName) {
+  return path.join(environmentPath, PACKAGE_INSTALL_RECORDS_DIR, `${packageName}.json`);
+}
 function normalizeModelPath(p) {
   return p.replace(/\\/g, "/").replace(/^\.\//, "");
 }
-var API_PREFIX = "/api/v0", README_NAME = "README.md", PUBLISHER_CONFIG_NAME = "publisher.config.json", PACKAGE_MANIFEST_NAME = "publisher.json", MODEL_FILE_SUFFIX = ".malloy", NOTEBOOK_FILE_SUFFIX = ".malloynb", INDEX_MODEL_NAME = "index.malloy", DEFAULT_QUERY_ROW_LIMIT = 1000, DEFAULT_MAX_QUERY_ROWS = 1e5, DEFAULT_MAX_RESPONSE_BYTES = 50000000, DEFAULT_QUERY_TIMEOUT_MS = 300000, DEFAULT_MAX_CONCURRENT_QUERIES = 32, TEMP_DIR_PATH, PUBLISHER_DATA_DIR = "publisher_data";
+var API_PREFIX = "/api/v0", README_NAME = "README.md", PUBLISHER_CONFIG_NAME = "publisher.config.json", PACKAGE_MANIFEST_NAME = "publisher.json", PACKAGE_INSTALL_RECORDS_DIR = ".install-records", MODEL_FILE_SUFFIX = ".malloy", NOTEBOOK_FILE_SUFFIX = ".malloynb", INDEX_MODEL_NAME = "index.malloy", DEFAULT_QUERY_ROW_LIMIT = 1000, DEFAULT_MAX_QUERY_ROWS = 1e5, DEFAULT_MAX_RESPONSE_BYTES = 50000000, DEFAULT_QUERY_TIMEOUT_MS = 300000, DEFAULT_MAX_CONCURRENT_QUERIES = 32, DEFAULT_POSTGRES_POOL_MAX = 5, TEMP_DIR_PATH, PUBLISHER_DATA_DIR = "publisher_data";
 var init_constants = __esm(() => {
   TEMP_DIR_PATH = os.tmpdir();
 });
@@ -11028,7 +11032,7 @@ var require_tail_file = __commonJS((exports, module) => {
 // ../../node_modules/winston/lib/winston/transports/file.js
 var require_file = __commonJS((exports, module) => {
   var fs = __require("fs");
-  var path = __require("path");
+  var path2 = __require("path");
   var asyncSeries = require_series();
   var zlib = __require("zlib");
   var { MESSAGE } = require_triple_beam();
@@ -11053,14 +11057,14 @@ var require_file = __commonJS((exports, module) => {
       this._onError = this._onError.bind(this);
       if (options.filename || options.dirname) {
         throwIf("filename or dirname", "stream");
-        this._basename = this.filename = options.filename ? path.basename(options.filename) : "winston.log";
-        this.dirname = options.dirname || path.dirname(options.filename);
+        this._basename = this.filename = options.filename ? path2.basename(options.filename) : "winston.log";
+        this.dirname = options.dirname || path2.dirname(options.filename);
         this.options = options.options || { flags: "a" };
       } else if (options.stream) {
         console.warn("options.stream will be removed in winston@4. Use winston.transports.Stream");
         throwIf("stream", "filename", "maxsize");
         this._dest = this._stream.pipe(this._setupStream(options.stream));
-        this.dirname = path.dirname(this._dest.path);
+        this.dirname = path2.dirname(this._dest.path);
       } else {
         throw new Error("Cannot log to file without filename or stream.");
       }
@@ -11190,7 +11194,7 @@ var require_file = __commonJS((exports, module) => {
         options = {};
       }
       options = normalizeQuery(options);
-      const file = path.join(this.dirname, this.filename);
+      const file = path2.join(this.dirname, this.filename);
       let buff = "";
       let results = [];
       let row = 0;
@@ -11290,7 +11294,7 @@ var require_file = __commonJS((exports, module) => {
       }
     }
     stream(options = {}) {
-      const file = path.join(this.dirname, this.filename);
+      const file = path2.join(this.dirname, this.filename);
       const stream = new Stream;
       const tail = {
         file,
@@ -11333,7 +11337,7 @@ var require_file = __commonJS((exports, module) => {
     }
     stat(callback) {
       const target = this._getFile();
-      const fullpath = path.join(this.dirname, target);
+      const fullpath = path2.join(this.dirname, target);
       fs.stat(fullpath, (err, stat) => {
         if (err && err.code === "ENOENT") {
           debug("ENOENT ok", fullpath);
@@ -11394,7 +11398,7 @@ var require_file = __commonJS((exports, module) => {
       }
     }
     _createStream(source) {
-      const fullpath = path.join(this.dirname, this.filename);
+      const fullpath = path2.join(this.dirname, this.filename);
       debug("create stream start", fullpath, this.options);
       const dest = fs.createWriteStream(fullpath, this.options).on("error", (err) => debug(err)).on("close", () => debug("close", dest.path, dest.bytesWritten)).on("open", () => {
         debug("file open ok", fullpath);
@@ -11414,13 +11418,13 @@ var require_file = __commonJS((exports, module) => {
     }
     _incFile(callback) {
       debug("_incFile", this.filename);
-      const ext = path.extname(this._basename);
-      const basename = path.basename(this._basename, ext);
+      const ext = path2.extname(this._basename);
+      const basename = path2.basename(this._basename, ext);
       const tasks = [];
       if (this.zippedArchive) {
         tasks.push(function(cb) {
           const num = this._created > 0 && !this.tailable ? this._created : "";
-          this._compressFile(path.join(this.dirname, `${basename}${num}${ext}`), path.join(this.dirname, `${basename}${num}${ext}.gz`), cb);
+          this._compressFile(path2.join(this.dirname, `${basename}${num}${ext}`), path2.join(this.dirname, `${basename}${num}${ext}.gz`), cb);
         }.bind(this));
       }
       tasks.push(function(cb) {
@@ -11434,8 +11438,8 @@ var require_file = __commonJS((exports, module) => {
       asyncSeries(tasks, callback);
     }
     _getFile() {
-      const ext = path.extname(this._basename);
-      const basename = path.basename(this._basename, ext);
+      const ext = path2.extname(this._basename);
+      const basename = path2.basename(this._basename, ext);
       const isRotation = this.rotationFormat ? this.rotationFormat() : this._created;
       return !this.tailable && this._created ? `${basename}${isRotation}${ext}` : `${basename}${ext}`;
     }
@@ -11447,7 +11451,7 @@ var require_file = __commonJS((exports, module) => {
       const isOldest = oldest !== 0 ? oldest : "";
       const isZipped = this.zippedArchive ? ".gz" : "";
       const filePath = `${basename}${isOldest}${ext}${isZipped}`;
-      const target = path.join(this.dirname, filePath);
+      const target = path2.join(this.dirname, filePath);
       fs.unlink(target, callback);
     }
     _checkMaxFilesTailable(ext, basename, callback) {
@@ -11459,18 +11463,18 @@ var require_file = __commonJS((exports, module) => {
       for (let x = this.maxFiles - 1;x > 1; x--) {
         tasks.push(function(i, cb) {
           let fileName = `${basename}${i - 1}${ext}${isZipped}`;
-          const tmppath = path.join(this.dirname, fileName);
+          const tmppath = path2.join(this.dirname, fileName);
           fs.exists(tmppath, (exists) => {
             if (!exists) {
               return cb(null);
             }
             fileName = `${basename}${i}${ext}${isZipped}`;
-            fs.rename(tmppath, path.join(this.dirname, fileName), cb);
+            fs.rename(tmppath, path2.join(this.dirname, fileName), cb);
           });
         }.bind(this, x));
       }
       asyncSeries(tasks, () => {
-        fs.rename(path.join(this.dirname, `${basename}${ext}${isZipped}`), path.join(this.dirname, `${basename}1${ext}${isZipped}`), callback);
+        fs.rename(path2.join(this.dirname, `${basename}${ext}${isZipped}`), path2.join(this.dirname, `${basename}1${ext}${isZipped}`), callback);
       });
     }
     _compressFile(src, dest, callback) {
@@ -11552,9 +11556,9 @@ var require_http = __commonJS((exports, module) => {
       };
       const auth = options.params.auth || null;
       delete options.params.auth;
-      const path = options.params.path || null;
+      const path2 = options.params.path || null;
       delete options.params.path;
-      this._request(options, auth, path, (err, res, body) => {
+      this._request(options, auth, path2, (err, res, body) => {
         if (res && res.statusCode !== 200) {
           err = new Error(`Invalid HTTP Status Code: ${res.statusCode}`);
         }
@@ -11577,12 +11581,12 @@ var require_http = __commonJS((exports, module) => {
         method: "stream",
         params: options
       };
-      const path = options.params.path || null;
+      const path2 = options.params.path || null;
       delete options.params.path;
       const auth = options.params.auth || null;
       delete options.params.auth;
       let buff = "";
-      const req = this._request(options, auth, path);
+      const req = this._request(options, auth, path2);
       stream.destroy = () => req.destroy();
       req.on("data", (data) => {
         data = (buff + data).split(/\n+/);
@@ -11600,40 +11604,40 @@ var require_http = __commonJS((exports, module) => {
       req.on("error", (err) => stream.emit("error", err));
       return stream;
     }
-    _request(options, auth, path, callback) {
+    _request(options, auth, path2, callback) {
       options = options || {};
       auth = auth || this.auth;
-      path = path || this.path || "";
+      path2 = path2 || this.path || "";
       if (this.batch) {
-        this._doBatch(options, callback, auth, path);
+        this._doBatch(options, callback, auth, path2);
       } else {
-        this._doRequest(options, callback, auth, path);
+        this._doRequest(options, callback, auth, path2);
       }
     }
-    _doBatch(options, callback, auth, path) {
+    _doBatch(options, callback, auth, path2) {
       this.batchOptions.push(options);
       if (this.batchOptions.length === 1) {
         const me = this;
         this.batchCallback = callback;
         this.batchTimeoutID = setTimeout(function() {
           me.batchTimeoutID = -1;
-          me._doBatchRequest(me.batchCallback, auth, path);
+          me._doBatchRequest(me.batchCallback, auth, path2);
         }, this.batchInterval);
       }
       if (this.batchOptions.length === this.batchCount) {
-        this._doBatchRequest(this.batchCallback, auth, path);
+        this._doBatchRequest(this.batchCallback, auth, path2);
       }
     }
-    _doBatchRequest(callback, auth, path) {
+    _doBatchRequest(callback, auth, path2) {
       if (this.batchTimeoutID > 0) {
         clearTimeout(this.batchTimeoutID);
         this.batchTimeoutID = -1;
       }
       const batchOptionsCopy = this.batchOptions.slice();
       this.batchOptions = [];
-      this._doRequest(batchOptionsCopy, callback, auth, path);
+      this._doRequest(batchOptionsCopy, callback, auth, path2);
     }
-    _doRequest(options, callback, auth, path) {
+    _doRequest(options, callback, auth, path2) {
       const headers = Object.assign({}, this.headers);
       if (auth && auth.bearer) {
         headers.Authorization = `Bearer ${auth.bearer}`;
@@ -11643,7 +11647,7 @@ var require_http = __commonJS((exports, module) => {
         method: "POST",
         host: this.host,
         port: this.port,
-        path: `/${path.replace(/^\//, "")}`,
+        path: `/${path2.replace(/^\//, "")}`,
         headers,
         auth: auth && auth.username && auth.password ? `${auth.username}:${auth.password}` : "",
         agent: this.agent
@@ -13082,13 +13086,13 @@ function messageWithFilesystemCause(error) {
   return `${message}: ${describeFilesystemAccessFailure(access)}`;
 }
 function errnoWireFields(error) {
-  const { code, syscall, path } = error;
+  const { code, syscall, path: path2 } = error;
   if (typeof code !== "string")
     return;
   return {
     code,
     ...typeof syscall === "string" ? { syscall } : {},
-    ...typeof path === "string" ? { path } : {}
+    ...typeof path2 === "string" ? { path: path2 } : {}
   };
 }
 function internalErrorToHttpError(error, { log = true } = {}) {
@@ -13195,7 +13199,7 @@ function toQueryTextProblem(problem) {
     ...problem.at ? { at: { range: problem.at.range } } : {}
   };
 }
-var GENERIC_INTERNAL_MESSAGE = "Internal server error.", GENERIC_UPSTREAM_MESSAGE = "Upstream connection error.", MAX_LOGGED_DETAIL_CHARS = 2000, FILESYSTEM_ACCESS_DESCRIPTIONS, NotImplementedError, BadRequestError, InvalidArgumentError, CompileRefusedError, RenderTagRefusedError, UnparseableTextError, EnvironmentNotFoundError, PackageNotFoundError, ModelNotFoundError, DashboardNotFoundError, ConnectionNotFoundError, TableNotFoundError, ConnectionError, DestinationNotFoundError, ConnectionAuthError, UnsupportedCatalogFormatError, ModelCompilationError, PackageManifestError, MaterializationEligibilityError, PublisherConfigError, ServerConfigurationError, FrozenConfigError, AccessDeniedError, QueryCompileError, NotQueryableError, OffSurfaceError, MaterializationNotFoundError, MaterializationConflictError, WriteConflictError, WriteRolledBackError, WriteVerifyError, InvalidStateTransitionError, ServiceUnavailableError, PayloadTooLargeError, ResponseUnserializableError, QueryTimeoutError;
+var GENERIC_INTERNAL_MESSAGE = "Internal server error.", GENERIC_UPSTREAM_MESSAGE = "Upstream connection error.", MAX_LOGGED_DETAIL_CHARS = 2000, FILESYSTEM_ACCESS_DESCRIPTIONS, NotImplementedError, BadRequestError, InvalidArgumentError, CompileRefusedError, RenderTagRefusedError, UnparseableTextError, EnvironmentNotFoundError, PackageNotFoundError, ModelNotFoundError, DashboardNotFoundError, ConnectionNotFoundError, TableNotFoundError, ConnectionError, ConnectionPoolExhaustedError, DestinationNotFoundError, ConnectionAuthError, UnsupportedCatalogFormatError, ModelCompilationError, PackageManifestError, MaterializationEligibilityError, ChainedUpstreamMissingError, ChainedShapeNotCarriedError, PublisherConfigError, ServerConfigurationError, FrozenConfigError, AccessDeniedError, QueryCompileError, NotQueryableError, OffSurfaceError, MaterializationNotFoundError, MaterializationConflictError, WriteConflictError, WriteRolledBackError, WriteVerifyError, InvalidStateTransitionError, ServiceUnavailableError, PackageAdmissionRefusedError, PayloadTooLargeError, ResponseUnserializableError, QueryTimeoutError;
 var init_errors = __esm(() => {
   init_constants();
   init_logger();
@@ -13264,6 +13268,12 @@ var init_errors = __esm(() => {
       this.callerSafe = options?.callerSafe ?? false;
     }
   };
+  ConnectionPoolExhaustedError = class ConnectionPoolExhaustedError extends ConnectionError {
+    constructor(message) {
+      super(message, { callerSafe: true });
+      this.name = "ConnectionPoolExhaustedError";
+    }
+  };
   DestinationNotFoundError = class DestinationNotFoundError extends Error {
     constructor(message) {
       super(message);
@@ -13298,6 +13308,20 @@ var init_errors = __esm(() => {
       this.reason = error.reason;
     }
   };
+  ChainedUpstreamMissingError = class ChainedUpstreamMissingError extends Error {
+    missing;
+    constructor(missing, detail) {
+      super(detail);
+      this.name = "ChainedUpstreamMissingError";
+      this.missing = missing;
+    }
+  };
+  ChainedShapeNotCarriedError = class ChainedShapeNotCarriedError extends Error {
+    constructor(detail) {
+      super(detail);
+      this.name = "ChainedShapeNotCarriedError";
+    }
+  };
   PublisherConfigError = class PublisherConfigError extends Error {
     constructor(configName, cause) {
       super(`Could not read ${configName}: ${cause instanceof Error ? cause.message : String(cause)}. Fix the file, or move it aside to fall back to the bundled default.`);
@@ -13378,6 +13402,8 @@ var init_errors = __esm(() => {
       super(message, options);
     }
   };
+  PackageAdmissionRefusedError = class PackageAdmissionRefusedError extends ServiceUnavailableError {
+  };
   PayloadTooLargeError = class PayloadTooLargeError extends Error {
     constructor(message) {
       super(message);
@@ -14006,6 +14032,32 @@ var init_error_wire = __esm(() => {
   init_errors();
 });
 
+// src/service/translator_error.ts
+import { MalloyError as MalloyError3 } from "@malloydata/malloy";
+function translatorInvariantProblem(error) {
+  if (!(error instanceof Error) || error instanceof MalloyError3) {
+    return;
+  }
+  const topFrame = (error.stack ?? "").split(`
+`).find((line) => line.trimStart().startsWith("at "));
+  if (!topFrame || !TRANSLATOR_FRAME.test(topFrame))
+    return;
+  const hint = error.message === RANGE_COMPARISON_MESSAGE ? " This comes from comparing a date or timestamp to a date literal such as " + "@2025 with `~`, which Malloy cannot compile. Use `=` to match the whole " + "year, month or day (`order_date = @2025`), or an explicit range " + "(`order_date ? @2025-01-01 to @2026-01-01`)." : "";
+  return {
+    code: "translator-error",
+    severity: "error",
+    message: `Malloy could not compile this query: ${error.message}.` + hint
+  };
+}
+function translatorMalloyError(error) {
+  const problem = translatorInvariantProblem(error);
+  return problem ? new MalloyError3(problem.message, [problem]) : undefined;
+}
+var TRANSLATOR_FRAME, RANGE_COMPARISON_MESSAGE = "mysterious error in range computation";
+var init_translator_error = __esm(() => {
+  TRANSLATOR_FRAME = /[\\/]@malloydata[\\/]malloy[\\/]dist[\\/]lang[\\/]/;
+});
+
 // src/service/annotations.ts
 import { Annotations } from "@malloydata/malloy";
 function isReservedRoute(route) {
@@ -14398,16 +14450,16 @@ import {
   isJoined,
   isSourceDef
 } from "@malloydata/malloy";
-function resolveFieldUsagePath(struct, path) {
+function resolveFieldUsagePath(struct, path2) {
   let current = struct;
-  for (let i = 0;i < path.length - 1; i++) {
-    const seg = path[i];
+  for (let i = 0;i < path2.length - 1; i++) {
+    const seg = path2[i];
     const joinField = (current.fields ?? []).find((f) => (f.as || f.name) === seg && isJoined(f) && (isSourceDef(f) || f.type === "record" || f.type === "array"));
     if (!joinField)
       return;
     current = joinField;
   }
-  const leaf = path[path.length - 1];
+  const leaf = path2[path2.length - 1];
   const field = (current.fields ?? []).find((f) => (f.as || f.name) === leaf);
   return field ? { struct: current, field } : undefined;
 }
@@ -14895,10 +14947,10 @@ function assertAuthorizeGrammarValid(modelDef, authorizeMap, authorizeOwnNotes,
     }
   }
 }
-function fanoutSegment(struct, path) {
+function fanoutSegment(struct, path2) {
   let current = struct;
-  for (let i = 0;i < path.length - 1; i++) {
-    const seg = path[i];
+  for (let i = 0;i < path2.length - 1; i++) {
+    const seg = path2[i];
     const field = (current.fields ?? []).find((f) => (f.as ?? f.name) === seg);
     if (!field)
       return { segment: seg, reason: "unresolved" };
@@ -15863,16 +15915,16 @@ function parseMotly(texts) {
   const after = parseBounded(rescued);
   return { tag: after.tag, errors: [...envErrors, ...after.messages] };
 }
-function tagText(tag, ...path) {
+function tagText(tag, ...path2) {
   try {
-    return tag?.text(...path);
+    return tag?.text(...path2);
   } catch {
     return;
   }
 }
-function tagNumeric(tag, ...path) {
+function tagNumeric(tag, ...path2) {
   try {
-    const raw = tagText(tag, ...path);
+    const raw = tagText(tag, ...path2);
     if (raw === undefined)
       return;
     const DECIMAL = /^[-+]?(?:\d+(?:\.\d*)?|\.\d+)(?:[eE][-+]?\d+)?$/;
@@ -23262,8 +23314,8 @@ var require_dist = __commonJS((exports) => {
 import {
   isSourceDef as isSourceDef4
 } from "@malloydata/malloy";
-function presentText(tag, ...path) {
-  const raw = tagText(tag, ...path);
+function presentText(tag, ...path2) {
+  const raw = tagText(tag, ...path2);
   return raw !== undefined && raw.trim() !== "" ? raw : undefined;
 }
 function readGivenControlSpec(annotationTexts2) {
@@ -23627,8 +23679,8 @@ function readDrillTag(annotations) {
 function isString(value) {
   return value !== undefined;
 }
-function tagTextArray(tag, ...path) {
-  const items = tag?.array(...path);
+function tagTextArray(tag, ...path2) {
+  const items = tag?.array(...path2);
   return items?.map((item) => tagText(item)).filter(isString);
 }
 function resolveTileGivens(tile, facts) {
@@ -24507,10 +24559,10 @@ var init_source_extraction = __esm(() => {
 
 // src/utils.ts
 import * as fs2 from "fs";
-import * as path2 from "path";
+import * as path3 from "path";
 import { fileURLToPath } from "url";
 function ignoreDotfiles(file) {
-  return path2.basename(file).startsWith(".");
+  return path3.basename(file).startsWith(".");
 }
 function errMessage(err) {
   return err instanceof Error ? err.message : String(err);
@@ -24519,11 +24571,11 @@ var URL_READER;
 var init_utils = __esm(() => {
   URL_READER = {
     readURL: (url) => {
-      let path3 = url.toString();
+      let path4 = url.toString();
       if (url.protocol == "file:") {
-        path3 = fileURLToPath(url);
+        path4 = fileURLToPath(url);
       }
-      return fs2.promises.readFile(path3, "utf8");
+      return fs2.promises.readFile(path4, "utf8");
     }
   };
 });
@@ -24534,6 +24586,7 @@ init_authorize_metrics();
 init_data_styles();
 init_errors();
 init_error_wire();
+init_translator_error();
 init_authorize();
 init_gate_classification();
 init_gate_dimension();
@@ -24550,7 +24603,7 @@ import {
   MalloySQLStatementType
 } from "@malloydata/malloy-sql";
 import * as fs3 from "fs";
-import * as path3 from "path";
+import * as path4 from "path";
 import { parentPort, threadId } from "node:worker_threads";
 import { fileURLToPath as fileURLToPath2, pathToFileURL } from "url";
 
@@ -24741,7 +24794,7 @@ var QUERYABLE_SOURCES_DEPRECATION = `"queryableSources" in publisher.json does n
 init_errors();
 import { createHash } from "crypto";
 import * as fs from "fs";
-import * as path from "path";
+import * as path2 from "path";
 var PACKAGE_REPRESENTATIONS = ["single", "facets"];
 var KEYPHRASE_MODES = ["auto", "never", "always"];
 var REFINE_LEVEL_NAMES = ["LOW", "MEDIUM", "HIGH"];
@@ -24797,17 +24850,17 @@ function describe(value) {
   return JSON.stringify(value) ?? "nothing";
 }
 function stepsOutside(within) {
-  return within === ".." || within.startsWith(`..${path.sep}`) || path.isAbsolute(within);
+  return within === ".." || within.startsWith(`..${path2.sep}`) || path2.isAbsolute(within);
 }
 function resolvePromptPath(packageRoot, rel, promptKey = "keyphrase") {
   const key = `retrieval.prompts.${promptKey}`;
   const fix = `Fix: use a path inside the package, e.g. "prompts/${promptKey}.md".`;
-  if (rel.includes("\x00") || path.isAbsolute(rel) || /^[A-Za-z]:[\\/]/.test(rel) || rel.startsWith("\\")) {
+  if (rel.includes("\x00") || path2.isAbsolute(rel) || /^[A-Za-z]:[\\/]/.test(rel) || rel.startsWith("\\")) {
     fail(`Invalid publisher.json ${key}: ${describe(rel)} is an absolute path. ${fix}`);
   }
-  const root = path.resolve(packageRoot);
-  const resolved = path.resolve(root, rel);
-  const within = path.relative(root, resolved);
+  const root = path2.resolve(packageRoot);
+  const resolved = path2.resolve(root, rel);
+  const within = path2.relative(root, resolved);
   if (within === "" || stepsOutside(within)) {
     fail(`Invalid publisher.json ${key}: ${describe(rel)} resolves outside the package directory. ${fix}`);
   }
@@ -24932,7 +24985,7 @@ async function readPromptFile(packageRoot, key, rel) {
       fs.promises.realpath(packageRoot),
       fs.promises.realpath(file)
     ]);
-    const within = path.relative(realRoot, realFile);
+    const within = path2.relative(realRoot, realFile);
     if (stepsOutside(within)) {
       fail(`Invalid publisher.json ${at}: ${describe(rel)} resolves outside the package directory through a link. ` + `Fix: copy the file into the package.`);
     }
@@ -25166,7 +25219,7 @@ function makeWorkerUrlReader(job) {
     readURL: async (url) => {
       if (url.protocol === "file:") {
         const filePath = fileURLToPath2(url);
-        if (job.replacement && path3.resolve(filePath) === path3.resolve(job.packagePath, job.replacement.modelPath)) {
+        if (job.replacement && path4.resolve(filePath) === path4.resolve(job.packagePath, job.replacement.modelPath)) {
           return job.replacement.source;
         }
         return fs3.promises.readFile(filePath, "utf8");
@@ -25218,8 +25271,18 @@ function buildWorkerMalloyConfig(job) {
   }));
   return config;
 }
+async function readInstallRecord(packagePath) {
+  try {
+    const raw = await fs3.promises.readFile(installRecordPath(path4.dirname(packagePath), path4.basename(packagePath)), "utf8");
+    const record = JSON.parse(raw);
+    const location = typeof record === "object" && record !== null ? record.location : undefined;
+    return typeof location === "string" && location !== "" ? location : undefined;
+  } catch {
+    return;
+  }
+}
 async function readPackageMetadata(packagePath, modelPaths) {
-  const manifestPath = path3.join(packagePath, PACKAGE_MANIFEST_NAME);
+  const manifestPath = path4.join(packagePath, PACKAGE_MANIFEST_NAME);
   const contents = await fs3.promises.readFile(manifestPath, "utf8");
   let parsed;
   try {
@@ -25246,6 +25309,7 @@ async function readPackageMetadata(packagePath, modelPaths) {
   return {
     name: parsed.name,
     description: parsed.description,
+    location: await readInstallRecord(packagePath),
     explores: explores.explores,
     queryableSources: parsed.queryableSources === "all" ? "all" : "declared",
     manifestLocation: typeof parsed.manifestLocation === "string" ? parsed.manifestLocation : null,
@@ -25257,7 +25321,7 @@ async function readPackageMetadata(packagePath, modelPaths) {
 }
 async function listPackageFiles(packagePath) {
   const files = await import_recursive_readdir.default(packagePath, [ignoreDotfiles]);
-  return files.map((full) => path3.relative(packagePath, full).replace(/\\/g, "/")).sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
+  return files.map((full) => path4.relative(packagePath, full).replace(/\\/g, "/")).sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
 }
 function filterModelPaths(allRelative) {
   return allRelative.filter((p) => p.endsWith(MODEL_FILE_SUFFIX) || p.endsWith(NOTEBOOK_FILE_SUFFIX));
@@ -25326,7 +25390,7 @@ function buildRuntimeForModel(job, malloyConfig) {
 }
 async function compileMalloyModel(job, malloyConfig, modelPath) {
   const compileStart = performance.now();
-  const fullPath = path3.join(job.packagePath, modelPath);
+  const fullPath = path4.join(job.packagePath, modelPath);
   const modelURL = pathToFileURL(fullPath);
   const importBaseURL = new URL(".", modelURL);
   const { runtime, urlReader, textFor } = buildRuntimeForModel(job, malloyConfig);
@@ -25391,7 +25455,7 @@ async function compileMalloyModel(job, malloyConfig, modelPath) {
 }
 async function compileNotebookModel(job, malloyConfig, modelPath) {
   const compileStart = performance.now();
-  const fullPath = path3.join(job.packagePath, modelPath);
+  const fullPath = path4.join(job.packagePath, modelPath);
   const modelURL = pathToFileURL(fullPath);
   const importBaseURL = new URL(".", modelURL);
   const { runtime, urlReader } = buildRuntimeForModel(job, malloyConfig);
@@ -25536,7 +25600,7 @@ async function compileOneModel(job, malloyConfig, modelPath) {
     return {
       modelPath,
       modelType,
-      compilationError: serializeError(error)
+      compilationError: serializeError(translatorMalloyError(error) ?? error)
     };
   }
 }

package/dist/runtime/publisher.js

@@ -11,7 +11,7 @@
 //       opts: { environment?, package?, sourceName?, queryName?, filterParams?,
 //               bypassFilters?, givens? }. givens is a name→value map bound as
 //               Malloy given: runtime parameters for this query (safe parameterization,
-//               not string interpolation) — see the malloy-html-data-app-runtime skill.
+//               not string interpolation) — see the malloy-html-data-apps skill (reference/runtime.md).
 //   - Publisher.embed(selector, { src, height?, token? })
 //   - Publisher.context  ({ environment, package } inferred from URL)
 //   - Publisher.setToken(token)  (override Bearer token; default uses cookies)