@malloydata/malloy 0.0.377 → 0.0.378

package/dist/api/foundation/config_compile.js

@@ -121,10 +121,18 @@ function compileConnectionProperty(path, propDef, value, log) {
     }
     const ref = asReferenceShape(value);
     if (ref !== undefined) {
+        if (propDef.requireLiteralString) {
+            log.push(makeWarning(path, 'must be a literal string and cannot use an overlay reference'));
+            return { kind: 'value', value };
+        }
         return ref;
     }
     const typeError = checkValueType(value, propDef.type);
     if (typeError) {
+        if (propDef.requireLiteralString) {
+            log.push(makeWarning(path, `must be a literal string, got ${describeConfigValue(value)}`));
+            return { kind: 'value', value };
+        }
         log.push(makeWarning(path, `${typeError} (expected ${propDef.type})`));
         return undefined;
     }
@@ -190,6 +198,11 @@ function makeWarning(path, message) {
         code: 'config-validation',
     };
 }
+function describeConfigValue(value) {
+    if (Array.isArray(value))
+        return 'array';
+    return typeof value;
+}
 function checkValueType(value, expectedType) {
     switch (expectedType) {
         case 'number':

package/dist/api/foundation/config_lookup.js

@@ -71,6 +71,7 @@ function buildManagedLookup(compiledConnections, overlays, log) {
                     connConfig[key] = value;
                 }
             }
+            (0, registry_1.validateConnectionConfigProperties)(connectionName, resolved.is, connConfig);
             const connection = await typeDef.factory(connConfig);
             cache.set(connectionName, connection);
             return connection;

package/dist/connection/registry.d.ts

@@ -28,6 +28,13 @@ export interface ConnectionPropertyDefinition {
     description?: string;
     /** For type 'file': extension filters for picker dialogs. */
     fileFilters?: Record<string, string[]>;
+    /**
+     * For security-sensitive string slots, preserve malformed/reference-shaped
+     * raw values so registry lookup can fail closed instead of silently dropping
+     * the property during generic compilation. Factories must not rely on this
+     * metadata as their only validation layer.
+     */
+    requireLiteralString?: true;
 }
 /**
  * A connection type definition: factory plus property metadata.
@@ -93,6 +100,11 @@ export declare function getRegisteredConnectionTypes(): string[];
  * lookup to hand fully-resolved configs to the right factory.
  */
 export declare function getConnectionTypeDef(typeName: string): ConnectionTypeDef | undefined;
+/**
+ * Enforce registry-level literal-string requirements after overlay resolution
+ * and before a connection factory sees the config.
+ */
+export declare function validateConnectionConfigProperties(connectionName: string, typeName: string, config: ConnectionConfig): void;
 /**
  * Parse a JSON config string into a ConnectionsConfig.
  * Entries without a valid `is` field are silently dropped.

package/dist/connection/registry.js

@@ -10,6 +10,7 @@ exports.getConnectionProperties = getConnectionProperties;
 exports.getConnectionTypeDisplayName = getConnectionTypeDisplayName;
 exports.getRegisteredConnectionTypes = getRegisteredConnectionTypes;
 exports.getConnectionTypeDef = getConnectionTypeDef;
+exports.validateConnectionConfigProperties = validateConnectionConfigProperties;
 exports.readConnectionsConfig = readConnectionsConfig;
 exports.writeConnectionsConfig = writeConnectionsConfig;
 exports.createConnectionsFromConfig = createConnectionsFromConfig;
@@ -66,6 +67,22 @@ function getRegisteredConnectionTypes() {
 function getConnectionTypeDef(typeName) {
     return registry.get(typeName);
 }
+/**
+ * Enforce registry-level literal-string requirements after overlay resolution
+ * and before a connection factory sees the config.
+ */
+function validateConnectionConfigProperties(connectionName, typeName, config) {
+    var _a, _b;
+    const props = (_b = (_a = registry.get(typeName)) === null || _a === void 0 ? void 0 : _a.properties) !== null && _b !== void 0 ? _b : [];
+    for (const prop of props) {
+        if (!prop.requireLiteralString)
+            continue;
+        const value = config[prop.name];
+        if (value !== undefined && typeof value !== 'string') {
+            throw new Error(`Connection "${connectionName}" property "${prop.name}" must be a literal string`);
+        }
+    }
+}
 /**
  * Parse a JSON config string into a ConnectionsConfig.
  * Entries without a valid `is` field are silently dropped.
@@ -127,6 +144,7 @@ function createConnectionsFromConfig(config, onConnectionCreated) {
                     connConfig[key] = value;
                 }
             }
+            validateConnectionConfigProperties(connectionName, entry.is, connConfig);
             const connection = await typeDef.factory(connConfig);
             if (onConnectionCreated) {
                 onConnectionCreated(connectionName, connection);

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const MALLOY_VERSION = "0.0.377";
+export declare const MALLOY_VERSION = "0.0.378";

package/dist/version.js

@@ -2,5 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MALLOY_VERSION = void 0;
 // generated with 'generate-version-file' script; do not edit manually
-exports.MALLOY_VERSION = '0.0.377';
+exports.MALLOY_VERSION = '0.0.378';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@malloydata/malloy",
-  "version": "0.0.377",
+  "version": "0.0.378",
   "license": "MIT",
   "exports": {
     ".": "./dist/index.js",
@@ -51,9 +51,9 @@
     "generate-version-file": "VERSION=$(npm pkg get version --workspaces=false | tr -d \\\")\necho \"// generated with 'generate-version-file' script; do not edit manually\\nexport const MALLOY_VERSION = '$VERSION';\" > src/version.ts"
   },
   "dependencies": {
-    "@malloydata/malloy-filter": "0.0.377",
-    "@malloydata/malloy-interfaces": "0.0.377",
-    "@malloydata/malloy-tag": "0.0.377",
+    "@malloydata/malloy-filter": "0.0.378",
+    "@malloydata/malloy-interfaces": "0.0.378",
+    "@malloydata/malloy-tag": "0.0.378",
     "@noble/hashes": "^1.8.0",
     "antlr4ts": "^0.5.0-alpha.4",
     "assert": "^2.0.0",