@malloydata/malloy 0.0.394 → 0.0.396

package/dist/dialect/duckdb/table-path-parser.d.ts

@@ -0,0 +1,2 @@
+import type { ValidateTablePathResult } from '../table-path';
+export declare function validateDuckDBTablePath(input: string): ValidateTablePathResult;

package/dist/dialect/duckdb/table-path-parser.js

@@ -0,0 +1,57 @@
+"use strict";
+/*
+ * Copyright Contributors to the Malloy project
+ * SPDX-License-Identifier: MIT
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateDuckDBTablePath = validateDuckDBTablePath;
+const table_path_1 = require("../table-path");
+const DUCKDB_FILE_PATH_RE = /^[A-Za-z0-9._\-/:?*]+$/;
+const DUCKDB_SINGLE_QUOTED_RE = /^'(?:[^']|'')*'$/;
+function validateDuckDBTablePath(input) {
+    if (input.length === 0) {
+        return { ok: false, error: 'DuckDB table path is empty' };
+    }
+    // Branch 1: explicit single-quoted literal.
+    if (input[0] === "'") {
+        if (DUCKDB_SINGLE_QUOTED_RE.test(input)) {
+            const body = input.slice(1, -1).replace(/''/g, "'");
+            if (body.includes(';') || body.includes('--')) {
+                return {
+                    ok: false,
+                    error: `Invalid DuckDB table path: ${JSON.stringify(input)} — ` +
+                        'forbidden character `;` or `--` in single-quoted body.',
+                };
+            }
+            return { ok: true, canonical: input };
+        }
+        return {
+            ok: false,
+            error: `Invalid DuckDB table path: ${JSON.stringify(input)} — ` +
+                'unterminated or trailing-junk single-quoted literal.',
+        };
+    }
+    // Branch 2: identifier path (same grammar as ANSI dialects).
+    const id = (0, table_path_1.validateDottedTablePath)(input, {
+        quoteChar: '"',
+        escapeStyle: 'doubled',
+        bareIdentRegex: /^[A-Za-z_][A-Za-z0-9_]*/,
+        dialectName: 'DuckDB',
+    });
+    if (id.ok)
+        return id;
+    // Branch 3: file-path convenience.
+    if (DUCKDB_FILE_PATH_RE.test(input)) {
+        return { ok: true, canonical: `'${input}'` };
+    }
+    return {
+        ok: false,
+        error: `Invalid DuckDB table path: ${JSON.stringify(input)} — expected an ` +
+            'identifier path, a quoted identifier path, a single-quoted ' +
+            "literal ('foo.csv'), or a file-path-shaped string of letters, " +
+            'digits, and `._-/:?*`. For table-valued function calls (e.g. ' +
+            "read_parquet('foo.parquet')) or other table expressions, use a " +
+            'SQL block instead: connection.sql("""SELECT * FROM …""").',
+    };
+}
+//# sourceMappingURL=table-path-parser.js.map

package/dist/dialect/index.d.ts

@@ -14,3 +14,5 @@ export { getMalloyStandardFunctions } from './functions';
 export type { MalloyStandardFunctionImplementations } from './functions';
 export type { TinyToken } from './tiny_parser';
 export { TinyParser } from './tiny_parser';
+export type { DecodeDottedTablePathResult, DottedTablePathOptions, TablePathEscapeStyle, TablePathSegment, ValidateTablePathResult, } from './table-path';
+export { decodeDottedTablePath, validateDottedTablePath } from './table-path';

package/dist/dialect/index.js

@@ -22,7 +22,7 @@
  * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TinyParser = exports.getMalloyStandardFunctions = exports.registerDialect = exports.getDialect = exports.DatabricksDialect = exports.MySQLDialect = exports.TrinoDialect = exports.SnowflakeDialect = exports.DuckDBDialect = exports.PostgresDialect = exports.StandardSQLDialect = exports.qtz = exports.Dialect = exports.sql = exports.literal = exports.variadicParam = exports.param = exports.spread = exports.maxScalar = exports.minAggregate = exports.minScalar = exports.overload = exports.makeParam = exports.anyExprType = exports.arg = void 0;
+exports.validateDottedTablePath = exports.decodeDottedTablePath = exports.TinyParser = exports.getMalloyStandardFunctions = exports.registerDialect = exports.getDialect = exports.DatabricksDialect = exports.MySQLDialect = exports.TrinoDialect = exports.SnowflakeDialect = exports.DuckDBDialect = exports.PostgresDialect = exports.StandardSQLDialect = exports.qtz = exports.Dialect = exports.sql = exports.literal = exports.variadicParam = exports.param = exports.spread = exports.maxScalar = exports.minAggregate = exports.minScalar = exports.overload = exports.makeParam = exports.anyExprType = exports.arg = void 0;
 var util_1 = require("./functions/util");
 Object.defineProperty(exports, "arg", { enumerable: true, get: function () { return util_1.arg; } });
 Object.defineProperty(exports, "anyExprType", { enumerable: true, get: function () { return util_1.anyExprType; } });
@@ -60,4 +60,7 @@ var functions_1 = require("./functions");
 Object.defineProperty(exports, "getMalloyStandardFunctions", { enumerable: true, get: function () { return functions_1.getMalloyStandardFunctions; } });
 var tiny_parser_1 = require("./tiny_parser");
 Object.defineProperty(exports, "TinyParser", { enumerable: true, get: function () { return tiny_parser_1.TinyParser; } });
+var table_path_1 = require("./table-path");
+Object.defineProperty(exports, "decodeDottedTablePath", { enumerable: true, get: function () { return table_path_1.decodeDottedTablePath; } });
+Object.defineProperty(exports, "validateDottedTablePath", { enumerable: true, get: function () { return table_path_1.validateDottedTablePath; } });
 //# sourceMappingURL=index.js.map

package/dist/dialect/mysql/mysql.d.ts

@@ -4,6 +4,9 @@ import { Dialect } from '../dialect';
 import type { DialectFunctionOverloadDef } from '../functions';
 export declare class MySQLDialect extends Dialect {
     name: string;
+    stringLiteralStyle: "backslash";
+    identifierEscapeStyle: "doubled";
+    identifierQuoteChar: string;
     defaultNumberType: string;
     defaultDecimalType: string;
     udfPrefix: string;
@@ -32,9 +35,9 @@ export declare class MySQLDialect extends Dialect {
     booleanType: BooleanTypeSupport;
     orderByClause: OrderByClauseType;
     maxIdentifierLength: number;
+    tablePathBareIdentRegex: RegExp;
     malloyTypeToSQLType(malloyType: AtomicTypeDef): string;
     sqlTypeToMalloyType(sqlType: string): BasicAtomicTypeDef;
-    quoteTablePath(tablePath: string): string;
     sqlGroupSetTable(groupSetCount: number): string;
     sqlAnyValue(_groupSet: number, fieldName: string): string;
     private mapFields;
@@ -54,7 +57,6 @@ export declare class MySQLDialect extends Dialect {
     sqlCreateFunction(id: string, funcText: string): string;
     sqlCreateFunctionCombineLastStage(lastStageName: string): string;
     sqlSelectAliasAsStruct(_alias: string, _fieldList: DialectFieldList): string;
-    sqlMaybeQuoteIdentifier(identifier: string): string;
     sqlCreateTableAsSelect(_tableName: string, _sql: string): string;
     sqlNowExpr(): string;
     sqlConvertToCivilTime(expr: string, timezone: string, _typeDef: AtomicTypeDef): {
@@ -73,8 +75,6 @@ export declare class MySQLDialect extends Dialect {
     sqlMeasureTimeExpr(df: MeasureTimeExpr): string;
     sqlAggDistinct(_key: string, _values: string[], _func: (valNames: string[]) => string): string;
     sqlSampleTable(tableSQL: string, sample: Sampling | undefined): string;
-    sqlLiteralString(literal: string): string;
-    sqlLiteralRegexp(literal: string): string;
     getDialectFunctionOverrides(): {
         [name: string]: DialectFunctionOverloadDef[];
     };

package/dist/dialect/mysql/mysql.js

@@ -94,6 +94,9 @@ class MySQLDialect extends dialect_1.Dialect {
     constructor() {
         super(...arguments);
         this.name = 'mysql';
+        this.stringLiteralStyle = dialect_1.EscapeStyle.Backslash;
+        this.identifierEscapeStyle = dialect_1.EscapeStyle.Doubled;
+        this.identifierQuoteChar = '`';
         this.defaultNumberType = 'DOUBLE PRECISION';
         this.defaultDecimalType = 'DECIMAL';
         this.udfPrefix = 'ms_temp.__udf';
@@ -121,6 +124,11 @@ class MySQLDialect extends dialect_1.Dialect {
         this.booleanType = 'simulated';
         this.orderByClause = 'ordinal';
         this.maxIdentifierLength = 64;
+        // MySQL bare identifiers allow `$` and may start with a digit, but
+        // cannot be entirely digits (or they lex as number literals). The
+        // regex requires at least one non-digit char somewhere in the run.
+        // Verified against the live engine.
+        this.tablePathBareIdentRegex = /^[A-Za-z0-9_$]*[A-Za-z_$][A-Za-z0-9_$]*/;
     }
     malloyTypeToSQLType(malloyType) {
         switch (malloyType.type) {
@@ -154,12 +162,6 @@ class MySQLDialect extends dialect_1.Dialect {
             rawType: baseSqlType,
         });
     }
-    quoteTablePath(tablePath) {
-        return tablePath
-            .split('.')
-            .map(part => `\`${part}\``)
-            .join('.');
-    }
     sqlGroupSetTable(groupSetCount) {
         return `CROSS JOIN (select number - 1 as group_set from JSON_TABLE(cast(concat("[1", repeat(",1", ${groupSetCount}), "]") as JSON),"$[*]" COLUMNS(number FOR ORDINALITY)) group_set) as group_set`;
     }
@@ -167,7 +169,11 @@ class MySQLDialect extends dialect_1.Dialect {
         return `MAX(${fieldName})`;
     }
     mapFields(fieldList) {
-        return fieldList.map(f => `"${f.rawName}", ${f.sqlExpression}`).join(', ');
+        // JSON_OBJECT key is a string value. Routing rawName through
+        // sqlLiteralString also keeps the SQL valid under ANSI_QUOTES mode.
+        return fieldList
+            .map(f => `${this.sqlLiteralString(f.rawName)}, ${f.sqlExpression}`)
+            .join(', ');
     }
     sqlAggregateTurtle(groupSet, fieldList, orderBy) {
         const separator = ',';
@@ -218,7 +224,12 @@ class MySQLDialect extends dialect_1.Dialect {
                 ((_a = f.typeDef.rawType) === null || _a === void 0 ? void 0 : _a.match(/json/))) {
                 fType = f.typeDef.rawType.toUpperCase();
             }
-            fields.push(`${this.sqlMaybeQuoteIdentifier(f.sqlOutputName)} ${fType}  PATH "$.${f.rawName}"`);
+            // JSON_TABLE PATH argument is a string literal containing a
+            // JSONPath. Render rawName through sqlLiteralString so a single
+            // quote in the user-controlled field name cannot close the SQL
+            // string literal.
+            const jsonPathLit = this.sqlLiteralString('$.' + f.rawName);
+            fields.push(`${this.sqlQuoteIdentifier(f.sqlOutputName)} ${fType}  PATH ${jsonPathLit}`);
         }
         return fields.join(',\n');
     }
@@ -266,7 +277,11 @@ class MySQLDialect extends dialect_1.Dialect {
     }
     sqlFieldReference(parentAlias, parentType, childName, childType) {
         if (parentType === 'array[scalar]' || parentType === 'record') {
-            let ret = `JSON_UNQUOTE(JSON_EXTRACT(${parentAlias},'$.${childName}'))`;
+            // childName comes from user-controlled record field names; render
+            // the JSON path through sqlLiteralString so a single quote in the
+            // name cannot close the SQL string literal.
+            const jsonPathLit = this.sqlLiteralString('$.' + childName);
+            let ret = `JSON_UNQUOTE(JSON_EXTRACT(${parentAlias},${jsonPathLit}))`;
             if (parentType === 'array[scalar]') {
                 ret = `JSON_UNQUOTE(${parentAlias}.\`value\`)`;
             }
@@ -280,7 +295,7 @@ class MySQLDialect extends dialect_1.Dialect {
                     return `CAST(${ret} as JSON)`;
             }
         }
-        const child = this.sqlMaybeQuoteIdentifier(childName);
+        const child = this.sqlQuoteIdentifier(childName);
         return `${parentAlias}.${child}`;
     }
     sqlCreateFunction(id, funcText) {
@@ -297,9 +312,6 @@ class MySQLDialect extends dialect_1.Dialect {
         //   .map(name => `'${name.replace(/`/g, '')}', \`${alias}\`.${name}`)
         //   .join(',')})`;
     }
-    sqlMaybeQuoteIdentifier(identifier) {
-        return '`' + identifier.replace(/`/g, '``') + '`';
-    }
     // TODO: Check what this is.
     sqlCreateTableAsSelect(_tableName, _sql) {
         throw new Error('Not implemented Yet');
@@ -441,13 +453,6 @@ class MySQLDialect extends dialect_1.Dialect {
         }
         return tableSQL;
     }
-    sqlLiteralString(literal) {
-        const noVirgule = literal.replace(/\\/g, '\\\\');
-        return "'" + noVirgule.replace(/'/g, "\\'") + "'";
-    }
-    sqlLiteralRegexp(literal) {
-        return "'" + literal.replace(/'/g, "''") + "'";
-    }
     getDialectFunctionOverrides() {
         return (0, functions_1.expandOverrideMap)(function_overrides_1.MYSQL_MALLOY_STANDARD_OVERLOADS);
     }

package/dist/dialect/pg_impl.d.ts

@@ -9,6 +9,9 @@ export declare const timeExtractMap: Record<string, string>;
 export declare abstract class PostgresBase extends Dialect {
     hasTimestamptz: boolean;
     supportsBigIntPrecision: boolean;
+    stringLiteralStyle: "doubled";
+    identifierEscapeStyle: "doubled";
+    identifierQuoteChar: string;
     sqlNowExpr(): string;
     sqlTimeExtractExpr(qi: QueryInfo, from: TimeExtractExpr): string;
     sqlCast(qi: QueryInfo, cast: TypecastExpr): string;
@@ -18,7 +21,6 @@ export declare abstract class PostgresBase extends Dialect {
     sqlTimestamptzLiteral(_qi: QueryInfo, literal: string, timezone: string): string;
     sqlLiteralRecord(_lit: RecordLiteralNode): string;
     sqlLiteralArray(lit: ArrayLiteralNode): string;
-    sqlMaybeQuoteIdentifier(identifier: string): string;
     sqlConvertToCivilTime(expr: string, timezone: string, typeDef: AtomicTypeDef): {
         sql: string;
         typeDef: AtomicTypeDef;

package/dist/dialect/pg_impl.js

@@ -23,6 +23,12 @@ class PostgresBase extends dialect_1.Dialect {
         this.hasTimestamptz = true;
         // Postgres-family dialects use JSON serialization which loses bigint precision
         this.supportsBigIntPrecision = false;
+        // All current Postgres-family dialects (Postgres, DuckDB, Trino, Presto)
+        // use ANSI doubled-quote literal escaping and ANSI double-quote identifiers.
+        // Subclasses may override.
+        this.stringLiteralStyle = dialect_1.EscapeStyle.Doubled;
+        this.identifierEscapeStyle = dialect_1.EscapeStyle.Doubled;
+        this.identifierQuoteChar = '"';
     }
     sqlNowExpr() {
         return 'LOCALTIMESTAMP';
@@ -96,9 +102,6 @@ class PostgresBase extends dialect_1.Dialect {
         const array = lit.kids.values.map(val => val.sql);
         return 'ARRAY[' + array.join(',') + ']';
     }
-    sqlMaybeQuoteIdentifier(identifier) {
-        return '"' + identifier.replace(/"/g, '""') + '"';
-    }
     sqlConvertToCivilTime(expr, timezone, typeDef) {
         // PostgreSQL/DuckDB: AT TIME ZONE is polymorphic
         // For timestamptz (TIMESTAMPTZ): AT TIME ZONE converts to plain TIMESTAMP (civil in timezone)

package/dist/dialect/postgres/postgres.d.ts

@@ -27,7 +27,7 @@ export declare class PostgresDialect extends PostgresBase {
     compoundObjectInSchema: boolean;
     likeEscape: boolean;
     maxIdentifierLength: number;
-    quoteTablePath(tablePath: string): string;
+    tablePathBareIdentRegex: RegExp;
     sqlGroupSetTable(groupSetCount: number): string;
     sqlAnyValue(groupSet: number, fieldName: string): string;
     mapFields(fieldList: DialectFieldList): string;
@@ -52,8 +52,6 @@ export declare class PostgresDialect extends PostgresBase {
     sqlAggDistinct(key: string, values: string[], func: (valNames: string[]) => string): string;
     sqlSampleTable(tableSQL: string, sample: Sampling | undefined): string;
     sqlOrderBy(orderTerms: string[]): string;
-    sqlLiteralString(literal: string): string;
-    sqlLiteralRegexp(literal: string): string;
     getDialectFunctionOverrides(): {
         [name: string]: DialectFunctionOverloadDef[];
     };

package/dist/dialect/postgres/postgres.js

@@ -99,12 +99,9 @@ class PostgresDialect extends pg_impl_1.PostgresBase {
         this.compoundObjectInSchema = false;
         this.likeEscape = false;
         this.maxIdentifierLength = 63;
-    }
-    quoteTablePath(tablePath) {
-        return tablePath
-            .split('.')
-            .map(part => `"${part}"`)
-            .join('.');
+        // Postgres bare-identifier continuation allows `$` (verified against
+        // the live engine: `postgres.table('foo$bar')` resolves successfully).
+        this.tablePathBareIdentRegex = /^[A-Za-z_][A-Za-z0-9_$]*/;
     }
     sqlGroupSetTable(groupSetCount) {
         return `CROSS JOIN GENERATE_SERIES(0,${groupSetCount},1) as group_set`;
@@ -164,7 +161,8 @@ class PostgresDialect extends pg_impl_1.PostgresBase {
             return `(${parentAlias}->>'__row_id')`;
         }
         if (parentType !== 'table') {
-            let ret = `JSONB_EXTRACT_PATH_TEXT(${parentAlias},'${childName}')`;
+            const nameLit = this.sqlLiteralString(childName);
+            let ret = `JSONB_EXTRACT_PATH_TEXT(${parentAlias},${nameLit})`;
             switch (childType) {
                 case 'string':
                     break;
@@ -176,13 +174,13 @@ class PostgresDialect extends pg_impl_1.PostgresBase {
                 case 'record':
                 case 'array[record]':
                 case 'sql native':
-                    ret = `JSONB_EXTRACT_PATH(${parentAlias},'${childName}')`;
+                    ret = `JSONB_EXTRACT_PATH(${parentAlias},${nameLit})`;
                     break;
             }
             return ret;
         }
         else {
-            const child = this.sqlMaybeQuoteIdentifier(childName);
+            const child = this.sqlQuoteIdentifier(childName);
             return `${parentAlias}.${child}`;
         }
     }
@@ -307,12 +305,6 @@ class PostgresDialect extends pg_impl_1.PostgresBase {
     sqlOrderBy(orderTerms) {
         return `ORDER BY ${orderTerms.map(t => `${t} NULLS LAST`).join(',')}`;
     }
-    sqlLiteralString(literal) {
-        return "'" + literal.replace(/'/g, "''") + "'";
-    }
-    sqlLiteralRegexp(literal) {
-        return "'" + literal.replace(/'/g, "''") + "'";
-    }
     getDialectFunctionOverrides() {
         return (0, functions_1.expandOverrideMap)(function_overrides_1.POSTGRES_MALLOY_STANDARD_OVERLOADS);
     }
@@ -372,7 +364,7 @@ class PostgresDialect extends pg_impl_1.PostgresBase {
     sqlLiteralRecord(lit) {
         const props = [];
         for (const [kName, kVal] of Object.entries(lit.kids)) {
-            props.push(`'${kName}',${kVal.sql}`);
+            props.push(`${this.sqlLiteralString(kName)},${kVal.sql}`);
         }
         return `JSONB_BUILD_OBJECT(${props.join(', ')})`;
     }

package/dist/dialect/snowflake/snowflake.d.ts

@@ -6,6 +6,9 @@ export declare class SnowflakeDialect extends Dialect {
     name: string;
     experimental: boolean;
     hasTimestamptz: boolean;
+    stringLiteralStyle: "backslash";
+    identifierEscapeStyle: "doubled";
+    identifierQuoteChar: string;
     defaultNumberType: string;
     defaultDecimalType: string;
     udfPrefix: string;
@@ -26,8 +29,8 @@ export declare class SnowflakeDialect extends Dialect {
     supportsQualify: boolean;
     supportsPipelinesInViews: boolean;
     supportsComplexFilteredSources: boolean;
+    tablePathBareIdentRegex: RegExp;
     integerTypeMappings: IntegerTypeMapping[];
-    quoteTablePath(tablePath: string): string;
     sqlGroupSetTable(groupSetCount: number): string;
     sqlAnyValue(groupSet: number, fieldName: string): string;
     mapFields(fieldList: DialectFieldList): string;
@@ -45,7 +48,6 @@ export declare class SnowflakeDialect extends Dialect {
     sqlCreateFunction(_id: string, _funcText: string): string;
     sqlCreateFunctionCombineLastStage(_lastStageName: string): string;
     sqlSelectAliasAsStruct(alias: string): string;
-    sqlMaybeQuoteIdentifier(identifier: string): string;
     sqlCreateTableAsSelect(tableName: string, sql: string): string;
     sqlConvertToCivilTime(expr: string, timezone: string, typeDef: AtomicTypeDef): {
         sql: string;
@@ -65,8 +67,6 @@ export declare class SnowflakeDialect extends Dialect {
     sqlRegexpMatch(compare: RegexMatchExpr): string;
     sqlSampleTable(tableSQL: string, sample: Sampling | undefined): string;
     sqlOrderBy(orderTerms: string[]): string;
-    sqlLiteralString(literal: string): string;
-    sqlLiteralRegexp(literal: string): string;
     getDialectFunctionOverrides(): {
         [name: string]: DialectFunctionOverloadDef[];
     };

package/dist/dialect/snowflake/snowflake.js

@@ -78,6 +78,9 @@ class SnowflakeDialect extends dialect_1.Dialect {
         this.name = 'snowflake';
         this.experimental = false;
         this.hasTimestamptz = true;
+        this.stringLiteralStyle = dialect_1.EscapeStyle.Backslash;
+        this.identifierEscapeStyle = dialect_1.EscapeStyle.Doubled;
+        this.identifierQuoteChar = '"';
         this.defaultNumberType = 'NUMBER';
         this.defaultDecimalType = 'NUMBER';
         this.udfPrefix = '__udf';
@@ -98,21 +101,14 @@ class SnowflakeDialect extends dialect_1.Dialect {
         this.supportsQualify = false;
         this.supportsPipelinesInViews = false;
         this.supportsComplexFilteredSources = false;
+        // Snowflake bare-identifier continuation allows `$` (verified against
+        // the live engine).
+        this.tablePathBareIdentRegex = /^[A-Za-z_][A-Za-z0-9_$]*/;
         // Snowflake uses NUMBER(38,0) for all integers - can exceed JS Number precision
         this.integerTypeMappings = [
             { min: dialect_1.MIN_DECIMAL38, max: dialect_1.MAX_DECIMAL38, numberType: 'bigint' },
         ];
     }
-    quoteTablePath(tablePath) {
-        // Quote with double quotes if contains dangerous characters
-        if (tablePath.match(/[;-]/)) {
-            return tablePath
-                .split('.')
-                .map(part => `"${part}"`)
-                .join('.');
-        }
-        return tablePath;
-    }
     sqlGroupSetTable(groupSetCount) {
         return `CROSS JOIN (SELECT index as group_set FROM TABLE(FLATTEN(ARRAY_GENERATE_RANGE(0, ${groupSetCount + 1}))))`;
     }
@@ -126,7 +122,7 @@ class SnowflakeDialect extends dialect_1.Dialect {
     }
     mapFieldsForObjectConstruct(fieldList) {
         return fieldList
-            .map(f => `'${f.rawName}', (${f.sqlExpression})`)
+            .map(f => `${this.sqlLiteralString(f.rawName)}, (${f.sqlExpression})`)
             .join(', ');
     }
     sqlAggregateTurtle(groupSet, fieldList, orderBy) {
@@ -152,7 +148,7 @@ class SnowflakeDialect extends dialect_1.Dialect {
         return `COALESCE(ARRAY_AGG(CASE WHEN group_set=${groupSet} THEN OBJECT_CONSTRUCT_KEEP_NULL(${fields}) END)[0], OBJECT_CONSTRUCT_KEEP_NULL(${nullValues}))`;
     }
     sqlUnnestAlias(source, alias, _fieldList, _needDistinctKey, isArray, _isInNestedPipeline) {
-        const as = this.sqlMaybeQuoteIdentifier(alias);
+        const as = this.sqlQuoteIdentifier(alias);
         if (isArray) {
             return `LEFT JOIN lateral flatten(input => ${source}) as ${as}`;
         }
@@ -202,7 +198,7 @@ class SnowflakeDialect extends dialect_1.Dialect {
         return 'UUID_STRING()';
     }
     sqlFieldReference(parentAlias, parentType, childName, childType) {
-        const sqlName = this.sqlMaybeQuoteIdentifier(childName);
+        const sqlName = this.sqlQuoteIdentifier(childName);
         if (childName === '__row_id') {
             return `"${parentAlias}".INDEX::varchar`;
         }
@@ -250,9 +246,6 @@ class SnowflakeDialect extends dialect_1.Dialect {
     sqlSelectAliasAsStruct(alias) {
         return `OBJECT_CONSTRUCT_KEEP_NULL(${alias}.*)`;
     }
-    sqlMaybeQuoteIdentifier(identifier) {
-        return '"' + identifier.replace(/"/g, '""') + '"';
-    }
     sqlCreateTableAsSelect(tableName, sql) {
         return `
 CREATE TEMP TABLE IF NOT EXISTS \`${tableName}\`
@@ -425,14 +418,6 @@ ${(0, utils_1.indent)(sql)}
     sqlOrderBy(orderTerms) {
         return `ORDER BY ${orderTerms.map(t => `${t} NULLS LAST`).join(',')}`;
     }
-    sqlLiteralString(literal) {
-        const noVirgule = literal.replace(/\\/g, '\\\\');
-        return "'" + noVirgule.replace(/'/g, "\\'") + "'";
-    }
-    sqlLiteralRegexp(literal) {
-        const noVirgule = literal.replace(/\\/g, '\\\\');
-        return "'" + noVirgule.replace(/'/g, "\\'") + "'";
-    }
     getDialectFunctionOverrides() {
         return (0, functions_1.expandOverrideMap)(function_overrides_1.SNOWFLAKE_MALLOY_STANDARD_OVERLOADS);
     }
@@ -457,7 +442,7 @@ ${(0, utils_1.indent)(sql)}
                 var _a;
                 if ((0, malloy_types_1.isAtomic)(f)) {
                     const name = (_a = f.as) !== null && _a !== void 0 ? _a : f.name;
-                    const oneSchema = `${this.sqlMaybeQuoteIdentifier(name)} ${this.malloyTypeToSQLType(f)}`;
+                    const oneSchema = `${this.sqlQuoteIdentifier(name)} ${this.malloyTypeToSQLType(f)}`;
                     ret.push(oneSchema);
                 }
                 return ret;
@@ -521,9 +506,8 @@ ${(0, utils_1.indent)(sql)}
         const rowVals = [];
         for (const f of lit.typeDef.fields) {
             const name = (_a = f.as) !== null && _a !== void 0 ? _a : f.name;
-            const propName = `'${name}'`;
             const propVal = (_c = (_b = (0, malloy_types_1.safeRecordGet)(lit.kids, name)) === null || _b === void 0 ? void 0 : _b.sql) !== null && _c !== void 0 ? _c : 'internal-error-record-literal';
-            rowVals.push(`${propName},${propVal}`);
+            rowVals.push(`${this.sqlLiteralString(name)},${propVal}`);
         }
         return `OBJECT_CONSTRUCT_KEEP_NULL(${rowVals.join(',')})`;
     }

package/dist/dialect/standardsql/standardsql.d.ts

@@ -4,6 +4,9 @@ import type { CompiledOrderBy, DialectFieldList, IntegerTypeMapping, OrderByRequ
 import { Dialect, type LateralJoinExpression } from '../dialect';
 export declare class StandardSQLDialect extends Dialect {
     name: string;
+    stringLiteralStyle: "backslash";
+    identifierEscapeStyle: "backslash";
+    identifierQuoteChar: string;
     experimental: boolean;
     defaultNumberType: string;
     defaultDecimalType: string;
@@ -29,7 +32,9 @@ export declare class StandardSQLDialect extends Dialect {
     supportsHyperLogLog: boolean;
     likeEscape: boolean;
     integerTypeMappings: IntegerTypeMapping[];
-    quoteTablePath(tablePath: string): string;
+    private bqRejectBacktick;
+    sqlQuoteIdentifier(identifier: string): string;
+    tablePathBareIdentRegex: RegExp;
     needsCivilTimeComputation(typeDef: AtomicTypeDef, truncateTo: TimestampUnit | undefined, offsetUnit: TimestampUnit | undefined, qi: QueryInfo): {
         needed: boolean;
         tz: string | undefined;
@@ -50,7 +55,6 @@ export declare class StandardSQLDialect extends Dialect {
     sqlCreateTableAsSelect(tableName: string, sql: string): string;
     sqlCreateFunctionCombineLastStage(lastStageName: string): string;
     sqlSelectAliasAsStruct(alias: string): string;
-    sqlMaybeQuoteIdentifier(identifier: string): string;
     sqlNowExpr(): string;
     sqlTimeExtractExpr(qi: QueryInfo, te: TimeExtractExpr): string;
     sqlConvertToCivilTime(expr: string, timezone: string, _typeDef: AtomicTypeDef): {
@@ -68,8 +72,6 @@ export declare class StandardSQLDialect extends Dialect {
     sqlTimestamptzLiteral(_qi: QueryInfo, _literal: string, _timezone: string): string;
     sqlMeasureTimeExpr(measure: MeasureTimeExpr): string;
     sqlSampleTable(tableSQL: string, sample: Sampling | undefined): string;
-    sqlLiteralString(literal: string): string;
-    sqlLiteralRegexp(literal: string): string;
     getDialectFunctionOverrides(): {
         [name: string]: DialectFunctionOverloadDef[];
     };

package/dist/dialect/standardsql/standardsql.js

@@ -76,6 +76,9 @@ class StandardSQLDialect extends dialect_1.Dialect {
     constructor() {
         super(...arguments);
         this.name = 'standardsql';
+        this.stringLiteralStyle = dialect_1.EscapeStyle.Backslash;
+        this.identifierEscapeStyle = dialect_1.EscapeStyle.Backslash;
+        this.identifierQuoteChar = '`';
         this.experimental = false;
         this.defaultNumberType = 'FLOAT64';
         this.defaultDecimalType = 'NUMERIC';
@@ -101,13 +104,42 @@ class StandardSQLDialect extends dialect_1.Dialect {
         this.integerTypeMappings = [
             { min: dialect_1.MIN_INT64, max: dialect_1.MAX_INT64, numberType: 'bigint' },
         ];
+        // BigQuery bare-identifier continuation allows dashes (verified
+        // against the live engine: `proj-foo.dataset.table` resolves to a
+        // table reference, both bare and inside per-segment backticks). The
+        // base `sqlValidateTableName` handles every shape we accept —
+        // bare-dotted, whole-backticked, and per-segment-backticked — because
+        // its grammar is `Segment ('.' Segment)*` and a segment is either
+        // bare or quoted with this dialect's `identifierQuoteChar` /
+        // `identifierEscapeStyle` (`` ` `` / Backslash). The whole-path form
+        // (`` `proj.dataset.table` ``) is accepted naturally as a single
+        // quoted segment.
+        //
+        // `*` is intentionally NOT in this regex. BigQuery's parser only
+        // accepts `*` inside backticks (wildcard tables must be quoted, e.g.
+        // `` `dataset.events_*` ``). Bare wildcards would fail at the engine,
+        // so we reject them up front and require the user to type the
+        // backticks they'd need anyway.
+        this.tablePathBareIdentRegex = /^[A-Za-z_][A-Za-z0-9_-]*/;
     }
     sqlLateralJoinBag(expressions) {
         const fields = expressions.map(e => `${e.sql} as ${e.name}`);
         return `LEFT JOIN UNNEST([STRUCT(${fields.join(',\n')})]) as __lateral_join_bag\n`;
     }
-    quoteTablePath(tablePath) {
-        return `\`${tablePath}\``;
+    // BigQuery's parser accepts `\`` as a backtick escape inside quoted
+    // identifiers, but BigQuery's schema layer rejects field/table names
+    // containing a literal backtick. Refuse here so the error names the
+    // dialect; the rest of the escape (backslash-doubling) is handled by
+    // the base via identifierEscapeStyle.
+    // Reference: https://cloud.google.com/bigquery/docs/reference/standard-sql/lexical
+    bqRejectBacktick(name, kind) {
+        if (name.includes('`')) {
+            throw new Error(`BigQuery ${kind} cannot contain a backtick: ${JSON.stringify(name)}`);
+        }
+    }
+    sqlQuoteIdentifier(identifier) {
+        this.bqRejectBacktick(identifier, 'identifier');
+        return super.sqlQuoteIdentifier(identifier);
     }
     needsCivilTimeComputation(typeDef, truncateTo, offsetUnit, qi) {
         // In addition to using "civil" space for units where a query time zone is
@@ -193,7 +225,7 @@ class StandardSQLDialect extends dialect_1.Dialect {
         return 'GENERATE_UUID()';
     }
     sqlFieldReference(parentAlias, _parentType, childName, _childType) {
-        const child = this.sqlMaybeQuoteIdentifier(childName);
+        const child = this.sqlQuoteIdentifier(childName);
         return `${parentAlias}.${child}`;
     }
     sqlUnnestPipelineHead(isSingleton, sourceSQLExpression) {
@@ -223,9 +255,6 @@ ${(0, utils_1.indent)(sql)}
     sqlSelectAliasAsStruct(alias) {
         return `(SELECT AS STRUCT ${alias}.*)`;
     }
-    sqlMaybeQuoteIdentifier(identifier) {
-        return '`' + identifier + '`';
-    }
     sqlNowExpr() {
         return 'CURRENT_TIMESTAMP()';
     }
@@ -358,14 +387,6 @@ ${(0, utils_1.indent)(sql)}
         }
         return tableSQL;
     }
-    sqlLiteralString(literal) {
-        const noVirgule = literal.replace(/\\/g, '\\\\');
-        return "'" + noVirgule.replace(/'/g, "\\'") + "'";
-    }
-    sqlLiteralRegexp(literal) {
-        const noVirgule = literal.replace(/\\/g, '\\\\');
-        return "'" + noVirgule.replace(/'/g, "\\'") + "'";
-    }
     getDialectFunctionOverrides() {
         return (0, functions_1.expandOverrideMap)(function_overrides_1.STANDARDSQL_MALLOY_STANDARD_OVERLOADS);
     }
@@ -432,7 +453,7 @@ ${(0, utils_1.indent)(sql)}
         const ents = [];
         for (const [name, val] of Object.entries(lit.kids)) {
             const expr = val.sql || 'internal-error-literal-record';
-            ents.push(`${expr} AS ${this.sqlMaybeQuoteIdentifier(name)}`);
+            ents.push(`${expr} AS ${this.sqlQuoteIdentifier(name)}`);
         }
         return `STRUCT(${ents.join(',')})`;
     }