rails_ops 1.7.7 → 1.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dcc75b6ab31d484ef579cb73510e759c4b5f85074a491954b991648e9c9d678a
-  data.tar.gz: 6c1b1fec40de9cc92ac28b417acd33cc7ca9a61d936a3ecef9b9131758005cd2
+  metadata.gz: d983d20a0a0bf3e1b7e967d0dbd16aec64f253c8a7a12e7c6b72f9f6f676b604
+  data.tar.gz: 00a7b268b2337ba5b2cf57855b9d611a7c9dbe3492cd9484345ad1f7956b2b27
 SHA512:
-  metadata.gz: 369d58ccd929715e12b62cea2b38e42bd629accf5f1b1ed7c00bd9b4e8e58eb947b999c7410959262c647052faac33c3ae84cf502cf1d724954c3e8c51189690
-  data.tar.gz: 7eddc5780ab3daa372af54140b03d7c80d51d6bb2465b6022e3b1eb4a605af11e97b47f9a681be79fe8c12b8f60e0abc87eee42cda5e86dd51e2885a3efaadc5
+  metadata.gz: 9a50ef1e82a5a82e1adddb76435389babd2f34a6fe3e4f80c06bf3ec061b26235fa80541cfbfdab6fdc43f253245b388b1b376d8032e090c510fe1a4f2edc591
+  data.tar.gz: fca76d3c3c65cc564744596dd298e8a52e69320cd0eb5952750e689dc879b21dce5dab13dd6372456108ea367aa536a62e40a58d4c069af5ab78eb214167c3be

data/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## 1.8.0 (2026-05-07)
+
+* `Operation#run` (non-bang) now wraps the call to `run!` in a
+  SAVEPOINT whenever a database transaction is already open. This
+  ensures that partial writes performed before a validation error are
+  rolled back even though `run` swallows the error and returns
+  `false`. `run_sub` benefits from the same protection transitively.
+  Behavior outside of an open transaction is unchanged, and the
+  behavior of `run!` / `run_sub!` is unchanged.
+* Deprecate `with_rollback_on_exception`. The helper now emits an
+  `ActiveSupport::Deprecation` warning via `RailsOps.deprecator` and
+  will be removed in RailsOps 2.0. The savepoint added to `run` makes
+  it obsolete for the common "save then do more work" pattern. For
+  non-validation errors that should trigger a rollback, raise
+  `RailsOps::Exceptions::RollbackRequired` directly.
+
+## 1.7.8 (2026-03-12)
+
+* Add practical examples throughout README covering non-model operations,
+  find-or-create patterns, state validation policies, sub-operation
+  composition, complete CRUD sets, model defaults, custom authorization
+  actions, virtual datetime fields, operation inheritance, and load
+  operations for show pages.
+
 ## 1.7.7 (2026-02-24)
 
 * Fix `find_model_relation` to merge the returned relation's conditions

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    rails_ops (1.7.7)
+    rails_ops (1.8.0)
       active_type (>= 1.3.0)
       minitest
       rails (> 4)
@@ -132,7 +132,7 @@ GEM
     mini_mime (1.1.5)
     minitest (5.27.0)
     mutex_m (0.3.0)
-    net-imap (0.4.20)
+    net-imap (0.4.24)
       date
       net-protocol
     net-pop (0.1.2)
@@ -158,8 +158,8 @@ GEM
     psych (5.1.2)
       stringio
     racc (1.8.1)
-    rack (3.2.5)
-    rack-session (2.1.1)
+    rack (3.2.6)
+    rack-session (2.1.2)
       base64 (>= 0.1.0)
       rack (>= 3.0.0)
     rack-test (2.1.0)
@@ -241,7 +241,7 @@ GEM
     sqlite3 (1.6.2-x86_64-linux)
     stringio (3.1.0)
     thor (1.3.1)
-    timeout (0.6.0)
+    timeout (0.6.1)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
     unicode-display_width (3.1.4)

data/README.md

@@ -245,6 +245,78 @@ end
 puts Operations::GenerateHelloWorld.run!(name: 'John Doe').result
 ```
 
+#### Practical Example: Non-Model Business Logic Operation
+
+Operations don't have to involve models. Use the base `RailsOps::Operation`
+class for business logic, background tasks, or service calls:
+
+```ruby
+module Operations::Cache
+  class Rebuild < RailsOps::Operation
+    schema3 do
+      boo? :include_archived, default: false
+      boo? :rebuild_counters, default: true
+    end
+
+    # Internal use only (called from background jobs)
+    without_authorization
+
+    protected
+
+    def perform
+      rebuild_counters if osparams.rebuild_counters
+      rebuild_search_index
+    end
+
+    private
+
+    def rebuild_counters
+      Category.find_each do |category|
+        Category.reset_counters(category.id, :articles)
+      end
+    end
+
+    def rebuild_search_index
+      Article.where(indexed: false).find_each(&:update_search_index!)
+    end
+  end
+end
+```
+
+#### Practical Example: Find-or-Create Pattern
+
+A common pattern for idempotent operations that either find an existing record
+or create a new one. Since this doesn't fit neatly into `Model::Create` or
+`Model::Load`, use the base `RailsOps::Operation` and expose the result via
+`attr_reader`:
+
+```ruby
+module Operations::Tag
+  class FindOrCreate < RailsOps::Operation
+    schema3 do
+      str! :name
+      str? :color
+    end
+
+    without_authorization
+
+    attr_reader :model
+
+    protected
+
+    def perform
+      @model = ::Tag.find_or_create_by!(name: osparams.name) do |tag|
+        tag.color = osparams.color || '#000000'
+      end
+    rescue ActiveRecord::RecordNotUnique
+      # Race condition: another process created the record between
+      # our SELECT and INSERT. Just find the existing one.
+      @model = ::Tag.find_by!(name: osparams.name)
+    end
+  end
+end
+```
+
 ## Params Handling
 
 ### Passing Params to Operations
@@ -526,6 +598,51 @@ In this case the model is not yet set. That will happen later in the `:on_init`
 It is also important to note, that this block is
 not guaranteed to be run first in the chain, if multiple blocks have set `:prepend_action` to true.
 
+#### Practical Example: State Validation Policies
+
+Use policies to validate preconditions based on the model's state. This is
+particularly useful in model operations where you want to reject the operation
+before `perform` runs:
+
+```ruby
+module Operations::Article
+  class Publish < RailsOps::Operation::Model::Update
+    schema3 do
+      int! :id
+    end
+
+    model ::Article
+
+    # Ensure the article is still a draft before publishing.
+    # Runs at instantiation time (i.e. when the model is loaded).
+    policy :on_init do
+      unless model.draft?
+        fail 'Only draft articles can be published.'
+      end
+    end
+
+    # Ensure the article has required content.
+    # Runs just before perform is called.
+    policy do
+      if model.body.blank?
+        fail RailsOps::Exceptions::ValidationFailed,
+             'Article body cannot be empty.'
+      end
+    end
+
+    protected
+
+    def perform
+      model.status = 'published'
+      model.published_at = Time.current
+      super
+    end
+  end
+end
+```
+
+Use `:on_init` for checks that should prevent even *displaying* a form, and
+`:before_perform` (the default) for checks that should prevent *submitting* it.
 
 ## Calling Sub-Operations
 
@@ -579,6 +696,47 @@ catches any validation errors and re-throws them as
 {RailsOps::Exceptions::SubOpValidationFailed} which is not caught by the
 surrounding op.
 
+#### Practical Example: Composing Operations
+
+Here is a realistic example of an operation that uses sub-operations to compose
+a complex workflow:
+
+Building on the `Article::Publish` example from the *Policies* section, here
+is a version that also triggers sub-operations after publishing:
+
+```ruby
+module Operations::Article
+  class PublishWithNotification < RailsOps::Operation::Model::Update
+    schema3 do
+      int! :id
+    end
+
+    model ::Article
+
+    protected
+
+    def perform
+      model.status = 'published'
+      model.published_at = Time.current
+      super # Save the article
+
+      run_sub! Operations::Cache::Rebuild, rebuild_counters: true
+      run_sub! Operations::Notification::Send,
+               template: 'article_published',
+               record_id: model.id,
+               record_type: 'Article'
+    end
+  end
+end
+```
+
+Validation errors raised by either sub-operation propagate up — `run_sub!`
+re-raises any `validation_errors` as
+`RailsOps::Exceptions::SubOpValidationFailed`, which escapes the parent's
+`run` and rolls back the surrounding transaction. If the parent is invoked
+via `run` (non-bang), the savepoint added in 1.8.0 ensures `super`'s save
+is rolled back too. See section *Transactions* for more details.
+
 ## Contexts
 
 Most operations make use of generic parameters like the current user or an
@@ -1046,7 +1204,6 @@ Rails Ops offers multiple ways of disabling authorization:
   end
   ```
 
-
 ## Model Operations
 
 One of the key features of RailsOps is model operations. RailsOps provides
@@ -1360,6 +1517,124 @@ end
 As this base class is very minimalistic, it is recommended to fully read and
 comprehend its source code.
 
+### Practical Example: Complete CRUD Operation Set
+
+Here is a complete, minimal CRUD set for a single model using `schema3`:
+
+```ruby
+# app/operations/category/load.rb
+module Operations::Category
+  class Load < RailsOps::Operation::Model::Load
+    schema3 do
+      int! :id
+    end
+
+    model ::Category
+  end
+end
+
+# app/operations/category/create.rb
+module Operations::Category
+  class Create < RailsOps::Operation::Model::Create
+    schema3 do
+      hsh? :category do
+        str? :name
+        str? :description
+      end
+    end
+
+    model ::Category
+  end
+end
+
+# app/operations/category/update.rb
+module Operations::Category
+  class Update < RailsOps::Operation::Model::Update
+    schema3 do
+      int! :id
+      hsh? :category do
+        str? :name
+        str? :description
+      end
+    end
+
+    model ::Category
+  end
+end
+
+# app/operations/category/destroy.rb
+module Operations::Category
+  class Destroy < RailsOps::Operation::Model::Destroy
+    schema3 do
+      int! :id
+    end
+
+    model ::Category
+  end
+end
+```
+
+For `Create` and `Update`, parameter extraction happens automatically: the
+params nested under the model's `param_key` (`:category`) are assigned to the
+model. No `perform` method is needed — the base class handles `save!`.
+
+### Practical Example: Setting Defaults on Create
+
+Override `build_model` to set default values or assign associations that aren't
+part of the user's input:
+
+```ruby
+module Operations::Article
+  class Create < RailsOps::Operation::Model::Create
+    schema3 do
+      hsh? :article do
+        str? :title
+        str? :body
+        int? :category_id
+      end
+    end
+
+    model ::Article
+
+    protected
+
+    def build_model
+      super # Builds the model and assigns params from :article key
+      model.author = context.user
+      model.status = 'draft'
+    end
+  end
+end
+```
+
+`super` in `build_model` creates a new model instance and assigns the
+attributes from params. After `super`, you can set additional attributes.
+
+### Practical Example: Overriding `build_model` in Update
+
+In `Update` operations, `build_model` first loads the record (via `Load`), then
+assigns the params. Override it to modify the model after loading:
+
+```ruby
+module Operations::Token
+  class MarkUsed < RailsOps::Operation::Model::Update
+    schema3 do
+      int! :id
+    end
+
+    model ::Token
+    without_authorization
+
+    protected
+
+    def build_model
+      super # Loads the record and assigns params
+      model.used_at = Time.current
+    end
+  end
+end
+```
+
 ### Including Associated Records
 
 Normally, when inheriting from `RailsOps::Operation::Model::Load` (as well as from the
@@ -1388,6 +1663,46 @@ class Operations::User::Load < RailsOps::Operation::Model::Load
 end
 ```
 
+#### Practical Example: Load Operation for Show Pages
+
+A common pattern for "show" pages: a `Load` operation that provides helper
+methods for loading related data in the view:
+
+```ruby
+module Operations::Frontend::Articles
+  class Show < RailsOps::Operation::Model::Load
+    model ::Article
+    model_includes [:tags, :category, { comments: :author }]
+
+    def recent_comments(limit: 10)
+      model.comments.order(created_at: :desc).limit(limit)
+    end
+
+    def related_articles
+      @related_articles ||= ::Article
+        .where(category_id: model.category_id)
+        .where.not(id: model.id)
+        .limit(5)
+    end
+
+    protected
+
+    # Load operations don't need perform logic, but the base class
+    # raises NotImplementedError, so we override with a no-op.
+    def perform; end
+  end
+end
+```
+
+In the controller:
+
+```ruby
+def show
+  op Operations::Frontend::Articles::Show
+  # In the view: op.model, op.recent_comments, op.related_articles
+end
+```
+
 ### Parameter Extraction for Create and Update
 
 As mentioned before, the `Create` and `Update` base classes provide an
@@ -1483,6 +1798,43 @@ class Operations::User::Update < RailsOps::Operation::Model::Update
 end
 ```
 
+#### Practical Example: Custom Authorization Actions
+
+For operations beyond standard CRUD (e.g., archiving, classifying, publishing),
+specify custom authorization actions:
+
+```ruby
+module Operations::Article
+  class Archive < RailsOps::Operation::Model::Update
+    schema3 do
+      int! :id
+    end
+
+    load_model_authorization_action :read
+    model_authorization_action :archive
+
+    model ::Article
+
+    protected
+
+    def perform
+      model.archived = true
+      model.archived_at = Time.current
+      model.archived_by = context.user
+      super
+    end
+  end
+end
+```
+
+In your ability file, define the custom action:
+
+```ruby
+can :archive, Article do |article|
+  article.author_id == user.id || user.admin?
+end
+```
+
 ### Model Nesting
 
 Using active record, multiple nested models can be saved at once by using
@@ -1738,6 +2090,51 @@ class Operations::Order::Checkout < RailsOps::Operation::Model::Update
 end
 ```
 
+#### Practical Example: Virtual Datetime Fields for Forms
+
+A very common use case is adding virtual datetime attributes for form inputs
+that need to be transformed before saving:
+
+```ruby
+module Operations::Event
+  class Create < RailsOps::Operation::Model::Create
+    schema3 do
+      hsh? :event do
+        str? :title
+        str? :virtual_start_datetime
+        str? :virtual_end_datetime
+        boo? :all_day
+      end
+    end
+
+    model ::Event do
+      attribute :virtual_start_datetime, :datetime
+      attribute :virtual_end_datetime, :datetime
+
+      validates :virtual_start_datetime, presence: true, unless: :all_day?
+      validates :virtual_end_datetime, presence: true, unless: :all_day?
+      validates :virtual_end_datetime,
+                comparison: { greater_than_or_equal_to: :virtual_start_datetime },
+                if: -> { !all_day? && virtual_start_datetime.present? }
+    end
+
+    protected
+
+    def build_model
+      super
+
+      if model.all_day?
+        model.start_date = model.virtual_start_datetime&.beginning_of_day
+        model.end_date = model.virtual_end_datetime&.end_of_day
+      else
+        model.start_date = model.virtual_start_datetime
+        model.end_date = model.virtual_end_datetime
+      end
+    end
+  end
+end
+```
+
 ### Combining Real and Virtual Models
 
 You can create operations that work with both persisted and virtual data:
@@ -1811,28 +2208,67 @@ end
 Typically though, transactions are opened on a higher level and outside of
 operations, e.g. in controller methods.
 
-### Rollback on Exception
+### Automatic Savepoint Around `run`
 
-When using `run` (without bang), validation errors are caught and may not cause
-transaction rollback. The `with_rollback_on_exception` helper ensures that
-exceptions within its block are re-raised as `RollbackRequired`, which will
-cause a rollback even when using `run`:
+Since version 1.8.0, `RailsOps::Operation#run` (the non-bang variant)
+automatically wraps the operation in a SAVEPOINT whenever a database
+transaction is already open. If the operation raises a validation error
+partway through `perform`, the savepoint is rolled back before `run`
+catches the error and returns `false`. This eliminates the most common
+reason to reach for `with_rollback_on_exception`.
 
 ```ruby
-class Operations::User::ComplexUpdate < RailsOps::Operation::Model::Update
+class Operations::User::Create < RailsOps::Operation::Model::Create
   def perform
-    ActiveRecord::Base.transaction do
-      super # Saves the user
+    super # Saves the user
+    something_else! # If this raises ActiveRecord::RecordInvalid, the
+                    # save above is rolled back automatically when the
+                    # operation is invoked through `run`.
+  end
+end
 
-      # Without with_rollback_on_exception, validation errors here won't
-      # roll back the transaction when the operation is called with run
-      with_rollback_on_exception do
-        model.profile.bio = params[:bio]
-        model.profile.save! # If this fails, transaction is rolled back
+# Caller (controller, job, etc.):
+ActiveRecord::Base.transaction do
+  if Operations::User::Create.run(user: { name: 'Alice' })
+    # success path
+  else
+    # validation error — partial writes have already been rolled back
+  end
+end
+```
 
-        model.settings.notifications = params[:notifications]
-        model.settings.save! # If this fails, transaction is rolled back
-      end
+A savepoint is only created if a transaction is already open at the time
+of the call. Without an outer transaction (rake tasks, console sessions,
+some background jobs), `run` calls `run!` directly and behavior is
+unchanged: the caller is expected to open a transaction if it wants
+atomicity. `run!` itself is never wrapped — exceptions propagate naturally
+and the surrounding transaction (if any) rolls back.
+
+`run_sub` (non-bang) benefits from the same protection transitively, since
+it delegates to `.run` on the sub-operation.
+
+### Rollback on Exception (Non-Validation Errors)
+
+The savepoint above only protects against **validation errors**
+(`RailsOps::Exceptions::ValidationFailed` and
+`ActiveRecord::RecordInvalid`). For other `StandardError` subclasses that
+should also trigger a rollback when `run` is used, the
+`with_rollback_on_exception` helper re-raises them as
+`RailsOps::Exceptions::RollbackRequired`, which is not part of
+`validation_errors` and therefore propagates up through `run` and rolls
+back the surrounding transaction:
+
+```ruby
+class Operations::User::ComplexUpdate < RailsOps::Operation::Model::Update
+  def perform
+    super # Saves the user — validation errors here are handled by the
+          # automatic savepoint in `run`.
+
+    with_rollback_on_exception do
+      ExternalApi.call!(model) # raises a custom StandardError on failure;
+                               # converted into RollbackRequired so the
+                               # outer transaction rolls back even when
+                               # the operation is invoked via `run`.
     end
   end
 end
@@ -1851,7 +2287,7 @@ end
 ```
 
 **Important**: `with_rollback_on_exception` only works within an existing
-transaction. It doesn't create a transaction - it just ensures exceptions
+transaction. It doesn't create a transaction — it just ensures exceptions
 cause rollback:
 
 ```ruby
@@ -1861,7 +2297,9 @@ class Operations::Order::Process < RailsOps::Operation::Model::Update
     super # Order is saved and committed in its own transaction
 
     with_rollback_on_exception do
-      model.line_items.each { |item| item.update!(status: 'processed') }
+      ExternalApi.charge!(model) # Raises a custom StandardError on failure;
+                                 # the order has already been committed and
+                                 # cannot be rolled back.
     end
   end
 end
@@ -1870,10 +2308,13 @@ end
 class Operations::Order::Process < RailsOps::Operation::Model::Update
   def perform
     ActiveRecord::Base.transaction do
-      super # Order is saved
+      super # Order is saved within the surrounding transaction
 
       with_rollback_on_exception do
-        model.line_items.each { |item| item.update!(status: 'processed') }
+        ExternalApi.charge!(model) # Custom StandardError is converted into
+                                   # RollbackRequired, which propagates
+                                   # through `run` and rolls back the
+                                   # transaction including `super`.
       end
     end
   end
@@ -1923,9 +2364,13 @@ complete.
 
 ### Important Notes on Transactions
 
-1. **Validation Errors**: When using `run` (without bang), validation errors
-   are caught and won't roll back the transaction. Use `run!` for
-   sub-operations to ensure transaction rollback on validation errors.
+1. **Validation Errors**: When `run` (without bang) is called inside an
+   open transaction, RailsOps wraps the operation in a SAVEPOINT so that
+   any partial writes are rolled back before the caught validation error
+   is converted into a `false` return value. `run_sub` benefits from the
+   same protection. Use `run!` / `run_sub!` when you want validation
+   errors to propagate and roll back the surrounding transaction
+   directly.
 
 2. **External Services**: Be careful when calling external services within
    transactions. Long-running external calls can cause database locks:
@@ -2127,6 +2572,103 @@ sub-operations, see section *Calling sub-operations* for more information.
 
 ## Operation Inheritance
 
+Operations support standard Ruby class inheritance. This is useful when multiple
+models share the same operation pattern. Create an abstract base operation and
+then inherit from it for each model:
+
+```ruby
+# app/operations/base/toggle_active.rb
+module Operations::Base
+  class ToggleActive < RailsOps::Operation::Model::Update
+    schema3 do
+      int! :id
+    end
+
+    protected
+
+    def perform
+      model.active = !model.active
+      super
+    end
+  end
+end
+
+# app/operations/category/toggle_active.rb
+module Operations::Category
+  class ToggleActive < Operations::Base::ToggleActive
+    model ::Category
+  end
+end
+
+# app/operations/tag/toggle_active.rb
+module Operations::Tag
+  class ToggleActive < Operations::Base::ToggleActive
+    model ::Tag
+  end
+end
+```
+
+The base class defines the common schema and behavior. Subclasses only need to
+specify the `model`. This avoids duplicating logic across many operations.
+
+Schemas, policies, and authorization settings are all inherited. Subclasses can
+add additional policies or override methods as needed.
+
+### Practical Example: Bulk Insert Operation Base
+
+Another common base class is for bulk insert operations:
+
+```ruby
+module Operations::Base
+  class BulkCreate < RailsOps::Operation
+    BATCH_SIZE = 500
+
+    without_authorization
+
+    protected
+
+    def perform
+      unique_ids = ids_to_insert.uniq
+      return if unique_ids.empty?
+
+      now = Time.current
+
+      unique_ids.each_slice(self.class::BATCH_SIZE) do |batch|
+        records = build_records(batch, now)
+        target_class.insert_all!(records)
+      rescue ActiveRecord::RecordNotUnique
+        # Race condition: filter out already-existing records and retry
+        existing = existing_ids_for(batch)
+        new_records = records.reject { |r| existing.include?(r[id_column]) }
+        target_class.insert_all!(new_records) if new_records.any?
+      end
+    end
+
+    private
+
+    def ids_to_insert
+      fail NotImplementedError
+    end
+
+    def build_records(_batch, _now)
+      fail NotImplementedError
+    end
+
+    def target_class
+      fail NotImplementedError
+    end
+
+    def id_column
+      :id
+    end
+
+    def existing_ids_for(_batch)
+      fail NotImplementedError
+    end
+  end
+end
+```
+
 ## Generators
 
 RailsOps features a generator to easily create a structure for common CRUD-style

data/VERSION

@@ -1 +1 @@
-1.7.7
+1.8.0

data/lib/rails_ops/operation.rb

@@ -14,6 +14,12 @@ class RailsOps::Operation
     Symbol
   ].freeze
 
+  # Tracks which call sites have already emitted the deprecation warning
+  # for {with_rollback_on_exception}. Keyed by `"<path>:<lineno>"` so the
+  # warning fires at most once per call location across the process,
+  # avoiding log spam in long-running servers and per-request hot paths.
+  WITH_ROLLBACK_DEPRECATION_SEEN = Concurrent::Map.new
+
   attr_reader :params
   attr_reader :context
 
@@ -102,8 +108,26 @@ class RailsOps::Operation
 
   # Runs the operation using {run!} but rescues certain exceptions. Returns
   # `true` on success, otherwise `false`.
+  #
+  # If a database transaction is already open when {run} is called, the call
+  # to {run!} is wrapped in a savepoint via
+  # `ActiveRecord::Base.transaction(requires_new: true)`. This ensures that
+  # any database writes performed by the operation are rolled back if a
+  # validation error is raised, even though that error is then caught here
+  # and converted into a `false` return value. This eliminates the most
+  # common reason for using {with_rollback_on_exception}.
+  #
+  # When no transaction is open, behavior is identical to calling {run!}
+  # directly: the caller is responsible for atomicity.
   def run
-    run!
+    if ActiveRecord::Base.connection.transaction_open?
+      ActiveRecord::Base.transaction(requires_new: true) do
+        run!
+      end
+    else
+      run!
+    end
+
     return true
   rescue *validation_errors
     return false
@@ -186,44 +210,37 @@ class RailsOps::Operation
     end
   end
 
-  # Yields the given block and rethrows any possible exception as a
+  # Yields the given block and rethrows any possible `StandardError` as a
   # {RailsOps::Exceptions::RollbackRequired} exception.
   #
-  # For illustration of potential use cases, consider the following example:
+  # @deprecated Since 1.8.0, validation errors raised inside {run} no
+  #   longer leak partial database writes: {run} wraps the call to
+  #   {run!} in a SAVEPOINT whenever an outer transaction is open, so
+  #   any prior `model.save!` is rolled back automatically before
+  #   {run} returns `false`. This helper is therefore obsolete for
+  #   the common "save then do more work" pattern and will be
+  #   removed in RailsOps 2.0.
   #
-  #     class User::Create < RailsOps::Operation::Model::Create
-  #       def perform
-  #         super # Saves the user
+  #   To convert a non-validation `StandardError` into a rollback
+  #   signal that escapes {run}'s rescue, raise
+  #   {RailsOps::Exceptions::RollbackRequired} directly, e.g.
+  #   `fail RailsOps::Exceptions::RollbackRequired, e, e.backtrace`.
   #
-  #         model.some_field = 'some value'
-  #         model.save! # Throws validation error
-  #       end
-  #     end
-  #
-  #     User::Create.run(user: { some: :values })
-  #
-  # Since this operation is run without the bang method, validation errors are
-  # caught and won't result in the transaction beeing rolled back. However, the
-  # `super` call already saved the user while the exception happens only at
-  # the manual call to `model.save!`. Thus the user will still be in the DB,
-  # despite the fact that the second update didn't run.
-  #
-  # The correct example would therefore be:
-  #
-  #     class User::Create < RailsOps::Operation::Model::Create
-  #       def perform
-  #         super # Saves the user
-  #
-  #         with_rollback_on_exception do
-  #           model.some_field = 'some value'
-  #           model.save! # Throws validation error
-  #         end
-  #       end
-  #     end
-  #
-  # This method is one possible solution for issue #28535. There might be a more
-  # elegant and transparent approach as explained in the issue.
+  #   Originally introduced for issue #28535.
   def with_rollback_on_exception(&_block)
+    location = caller_locations(1, 1)&.first
+    location_key = location && "#{location.path}:#{location.lineno}"
+    if location_key.nil? || WITH_ROLLBACK_DEPRECATION_SEEN.put_if_absent(location_key, true).nil?
+      RailsOps.deprecator.warn(
+        '`with_rollback_on_exception` is deprecated and will be removed ' \
+        'in RailsOps 2.0. Validation errors raised inside `run` are now ' \
+        'rolled back automatically via a SAVEPOINT, so this helper is no ' \
+        'longer required for the common "save then do more work" pattern. ' \
+        'For non-validation errors that should trigger a rollback, raise ' \
+        '`RailsOps::Exceptions::RollbackRequired` directly.',
+        caller_locations(1)
+      )
+    end
     yield
   rescue StandardError => e
     fail RailsOps::Exceptions::RollbackRequired, e, e.backtrace

data/lib/rails_ops/railtie.rb

@@ -1,14 +1,16 @@
 module RailsOps
   # @private
   class Railtie < Rails::Railtie
-    initializer 'rails_ops' do |app|
-      # ---------------------------------------------------------------
-      # Register deprecator
-      # ---------------------------------------------------------------
+    # Register the deprecator early so that app-level deprecation config
+    # (`config.active_support.deprecation`,
+    # `config.active_support.report_deprecations`, …) is applied to it.
+    initializer 'rails_ops.deprecator', before: :load_environment_config do |app|
       if app.respond_to?(:deprecators)
         app.deprecators[:rails_ops] = RailsOps.deprecator
       end
+    end
 
+    initializer 'rails_ops' do
       # ---------------------------------------------------------------
       # Load hookup config eagerly at application startup unless
       # in development mode.

data/lib/rails_ops.rb

@@ -1,4 +1,5 @@
 require 'active_type'
+require 'concurrent/map'
 require 'schemacop'
 require 'request_store'
 require 'ostruct'

data/rails_ops.gemspec

@@ -1,20 +1,20 @@
 # -*- encoding: utf-8 -*-
-# stub: rails_ops 1.7.7 ruby lib
+# stub: rails_ops 1.8.0 ruby lib
 
 Gem::Specification.new do |s|
   s.name = "rails_ops".freeze
-  s.version = "1.7.7"
+  s.version = "1.8.0"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0".freeze) if s.respond_to? :required_rubygems_version=
   s.require_paths = ["lib".freeze]
   s.authors = ["Sitrox".freeze]
-  s.date = "2026-02-24"
-  s.files = [".github/workflows/rubocop.yml".freeze, ".github/workflows/ruby.yml".freeze, ".gitignore".freeze, ".releaser_config".freeze, ".rubocop.yml".freeze, "Appraisals".freeze, "CHANGELOG.md".freeze, "CLAUDE.md".freeze, "Gemfile".freeze, "Gemfile.lock".freeze, "LICENSE".freeze, "README.md".freeze, "Rakefile".freeze, "VERSION".freeze, "gemfiles/rails_6.0.gemfile".freeze, "gemfiles/rails_6.1.gemfile".freeze, "gemfiles/rails_7.0.gemfile".freeze, "gemfiles/rails_7.1.gemfile".freeze, "gemfiles/rails_7.2.gemfile".freeze, "gemfiles/rails_8.0.gemfile".freeze, "lib/generators/operation/USAGE".freeze, "lib/generators/operation/operation_generator.rb".freeze, "lib/generators/operation/templates/controller.erb".freeze, "lib/generators/operation/templates/controller_wrapper.erb".freeze, "lib/generators/operation/templates/create.erb".freeze, "lib/generators/operation/templates/destroy.erb".freeze, "lib/generators/operation/templates/load.erb".freeze, "lib/generators/operation/templates/update.erb".freeze, "lib/generators/operation/templates/view.erb".freeze, "lib/rails_ops.rb".freeze, "lib/rails_ops/authorization_backend/abstract.rb".freeze, "lib/rails_ops/authorization_backend/can_can_can.rb".freeze, "lib/rails_ops/configuration.rb".freeze, "lib/rails_ops/context.rb".freeze, "lib/rails_ops/controller_mixin.rb".freeze, "lib/rails_ops/exceptions.rb".freeze, "lib/rails_ops/hooked_job.rb".freeze, "lib/rails_ops/hookup.rb".freeze, "lib/rails_ops/hookup/dsl.rb".freeze, "lib/rails_ops/hookup/dsl_validator.rb".freeze, "lib/rails_ops/hookup/hook.rb".freeze, "lib/rails_ops/log_subscriber.rb".freeze, "lib/rails_ops/mixins.rb".freeze, "lib/rails_ops/mixins/authorization.rb".freeze, "lib/rails_ops/mixins/log_settings.rb".freeze, "lib/rails_ops/mixins/model.rb".freeze, "lib/rails_ops/mixins/model/authorization.rb".freeze, "lib/rails_ops/mixins/model/nesting.rb".freeze, "lib/rails_ops/mixins/param_authorization.rb".freeze, "lib/rails_ops/mixins/policies.rb".freeze, "lib/rails_ops/mixins/require_context.rb".freeze, "lib/rails_ops/mixins/routes.rb".freeze, "lib/rails_ops/mixins/schema_validation.rb".freeze, "lib/rails_ops/mixins/sub_ops.rb".freeze, "lib/rails_ops/model_mixins.rb".freeze, "lib/rails_ops/model_mixins/ar_extension.rb".freeze, "lib/rails_ops/model_mixins/marshalling.rb".freeze, "lib/rails_ops/model_mixins/parent_op.rb".freeze, "lib/rails_ops/model_mixins/sti_fixes.rb".freeze, "lib/rails_ops/model_mixins/virtual_attributes.rb".freeze, "lib/rails_ops/model_mixins/virtual_attributes/virtual_column_wrapper.rb".freeze, "lib/rails_ops/model_mixins/virtual_has_one.rb".freeze, "lib/rails_ops/model_mixins/virtual_model_name.rb".freeze, "lib/rails_ops/operation.rb".freeze, "lib/rails_ops/operation/model.rb".freeze, "lib/rails_ops/operation/model/create.rb".freeze, "lib/rails_ops/operation/model/destroy.rb".freeze, "lib/rails_ops/operation/model/load.rb".freeze, "lib/rails_ops/operation/model/update.rb".freeze, "lib/rails_ops/profiler.rb".freeze, "lib/rails_ops/profiler/node.rb".freeze, "lib/rails_ops/railtie.rb".freeze, "lib/rails_ops/scoped_env.rb".freeze, "lib/rails_ops/virtual_model.rb".freeze, "rails_ops.gemspec".freeze, "test/db/models.rb".freeze, "test/db/schema.rb".freeze, "test/dummy/Rakefile".freeze, "test/dummy/app/assets/config/manifest.js".freeze, "test/dummy/app/assets/images/.keep".freeze, "test/dummy/app/assets/javascripts/application.js".freeze, "test/dummy/app/assets/javascripts/cable.js".freeze, "test/dummy/app/assets/javascripts/channels/.keep".freeze, "test/dummy/app/assets/stylesheets/application.css".freeze, "test/dummy/app/channels/application_cable/channel.rb".freeze, "test/dummy/app/channels/application_cable/connection.rb".freeze, "test/dummy/app/controllers/application_controller.rb".freeze, "test/dummy/app/controllers/concerns/.keep".freeze, "test/dummy/app/controllers/group_controller.rb".freeze, "test/dummy/app/helpers/application_helper.rb".freeze, "test/dummy/app/jobs/application_job.rb".freeze, "test/dummy/app/mailers/application_mailer.rb".freeze, "test/dummy/app/models/ability.rb".freeze, "test/dummy/app/models/animal.rb".freeze, "test/dummy/app/models/application_record.rb".freeze, "test/dummy/app/models/bird.rb".freeze, "test/dummy/app/models/cat.rb".freeze, "test/dummy/app/models/computer.rb".freeze, "test/dummy/app/models/concerns/.keep".freeze, "test/dummy/app/models/cpu.rb".freeze, "test/dummy/app/models/dog.rb".freeze, "test/dummy/app/models/flower.rb".freeze, "test/dummy/app/models/group.rb".freeze, "test/dummy/app/models/mainboard.rb".freeze, "test/dummy/app/models/nightingale.rb".freeze, "test/dummy/app/models/phoenix.rb".freeze, "test/dummy/app/models/user.rb".freeze, "test/dummy/app/views/layouts/application.html.erb".freeze, "test/dummy/app/views/layouts/mailer.html.erb".freeze, "test/dummy/app/views/layouts/mailer.text.erb".freeze, "test/dummy/bin/bundle".freeze, "test/dummy/bin/rails".freeze, "test/dummy/bin/rake".freeze, "test/dummy/bin/setup".freeze, "test/dummy/bin/update".freeze, "test/dummy/bin/yarn".freeze, "test/dummy/config.ru".freeze, "test/dummy/config/application.rb".freeze, "test/dummy/config/boot.rb".freeze, "test/dummy/config/cable.yml".freeze, "test/dummy/config/database.yml".freeze, "test/dummy/config/environment.rb".freeze, "test/dummy/config/environments/development.rb".freeze, "test/dummy/config/environments/production.rb".freeze, "test/dummy/config/environments/test.rb".freeze, "test/dummy/config/hookup.rb".freeze, "test/dummy/config/initializers/application_controller_renderer.rb".freeze, "test/dummy/config/initializers/assets.rb".freeze, "test/dummy/config/initializers/backtrace_silencers.rb".freeze, "test/dummy/config/initializers/cookies_serializer.rb".freeze, "test/dummy/config/initializers/filter_parameter_logging.rb".freeze, "test/dummy/config/initializers/inflections.rb".freeze, "test/dummy/config/initializers/mime_types.rb".freeze, "test/dummy/config/initializers/rails_ops.rb".freeze, "test/dummy/config/initializers/wrap_parameters.rb".freeze, "test/dummy/config/locales/en.yml".freeze, "test/dummy/config/puma.rb".freeze, "test/dummy/config/routes.rb".freeze, "test/dummy/config/secrets.yml".freeze, "test/dummy/config/spring.rb".freeze, "test/dummy/db/schema.rb".freeze, "test/dummy/lib/assets/.keep".freeze, "test/dummy/log/.keep".freeze, "test/dummy/package.json".freeze, "test/dummy/public/404.html".freeze, "test/dummy/public/422.html".freeze, "test/dummy/public/500.html".freeze, "test/dummy/public/apple-touch-icon-precomposed.png".freeze, "test/dummy/public/apple-touch-icon.png".freeze, "test/dummy/public/favicon.ico".freeze, "test/dummy/tmp/.keep".freeze, "test/test_helper.rb".freeze, "test/unit/rails_ops/generators/operation_generator_test.rb".freeze, "test/unit/rails_ops/hookup_test.rb".freeze, "test/unit/rails_ops/mixins/controller_test.rb".freeze, "test/unit/rails_ops/mixins/model/deep_nesting_test.rb".freeze, "test/unit/rails_ops/mixins/model/marshalling_test.rb".freeze, "test/unit/rails_ops/mixins/param_authorization_test.rb".freeze, "test/unit/rails_ops/mixins/policies_test.rb".freeze, "test/unit/rails_ops/operation/auth_test.rb".freeze, "test/unit/rails_ops/operation/model/create_test.rb".freeze, "test/unit/rails_ops/operation/model/destroy_test.rb".freeze, "test/unit/rails_ops/operation/model/load_test.rb".freeze, "test/unit/rails_ops/operation/model/sti_test.rb".freeze, "test/unit/rails_ops/operation/model/update_test.rb".freeze, "test/unit/rails_ops/operation/model_test.rb".freeze, "test/unit/rails_ops/operation/update_lazy_auth_test.rb".freeze, "test/unit/rails_ops/operation_test.rb".freeze, "test/unit/rails_ops/profiler_test.rb".freeze]
+  s.date = "2026-05-07"
+  s.files = [".github/workflows/rubocop.yml".freeze, ".github/workflows/ruby.yml".freeze, ".gitignore".freeze, ".releaser_config".freeze, ".rubocop.yml".freeze, "Appraisals".freeze, "CHANGELOG.md".freeze, "CLAUDE.md".freeze, "Gemfile".freeze, "Gemfile.lock".freeze, "LICENSE".freeze, "README.md".freeze, "Rakefile".freeze, "VERSION".freeze, "gemfiles/rails_6.0.gemfile".freeze, "gemfiles/rails_6.1.gemfile".freeze, "gemfiles/rails_7.0.gemfile".freeze, "gemfiles/rails_7.1.gemfile".freeze, "gemfiles/rails_7.2.gemfile".freeze, "gemfiles/rails_8.0.gemfile".freeze, "lib/generators/operation/USAGE".freeze, "lib/generators/operation/operation_generator.rb".freeze, "lib/generators/operation/templates/controller.erb".freeze, "lib/generators/operation/templates/controller_wrapper.erb".freeze, "lib/generators/operation/templates/create.erb".freeze, "lib/generators/operation/templates/destroy.erb".freeze, "lib/generators/operation/templates/load.erb".freeze, "lib/generators/operation/templates/update.erb".freeze, "lib/generators/operation/templates/view.erb".freeze, "lib/rails_ops.rb".freeze, "lib/rails_ops/authorization_backend/abstract.rb".freeze, "lib/rails_ops/authorization_backend/can_can_can.rb".freeze, "lib/rails_ops/configuration.rb".freeze, "lib/rails_ops/context.rb".freeze, "lib/rails_ops/controller_mixin.rb".freeze, "lib/rails_ops/exceptions.rb".freeze, "lib/rails_ops/hooked_job.rb".freeze, "lib/rails_ops/hookup.rb".freeze, "lib/rails_ops/hookup/dsl.rb".freeze, "lib/rails_ops/hookup/dsl_validator.rb".freeze, "lib/rails_ops/hookup/hook.rb".freeze, "lib/rails_ops/log_subscriber.rb".freeze, "lib/rails_ops/mixins.rb".freeze, "lib/rails_ops/mixins/authorization.rb".freeze, "lib/rails_ops/mixins/log_settings.rb".freeze, "lib/rails_ops/mixins/model.rb".freeze, "lib/rails_ops/mixins/model/authorization.rb".freeze, "lib/rails_ops/mixins/model/nesting.rb".freeze, "lib/rails_ops/mixins/param_authorization.rb".freeze, "lib/rails_ops/mixins/policies.rb".freeze, "lib/rails_ops/mixins/require_context.rb".freeze, "lib/rails_ops/mixins/routes.rb".freeze, "lib/rails_ops/mixins/schema_validation.rb".freeze, "lib/rails_ops/mixins/sub_ops.rb".freeze, "lib/rails_ops/model_mixins.rb".freeze, "lib/rails_ops/model_mixins/ar_extension.rb".freeze, "lib/rails_ops/model_mixins/marshalling.rb".freeze, "lib/rails_ops/model_mixins/parent_op.rb".freeze, "lib/rails_ops/model_mixins/sti_fixes.rb".freeze, "lib/rails_ops/model_mixins/virtual_attributes.rb".freeze, "lib/rails_ops/model_mixins/virtual_attributes/virtual_column_wrapper.rb".freeze, "lib/rails_ops/model_mixins/virtual_has_one.rb".freeze, "lib/rails_ops/model_mixins/virtual_model_name.rb".freeze, "lib/rails_ops/operation.rb".freeze, "lib/rails_ops/operation/model.rb".freeze, "lib/rails_ops/operation/model/create.rb".freeze, "lib/rails_ops/operation/model/destroy.rb".freeze, "lib/rails_ops/operation/model/load.rb".freeze, "lib/rails_ops/operation/model/update.rb".freeze, "lib/rails_ops/profiler.rb".freeze, "lib/rails_ops/profiler/node.rb".freeze, "lib/rails_ops/railtie.rb".freeze, "lib/rails_ops/scoped_env.rb".freeze, "lib/rails_ops/virtual_model.rb".freeze, "rails_ops.gemspec".freeze, "test/db/models.rb".freeze, "test/db/schema.rb".freeze, "test/dummy/Rakefile".freeze, "test/dummy/app/assets/config/manifest.js".freeze, "test/dummy/app/assets/images/.keep".freeze, "test/dummy/app/assets/javascripts/application.js".freeze, "test/dummy/app/assets/javascripts/cable.js".freeze, "test/dummy/app/assets/javascripts/channels/.keep".freeze, "test/dummy/app/assets/stylesheets/application.css".freeze, "test/dummy/app/channels/application_cable/channel.rb".freeze, "test/dummy/app/channels/application_cable/connection.rb".freeze, "test/dummy/app/controllers/application_controller.rb".freeze, "test/dummy/app/controllers/concerns/.keep".freeze, "test/dummy/app/controllers/group_controller.rb".freeze, "test/dummy/app/helpers/application_helper.rb".freeze, "test/dummy/app/jobs/application_job.rb".freeze, "test/dummy/app/mailers/application_mailer.rb".freeze, "test/dummy/app/models/ability.rb".freeze, "test/dummy/app/models/animal.rb".freeze, "test/dummy/app/models/application_record.rb".freeze, "test/dummy/app/models/bird.rb".freeze, "test/dummy/app/models/cat.rb".freeze, "test/dummy/app/models/computer.rb".freeze, "test/dummy/app/models/concerns/.keep".freeze, "test/dummy/app/models/cpu.rb".freeze, "test/dummy/app/models/dog.rb".freeze, "test/dummy/app/models/flower.rb".freeze, "test/dummy/app/models/group.rb".freeze, "test/dummy/app/models/mainboard.rb".freeze, "test/dummy/app/models/nightingale.rb".freeze, "test/dummy/app/models/phoenix.rb".freeze, "test/dummy/app/models/user.rb".freeze, "test/dummy/app/views/layouts/application.html.erb".freeze, "test/dummy/app/views/layouts/mailer.html.erb".freeze, "test/dummy/app/views/layouts/mailer.text.erb".freeze, "test/dummy/bin/bundle".freeze, "test/dummy/bin/rails".freeze, "test/dummy/bin/rake".freeze, "test/dummy/bin/setup".freeze, "test/dummy/bin/update".freeze, "test/dummy/bin/yarn".freeze, "test/dummy/config.ru".freeze, "test/dummy/config/application.rb".freeze, "test/dummy/config/boot.rb".freeze, "test/dummy/config/cable.yml".freeze, "test/dummy/config/database.yml".freeze, "test/dummy/config/environment.rb".freeze, "test/dummy/config/environments/development.rb".freeze, "test/dummy/config/environments/production.rb".freeze, "test/dummy/config/environments/test.rb".freeze, "test/dummy/config/hookup.rb".freeze, "test/dummy/config/initializers/application_controller_renderer.rb".freeze, "test/dummy/config/initializers/assets.rb".freeze, "test/dummy/config/initializers/backtrace_silencers.rb".freeze, "test/dummy/config/initializers/cookies_serializer.rb".freeze, "test/dummy/config/initializers/filter_parameter_logging.rb".freeze, "test/dummy/config/initializers/inflections.rb".freeze, "test/dummy/config/initializers/mime_types.rb".freeze, "test/dummy/config/initializers/rails_ops.rb".freeze, "test/dummy/config/initializers/wrap_parameters.rb".freeze, "test/dummy/config/locales/en.yml".freeze, "test/dummy/config/puma.rb".freeze, "test/dummy/config/routes.rb".freeze, "test/dummy/config/secrets.yml".freeze, "test/dummy/config/spring.rb".freeze, "test/dummy/db/schema.rb".freeze, "test/dummy/lib/assets/.keep".freeze, "test/dummy/log/.keep".freeze, "test/dummy/package.json".freeze, "test/dummy/public/404.html".freeze, "test/dummy/public/422.html".freeze, "test/dummy/public/500.html".freeze, "test/dummy/public/apple-touch-icon-precomposed.png".freeze, "test/dummy/public/apple-touch-icon.png".freeze, "test/dummy/public/favicon.ico".freeze, "test/dummy/tmp/.keep".freeze, "test/test_helper.rb".freeze, "test/unit/rails_ops/generators/operation_generator_test.rb".freeze, "test/unit/rails_ops/hookup_test.rb".freeze, "test/unit/rails_ops/mixins/controller_test.rb".freeze, "test/unit/rails_ops/mixins/model/deep_nesting_test.rb".freeze, "test/unit/rails_ops/mixins/model/marshalling_test.rb".freeze, "test/unit/rails_ops/mixins/param_authorization_test.rb".freeze, "test/unit/rails_ops/mixins/policies_test.rb".freeze, "test/unit/rails_ops/operation/auth_test.rb".freeze, "test/unit/rails_ops/operation/model/create_test.rb".freeze, "test/unit/rails_ops/operation/model/destroy_test.rb".freeze, "test/unit/rails_ops/operation/model/load_test.rb".freeze, "test/unit/rails_ops/operation/model/sti_test.rb".freeze, "test/unit/rails_ops/operation/model/update_test.rb".freeze, "test/unit/rails_ops/operation/model_test.rb".freeze, "test/unit/rails_ops/operation/update_lazy_auth_test.rb".freeze, "test/unit/rails_ops/operation_test.rb".freeze, "test/unit/rails_ops/profiler_test.rb".freeze, "test/unit/rails_ops/railtie_test.rb".freeze]
   s.homepage = "https://github.com/sitrox/rails_ops".freeze
   s.licenses = ["MIT".freeze]
   s.rubygems_version = "3.4.6".freeze
   s.summary = "An operations service layer for rails projects.".freeze
-  s.test_files = ["test/db/models.rb".freeze, "test/db/schema.rb".freeze, "test/dummy/Rakefile".freeze, "test/dummy/app/assets/config/manifest.js".freeze, "test/dummy/app/assets/images/.keep".freeze, "test/dummy/app/assets/javascripts/application.js".freeze, "test/dummy/app/assets/javascripts/cable.js".freeze, "test/dummy/app/assets/javascripts/channels/.keep".freeze, "test/dummy/app/assets/stylesheets/application.css".freeze, "test/dummy/app/channels/application_cable/channel.rb".freeze, "test/dummy/app/channels/application_cable/connection.rb".freeze, "test/dummy/app/controllers/application_controller.rb".freeze, "test/dummy/app/controllers/concerns/.keep".freeze, "test/dummy/app/controllers/group_controller.rb".freeze, "test/dummy/app/helpers/application_helper.rb".freeze, "test/dummy/app/jobs/application_job.rb".freeze, "test/dummy/app/mailers/application_mailer.rb".freeze, "test/dummy/app/models/ability.rb".freeze, "test/dummy/app/models/animal.rb".freeze, "test/dummy/app/models/application_record.rb".freeze, "test/dummy/app/models/bird.rb".freeze, "test/dummy/app/models/cat.rb".freeze, "test/dummy/app/models/computer.rb".freeze, "test/dummy/app/models/concerns/.keep".freeze, "test/dummy/app/models/cpu.rb".freeze, "test/dummy/app/models/dog.rb".freeze, "test/dummy/app/models/flower.rb".freeze, "test/dummy/app/models/group.rb".freeze, "test/dummy/app/models/mainboard.rb".freeze, "test/dummy/app/models/nightingale.rb".freeze, "test/dummy/app/models/phoenix.rb".freeze, "test/dummy/app/models/user.rb".freeze, "test/dummy/app/views/layouts/application.html.erb".freeze, "test/dummy/app/views/layouts/mailer.html.erb".freeze, "test/dummy/app/views/layouts/mailer.text.erb".freeze, "test/dummy/bin/bundle".freeze, "test/dummy/bin/rails".freeze, "test/dummy/bin/rake".freeze, "test/dummy/bin/setup".freeze, "test/dummy/bin/update".freeze, "test/dummy/bin/yarn".freeze, "test/dummy/config.ru".freeze, "test/dummy/config/application.rb".freeze, "test/dummy/config/boot.rb".freeze, "test/dummy/config/cable.yml".freeze, "test/dummy/config/database.yml".freeze, "test/dummy/config/environment.rb".freeze, "test/dummy/config/environments/development.rb".freeze, "test/dummy/config/environments/production.rb".freeze, "test/dummy/config/environments/test.rb".freeze, "test/dummy/config/hookup.rb".freeze, "test/dummy/config/initializers/application_controller_renderer.rb".freeze, "test/dummy/config/initializers/assets.rb".freeze, "test/dummy/config/initializers/backtrace_silencers.rb".freeze, "test/dummy/config/initializers/cookies_serializer.rb".freeze, "test/dummy/config/initializers/filter_parameter_logging.rb".freeze, "test/dummy/config/initializers/inflections.rb".freeze, "test/dummy/config/initializers/mime_types.rb".freeze, "test/dummy/config/initializers/rails_ops.rb".freeze, "test/dummy/config/initializers/wrap_parameters.rb".freeze, "test/dummy/config/locales/en.yml".freeze, "test/dummy/config/puma.rb".freeze, "test/dummy/config/routes.rb".freeze, "test/dummy/config/secrets.yml".freeze, "test/dummy/config/spring.rb".freeze, "test/dummy/db/schema.rb".freeze, "test/dummy/lib/assets/.keep".freeze, "test/dummy/log/.keep".freeze, "test/dummy/package.json".freeze, "test/dummy/public/404.html".freeze, "test/dummy/public/422.html".freeze, "test/dummy/public/500.html".freeze, "test/dummy/public/apple-touch-icon-precomposed.png".freeze, "test/dummy/public/apple-touch-icon.png".freeze, "test/dummy/public/favicon.ico".freeze, "test/dummy/tmp/.keep".freeze, "test/test_helper.rb".freeze, "test/unit/rails_ops/generators/operation_generator_test.rb".freeze, "test/unit/rails_ops/hookup_test.rb".freeze, "test/unit/rails_ops/mixins/controller_test.rb".freeze, "test/unit/rails_ops/mixins/model/deep_nesting_test.rb".freeze, "test/unit/rails_ops/mixins/model/marshalling_test.rb".freeze, "test/unit/rails_ops/mixins/param_authorization_test.rb".freeze, "test/unit/rails_ops/mixins/policies_test.rb".freeze, "test/unit/rails_ops/operation/auth_test.rb".freeze, "test/unit/rails_ops/operation/model/create_test.rb".freeze, "test/unit/rails_ops/operation/model/destroy_test.rb".freeze, "test/unit/rails_ops/operation/model/load_test.rb".freeze, "test/unit/rails_ops/operation/model/sti_test.rb".freeze, "test/unit/rails_ops/operation/model/update_test.rb".freeze, "test/unit/rails_ops/operation/model_test.rb".freeze, "test/unit/rails_ops/operation/update_lazy_auth_test.rb".freeze, "test/unit/rails_ops/operation_test.rb".freeze, "test/unit/rails_ops/profiler_test.rb".freeze]
+  s.test_files = ["test/db/models.rb".freeze, "test/db/schema.rb".freeze, "test/dummy/Rakefile".freeze, "test/dummy/app/assets/config/manifest.js".freeze, "test/dummy/app/assets/images/.keep".freeze, "test/dummy/app/assets/javascripts/application.js".freeze, "test/dummy/app/assets/javascripts/cable.js".freeze, "test/dummy/app/assets/javascripts/channels/.keep".freeze, "test/dummy/app/assets/stylesheets/application.css".freeze, "test/dummy/app/channels/application_cable/channel.rb".freeze, "test/dummy/app/channels/application_cable/connection.rb".freeze, "test/dummy/app/controllers/application_controller.rb".freeze, "test/dummy/app/controllers/concerns/.keep".freeze, "test/dummy/app/controllers/group_controller.rb".freeze, "test/dummy/app/helpers/application_helper.rb".freeze, "test/dummy/app/jobs/application_job.rb".freeze, "test/dummy/app/mailers/application_mailer.rb".freeze, "test/dummy/app/models/ability.rb".freeze, "test/dummy/app/models/animal.rb".freeze, "test/dummy/app/models/application_record.rb".freeze, "test/dummy/app/models/bird.rb".freeze, "test/dummy/app/models/cat.rb".freeze, "test/dummy/app/models/computer.rb".freeze, "test/dummy/app/models/concerns/.keep".freeze, "test/dummy/app/models/cpu.rb".freeze, "test/dummy/app/models/dog.rb".freeze, "test/dummy/app/models/flower.rb".freeze, "test/dummy/app/models/group.rb".freeze, "test/dummy/app/models/mainboard.rb".freeze, "test/dummy/app/models/nightingale.rb".freeze, "test/dummy/app/models/phoenix.rb".freeze, "test/dummy/app/models/user.rb".freeze, "test/dummy/app/views/layouts/application.html.erb".freeze, "test/dummy/app/views/layouts/mailer.html.erb".freeze, "test/dummy/app/views/layouts/mailer.text.erb".freeze, "test/dummy/bin/bundle".freeze, "test/dummy/bin/rails".freeze, "test/dummy/bin/rake".freeze, "test/dummy/bin/setup".freeze, "test/dummy/bin/update".freeze, "test/dummy/bin/yarn".freeze, "test/dummy/config.ru".freeze, "test/dummy/config/application.rb".freeze, "test/dummy/config/boot.rb".freeze, "test/dummy/config/cable.yml".freeze, "test/dummy/config/database.yml".freeze, "test/dummy/config/environment.rb".freeze, "test/dummy/config/environments/development.rb".freeze, "test/dummy/config/environments/production.rb".freeze, "test/dummy/config/environments/test.rb".freeze, "test/dummy/config/hookup.rb".freeze, "test/dummy/config/initializers/application_controller_renderer.rb".freeze, "test/dummy/config/initializers/assets.rb".freeze, "test/dummy/config/initializers/backtrace_silencers.rb".freeze, "test/dummy/config/initializers/cookies_serializer.rb".freeze, "test/dummy/config/initializers/filter_parameter_logging.rb".freeze, "test/dummy/config/initializers/inflections.rb".freeze, "test/dummy/config/initializers/mime_types.rb".freeze, "test/dummy/config/initializers/rails_ops.rb".freeze, "test/dummy/config/initializers/wrap_parameters.rb".freeze, "test/dummy/config/locales/en.yml".freeze, "test/dummy/config/puma.rb".freeze, "test/dummy/config/routes.rb".freeze, "test/dummy/config/secrets.yml".freeze, "test/dummy/config/spring.rb".freeze, "test/dummy/db/schema.rb".freeze, "test/dummy/lib/assets/.keep".freeze, "test/dummy/log/.keep".freeze, "test/dummy/package.json".freeze, "test/dummy/public/404.html".freeze, "test/dummy/public/422.html".freeze, "test/dummy/public/500.html".freeze, "test/dummy/public/apple-touch-icon-precomposed.png".freeze, "test/dummy/public/apple-touch-icon.png".freeze, "test/dummy/public/favicon.ico".freeze, "test/dummy/tmp/.keep".freeze, "test/test_helper.rb".freeze, "test/unit/rails_ops/generators/operation_generator_test.rb".freeze, "test/unit/rails_ops/hookup_test.rb".freeze, "test/unit/rails_ops/mixins/controller_test.rb".freeze, "test/unit/rails_ops/mixins/model/deep_nesting_test.rb".freeze, "test/unit/rails_ops/mixins/model/marshalling_test.rb".freeze, "test/unit/rails_ops/mixins/param_authorization_test.rb".freeze, "test/unit/rails_ops/mixins/policies_test.rb".freeze, "test/unit/rails_ops/operation/auth_test.rb".freeze, "test/unit/rails_ops/operation/model/create_test.rb".freeze, "test/unit/rails_ops/operation/model/destroy_test.rb".freeze, "test/unit/rails_ops/operation/model/load_test.rb".freeze, "test/unit/rails_ops/operation/model/sti_test.rb".freeze, "test/unit/rails_ops/operation/model/update_test.rb".freeze, "test/unit/rails_ops/operation/model_test.rb".freeze, "test/unit/rails_ops/operation/update_lazy_auth_test.rb".freeze, "test/unit/rails_ops/operation_test.rb".freeze, "test/unit/rails_ops/profiler_test.rb".freeze, "test/unit/rails_ops/railtie_test.rb".freeze]
 
   s.specification_version = 4
 

data/test/unit/rails_ops/operation_test.rb

@@ -193,8 +193,168 @@ class RailsOps::OperationTest < ActiveSupport::TestCase
         end
       end
     end.new
-    assert_raises RailsOps::Exceptions::RollbackRequired do
+    RailsOps.deprecator.silence do
+      assert_raises RailsOps::Exceptions::RollbackRequired do
+        op.run
+      end
+    end
+  end
+
+  def test_with_rollback_on_exception_emits_deprecation_warning
+    # Use a fresh call site to bypass the per-process deduplication cache
+    # used by `with_rollback_on_exception`.
+    op = Class.new(RailsOps::Operation) do
+      class_eval(<<~RUBY, __FILE__, __LINE__ + 1)
+        def perform
+          with_rollback_on_exception do
+            # No-op; we only care about the deprecation warning being
+            # emitted on entry.
+          end
+        end
+      RUBY
+    end.new
+
+    messages = []
+    previous_behavior = RailsOps.deprecator.behavior
+    RailsOps.deprecator.behavior = ->(msg, _callstack, _name, _gem) { messages << msg }
+    begin
       op.run
+    ensure
+      RailsOps.deprecator.behavior = previous_behavior
+    end
+
+    assert_match(/with_rollback_on_exception.*deprecated/, messages.join("\n"))
+  end
+
+  def test_with_rollback_on_exception_deduplicates_per_call_site
+    op = Class.new(RailsOps::Operation) do
+      class_eval(<<~RUBY, __FILE__, __LINE__ + 1)
+        def perform
+          with_rollback_on_exception do
+            # No-op
+          end
+        end
+      RUBY
+    end
+
+    messages = []
+    previous_behavior = RailsOps.deprecator.behavior
+    RailsOps.deprecator.behavior = ->(msg, _callstack, _name, _gem) { messages << msg }
+    begin
+      op.new.run
+      op.new.run
+      op.new.run
+    ensure
+      RailsOps.deprecator.behavior = previous_behavior
+    end
+
+    assert_equal 1, messages.size, 'expected the warning to fire once per call site'
+  end
+
+  # When `run` is called inside an outer transaction and the operation does a
+  # save followed by a validation error, the save must be rolled back even
+  # though `run` swallows the error and returns `false`. Without the savepoint
+  # wrapping inside `run`, the partial write would leak into the outer
+  # transaction.
+  def test_run_rolls_back_partial_writes_when_inside_outer_transaction
+    op_class = Class.new(RailsOps::Operation::Model::Create) do
+      model Group
+
+      def perform
+        super
+        fail RailsOps::Exceptions::ValidationFailed, 'post-save check failed'
+      end
+    end
+
+    ActiveRecord::Base.transaction do
+      count_before = Group.count
+      refute op_class.run(group: { name: 'partial', color: 'red' })
+      assert_equal count_before, Group.count, 'expected save to be rolled back'
+    end
+  end
+
+  # `run!` keeps its existing behavior: validation errors propagate, the
+  # savepoint logic in `run` is not on the call path.
+  def test_run_bang_still_raises_inside_transaction
+    op_class = Class.new(RailsOps::Operation::Model::Create) do
+      model Group
+
+      def perform
+        super
+        fail RailsOps::Exceptions::ValidationFailed, 'post-save check failed'
+      end
+    end
+
+    assert_raises RailsOps::Exceptions::ValidationFailed do
+      ActiveRecord::Base.transaction do
+        op_class.run!(group: { name: 'partial', color: 'red' })
+      end
+    end
+  end
+
+  # Successful `run` calls inside a transaction still commit the model save.
+  def test_run_persists_model_on_success_inside_transaction
+    op_class = Class.new(RailsOps::Operation::Model::Create) do
+      model Group
+    end
+
+    ActiveRecord::Base.transaction do
+      count_before = Group.count
+      assert op_class.run(group: { name: 'fine', color: 'green' })
+      assert_equal count_before + 1, Group.count
+    end
+  end
+
+  # `run_sub` (non-bang) delegates to `run`, so a child operation that saves
+  # and then fails validation must not leak partial state into the parent
+  # transaction.
+  def test_run_sub_rolls_back_partial_writes_in_child_op
+    child_op = Class.new(RailsOps::Operation::Model::Create) do
+      model Group
+
+      def perform
+        super
+        fail RailsOps::Exceptions::ValidationFailed, 'post-save check failed'
+      end
+    end
+
+    parent_op = Class.new(RailsOps::Operation) do
+      attr_reader :sub_result
+
+      define_method(:perform) do
+        @sub_result = run_sub(child_op, group: { name: 'child', color: 'blue' })
+      end
+    end
+
+    ActiveRecord::Base.transaction do
+      count_before = Group.count
+      op = parent_op.new
+      op.run!
+      refute op.sub_result, 'expected run_sub to return false on child validation error'
+      assert_equal count_before, Group.count, 'expected child op save to be rolled back'
+    end
+  end
+
+  # The same protection applies when the failing exception is
+  # `ActiveRecord::RecordInvalid` (raised by `model.save!` on a real
+  # model validation failure), which is the more common production case.
+  def test_run_rolls_back_partial_writes_on_active_record_record_invalid
+    op_class = Class.new(RailsOps::Operation::Model::Create) do
+      model Group
+
+      def perform
+        super
+        # Trigger a real ActiveRecord::RecordInvalid on a separate record.
+        invalid = Group.new
+        invalid.errors.add(:base, 'invalid')
+        fail ActiveRecord::RecordInvalid, invalid
+      end
+    end
+
+    ActiveRecord::Base.transaction do
+      count_before = Group.count
+      refute op_class.run(group: { name: 'partial', color: 'red' })
+      assert_equal count_before, Group.count, 'expected save to be rolled back'
     end
   end
 

data/test/unit/rails_ops/railtie_test.rb

@@ -0,0 +1,29 @@
+require 'test_helper'
+
+class RailsOps::RailtieTest < ActiveSupport::TestCase
+  include TestHelper
+
+  def test_deprecator_is_registered_with_rails
+    skip 'Rails.application.deprecators is unavailable on this Rails version' \
+      unless Rails.application.respond_to?(:deprecators)
+
+    registered = Rails.application.deprecators[:rails_ops]
+    assert_same RailsOps.deprecator, registered,
+                'expected RailsOps.deprecator to be registered as Rails.application.deprecators[:rails_ops]'
+  end
+
+  def test_deprecator_honors_silenced_flag_set_via_app_config
+    skip 'Rails.application.deprecators is unavailable on this Rails version' \
+      unless Rails.application.respond_to?(:deprecators)
+
+    previous_silenced = RailsOps.deprecator.silenced
+    begin
+      Rails.application.deprecators.silenced = true
+      assert RailsOps.deprecator.silenced,
+             'expected RailsOps.deprecator to be silenced when ' \
+             'Rails.application.deprecators.silenced = true'
+    ensure
+      Rails.application.deprecators.silenced = previous_silenced
+    end
+  end
+end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: rails_ops
 version: !ruby/object:Gem::Version
-  version: 1.7.7
+  version: 1.8.0
 platform: ruby
 authors:
 - Sitrox
 bindir: bin
 cert_chain: []
-date: 2026-02-24 00:00:00.000000000 Z
+date: 2026-05-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: active_type
@@ -258,6 +258,7 @@ files:
 - test/unit/rails_ops/operation/update_lazy_auth_test.rb
 - test/unit/rails_ops/operation_test.rb
 - test/unit/rails_ops/profiler_test.rb
+- test/unit/rails_ops/railtie_test.rb
 homepage: https://github.com/sitrox/rails_ops
 licenses:
 - MIT
@@ -374,3 +375,4 @@ test_files:
 - test/unit/rails_ops/operation/update_lazy_auth_test.rb
 - test/unit/rails_ops/operation_test.rb
 - test/unit/rails_ops/profiler_test.rb
+- test/unit/rails_ops/railtie_test.rb