@warlock.js/cascade 5.23.1 → 5.24.0

package/esm/writer/database-writer.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"database-writer.mjs","names":[],"sources":["../../../../../../../cascade/src/writer/database-writer.ts"],"sourcesContent":["import { when } from \"@mongez/reinforcements\";\nimport { getSealConfig, v, type ObjectValidator } from \"@warlock.js/seal\";\nimport type {\n  DriverContract,\n  InsertResult,\n  UpdateOperations,\n  UpdateResult,\n} from \"../contracts/database-driver.contract\";\nimport type {\n  WriterContract,\n  WriterOptions,\n  WriterResult,\n} from \"../contracts/database-writer.contract\";\nimport { mergeDriverFields } from \"../model/methods/accessor-methods\";\nimport type { ChildModel, Model } from \"../model/model\";\nimport { enqueueSyncFanout } from \"../sync/sync-fanout\";\nimport { triggerModelEvent } from \"../sync/model-events\";\nimport type { StrictMode } from \"../types\";\nimport { DatabaseWriterValidationError } from \"../validation\";\nimport { afterCommit } from \"../transactions/after-commit\";\nimport type { DataSource } from \"./../data-source/data-source\";\n\n/**\n * Database writer service that orchestrates model persistence.\n *\n * Handles the complete save pipeline:\n * 1. Check for changes (skip if no changes and not new)\n * 2. Emit `saving` event (for data enrichment)\n * 3. Emit `validating` event\n * 4. Validate and cast data via @warlock.js/seal schema\n * 5. Emit `validated` event\n * 6. Generate ID (for new NoSQL records)\n * 7. Emit `creating`/`updating` events\n * 8. Execute insert or update via driver\n * 9. Merge returned data into model\n * 10. Reset dirty tracker and update `isNew` flag\n * 11. Emit `saved` and `created`/`updated` events\n *\n * @example\n * ```typescript\n * const user = new User({ name: \"Alice\", email: \"alice@example.com\" });\n * const writer = new DatabaseWriter(user);\n * await writer.save();\n *\n * console.log(user.get(\"id\")); // 1 (auto-generated)\n * console.log(user.get(\"_id\")); // ObjectId(\"...\")\n *\n * // Update existing record\n * user.set(\"name\", \"Alice Smith\");\n * await writer.save();\n * // Only updates the \"name\" field (partial update)\n *\n * // Silent save (no events)\n * await writer.save({ skipEvents: true });\n * ```\n */\nexport class DatabaseWriter implements WriterContract {\n  /** The model instance being persisted */\n  private readonly model: Model;\n\n  /** Dirty columns an update validation dropped (strip mode); never written. */\n  private readonly unvalidatedColumns = new Set<string>();\n\n  /** Model constructor reference */\n  private readonly ctor: ChildModel<Model>;\n\n  /** Data source containing driver and ID generator */\n  private readonly dataSource: DataSource;\n\n  /** Database driver for executing queries */\n  private readonly driver: DriverContract;\n\n  /** Table/collection name */\n  private readonly table: string;\n\n  /** Primary key field name */\n  private readonly primaryKey: string;\n\n  /** Validation schema (if defined) */\n  private readonly schema?: ObjectValidator;\n\n  /** Strict mode configuration */\n  private readonly strictMode: StrictMode;\n\n  /**\n   * Create a new writer instance for a model.\n   *\n   * @param model - The model instance to persist\n   *\n   * @example\n   * ```typescript\n   * const user = new User({ name: \"Alice\" });\n   * const writer = new DatabaseWriter(user);\n   * await writer.save();\n   * ```\n   */\n  public constructor(model: Model) {\n    this.model = model;\n    this.ctor = model.constructor as ChildModel<Model>;\n    this.dataSource = this.ctor.getDataSource();\n    this.driver = this.dataSource.driver;\n    this.table = this.ctor.table;\n    this.primaryKey = this.ctor.primaryKey;\n    this.schema = this.ctor.schema;\n    this.strictMode = this.ctor.strictMode;\n  }\n\n  /**\n   * Save the model instance to the database.\n   *\n   * @param options - Save options\n   * @returns Result with success status, document, and metadata\n   * @throws {ValidationError} If validation fails\n   */\n  public async save(options: WriterOptions = {}): Promise<WriterResult> {\n    const isInsert = this.model.isNew;\n\n    // 1. Check if model has changes (skip if no changes and not new)\n    if (!isInsert && !this.model.hasChanges()) {\n      return {\n        success: true,\n        document: this.model.data,\n        isNew: false,\n        modifiedCount: 0,\n      };\n    }\n\n    // 2. Emit saving event (before validation for data enrichment)\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"saving\", {\n        isInsert,\n        options,\n        mode: isInsert ? \"insert\" : \"update\",\n      });\n    }\n\n    // 3-4. Execute insert or update (validation happens inside each path)\n    let result: InsertResult | UpdateResult;\n\n    if (isInsert) {\n      result = await this.performInsert(options);\n    } else {\n      await this.validateAndCast(false, options);\n      result = await this.performUpdate(options);\n    }\n\n    // 5. Reset dirty tracker and update isNew flag\n    const changedFields = isInsert ? [] : this.model.getDirtyColumns();\n    this.model.dirtyTracker.reset();\n    this.model.isNew = false;\n\n    // 6. Emit post-save events\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"saved\");\n      await this.model.emitEvent(isInsert ? \"created\" : \"updated\");\n    }\n\n    // 7. Trigger sync operations after COMMIT (inside a transaction they are\n    // queued, so a rolled-back write never fans out). Failures are logged.\n    if (!options.skipSync && !isInsert) {\n      afterCommit(() => this.triggerSync(changedFields));\n    }\n\n    return {\n      success: true,\n      document: this.model.data,\n      isNew: isInsert,\n      modifiedCount: isInsert\n        ? undefined\n        : (result as UpdateResult).modifiedCount,\n    };\n  }\n\n  /**\n   * Validate and cast model data using the schema.\n   *\n   * Updates the model's data in-place with validated/casted values.\n   *\n   * @param isInsert - Whether this is an insert operation\n   * @param options - Save options\n   * @throws {ValidationError} If validation fails\n   * @private\n   */\n  private async validateAndCast(\n    isInsert: boolean,\n    options: WriterOptions,\n  ): Promise<void> {\n    // Emit validating event\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"validating\", {\n        isInsert,\n        options,\n        mode: isInsert ? \"insert\" : \"update\",\n      });\n    }\n\n    // Skip validation if requested or no schema defined\n    if (options.skipValidation || !this.schema) {\n      return;\n    }\n\n    // Whitelist the framework-managed system columns so a model carrying them\n    // (id / _id / timestamps / soft-delete deletedAt) validates cleanly instead\n    // of being stripped (strictMode \"strip\") or rejected (strictMode \"fail\").\n    // `when(...)` adds each timestamp/soft-delete column only when configured\n    // (truthy) — the lazy factory means a disabled column (`false`) never even\n    // builds a bogus schema key.\n    //\n    // The whitelist must apply to BOTH insert and update: on insert a caller may\n    // supply a backdated createdAt (e.g. data migrations / imports), and without\n    // the whitelist strictMode \"strip\" silently drops it before it reaches the\n    // writer, while \"fail\" rejects the whole insert.\n    const systemColumns = {\n      id: v.scalar().optional(),\n      _id: v.any().optional(),\n      ...when(this.ctor.createdAtColumn, () => ({\n        [this.ctor.createdAtColumn as string]: v.date().optional(),\n      })),\n      ...when(this.ctor.updatedAtColumn, () => ({\n        [this.ctor.updatedAtColumn as string]: v.date().optional(),\n      })),\n      ...when(this.ctor.deletedAtColumn, () => ({\n        [this.ctor.deletedAtColumn as string]: v.date().optional(),\n      })),\n    };\n\n    // Clone full schema for insert, partial (dirty keys only) for updates.\n    //\n    // An update validates ONLY the dirty columns and merges back only those\n    // keys: columns the schema does not list (migration-added, withCount, ...)\n    // are never touched, so they can no longer be turned into `$unset`.\n    const dataToValidate: Record<string, unknown> = isInsert\n      ? this.model.data\n      : Object.fromEntries(\n          this.model\n            .getDirtyColumns()\n            .filter(column => column in this.model.data)\n            .map(column => [column, this.model.data[column]]),\n        );\n\n    const validationSchema = isInsert\n      ? this.schema.clone().extend(systemColumns)\n      : this.schema.clone(Object.keys(dataToValidate)).extend(systemColumns);\n\n    // Apply strict mode\n    if (this.strictMode === \"strip\") {\n      validationSchema.stripUnknown();\n    } else if (this.strictMode === \"fail\") {\n      validationSchema.allowUnknown(false);\n    } else if (this.strictMode === \"allow\") {\n      validationSchema.allowUnknown(true);\n    }\n\n    // Run validation\n    const result = await v.validate(validationSchema, dataToValidate, {\n      context: {\n        model: this.model,\n      },\n      ...getSealConfig(),\n    });\n\n    if (!result.isValid) {\n      const error = new DatabaseWriterValidationError(\n        `[${this.model.constructor.name} Model] ${isInsert ? \"Insert\" : \"Update\"} Validation failed`,\n        result.errors,\n      );\n      if (!options.skipEvents) {\n        await this.model.emitEvent(\"validated\", { result, error });\n      }\n      throw error;\n    }\n\n    // Update model data with validated/casted data\n    if (isInsert) {\n      this.model.replaceData(result.data);\n    } else {\n      const validated = result.data as Record<string, unknown>;\n\n      for (const column of Object.keys(dataToValidate)) {\n        if (column in validated) {\n          this.model.set(column, validated[column]);\n        } else {\n          // Dropped by strictMode \"strip\": never write an unvalidated column.\n          this.unvalidatedColumns.add(column);\n        }\n      }\n    }\n\n    // Emit validated event\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"validated\", { result });\n    }\n  }\n\n  /**\n   * Validate, cast and id-generate a not-yet-persisted model for `upsert()`.\n   *\n   * Runs the insert-mode pipeline (schema, casts, strictMode, Mongo `id`) but\n   * does not write; the caller sends the resulting data through the driver.\n   */\n  public async prepareForUpsert(): Promise<void> {\n    await this.validateAndCast(true, {});\n    await this.generateNextId();\n  }\n\n  /**\n   * Perform an insert operation.\n   *\n   * @param options - Save options\n   * @returns Insert result\n   * @private\n   */\n  private async performInsert(options: WriterOptions): Promise<InsertResult> {\n    const dataToInsert = await this.prepareForInsert(options);\n\n    // INSERT: use full validated data\n    let result: InsertResult;\n\n    try {\n      result = await this.driver.insert(this.table, dataToInsert);\n    } catch (error) {\n      throw this.mapUniqueViolation(error, true);\n    }\n\n    // Merge returned data (e.g., generated _id, timestamps)\n    // Note: We use merge here because the result might not include all fields\n    // (e.g., our generated 'id' field), and we don't want to lose them\n    mergeDriverFields(this.model, result.document as Record<string, unknown>);\n\n    // Reset dirty tracker immediately after merge to prevent\n    // database-generated fields (like _id) from being marked as dirty\n    this.model.dirtyTracker.reset();\n\n    return result;\n  }\n\n  /**\n   * Run the insert pipeline (validation, casting, id generation, timestamps,\n   * `validating`/`validated`/`creating` hooks) WITHOUT writing.\n   *\n   * `save()` uses this for its insert path, so bulk inserts and single inserts\n   * cannot drift. The caller is responsible for sending the returned document\n   * to the driver.\n   *\n   * @param options - Save options (e.g. `skipEvents`, `skipValidation`)\n   * @returns The prepared document to insert\n   */\n  public async prepareForInsert(options: WriterOptions = {}): Promise<Record<string, unknown>> {\n    // Validate and cast data\n    await this.validateAndCast(true, options);\n\n    // Generate ID if needed (NoSQL only)\n    await this.generateNextId();\n\n    // Get data to insert (already validated and casted)\n    const dataToInsert = this.model.data;\n\n    // Add createdAt and updatedAt to the data (using resolved column names)\n    // The column names are already resolved through the hierarchy:\n    // Model static property > Database config > Driver defaults > undefined\n    //\n    // Only stamp createdAt when the caller did NOT supply one, so a backdated\n    // value (e.g. data migrations / imports) is honored instead of overwritten.\n    // This mirrors the upsert path's guard. updatedAt is always stamped to\n    // reflect the moment the record is persisted.\n    const createdAtColumn = this.ctor.createdAtColumn;\n\n    if (createdAtColumn && dataToInsert[createdAtColumn] == null) {\n      dataToInsert[createdAtColumn] = new Date();\n    }\n\n    const updatedAtColumn = this.ctor.updatedAtColumn;\n    if (updatedAtColumn) {\n      dataToInsert[updatedAtColumn] = new Date();\n    }\n\n    // Emit creating event\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"creating\");\n    }\n\n    return dataToInsert;\n  }\n\n  /**\n   * Perform an update operation.\n   *\n   * @param options - Save options\n   * @returns Update result\n   * @private\n   */\n  private async performUpdate(options: WriterOptions): Promise<UpdateResult> {\n    // Emit updating event\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"updating\");\n    }\n\n    // Update the updatedAt timestamp (using resolved column name)\n    const updatedAtColumn = this.ctor.updatedAtColumn;\n    if (updatedAtColumn) {\n      this.model.set(updatedAtColumn, new Date());\n    }\n\n    if (options.replace) {\n      const document = await this.driver.replace(\n        this.table,\n        this.buildPrimaryKeyFilter(),\n        this.model.data,\n      );\n\n      if (document) {\n        this.model.replaceData(document as Record<string, unknown>);\n      }\n\n      return { modifiedCount: document ? 1 : 0 };\n    }\n\n    // Build operations from dirty tracker\n    const operations = this.buildUpdateOperations();\n\n    // Nothing left to write once identity columns are excluded — don't hand the\n    // driver an empty update document (MongoDB rejects one).\n    if (Object.keys(operations).length === 0) {\n      return { modifiedCount: 0 };\n    }\n\n    // Execute update with operations\n    try {\n      return await this.driver.update(\n        this.table,\n        this.buildPrimaryKeyFilter(),\n        operations,\n      );\n    } catch (error) {\n      throw this.mapUniqueViolation(error, false);\n    }\n  }\n\n  /**\n   * Map a driver unique-constraint violation (Postgres 23505, MongoDB 11000)\n   * to a field validation error, so a lost `unique` race never surfaces as a\n   * 500. Any other error is returned untouched.\n   */\n  private mapUniqueViolation(error: unknown, isInsert: boolean): unknown {\n    const err = error as\n      | {\n          code?: string | number;\n          detail?: string;\n          keyPattern?: Record<string, unknown>;\n          message?: string;\n        }\n      | undefined;\n\n    if (err?.code !== \"23505\" && err?.code !== 11000 && err?.code !== \"11000\") {\n      return error;\n    }\n\n    let field: string | undefined;\n\n    if (err.keyPattern) {\n      field = Object.keys(err.keyPattern)[0];\n    } else {\n      // Postgres: \"Key (email)=(x) already exists.\"\n      field = /Key \\(([^)]+)\\)=/.exec(err.detail ?? \"\")?.[1]?.split(\",\")[0]?.trim();\n    }\n\n    if (!field) {\n      // Mongo: \"index: email_1 dup key\"\n      field = /index: (\\S+?)_-?1\\b/.exec(err.message ?? \"\")?.[1];\n    }\n\n    return new DatabaseWriterValidationError(\n      `[${this.model.constructor.name} Model] ${isInsert ? \"Insert\" : \"Update\"} Validation failed`,\n      [\n        {\n          type: \"unique\",\n          error: `The ${field ?? \"value\"} must be unique`,\n          input: field ?? \"id\",\n        },\n      ],\n    );\n  }\n\n  /**\n   * Build the filter that pins a write to the row this model was loaded from.\n   *\n   * It reads `model.trustedPrimaryKey` — the value captured when the instance\n   * became persisted — NOT the current value in `model.data`. The current value\n   * is reachable by mass assignment (`model.merge(req.body)`), so deriving the\n   * filter from it let a request body redirect the UPDATE to another document.\n   *\n   * @returns Filter matching the originally loaded record\n   * @private\n   */\n  private buildPrimaryKeyFilter(): Record<string, unknown> {\n    return { [this.primaryKey]: this.model.trustedPrimaryKey };\n  }\n\n  /**\n   * Generate ID for the model if auto-generation is enabled.\n   *\n   * @private\n   */\n  public async generateNextId(): Promise<void> {\n    if (!this.ctor.autoGenerateId || this.model.get(\"id\")) {\n      return;\n    }\n\n    const idGenerator = this.dataSource.idGenerator;\n    if (!idGenerator) {\n      return;\n    }\n\n    // Resolve ID generation options from model configuration\n    const initialId = this.resolveInitialId();\n\n    const incrementIdBy = this.resolveIncrementBy();\n\n    const id = await idGenerator.generateNextId({\n      table: this.table,\n      initialId,\n      incrementIdBy,\n    });\n\n    this.model.set(\"id\", id);\n  }\n\n  /**\n   * Build update operations from the model's dirty tracker.\n   *\n   * Handles both modified fields ($set) and removed fields ($unset).\n   *\n   * @returns Update operations for the driver\n   * @private\n   *\n   * @example\n   * ```typescript\n   * // Model with changes\n   * user.set(\"name\", \"Alice\");\n   * user.unset(\"tempField\");\n   *\n   * const operations = this.buildUpdateOperations();\n   * // {\n   * //   $set: { name: \"Alice\" },\n   * //   $unset: { tempField: 1 }\n   * // }\n   * ```\n   */\n  private buildUpdateOperations(): UpdateOperations {\n    const operations: UpdateOperations = {};\n\n    // Identity columns are never written by an update. The filter pins the row\n    // by its captured primary key, so a dirty `id`/`_id` can only come from\n    // mass assignment or an explicit set() — either way, rewriting the key of\n    // an existing row corrupts identity (and `_id` is immutable in MongoDB).\n    // Changing a primary key is a deliberate operation: use the atomic/raw APIs.\n    const identityColumns = new Set([this.primaryKey, \"id\", \"_id\"]);\n\n    // Get dirty columns (modified fields)\n    const dirtyColumns = this.model\n      .getDirtyColumns()\n      .filter(column => !identityColumns.has(column) && !this.unvalidatedColumns.has(column));\n\n    if (dirtyColumns.length > 0) {\n      operations.$set = {};\n      for (const column of dirtyColumns) {\n        const value = this.model.get(column);\n        if (value === undefined) continue;\n\n        operations.$set[column] = this.model.get(column);\n      }\n    }\n\n    // Get removed columns\n    const removedColumns = this.model\n      .getRemovedColumns()\n      .filter(column => !identityColumns.has(column));\n\n    if (removedColumns.length > 0) {\n      operations.$unset = {};\n      for (const column of removedColumns) {\n        operations.$unset[column] = 1;\n      }\n    }\n\n    return operations;\n  }\n\n  /**\n   * Resolve the initial ID from model configuration.\n   *\n   * Priority:\n   * 1. Model.initialId (explicit value)\n   * 2. Model.randomInitialId (random or function)\n   * 3. Default: 1\n   *\n   * @returns The initial ID value\n   * @private\n   */\n  private resolveInitialId(): number {\n    if (this.ctor.initialId) {\n      return this.ctor.initialId;\n    }\n\n    if (this.ctor.randomInitialId) {\n      return typeof this.ctor.randomInitialId === \"function\"\n        ? this.ctor.randomInitialId()\n        : this.randomInt(10000, 499999);\n    }\n\n    return 1; // Default initial ID\n  }\n\n  /**\n   * Resolve the increment value from model configuration.\n   *\n   * Priority:\n   * 1. Model.incrementIdBy (explicit value)\n   * 2. Model.randomIncrement (random or function)\n   * 3. Default: 1\n   *\n   * @returns The increment value\n   * @private\n   */\n  private resolveIncrementBy(): number {\n    if (this.ctor.randomIncrement) {\n      return typeof this.ctor.randomIncrement === \"function\"\n        ? this.ctor.randomIncrement()\n        : this.randomInt(1, 10);\n    }\n\n    if (this.ctor.incrementIdBy) {\n      return this.ctor.incrementIdBy;\n    }\n\n    return 1; // Default increment\n  }\n\n  /**\n   * Generate a random integer between min and max (inclusive).\n   *\n   * @param min - Minimum value\n   * @param max - Maximum value\n   * @returns Random integer\n   * @private\n   */\n  private randomInt(min: number, max: number): number {\n    return Math.floor(Math.random() * (max - min + 1)) + min;\n  }\n\n  /**\n   * Trigger sync operations after successful save.\n   *\n   * Emits a model.updated event that ModelSyncOperation listens to.\n   * The sync is handled by registered sync operations, not directly here.\n   *\n   * @param changedFields - Fields that were changed (for filtering)\n   * @private\n   */\n  private triggerSync(changedFields: string[]): void {\n    enqueueSyncFanout({\n      sourceModel: this.ctor.name,\n      operation: \"update\",\n      execute: () => triggerModelEvent(this.ctor, \"updated\", this.model, changedFields),\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwDA,IAAa,iBAAb,MAAsD;;CAEpD,AAAiB;;CAGjB,AAAiB,qCAAqB,IAAI,IAAY;;CAGtD,AAAiB;;CAGjB,AAAiB;;CAGjB,AAAiB;;CAGjB,AAAiB;;CAGjB,AAAiB;;CAGjB,AAAiB;;CAGjB,AAAiB;;;;;;;;;;;;;CAcjB,AAAO,YAAY,OAAc;EAC/B,KAAK,QAAQ;EACb,KAAK,OAAO,MAAM;EAClB,KAAK,aAAa,KAAK,KAAK,cAAc;EAC1C,KAAK,SAAS,KAAK,WAAW;EAC9B,KAAK,QAAQ,KAAK,KAAK;EACvB,KAAK,aAAa,KAAK,KAAK;EAC5B,KAAK,SAAS,KAAK,KAAK;EACxB,KAAK,aAAa,KAAK,KAAK;CAC9B;;;;;;;;CASA,MAAa,KAAK,UAAyB,CAAC,GAA0B;EACpE,MAAM,WAAW,KAAK,MAAM;EAG5B,IAAI,CAAC,YAAY,CAAC,KAAK,MAAM,WAAW,GACtC,OAAO;GACL,SAAS;GACT,UAAU,KAAK,MAAM;GACrB,OAAO;GACP,eAAe;EACjB;EAIF,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,UAAU;GACnC;GACA;GACA,MAAM,WAAW,WAAW;EAC9B,CAAC;EAIH,IAAI;EAEJ,IAAI,UACF,SAAS,MAAM,KAAK,cAAc,OAAO;OACpC;GACL,MAAM,KAAK,gBAAgB,OAAO,OAAO;GACzC,SAAS,MAAM,KAAK,cAAc,OAAO;EAC3C;EAGA,MAAM,gBAAgB,WAAW,CAAC,IAAI,KAAK,MAAM,gBAAgB;EACjE,KAAK,MAAM,aAAa,MAAM;EAC9B,KAAK,MAAM,QAAQ;EAGnB,IAAI,CAAC,QAAQ,YAAY;GACvB,MAAM,KAAK,MAAM,UAAU,OAAO;GAClC,MAAM,KAAK,MAAM,UAAU,WAAW,YAAY,SAAS;EAC7D;EAIA,IAAI,CAAC,QAAQ,YAAY,CAAC,UACxB,kBAAkB,KAAK,YAAY,aAAa,CAAC;EAGnD,OAAO;GACL,SAAS;GACT,UAAU,KAAK,MAAM;GACrB,OAAO;GACP,eAAe,WACX,SACC,OAAwB;EAC/B;CACF;;;;;;;;;;;CAYA,MAAc,gBACZ,UACA,SACe;EAEf,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,cAAc;GACvC;GACA;GACA,MAAM,WAAW,WAAW;EAC9B,CAAC;EAIH,IAAI,QAAQ,kBAAkB,CAAC,KAAK,QAClC;EAcF,MAAM,gBAAgB;GACpB,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS;GACxB,KAAK,EAAE,IAAI,CAAC,CAAC,SAAS;GACtB,GAAG,KAAK,KAAK,KAAK,wBAAwB,GACvC,KAAK,KAAK,kBAA4B,EAAE,KAAK,CAAC,CAAC,SAAS,EAC3D,EAAE;GACF,GAAG,KAAK,KAAK,KAAK,wBAAwB,GACvC,KAAK,KAAK,kBAA4B,EAAE,KAAK,CAAC,CAAC,SAAS,EAC3D,EAAE;GACF,GAAG,KAAK,KAAK,KAAK,wBAAwB,GACvC,KAAK,KAAK,kBAA4B,EAAE,KAAK,CAAC,CAAC,SAAS,EAC3D,EAAE;EACJ;EAOA,MAAM,iBAA0C,WAC5C,KAAK,MAAM,OACX,OAAO,YACL,KAAK,MACF,gBAAgB,CAAC,CACjB,QAAO,WAAU,UAAU,KAAK,MAAM,IAAI,CAAC,CAC3C,KAAI,WAAU,CAAC,QAAQ,KAAK,MAAM,KAAK,OAAO,CAAC,CACpD;EAEJ,MAAM,mBAAmB,WACrB,KAAK,OAAO,MAAM,CAAC,CAAC,OAAO,aAAa,IACxC,KAAK,OAAO,MAAM,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,aAAa;EAGvE,IAAI,KAAK,eAAe,SACtB,iBAAiB,aAAa;OACzB,IAAI,KAAK,eAAe,QAC7B,iBAAiB,aAAa,KAAK;OAC9B,IAAI,KAAK,eAAe,SAC7B,iBAAiB,aAAa,IAAI;EAIpC,MAAM,SAAS,MAAM,EAAE,SAAS,kBAAkB,gBAAgB;GAChE,SAAS,EACP,OAAO,KAAK,MACd;GACA,GAAG,cAAc;EACnB,CAAC;EAED,IAAI,CAAC,OAAO,SAAS;GACnB,MAAM,QAAQ,IAAI,8BAChB,IAAI,KAAK,MAAM,YAAY,KAAK,UAAU,WAAW,WAAW,SAAS,qBACzE,OAAO,MACT;GACA,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,aAAa;IAAE;IAAQ;GAAM,CAAC;GAE3D,MAAM;EACR;EAGA,IAAI,UACF,KAAK,MAAM,YAAY,OAAO,IAAI;OAC7B;GACL,MAAM,YAAY,OAAO;GAEzB,KAAK,MAAM,UAAU,OAAO,KAAK,cAAc,GAC7C,IAAI,UAAU,WACZ,KAAK,MAAM,IAAI,QAAQ,UAAU,OAAO;QAGxC,KAAK,mBAAmB,IAAI,MAAM;EAGxC;EAGA,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,aAAa,EAAE,OAAO,CAAC;CAEtD;;;;;;;CAQA,MAAa,mBAAkC;EAC7C,MAAM,KAAK,gBAAgB,MAAM,CAAC,CAAC;EACnC,MAAM,KAAK,eAAe;CAC5B;;;;;;;;CASA,MAAc,cAAc,SAA+C;EACzE,MAAM,eAAe,MAAM,KAAK,iBAAiB,OAAO;EAGxD,IAAI;EAEJ,IAAI;GACF,SAAS,MAAM,KAAK,OAAO,OAAO,KAAK,OAAO,YAAY;EAC5D,SAAS,OAAO;GACd,MAAM,KAAK,mBAAmB,OAAO,IAAI;EAC3C;EAKA,kBAAkB,KAAK,OAAO,OAAO,QAAmC;EAIxE,KAAK,MAAM,aAAa,MAAM;EAE9B,OAAO;CACT;;;;;;;;;;;;CAaA,MAAa,iBAAiB,UAAyB,CAAC,GAAqC;EAE3F,MAAM,KAAK,gBAAgB,MAAM,OAAO;EAGxC,MAAM,KAAK,eAAe;EAG1B,MAAM,eAAe,KAAK,MAAM;EAUhC,MAAM,kBAAkB,KAAK,KAAK;EAElC,IAAI,mBAAmB,aAAa,oBAAoB,MACtD,aAAa,mCAAmB,IAAI,KAAK;EAG3C,MAAM,kBAAkB,KAAK,KAAK;EAClC,IAAI,iBACF,aAAa,mCAAmB,IAAI,KAAK;EAI3C,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,UAAU;EAGvC,OAAO;CACT;;;;;;;;CASA,MAAc,cAAc,SAA+C;EAEzE,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,UAAU;EAIvC,MAAM,kBAAkB,KAAK,KAAK;EAClC,IAAI,iBACF,KAAK,MAAM,IAAI,iCAAiB,IAAI,KAAK,CAAC;EAG5C,IAAI,QAAQ,SAAS;GACnB,MAAM,WAAW,MAAM,KAAK,OAAO,QACjC,KAAK,OACL,KAAK,sBAAsB,GAC3B,KAAK,MAAM,IACb;GAEA,IAAI,UACF,KAAK,MAAM,YAAY,QAAmC;GAG5D,OAAO,EAAE,eAAe,WAAW,IAAI,EAAE;EAC3C;EAGA,MAAM,aAAa,KAAK,sBAAsB;EAI9C,IAAI,OAAO,KAAK,UAAU,CAAC,CAAC,WAAW,GACrC,OAAO,EAAE,eAAe,EAAE;EAI5B,IAAI;GACF,OAAO,MAAM,KAAK,OAAO,OACvB,KAAK,OACL,KAAK,sBAAsB,GAC3B,UACF;EACF,SAAS,OAAO;GACd,MAAM,KAAK,mBAAmB,OAAO,KAAK;EAC5C;CACF;;;;;;CAOA,AAAQ,mBAAmB,OAAgB,UAA4B;EACrE,MAAM,MAAM;EASZ,IAAI,KAAK,SAAS,WAAW,KAAK,SAAS,QAAS,KAAK,SAAS,SAChE,OAAO;EAGT,IAAI;EAEJ,IAAI,IAAI,YACN,QAAQ,OAAO,KAAK,IAAI,UAAU,CAAC,CAAC;OAGpC,QAAQ,mBAAmB,KAAK,IAAI,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK;EAG9E,IAAI,CAAC,OAEH,QAAQ,sBAAsB,KAAK,IAAI,WAAW,EAAE,CAAC,GAAG;EAG1D,OAAO,IAAI,8BACT,IAAI,KAAK,MAAM,YAAY,KAAK,UAAU,WAAW,WAAW,SAAS,qBACzE,CACE;GACE,MAAM;GACN,OAAO,OAAO,SAAS,QAAQ;GAC/B,OAAO,SAAS;EAClB,CACF,CACF;CACF;;;;;;;;;;;;CAaA,AAAQ,wBAAiD;EACvD,OAAO,GAAG,KAAK,aAAa,KAAK,MAAM,kBAAkB;CAC3D;;;;;;CAOA,MAAa,iBAAgC;EAC3C,IAAI,CAAC,KAAK,KAAK,kBAAkB,KAAK,MAAM,IAAI,IAAI,GAClD;EAGF,MAAM,cAAc,KAAK,WAAW;EACpC,IAAI,CAAC,aACH;EAIF,MAAM,YAAY,KAAK,iBAAiB;EAExC,MAAM,gBAAgB,KAAK,mBAAmB;EAE9C,MAAM,KAAK,MAAM,YAAY,eAAe;GAC1C,OAAO,KAAK;GACZ;GACA;EACF,CAAC;EAED,KAAK,MAAM,IAAI,MAAM,EAAE;CACzB;;;;;;;;;;;;;;;;;;;;;;CAuBA,AAAQ,wBAA0C;EAChD,MAAM,aAA+B,CAAC;EAOtC,MAAM,kBAAkB,IAAI,IAAI;GAAC,KAAK;GAAY;GAAM;EAAK,CAAC;EAG9D,MAAM,eAAe,KAAK,MACvB,gBAAgB,CAAC,CACjB,QAAO,WAAU,CAAC,gBAAgB,IAAI,MAAM,KAAK,CAAC,KAAK,mBAAmB,IAAI,MAAM,CAAC;EAExF,IAAI,aAAa,SAAS,GAAG;GAC3B,WAAW,OAAO,CAAC;GACnB,KAAK,MAAM,UAAU,cAAc;IAEjC,IADc,KAAK,MAAM,IAAI,MACrB,MAAM,QAAW;IAEzB,WAAW,KAAK,UAAU,KAAK,MAAM,IAAI,MAAM;GACjD;EACF;EAGA,MAAM,iBAAiB,KAAK,MACzB,kBAAkB,CAAC,CACnB,QAAO,WAAU,CAAC,gBAAgB,IAAI,MAAM,CAAC;EAEhD,IAAI,eAAe,SAAS,GAAG;GAC7B,WAAW,SAAS,CAAC;GACrB,KAAK,MAAM,UAAU,gBACnB,WAAW,OAAO,UAAU;EAEhC;EAEA,OAAO;CACT;;;;;;;;;;;;CAaA,AAAQ,mBAA2B;EACjC,IAAI,KAAK,KAAK,WACZ,OAAO,KAAK,KAAK;EAGnB,IAAI,KAAK,KAAK,iBACZ,OAAO,OAAO,KAAK,KAAK,oBAAoB,aACxC,KAAK,KAAK,gBAAgB,IAC1B,KAAK,UAAU,KAAO,MAAM;EAGlC,OAAO;CACT;;;;;;;;;;;;CAaA,AAAQ,qBAA6B;EACnC,IAAI,KAAK,KAAK,iBACZ,OAAO,OAAO,KAAK,KAAK,oBAAoB,aACxC,KAAK,KAAK,gBAAgB,IAC1B,KAAK,UAAU,GAAG,EAAE;EAG1B,IAAI,KAAK,KAAK,eACZ,OAAO,KAAK,KAAK;EAGnB,OAAO;CACT;;;;;;;;;CAUA,AAAQ,UAAU,KAAa,KAAqB;EAClD,OAAO,KAAK,MAAM,KAAK,OAAO,KAAK,MAAM,MAAM,EAAE,IAAI;CACvD;;;;;;;;;;CAWA,AAAQ,YAAY,eAA+B;EACjD,kBAAkB;GAChB,aAAa,KAAK,KAAK;GACvB,WAAW;GACX,eAAe,kBAAkB,KAAK,MAAM,WAAW,KAAK,OAAO,aAAa;EAClF,CAAC;CACH;AACF"}
+{"version":3,"file":"database-writer.mjs","names":[],"sources":["../../../../../../../cascade/src/writer/database-writer.ts"],"sourcesContent":["import { when } from \"@mongez/reinforcements\";\nimport { getSealConfig, v, type ObjectValidator } from \"@warlock.js/seal\";\nimport type {\n  DriverContract,\n  InsertResult,\n  UpdateOperations,\n  UpdateResult,\n} from \"../contracts/database-driver.contract\";\nimport type {\n  WriterContract,\n  WriterOptions,\n  WriterResult,\n} from \"../contracts/database-writer.contract\";\nimport { mergeDriverFields } from \"../model/methods/accessor-methods\";\nimport type { ChildModel, Model } from \"../model/model\";\nimport { enqueueSyncFanout } from \"../sync/sync-fanout\";\nimport { triggerModelEvent } from \"../sync/model-events\";\nimport type { StrictMode } from \"../types\";\nimport { DatabaseWriterValidationError } from \"../validation\";\nimport { afterCommit } from \"../transactions/after-commit\";\nimport type { DataSource } from \"./../data-source/data-source\";\n\n/**\n * Database writer service that orchestrates model persistence.\n *\n * Handles the complete save pipeline:\n * 1. Check for changes (skip if no changes and not new)\n * 2. Emit `saving` event (for data enrichment)\n * 3. Emit `validating` event\n * 4. Validate and cast data via @warlock.js/seal schema\n * 5. Emit `validated` event\n * 6. Generate ID (for new NoSQL records)\n * 7. Emit `creating`/`updating` events\n * 8. Execute insert or update via driver\n * 9. Merge returned data into model\n * 10. Reset dirty tracker and update `isNew` flag\n * 11. Emit `saved` and `created`/`updated` events\n *\n * @example\n * ```typescript\n * const user = new User({ name: \"Alice\", email: \"alice@example.com\" });\n * const writer = new DatabaseWriter(user);\n * await writer.save();\n *\n * console.log(user.get(\"id\")); // 1 (auto-generated)\n * console.log(user.get(\"_id\")); // ObjectId(\"...\")\n *\n * // Update existing record\n * user.set(\"name\", \"Alice Smith\");\n * await writer.save();\n * // Only updates the \"name\" field (partial update)\n *\n * // Silent save (no events)\n * await writer.save({ skipEvents: true });\n * ```\n */\nexport class DatabaseWriter implements WriterContract {\n  /** The model instance being persisted */\n  private readonly model: Model;\n\n  /** Dirty columns an update validation dropped (strip mode); never written. */\n  private readonly unvalidatedColumns = new Set<string>();\n\n  /** Model constructor reference */\n  private readonly ctor: ChildModel<Model>;\n\n  /** Data source containing driver and ID generator */\n  private readonly dataSource: DataSource;\n\n  /** Database driver for executing queries */\n  private readonly driver: DriverContract;\n\n  /** Table/collection name */\n  private readonly table: string;\n\n  /** Primary key field name */\n  private readonly primaryKey: string;\n\n  /** Validation schema (if defined) */\n  private readonly schema?: ObjectValidator;\n\n  /** Strict mode configuration */\n  private readonly strictMode: StrictMode;\n\n  /**\n   * Create a new writer instance for a model.\n   *\n   * @param model - The model instance to persist\n   *\n   * @example\n   * ```typescript\n   * const user = new User({ name: \"Alice\" });\n   * const writer = new DatabaseWriter(user);\n   * await writer.save();\n   * ```\n   */\n  public constructor(model: Model) {\n    this.model = model;\n    this.ctor = model.constructor as ChildModel<Model>;\n    this.dataSource = this.ctor.getDataSource();\n    this.driver = this.dataSource.driver;\n    this.table = this.ctor.table;\n    this.primaryKey = this.ctor.primaryKey;\n    this.schema = this.ctor.schema;\n    this.strictMode = this.ctor.strictMode;\n  }\n\n  /**\n   * Save the model instance to the database.\n   *\n   * @param options - Save options\n   * @returns Result with success status, document, and metadata\n   * @throws {ValidationError} If validation fails\n   */\n  public async save(options: WriterOptions = {}): Promise<WriterResult> {\n    const isInsert = this.model.isNew;\n\n    // 1. Check if model has changes (skip if no changes and not new)\n    if (!isInsert && !this.model.hasChanges()) {\n      return {\n        success: true,\n        document: this.model.data,\n        isNew: false,\n        modifiedCount: 0,\n      };\n    }\n\n    // 2. Emit saving event (before validation for data enrichment)\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"saving\", {\n        isInsert,\n        options,\n        mode: isInsert ? \"insert\" : \"update\",\n      });\n    }\n\n    // 3-4. Execute insert or update (validation happens inside each path)\n    let result: InsertResult | UpdateResult;\n\n    if (isInsert) {\n      result = await this.performInsert(options);\n    } else {\n      await this.validateAndCast(false, options);\n      result = await this.performUpdate(options);\n    }\n\n    // 5. Reset dirty tracker and update isNew flag\n    const changedFields = isInsert ? [] : this.model.getDirtyColumns();\n    this.model.dirtyTracker.reset();\n    this.model.isNew = false;\n\n    // 6. Emit post-save events\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"saved\");\n      await this.model.emitEvent(isInsert ? \"created\" : \"updated\");\n    }\n\n    // 7. Trigger sync operations after COMMIT (inside a transaction they are\n    // queued, so a rolled-back write never fans out). Failures are logged.\n    if (!options.skipSync && !isInsert) {\n      afterCommit(() => this.triggerSync(changedFields));\n    }\n\n    return {\n      success: true,\n      document: this.model.data,\n      isNew: isInsert,\n      modifiedCount: isInsert\n        ? undefined\n        : (result as UpdateResult).modifiedCount,\n    };\n  }\n\n  /**\n   * Validate and cast model data using the schema.\n   *\n   * Updates the model's data in-place with validated/casted values.\n   *\n   * @param isInsert - Whether this is an insert operation\n   * @param options - Save options\n   * @throws {ValidationError} If validation fails\n   * @private\n   */\n  private async validateAndCast(\n    isInsert: boolean,\n    options: WriterOptions,\n  ): Promise<void> {\n    // Emit validating event\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"validating\", {\n        isInsert,\n        options,\n        mode: isInsert ? \"insert\" : \"update\",\n      });\n    }\n\n    // Skip validation if requested or no schema defined\n    if (options.skipValidation || !this.schema) {\n      return;\n    }\n\n    // Whitelist the framework-managed system columns so a model carrying them\n    // (id / _id / timestamps / soft-delete deletedAt) validates cleanly instead\n    // of being stripped (strictMode \"strip\") or rejected (strictMode \"fail\").\n    // `when(...)` adds each timestamp/soft-delete column only when configured\n    // (truthy) — the lazy factory means a disabled column (`false`) never even\n    // builds a bogus schema key.\n    //\n    // The whitelist must apply to BOTH insert and update: on insert a caller may\n    // supply a backdated createdAt (e.g. data migrations / imports), and without\n    // the whitelist strictMode \"strip\" silently drops it before it reaches the\n    // writer, while \"fail\" rejects the whole insert.\n    const systemColumns = {\n      id: v.scalar().optional(),\n      _id: v.any().optional(),\n      ...when(this.ctor.createdAtColumn, () => ({\n        [this.ctor.createdAtColumn as string]: v.date().optional(),\n      })),\n      ...when(this.ctor.updatedAtColumn, () => ({\n        [this.ctor.updatedAtColumn as string]: v.date().optional(),\n      })),\n      ...when(this.ctor.deletedAtColumn, () => ({\n        [this.ctor.deletedAtColumn as string]: v.date().optional(),\n      })),\n    };\n\n    // Clone full schema for insert, partial (dirty keys only) for updates.\n    //\n    // An update validates ONLY the dirty columns and merges back only those\n    // keys: columns the schema does not list (migration-added, withCount, ...)\n    // are never touched, so they can no longer be turned into `$unset`.\n    const dataToValidate: Record<string, unknown> = isInsert\n      ? this.model.data\n      : Object.fromEntries(\n          this.model\n            .getDirtyColumns()\n            .filter(column => column in this.model.data)\n            .map(column => [column, this.model.data[column]]),\n        );\n\n    const validationSchema = isInsert\n      ? this.schema.clone().extend(systemColumns)\n      : this.schema.clone(Object.keys(dataToValidate)).extend(systemColumns);\n\n    // Apply strict mode\n    if (this.strictMode === \"strip\") {\n      validationSchema.stripUnknown();\n    } else if (this.strictMode === \"fail\") {\n      validationSchema.allowUnknown(false);\n    } else if (this.strictMode === \"allow\") {\n      validationSchema.allowUnknown(true);\n    }\n\n    // Run validation\n    const result = await v.validate(validationSchema, dataToValidate, {\n      context: {\n        model: this.model,\n      },\n      ...getSealConfig(),\n    });\n\n    if (!result.isValid) {\n      const error = new DatabaseWriterValidationError(\n        `[${this.model.constructor.name} Model] ${isInsert ? \"Insert\" : \"Update\"} Validation failed`,\n        result.errors,\n      );\n      if (!options.skipEvents) {\n        await this.model.emitEvent(\"validated\", { result, error });\n      }\n      throw error;\n    }\n\n    // Update model data with validated/casted data\n    if (isInsert) {\n      this.model.replaceData(result.data);\n    } else {\n      const validated = result.data as Record<string, unknown>;\n\n      for (const column of Object.keys(dataToValidate)) {\n        if (column in validated) {\n          this.model.set(column, validated[column]);\n        } else if (dataToValidate[column] === null && column in validationSchema.schema) {\n          // An explicit null on a KNOWN column that passed validation: an\n          // optional, non-nullable leaf coalesces null to \"absent\" in seal, so\n          // it is missing from the result. It is a deliberate \"clear this\n          // column\", not an unknown one to strip (Real-Estate #18). A required\n          // column never gets here: its rule rejects the null and validation throws.\n          this.model.set(column, null);\n        } else {\n          // Dropped by strictMode \"strip\": never write an unvalidated column.\n          this.unvalidatedColumns.add(column);\n        }\n      }\n    }\n\n    // Emit validated event\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"validated\", { result });\n    }\n  }\n\n  /**\n   * Validate, cast and id-generate a not-yet-persisted model for `upsert()`.\n   *\n   * Runs the insert-mode pipeline (schema, casts, strictMode, Mongo `id`) but\n   * does not write; the caller sends the resulting data through the driver.\n   */\n  public async prepareForUpsert(): Promise<void> {\n    await this.validateAndCast(true, {});\n    await this.generateNextId();\n  }\n\n  /**\n   * Perform an insert operation.\n   *\n   * @param options - Save options\n   * @returns Insert result\n   * @private\n   */\n  private async performInsert(options: WriterOptions): Promise<InsertResult> {\n    const dataToInsert = await this.prepareForInsert(options);\n\n    // INSERT: use full validated data\n    let result: InsertResult;\n\n    try {\n      result = await this.driver.insert(this.table, dataToInsert);\n    } catch (error) {\n      throw this.mapUniqueViolation(error, true);\n    }\n\n    // Merge returned data (e.g., generated _id, timestamps)\n    // Note: We use merge here because the result might not include all fields\n    // (e.g., our generated 'id' field), and we don't want to lose them\n    mergeDriverFields(this.model, result.document as Record<string, unknown>);\n\n    // Reset dirty tracker immediately after merge to prevent\n    // database-generated fields (like _id) from being marked as dirty\n    this.model.dirtyTracker.reset();\n\n    return result;\n  }\n\n  /**\n   * Run the insert pipeline (validation, casting, id generation, timestamps,\n   * `validating`/`validated`/`creating` hooks) WITHOUT writing.\n   *\n   * `save()` uses this for its insert path, so bulk inserts and single inserts\n   * cannot drift. The caller is responsible for sending the returned document\n   * to the driver.\n   *\n   * @param options - Save options (e.g. `skipEvents`, `skipValidation`)\n   * @returns The prepared document to insert\n   */\n  public async prepareForInsert(options: WriterOptions = {}): Promise<Record<string, unknown>> {\n    // Validate and cast data\n    await this.validateAndCast(true, options);\n\n    // Generate ID if needed (NoSQL only)\n    await this.generateNextId();\n\n    // Get data to insert (already validated and casted)\n    const dataToInsert = this.model.data;\n\n    // Add createdAt and updatedAt to the data (using resolved column names)\n    // The column names are already resolved through the hierarchy:\n    // Model static property > Database config > Driver defaults > undefined\n    //\n    // Only stamp createdAt when the caller did NOT supply one, so a backdated\n    // value (e.g. data migrations / imports) is honored instead of overwritten.\n    // This mirrors the upsert path's guard. updatedAt is always stamped to\n    // reflect the moment the record is persisted.\n    const createdAtColumn = this.ctor.createdAtColumn;\n\n    if (createdAtColumn && dataToInsert[createdAtColumn] == null) {\n      dataToInsert[createdAtColumn] = new Date();\n    }\n\n    const updatedAtColumn = this.ctor.updatedAtColumn;\n    if (updatedAtColumn) {\n      dataToInsert[updatedAtColumn] = new Date();\n    }\n\n    // Emit creating event\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"creating\");\n    }\n\n    return dataToInsert;\n  }\n\n  /**\n   * Perform an update operation.\n   *\n   * @param options - Save options\n   * @returns Update result\n   * @private\n   */\n  private async performUpdate(options: WriterOptions): Promise<UpdateResult> {\n    // Emit updating event\n    if (!options.skipEvents) {\n      await this.model.emitEvent(\"updating\");\n    }\n\n    // Update the updatedAt timestamp (using resolved column name)\n    const updatedAtColumn = this.ctor.updatedAtColumn;\n    if (updatedAtColumn) {\n      this.model.set(updatedAtColumn, new Date());\n    }\n\n    if (options.replace) {\n      const document = await this.driver.replace(\n        this.table,\n        this.buildPrimaryKeyFilter(),\n        this.model.data,\n      );\n\n      if (document) {\n        this.model.replaceData(document as Record<string, unknown>);\n      }\n\n      return { modifiedCount: document ? 1 : 0 };\n    }\n\n    // Build operations from dirty tracker\n    const operations = this.buildUpdateOperations();\n\n    // Nothing left to write once identity columns are excluded — don't hand the\n    // driver an empty update document (MongoDB rejects one).\n    if (Object.keys(operations).length === 0) {\n      return { modifiedCount: 0 };\n    }\n\n    // Execute update with operations\n    try {\n      return await this.driver.update(\n        this.table,\n        this.buildPrimaryKeyFilter(),\n        operations,\n      );\n    } catch (error) {\n      throw this.mapUniqueViolation(error, false);\n    }\n  }\n\n  /**\n   * Map a driver unique-constraint violation (Postgres 23505, MongoDB 11000)\n   * to a field validation error, so a lost `unique` race never surfaces as a\n   * 500. Any other error is returned untouched.\n   */\n  private mapUniqueViolation(error: unknown, isInsert: boolean): unknown {\n    const err = error as\n      | {\n          code?: string | number;\n          detail?: string;\n          keyPattern?: Record<string, unknown>;\n          message?: string;\n        }\n      | undefined;\n\n    if (err?.code !== \"23505\" && err?.code !== 11000 && err?.code !== \"11000\") {\n      return error;\n    }\n\n    let field: string | undefined;\n\n    if (err.keyPattern) {\n      field = Object.keys(err.keyPattern)[0];\n    } else {\n      // Postgres: \"Key (email)=(x) already exists.\"\n      field = /Key \\(([^)]+)\\)=/.exec(err.detail ?? \"\")?.[1]?.split(\",\")[0]?.trim();\n    }\n\n    if (!field) {\n      // Mongo: \"index: email_1 dup key\"\n      field = /index: (\\S+?)_-?1\\b/.exec(err.message ?? \"\")?.[1];\n    }\n\n    return new DatabaseWriterValidationError(\n      `[${this.model.constructor.name} Model] ${isInsert ? \"Insert\" : \"Update\"} Validation failed`,\n      [\n        {\n          type: \"unique\",\n          error: `The ${field ?? \"value\"} must be unique`,\n          input: field ?? \"id\",\n        },\n      ],\n    );\n  }\n\n  /**\n   * Build the filter that pins a write to the row this model was loaded from.\n   *\n   * It reads `model.trustedPrimaryKey` — the value captured when the instance\n   * became persisted — NOT the current value in `model.data`. The current value\n   * is reachable by mass assignment (`model.merge(req.body)`), so deriving the\n   * filter from it let a request body redirect the UPDATE to another document.\n   *\n   * @returns Filter matching the originally loaded record\n   * @private\n   */\n  private buildPrimaryKeyFilter(): Record<string, unknown> {\n    return { [this.primaryKey]: this.model.trustedPrimaryKey };\n  }\n\n  /**\n   * Generate ID for the model if auto-generation is enabled.\n   *\n   * @private\n   */\n  public async generateNextId(): Promise<void> {\n    if (!this.ctor.autoGenerateId || this.model.get(\"id\")) {\n      return;\n    }\n\n    const idGenerator = this.dataSource.idGenerator;\n    if (!idGenerator) {\n      return;\n    }\n\n    // Resolve ID generation options from model configuration\n    const initialId = this.resolveInitialId();\n\n    const incrementIdBy = this.resolveIncrementBy();\n\n    const id = await idGenerator.generateNextId({\n      table: this.table,\n      initialId,\n      incrementIdBy,\n    });\n\n    this.model.set(\"id\", id);\n  }\n\n  /**\n   * Build update operations from the model's dirty tracker.\n   *\n   * Handles both modified fields ($set) and removed fields ($unset).\n   *\n   * @returns Update operations for the driver\n   * @private\n   *\n   * @example\n   * ```typescript\n   * // Model with changes\n   * user.set(\"name\", \"Alice\");\n   * user.unset(\"tempField\");\n   *\n   * const operations = this.buildUpdateOperations();\n   * // {\n   * //   $set: { name: \"Alice\" },\n   * //   $unset: { tempField: 1 }\n   * // }\n   * ```\n   */\n  private buildUpdateOperations(): UpdateOperations {\n    const operations: UpdateOperations = {};\n\n    // Identity columns are never written by an update. The filter pins the row\n    // by its captured primary key, so a dirty `id`/`_id` can only come from\n    // mass assignment or an explicit set() — either way, rewriting the key of\n    // an existing row corrupts identity (and `_id` is immutable in MongoDB).\n    // Changing a primary key is a deliberate operation: use the atomic/raw APIs.\n    const identityColumns = new Set([this.primaryKey, \"id\", \"_id\"]);\n\n    // Get dirty columns (modified fields)\n    const dirtyColumns = this.model\n      .getDirtyColumns()\n      .filter(column => !identityColumns.has(column) && !this.unvalidatedColumns.has(column));\n\n    if (dirtyColumns.length > 0) {\n      operations.$set = {};\n      for (const column of dirtyColumns) {\n        const value = this.model.get(column);\n        if (value === undefined) continue;\n\n        operations.$set[column] = this.model.get(column);\n      }\n    }\n\n    // Get removed columns\n    const removedColumns = this.model\n      .getRemovedColumns()\n      .filter(column => !identityColumns.has(column));\n\n    if (removedColumns.length > 0) {\n      operations.$unset = {};\n      for (const column of removedColumns) {\n        operations.$unset[column] = 1;\n      }\n    }\n\n    return operations;\n  }\n\n  /**\n   * Resolve the initial ID from model configuration.\n   *\n   * Priority:\n   * 1. Model.initialId (explicit value)\n   * 2. Model.randomInitialId (random or function)\n   * 3. Default: 1\n   *\n   * @returns The initial ID value\n   * @private\n   */\n  private resolveInitialId(): number {\n    if (this.ctor.initialId) {\n      return this.ctor.initialId;\n    }\n\n    if (this.ctor.randomInitialId) {\n      return typeof this.ctor.randomInitialId === \"function\"\n        ? this.ctor.randomInitialId()\n        : this.randomInt(10000, 499999);\n    }\n\n    return 1; // Default initial ID\n  }\n\n  /**\n   * Resolve the increment value from model configuration.\n   *\n   * Priority:\n   * 1. Model.incrementIdBy (explicit value)\n   * 2. Model.randomIncrement (random or function)\n   * 3. Default: 1\n   *\n   * @returns The increment value\n   * @private\n   */\n  private resolveIncrementBy(): number {\n    if (this.ctor.randomIncrement) {\n      return typeof this.ctor.randomIncrement === \"function\"\n        ? this.ctor.randomIncrement()\n        : this.randomInt(1, 10);\n    }\n\n    if (this.ctor.incrementIdBy) {\n      return this.ctor.incrementIdBy;\n    }\n\n    return 1; // Default increment\n  }\n\n  /**\n   * Generate a random integer between min and max (inclusive).\n   *\n   * @param min - Minimum value\n   * @param max - Maximum value\n   * @returns Random integer\n   * @private\n   */\n  private randomInt(min: number, max: number): number {\n    return Math.floor(Math.random() * (max - min + 1)) + min;\n  }\n\n  /**\n   * Trigger sync operations after successful save.\n   *\n   * Emits a model.updated event that ModelSyncOperation listens to.\n   * The sync is handled by registered sync operations, not directly here.\n   *\n   * @param changedFields - Fields that were changed (for filtering)\n   * @private\n   */\n  private triggerSync(changedFields: string[]): void {\n    enqueueSyncFanout({\n      sourceModel: this.ctor.name,\n      operation: \"update\",\n      execute: () => triggerModelEvent(this.ctor, \"updated\", this.model, changedFields),\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwDA,IAAa,iBAAb,MAAsD;;CAEpD,AAAiB;;CAGjB,AAAiB,qCAAqB,IAAI,IAAY;;CAGtD,AAAiB;;CAGjB,AAAiB;;CAGjB,AAAiB;;CAGjB,AAAiB;;CAGjB,AAAiB;;CAGjB,AAAiB;;CAGjB,AAAiB;;;;;;;;;;;;;CAcjB,AAAO,YAAY,OAAc;EAC/B,KAAK,QAAQ;EACb,KAAK,OAAO,MAAM;EAClB,KAAK,aAAa,KAAK,KAAK,cAAc;EAC1C,KAAK,SAAS,KAAK,WAAW;EAC9B,KAAK,QAAQ,KAAK,KAAK;EACvB,KAAK,aAAa,KAAK,KAAK;EAC5B,KAAK,SAAS,KAAK,KAAK;EACxB,KAAK,aAAa,KAAK,KAAK;CAC9B;;;;;;;;CASA,MAAa,KAAK,UAAyB,CAAC,GAA0B;EACpE,MAAM,WAAW,KAAK,MAAM;EAG5B,IAAI,CAAC,YAAY,CAAC,KAAK,MAAM,WAAW,GACtC,OAAO;GACL,SAAS;GACT,UAAU,KAAK,MAAM;GACrB,OAAO;GACP,eAAe;EACjB;EAIF,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,UAAU;GACnC;GACA;GACA,MAAM,WAAW,WAAW;EAC9B,CAAC;EAIH,IAAI;EAEJ,IAAI,UACF,SAAS,MAAM,KAAK,cAAc,OAAO;OACpC;GACL,MAAM,KAAK,gBAAgB,OAAO,OAAO;GACzC,SAAS,MAAM,KAAK,cAAc,OAAO;EAC3C;EAGA,MAAM,gBAAgB,WAAW,CAAC,IAAI,KAAK,MAAM,gBAAgB;EACjE,KAAK,MAAM,aAAa,MAAM;EAC9B,KAAK,MAAM,QAAQ;EAGnB,IAAI,CAAC,QAAQ,YAAY;GACvB,MAAM,KAAK,MAAM,UAAU,OAAO;GAClC,MAAM,KAAK,MAAM,UAAU,WAAW,YAAY,SAAS;EAC7D;EAIA,IAAI,CAAC,QAAQ,YAAY,CAAC,UACxB,kBAAkB,KAAK,YAAY,aAAa,CAAC;EAGnD,OAAO;GACL,SAAS;GACT,UAAU,KAAK,MAAM;GACrB,OAAO;GACP,eAAe,WACX,SACC,OAAwB;EAC/B;CACF;;;;;;;;;;;CAYA,MAAc,gBACZ,UACA,SACe;EAEf,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,cAAc;GACvC;GACA;GACA,MAAM,WAAW,WAAW;EAC9B,CAAC;EAIH,IAAI,QAAQ,kBAAkB,CAAC,KAAK,QAClC;EAcF,MAAM,gBAAgB;GACpB,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS;GACxB,KAAK,EAAE,IAAI,CAAC,CAAC,SAAS;GACtB,GAAG,KAAK,KAAK,KAAK,wBAAwB,GACvC,KAAK,KAAK,kBAA4B,EAAE,KAAK,CAAC,CAAC,SAAS,EAC3D,EAAE;GACF,GAAG,KAAK,KAAK,KAAK,wBAAwB,GACvC,KAAK,KAAK,kBAA4B,EAAE,KAAK,CAAC,CAAC,SAAS,EAC3D,EAAE;GACF,GAAG,KAAK,KAAK,KAAK,wBAAwB,GACvC,KAAK,KAAK,kBAA4B,EAAE,KAAK,CAAC,CAAC,SAAS,EAC3D,EAAE;EACJ;EAOA,MAAM,iBAA0C,WAC5C,KAAK,MAAM,OACX,OAAO,YACL,KAAK,MACF,gBAAgB,CAAC,CACjB,QAAO,WAAU,UAAU,KAAK,MAAM,IAAI,CAAC,CAC3C,KAAI,WAAU,CAAC,QAAQ,KAAK,MAAM,KAAK,OAAO,CAAC,CACpD;EAEJ,MAAM,mBAAmB,WACrB,KAAK,OAAO,MAAM,CAAC,CAAC,OAAO,aAAa,IACxC,KAAK,OAAO,MAAM,OAAO,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,aAAa;EAGvE,IAAI,KAAK,eAAe,SACtB,iBAAiB,aAAa;OACzB,IAAI,KAAK,eAAe,QAC7B,iBAAiB,aAAa,KAAK;OAC9B,IAAI,KAAK,eAAe,SAC7B,iBAAiB,aAAa,IAAI;EAIpC,MAAM,SAAS,MAAM,EAAE,SAAS,kBAAkB,gBAAgB;GAChE,SAAS,EACP,OAAO,KAAK,MACd;GACA,GAAG,cAAc;EACnB,CAAC;EAED,IAAI,CAAC,OAAO,SAAS;GACnB,MAAM,QAAQ,IAAI,8BAChB,IAAI,KAAK,MAAM,YAAY,KAAK,UAAU,WAAW,WAAW,SAAS,qBACzE,OAAO,MACT;GACA,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,aAAa;IAAE;IAAQ;GAAM,CAAC;GAE3D,MAAM;EACR;EAGA,IAAI,UACF,KAAK,MAAM,YAAY,OAAO,IAAI;OAC7B;GACL,MAAM,YAAY,OAAO;GAEzB,KAAK,MAAM,UAAU,OAAO,KAAK,cAAc,GAC7C,IAAI,UAAU,WACZ,KAAK,MAAM,IAAI,QAAQ,UAAU,OAAO;QACnC,IAAI,eAAe,YAAY,QAAQ,UAAU,iBAAiB,QAMvE,KAAK,MAAM,IAAI,QAAQ,IAAI;QAG3B,KAAK,mBAAmB,IAAI,MAAM;EAGxC;EAGA,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,aAAa,EAAE,OAAO,CAAC;CAEtD;;;;;;;CAQA,MAAa,mBAAkC;EAC7C,MAAM,KAAK,gBAAgB,MAAM,CAAC,CAAC;EACnC,MAAM,KAAK,eAAe;CAC5B;;;;;;;;CASA,MAAc,cAAc,SAA+C;EACzE,MAAM,eAAe,MAAM,KAAK,iBAAiB,OAAO;EAGxD,IAAI;EAEJ,IAAI;GACF,SAAS,MAAM,KAAK,OAAO,OAAO,KAAK,OAAO,YAAY;EAC5D,SAAS,OAAO;GACd,MAAM,KAAK,mBAAmB,OAAO,IAAI;EAC3C;EAKA,kBAAkB,KAAK,OAAO,OAAO,QAAmC;EAIxE,KAAK,MAAM,aAAa,MAAM;EAE9B,OAAO;CACT;;;;;;;;;;;;CAaA,MAAa,iBAAiB,UAAyB,CAAC,GAAqC;EAE3F,MAAM,KAAK,gBAAgB,MAAM,OAAO;EAGxC,MAAM,KAAK,eAAe;EAG1B,MAAM,eAAe,KAAK,MAAM;EAUhC,MAAM,kBAAkB,KAAK,KAAK;EAElC,IAAI,mBAAmB,aAAa,oBAAoB,MACtD,aAAa,mCAAmB,IAAI,KAAK;EAG3C,MAAM,kBAAkB,KAAK,KAAK;EAClC,IAAI,iBACF,aAAa,mCAAmB,IAAI,KAAK;EAI3C,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,UAAU;EAGvC,OAAO;CACT;;;;;;;;CASA,MAAc,cAAc,SAA+C;EAEzE,IAAI,CAAC,QAAQ,YACX,MAAM,KAAK,MAAM,UAAU,UAAU;EAIvC,MAAM,kBAAkB,KAAK,KAAK;EAClC,IAAI,iBACF,KAAK,MAAM,IAAI,iCAAiB,IAAI,KAAK,CAAC;EAG5C,IAAI,QAAQ,SAAS;GACnB,MAAM,WAAW,MAAM,KAAK,OAAO,QACjC,KAAK,OACL,KAAK,sBAAsB,GAC3B,KAAK,MAAM,IACb;GAEA,IAAI,UACF,KAAK,MAAM,YAAY,QAAmC;GAG5D,OAAO,EAAE,eAAe,WAAW,IAAI,EAAE;EAC3C;EAGA,MAAM,aAAa,KAAK,sBAAsB;EAI9C,IAAI,OAAO,KAAK,UAAU,CAAC,CAAC,WAAW,GACrC,OAAO,EAAE,eAAe,EAAE;EAI5B,IAAI;GACF,OAAO,MAAM,KAAK,OAAO,OACvB,KAAK,OACL,KAAK,sBAAsB,GAC3B,UACF;EACF,SAAS,OAAO;GACd,MAAM,KAAK,mBAAmB,OAAO,KAAK;EAC5C;CACF;;;;;;CAOA,AAAQ,mBAAmB,OAAgB,UAA4B;EACrE,MAAM,MAAM;EASZ,IAAI,KAAK,SAAS,WAAW,KAAK,SAAS,QAAS,KAAK,SAAS,SAChE,OAAO;EAGT,IAAI;EAEJ,IAAI,IAAI,YACN,QAAQ,OAAO,KAAK,IAAI,UAAU,CAAC,CAAC;OAGpC,QAAQ,mBAAmB,KAAK,IAAI,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK;EAG9E,IAAI,CAAC,OAEH,QAAQ,sBAAsB,KAAK,IAAI,WAAW,EAAE,CAAC,GAAG;EAG1D,OAAO,IAAI,8BACT,IAAI,KAAK,MAAM,YAAY,KAAK,UAAU,WAAW,WAAW,SAAS,qBACzE,CACE;GACE,MAAM;GACN,OAAO,OAAO,SAAS,QAAQ;GAC/B,OAAO,SAAS;EAClB,CACF,CACF;CACF;;;;;;;;;;;;CAaA,AAAQ,wBAAiD;EACvD,OAAO,GAAG,KAAK,aAAa,KAAK,MAAM,kBAAkB;CAC3D;;;;;;CAOA,MAAa,iBAAgC;EAC3C,IAAI,CAAC,KAAK,KAAK,kBAAkB,KAAK,MAAM,IAAI,IAAI,GAClD;EAGF,MAAM,cAAc,KAAK,WAAW;EACpC,IAAI,CAAC,aACH;EAIF,MAAM,YAAY,KAAK,iBAAiB;EAExC,MAAM,gBAAgB,KAAK,mBAAmB;EAE9C,MAAM,KAAK,MAAM,YAAY,eAAe;GAC1C,OAAO,KAAK;GACZ;GACA;EACF,CAAC;EAED,KAAK,MAAM,IAAI,MAAM,EAAE;CACzB;;;;;;;;;;;;;;;;;;;;;;CAuBA,AAAQ,wBAA0C;EAChD,MAAM,aAA+B,CAAC;EAOtC,MAAM,kBAAkB,IAAI,IAAI;GAAC,KAAK;GAAY;GAAM;EAAK,CAAC;EAG9D,MAAM,eAAe,KAAK,MACvB,gBAAgB,CAAC,CACjB,QAAO,WAAU,CAAC,gBAAgB,IAAI,MAAM,KAAK,CAAC,KAAK,mBAAmB,IAAI,MAAM,CAAC;EAExF,IAAI,aAAa,SAAS,GAAG;GAC3B,WAAW,OAAO,CAAC;GACnB,KAAK,MAAM,UAAU,cAAc;IAEjC,IADc,KAAK,MAAM,IAAI,MACrB,MAAM,QAAW;IAEzB,WAAW,KAAK,UAAU,KAAK,MAAM,IAAI,MAAM;GACjD;EACF;EAGA,MAAM,iBAAiB,KAAK,MACzB,kBAAkB,CAAC,CACnB,QAAO,WAAU,CAAC,gBAAgB,IAAI,MAAM,CAAC;EAEhD,IAAI,eAAe,SAAS,GAAG;GAC7B,WAAW,SAAS,CAAC;GACrB,KAAK,MAAM,UAAU,gBACnB,WAAW,OAAO,UAAU;EAEhC;EAEA,OAAO;CACT;;;;;;;;;;;;CAaA,AAAQ,mBAA2B;EACjC,IAAI,KAAK,KAAK,WACZ,OAAO,KAAK,KAAK;EAGnB,IAAI,KAAK,KAAK,iBACZ,OAAO,OAAO,KAAK,KAAK,oBAAoB,aACxC,KAAK,KAAK,gBAAgB,IAC1B,KAAK,UAAU,KAAO,MAAM;EAGlC,OAAO;CACT;;;;;;;;;;;;CAaA,AAAQ,qBAA6B;EACnC,IAAI,KAAK,KAAK,iBACZ,OAAO,OAAO,KAAK,KAAK,oBAAoB,aACxC,KAAK,KAAK,gBAAgB,IAC1B,KAAK,UAAU,GAAG,EAAE;EAG1B,IAAI,KAAK,KAAK,eACZ,OAAO,KAAK,KAAK;EAGnB,OAAO;CACT;;;;;;;;;CAUA,AAAQ,UAAU,KAAa,KAAqB;EAClD,OAAO,KAAK,MAAM,KAAK,OAAO,KAAK,MAAM,MAAM,EAAE,IAAI;CACvD;;;;;;;;;;CAWA,AAAQ,YAAY,eAA+B;EACjD,kBAAkB;GAChB,aAAa,KAAK,KAAK;GACvB,WAAW;GACX,eAAe,kBAAkB,KAAK,MAAM,WAAW,KAAK,OAAO,aAAa;EAClF,CAAC;CACH;AACF"}

package/llms-full.txt

@@ -1572,9 +1572,24 @@ await transaction(async () => {
 }, { isolationLevel: "SERIALIZABLE" });
 ```
 
-On `SERIALIZABLE`, Postgres may abort with a serialization failure when concurrent transactions conflict — wrap in retry logic at the caller.
-
-## Row locking — `lockForUpdate({ skipLocked })` (Postgres)
+On `SERIALIZABLE`, Postgres may abort with a serialization failure when concurrent transactions conflict — wrap in retry logic at the caller.
+
+## Transaction-local settings (Postgres)
+
+Pass `settings` to configure PostgreSQL values only for the current transaction. This is useful for row-level security context, timeouts, and schema selection; Cascade applies each value with parameterized `set_config(..., true)`, so it cannot leak back into the pool:
+
+```ts
+await transaction(async () => {
+  await Invoice.query().get();
+}, {
+  settings: {
+    "app.tenant_id": tenantId,
+    statement_timeout: 5_000,
+  },
+});
+```
+
+## Row locking — `lockForUpdate({ skipLocked })` (Postgres)
 
 Chain `lockForUpdate()` on any query to emit `SELECT ... FOR UPDATE`: the matched rows are locked until the transaction ends, so no other transaction can modify or lock them. Only meaningful **inside** a transaction — outside one the lock releases immediately.
 

package/package.json

@@ -13,10 +13,10 @@
     "@mongez/events": "^2.2.8",
     "@mongez/reinforcements": "^4.0.2",
     "@mongez/supportive-is": "^2.1.5",
-    "@warlock.js/context": "5.23.1",
-    "@warlock.js/logger": "5.23.1",
-    "@warlock.js/scheduler": "5.23.1",
-    "@warlock.js/seal": "5.23.1",
+    "@warlock.js/context": "5.24.0",
+    "@warlock.js/logger": "5.24.0",
+    "@warlock.js/scheduler": "5.24.0",
+    "@warlock.js/seal": "5.24.0",
     "citty": "^0.2.2",
     "fast-glob": "^3.3.3"
   },
@@ -52,7 +52,7 @@
   ],
   "author": "hassanzohdy",
   "license": "MIT",
-  "version": "5.23.1",
+  "version": "5.24.0",
   "main": "./cjs/index.cjs",
   "module": "./esm/index.mjs",
   "types": "./esm/index.d.mts",

package/skills/manage-transactions/SKILL.md

@@ -97,9 +97,24 @@ await transaction(async () => {
 }, { isolationLevel: "SERIALIZABLE" });
 ```
 
-On `SERIALIZABLE`, Postgres may abort with a serialization failure when concurrent transactions conflict — wrap in retry logic at the caller.
-
-## Row locking — `lockForUpdate({ skipLocked })` (Postgres)
+On `SERIALIZABLE`, Postgres may abort with a serialization failure when concurrent transactions conflict — wrap in retry logic at the caller.
+
+## Transaction-local settings (Postgres)
+
+Pass `settings` to configure PostgreSQL values only for the current transaction. This is useful for row-level security context, timeouts, and schema selection; Cascade applies each value with parameterized `set_config(..., true)`, so it cannot leak back into the pool:
+
+```ts
+await transaction(async () => {
+  await Invoice.query().get();
+}, {
+  settings: {
+    "app.tenant_id": tenantId,
+    statement_timeout: 5_000,
+  },
+});
+```
+
+## Row locking — `lockForUpdate({ skipLocked })` (Postgres)
 
 Chain `lockForUpdate()` on any query to emit `SELECT ... FOR UPDATE`: the matched rows are locked until the transaction ends, so no other transaction can modify or lock them. Only meaningful **inside** a transaction — outside one the lock releases immediately.