1. guides
prorm
  • prorm documentation
  • Known test gaps
  • Architecture
  • Core concepts
  • Database types & coverage
  • Getting started
  • Going further
  • compliance
    • Compliance
    • The security toolkit: `prorm audit`
    • Checklists by regulation
    • Declaring personal data
    • Evidence bundles
    • Evidence
    • Frameworks: `@Security`
    • Jurisdictions
    • Platform policies
    • Protecting data
    • The regulation dataset
    • Residency and cross-border transfers
    • Retention & integrity
    • Status
    • Subject rights
  • decorators
    • prorm with decorators
    • Models with decorators
    • Querying a decorated model
    • Relations with decorators
  • diagrams
    • Diagram generators
    • Chen diagram
    • Class diagram
    • Dependency diagram
    • ER diagram
    • Flow diagram
    • From your models to a diagram
    • Gantt diagram
    • Index diagram
    • Migration diagram
    • Model diagram
    • Package diagram
    • Crow’s-foot diagram
    • Schema documentation
    • Sequence diagram
    • State diagram
    • Tree diagram
  • dialects
    • SQL dialects
    • AlloyDB Dialect
    • AlloyDB Omni Dialect
    • Amazon Athena Dialect
    • Aurora DSQL Dialect
    • Amazon Aurora MySQL Dialect
    • Amazon Aurora PostgreSQL Dialect
    • Azure Database for MySQL Dialect
    • Azure Database for PostgreSQL Dialect
    • Azure SQL Database Dialect
    • Azure SQL Managed Instance Dialect
    • Google BigQuery Dialect
    • Citus Dialect
    • ClickHouse dialect
    • Cloud Authentication (`cloud-auth`)
    • Cloud SQL for SQL Server Dialect
    • Cloud SQL for MySQL Dialect
    • Cloud SQL for PostgreSQL Dialect
    • CockroachDB Dialect
    • Azure Cosmos DB for PostgreSQL Dialect
    • CrateDB Dialect
    • Cloudflare D1 Dialect
    • Databricks dialect
    • IBM Db2 Dialect
    • Dolt Dialect
    • Apache Doris Dialect
    • Druid Dialect
    • DuckDB Dialect
    • Exasol dialect
    • Microsoft Fabric Data Warehouse Dialect
    • Firebird Dialect
    • Greenplum Dialect
    • SAP HANA Dialect
    • MySQL HeatWave Dialect
    • Azure Data Explorer (Kusto) Dialect — T-SQL
    • MariaDB Dialect
    • Materialize Dialect
    • MonetDB Dialect
    • MotherDuck Dialect
    • Microsoft SQL Server Dialect
    • MySQL Dialect
    • Neon Dialect
    • OceanBase Dialect
    • openGauss Dialect
    • Oracle Dialect
    • Oracle Autonomous Database Dialect
    • ParadeDB Dialect
    • PolarDB Dialect
    • PostgreSQL Dialect
    • Presto Dialect
    • QuestDB Dialect
    • Aurora RDS Data API Dialect (`rdsdata`)
    • Amazon RDS for Db2 Dialect
    • Amazon RDS for MariaDB Dialect
    • Amazon RDS for SQL Server Dialect
    • Amazon RDS for MySQL Dialect
    • Amazon RDS for Oracle Dialect
    • Amazon RDS for PostgreSQL Dialect
    • Amazon Redshift
    • Amazon Redshift Data API Dialect
    • RisingWave Dialect
    • rqlite Dialect
    • SingleStore Dialect
    • Snowflake Dialect
    • Google Cloud Spanner Dialect
    • Spanner (PostgreSQL interface) Dialect
    • SQLite Dialect
    • StarRocks Dialect
    • Supabase Dialect
    • Azure Synapse Analytics (dedicated SQL pool)
    • Teradata Dialect
    • TiDB Dialect
    • TimescaleDB Dialect
    • Trino Dialect
    • Turso / libSQL Dialect
    • Vertica dialect
    • Vitess Dialect
    • Yellowbrick Dialect
    • YugabyteDB Dialect
  • guides
    • Access rules and behaviour profiles
    • ArangoDB (AQL)
    • Associations
    • Audit levels and escalation
    • Audit logging
    • In the browser
    • Bulk operations
    • Caching
    • Capabilities, tiers and team roles
    • CLI
    • Cloudflare
    • Compliance & data protection
    • Connection Pooling & Performance
    • Security in the console
    • Couchbase: structured N1QL queries
    • Data types
    • Decorators
    • Eager loading
    • Enums and constants
    • Error handling & error types
    • Extensions
    • External fields
    • Foreign data wrappers
    • Graph databases
    • Hooks & lifecycle events
    • Indexes & constraints
    • InfluxDB: structured Flux pipelines
    • klock-errors
    • klock — the `.klock` file
    • Local databases (`prorm db up`)
    • Structured log search — Splunk, Graylog, Papertrail, Sumo Logic
    • Logging
    • Grafana Loki: structured LogQL queries
    • MCP server
    • Migrate — the data transfer subsystem
    • Migrations & Schema Sync
    • Models from an existing database
    • Defining models
    • Multiple databases
    • OrientDB, Neptune and TigerGraph
    • Passwords
    • Importing a Prisma schema
    • Structured PromQL and MetricsQL
    • Query firewall
    • QueryInterface
    • Query operators reference
    • Query optimization
    • Composing find options with `pipe()` and `Q`
    • Query safety: the fail-closed WHERE guard
    • Querying
    • Raw Queries & Query Building
    • Read replicas
    • Schema diffing & migration generation
    • Views, triggers & other schema objects
    • Scopes & default scopes
    • Seeders
    • SPARQL / RDF triplestores
    • SQL constants
    • SQL features
    • SQL function builders
    • SQLite advanced features
    • StoreKey — a prod-orm database as the storage
    • Streaming results
    • Terraform
    • Transactions & Isolation Levels
    • Type mapping: legacy and modern
    • TypeScript types
    • Database users, roles & privileges
    • Validation & constraints
    • Virtual & Computed Fields
    • Writing docs
  • javascript
    • prorm in JavaScript
    • Models in JavaScript
    • Querying in JavaScript
    • Relations in JavaScript
  • runbooks
    • Operational runbooks
    • Connection failures
    • Credential rotation
    • Failover
    • Incident checklist
    • Deploying klock v2
    • Migration rollback
  • running-databases
    • Running databases in Docker
    • Running prorm under Bun in Docker
    • Running Cassandra in Docker with prorm
    • Running ClickHouse in Docker with prorm
    • Running CockroachDB in Docker with prorm
    • Running prorm under Deno in Docker
    • Running Elasticsearch in Docker with prorm
    • Running MariaDB in Docker with prorm
    • Running MongoDB in Docker with prorm
  • prorm control plane
    • Introduction
    • Authentication
    • Errors
    • Getting started
      • Service
        • Is it up
        • This description
    • Account
      • Sign-up and verification
        • Create an account
        • Exchange credentials for a token
        • Verify with the emailed code
        • Verify by clicking the emailed link
        • Name the parent or guardian
        • What a consent link is about
        • Give consent for a child's account
        • Ask the parent or guardian again
        • Send a new code and link
      • Family
        • Everyone this account is responsible for
        • One child, in detail
        • Turn a limit on or off
      • Profile
        • Who am I
        • Change the account
        • Every address on the account
        • Add an address
        • Confirm an address with the code mailed to it
        • Mail a fresh code to an unconfirmed address
        • Make an address primary
        • Remove an address
        • What this caller may do
    • Security
      • Sessions
        • Everywhere this account is signed in
        • Sign out everywhere else
        • Sign one out
        • A token for the CLI on a named machine
        • A token for the customer console, from the staff one
        • Park a sign-in for the CLI to collect
        • The CLI collecting its sign-in
        • The team's members' live sessions
        • Sign a member's session out
        • Sign an account out everywhere
        • Everywhere the account is signed in
        • Sign an account's session out
      • Single sign-on
        • Begin a single sign-on
        • The provider's return
        • Link the signed-in account to a team's provider
        • Which team an address signs in to
        • The team's single sign-on, as a member sees it
        • Set the team's OpenID Connect provider up, or change it
        • Remove the provider
        • The team's domain claims and the DNS record each needs
        • Prove a claimed domain
      • MFA and passwords
        • Start enrolling a second factor
        • Prove the app has it
        • Remove the second factor
        • Ask for a reset link
        • Set a new password with the emailed token
      • Klock
        • Open a device-bound klock session
        • Check in, for the next grant
        • Step up the session asking
        • Rotate the device key
        • Freeze a session
        • Unfreeze a session
        • A guest grant
        • The revocation feed
        • The published keyset
        • What this control plane supports
      • Devices
        • Your devices, or a team's
        • Approve a new device's pairing code
        • One device
        • Rename a device
        • Revoke a device
        • Suspend a device
        • Reinstate a suspended device
        • Wipe a device
        • Ask a device to rotate its key
        • The team's members' devices
        • Revoke a member's device
        • An account's devices
        • Revoke an account's device
        • Wipe an account's device
        • The device fleet
      • Access rules and behaviour
        • The access rules that bear on you
        • Add an access rule
        • This request, as the rules see it
        • One access rule
        • Remove an access rule
        • The behaviour profiles that bear on you
        • Add or change a behaviour profile
        • The profile presets
        • Your behaviour findings
        • Acknowledge a finding
        • One behaviour profile
        • Remove a behaviour profile
        • The team's access rules
        • Add a team access rule
        • Remove a team access rule
        • The team's behaviour profiles
        • Add or change a team behaviour profile
        • Remove a team behaviour profile
        • What the team's profiles caught
        • Acknowledge a team finding
      • Recovery and lockdown
        • Ask for a recovery link
        • Recover access with the emailed code
        • Is the account locked down
        • Lock the account down
        • Release a lockdown
        • Lock a member down
        • Release a member's lockdown
      • MCP tokens
        • Make a delegated token for one MCP client
        • The account's delegated tokens
        • Revoke a delegated token
        • What a delegated token may do now
        • Run one MCP tool with a delegated token
        • Run a device-signed MCP tool call relayed by the MCP Worker
      • Kerberos
        • Give the team its own Kerberos realm
        • The team's realm
        • Remove the team's realm
    • Logging and monitoring
      • Audit log
        • What has been done to the account
        • What has happened to this account
        • The account's audit trail
      • Operations
        • Everything that has been asked of this database
        • One, with its steps
        • Stop it
        • Put a failed one back in the queue
        • Every operation, across all accounts
      • Metrics and events
        • Every measurement, for a graph
        • Who did what to it
    • Billing
      • Plans and pricing
        • What the plans allow
        • The rate card
        • What one database would cost
        • What this account is paying for, itemised
      • Subscriptions and invoices
        • What this month's invoice will say
        • What this account is on
        • What it has been charged
        • Start a Stripe Checkout session
        • Open the customer portal
        • Stripe's events
        • Buy more connection pools
      • Team billing
        • The team's billing account
        • What the team has been charged
        • What this month's invoice will say
        • The team's cards
        • Add a card, through a Stripe-hosted setup session
        • Make a card the team's default
        • Remove a card
        • Start the team paying
        • Open the Stripe portal on the team's customer
        • Change the team's plan
        • Who receives the team's bills
        • How the team pays for transfers
    • Support
      • Support chat
        • My conversations
        • Start a conversation
        • Every support conversation, open first
        • A ticket for the socket
        • One conversation, with who is in it and who is connected
        • Rename a group; open or close a support conversation
        • The lines, oldest first
        • Say something
        • Add somebody
        • Mark read
    • Administration
      • Users
        • Every account
        • One account, with everything hanging off it
        • Grant or revoke admin
        • Verify an account by hand
        • Lock or unlock sign-in
        • Allow or hold provisioning
        • Send the verification mail again
        • Set the plan by hand
      • Platform
        • Every database and store, across all accounts
        • The counts worth putting on a dashboard
      • Staff and permissions
        • What kind of admin the caller is, and which scopes they hold
        • The admin presets
        • Every admin, and the scopes each resolves to
        • Make an account an admin of a kind
        • Change an admin's kind, or a custom admin's scopes
        • Revoke admin
      • Team administration
        • Every team, with its owner and size
        • One team in full — members with their accounts, and projects
        • Hand the team to another member
        • Put an account in the team, active at once
        • Change a member's role
        • Remove a member
      • Assumed identities
        • Assume an identity — act as a customer account
        • The identities the caller holds open
        • End an assumed identity
      • Support inbox
        • The platform's addresses
        • Add a platform address
        • One address, with its counts
        • Change an address's label, routing, or whether it accepts mail
        • Remove an address that holds no mail
        • Make, adopt or repair the address's routing rule
        • Every admin's personal address, made where missing
        • File a raw message, as if it had arrived
        • The inbox
        • One message, whole
        • Mark a message
        • Hand a message to an admin, or take it back
        • Leave an internal note
        • Reply, from the address the message came to
        • What is waiting
    • Databases
      • Databases
        • Data stores
          • Every data store on the account
          • Provision a data store
          • Change a data store that is already running
          • One data store
          • Deprovision it
          • Report what it is using
          • How to reach a data store
        • Connections and credentials
          • The api keys on a database
          • Issue a key
          • Revoke a key
          • The engine users we created
          • Create a user inside the database
          • Give a user a new password
          • Drop a user
          • How the database is reached
          • Set how it is reached
          • Revoke every api key on it
          • How to connect to it
          • The ssh keys that open its bastion
          • Add a key, or have one made
          • The private half of a generated key, once
          • Revoke an ssh key
        • Schema and objects
          • The SQL objects we put in it
          • Create one, and apply it
          • What is in the database, as the engine reports it
          • One table
          • What it would run, without running it
          • Redefine an object in place
          • Drop it
          • The extensions installed in it
        • Migrations
          • A plan compiled to statements, recording nothing
          • The migrations recorded for it
          • Record one
          • Apply everything recorded and not yet run
          • Apply everything pending, oldest version first
        • Lifecycle
          • Grow or shrink it
          • Stop it accepting connections
          • Start it again
          • Move it to another region
        • Backups and replicas
          • Take a backup
          • The backups it has
          • Restore one into it
          • What has been restored into it, and from where
          • Its read copies
          • Add one
        • Policies
          • The catalog
          • One policy
          • What this database is held to
          • Switch a policy on, or change its knobs
          • Switch it off
          • Mark the policies reviewed
          • Evaluate the periodic policies now
          • Who is behind a credential
        • Passwordless
          • The database's passwordless sessions
          • Issue a passwordless session (v1)
          • Revoke a passwordless session
          • Bind a session to a device key
          • Issue a v2 session for a host to bind
          • Redeem an enrolment ticket on the host
          • Check a passwordless credential
          • Run one described query under a passwordless credential
        • Database roles
          • The database's roles
          • Define a role
          • One role
          • Change what a role permits
          • Delete a role, and revoke every key granted it
          • Grant a role, which mints a key
          • Who holds a role
          • The api keys bound to a role
        • Pools
          • A database's connection pools, and how busy each is
          • Open another pool
          • Rename a pool or change its size
          • Close a pool
        • Data plane
          • Run a query against a database
          • Several statements, in order, over one connection
          • Is this database answering
          • What the proxy itself is holding
        • Transfers
          • The strategies this account's tier may use
          • Price a transfer without creating it
          • The account's transfer jobs, newest first
          • Create a transfer job
          • One job, and whether its certificate holds
          • Cancel an unfinished job
          • Start a created job, confirming its price
          • Report a job's status (the runner, or the owner's side of a local run)
        • Every database on the account
        • Provision a database
        • Change a database that is already running
        • One database
        • Deprovision it
        • Read or write it
        • Report what it is using
        • The engines this API will provision
        • Where a managed database can be put
    • Teams
      • Teams
        • Members
          • Who is on it
          • Invite somebody
          • Accept an invitation
          • Change somebody's role
          • Remove somebody
        • Projects
          • The projects a team runs
          • Start one
          • Rename a project, or move its environment
          • Delete a project
          • One project, and what is in it
          • Put a database or store in it
          • What is in a project
          • Take one out
        • The teams this account is on
        • Start one
        • The twelve roles, and what each may do
        • Rename a team
        • Close a team
        • One team
        • Hand the team to somebody else
        • Leave a team
    • Schemas
      • Error
      • ValidationErrors
      • Token
      • PolicyCategory
      • PolicySeverity
      • PolicyAction
      • PolicyTrigger
      • PolicyParam
      • Policy
      • PolicyCatalog
      • PolicyAssignment
      • PolicyOutcome
      • PolicyFiring
      • CredentialTrace
      • Relation
      • Restrictions
      • ChildSummary
      • SignupRequest
      • SigninRequest
      • UpdateMeRequest
      • User
      • Address
      • GeoPoint
      • D1Region
      • Usage
      • UsageReport
      • Resource
      • Database
      • DataStore
      • NewDatabase
      • NewDataStore
      • QueryRequest
      • DatabasePrivilege
      • ApiKey
      • DbUser
      • Access
      • AccessRequest
      • DatabaseObject
      • NewDatabaseObject
      • NewMigration
      • SchemaOperation
      • Migration
      • Operation
      • Session
      • AdminPowers
      • Admin
      • AuditEntry
      • TeamRole
      • Conversation
      • ChatMessage
      • TeamSso
      • Team
      • TeamMember
      • SshKey
      • ConnectionInfo
      • InboxAddress
      • InboxMailbox
      • InboxMessageSummary
      • InboxMessage
      • InboxNote
      • Page
      • Quote
      • Plan
      • ApiError
      • CapabilityRefusal
      • KlockErrorCode
      • PageWindow
      • SessionView
      • KlockStepUpRequest
      • KlockOpenRequest
      • KlockOpenedSession
      • UpdateMeResult
      • CapabilitiesView
      • SessionLimits
      • Device
      • DeviceListed
      • DeviceTeamRef
      • DeviceCommand
      • DeviceAuditLine
      • DeviceActionRequest
      • StaffActionRequest
      • ManagedSession
      • SessionRevoked
      • AccessRule
      • AccessRuleRequest
      • BehaviourProfile
      • BehaviourProfileRequest
      • BehaviourProfileSaved
      • BehaviourFinding
      • BehaviourFindingAck
      • StepUpProof
      • Removed
      • MemberLockdownRequest
      • McpClient
      • McpDelegatedView
      • McpToolCall
      • McpForwardRequest
      • PasswordlessScope
      • RoleScope
      • PasswordlessSession
      • PasswordlessTlsMaterial
      • PasswordlessKerberosMaterial
      • ServiceDeviceKeys
      • ServiceSession
      • DatabaseRole
      • TransferEndpoint
      • TransferJobRequest
      • TransferQuote
      • TransferStrategy
      • TransferJob
      • TransferJobAccess
      • Pool
      • PoolAllowance
      • BillingSubscription
      • Invoice
      • BillingContact
      • PaymentMethod
      • UpcomingCharges
      • TeamBilling
      • TeamKerberosRealm
      • TeamSsoDomain
      • TeamSsoResponse
      • StoreConnection
      • BatchFailure
      • ProxyStatus
  1. guides

ArangoDB (AQL)

The graph databases guide covers the stores that
implement the ORM-structured graph contract — thirteen compile* methods that
take findAll-shaped specs and return a { text, params } statement. This
page covers the ArangoDB implementation, AqlGraphDialect, and the structured
path it gives ArangoStore.
Before it existed, ArangoStore could create collections and read documents by
key, but anything resembling a query meant writing AQL by hand. It no longer
does: you pass the same spec objects the other graph dialects take, and the
dialect compiles the AQL.

The mapping#

ArangoDB is multi-model. Documents live in collections; a collection whose
documents carry _from and _to is an edge collection that can be
traversed. That makes the mapping unusually direct:
ORM conceptArangoDB
node labeldocument collection of the same name
edge labeledge collection of the same name
nodea document (_key, _id, _rev are ArangoDB's own)
edgea document whose _from / _to hold document _ids
association / includea one-hop traversal over the edge collection
A label maps to a collection of the same name unless you say otherwise:
new AqlGraphDialect({
  collections: { User: 'users' },        // node label  -> document collection
  edgeCollections: { HAS_POSTS: 'authored' }, // edge label -> edge collection
});

Side by side: the call and the AQL it runs#

Every call below is on ArangoStore; the AQL tab is exactly what getGraphDialect() compiles for it, bind parameters included.
import { Op } from 'ts-prorm-orm';
import { ArangoStore } from 'ts-prorm-orm/nosql/arangodb';

const store = new ArangoStore({ url: 'http://localhost:8529', databaseName: '_system' });
await store.connect();

// 1. filtered, sorted, paged read
const page3 = await store.matchNodes({
  label: 'users',
  where: { age: { [Op.gte]: 18 }, active: true },
  order: [['age', 'DESC']],
  limit: 10,
  offset: 20,
});

// 2. one-hop include: each user with their posts
const withPosts = await store.matchNodes({
  label: 'users',
  where: { name: 'Ada' },
  include: [{ edgeLabel: 'authored', direction: 'out', targetLabel: 'posts', as: 'posts' }],
});

// 3. multi-hop traversal
const reachable = await store.traverseNodes({
  label: 'users', where: { name: 'Ada' },
  edgeLabel: 'authored', direction: 'out', maxDepth: 2, targetLabel: 'posts',
});

// 4. create-or-update an edge between two matched documents
await store.relateNodes({
  fromLabel: 'users', fromWhere: { _key: 'ada' },
  edgeLabel: 'authored',
  toLabel: 'posts', toWhere: { _key: 'p1' },
  props: { at: '2026-07-05' },
});

// 5. atomic counter
await store.incrementNodes('posts', { views: 1 }, { _key: 'p1' });
// 1. params: { '@c0': 'users', v0: 'age', v1: 18, v2: 'active', v3: true, v4: 'age' }
FOR doc IN @@c0
FILTER (doc[@v0] >= @v1 AND doc[@v2] == @v3)
SORT doc[@v4] DESC
LIMIT 20, 10
RETURN doc

// 2. params: { '@c0': 'users', '@c1': 'authored', v0: 'name', v1: 'Ada', v2: 'posts', v3: 'posts' }
FOR doc IN @@c0
FILTER doc[@v0] == @v1
RETURN MERGE(doc, { [@v2]: (FOR n0 IN 1..1 OUTBOUND doc @@c1 FILTER PARSE_IDENTIFIER(n0._id).collection == @v3 RETURN n0) })

// 3. params: { '@c0': 'users', '@c1': 'authored', v0: 'name', v1: 'Ada', v2: 'posts' }
WITH posts
FOR doc IN @@c0
FILTER doc[@v0] == @v1
FOR node IN 1..2 OUTBOUND doc @@c1
FILTER PARSE_IDENTIFIER(node._id).collection == @v2
RETURN DISTINCT node

// 4. params: { '@c0': 'users', '@c1': 'posts', '@c2': 'authored', v0: '_key', v1: 'ada', v2: '_key', v3: 'p1', v4: { at: '2026-07-05' } }
FOR src IN @@c0
FILTER src[@v0] == @v1
FOR dst IN @@c1
FILTER dst[@v2] == @v3
UPSERT { _from: src._id, _to: dst._id } INSERT MERGE(@v4, { _from: src._id, _to: dst._id }) UPDATE @v4 IN @@c2
RETURN NEW

// 5. params: { '@c0': 'posts', v0: '_key', v1: 'p1', v2: 'views', v3: 1 }
FOR doc IN @@c0
FILTER doc[@v0] == @v1
UPDATE doc WITH { [@v2]: (doc[@v2] == null ? 0 : doc[@v2]) + @v3 } IN @@c0
RETURN NEW
With store.configureGraph({ graph: 'social' }), the traversal (3) names the graph instead of an edge collection, and the WITH prelude goes away:
// params: { '@c0': 'users', v0: 'name', v1: 'Ada', v2: 'social', v3: 'posts' }
FOR doc IN @@c0
FILTER doc[@v0] == @v1
FOR node IN 1..2 OUTBOUND doc GRAPH @v2
FILTER PARSE_IDENTIFIER(node._id).collection == @v3
RETURN DISTINCT node

Two query forms, not one#

AQL has a collection form and a traversal form, and they are not
interchangeable. compileMatch uses the first:
FOR doc IN @@c0
FILTER (doc[@v0] == @v1 AND doc[@v2] >= @v3)
SORT doc[@v4] DESC
LIMIT 20, 10
RETURN doc
compileTraverse uses the second:
WITH posts
FOR doc IN @@c0
FILTER doc[@v0] == @v1
FOR node IN 1..3 OUTBOUND doc @@c1
FILTER PARSE_IDENTIFIER(node._id).collection == @v2
RETURN DISTINCT node
Note the start vertex. AQL traversals start from a document _id, but you
never build one: an enclosing FOR selects the start documents with the full
ORM where surface and hands the document itself to the traversal.
An include nests the second form inside the first, as a subquery:
FOR doc IN @@c0
RETURN MERGE(doc, { [@v0]: (FOR n0 IN 1..1 OUTBOUND doc @@c1 RETURN n0) })

Named graph or edge collections#

Both are supported. Configure a named graph and traversals compile to
… GRAPH @v0, with ArangoDB resolving the edge collections from the graph
definition:
import { ArangoStore } from 'ts-prorm-orm/nosql/arangodb';

const store = new ArangoStore({ url: 'http://localhost:8529', databaseName: '_system' });
store.configureGraph({ graph: 'social' });
Leave it unset and each traversal names its own edge collection
(… OUTBOUND doc @@c1), which needs no graph to exist. The named graph is the
default target when one is configured, because it is the only form that knows
the reachable vertex collections without being told — the anonymous form needs
a WITH prelude in a cluster, which is why one appears above.

Bind parameters: @value versus @@collection#

This is the injection boundary, so it is worth being exact.
AQL has two kinds of bind parameter. A value parameter is @name and may
hold anything JSON. A collection parameter is @@name, must be a plain
string, and is only accepted where the grammar expects a collection: after
FOR … IN, INSERT … INTO, UPDATE/REPLACE/REMOVE/UPSERT … IN, and in
a traversal's edge-collection list. The two are written asymmetrically — the
key in the bind map carries one @, the reference in the query carries
two:
Bound, never written into the query text:
every filter value, and every filter field name — AQL can bind a property
name through doc[@v0], so not even a key is parsed as query text;
sort keys, projection lists (KEEP/UNSET take a bound array), include
aliases (a bound dynamic object key, { [@v0]: … }), patch and upsert
documents;
collection names, as @@ parameters;
the named graph's name — it is a string value, not a collection, so it binds
with a single @.
Written into the text, and therefore validated first:
the traversal direction keyword. ArangoDB documents that this cannot be a
bind parameter, so it comes from a fixed three-entry enum
(out/in/both → OUTBOUND/INBOUND/ANY); anything else falls back
to OUTBOUND rather than reaching the query;
the depth range min..max and LIMIT offset, count, coerced to
non-negative integers — Number('10 REMOVE doc IN users') is NaN, and a
ValidationError is raised rather than a query built;
collection names in the WITH prelude of an anonymous-graph traversal. They
have to be known when the query is parsed, so this is the one place a
collection name is text rather than a parameter.
Because of that last case, collection names are validated, not sanitized:
they must match ArangoDB's traditional naming rule ([A-Za-z][A-Za-z0-9_-]*,
max 256 characters) or a ValidationError names the label and the call. The
shared safeIdent() helper is deliberately not used on them — it rewrites
offending characters to _, so my-graph would silently become my_graph, a
different and probably empty collection. Mangling is fine for an identifier the
compiler is minting; it is wrong for a name that has to resolve to something
that already exists.
Labels are checked before any of this by requireGraphLabel(), so a missing
one raises a ValidationError instead of putting undefined in the query.

Writes#

CallAQL
createNodeINSERT @v0 INTO @@c0 RETURN NEW
updateNodesFOR doc IN @@c0 FILTER … UPDATE doc WITH @v2 IN @@c0 RETURN NEW
upsertNodeUPSERT @v0 INSERT @v1 UPDATE @v1 IN @@c0 RETURN NEW
incrementNodesUPDATE doc WITH { [@v2]: (doc[@v2] == null ? 0 : doc[@v2]) + @v3 }
deleteNodesFOR doc IN @@c0 FILTER … REMOVE doc IN @@c0 RETURN OLD
relateNodesUPSERT { _from: src._id, _to: dst._id } INSERT MERGE(@v4, …) UPDATE @v4 IN @@c2
Three of those are worth a note.
Upsert uses AQL's dedicated UPSERT … INSERT … UPDATE … IN statement: one
atomic server-side operation, not a read followed by a racy write.
Removing an attribute (passing undefined as a value) compiles to null
plus OPTIONS { keepNull: false }, which is the only way AQL's UPDATE can
delete one. The option only appears when a removal was actually requested —
switching it on unconditionally would silently delete an explicitly stored
null instead of writing it.
Relating two documents reads _from/_to off the documents the filters
matched, so a collection/key identifier is never assembled from caller input.
The UPSERT on the endpoint pair gives Cypher MERGE's semantics: re-relating
the same pair updates the edge rather than adding a parallel one.

Deleting a vertex does not delete its edges#

ArangoDB leaves edges pointing at a removed vertex dangling, and AQL cannot
fix that in one statement: a query may contain one data-modification
operation, and none inside a subquery. So the vertex removal and the edge
sweep are genuinely two queries, and detach is handled by the store rather
than pretended at by the compiler:
const store = new ArangoStore({ url: 'http://localhost:8529', databaseName: '_system' });
await store.deleteNodes('users', { _key: 'k1' }, {
  detach: true,
  edgeCollections: ['authored'],   // or configureGraph({ graph }) and let it look them up
});
Asking to detach with neither an edge-collection list nor a configured named
graph is an error — a plain delete that quietly leaves the edges behind is not
a reasonable fallback.

Indexes are not AQL#

AQL has no DDL. Creating an index is a driver call, not a query, so the four
DDL compile* methods emit an #ARANGO-DDL#-prefixed JSON directive that
query() (on the dialect) or runGraphStatement() (on the store) executes
through the driver. Emitting a harmless no-op query instead would let
createTable() quietly skip the unique index it asked for.
Unique and primary-key constraints become sparse unique persistent
indexes: non-sparse, every document missing the attribute would index as null
and collide with the others.

Op.contains#

Op.contains in a where renders the AQL membership test that matches its
value (fragments of the compiled FILTER, from the builder):
ValueAQL
an element: { tags: { [Op.contains]: 'admin' } }@v1 IN doc[@v0]
an array: { tags: { [Op.contains]: ['a', 'b'] } }@v1 ALL IN doc[@v0]
a document: { prefs: { [Op.contains]: { theme: 'dark' } } }MATCHES(doc[@v0], @v1)
The other graph dialects do not render it and refuse it. An operator the graph
where does not know (a symbol or a $ key) is refused with a
ValidationError, and so is an object that mixes operators with plain keys;
a plain object with no operators is still equality. Before 4.9.2 an unknown
operator was dropped: alone, { [Op.contains]: 'x' } became an equality
against {} and matched nothing, and beside another operator it vanished from
the filter.

What throws#

GraphCapabilityError, for the things AQL genuinely cannot express:
Existence constraints. An ArangoDB index cannot require an attribute to
be present — a sparse index skips the documents that lack it, a non-sparse
one indexes them as null, so neither rejects a write. The nearest feature is
collection-level JSON Schema validation, which is a property of the
collection rather than an index. compileCreateConstraint(…, 'exists')
refuses rather than creating an index that enforces nothing.
Interactive transactions with no declared collections. ArangoDB's
streaming transactions take their locks when the transaction starts, so
the collections have to be declared then; TransactionOptions carries no
collection list and guessing "all of them" would lock the database. Pass
them explicitly:
await dialect.startTransaction({ collections: { write: ['users'] } } as any);
compileShowLabels() lists collections via COLLECTIONS(), which reports no
type — so it cannot tell a document collection from an edge collection, and
edge labels appear in the list too. store.listCollections() carries the type
when the distinction matters.

Using it from the store#

End to end: create the collections, write, query, clean up.
import { Op } from 'ts-prorm-orm';
import { ArangoStore } from 'ts-prorm-orm/nosql/arangodb';

interface User {
  _key: string;
  name: string;
  age: number;
}

const store = new ArangoStore({ url: 'http://localhost:8529', databaseName: '_system', auth: { username: 'root', password: 'openSesame' } });
await store.connect();

try {
  await store.createCollection('users');
  await store.createCollection('posts');
  await store.createEdgeCollection('authored');

  await store.createNode('users', { _key: 'ada', name: 'Ada', age: 36 });
  await store.createNode('posts', { _key: 'p1', title: 'Notes on the Analytical Engine' });
  await store.relateNodes({
    fromLabel: 'users', fromWhere: { _key: 'ada' },
    edgeLabel: 'authored',
    toLabel: 'posts', toWhere: { _key: 'p1' },
    props: { at: new Date().toISOString() },
  });

  const adults = await store.matchNodes<User>({
    label: 'users',
    where: { age: { [Op.gte]: 18 } },
    order: [['age', 'DESC']],
    limit: 10,
  });
  const posts = await store.traverseNodes({
    label: 'users', where: { name: 'Ada' },
    edgeLabel: 'authored', direction: 'out', maxDepth: 2,
    targetLabel: 'posts',
  });

  await store.updateNodes('users', { _key: 'ada' }, { age: 37 });
  console.log(adults.map((u) => u.name), posts.length, await store.countNodes('users'));

  // Removing a vertex leaves its edges dangling unless you detach
  await store.deleteNodes('users', { _key: 'ada' }, { detach: true, edgeCollections: ['authored'] });
} finally {
  for (const c of ['authored', 'posts', 'users']) await store.dropCollection(c);
  await store.disconnect();
}
getGraphDialect() returns the compiler if you want the statement without
running it — for logging, or to pass to query() with extra options:
const store = new ArangoStore({ url: 'http://localhost:8529', databaseName: '_system' });
const stmt = store.getGraphDialect().compileMatch({ label: 'users', where: { name: 'Ada' } });
// { text: 'FOR doc IN @@c0\nFILTER doc[@v0] == @v1\nRETURN doc',
//   params: { '@c0': 'users', v0: 'name', v1: 'Ada' } }

Dropping to raw AQL#

The escape hatch is unchanged, and it is still the right tool for what the
contract does not cover — COLLECT-based aggregation, SHORTEST_PATH, a
traversal that needs the edge or path variables, or a filter that has to hit a
persistent index (a bound attribute name, doc[@v0], cannot use one):
const store = new ArangoStore({ url: 'http://localhost:8529', databaseName: '_system' });
const rows = await store.queryAll(
  `FOR v, e, p IN OUTBOUND SHORTEST_PATH @from TO @to GRAPH 'social' RETURN p`,
  { from: 'users/ada', to: 'users/grace' },
);

Related reading#

Graph databases — the shared contract and the other dialects
OrientDB, Neptune and TigerGraph
Store adapters
Query operators
Modified at 2026-10-04 00:40:16
Previous
Access rules and behaviour profiles
Next
Associations
Built with