1. guides
prorm
  • prorm documentation
  • Known test gaps
  • Architecture
  • Core concepts
  • Database types & coverage
  • Getting started
  • Going further
  • compliance
    • Compliance
    • The security toolkit: `prorm audit`
    • Checklists by regulation
    • Declaring personal data
    • Evidence bundles
    • Evidence
    • Frameworks: `@Security`
    • Jurisdictions
    • Platform policies
    • Protecting data
    • The regulation dataset
    • Residency and cross-border transfers
    • Retention & integrity
    • Status
    • Subject rights
  • decorators
    • prorm with decorators
    • Models with decorators
    • Querying a decorated model
    • Relations with decorators
  • diagrams
    • Diagram generators
    • Chen diagram
    • Class diagram
    • Dependency diagram
    • ER diagram
    • Flow diagram
    • From your models to a diagram
    • Gantt diagram
    • Index diagram
    • Migration diagram
    • Model diagram
    • Package diagram
    • Crow’s-foot diagram
    • Schema documentation
    • Sequence diagram
    • State diagram
    • Tree diagram
  • dialects
    • SQL dialects
    • AlloyDB Dialect
    • AlloyDB Omni Dialect
    • Amazon Athena Dialect
    • Aurora DSQL Dialect
    • Amazon Aurora MySQL Dialect
    • Amazon Aurora PostgreSQL Dialect
    • Azure Database for MySQL Dialect
    • Azure Database for PostgreSQL Dialect
    • Azure SQL Database Dialect
    • Azure SQL Managed Instance Dialect
    • Google BigQuery Dialect
    • Citus Dialect
    • ClickHouse dialect
    • Cloud Authentication (`cloud-auth`)
    • Cloud SQL for SQL Server Dialect
    • Cloud SQL for MySQL Dialect
    • Cloud SQL for PostgreSQL Dialect
    • CockroachDB Dialect
    • Azure Cosmos DB for PostgreSQL Dialect
    • CrateDB Dialect
    • Cloudflare D1 Dialect
    • Databricks dialect
    • IBM Db2 Dialect
    • Dolt Dialect
    • Apache Doris Dialect
    • Druid Dialect
    • DuckDB Dialect
    • Exasol dialect
    • Microsoft Fabric Data Warehouse Dialect
    • Firebird Dialect
    • Greenplum Dialect
    • SAP HANA Dialect
    • MySQL HeatWave Dialect
    • Azure Data Explorer (Kusto) Dialect — T-SQL
    • MariaDB Dialect
    • Materialize Dialect
    • MonetDB Dialect
    • MotherDuck Dialect
    • Microsoft SQL Server Dialect
    • MySQL Dialect
    • Neon Dialect
    • OceanBase Dialect
    • openGauss Dialect
    • Oracle Dialect
    • Oracle Autonomous Database Dialect
    • ParadeDB Dialect
    • PolarDB Dialect
    • PostgreSQL Dialect
    • Presto Dialect
    • QuestDB Dialect
    • Aurora RDS Data API Dialect (`rdsdata`)
    • Amazon RDS for Db2 Dialect
    • Amazon RDS for MariaDB Dialect
    • Amazon RDS for SQL Server Dialect
    • Amazon RDS for MySQL Dialect
    • Amazon RDS for Oracle Dialect
    • Amazon RDS for PostgreSQL Dialect
    • Amazon Redshift
    • Amazon Redshift Data API Dialect
    • RisingWave Dialect
    • rqlite Dialect
    • SingleStore Dialect
    • Snowflake Dialect
    • Google Cloud Spanner Dialect
    • Spanner (PostgreSQL interface) Dialect
    • SQLite Dialect
    • StarRocks Dialect
    • Supabase Dialect
    • Azure Synapse Analytics (dedicated SQL pool)
    • Teradata Dialect
    • TiDB Dialect
    • TimescaleDB Dialect
    • Trino Dialect
    • Turso / libSQL Dialect
    • Vertica dialect
    • Vitess Dialect
    • Yellowbrick Dialect
    • YugabyteDB Dialect
  • guides
    • Access rules and behaviour profiles
    • ArangoDB (AQL)
    • Associations
    • Audit levels and escalation
    • Audit logging
    • In the browser
    • Bulk operations
    • Caching
    • Capabilities, tiers and team roles
    • CLI
    • Cloudflare
    • Compliance & data protection
    • Connection Pooling & Performance
    • Security in the console
    • Couchbase: structured N1QL queries
    • Data types
    • Decorators
    • Eager loading
    • Enums and constants
    • Error handling & error types
    • Extensions
    • External fields
    • Foreign data wrappers
    • Graph databases
    • Hooks & lifecycle events
    • Indexes & constraints
    • InfluxDB: structured Flux pipelines
    • klock-errors
    • klock — the `.klock` file
    • Local databases (`prorm db up`)
    • Structured log search — Splunk, Graylog, Papertrail, Sumo Logic
    • Logging
    • Grafana Loki: structured LogQL queries
    • MCP server
    • Migrate — the data transfer subsystem
    • Migrations & Schema Sync
    • Models from an existing database
    • Defining models
    • Multiple databases
    • OrientDB, Neptune and TigerGraph
    • Passwords
    • Importing a Prisma schema
    • Structured PromQL and MetricsQL
    • Query firewall
    • QueryInterface
    • Query operators reference
    • Query optimization
    • Composing find options with `pipe()` and `Q`
    • Query safety: the fail-closed WHERE guard
    • Querying
    • Raw Queries & Query Building
    • Read replicas
    • Schema diffing & migration generation
    • Views, triggers & other schema objects
    • Scopes & default scopes
    • Seeders
    • SPARQL / RDF triplestores
    • SQL constants
    • SQL features
    • SQL function builders
    • SQLite advanced features
    • StoreKey — a prod-orm database as the storage
    • Streaming results
    • Terraform
    • Transactions & Isolation Levels
    • Type mapping: legacy and modern
    • TypeScript types
    • Database users, roles & privileges
    • Validation & constraints
    • Virtual & Computed Fields
    • Writing docs
  • javascript
    • prorm in JavaScript
    • Models in JavaScript
    • Querying in JavaScript
    • Relations in JavaScript
  • runbooks
    • Operational runbooks
    • Connection failures
    • Credential rotation
    • Failover
    • Incident checklist
    • Deploying klock v2
    • Migration rollback
  • running-databases
    • Running databases in Docker
    • Running prorm under Bun in Docker
    • Running Cassandra in Docker with prorm
    • Running ClickHouse in Docker with prorm
    • Running CockroachDB in Docker with prorm
    • Running prorm under Deno in Docker
    • Running Elasticsearch in Docker with prorm
    • Running MariaDB in Docker with prorm
    • Running MongoDB in Docker with prorm
  • prorm control plane
    • Introduction
    • Authentication
    • Errors
    • Getting started
      • Service
        • Is it up
        • This description
    • Account
      • Sign-up and verification
        • Create an account
        • Exchange credentials for a token
        • Verify with the emailed code
        • Verify by clicking the emailed link
        • Name the parent or guardian
        • What a consent link is about
        • Give consent for a child's account
        • Ask the parent or guardian again
        • Send a new code and link
      • Family
        • Everyone this account is responsible for
        • One child, in detail
        • Turn a limit on or off
      • Profile
        • Who am I
        • Change the account
        • Every address on the account
        • Add an address
        • Confirm an address with the code mailed to it
        • Mail a fresh code to an unconfirmed address
        • Make an address primary
        • Remove an address
        • What this caller may do
    • Security
      • Sessions
        • Everywhere this account is signed in
        • Sign out everywhere else
        • Sign one out
        • A token for the CLI on a named machine
        • A token for the customer console, from the staff one
        • Park a sign-in for the CLI to collect
        • The CLI collecting its sign-in
        • The team's members' live sessions
        • Sign a member's session out
        • Sign an account out everywhere
        • Everywhere the account is signed in
        • Sign an account's session out
      • Single sign-on
        • Begin a single sign-on
        • The provider's return
        • Link the signed-in account to a team's provider
        • Which team an address signs in to
        • The team's single sign-on, as a member sees it
        • Set the team's OpenID Connect provider up, or change it
        • Remove the provider
        • The team's domain claims and the DNS record each needs
        • Prove a claimed domain
      • MFA and passwords
        • Start enrolling a second factor
        • Prove the app has it
        • Remove the second factor
        • Ask for a reset link
        • Set a new password with the emailed token
      • Klock
        • Open a device-bound klock session
        • Check in, for the next grant
        • Step up the session asking
        • Rotate the device key
        • Freeze a session
        • Unfreeze a session
        • A guest grant
        • The revocation feed
        • The published keyset
        • What this control plane supports
      • Devices
        • Your devices, or a team's
        • Approve a new device's pairing code
        • One device
        • Rename a device
        • Revoke a device
        • Suspend a device
        • Reinstate a suspended device
        • Wipe a device
        • Ask a device to rotate its key
        • The team's members' devices
        • Revoke a member's device
        • An account's devices
        • Revoke an account's device
        • Wipe an account's device
        • The device fleet
      • Access rules and behaviour
        • The access rules that bear on you
        • Add an access rule
        • This request, as the rules see it
        • One access rule
        • Remove an access rule
        • The behaviour profiles that bear on you
        • Add or change a behaviour profile
        • The profile presets
        • Your behaviour findings
        • Acknowledge a finding
        • One behaviour profile
        • Remove a behaviour profile
        • The team's access rules
        • Add a team access rule
        • Remove a team access rule
        • The team's behaviour profiles
        • Add or change a team behaviour profile
        • Remove a team behaviour profile
        • What the team's profiles caught
        • Acknowledge a team finding
      • Recovery and lockdown
        • Ask for a recovery link
        • Recover access with the emailed code
        • Is the account locked down
        • Lock the account down
        • Release a lockdown
        • Lock a member down
        • Release a member's lockdown
      • MCP tokens
        • Make a delegated token for one MCP client
        • The account's delegated tokens
        • Revoke a delegated token
        • What a delegated token may do now
        • Run one MCP tool with a delegated token
        • Run a device-signed MCP tool call relayed by the MCP Worker
      • Kerberos
        • Give the team its own Kerberos realm
        • The team's realm
        • Remove the team's realm
    • Logging and monitoring
      • Audit log
        • What has been done to the account
        • What has happened to this account
        • The account's audit trail
      • Operations
        • Everything that has been asked of this database
        • One, with its steps
        • Stop it
        • Put a failed one back in the queue
        • Every operation, across all accounts
      • Metrics and events
        • Every measurement, for a graph
        • Who did what to it
    • Billing
      • Plans and pricing
        • What the plans allow
        • The rate card
        • What one database would cost
        • What this account is paying for, itemised
      • Subscriptions and invoices
        • What this month's invoice will say
        • What this account is on
        • What it has been charged
        • Start a Stripe Checkout session
        • Open the customer portal
        • Stripe's events
        • Buy more connection pools
      • Team billing
        • The team's billing account
        • What the team has been charged
        • What this month's invoice will say
        • The team's cards
        • Add a card, through a Stripe-hosted setup session
        • Make a card the team's default
        • Remove a card
        • Start the team paying
        • Open the Stripe portal on the team's customer
        • Change the team's plan
        • Who receives the team's bills
        • How the team pays for transfers
    • Support
      • Support chat
        • My conversations
        • Start a conversation
        • Every support conversation, open first
        • A ticket for the socket
        • One conversation, with who is in it and who is connected
        • Rename a group; open or close a support conversation
        • The lines, oldest first
        • Say something
        • Add somebody
        • Mark read
    • Administration
      • Users
        • Every account
        • One account, with everything hanging off it
        • Grant or revoke admin
        • Verify an account by hand
        • Lock or unlock sign-in
        • Allow or hold provisioning
        • Send the verification mail again
        • Set the plan by hand
      • Platform
        • Every database and store, across all accounts
        • The counts worth putting on a dashboard
      • Staff and permissions
        • What kind of admin the caller is, and which scopes they hold
        • The admin presets
        • Every admin, and the scopes each resolves to
        • Make an account an admin of a kind
        • Change an admin's kind, or a custom admin's scopes
        • Revoke admin
      • Team administration
        • Every team, with its owner and size
        • One team in full — members with their accounts, and projects
        • Hand the team to another member
        • Put an account in the team, active at once
        • Change a member's role
        • Remove a member
      • Assumed identities
        • Assume an identity — act as a customer account
        • The identities the caller holds open
        • End an assumed identity
      • Support inbox
        • The platform's addresses
        • Add a platform address
        • One address, with its counts
        • Change an address's label, routing, or whether it accepts mail
        • Remove an address that holds no mail
        • Make, adopt or repair the address's routing rule
        • Every admin's personal address, made where missing
        • File a raw message, as if it had arrived
        • The inbox
        • One message, whole
        • Mark a message
        • Hand a message to an admin, or take it back
        • Leave an internal note
        • Reply, from the address the message came to
        • What is waiting
    • Databases
      • Databases
        • Data stores
          • Every data store on the account
          • Provision a data store
          • Change a data store that is already running
          • One data store
          • Deprovision it
          • Report what it is using
          • How to reach a data store
        • Connections and credentials
          • The api keys on a database
          • Issue a key
          • Revoke a key
          • The engine users we created
          • Create a user inside the database
          • Give a user a new password
          • Drop a user
          • How the database is reached
          • Set how it is reached
          • Revoke every api key on it
          • How to connect to it
          • The ssh keys that open its bastion
          • Add a key, or have one made
          • The private half of a generated key, once
          • Revoke an ssh key
        • Schema and objects
          • The SQL objects we put in it
          • Create one, and apply it
          • What is in the database, as the engine reports it
          • One table
          • What it would run, without running it
          • Redefine an object in place
          • Drop it
          • The extensions installed in it
        • Migrations
          • A plan compiled to statements, recording nothing
          • The migrations recorded for it
          • Record one
          • Apply everything recorded and not yet run
          • Apply everything pending, oldest version first
        • Lifecycle
          • Grow or shrink it
          • Stop it accepting connections
          • Start it again
          • Move it to another region
        • Backups and replicas
          • Take a backup
          • The backups it has
          • Restore one into it
          • What has been restored into it, and from where
          • Its read copies
          • Add one
        • Policies
          • The catalog
          • One policy
          • What this database is held to
          • Switch a policy on, or change its knobs
          • Switch it off
          • Mark the policies reviewed
          • Evaluate the periodic policies now
          • Who is behind a credential
        • Passwordless
          • The database's passwordless sessions
          • Issue a passwordless session (v1)
          • Revoke a passwordless session
          • Bind a session to a device key
          • Issue a v2 session for a host to bind
          • Redeem an enrolment ticket on the host
          • Check a passwordless credential
          • Run one described query under a passwordless credential
        • Database roles
          • The database's roles
          • Define a role
          • One role
          • Change what a role permits
          • Delete a role, and revoke every key granted it
          • Grant a role, which mints a key
          • Who holds a role
          • The api keys bound to a role
        • Pools
          • A database's connection pools, and how busy each is
          • Open another pool
          • Rename a pool or change its size
          • Close a pool
        • Data plane
          • Run a query against a database
          • Several statements, in order, over one connection
          • Is this database answering
          • What the proxy itself is holding
        • Transfers
          • The strategies this account's tier may use
          • Price a transfer without creating it
          • The account's transfer jobs, newest first
          • Create a transfer job
          • One job, and whether its certificate holds
          • Cancel an unfinished job
          • Start a created job, confirming its price
          • Report a job's status (the runner, or the owner's side of a local run)
        • Every database on the account
        • Provision a database
        • Change a database that is already running
        • One database
        • Deprovision it
        • Read or write it
        • Report what it is using
        • The engines this API will provision
        • Where a managed database can be put
    • Teams
      • Teams
        • Members
          • Who is on it
          • Invite somebody
          • Accept an invitation
          • Change somebody's role
          • Remove somebody
        • Projects
          • The projects a team runs
          • Start one
          • Rename a project, or move its environment
          • Delete a project
          • One project, and what is in it
          • Put a database or store in it
          • What is in a project
          • Take one out
        • The teams this account is on
        • Start one
        • The twelve roles, and what each may do
        • Rename a team
        • Close a team
        • One team
        • Hand the team to somebody else
        • Leave a team
    • Schemas
      • Error
      • ValidationErrors
      • Token
      • PolicyCategory
      • PolicySeverity
      • PolicyAction
      • PolicyTrigger
      • PolicyParam
      • Policy
      • PolicyCatalog
      • PolicyAssignment
      • PolicyOutcome
      • PolicyFiring
      • CredentialTrace
      • Relation
      • Restrictions
      • ChildSummary
      • SignupRequest
      • SigninRequest
      • UpdateMeRequest
      • User
      • Address
      • GeoPoint
      • D1Region
      • Usage
      • UsageReport
      • Resource
      • Database
      • DataStore
      • NewDatabase
      • NewDataStore
      • QueryRequest
      • DatabasePrivilege
      • ApiKey
      • DbUser
      • Access
      • AccessRequest
      • DatabaseObject
      • NewDatabaseObject
      • NewMigration
      • SchemaOperation
      • Migration
      • Operation
      • Session
      • AdminPowers
      • Admin
      • AuditEntry
      • TeamRole
      • Conversation
      • ChatMessage
      • TeamSso
      • Team
      • TeamMember
      • SshKey
      • ConnectionInfo
      • InboxAddress
      • InboxMailbox
      • InboxMessageSummary
      • InboxMessage
      • InboxNote
      • Page
      • Quote
      • Plan
      • ApiError
      • CapabilityRefusal
      • KlockErrorCode
      • PageWindow
      • SessionView
      • KlockStepUpRequest
      • KlockOpenRequest
      • KlockOpenedSession
      • UpdateMeResult
      • CapabilitiesView
      • SessionLimits
      • Device
      • DeviceListed
      • DeviceTeamRef
      • DeviceCommand
      • DeviceAuditLine
      • DeviceActionRequest
      • StaffActionRequest
      • ManagedSession
      • SessionRevoked
      • AccessRule
      • AccessRuleRequest
      • BehaviourProfile
      • BehaviourProfileRequest
      • BehaviourProfileSaved
      • BehaviourFinding
      • BehaviourFindingAck
      • StepUpProof
      • Removed
      • MemberLockdownRequest
      • McpClient
      • McpDelegatedView
      • McpToolCall
      • McpForwardRequest
      • PasswordlessScope
      • RoleScope
      • PasswordlessSession
      • PasswordlessTlsMaterial
      • PasswordlessKerberosMaterial
      • ServiceDeviceKeys
      • ServiceSession
      • DatabaseRole
      • TransferEndpoint
      • TransferJobRequest
      • TransferQuote
      • TransferStrategy
      • TransferJob
      • TransferJobAccess
      • Pool
      • PoolAllowance
      • BillingSubscription
      • Invoice
      • BillingContact
      • PaymentMethod
      • UpcomingCharges
      • TeamBilling
      • TeamKerberosRealm
      • TeamSsoDomain
      • TeamSsoResponse
      • StoreConnection
      • BatchFailure
      • ProxyStatus
  1. guides

Couchbase: structured N1QL queries

Source: src/nosql/couchbase/n1ql.ts · src/nosql/couchbase/index.ts · Tests: tests/nosql/couchbase-n1ql.test.ts
CouchbaseStore originally exposed key/value CRUD addressed by document id — get / insert / upsert / replace / remove — plus query(n1ql). Fetching a known document was structured; searching was a hand-written N1QL string. This page documents the structured query path that closes that gap.
query() has not gone anywhere. It is the escape hatch for the things N1QL can express and this compiler deliberately will not, and every refusal below names the feature and points back at it.

The surface#

MethodCompiles to
findDocuments(spec)SELECT … FROM <keyspace> AS d [USE KEYS …] [WHERE …] [ORDER BY …] [LIMIT/OFFSET]
findDocument(spec)the same with LIMIT 1, returning the first row or undefined
countDocuments(spec)SELECT COUNT(*) AS \count` …`, returning the number
updateDocuments(spec, values)UPDATE … SET … [UNSET …] WHERE … RETURNING …
destroyDocuments(spec)DELETE FROM … WHERE … RETURNING …
createPrimaryIndex(spec)CREATE PRIMARY INDEX ON <keyspace>
createIndex(spec)CREATE INDEX <name> ON <keyspace>(<keys>)
dropIndex(spec)DROP INDEX <name> ON <keyspace> / DROP PRIMARY INDEX
getN1qlCompiler()the compile-only N1qlCompiler, for inspecting generated N1QL
import { Op } from 'ts-prorm-orm';
import { CouchbaseStore } from 'ts-prorm-orm/nosql/couchbase';

const store = new CouchbaseStore({
  connectionString: 'couchbase://localhost',
  username: 'Administrator',
  password: 'password',
  bucket: 'travel-sample',
  scope: 'inventory',
  collection: 'airline',
});
await store.connect();

const rows = await store.findDocuments({
  where: { country: 'France', 'meta.rank': { [Op.gte]: 3 } },
  attributes: ['name', 'callsign'],
  order: [['name', 'ASC']],
  limit: 20,
});
with { p0: 'France', p1: 3 } bound as named parameters. No caller-supplied value ever reaches the statement text.

More calls, side by side#

Each prorm call on the left compiles to the N1QL on the right; the parameters are shown as a comment. store.getN1qlCompiler() gives you the same output without a connection.
import { Op } from 'ts-prorm-orm';
import { CouchbaseStore } from 'ts-prorm-orm/nosql/couchbase';

const store = new CouchbaseStore({ connectionString: 'couchbase://localhost', username: 'Administrator', password: 'password', bucket: 'travel-sample', scope: 'inventory', collection: 'airline' });
await store.connect();

// 1. count with IN
const n = await store.countDocuments({ where: { country: { [Op.in]: ['France', 'Spain'] } } });

// 2. OR, LIKE, paging
const page = await store.findDocuments({
  where: { name: { [Op.like]: 'Air%' }, [Op.or]: [{ country: 'France' }, { 'meta.rank': { [Op.gte]: 4 } }] },
  order: [['name', 'ASC']],
  limit: 5,
  offset: 10,
});

// 3. by key, no index needed
const two = await store.findDocuments({ keys: ['airline_10', 'airline_137'], attributes: ['name', 'country'] });

// 4. update: a null filter also matches MISSING fields
await store.updateDocuments({ where: { country: 'France', callsign: null } }, { callsign: 'UNKNOWN', 'meta.reviewed': true });

// 5. bounded delete
await store.destroyDocuments({ where: { 'meta.rank': { [Op.lt]: 1 } }, limit: 100 });

// 6. an index for (1) and (2)
await store.createIndex({ name: 'idx_airline_country_rank', fields: ['country', ['meta.rank', 'DESC']], ifNotExists: true });

Which path a call takes#

Key/value calls and USE KEYS never touch an index; everything else goes through the query service and needs one:

The spec shape#

N1qlMatchSpec is field-for-field the findAll shape the rest of the library uses — where, attributes, order, limit, offset, count, distinct — with the document-store parts a relational table has no room for:
FieldMeaning
bucket / scope / collectionOverride the store's default keyspace for this call.
keysDocument keys for the USE KEYS fast path.
metaIdAlso project META(d).id. true names it id; a string names it that.
aliasKeyspace alias inside the statement. Defaults to d.
N1qlMutationSpec is the same minus projection, plus returning (true → the affected document keys as { id }, a field list, or false).

Keyspaces are quoted, always#

A Couchbase keyspace is bucket.scope.collection, and bucket names routinely contain - and .. This is the single most dangerous thing to get wrong, because it does not produce an error:
That is valid N1QL. The query runs, matches nothing, and nothing anywhere reports a problem. So every part of the keyspace is validated against Couchbase's own naming rules and backtick-quoted:
A part containing a backtick is rejected, not escaped — Couchbase does not permit one in a name, so it can only be a typo or an injection attempt.
When scope and collection are both _default, the bucket alone is emitted (`travel-sample`) — the same shortcut store.collection() takes for key/value access, and the only form a pre-7.0 server understands. Any non-default part produces the full three-part path.
Projection uses d.*, not *: a bare * in N1QL wraps each document under the keyspace name ({ "airline": { … } }), which is almost never what a caller wants back.

USE KEYS — the index-free path#

When you already know the document keys, pass them:
await store.findDocuments({ keys: ['airline_10', 'airline_10123'] });
// SELECT d.* FROM `travel-sample`.`inventory`.`airline` AS d USE KEYS $p0
USE KEYS reads straight from the key/value layer and never consults an index, so it works on a collection with no GSI at all. A where alongside it still applies, as a filter over the fetched documents. A single key is normalised to a one-element array so the statement text is identical for one key and for many — one more plan-cache hit.

Indexes are mandatory, and the error says so#

This is the trap that makes a N1QL builder dangerous. Couchbase refuses a query with no usable GSI rather than falling back to a scan:
No index available on keyspace `travel-sample`.`inventory`.`airline` that matches your query
The statement the compiler emitted is perfectly valid, so nothing at compile time can catch it. What the store does instead is turn that refusal into the fix. On a query error carrying Couchbase's planning-failure code (4000), it re-derives the index the spec would have needed — from the fields the where actually filtered on plus the order fields — and puts it in the error:
Couchbase query failed: No index available on keyspace … .
No index serves this query. Couchbase refuses an unindexed query rather than scanning, so this
fails until one exists: CREATE INDEX `ix_airline_country_name` ON
`travel-sample`.`inventory`.`airline`(`country`, `name`). A primary index (createPrimaryIndex())
makes any filter run but scans the whole keyspace, and passing `keys` uses USE KEYS, which needs
no index at all.
The same derivation is available directly as getN1qlCompiler().suggestIndex(spec), which returns null for a USE KEYS read (it needs none).
Index management is structured too, so fixing it does not mean dropping back to a string:
await store.createPrimaryIndex({ ifNotExists: true });          // dev and tests
await store.createIndex({ name: 'ix_country', fields: ['country', ['name', 'DESC']] });
await store.dropIndex({ name: 'ix_country' });
Index keys are written unaliased and carry no parameters, because N1QL will not accept a placeholder in an index definition. That is also why partial indexes (CREATE INDEX … WHERE …) are not offered: their predicate would have to be inlined, which is the one thing this compiler exists to avoid. Use query().

MISSING is not NULL#

In a document store an absent field is MISSING, and d.deletedAt IS NULL is false for a document that has no deletedAt at all. The ORM's where: { deletedAt: null } means "has no usable value", so it compiles to both:
and Op.isNotNull to (d.\email` IS NOT NULL AND d.`email` IS NOT MISSING). Emitting the obvious IS NULL` alone is the classic Couchbase zero-rows bug.
Op.ne keeps SQL's three-valued semantics: d.f != $p0 does not match a document where f is missing, the same way <> 'x' does not match a SQL NULL.

Operators#

The ~80 Op.* and $string operators are normalised by the shared normalizeWhere() from src/graph/types.ts — the same single definition the graph dialects use — and rendered here. Notable translations:
OperatorN1QL
eq ne gt gte lt lte= != > >= < <=
in / notInd.f IN $p0 (the array is one bound parameter)
between / notBetweenBETWEEN $p0 AND $p1
isNull / isNotNullnull and missing, as above
like / notLikeLIKE $p0 — the pattern is yours, wildcards intended
iLike / notILikeLOWER(d.f) LIKE $p0 with the pattern lowered too
startsWithPOSITION(d.f, $p0) = 0
endsWithPOSITION(REVERSE(d.f), $p0) = 0, the value reversed
substringCONTAINS(d.f, $p0)
regexp / notRegexpREGEXP_CONTAINS(d.f, $p0)
Two of those are deliberate departures from the obvious translation:
startsWith / endsWith / substring do not become LIKE. Their argument is literal text, not a pattern. LIKE '<value>%' on a value containing % or _ would silently turn it into a wildcard and widen the result set. POSITION and CONTAINS compare the bound string literally, with nothing to escape.
regexp uses REGEXP_CONTAINS, not REGEXP_LIKE. Every SQL dialect's regexp operator is a search; REGEXP_LIKE anchors the pattern to the whole string.
Nested paths work as where keys and as projections: 'address.city' → d.`address`.`city` , and literal array subscripts too: 'tags[0]' → d.`tags`[0].

Mutations require a filter#

updateDocuments and destroyDocuments refuse a spec with neither where nor keys. An unfiltered UPDATE keyspace SET … rewrites every document in the collection, and no ORM should make that the consequence of forgetting an argument. If you genuinely want it, write it and run it through query().
An undefined value unsets the field rather than setting it to null:
await store.updateDocuments({ where: { id: 7 } }, { note: null, nickname: undefined });
// UPDATE `app` AS d SET d.`note` = $p0 UNSET d.`nickname` WHERE d.`id` = $p1
//   RETURNING META(d).id AS `id`
MISSING and NULL are observably different in a document store, so the two spellings must not collapse into one.

What is refused, and why#

Each of these throws N1qlCapabilityError — a typed error naming the feature, following the GraphCapabilityError pattern — rather than emitting a statement the server would reject or, worse, answer wrongly.
RefusedReason
attributes: { exclude: [...] }Needs SELECT * EXCEPT, which only exists on Couchbase Server 7.6+ and cannot be emulated without knowing the document shape. List what you want instead.
Array wildcard paths (tags[*])Matching any element of an array needs UNNEST or ANY … SATISFIES, which restructures the FROM clause, not just one expression.
order: [[f, 'RANDOM']]N1QL has no per-row random function that is stable within a sort, so there is no ORDER BY random().
count + distinct with no single attributeN1QL counts distinct values of an expression, not of a whole document. Pass exactly one field.
Partial index predicatesCannot be parameterised; inlining them is the thing this compiler exists to prevent.
Joins, UNNEST, subqueries, GROUP BY / HAVING, window functionsOut of scope for a findAll-shaped spec. query().
ValidationError covers the malformed rather than the impossible: a non-integer limit/offset, a backtick or illegal character in a keyspace or field name, an empty keys array, a non-array operand for in/between, an unknown sort direction, an unusable alias.

Parameters#

Every value is bound as a named parameter ($p0, $p1, …) and passed to the SDK as an object:
cluster.query(text, { parameters: { p0: 'France', p1: 3 } });
Named rather than positional because the compiler allocates names as it walks the predicate tree; positional binding would make the order load-bearing across nested $or branches. The Couchbase SDK accepts an array for $1-style positional binding, which this compiler never emits.
limit and offset are the only caller-supplied values written into the statement text, and they are safe to inline precisely because they are refused unless they are non-negative integers — what reaches the text is a number this process produced, never the caller's string.

Design note: why not BaseGraphDialect?#

OrientDbStore wires itself to a compile-only BaseGraphDialect subclass, and that is the closest existing pattern. The split is reused here — a compiler that holds no connection, a store that owns the cluster and executes { text, params } — but not the base class.
BaseGraphDialect models a table as a node label, a row as a vertex and an association as an edge, and carries a graph DDL surface (CREATE VERTEX, edge types, traversals). Couchbase has none of those: N1QL is SQL over JSON documents in a keyspace, not a graph language. Inheriting it would have meant implementing a dozen compile*Edge methods that could only ever throw.
What is reused is the part of src/graph/types.ts that is about the ORM's query shape rather than about graphs: normalizeWhere() (the single definition of the operator surface — re-parsing WhereOptions here would create a second, drifting copy), ParamBag (ordered, collision-free parameter naming) and the GraphStatement { text, params } contract. N1qlMatchSpec mirrors NodeMatchSpec field for field so the two read the same.

Verification status#

Unit / mock-verified only, like the rest of CouchbaseStore: tests/nosql/couchbase-n1ql.test.ts injects a mock cluster, so the real couchbase driver is never loaded and no network is touched.
The tests assert the compiled statement and its parameters, and — for every value-carrying case — that the value appears in the parameters and nowhere in the statement text. A test that only checked "the N1QL contains the value" would pass against a builder that interpolates, which is the bug worth catching. Keyspace quoting is covered directly, since an unquoted keyspace returns zero rows instead of an error.
Not verified: behaviour against a real Couchbase cluster — in particular the exact PlanningFailureError shape the SDK raises for error 4000, the availability of IF NOT EXISTS on the target server version, and real index-selection behaviour.

Related reading#

CouchbaseStore reference — connection lifecycle and key/value CRUD
Query operators — the Op.* surface being compiled
ArangoDB AQL — the same structured-query treatment for another document store
Graph databases — the graph dialects whose predicate normaliser is reused here
Modified at 2026-10-04 00:40:16
Previous
Security in the console
Next
Data types
Built with