1. guides
prorm
  • prorm documentation
  • Known test gaps
  • Architecture
  • Core concepts
  • Database types & coverage
  • Getting started
  • Going further
  • compliance
    • Compliance
    • The security toolkit: `prorm audit`
    • Checklists by regulation
    • Declaring personal data
    • Evidence bundles
    • Evidence
    • Frameworks: `@Security`
    • Jurisdictions
    • Platform policies
    • Protecting data
    • The regulation dataset
    • Residency and cross-border transfers
    • Retention & integrity
    • Status
    • Subject rights
  • decorators
    • prorm with decorators
    • Models with decorators
    • Querying a decorated model
    • Relations with decorators
  • diagrams
    • Diagram generators
    • Chen diagram
    • Class diagram
    • Dependency diagram
    • ER diagram
    • Flow diagram
    • From your models to a diagram
    • Gantt diagram
    • Index diagram
    • Migration diagram
    • Model diagram
    • Package diagram
    • Crow’s-foot diagram
    • Schema documentation
    • Sequence diagram
    • State diagram
    • Tree diagram
  • dialects
    • SQL dialects
    • AlloyDB Dialect
    • AlloyDB Omni Dialect
    • Amazon Athena Dialect
    • Aurora DSQL Dialect
    • Amazon Aurora MySQL Dialect
    • Amazon Aurora PostgreSQL Dialect
    • Azure Database for MySQL Dialect
    • Azure Database for PostgreSQL Dialect
    • Azure SQL Database Dialect
    • Azure SQL Managed Instance Dialect
    • Google BigQuery Dialect
    • Citus Dialect
    • ClickHouse dialect
    • Cloud Authentication (`cloud-auth`)
    • Cloud SQL for SQL Server Dialect
    • Cloud SQL for MySQL Dialect
    • Cloud SQL for PostgreSQL Dialect
    • CockroachDB Dialect
    • Azure Cosmos DB for PostgreSQL Dialect
    • CrateDB Dialect
    • Cloudflare D1 Dialect
    • Databricks dialect
    • IBM Db2 Dialect
    • Dolt Dialect
    • Apache Doris Dialect
    • Druid Dialect
    • DuckDB Dialect
    • Exasol dialect
    • Microsoft Fabric Data Warehouse Dialect
    • Firebird Dialect
    • Greenplum Dialect
    • SAP HANA Dialect
    • MySQL HeatWave Dialect
    • Azure Data Explorer (Kusto) Dialect — T-SQL
    • MariaDB Dialect
    • Materialize Dialect
    • MonetDB Dialect
    • MotherDuck Dialect
    • Microsoft SQL Server Dialect
    • MySQL Dialect
    • Neon Dialect
    • OceanBase Dialect
    • openGauss Dialect
    • Oracle Dialect
    • Oracle Autonomous Database Dialect
    • ParadeDB Dialect
    • PolarDB Dialect
    • PostgreSQL Dialect
    • Presto Dialect
    • QuestDB Dialect
    • Aurora RDS Data API Dialect (`rdsdata`)
    • Amazon RDS for Db2 Dialect
    • Amazon RDS for MariaDB Dialect
    • Amazon RDS for SQL Server Dialect
    • Amazon RDS for MySQL Dialect
    • Amazon RDS for Oracle Dialect
    • Amazon RDS for PostgreSQL Dialect
    • Amazon Redshift
    • Amazon Redshift Data API Dialect
    • RisingWave Dialect
    • rqlite Dialect
    • SingleStore Dialect
    • Snowflake Dialect
    • Google Cloud Spanner Dialect
    • Spanner (PostgreSQL interface) Dialect
    • SQLite Dialect
    • StarRocks Dialect
    • Supabase Dialect
    • Azure Synapse Analytics (dedicated SQL pool)
    • Teradata Dialect
    • TiDB Dialect
    • TimescaleDB Dialect
    • Trino Dialect
    • Turso / libSQL Dialect
    • Vertica dialect
    • Vitess Dialect
    • Yellowbrick Dialect
    • YugabyteDB Dialect
  • guides
    • Access rules and behaviour profiles
    • ArangoDB (AQL)
    • Associations
    • Audit levels and escalation
    • Audit logging
    • In the browser
    • Bulk operations
    • Caching
    • Capabilities, tiers and team roles
    • CLI
    • Cloudflare
    • Compliance & data protection
    • Connection Pooling & Performance
    • Security in the console
    • Couchbase: structured N1QL queries
    • Data types
    • Decorators
    • Eager loading
    • Enums and constants
    • Error handling & error types
    • Extensions
    • External fields
    • Foreign data wrappers
    • Graph databases
    • Hooks & lifecycle events
    • Indexes & constraints
    • InfluxDB: structured Flux pipelines
    • klock-errors
    • klock — the `.klock` file
    • Local databases (`prorm db up`)
    • Structured log search — Splunk, Graylog, Papertrail, Sumo Logic
    • Logging
    • Grafana Loki: structured LogQL queries
    • MCP server
    • Migrate — the data transfer subsystem
    • Migrations & Schema Sync
    • Models from an existing database
    • Defining models
    • Multiple databases
    • OrientDB, Neptune and TigerGraph
    • Passwords
    • Importing a Prisma schema
    • Structured PromQL and MetricsQL
    • Query firewall
    • QueryInterface
    • Query operators reference
    • Query optimization
    • Composing find options with `pipe()` and `Q`
    • Query safety: the fail-closed WHERE guard
    • Querying
    • Raw Queries & Query Building
    • Read replicas
    • Schema diffing & migration generation
    • Views, triggers & other schema objects
    • Scopes & default scopes
    • Seeders
    • SPARQL / RDF triplestores
    • SQL constants
    • SQL features
    • SQL function builders
    • SQLite advanced features
    • StoreKey — a prod-orm database as the storage
    • Streaming results
    • Terraform
    • Transactions & Isolation Levels
    • Type mapping: legacy and modern
    • TypeScript types
    • Database users, roles & privileges
    • Validation & constraints
    • Virtual & Computed Fields
    • Writing docs
  • javascript
    • prorm in JavaScript
    • Models in JavaScript
    • Querying in JavaScript
    • Relations in JavaScript
  • runbooks
    • Operational runbooks
    • Connection failures
    • Credential rotation
    • Failover
    • Incident checklist
    • Deploying klock v2
    • Migration rollback
  • running-databases
    • Running databases in Docker
    • Running prorm under Bun in Docker
    • Running Cassandra in Docker with prorm
    • Running ClickHouse in Docker with prorm
    • Running CockroachDB in Docker with prorm
    • Running prorm under Deno in Docker
    • Running Elasticsearch in Docker with prorm
    • Running MariaDB in Docker with prorm
    • Running MongoDB in Docker with prorm
  • prorm control plane
    • Introduction
    • Authentication
    • Errors
    • Getting started
      • Service
        • Is it up
        • This description
    • Account
      • Sign-up and verification
        • Create an account
        • Exchange credentials for a token
        • Verify with the emailed code
        • Verify by clicking the emailed link
        • Name the parent or guardian
        • What a consent link is about
        • Give consent for a child's account
        • Ask the parent or guardian again
        • Send a new code and link
      • Family
        • Everyone this account is responsible for
        • One child, in detail
        • Turn a limit on or off
      • Profile
        • Who am I
        • Change the account
        • Every address on the account
        • Add an address
        • Confirm an address with the code mailed to it
        • Mail a fresh code to an unconfirmed address
        • Make an address primary
        • Remove an address
        • What this caller may do
    • Security
      • Sessions
        • Everywhere this account is signed in
        • Sign out everywhere else
        • Sign one out
        • A token for the CLI on a named machine
        • A token for the customer console, from the staff one
        • Park a sign-in for the CLI to collect
        • The CLI collecting its sign-in
        • The team's members' live sessions
        • Sign a member's session out
        • Sign an account out everywhere
        • Everywhere the account is signed in
        • Sign an account's session out
      • Single sign-on
        • Begin a single sign-on
        • The provider's return
        • Link the signed-in account to a team's provider
        • Which team an address signs in to
        • The team's single sign-on, as a member sees it
        • Set the team's OpenID Connect provider up, or change it
        • Remove the provider
        • The team's domain claims and the DNS record each needs
        • Prove a claimed domain
      • MFA and passwords
        • Start enrolling a second factor
        • Prove the app has it
        • Remove the second factor
        • Ask for a reset link
        • Set a new password with the emailed token
      • Klock
        • Open a device-bound klock session
        • Check in, for the next grant
        • Step up the session asking
        • Rotate the device key
        • Freeze a session
        • Unfreeze a session
        • A guest grant
        • The revocation feed
        • The published keyset
        • What this control plane supports
      • Devices
        • Your devices, or a team's
        • Approve a new device's pairing code
        • One device
        • Rename a device
        • Revoke a device
        • Suspend a device
        • Reinstate a suspended device
        • Wipe a device
        • Ask a device to rotate its key
        • The team's members' devices
        • Revoke a member's device
        • An account's devices
        • Revoke an account's device
        • Wipe an account's device
        • The device fleet
      • Access rules and behaviour
        • The access rules that bear on you
        • Add an access rule
        • This request, as the rules see it
        • One access rule
        • Remove an access rule
        • The behaviour profiles that bear on you
        • Add or change a behaviour profile
        • The profile presets
        • Your behaviour findings
        • Acknowledge a finding
        • One behaviour profile
        • Remove a behaviour profile
        • The team's access rules
        • Add a team access rule
        • Remove a team access rule
        • The team's behaviour profiles
        • Add or change a team behaviour profile
        • Remove a team behaviour profile
        • What the team's profiles caught
        • Acknowledge a team finding
      • Recovery and lockdown
        • Ask for a recovery link
        • Recover access with the emailed code
        • Is the account locked down
        • Lock the account down
        • Release a lockdown
        • Lock a member down
        • Release a member's lockdown
      • MCP tokens
        • Make a delegated token for one MCP client
        • The account's delegated tokens
        • Revoke a delegated token
        • What a delegated token may do now
        • Run one MCP tool with a delegated token
        • Run a device-signed MCP tool call relayed by the MCP Worker
      • Kerberos
        • Give the team its own Kerberos realm
        • The team's realm
        • Remove the team's realm
    • Logging and monitoring
      • Audit log
        • What has been done to the account
        • What has happened to this account
        • The account's audit trail
      • Operations
        • Everything that has been asked of this database
        • One, with its steps
        • Stop it
        • Put a failed one back in the queue
        • Every operation, across all accounts
      • Metrics and events
        • Every measurement, for a graph
        • Who did what to it
    • Billing
      • Plans and pricing
        • What the plans allow
        • The rate card
        • What one database would cost
        • What this account is paying for, itemised
      • Subscriptions and invoices
        • What this month's invoice will say
        • What this account is on
        • What it has been charged
        • Start a Stripe Checkout session
        • Open the customer portal
        • Stripe's events
        • Buy more connection pools
      • Team billing
        • The team's billing account
        • What the team has been charged
        • What this month's invoice will say
        • The team's cards
        • Add a card, through a Stripe-hosted setup session
        • Make a card the team's default
        • Remove a card
        • Start the team paying
        • Open the Stripe portal on the team's customer
        • Change the team's plan
        • Who receives the team's bills
        • How the team pays for transfers
    • Support
      • Support chat
        • My conversations
        • Start a conversation
        • Every support conversation, open first
        • A ticket for the socket
        • One conversation, with who is in it and who is connected
        • Rename a group; open or close a support conversation
        • The lines, oldest first
        • Say something
        • Add somebody
        • Mark read
    • Administration
      • Users
        • Every account
        • One account, with everything hanging off it
        • Grant or revoke admin
        • Verify an account by hand
        • Lock or unlock sign-in
        • Allow or hold provisioning
        • Send the verification mail again
        • Set the plan by hand
      • Platform
        • Every database and store, across all accounts
        • The counts worth putting on a dashboard
      • Staff and permissions
        • What kind of admin the caller is, and which scopes they hold
        • The admin presets
        • Every admin, and the scopes each resolves to
        • Make an account an admin of a kind
        • Change an admin's kind, or a custom admin's scopes
        • Revoke admin
      • Team administration
        • Every team, with its owner and size
        • One team in full — members with their accounts, and projects
        • Hand the team to another member
        • Put an account in the team, active at once
        • Change a member's role
        • Remove a member
      • Assumed identities
        • Assume an identity — act as a customer account
        • The identities the caller holds open
        • End an assumed identity
      • Support inbox
        • The platform's addresses
        • Add a platform address
        • One address, with its counts
        • Change an address's label, routing, or whether it accepts mail
        • Remove an address that holds no mail
        • Make, adopt or repair the address's routing rule
        • Every admin's personal address, made where missing
        • File a raw message, as if it had arrived
        • The inbox
        • One message, whole
        • Mark a message
        • Hand a message to an admin, or take it back
        • Leave an internal note
        • Reply, from the address the message came to
        • What is waiting
    • Databases
      • Databases
        • Data stores
          • Every data store on the account
          • Provision a data store
          • Change a data store that is already running
          • One data store
          • Deprovision it
          • Report what it is using
          • How to reach a data store
        • Connections and credentials
          • The api keys on a database
          • Issue a key
          • Revoke a key
          • The engine users we created
          • Create a user inside the database
          • Give a user a new password
          • Drop a user
          • How the database is reached
          • Set how it is reached
          • Revoke every api key on it
          • How to connect to it
          • The ssh keys that open its bastion
          • Add a key, or have one made
          • The private half of a generated key, once
          • Revoke an ssh key
        • Schema and objects
          • The SQL objects we put in it
          • Create one, and apply it
          • What is in the database, as the engine reports it
          • One table
          • What it would run, without running it
          • Redefine an object in place
          • Drop it
          • The extensions installed in it
        • Migrations
          • A plan compiled to statements, recording nothing
          • The migrations recorded for it
          • Record one
          • Apply everything recorded and not yet run
          • Apply everything pending, oldest version first
        • Lifecycle
          • Grow or shrink it
          • Stop it accepting connections
          • Start it again
          • Move it to another region
        • Backups and replicas
          • Take a backup
          • The backups it has
          • Restore one into it
          • What has been restored into it, and from where
          • Its read copies
          • Add one
        • Policies
          • The catalog
          • One policy
          • What this database is held to
          • Switch a policy on, or change its knobs
          • Switch it off
          • Mark the policies reviewed
          • Evaluate the periodic policies now
          • Who is behind a credential
        • Passwordless
          • The database's passwordless sessions
          • Issue a passwordless session (v1)
          • Revoke a passwordless session
          • Bind a session to a device key
          • Issue a v2 session for a host to bind
          • Redeem an enrolment ticket on the host
          • Check a passwordless credential
          • Run one described query under a passwordless credential
        • Database roles
          • The database's roles
          • Define a role
          • One role
          • Change what a role permits
          • Delete a role, and revoke every key granted it
          • Grant a role, which mints a key
          • Who holds a role
          • The api keys bound to a role
        • Pools
          • A database's connection pools, and how busy each is
          • Open another pool
          • Rename a pool or change its size
          • Close a pool
        • Data plane
          • Run a query against a database
          • Several statements, in order, over one connection
          • Is this database answering
          • What the proxy itself is holding
        • Transfers
          • The strategies this account's tier may use
          • Price a transfer without creating it
          • The account's transfer jobs, newest first
          • Create a transfer job
          • One job, and whether its certificate holds
          • Cancel an unfinished job
          • Start a created job, confirming its price
          • Report a job's status (the runner, or the owner's side of a local run)
        • Every database on the account
        • Provision a database
        • Change a database that is already running
        • One database
        • Deprovision it
        • Read or write it
        • Report what it is using
        • The engines this API will provision
        • Where a managed database can be put
    • Teams
      • Teams
        • Members
          • Who is on it
          • Invite somebody
          • Accept an invitation
          • Change somebody's role
          • Remove somebody
        • Projects
          • The projects a team runs
          • Start one
          • Rename a project, or move its environment
          • Delete a project
          • One project, and what is in it
          • Put a database or store in it
          • What is in a project
          • Take one out
        • The teams this account is on
        • Start one
        • The twelve roles, and what each may do
        • Rename a team
        • Close a team
        • One team
        • Hand the team to somebody else
        • Leave a team
    • Schemas
      • Error
      • ValidationErrors
      • Token
      • PolicyCategory
      • PolicySeverity
      • PolicyAction
      • PolicyTrigger
      • PolicyParam
      • Policy
      • PolicyCatalog
      • PolicyAssignment
      • PolicyOutcome
      • PolicyFiring
      • CredentialTrace
      • Relation
      • Restrictions
      • ChildSummary
      • SignupRequest
      • SigninRequest
      • UpdateMeRequest
      • User
      • Address
      • GeoPoint
      • D1Region
      • Usage
      • UsageReport
      • Resource
      • Database
      • DataStore
      • NewDatabase
      • NewDataStore
      • QueryRequest
      • DatabasePrivilege
      • ApiKey
      • DbUser
      • Access
      • AccessRequest
      • DatabaseObject
      • NewDatabaseObject
      • NewMigration
      • SchemaOperation
      • Migration
      • Operation
      • Session
      • AdminPowers
      • Admin
      • AuditEntry
      • TeamRole
      • Conversation
      • ChatMessage
      • TeamSso
      • Team
      • TeamMember
      • SshKey
      • ConnectionInfo
      • InboxAddress
      • InboxMailbox
      • InboxMessageSummary
      • InboxMessage
      • InboxNote
      • Page
      • Quote
      • Plan
      • ApiError
      • CapabilityRefusal
      • KlockErrorCode
      • PageWindow
      • SessionView
      • KlockStepUpRequest
      • KlockOpenRequest
      • KlockOpenedSession
      • UpdateMeResult
      • CapabilitiesView
      • SessionLimits
      • Device
      • DeviceListed
      • DeviceTeamRef
      • DeviceCommand
      • DeviceAuditLine
      • DeviceActionRequest
      • StaffActionRequest
      • ManagedSession
      • SessionRevoked
      • AccessRule
      • AccessRuleRequest
      • BehaviourProfile
      • BehaviourProfileRequest
      • BehaviourProfileSaved
      • BehaviourFinding
      • BehaviourFindingAck
      • StepUpProof
      • Removed
      • MemberLockdownRequest
      • McpClient
      • McpDelegatedView
      • McpToolCall
      • McpForwardRequest
      • PasswordlessScope
      • RoleScope
      • PasswordlessSession
      • PasswordlessTlsMaterial
      • PasswordlessKerberosMaterial
      • ServiceDeviceKeys
      • ServiceSession
      • DatabaseRole
      • TransferEndpoint
      • TransferJobRequest
      • TransferQuote
      • TransferStrategy
      • TransferJob
      • TransferJobAccess
      • Pool
      • PoolAllowance
      • BillingSubscription
      • Invoice
      • BillingContact
      • PaymentMethod
      • UpcomingCharges
      • TeamBilling
      • TeamKerberosRealm
      • TeamSsoDomain
      • TeamSsoResponse
      • StoreConnection
      • BatchFailure
      • ProxyStatus
  1. guides

Eager loading

include loads associated rows alongside the parents. This guide is about the
mechanism: which statements actually run, in what order, and which include
options are honoured. For how to declare the associations themselves, see
Associations.
The examples use one shop schema throughout. Every SQL string on this page was
captured from the ORM against that schema. As in Querying, a
model built with prorm.define() sends its statements with the values already
escaped in, so that is the form shown here and in the query log.
import { Prorm, DataTypes } from 'ts-prorm-orm';

export const prorm = new Prorm({ dialect: 'postgres', host: 'localhost', database: 'shop' });

const pk = { type: DataTypes.INTEGER(), primaryKey: true, autoIncrement: true };

export const User = prorm.define('User', {
  id: pk,
  name: { type: DataTypes.STRING(100) },
  email: { type: DataTypes.STRING(255) },
  status: { type: DataTypes.STRING(20) },
}, { tableName: 'users', timestamps: false });

export const Order = prorm.define('Order', {
  id: pk,
  userId: { type: DataTypes.INTEGER() },
  status: { type: DataTypes.STRING(20) },
  total: { type: DataTypes.DECIMAL(10, 2) },
}, { tableName: 'orders', timestamps: false });

export const OrderItem = prorm.define('OrderItem', {
  id: pk,
  orderId: { type: DataTypes.INTEGER() },
  productId: { type: DataTypes.INTEGER() },
  quantity: { type: DataTypes.INTEGER() },
}, { tableName: 'order_items', timestamps: false });

export const Product = prorm.define('Product', {
  id: pk,
  sku: { type: DataTypes.STRING(32) },
  name: { type: DataTypes.STRING(200) },
  price: { type: DataTypes.DECIMAL(10, 2) },
}, { tableName: 'products', timestamps: false });

export const Tag = prorm.define('Tag', {
  id: pk,
  name: { type: DataTypes.STRING(50) },
}, { tableName: 'tags', timestamps: false });

export const ProductTag = prorm.define('ProductTag', {
  productId: { type: DataTypes.INTEGER() },
  tagId: { type: DataTypes.INTEGER() },
}, { tableName: 'product_tags', timestamps: false });

User.hasMany(Order, { foreignKey: 'userId', as: 'orders' });
Order.belongsTo(User, { foreignKey: 'userId', as: 'customer' });
Order.hasMany(OrderItem, { foreignKey: 'orderId', as: 'items' });
OrderItem.belongsTo(Product, { foreignKey: 'productId', as: 'product' });
Product.belongsToMany(Tag, { through: { model: ProductTag }, foreignKey: 'productId', as: 'tags' });
The data behind the captured SQL: three users (Ada, Grace and Linus), Ada with
two orders and Grace with one, four order items, two products and two tags.

Separate queries, not JOINs#

Prorm resolves an include with one additional query per association level,
matching children to parents in memory. It never widens the parent SELECT
into a JOIN.
const customers = await User.findAll({ include: [{ model: Order, as: 'orders' }] });
customers.map((u) => [u.name, u.orders.length]); // [['Ada', 2], ['Grace', 1], ['Linus', 0]]
Two statements serve any number of users, so there is no N+1 problem. And
because the parent query is never joined, LIMIT 20 on the parent means twenty
users, not twenty joined rows. The trade-off is that you cannot sort parents by
a child column in one statement. Do that with $alias.column$ filtering plus an
ordinary parent order, or drop to raw SQL.
Nesting adds one query per level, not per row:
const customers = await User.findAll({
  include: [{
    model: Order,
    as: 'orders',
    include: [{ model: OrderItem, as: 'items', include: [{ model: Product, as: 'product' }] }],
  }],
});
customers[0].orders[0].items.map((i) => i.product.name); // ['Keyboard', 'Mouse']

One query per level#

Four levels, four statements: not one per row, and not a join. The count grows
with the depth of the include, never with the number of rows, which is why
LIMIT 20 on the parent still means twenty users.
[!NOTE]
Key lists are not de-duplicated before they are sent: IN (1,2,2,1) above has
one entry per order item. The database treats the duplicates as one value, so
the result is right; the list just grows with the child rows.

What gets attached#

Results are attached under the association's alias, and mirrored onto
dataValues:
AssociationAttached value
belongsTo, hasOnea single instance, or null
hasMany, belongsToManyan array (empty when there are no children)
const customers = await User.findAll({ include: [{ model: Order, as: 'orders' }] });
customers[0].orders;      // Order[]
const placed = await Order.findAll({ include: [{ model: User, as: 'customer' }] });
placed[0].customer;       // User | null

Per-association direction#

The key lives on the parent, so Prorm collects the foreign keys it already has
and looks up the targets by primary key.
await Order.findAll({ include: [{ model: User, as: 'customer' }] });
The key lives on the child.
await User.findAll({ include: [{ model: Order, as: 'orders' }] });
The junction table is queried first, then the targets by the ids it produced.
const products = await Product.findAll({ include: [{ model: Tag, as: 'tags' }] });
products.map((p) => [p.name, p.tags.map((t) => t.name)]);
// [['Keyboard', ['peripherals', 'sale']], ['Mouse', ['peripherals']]]

Filtering includes restrict the parents#

An include carrying where, or marked required: true, means inner join
semantics: parents with no matching child are dropped from the result. Because
that must happen before LIMIT, Prorm resolves the matching parent keys
first and constrains the main query with them.
const users = await User.findAll({
  include: [{ model: Order, as: 'orders', where: { status: 'pending' } }],
});
users.map((u) => [u.name, u.orders.length]); // [['Ada', 1]]
required: true does the same thing without a predicate: "only users that
have at least one order". If no parent can qualify, findAll short-circuits and
returns [] without running the main query:
await User.findAll({ include: [{ model: Order, as: 'orders', where: { status: 'refunded' } }] });
// -> SELECT * FROM "orders" WHERE "status" = 'refunded'    (and nothing else)
A parent limit applies after the filter, so it counts qualifying parents:
await User.findAll({ limit: 1, include: [{ model: Order, as: 'orders', where: { status: 'paid' } }] });
[!WARNING]
Step 1 is not restricted to any parents: it reads every child row that
matches the include's where. With required: true and no where, it is
SELECT * FROM "orders", the whole child table. On a large child table,
give the include a selective where, or query the child model first and pass
the parent ids yourself.

Parents with no match: anti-joins#

antiJoin: true (also spelled exclude: true or joinType: 'anti') inverts
the filter: it keeps the parents that have no matching child. "Users who
have never ordered":
const neverOrdered = await User.findAll({
  include: [{ model: Order, as: 'orders', antiJoin: true }],
});
neverOrdered.map((u) => u.name); // ['Linus']
antiJoinType ('notExists' | 'notIn' | 'leftJoinIsNull') is accepted and
ignored: all three are ways to write the same question in one statement, and
this loader answers it with a separate query and a NOT IN.
joinType: 'semi' filters the parents like required: true — only parents
with at least one matching child are returned — but the children are not
fetched or attached: the query asks only whether a match exists.

$alias.column$#

A where key of the form $alias.column$ names a column on an included
association. It is lifted onto that include, which makes it a parent-restricting
filter with the same three-statement shape as above:
await User.findAll({
  include: [{ model: Order, as: 'orders' }],
  where: { '$orders.status$': 'paid' },
});
Naming an alias you did not include throws an AssociationError telling you to
add the include, rather than dropping the condition silently:
AssociationError: where key '$items.status$' refers to 'items', which is not included
in this query. Add `include: [{ model: ..., as: 'items' }]`.

Include options#

OptionHonouredEffect
modelyesThe model to load. Required — an entry without one is skipped.
asyesWhich association to use when several link the same two models.
whereyesFilters the children and restricts the parents (see above).
attributesyesColumn list for the child query.
orderyesORDER BY on the child query.
requiredyesInner-join semantics.
antiJoin / exclude / joinType: 'anti'yesKeep only parents with no match (see above).
includeyesNested includes, to any depth.
limit / offsetyesA window per parent, not across the whole result — see below.
{ all: true }yesExpands to one include per association. { all: 'alias' } and { all: true, nested: true } too.
separaten/aEvery include is already a separate query.
await User.findAll({
  include: [{
    model: Order,
    as: 'orders',
    attributes: ['id', 'total'],
    order: [['total', 'DESC']],
  }],
});

limit / offset are a per-parent window#

"The 3 most recent orders for each user" is what you almost always mean, and it
is what you get:
await User.findAll({
  include: [{ model: Order, as: 'orders', order: [['id', 'DESC']], limit: 3 }],
});
Because one query serves every parent, the LIMIT cannot simply go into that
statement — LIMIT 3 there would return three rows in total and leave every
parent but the first empty. So the database applies the ORDER BY (the
window is over the ordering you asked for, not insertion order) and the slice
happens per parent
as rows are grouped onto their parents:
[!WARNING]
That is correct, but it does not reduce what crosses the wire: every
matching child is still fetched and then sliced in memory. For "the latest
three orders" of ten thousand users with long histories, query the child
model directly instead.
One case does push down. With exactly one parent row — findByPk/findOne
plus an include, the common shape — the shared query's window is the
per-parent window, so it becomes real SQL, for hasMany only:
const ada = await User.findByPk(1, {
  include: [{ model: Order, as: 'orders', order: [['id', 'DESC']], limit: 3 }],
});
belongsToMany never pushes down: the junction means fetched rows and attached
array elements are not one-to-one, so a SQL LIMIT would count the wrong thing.
On a to-one include (belongsTo / hasOne) a window is meaningless; it is
ignored and reported rather than silently applied. A limit/offset that is
not a non-negative integer raises an AssociationError instead of being coerced.

{ all: true }#

await Order.findAll({ include: [{ all: true }] });              // every association
await User.findAll({ include: [{ all: true, nested: true }] }); // and theirs, recursively
Order has two associations, so { all: true } is two include queries:
Each entry expands to one concrete include per association before anything is
loaded, so the result is identical to writing them out by hand — one query per
association. Options on the entry carry onto every expanded include.
Recursion is bounded two ways: a depth cap of 10, and a per-branch record of the
models already expanded. The chain stops re-expansion, not the association
itself, so a circular User ⇄ Order graph settles instead of growing
exponentially. An unknown { all: 'alias' } throws.
[!CAUTION]
{ all: true, nested: true } is convenient in a REPL and expensive in a
request. On this small schema one User.findAll() already runs seven
statements: every association of every reachable model, including the way
back to users through Order.customer. Name the includes you need.
The seven statements
{ all: true } composes with required: true — expansion now happens before
the parent-filtering pass, so every expanded association is required and the
result matches writing the includes out by hand:
await User.findAll({ include: [{ all: true, required: true }] });
// -> SELECT * FROM "users" WHERE "id" IN (…)   — only parents with matches

Association scopes#

A scope declared on the association is a fixed condition applied every time
that association is traversed. The include's own where wins where the two
overlap.
User.hasMany(Order, { foreignKey: 'userId', as: 'paidOrders', scope: { status: 'paid' } });

const users = await User.findAll({ include: [{ model: Order, as: 'paidOrders' }] });
users.map((u) => [u.name, u.paidOrders.length]); // [['Ada', 1], ['Grace', 1], ['Linus', 0]]
With two associations between User and Order, an include without as is
now ambiguous and throws:
AssociationError: User has 2 associations to Order (orders, paidOrders).
Disambiguate with `include: [{ model: Order, as: 'orders' }]`.

Counting instead of loading#

When you only need the size of a collection, withCount avoids building
instances for every child:
const users = await User.findAll({ withCount: ['orders'] });
users.map((u) => [u.name, u.ordersCount]); // [['Ada', 2], ['Grace', 1], ['Linus', 0]]
It runs one query per association, not per parent:
[!TIP]
The rows are tallied in JavaScript, so this saves instance construction and
round trips but still transfers the child rows. For a large child table, an
aggregate query against the child model is cheaper.
belongsTo counts are resolved without any query at all — the answer is 0 or 1
depending on whether the parent's foreign key is null.

Lazy alternatives#

When you have a single instance in hand, the association accessors are usually
clearer than an include:
const user = await User.findByPk(1);
const orders = await user.getOrders();          // findAll on Order, scoped to this user
const n      = await user.countOrders();
await user.addOrder(order);                     // link an existing row
await user.createOrder({ status: 'pending' });  // insert one already linked
These accessors are generated from the association alias — see
Associations for the full naming rules.
[!NOTE]
src/models/model.ts also defines generic getRelated(alias) / setRelated /
createRelated / hasRelated helpers, but they live on the unreachable
createModel() factory (see Streaming),
not on the instances define() / addModel() produce. Use the generated
accessors above.
Reach for include when you have many parents; reach for the accessors when
you have one.

Errors you may hit#

ErrorCause
AssociationError: X has no association to YThe association was never declared, or is declared in the other direction.
AssociationError: X has N associations to Y (…)Ambiguous — pass as to pick one.
AssociationError: … has no association to Y aliased 'z'The as does not match any association's effective alias.
AssociationError: where key '$z.col$' refers to 'z', which is not included …A $alias.column$ key names an alias you did not include.
EagerLoadErrorThe child query itself failed; the cause is attached.

Next: Validation — rejecting bad data before it reaches the database.

Related reading#

Associations — declaring relationships
Querying — the rest of FindOptions
Scopes
Query optimization
Modified at 2026-10-04 00:40:16
Previous
Decorators
Next
Enums and constants
Built with