1. dialects
prorm
  • prorm documentation
  • Known test gaps
  • Architecture
  • Core concepts
  • Database types & coverage
  • Getting started
  • Going further
  • compliance
    • Compliance
    • The security toolkit: `prorm audit`
    • Checklists by regulation
    • Declaring personal data
    • Evidence bundles
    • Evidence
    • Frameworks: `@Security`
    • Jurisdictions
    • Platform policies
    • Protecting data
    • The regulation dataset
    • Residency and cross-border transfers
    • Retention & integrity
    • Status
    • Subject rights
  • decorators
    • prorm with decorators
    • Models with decorators
    • Querying a decorated model
    • Relations with decorators
  • diagrams
    • Diagram generators
    • Chen diagram
    • Class diagram
    • Dependency diagram
    • ER diagram
    • Flow diagram
    • From your models to a diagram
    • Gantt diagram
    • Index diagram
    • Migration diagram
    • Model diagram
    • Package diagram
    • Crow’s-foot diagram
    • Schema documentation
    • Sequence diagram
    • State diagram
    • Tree diagram
  • dialects
    • SQL dialects
    • AlloyDB Dialect
    • AlloyDB Omni Dialect
    • Amazon Athena Dialect
    • Aurora DSQL Dialect
    • Amazon Aurora MySQL Dialect
    • Amazon Aurora PostgreSQL Dialect
    • Azure Database for MySQL Dialect
    • Azure Database for PostgreSQL Dialect
    • Azure SQL Database Dialect
    • Azure SQL Managed Instance Dialect
    • Google BigQuery Dialect
    • Citus Dialect
    • ClickHouse dialect
    • Cloud Authentication (`cloud-auth`)
    • Cloud SQL for SQL Server Dialect
    • Cloud SQL for MySQL Dialect
    • Cloud SQL for PostgreSQL Dialect
    • CockroachDB Dialect
    • Azure Cosmos DB for PostgreSQL Dialect
    • CrateDB Dialect
    • Cloudflare D1 Dialect
    • Databricks dialect
    • IBM Db2 Dialect
    • Dolt Dialect
    • Apache Doris Dialect
    • Druid Dialect
    • DuckDB Dialect
    • Exasol dialect
    • Microsoft Fabric Data Warehouse Dialect
    • Firebird Dialect
    • Greenplum Dialect
    • SAP HANA Dialect
    • MySQL HeatWave Dialect
    • Azure Data Explorer (Kusto) Dialect — T-SQL
    • MariaDB Dialect
    • Materialize Dialect
    • MonetDB Dialect
    • MotherDuck Dialect
    • Microsoft SQL Server Dialect
    • MySQL Dialect
    • Neon Dialect
    • OceanBase Dialect
    • openGauss Dialect
    • Oracle Dialect
    • Oracle Autonomous Database Dialect
    • ParadeDB Dialect
    • PolarDB Dialect
    • PostgreSQL Dialect
    • Presto Dialect
    • QuestDB Dialect
    • Aurora RDS Data API Dialect (`rdsdata`)
    • Amazon RDS for Db2 Dialect
    • Amazon RDS for MariaDB Dialect
    • Amazon RDS for SQL Server Dialect
    • Amazon RDS for MySQL Dialect
    • Amazon RDS for Oracle Dialect
    • Amazon RDS for PostgreSQL Dialect
    • Amazon Redshift
    • Amazon Redshift Data API Dialect
    • RisingWave Dialect
    • rqlite Dialect
    • SingleStore Dialect
    • Snowflake Dialect
    • Google Cloud Spanner Dialect
    • Spanner (PostgreSQL interface) Dialect
    • SQLite Dialect
    • StarRocks Dialect
    • Supabase Dialect
    • Azure Synapse Analytics (dedicated SQL pool)
    • Teradata Dialect
    • TiDB Dialect
    • TimescaleDB Dialect
    • Trino Dialect
    • Turso / libSQL Dialect
    • Vertica dialect
    • Vitess Dialect
    • Yellowbrick Dialect
    • YugabyteDB Dialect
  • guides
    • Access rules and behaviour profiles
    • ArangoDB (AQL)
    • Associations
    • Audit levels and escalation
    • Audit logging
    • In the browser
    • Bulk operations
    • Caching
    • Capabilities, tiers and team roles
    • CLI
    • Cloudflare
    • Compliance & data protection
    • Connection Pooling & Performance
    • Security in the console
    • Couchbase: structured N1QL queries
    • Data types
    • Decorators
    • Eager loading
    • Enums and constants
    • Error handling & error types
    • Extensions
    • External fields
    • Foreign data wrappers
    • Graph databases
    • Hooks & lifecycle events
    • Indexes & constraints
    • InfluxDB: structured Flux pipelines
    • klock-errors
    • klock — the `.klock` file
    • Local databases (`prorm db up`)
    • Structured log search — Splunk, Graylog, Papertrail, Sumo Logic
    • Logging
    • Grafana Loki: structured LogQL queries
    • MCP server
    • Migrate — the data transfer subsystem
    • Migrations & Schema Sync
    • Models from an existing database
    • Defining models
    • Multiple databases
    • OrientDB, Neptune and TigerGraph
    • Passwords
    • Importing a Prisma schema
    • Structured PromQL and MetricsQL
    • Query firewall
    • QueryInterface
    • Query operators reference
    • Query optimization
    • Composing find options with `pipe()` and `Q`
    • Query safety: the fail-closed WHERE guard
    • Querying
    • Raw Queries & Query Building
    • Read replicas
    • Schema diffing & migration generation
    • Views, triggers & other schema objects
    • Scopes & default scopes
    • Seeders
    • SPARQL / RDF triplestores
    • SQL constants
    • SQL features
    • SQL function builders
    • SQLite advanced features
    • StoreKey — a prod-orm database as the storage
    • Streaming results
    • Terraform
    • Transactions & Isolation Levels
    • Type mapping: legacy and modern
    • TypeScript types
    • Database users, roles & privileges
    • Validation & constraints
    • Virtual & Computed Fields
    • Writing docs
  • javascript
    • prorm in JavaScript
    • Models in JavaScript
    • Querying in JavaScript
    • Relations in JavaScript
  • runbooks
    • Operational runbooks
    • Connection failures
    • Credential rotation
    • Failover
    • Incident checklist
    • Deploying klock v2
    • Migration rollback
  • running-databases
    • Running databases in Docker
    • Running prorm under Bun in Docker
    • Running Cassandra in Docker with prorm
    • Running ClickHouse in Docker with prorm
    • Running CockroachDB in Docker with prorm
    • Running prorm under Deno in Docker
    • Running Elasticsearch in Docker with prorm
    • Running MariaDB in Docker with prorm
    • Running MongoDB in Docker with prorm
  • prorm control plane
    • Introduction
    • Authentication
    • Errors
    • Getting started
      • Service
        • Is it up
        • This description
    • Account
      • Sign-up and verification
        • Create an account
        • Exchange credentials for a token
        • Verify with the emailed code
        • Verify by clicking the emailed link
        • Name the parent or guardian
        • What a consent link is about
        • Give consent for a child's account
        • Ask the parent or guardian again
        • Send a new code and link
      • Family
        • Everyone this account is responsible for
        • One child, in detail
        • Turn a limit on or off
      • Profile
        • Who am I
        • Change the account
        • Every address on the account
        • Add an address
        • Confirm an address with the code mailed to it
        • Mail a fresh code to an unconfirmed address
        • Make an address primary
        • Remove an address
        • What this caller may do
    • Security
      • Sessions
        • Everywhere this account is signed in
        • Sign out everywhere else
        • Sign one out
        • A token for the CLI on a named machine
        • A token for the customer console, from the staff one
        • Park a sign-in for the CLI to collect
        • The CLI collecting its sign-in
        • The team's members' live sessions
        • Sign a member's session out
        • Sign an account out everywhere
        • Everywhere the account is signed in
        • Sign an account's session out
      • Single sign-on
        • Begin a single sign-on
        • The provider's return
        • Link the signed-in account to a team's provider
        • Which team an address signs in to
        • The team's single sign-on, as a member sees it
        • Set the team's OpenID Connect provider up, or change it
        • Remove the provider
        • The team's domain claims and the DNS record each needs
        • Prove a claimed domain
      • MFA and passwords
        • Start enrolling a second factor
        • Prove the app has it
        • Remove the second factor
        • Ask for a reset link
        • Set a new password with the emailed token
      • Klock
        • Open a device-bound klock session
        • Check in, for the next grant
        • Step up the session asking
        • Rotate the device key
        • Freeze a session
        • Unfreeze a session
        • A guest grant
        • The revocation feed
        • The published keyset
        • What this control plane supports
      • Devices
        • Your devices, or a team's
        • Approve a new device's pairing code
        • One device
        • Rename a device
        • Revoke a device
        • Suspend a device
        • Reinstate a suspended device
        • Wipe a device
        • Ask a device to rotate its key
        • The team's members' devices
        • Revoke a member's device
        • An account's devices
        • Revoke an account's device
        • Wipe an account's device
        • The device fleet
      • Access rules and behaviour
        • The access rules that bear on you
        • Add an access rule
        • This request, as the rules see it
        • One access rule
        • Remove an access rule
        • The behaviour profiles that bear on you
        • Add or change a behaviour profile
        • The profile presets
        • Your behaviour findings
        • Acknowledge a finding
        • One behaviour profile
        • Remove a behaviour profile
        • The team's access rules
        • Add a team access rule
        • Remove a team access rule
        • The team's behaviour profiles
        • Add or change a team behaviour profile
        • Remove a team behaviour profile
        • What the team's profiles caught
        • Acknowledge a team finding
      • Recovery and lockdown
        • Ask for a recovery link
        • Recover access with the emailed code
        • Is the account locked down
        • Lock the account down
        • Release a lockdown
        • Lock a member down
        • Release a member's lockdown
      • MCP tokens
        • Make a delegated token for one MCP client
        • The account's delegated tokens
        • Revoke a delegated token
        • What a delegated token may do now
        • Run one MCP tool with a delegated token
        • Run a device-signed MCP tool call relayed by the MCP Worker
      • Kerberos
        • Give the team its own Kerberos realm
        • The team's realm
        • Remove the team's realm
    • Logging and monitoring
      • Audit log
        • What has been done to the account
        • What has happened to this account
        • The account's audit trail
      • Operations
        • Everything that has been asked of this database
        • One, with its steps
        • Stop it
        • Put a failed one back in the queue
        • Every operation, across all accounts
      • Metrics and events
        • Every measurement, for a graph
        • Who did what to it
    • Billing
      • Plans and pricing
        • What the plans allow
        • The rate card
        • What one database would cost
        • What this account is paying for, itemised
      • Subscriptions and invoices
        • What this month's invoice will say
        • What this account is on
        • What it has been charged
        • Start a Stripe Checkout session
        • Open the customer portal
        • Stripe's events
        • Buy more connection pools
      • Team billing
        • The team's billing account
        • What the team has been charged
        • What this month's invoice will say
        • The team's cards
        • Add a card, through a Stripe-hosted setup session
        • Make a card the team's default
        • Remove a card
        • Start the team paying
        • Open the Stripe portal on the team's customer
        • Change the team's plan
        • Who receives the team's bills
        • How the team pays for transfers
    • Support
      • Support chat
        • My conversations
        • Start a conversation
        • Every support conversation, open first
        • A ticket for the socket
        • One conversation, with who is in it and who is connected
        • Rename a group; open or close a support conversation
        • The lines, oldest first
        • Say something
        • Add somebody
        • Mark read
    • Administration
      • Users
        • Every account
        • One account, with everything hanging off it
        • Grant or revoke admin
        • Verify an account by hand
        • Lock or unlock sign-in
        • Allow or hold provisioning
        • Send the verification mail again
        • Set the plan by hand
      • Platform
        • Every database and store, across all accounts
        • The counts worth putting on a dashboard
      • Staff and permissions
        • What kind of admin the caller is, and which scopes they hold
        • The admin presets
        • Every admin, and the scopes each resolves to
        • Make an account an admin of a kind
        • Change an admin's kind, or a custom admin's scopes
        • Revoke admin
      • Team administration
        • Every team, with its owner and size
        • One team in full — members with their accounts, and projects
        • Hand the team to another member
        • Put an account in the team, active at once
        • Change a member's role
        • Remove a member
      • Assumed identities
        • Assume an identity — act as a customer account
        • The identities the caller holds open
        • End an assumed identity
      • Support inbox
        • The platform's addresses
        • Add a platform address
        • One address, with its counts
        • Change an address's label, routing, or whether it accepts mail
        • Remove an address that holds no mail
        • Make, adopt or repair the address's routing rule
        • Every admin's personal address, made where missing
        • File a raw message, as if it had arrived
        • The inbox
        • One message, whole
        • Mark a message
        • Hand a message to an admin, or take it back
        • Leave an internal note
        • Reply, from the address the message came to
        • What is waiting
    • Databases
      • Databases
        • Data stores
          • Every data store on the account
          • Provision a data store
          • Change a data store that is already running
          • One data store
          • Deprovision it
          • Report what it is using
          • How to reach a data store
        • Connections and credentials
          • The api keys on a database
          • Issue a key
          • Revoke a key
          • The engine users we created
          • Create a user inside the database
          • Give a user a new password
          • Drop a user
          • How the database is reached
          • Set how it is reached
          • Revoke every api key on it
          • How to connect to it
          • The ssh keys that open its bastion
          • Add a key, or have one made
          • The private half of a generated key, once
          • Revoke an ssh key
        • Schema and objects
          • The SQL objects we put in it
          • Create one, and apply it
          • What is in the database, as the engine reports it
          • One table
          • What it would run, without running it
          • Redefine an object in place
          • Drop it
          • The extensions installed in it
        • Migrations
          • A plan compiled to statements, recording nothing
          • The migrations recorded for it
          • Record one
          • Apply everything recorded and not yet run
          • Apply everything pending, oldest version first
        • Lifecycle
          • Grow or shrink it
          • Stop it accepting connections
          • Start it again
          • Move it to another region
        • Backups and replicas
          • Take a backup
          • The backups it has
          • Restore one into it
          • What has been restored into it, and from where
          • Its read copies
          • Add one
        • Policies
          • The catalog
          • One policy
          • What this database is held to
          • Switch a policy on, or change its knobs
          • Switch it off
          • Mark the policies reviewed
          • Evaluate the periodic policies now
          • Who is behind a credential
        • Passwordless
          • The database's passwordless sessions
          • Issue a passwordless session (v1)
          • Revoke a passwordless session
          • Bind a session to a device key
          • Issue a v2 session for a host to bind
          • Redeem an enrolment ticket on the host
          • Check a passwordless credential
          • Run one described query under a passwordless credential
        • Database roles
          • The database's roles
          • Define a role
          • One role
          • Change what a role permits
          • Delete a role, and revoke every key granted it
          • Grant a role, which mints a key
          • Who holds a role
          • The api keys bound to a role
        • Pools
          • A database's connection pools, and how busy each is
          • Open another pool
          • Rename a pool or change its size
          • Close a pool
        • Data plane
          • Run a query against a database
          • Several statements, in order, over one connection
          • Is this database answering
          • What the proxy itself is holding
        • Transfers
          • The strategies this account's tier may use
          • Price a transfer without creating it
          • The account's transfer jobs, newest first
          • Create a transfer job
          • One job, and whether its certificate holds
          • Cancel an unfinished job
          • Start a created job, confirming its price
          • Report a job's status (the runner, or the owner's side of a local run)
        • Every database on the account
        • Provision a database
        • Change a database that is already running
        • One database
        • Deprovision it
        • Read or write it
        • Report what it is using
        • The engines this API will provision
        • Where a managed database can be put
    • Teams
      • Teams
        • Members
          • Who is on it
          • Invite somebody
          • Accept an invitation
          • Change somebody's role
          • Remove somebody
        • Projects
          • The projects a team runs
          • Start one
          • Rename a project, or move its environment
          • Delete a project
          • One project, and what is in it
          • Put a database or store in it
          • What is in a project
          • Take one out
        • The teams this account is on
        • Start one
        • The twelve roles, and what each may do
        • Rename a team
        • Close a team
        • One team
        • Hand the team to somebody else
        • Leave a team
    • Schemas
      • Error
      • ValidationErrors
      • Token
      • PolicyCategory
      • PolicySeverity
      • PolicyAction
      • PolicyTrigger
      • PolicyParam
      • Policy
      • PolicyCatalog
      • PolicyAssignment
      • PolicyOutcome
      • PolicyFiring
      • CredentialTrace
      • Relation
      • Restrictions
      • ChildSummary
      • SignupRequest
      • SigninRequest
      • UpdateMeRequest
      • User
      • Address
      • GeoPoint
      • D1Region
      • Usage
      • UsageReport
      • Resource
      • Database
      • DataStore
      • NewDatabase
      • NewDataStore
      • QueryRequest
      • DatabasePrivilege
      • ApiKey
      • DbUser
      • Access
      • AccessRequest
      • DatabaseObject
      • NewDatabaseObject
      • NewMigration
      • SchemaOperation
      • Migration
      • Operation
      • Session
      • AdminPowers
      • Admin
      • AuditEntry
      • TeamRole
      • Conversation
      • ChatMessage
      • TeamSso
      • Team
      • TeamMember
      • SshKey
      • ConnectionInfo
      • InboxAddress
      • InboxMailbox
      • InboxMessageSummary
      • InboxMessage
      • InboxNote
      • Page
      • Quote
      • Plan
      • ApiError
      • CapabilityRefusal
      • KlockErrorCode
      • PageWindow
      • SessionView
      • KlockStepUpRequest
      • KlockOpenRequest
      • KlockOpenedSession
      • UpdateMeResult
      • CapabilitiesView
      • SessionLimits
      • Device
      • DeviceListed
      • DeviceTeamRef
      • DeviceCommand
      • DeviceAuditLine
      • DeviceActionRequest
      • StaffActionRequest
      • ManagedSession
      • SessionRevoked
      • AccessRule
      • AccessRuleRequest
      • BehaviourProfile
      • BehaviourProfileRequest
      • BehaviourProfileSaved
      • BehaviourFinding
      • BehaviourFindingAck
      • StepUpProof
      • Removed
      • MemberLockdownRequest
      • McpClient
      • McpDelegatedView
      • McpToolCall
      • McpForwardRequest
      • PasswordlessScope
      • RoleScope
      • PasswordlessSession
      • PasswordlessTlsMaterial
      • PasswordlessKerberosMaterial
      • ServiceDeviceKeys
      • ServiceSession
      • DatabaseRole
      • TransferEndpoint
      • TransferJobRequest
      • TransferQuote
      • TransferStrategy
      • TransferJob
      • TransferJobAccess
      • Pool
      • PoolAllowance
      • BillingSubscription
      • Invoice
      • BillingContact
      • PaymentMethod
      • UpcomingCharges
      • TeamBilling
      • TeamKerberosRealm
      • TeamSsoDomain
      • TeamSsoResponse
      • StoreConnection
      • BatchFailure
      • ProxyStatus
  1. dialects

Google BigQuery Dialect

Overview#

BigQuery is Google Cloud's serverless
columnar data warehouse. It has no servers to size, no connections, and no
sessions: every statement is submitted as an independent REST job, billed by
the bytes it scans.
PropertyValue
Dialect namebigquery
Extendsnothing — implements Dialect directly
Driver@google-cloud/bigquery
Cloud SDK@google-cloud/bigquery
Default portnone — Google API
Local runtimenone — hosted service only
That model breaks most of what the OLTP dialects in this codebase assume, so
BigQueryDialect (src/dialects/bigquery/index.ts) is a standalone Dialect
implementation rather than a subclass of anything. It speaks GoogleSQL — the
same language family as Cloud Spanner — through the official
@google-cloud/bigquery driver.
What is genuinely different, and what it means for generated SQL:
Backtick identifiers, and a backtick cannot be escaped inside one, so
escapeId() throws on one instead of emitting something injectable.
dataset.table naming. A "schema" is a dataset; a "database" is a GCP
project. CREATE DATABASE throws.
No enforced constraints. PRIMARY KEY and FOREIGN KEY exist only as
NOT ENFORCED optimizer hints. UNIQUE and CHECK do not exist at all, and
every path that would emit one throws.
No indexes. Partitioning and clustering replace them; addIndex,
createIndex, removeIndex and dropIndex all throw. CREATE SEARCH INDEX
and CREATE VECTOR INDEX are real and are exposed under their own names.
MERGE for upserts. There is no ON CONFLICT.
No RETURNING. DML returns an affected-row count and nothing else.
UPDATE/DELETE require a WHERE — WHERE TRUE is emitted when none is
given.
Bare UNION is a syntax error. GoogleSQL demands UNION ALL /
UNION DISTINCT, EXCEPT DISTINCT, INTERSECT DISTINCT.
SELECT * EXCEPT (...) makes attributes.exclude expressible directly.
String literals use backslash escapes (\'), not doubling — 'it''s'
parses as two adjacent literals in GoogleSQL and fails.
Transactions cannot span statements, so startTransaction() throws.
Key facts (from the source):
Dialect name is 'bigquery'; the driver library is
'@google-cloud/bigquery', required lazily inside connect().
Pagination is LIMIT n [OFFSET m]; OFFSET is a modifier on LIMIT, so a
standalone offset emits LIMIT 9223372036854775807 OFFSET m.

Quick start#

Install#

$ npm install ts-prorm-orm @google-cloud/bigquery
$ pnpm add ts-prorm-orm @google-cloud/bigquery
$ yarn add ts-prorm-orm @google-cloud/bigquery
$ bun add ts-prorm-orm @google-cloud/bigquery

Connect#

import { Prorm } from 'ts-prorm-orm';

export const db = new Prorm({
  dialect: 'bigquery',
  dialectOptions: {
    projectId: 'my-project',
    dataset: 'analytics',
    location: 'US',
  },
});

Define a model#

import { DataTypes } from 'ts-prorm-orm';

const User = db.define('User', {
  id: { type: DataTypes.INTEGER(), primaryKey: true, allowNull: false },
  email: { type: DataTypes.STRING(255), allowNull: false },
  name: { type: DataTypes.STRING(100) },
  meta: { type: DataTypes.JSON() },
}, { timestamps: false });

await db.sync(); // CREATE TABLE — see Generated SQL below
The key has no autoIncrement: the engine has no sequence or identity column the dialect will emit, so the application supplies id. email is not declared unique: the engine has no enforced UNIQUE constraint. timestamps: false leaves out createdAt/updatedAt: with them, sync() gives each a DATETIME DEFAULT CURRENT_DATETIME() NOT NULL column.

Query#

import { Op } from 'ts-prorm-orm';

await User.create({ id: 1, email: 'ada@example.com', name: 'Ada' });

const page = await User.findAll({
  where: { name: { [Op.like]: 'A%' } },
  order: [['id', 'ASC']],
  limit: 20,
  offset: 40,
});

Generated SQL#

Each block is the statement the model call above it hands the dialect's query(), captured with the driver stubbed out. The model layer inlines the values.

Create table#

db.sync() for the model in the Quick start:
CREATE TABLE

Insert, update and delete#

await User.create({ id: 1, email: 'ada@example.com', name: 'Ada' });
await User.update({ name: 'Grace' }, { where: { email: 'ada@example.com' } });
await User.destroy({ where: { id: 1 } });

Upsert#

await User.upsert({ id: 1, email: 'ada@example.com', name: 'Ada Lovelace' });
MERGE statement
upsert() also reads the row by primary key before and after the write, to return the instance.

Pagination#

await User.findAll({
  where: { name: { [Op.like]: 'A%' } },
  order: [['id', 'ASC']],
  limit: 20,
  offset: 40,
});

JSON#

A dotted key reads a field of the JSON column:
import { Op } from 'ts-prorm-orm';

await User.findAll({ where: { 'meta.plan': 'pro' } });

Transaction#

[!CAUTION] No transactions
startTransaction() is not supported for the bigquery dialect: a BigQuery transaction exists only inside a single multi-statement script job. Each query() is an independent job, so a BEGIN TRANSACTION issued by itself would neither hold a transaction open nor be committable by a later call. Use runTransactionScript([sql, sql, …]), which submits BEGIN TRANSACTION / … / COMMIT TRANSACTION as one job.

Table sampling#

sample on the select builder reads a random fraction of the table's storage blocks, for estimates over large tables:
const sample = db.getDialectInstance()!.buildSelectQuery({
  tableName: 'users',
  sample: { method: 'SYSTEM', percent: 10 },
});
await db.query(sample.sql);
Type mapping for the portable descriptors: STRING → STRING, auto-increment INTEGER → INT64, BOOLEAN → BOOL, DATE → TIMESTAMP, UUID → STRING, JSON → JSON. The type comparison lines the major engines up side by side.

Connection#

There is no host or port. Authentication is Google Application Default
Credentials (ADC) unless keyFilename / credentials are given.
import { Prorm } from 'ts-prorm-orm';

const db = new Prorm({
  dialect: 'bigquery',
  dialectOptions: {
    projectId: 'my-project',   // billing project; falls back to the ADC default
    dataset: 'analytics',      // default dataset for unqualified table names
    location: 'US',            // must match the dataset's location
    maximumBytesBilled: 10 * 1024 ** 3, // guard rail: fail a runaway scan
  },
});

await db.connect();
BigQueryDialectOptions:
projectId — project jobs are billed to. dataProjectId overrides the
project used to qualify table names when the data lives elsewhere.
dataset — default dataset (database is accepted as an alias). Set on every
job as defaultDataset and used by quoteTable().
location — job location; must match the dataset's.
keyFilename / credentials — explicit service-account auth; otherwise ADC.
apiEndpoint, clientOptions — forwarded to the BigQuery constructor.
qualifyTablesWithProject — emit `project`.`dataset`.`table`. Off by
default, so cross-project reads are not broken by a hardcoded billing project.
maximumBytesBilled — fail a job that would scan more than this. On BigQuery
a runaway query costs money rather than time; this is worth setting.
jobTimeoutMs, labels — applied to every job (labels for cost attribution).
validateOnConnect (default true) — runs a zero-byte SELECT 1 so auth and
permission failures surface at connect() rather than mid-migration.
wrapIntegers — how the driver returns INT64 values that exceed
Number.MAX_SAFE_INTEGER.
disconnect() clears the client; there is no socket to close, because each
statement already completed as its own job.

Tables: partitioning and clustering instead of indexes#

await db.dialect.createTable(
  'events',
  {
    event_id: { type: 'UUID', primaryKey: true, autoIncrement: true },
    ts:       { type: 'DATE' },        // → TIMESTAMP
    user_id:  { type: 'STRING' },
    payload:  { type: 'JSON' },
  },
  {
    partition: { type: 'time', column: 'ts', columnType: 'TIMESTAMP', granularity: 'DAY' },
    clusterBy: ['user_id'],
    requirePartitionFilter: true,
    description: 'raw events',
  },
);
Notes:
The primary key is written at table level with NOT ENFORCED. BigQuery
rejects one declared without it, and a composite key can only be written that
way. Nothing enforces uniqueness.
autoIncrement on a STRING/UUID column becomes DEFAULT GENERATE_UUID() (a
random key, not a counter) and warns. On a numeric column it throws —
BigQuery has no IDENTITY, no AUTO_INCREMENT and no sequences, so quietly
turning an INT64 key into a string one would be worse than failing.
clusterBy takes at most four columns; a fifth throws.
require_partition_filter rejects queries that do not filter on the partition
column — the most effective guard against a surprise five-figure scan.
Partition specs: { type: 'ingestion' } (_PARTITIONDATE), { type: 'time' }
(DATE_TRUNC / TIMESTAMP_TRUNC / DATETIME_TRUNC chosen from columnType;
daily on a DATE column is the bare column), { type: 'range', column, start, end, interval } (RANGE_BUCKET(GENERATE_ARRAY(...))), or
{ type: 'expression' } for a hand-written one.
createPartitionedTable, createPartition, attachPartition,
detachPartition and dropPartition all throw: BigQuery partitions are
implicit and are never named, declared, attached or detached.

Search and vector indexes#

await db.dialect.createSearchIndex('logs', 'idx_logs', ['message']);
// CREATE SEARCH INDEX `idx_logs` ON `analytics`.`logs`(`message`)

await db.dialect.createVectorIndex('docs', 'idx_vec', 'embedding', { distanceType: 'COSINE' });
// CREATE VECTOR INDEX `idx_vec` ON `analytics`.`docs`(`embedding`)
//   OPTIONS(index_type = 'IVF', distance_type = 'COSINE')
createFulltextIndex() routes to CREATE SEARCH INDEX, which is the honest
equivalent — it is what makes SEARCH(table, 'term') fast. showIndexes()
reports search indexes from INFORMATION_SCHEMA.SEARCH_INDEXES.

Writes#

db.dialect.buildInsertQuery('users', { id: 'a', name: 'Ada' });
// INSERT INTO `analytics`.`users` (`id`, `name`) VALUES (?, ?)

db.dialect.buildUpdateQuery('users', { name: 'Ada L.' }, {});
// UPDATE `analytics`.`users` SET `name` = ? WHERE TRUE
RETURNING throws on INSERT, UPDATE, DELETE and MERGE. Re-SELECT
if you need the row back.
limit on UPDATE/DELETE throws. GoogleSQL has no such clause, and
ignoring the option would change more rows than the caller asked for.
truncate: true maps to TRUNCATE TABLE, which BigQuery does have.
bulkInsert() emits one multi-row INSERT, padding a ragged record set with
NULL so the column list stays consistent. BigQuery meters DML per table,
so a high-rate load should use streamInsert() (the tabledata.insertAll
API, which bypasses the DML quota at the cost of streaming-buffer semantics)
or a load job.

Upsert — MERGE#

db.dialect.buildUpsertQuery('users', { id: 'a', name: 'Ada' }, { conflictFields: ['id'] });
conflictFields is required. There is no unique constraint to infer it
from, and matching on every column would never find an existing row — every
upsert would insert a duplicate.

Reads#

db.dialect.buildSelectQuery({
  tableName: 'users',
  attributes: { exclude: ['password'] },
});
// SELECT * EXCEPT (`password`) FROM `analytics`.`users`
QUALIFY is supported as a raw expression on the select options, for
filtering on a window function without a wrapping subquery.
union / unionType translate to GoogleSQL's set operators: 'UNION' becomes
UNION DISTINCT, 'EXCEPT' becomes EXCEPT DISTINCT, 'INTERSECT' becomes
INTERSECT DISTINCT. Each operand is parenthesised, because GoogleSQL rejects
a set-operation input carrying its own ORDER BY/LIMIT otherwise.
TABLESAMPLE SYSTEM (n PERCENT) is supported; BERNOULLI and
REPEATABLE(seed) throw — BigQuery has neither.
lock (SELECT … FOR UPDATE) throws: BigQuery uses snapshot isolation and
has no row locks.
distinctOn throws, pointing at the
QUALIFY ROW_NUMBER() OVER (PARTITION BY …) = 1 idiom that does the same job.
Operators without a GoogleSQL spelling are translated rather than passed
through: $iLike → LOWER(col) LIKE LOWER(?), $startsWith/$endsWith →
STARTS_WITH/ENDS_WITH, $substring → STRPOS(...) > 0, $regexp →
REGEXP_CONTAINS.
An empty $in compiles to FALSE and an empty $notIn to TRUE, because
IN () is a syntax error.
order: random() renders RAND().

Transactions#

BigQuery transactions live inside a single multi-statement script job.
BEGIN TRANSACTION submitted as a job of its own commits nothing and leaves
nothing open, so startTransaction(), commitTransaction() and
rollbackTransaction() all throw, as do the savepoint builders. Passing a
transaction to query() throws too.
await db.dialect.runTransactionScript([
  'DELETE FROM `analytics`.`staging` WHERE TRUE',
  'INSERT INTO `analytics`.`staging` SELECT * FROM `analytics`.`incoming`',
]);

Type mapping#

ORM type descriptorGenerated SQL
STRING / CHAR / TEXT / UUIDSTRING
INTEGER / BIGINT / NUMBERINT64
FLOAT / DOUBLEFLOAT64
DECIMAL(p, s)NUMERIC(p,s), or BIGNUMERIC when p>38 or s>9
BOOLEANBOOL
DATETIMESTAMP
DATEONLYDATE
TIMETIME
BLOBBYTES
JSON / JSONB / HSTOREJSON
GEOMETRY / GEOGRAPHYGEOGRAPHY
ARRAY(<t>)ARRAY<t>
RANGERANGE<DATE|DATETIME|TIMESTAMP>
ENUMSTRING (with a warning — the value set is not enforced anywhere)
Deliberate refusals in the type mapper:
ARRAY with no element type throws — GoogleSQL has no bare ARRAY.
ARRAY<ARRAY<…>> throws — BigQuery cannot nest repeated fields directly.
RANGE of anything but DATE/DATETIME/TIMESTAMP throws.
SET throws — mapping it to ARRAY<STRING> would silently drop both the
value whitelist and the deduplication SET implies.
No VARCHAR(n). BigQuery's STRING is unbounded and a declared length is
not part of the storage model, so STRING(100) in a model becomes STRING.
(BigQuery does accept the parameterized STRING(100), but that turns a length
the rest of this ORM treats as advisory into a hard insert-time rejection, so
the same model would behave differently here than everywhere else.)

Escaping caveats#

escape() has no column-type context. A JS Date is always emitted as a
TIMESTAMP literal, which BigQuery rejects for a DATE column — pass a
'YYYY-MM-DD' string to DATEONLY columns. A JS array or object becomes a
JSON literal, not an ARRAY/STRUCT one; use arrayLiteral() /
structLiteral() (or a Literal) for repeated and struct columns.
escapeId() throws on a backtick, backslash, newline or NUL. There is no
escape for them inside a backtick-quoted identifier, so passing one through
would close the quote early.
Prefer passing values as positional ? replacements — those become real
BigQuery query parameters and never reach the SQL text.

Not supported / caveats#

Methods that throw, because the concept has no BigQuery analogue:
Constraints — UNIQUE and CHECK anywhere (column, table constraint,
uniqueKeys); ON DELETE/ON UPDATE referential actions (an unenforced
foreign key can never honour them).
Indexes — addIndex, createIndex, removeIndex, dropIndex,
createSpatialIndex.
Partition DDL — createPartitionedTable and the partition
create/attach/detach/drop methods.
changeColumn — BigQuery's ALTER COLUMN only widens a type, sets or
drops a default, drops NOT NULL, and sets a description; it cannot narrow a
type or add NOT NULL. Use setColumnDataType(), setColumnDefault(),
dropColumnDefault(), dropColumnNotNull(), or rebuild with
CREATE OR REPLACE TABLE … AS SELECT. Adding a NOT NULL column with no
default also throws — existing rows would have no value for it.
CASCADE on DROP TABLE / DROP VIEW (BigQuery has none; DROP SCHEMA … CASCADE is supported).
Transactions and savepoints — see above.
CREATE DATABASE / DROP DATABASE — a project, not SQL.
Extensions and Foreign Data Wrappers — Postgres concepts. External data
is read through external tables and BigLake connections.
changeOwner, SQL users and SQL roles — identity is Cloud IAM.
buildGrantQuery/buildRevokeQuery throw because BigQuery's GRANT takes
IAM roles (roles/bigquery.dataViewer), which do not correspond one-to-one
with SQL privileges; use buildGrantRolesQuery() / buildRevokeRolesQuery()
for the real DCL.
What is implemented beyond the base interface: runTransactionScript(),
streamInsert(), createSearchIndex/dropSearchIndex,
createVectorIndex/dropVectorIndex, buildCreateTableAsSelect(),
setTableOptions(), materialized views (including
CALL BQ.REFRESH_MATERIALIZED_VIEW(...)), row access policies for row-level
security, stored procedures (CREATE PROCEDURE … BEGIN … END, CALL),
buildSafeCast(), arrayLiteral(), structLiteral() and buildJsonQuery()
(JSON_VALUE(col, '$.path')).
queryStream() uses the driver's createQueryStream() rather than the shared
LIMIT/OFFSET paginating helper: paging by re-running the query would pay for
the whole scan once per page and, without an ORDER BY, would not guarantee
stable pages.

Verification status#

SQL-generation verified. tests/dialects/bigquery.test.ts (87 assertions,
no connection opened) pins:
Backtick quoting, the identifier rejections, and dataset / project.dataset
/ already-dotted table paths.
Backslash string escaping (explicitly not '' doubling), typed TIMESTAMP
/ FROM_BASE64 / JSON literals, NaN/Infinity spellings, and the
arrayLiteral/structLiteral helpers.
The full type-mapping table plus every type-level refusal.
CREATE TABLE clause order, table-level PRIMARY KEY … NOT ENFORCED,
composite keys, unenforced foreign keys, the autoIncrement split, the
clustering cap, and the UNIQUE/CHECK/index/uniqueKeys refusals.
Every partition expression form, and the partition-DDL refusals.
ALTER TABLE grammar (ADD/DROP/RENAME COLUMN, the four supported
ALTER COLUMN edits) and the changeColumn refusal.
Index refusals, CREATE SEARCH INDEX, CREATE VECTOR INDEX.
WHERE operator translation, the empty-IN constants, ORDER BY shapes,
RAND(), and that a standalone OFFSET never appears without a LIMIT.
SELECT assembly, * EXCEPT (...), QUALIFY, CTEs, TABLESAMPLE, and that
no bare UNION is emitted.
INSERT/bulk INSERT/UPDATE/DELETE/TRUNCATE/MERGE shapes and
parameter order, and the RETURNING and LIMIT refusals.
Transaction refusals and the multi-statement script builder.
Dataset, view, materialized-view, procedure and row-access-policy DDL.
The IAM-shaped GRANT/REVOKE, and that the SQL-privilege form refuses.
Not verified against a live warehouse. No statement here has been executed
against a real BigQuery project. @google-cloud/bigquery is not installed in
this repo and there is no mock for it, so connect(), query(), queryStream(),
streamInsert() and the INFORMATION_SCHEMA introspection queries
(showTables, showViews, showConstraints, showIndexes, describeTable,
hasStoredProcedure) are unexercised — only the SQL they would submit is
reviewed, and the driver-shape assumptions (createQueryJob,
job.getQueryResults(), statistics.query.numDmlAffectedRows,
createQueryStream, dataset().table().insert()) are untested. Treat the SQL
as verified-by-shape and validate against your own project before relying on it
in production. Newer BigQuery surface area used here — unenforced key
constraints, column DEFAULTs, RENAME COLUMN, search and vector indexes — may
also need a current region/edition to be available.

Capabilities#

Computed from the code — capabilitiesOf() (src/transaction-support.ts),
whereSupportOf() (src/query-builders/expression-render.ts),
sqlObjectCapabilitiesOf() (src/sql-objects/capabilities.ts) and the
builders — by the scratch test described in the
capability matrix.
Capabilitybigquery
Transactions atomicyes
Savepointsno — a nested transaction() throws
Isolationup to REPEATABLE READ
Transaction modesread-only no; deferrable no; constraint deferral no
RETURNINGrefused — RETURNING on INSERT is not supported for the bigquery dialect: BigQuery DML returns an affected-row count and nothing else. Re-SELECT the rows after the stateme
UpsertMERGE INTO … WHEN MATCHED / WHEN NOT MATCHED
JSON columnJSON (JSONB → JSON)
Vector columnARRAY<FLOAT64>
Array columnARRAY<INT64>
WHERE builder38 operator keys; $and/$or/$not; $exists: yes; $in subquery: yes; expression operands: yes
SQL objectsfamily bigquery: triggers no; procedures yes; functions expressionOnly; materialized views native; sequences no; enums check; RLS no
StreamingqueryStream() present; LISTEN absent; createExtension() present

Testing#

tests/dialects/bigquery.test.ts exercises the dialect with a mocked driver, so nothing touches a server.

Related reading#

All dialects — what each engine supports
Cloud Spanner — the other GoogleSQL dialect in this codebase
Data types — how each type maps to this engine
Querying — how a FindOptions becomes SQL
Modified at 2026-10-04 00:40:16
Previous
Azure SQL Managed Instance Dialect
Next
Citus Dialect
Built with