Fix MongoDB ignore+transaction, PHPStan errors, Postgres quoting, and ACL drift

- Pre-filter known-duplicate docs before passing to adapter, preventing
  permissions being inserted for existing docs (ACL drift) and fixing
  MongoDB transaction abort on BulkWriteException
- Skip transaction session in Mongo adapter when ignore=true so
  ordered:false inserts persist even if some fail
- Return empty array from Mongo catch block instead of untransformed
  cloned inputs
- Quote all column names in Postgres ON CONFLICT targets consistently
- Wrap array_chunk calls with max(1, ...) to satisfy PHPStan int<1,max>

Author: premtsd-code

src/Database/Adapter/Mongo.php

@@ -1464,10 +1464,12 @@ public function createDocuments(Document $collection, array $documents, bool $ig
     {
         $name = $this->getNamespace() . '_' . $this->filter($collection->getId());
 
-        $options = $this->getTransactionOptions();
-
         if ($ignore) {
-            $options['ordered'] = false;
+            // Run outside transaction — MongoDB aborts transactions on any write error,
+            // so ordered:false + session would roll back even successfully inserted docs.
+            $options = ['ordered' => false];
+        } else {
+            $options = $this->getTransactionOptions();
         }
 
         $records = [];
@@ -1498,7 +1500,10 @@ public function createDocuments(Document $collection, array $documents, bool $ig
             $processed = $this->processException($e);
 
             if ($ignore && $processed instanceof DuplicateException) {
-                return $documents;
+                // Race condition: a doc was inserted between pre-filter and insertMany.
+                // With ordered:false outside transaction, non-duplicate inserts persist.
+                // Return empty — we cannot determine which docs succeeded without querying.
+                return [];
             }
 
             throw $processed;

src/Database/Adapter/Postgres.php

@@ -1376,7 +1376,7 @@ protected function getInsertSuffix(bool $ignore, string $table): string
             return '';
         }
 
-        $conflictTarget = $this->sharedTables ? '("_uid", _tenant)' : '("_uid")';
+        $conflictTarget = $this->sharedTables ? '("_uid", "_tenant")' : '("_uid")';
 
         return "ON CONFLICT {$conflictTarget} DO NOTHING";
     }
@@ -1388,8 +1388,8 @@ protected function getInsertPermissionsSuffix(bool $ignore): string
         }
 
         $conflictTarget = $this->sharedTables
-            ? '(_type, _permission, _document, _tenant)'
-            : '(_type, _permission, _document)';
+            ? '("_type", "_permission", "_document", "_tenant")'
+            : '("_type", "_permission", "_document")';
 
         return "ON CONFLICT {$conflictTarget} DO NOTHING";
     }

src/Database/Database.php

@@ -5659,15 +5659,15 @@ public function createDocuments(
         // pre-fetch existing document IDs so we skip relationship writes for duplicates
         $preExistingIds = [];
         $tenantPerDocument = $this->adapter->getSharedTables() && $this->adapter->getTenantPerDocument();
-        if ($ignore && $this->resolveRelationships) {
+        if ($ignore) {
             if ($tenantPerDocument) {
                 $idsByTenant = [];
                 foreach ($documents as $doc) {
                     $idsByTenant[$doc->getTenant()][] = $doc->getId();
                 }
                 foreach ($idsByTenant as $tenant => $tenantIds) {
                     $tenantIds = \array_values(\array_unique($tenantIds));
-                    foreach (\array_chunk($tenantIds, $this->maxQueryValues) as $idChunk) {
+                    foreach (\array_chunk($tenantIds, \max(1, $this->maxQueryValues)) as $idChunk) {
                         $existing = $this->authorization->skip(fn () => $this->withTenant($tenant, fn () => $this->silent(fn () => $this->find(
                             $collection->getId(),
                             [
@@ -5686,7 +5686,7 @@ public function createDocuments(
                     \array_map(fn (Document $doc) => $doc->getId(), $documents)
                 )));
 
-                foreach (\array_chunk($inputIds, $this->maxQueryValues) as $idChunk) {
+                foreach (\array_chunk($inputIds, \max(1, $this->maxQueryValues)) as $idChunk) {
                     $existing = $this->authorization->skip(fn () => $this->silent(fn () => $this->find(
                         $collection->getId(),
                         [
@@ -5755,6 +5755,18 @@ public function createDocuments(
         }
 
         foreach (\array_chunk($documents, $batchSize) as $chunk) {
+            if ($ignore && !empty($preExistingIds)) {
+                $chunk = \array_values(\array_filter($chunk, function (Document $doc) use ($preExistingIds, $tenantPerDocument) {
+                    $key = $tenantPerDocument
+                        ? $doc->getTenant() . ':' . $doc->getId()
+                        : $doc->getId();
+                    return !isset($preExistingIds[$key]);
+                }));
+                if (empty($chunk)) {
+                    continue;
+                }
+            }
+
             $batch = $this->withTransaction(function () use ($collection, $chunk, $ignore) {
                 return $this->adapter->createDocuments($collection, $chunk, $ignore);
             });
@@ -7190,7 +7202,7 @@ public function upsertDocumentsWithIncrease(
                 }
                 foreach ($idsByTenant as $tenant => $tenantIds) {
                     $tenantIds = \array_values(\array_unique($tenantIds));
-                    foreach (\array_chunk($tenantIds, $this->maxQueryValues) as $idChunk) {
+                    foreach (\array_chunk($tenantIds, \max(1, $this->maxQueryValues)) as $idChunk) {
                         $fetched = $this->authorization->skip(fn () => $this->withTenant($tenant, fn () => $this->silent(fn () => $this->find(
                             $collection->getId(),
                             [Query::equal('$id', $idChunk), Query::limit(\count($idChunk))],
@@ -7201,7 +7213,7 @@ public function upsertDocumentsWithIncrease(
                     }
                 }
             } else {
-                foreach (\array_chunk($uniqueIds, $this->maxQueryValues) as $idChunk) {
+                foreach (\array_chunk($uniqueIds, \max(1, $this->maxQueryValues)) as $idChunk) {
                     $fetched = $this->authorization->skip(fn () => $this->silent(fn () => $this->find(
                         $collection->getId(),
                         [Query::equal('$id', $idChunk), Query::limit(\count($idChunk))],