turbine-orm 0.36.1 → 0.38.0

package/dist/cjs/errors.js

@@ -9,6 +9,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ReadOnlyError = exports.UnsupportedFeatureError = exports.OptimisticLockError = exports.PipelineError = exports.ExclusionConstraintError = exports.CheckConstraintError = exports.SerializationFailureError = exports.DeadlockError = exports.NotNullViolationError = exports.ForeignKeyError = exports.UniqueConstraintError = exports.CircularRelationError = exports.MigrationError = exports.RelationError = exports.ConnectionError = exports.ValidationError = exports.TimeoutError = exports.NotFoundError = exports.TurbineError = exports.TurbineErrorCode = void 0;
 exports.setErrorMessageMode = setErrorMessageMode;
 exports.getErrorMessageMode = getErrorMessageMode;
+exports.describeTargetForMessage = describeTargetForMessage;
 exports.wrapPgError = wrapPgError;
 /** Error codes for all Turbine errors */
 exports.TurbineErrorCode = {
@@ -72,6 +73,32 @@ function setErrorMessageMode(mode) {
 function getErrorMessageMode() {
     return errorMessageMode;
 }
+/**
+ * Render a user-supplied `where` / `connect` target for a "no row found" error
+ * message, honoring the global {@link ErrorMessageMode}. In 'safe' mode (the
+ * default) only the key names are shown (`keys [email, id]`) so that PII values
+ * never leak into logs; in 'verbose' mode the full JSON serialization is used.
+ *
+ * This mirrors {@link NotFoundError}'s redaction so that every "no row found"
+ * message in the library follows one convention, including the nested-write
+ * connect/update failures which historically embedded the raw values.
+ */
+function describeTargetForMessage(target) {
+    if (errorMessageMode === 'verbose') {
+        try {
+            return JSON.stringify(target);
+        }
+        catch {
+            return '[unserializable]';
+        }
+    }
+    // safe mode: key names only
+    if (target === null || target === undefined || typeof target !== 'object') {
+        return 'keys []';
+    }
+    const keys = Object.keys(target);
+    return `keys [${keys.join(', ')}]`;
+}
 /**
  * Render a `where` clause for error messages. In 'safe' mode (the default),
  * only the keys are shown; values are stripped to avoid leaking PII into logs.

package/dist/cjs/nested-write.js

@@ -39,7 +39,7 @@ function extractRelationFields(data, tableMeta) {
     const scalars = {};
     const relations = {};
     for (const [key, value] of Object.entries(data)) {
-        if (key in tableMeta.relations &&
+        if (Object.hasOwn(tableMeta.relations, key) &&
             value !== null &&
             typeof value === 'object' &&
             !Array.isArray(value) &&
@@ -59,7 +59,7 @@ function extractRelationFields(data, tableMeta) {
  */
 function hasRelationFields(data, tableMeta) {
     for (const key of Object.keys(data)) {
-        if (key in tableMeta.relations) {
+        if (Object.hasOwn(tableMeta.relations, key)) {
             const val = data[key];
             if (val !== null && typeof val === 'object' && !Array.isArray(val) && !(val instanceof Date)) {
                 return true;
@@ -214,7 +214,7 @@ async function executeNestedUpdate(ctx, tableName, where, data, depth = 0, path
     else {
         parentRow = (await ctx.tx.table(tableName).findUnique({ where }));
         if (!parentRow) {
-            throw new errors_js_1.ValidationError(`[turbine] update: no ${tableName} row found matching ${JSON.stringify(where)}.`);
+            throw new errors_js_1.ValidationError(`[turbine] update: no ${tableName} row found matching ${(0, errors_js_1.describeTargetForMessage)(where)}.`);
         }
     }
     // Process each relation
@@ -297,7 +297,7 @@ async function processHasManyCreate(ctx, rel, ops, parentRow, depth, path, relNa
         if (items.length > 0) {
             // Check if any items have nested relations (need per-row recursion)
             const childTable = ctx.schema.tables[rel.to];
-            const hasNested = childTable && items.some((item) => Object.keys(item).some((k) => k in (childTable.relations ?? {})));
+            const hasNested = childTable && items.some((item) => Object.keys(item).some((k) => Object.hasOwn(childTable.relations ?? {}, k)));
             if (hasNested) {
                 // Per-row recursive create for items with nested relations
                 for (const item of items) {
@@ -357,7 +357,7 @@ async function resolveBelongsToForCreate(ctx, rel, ops, parentTable, depth, path
             const target = items[0];
             relatedRow = (await ctx.tx.table(rel.to).findUnique({ where: target }));
             if (!relatedRow) {
-                throw new errors_js_1.ValidationError(`[turbine] connect on "${relName}": no ${rel.to} row found matching ${JSON.stringify(target)}.`);
+                throw new errors_js_1.ValidationError(`[turbine] connect on "${relName}": no ${rel.to} row found matching ${(0, errors_js_1.describeTargetForMessage)(target)}.`);
             }
         }
     }
@@ -412,7 +412,7 @@ async function processBelongsToCreate(ctx, rel, ops, parentRow, parentTable, dep
             const target = items[0];
             const existing = await ctx.tx.table(rel.to).findUnique({ where: target });
             if (!existing) {
-                throw new errors_js_1.ValidationError(`[turbine] connect on "${relName}": no ${rel.to} row found matching ${JSON.stringify(target)}.`);
+                throw new errors_js_1.ValidationError(`[turbine] connect on "${relName}": no ${rel.to} row found matching ${(0, errors_js_1.describeTargetForMessage)(target)}.`);
             }
             const updateData = {};
             const relatedTable = ctx.schema.tables[rel.to];
@@ -442,7 +442,7 @@ async function batchConnect(ctx, rel, items, parentRow) {
     for (const target of items) {
         const existing = await ctx.tx.table(rel.to).findUnique({ where: target });
         if (!existing) {
-            throw new errors_js_1.ValidationError(`[turbine] connect: no ${rel.to} row found matching ${JSON.stringify(target)}.`);
+            throw new errors_js_1.ValidationError(`[turbine] connect: no ${rel.to} row found matching ${(0, errors_js_1.describeTargetForMessage)(target)}.`);
         }
     }
     // Build FK update data to point children at parent

package/dist/cjs/query/batched-loader.js

@@ -57,6 +57,7 @@ exports.loadRelationsBatched = loadRelationsBatched;
 const errors_js_1 = require("../errors.js");
 const schema_js_1 = require("../schema.js");
 const filters_js_1 = require("./filters.js");
+const utils_js_1 = require("./utils.js");
 /**
  * Max parent keys per follow-up query. On Postgres the whole key set travels as
  * ONE array parameter (`= ANY($1)`), so this is not a bind-parameter limit — it
@@ -131,7 +132,7 @@ function neededParentKeyFields(parentMeta, withClause) {
             }
             continue;
         }
-        const rel = parentMeta.relations[relName];
+        const rel = (0, utils_js_1.ownLookup)(parentMeta.relations, relName);
         if (!rel)
             continue; // unknown relation — the join path throws; let the loader surface it
         for (const col of localKeyColumns(rel)) {
@@ -169,7 +170,7 @@ function resolveCountRelations(parentMeta, countSpec) {
     for (const [relName, enabled] of Object.entries(countSpec)) {
         if (!enabled)
             continue;
-        const rel = parentMeta.relations[relName];
+        const rel = (0, utils_js_1.ownLookup)(parentMeta.relations, relName);
         if (!rel) {
             throw new errors_js_1.RelationError(`[turbine] Unknown relation "${relName}" in _count on table "${parentMeta.name}". ` +
                 `Available: ${Object.keys(parentMeta.relations).join(', ')}`);
@@ -240,7 +241,7 @@ async function loadRelationsBatched(ctx, parents, withClause, timeout, depth = 0
             loads.push(loadCounts(ctx, parents, spec));
             continue;
         }
-        const rel = ctx.parentMeta.relations[relName];
+        const rel = (0, utils_js_1.ownLookup)(ctx.parentMeta.relations, relName);
         if (!rel) {
             throw new errors_js_1.ValidationError(`[turbine] Unknown relation "${relName}" on table "${ctx.parentMeta.name}". ` +
                 `Available: ${Object.keys(ctx.parentMeta.relations).join(', ')}`);

package/dist/cjs/query/builder.js

@@ -892,7 +892,7 @@ class QueryInterface {
             !whereObj.NOT &&
             whereKeys.every((k) => {
                 const v = whereObj[k];
-                return v !== null && !(0, filters_js_1.isWhereOperator)(v) && !this.tableMeta.relations[k];
+                return v !== null && !(0, filters_js_1.isWhereOperator)(v) && !(0, utils_js_1.ownLookup)(this.tableMeta.relations, k);
             });
         // Simple path: plain equality, no operators/null/OR
         if (!args.with && isSimpleWhere) {
@@ -1131,7 +1131,7 @@ class QueryInterface {
         const withFp = args?.with ? this.withFingerprint(args.with) : '';
         const orderFp = args?.orderBy
             ? Object.entries(args.orderBy)
-                .map(([k, d]) => `${k}:${this.orderByEntryFingerprint(d, this.tableMeta.relations[k]?.to)}`)
+                .map(([k, d]) => `${k}:${this.orderByEntryFingerprint(d, (0, utils_js_1.ownLookup)(this.tableMeta.relations, k)?.to)}`)
                 .join(',')
             : '';
         const cursorFp = args?.cursor
@@ -1717,7 +1717,11 @@ class QueryInterface {
     }
     /** Convert camelCase field name to snake_case column name (unquoted, for non-SQL uses) */
     toColumn(field) {
-        const mapped = this.tableMeta.columnMap[field];
+        // Prototype-safe lookup: a plain-object `columnMap` would otherwise return
+        // an inherited member (e.g. Object.prototype.constructor) for a field named
+        // "constructor" / "toString" / "__proto__", bypassing the unknown-field
+        // check below and returning a non-string as the column name.
+        const mapped = (0, utils_js_1.ownLookup)(this.tableMeta.columnMap, field);
         if (mapped)
             return mapped;
         // Fall back to camelToSnake ONLY if that snake_cased name also exists as a
@@ -1727,7 +1731,7 @@ class QueryInterface {
         // SQL injection and catching typos like `where: { emial: 'x' }` with a
         // clear error instead of a cryptic Postgres "column does not exist".
         const snake = (0, schema_js_1.camelToSnake)(field);
-        if (this.tableMeta.reverseColumnMap?.[snake]) {
+        if (this.tableMeta.reverseColumnMap && (0, utils_js_1.ownLookup)(this.tableMeta.reverseColumnMap, snake)) {
             return snake;
         }
         if (this.tableMeta.allColumns?.includes(snake)) {
@@ -1822,7 +1826,7 @@ class QueryInterface {
             // pick.where / pick.orderBy paths). To-one relation orderBy carries the
             // target's global filter once per ordered column.
             if (this.isRelationOrderByValue(dir)) {
-                const relDef = this.tableMeta.relations[key];
+                const relDef = (0, utils_js_1.ownLookup)(this.tableMeta.relations, key);
                 if (relDef && (0, filters_js_1.isRelationPickOrderBy)(dir)) {
                     this.collectRelationPickOrderParams(key, relDef, dir, params);
                 }

package/dist/cjs/query/relations.js

@@ -88,6 +88,7 @@ const index_advisor_js_1 = require("../index-advisor.js");
 const schema_js_1 = require("../schema.js");
 const batched_loader_js_1 = require("./batched-loader.js");
 const filters_js_1 = require("./filters.js");
+const utils_js_1 = require("./utils.js");
 const whereMod = __importStar(require("./where.js"));
 const writesMod = __importStar(require("./writes.js"));
 /** Relations already warned about missing FK indexes (once per process, dev only). */
@@ -388,10 +389,10 @@ function buildOrderBy(qi, orderBy, params, lateralSink) {
     // are validated in the relation branch below, so skip them here.
     if (process.env.NODE_ENV !== 'production') {
         for (const [key, value] of Object.entries(orderBy)) {
-            if (isRelationOrderByValue(qi, value) && qi.tableMeta.relations[key])
+            if (isRelationOrderByValue(qi, value) && (0, utils_js_1.ownLookup)(qi.tableMeta.relations, key))
                 continue;
             const snakeKey = (0, schema_js_1.camelToSnake)(key);
-            if (!qi.tableMeta.columns.some((c) => c.name === snakeKey) && !(key in qi.tableMeta.columnMap)) {
+            if (!qi.tableMeta.columns.some((c) => c.name === snakeKey) && !Object.hasOwn(qi.tableMeta.columnMap, key)) {
                 console.warn(`[turbine] Unknown orderBy field "${key}" for table "${qi.tableMeta.name}". ` +
                     'This will cause a runtime error.');
             }
@@ -473,7 +474,7 @@ function nullsSuffix(qi, nulls) {
  * camelCase-named DB columns like "sortOrder").
  */
 function resolveOrderByColumn(_qi, table, meta, key) {
-    const col = meta.columnMap[key] ?? (0, schema_js_1.camelToSnake)(key);
+    const col = (0, utils_js_1.ownLookup)(meta.columnMap, key) ?? (0, schema_js_1.camelToSnake)(key);
     if (!meta.allColumns.includes(col)) {
         throw new errors_js_1.ValidationError(`[turbine] Unknown field "${key}" in orderBy on table "${table}". ` +
             `Known fields: ${Object.keys(meta.columnMap).join(', ') || '(none)'}.`);
@@ -591,7 +592,7 @@ function buildRelationOrderBy(qi, relName, value, alias, params, ctx, lateralSin
         .map(([col, dirValue]) => {
         // columnMap-first resolution (camelToSnake fallback): mirrors the
         // scalar orderBy path so camelCase-named DB columns resolve here too.
-        const snakeCol = targetMeta.columnMap[col] ?? (0, schema_js_1.camelToSnake)(col);
+        const snakeCol = (0, utils_js_1.ownLookup)(targetMeta.columnMap, col) ?? (0, schema_js_1.camelToSnake)(col);
         if (!targetMeta.allColumns.includes(snakeCol)) {
             throw new errors_js_1.ValidationError(`[turbine] Unknown column "${col}" in orderBy on relation "${relName}" (table "${relDef.to}").`);
         }
@@ -1059,7 +1060,7 @@ function resolveTargetColumns(qi, spec, targetMeta, includePii) {
         // opt-in and comes back regardless of the query's `includePii`.
         const selectedFields = Object.entries(spec.select)
             .filter(([, v]) => v)
-            .map(([k]) => targetMeta.columnMap[k] ?? (0, schema_js_1.camelToSnake)(k));
+            .map(([k]) => (0, utils_js_1.ownLookup)(targetMeta.columnMap, k) ?? (0, schema_js_1.camelToSnake)(k));
         return selectedFields.filter((col) => targetMeta.allColumns.includes(col));
     }
     // Default / omit-only relation projection: PII columns are excluded unless
@@ -1069,7 +1070,7 @@ function resolveTargetColumns(qi, spec, targetMeta, includePii) {
     if (spec !== true && spec.omit) {
         const omittedFields = new Set(Object.entries(spec.omit)
             .filter(([, v]) => v)
-            .map(([k]) => targetMeta.columnMap[k] ?? (0, schema_js_1.camelToSnake)(k)));
+            .map(([k]) => (0, utils_js_1.ownLookup)(targetMeta.columnMap, k) ?? (0, schema_js_1.camelToSnake)(k)));
         return targetMeta.allColumns.filter((col) => !omittedFields.has(col) && !(hasPii && piiCols.has(col)));
     }
     if (hasPii) {

package/dist/cjs/query/utils.js

@@ -7,6 +7,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OPERATOR_KEYS = exports.LRUCache = void 0;
 exports.quoteIdent = quoteIdent;
+exports.ownLookup = ownLookup;
 exports.escSingleQuote = escSingleQuote;
 exports.escapeLike = escapeLike;
 exports.fnv1a64Hex = fnv1a64Hex;
@@ -28,6 +29,18 @@ exports.parseDbDate = parseDbDate;
 function quoteIdent(name) {
     return `"${name.replace(/"/g, '""')}"`;
 }
+/**
+ * Prototype-safe own-property read for the plain metadata maps (columnMap,
+ * relations, reverseColumnMap). These are constructed as plain objects, so a
+ * bare `map[key]` for a user-supplied field name like "constructor",
+ * "toString", or "__proto__" returns an inherited member from
+ * `Object.prototype` — a truthy value that slips past validation and produces a
+ * cryptic `TypeError` instead of a clean `ValidationError`. Returns `undefined`
+ * unless `key` is an OWN enumerable/non-enumerable property.
+ */
+function ownLookup(map, key) {
+    return Object.hasOwn(map, key) ? map[key] : undefined;
+}
 /**
  * Escape single quotes for use as string keys in json_build_object().
  * Doubles single quotes per SQL quoting rules.

package/dist/cjs/query/where-compile.js

@@ -39,6 +39,7 @@ exports.walkWhere = walkWhere;
 exports.classifyScalarForSql = classifyScalarForSql;
 exports.fingerprintScalarToken = fingerprintScalarToken;
 const filters_js_1 = require("./filters.js");
+const utils_js_1 = require("./utils.js");
 /** True when a normalized relation filter carries at least one cardinality key. */
 function isRelationFilterObj(filterObj) {
     return ('some' in filterObj || 'every' in filterObj || 'none' in filterObj || 'is' in filterObj || 'isNot' in filterObj);
@@ -78,7 +79,7 @@ function walkWhere(host, where) {
             events.push({ kind: 'not', condition: value });
             continue;
         }
-        const relDef = host.tableMeta.relations[key];
+        const relDef = (0, utils_js_1.ownLookup)(host.tableMeta.relations, key);
         if (relDef && typeof value === 'object' && value !== null && !Array.isArray(value)) {
             const filterObj = host.normalizeRelationFilter(relDef, value);
             if (isRelationFilterObj(filterObj)) {

package/dist/cjs/query/where.js

@@ -723,7 +723,7 @@ function buildScopedWhere(qi, scope, where, params) {
  */
 function buildScopedScalarClause(qi, scope, field, value, params, clauses) {
     const meta = scope.meta;
-    const col = meta.columnMap[field] ?? (0, schema_js_1.camelToSnake)(field);
+    const col = (0, utils_js_1.ownLookup)(meta.columnMap, field) ?? (0, schema_js_1.camelToSnake)(field);
     if (!meta.allColumns.includes(col))
         throw scope.unknownColumn(field);
     const qCol = `${scope.qualifier}${qi.q(col)}`;
@@ -800,7 +800,7 @@ function collectScopedScalarParams(qi, scope, field, value, params) {
     if (value === null)
         return;
     const meta = scope.meta;
-    const col = meta.columnMap[field] ?? (0, schema_js_1.camelToSnake)(field);
+    const col = (0, utils_js_1.ownLookup)(meta.columnMap, field) ?? (0, schema_js_1.camelToSnake)(field);
     if (typeof value === 'object' && !Array.isArray(value) && (0, filters_js_1.isJsonFilter)(value)) {
         const colType = pgTypeForColumn(qi, meta, col);
         if (isJsonColumnType(qi, colType)) {
@@ -1071,7 +1071,7 @@ function resolveColumnRef(_qi, ref, ctx, mode) {
             `Case-insensitive column-to-column comparison is not supported: use client.sql\`...\` ` +
             `for lower(a) = lower(b).`);
     }
-    const col = ctx.meta.columnMap[ref.col] ?? (0, schema_js_1.camelToSnake)(ref.col);
+    const col = (0, utils_js_1.ownLookup)(ctx.meta.columnMap, ref.col) ?? (0, schema_js_1.camelToSnake)(ref.col);
     if (!ctx.meta.allColumns.includes(col)) {
         throw new errors_js_1.ValidationError(`[turbine] Unknown field "${ref.col}" referenced by { col } in where on table "${ctx.table}". ` +
             `Known fields: ${Object.keys(ctx.meta.columnMap).join(', ') || '(none)'}.`);

package/dist/cli/index.d.ts

@@ -14,7 +14,7 @@
  *   turbine seed                  — Run seed file
  *   turbine status                — Show schema summary
  *   turbine doctor                — Check relations for missing FK indexes (--fix emits migration)
- *   turbine studio                — Launch local read-only web UI
+ *   turbine studio                : Launch local read-only web UI (--demo for a seeded sample DB)
  *   turbine mcp                   — Start read-only MCP server over JSON-RPC stdio
  *   turbine observe               — Launch metrics dashboard (requires TURBINE_OBSERVE_URL)
  *
@@ -57,6 +57,8 @@ export interface CliArgs {
     write?: boolean;
     /** Reveal PII-tagged column values in Studio instead of redacting (`--show-pii`). */
     showPii?: boolean;
+    /** Launch Studio with a seeded in-memory sample database (`studio --demo`). */
+    demo?: boolean;
 }
 export declare function parseArgs(argv?: string[]): CliArgs;
 /** Where a resolved `DATABASE_URL` came from, after the `.env` load. */

package/dist/cli/index.js

@@ -14,7 +14,7 @@
  *   turbine seed                  — Run seed file
  *   turbine status                — Show schema summary
  *   turbine doctor                — Check relations for missing FK indexes (--fix emits migration)
- *   turbine studio                — Launch local read-only web UI
+ *   turbine studio                : Launch local read-only web UI (--demo for a seeded sample DB)
  *   turbine mcp                   — Start read-only MCP server over JSON-RPC stdio
  *   turbine observe               — Launch metrics dashboard (requires TURBINE_OBSERVE_URL)
  *
@@ -148,6 +148,9 @@ export function parseArgs(argv = process.argv.slice(2)) {
             case '--show-pii':
                 result.showPii = true;
                 break;
+            case '--demo':
+                result.demo = true;
+                break;
             default:
                 if (!arg.startsWith('-')) {
                     result.positional.push(arg);
@@ -1461,7 +1464,10 @@ export function isLoopbackHost(host) {
 // ---------------------------------------------------------------------------
 async function cmdStudio(args, config) {
     banner();
-    const url = requireUrl(config);
+    const demo = args.demo === true;
+    // Demo mode is self-contained (seeded in-memory database), so it never needs
+    // a DATABASE_URL. The placeholder is only used for display.
+    const url = demo ? 'demo://in-memory' : requireUrl(config);
     const port = args.port ?? 4983;
     const host = args.host ?? '127.0.0.1';
     const openBrowser = !args.noOpen;
@@ -1484,7 +1490,7 @@ async function cmdStudio(args, config) {
         console.log(warn(`Studio is binding to ${yellow(host)} — this is NOT loopback. ` +
             `Anyone on your network who can reach this port + guess the session token can read your database.`));
     }
-    const spinner = new Spinner('Introspecting database').start();
+    const spinner = new Spinner(demo ? 'Seeding demo dataset' : 'Introspecting database').start();
     let studio;
     try {
         studio = await startStudio({
@@ -1495,39 +1501,60 @@ async function cmdStudio(args, config) {
             openBrowser,
             include: config.include.length ? config.include : undefined,
             exclude: config.exclude.length ? config.exclude : undefined,
+            // Demo boots read-only + PII redacted; the flags are ignored in demo mode
+            // (the in-UI switcher controls modes live).
             write: args.write === true,
             showPii: args.showPii === true,
+            demo,
         });
-        spinner.succeed(`Studio is running`);
+        spinner.succeed(demo ? 'Demo Studio is running' : 'Studio is running');
     }
     catch (err) {
         spinner.fail(`Failed to start Studio: ${err instanceof Error ? err.message : String(err)}`);
         process.exit(1);
     }
-    // Loud startup warnings for the opt-in modes that widen Studio's surface.
-    if (args.write) {
+    if (demo) {
+        newline();
+        console.log(box([
+            `${bold('Turbine Studio')}  ${dim('DEMO MODE (seeded in-memory sample database)')}`,
+            '',
+            `  ${cyan('URL:')}    ${bold(studio.url)}`,
+            `  ${cyan('Data:')}   seeded sample dataset (users, posts, comments, orgs)`,
+            `  ${cyan('Modes:')}  switch Read-only / Show PII / Write live from inside the UI`,
+            '',
+            dim('Nothing you do here is saved anywhere. The database lives only in'),
+            dim('memory: every launch starts fresh and restarts reset all edits.'),
+            dim('Open the URL above (it carries a one-time session token).'),
+            dim('Press Ctrl+C to stop.'),
+        ].join('\n'), { title: bold(cyan('Studio · demo')), padding: 1 }));
         newline();
-        console.log(warn('WRITE MODE is ON. Studio can update, insert, and delete single rows in ' +
-            `${redactUrl(url)}. Every change is committed directly to your database.`));
     }
-    if (args.showPii) {
+    else {
+        // Loud startup warnings for the opt-in modes that widen Studio's surface.
+        if (args.write) {
+            newline();
+            console.log(warn('WRITE MODE is ON. Studio can update, insert, and delete single rows in ' +
+                `${redactUrl(url)}. Every change is committed directly to your database.`));
+        }
+        if (args.showPii) {
+            newline();
+            console.log(warn('--show-pii is ON. PII-tagged column values are shown UNREDACTED in Studio.'));
+        }
+        newline();
+        console.log(box([
+            `${bold('Turbine Studio')}  ${dim(args.write ? 'local UI (WRITE MODE)' : 'local read-only UI')}`,
+            '',
+            `  ${cyan('URL:')}    ${bold(studio.url)}`,
+            `  ${cyan('Schema:')} ${config.schema}`,
+            `  ${cyan('DB:')}     ${redactUrl(url)}`,
+            `  ${cyan('Mode:')}   ${args.write ? red('read-write (single-row)') : 'read-only'}`,
+            '',
+            dim('Open the URL above in your browser. It includes a one-time session'),
+            dim('token that gets set as an HttpOnly cookie on first load.'),
+            dim('Press Ctrl+C to stop.'),
+        ].join('\n'), { title: bold(cyan('Studio')), padding: 1 }));
         newline();
-        console.log(warn('--show-pii is ON. PII-tagged column values are shown UNREDACTED in Studio.'));
     }
-    newline();
-    console.log(box([
-        `${bold('Turbine Studio')}  ${dim(args.write ? 'local UI (WRITE MODE)' : 'local read-only UI')}`,
-        '',
-        `  ${cyan('URL:')}    ${bold(studio.url)}`,
-        `  ${cyan('Schema:')} ${config.schema}`,
-        `  ${cyan('DB:')}     ${redactUrl(url)}`,
-        `  ${cyan('Mode:')}   ${args.write ? red('read-write (single-row)') : 'read-only'}`,
-        '',
-        dim('Open the URL above in your browser. It includes a one-time session'),
-        dim('token that gets set as an HttpOnly cookie on first load.'),
-        dim('Press Ctrl+C to stop.'),
-    ].join('\n'), { title: bold(cyan('Studio')), padding: 1 }));
-    newline();
     // Wait forever until SIGINT/SIGTERM, then dispose cleanly.
     await new Promise((resolve) => {
         const shutdown = async () => {
@@ -1808,7 +1835,7 @@ function showHelp() {
     console.log(`    ${cyan('seed')}               Run seed file`);
     console.log(`    ${cyan('status')} ${dim('| info')}      Show schema summary`);
     console.log(`    ${cyan('doctor')}             Check relations for missing FK indexes ${dim('(--fix emits migration)')}`);
-    console.log(`    ${cyan('studio')}             Launch local read-only web UI ${dim('(--write opts in to single-row writes)')}`);
+    console.log(`    ${cyan('studio')}             Launch local read-only web UI ${dim('(--write for writes, --demo for a sample DB)')}`);
     console.log(`    ${cyan('mcp')}                Start read-only MCP server over stdio`);
     console.log(`    ${cyan('observe')}            Launch metrics dashboard ${dim('(requires TURBINE_OBSERVE_URL)')}`);
     newline();
@@ -1834,6 +1861,7 @@ function showHelp() {
     console.log(`    ${cyan('--allow-remote')}       Allow non-loopback --host ${dim('(refused without this flag)')}`);
     console.log(`    ${cyan('--write')}              Studio: enable single-row update/insert/delete ${dim('(read-only by default)')}`);
     console.log(`    ${cyan('--show-pii')}           Studio: show PII-tagged values unredacted ${dim('(redacted by default)')}`);
+    console.log(`    ${cyan('--demo')}               Studio: launch with a seeded in-memory sample database ${dim('(no DATABASE_URL needed; nothing is saved)')}`);
     newline();
     console.log(`  ${bold('Config file:')}`);
     console.log(`    ${dim('Create')} ${cyan('turbine.config.ts')} ${dim('with')} ${cyan('npx turbine init')}`);

package/dist/cli/studio-demo.d.ts

@@ -0,0 +1,43 @@
+/**
+ * turbine-orm CLI: Studio demo mode (`turbine studio --demo`)
+ *
+ * Boots Studio with NO database and NO DATABASE_URL: a baked-in, seeded sample
+ * dataset served from an in-memory engine. It is the "feel the product in 10
+ * seconds" experience: read mode, PII redaction, and the single-row write flow,
+ * all safely fake.
+ *
+ * The store is backed by Turbine's OWN SQLite engine over `node:sqlite`'s
+ * `:memory:` database (a built-in on Node >= 22.5, zero new dependency). Because
+ * `:memory:` is per-handle, the store dies with the process and every launch
+ * starts pristine: writes genuinely apply (edits stick, a refresh shows them)
+ * but nothing is ever persisted anywhere.
+ *
+ * This module lives under `src/cli/` (coverage-excluded, never imported by
+ * library code) and reuses `SqlitePool` + `sqliteDialect` from `../sqlite.js`;
+ * it never writes its own SQL evaluator.
+ */
+import type { PgCompatPool } from '../client.js';
+import type { Dialect } from '../dialect.js';
+import type { SchemaMetadata } from '../schema.js';
+/**
+ * The seeded sample schema. Four tables with realistic relations; `email` and
+ * `phone` are tagged `pii` so Studio's redaction path is exercised out of the
+ * box.
+ */
+export declare const DEMO_SCHEMA: SchemaMetadata;
+export interface DemoContext {
+    /** In-memory SQLite pool (pg-compatible) backing the demo store. */
+    pool: PgCompatPool;
+    /** The seeded sample schema metadata. */
+    metadata: SchemaMetadata;
+    /** The SQLite dialect the Studio handlers compile against in demo mode. */
+    dialect: Dialect;
+}
+/**
+ * Open a fresh, seeded in-memory demo store and return the pool + metadata +
+ * dialect Studio needs. Each call yields an independent, pristine database
+ * (`:memory:` is per-handle), so demo launches never share state.
+ *
+ * @throws Error on Node < 22.5 (no built-in `node:sqlite`).
+ */
+export declare function createDemoContext(): DemoContext;