turbine-orm 0.8.0 → 0.9.1

package/dist/query.js

@@ -1139,7 +1139,7 @@ export class QueryInterface {
             for (const [field, enabled] of Object.entries(args._sum)) {
                 if (enabled) {
                     const col = this.toColumn(field);
-                    selectExprs.push(`SUM(${quoteIdent(col)}) AS ${quoteIdent('_sum_' + col)}`);
+                    selectExprs.push(`SUM(${quoteIdent(col)}) AS ${quoteIdent(`_sum_${col}`)}`);
                 }
             }
         }
@@ -1148,7 +1148,7 @@ export class QueryInterface {
             for (const [field, enabled] of Object.entries(args._avg)) {
                 if (enabled) {
                     const col = this.toColumn(field);
-                    selectExprs.push(`AVG(${quoteIdent(col)})::float AS ${quoteIdent('_avg_' + col)}`);
+                    selectExprs.push(`AVG(${quoteIdent(col)})::float AS ${quoteIdent(`_avg_${col}`)}`);
                 }
             }
         }
@@ -1157,7 +1157,7 @@ export class QueryInterface {
             for (const [field, enabled] of Object.entries(args._min)) {
                 if (enabled) {
                     const col = this.toColumn(field);
-                    selectExprs.push(`MIN(${quoteIdent(col)}) AS ${quoteIdent('_min_' + col)}`);
+                    selectExprs.push(`MIN(${quoteIdent(col)}) AS ${quoteIdent(`_min_${col}`)}`);
                 }
             }
         }
@@ -1166,7 +1166,7 @@ export class QueryInterface {
             for (const [field, enabled] of Object.entries(args._max)) {
                 if (enabled) {
                     const col = this.toColumn(field);
-                    selectExprs.push(`MAX(${quoteIdent(col)}) AS ${quoteIdent('_max_' + col)}`);
+                    selectExprs.push(`MAX(${quoteIdent(col)}) AS ${quoteIdent(`_max_${col}`)}`);
                 }
             }
         }
@@ -1278,7 +1278,7 @@ export class QueryInterface {
             for (const [field, enabled] of Object.entries(args._count)) {
                 if (enabled) {
                     const col = this.toColumn(field);
-                    selectExprs.push(`COUNT(${quoteIdent(col)})::int AS ${quoteIdent('_count_' + col)}`);
+                    selectExprs.push(`COUNT(${quoteIdent(col)})::int AS ${quoteIdent(`_count_${col}`)}`);
                 }
             }
         }
@@ -1287,7 +1287,7 @@ export class QueryInterface {
             for (const [field, enabled] of Object.entries(args._sum)) {
                 if (enabled) {
                     const col = this.toColumn(field);
-                    selectExprs.push(`SUM(${quoteIdent(col)}) AS ${quoteIdent('_sum_' + col)}`);
+                    selectExprs.push(`SUM(${quoteIdent(col)}) AS ${quoteIdent(`_sum_${col}`)}`);
                 }
             }
         }
@@ -1296,7 +1296,7 @@ export class QueryInterface {
             for (const [field, enabled] of Object.entries(args._avg)) {
                 if (enabled) {
                     const col = this.toColumn(field);
-                    selectExprs.push(`AVG(${quoteIdent(col)})::float AS ${quoteIdent('_avg_' + col)}`);
+                    selectExprs.push(`AVG(${quoteIdent(col)})::float AS ${quoteIdent(`_avg_${col}`)}`);
                 }
             }
         }
@@ -1305,7 +1305,7 @@ export class QueryInterface {
             for (const [field, enabled] of Object.entries(args._min)) {
                 if (enabled) {
                     const col = this.toColumn(field);
-                    selectExprs.push(`MIN(${quoteIdent(col)}) AS ${quoteIdent('_min_' + col)}`);
+                    selectExprs.push(`MIN(${quoteIdent(col)}) AS ${quoteIdent(`_min_${col}`)}`);
                 }
             }
         }
@@ -1314,7 +1314,7 @@ export class QueryInterface {
             for (const [field, enabled] of Object.entries(args._max)) {
                 if (enabled) {
                     const col = this.toColumn(field);
-                    selectExprs.push(`MAX(${quoteIdent(col)}) AS ${quoteIdent('_max_' + col)}`);
+                    selectExprs.push(`MAX(${quoteIdent(col)}) AS ${quoteIdent(`_max_${col}`)}`);
                 }
             }
         }
@@ -1420,7 +1420,21 @@ export class QueryInterface {
         const mapped = this.tableMeta.columnMap[field];
         if (mapped)
             return mapped;
-        return camelToSnake(field);
+        // Fall back to camelToSnake ONLY if that snake_cased name also exists as a
+        // real column on the table. This preserves the convenience of writing
+        // `userId` when the schema exposes `user_id` under an unusual field name,
+        // but rejects arbitrary strings — closing the defense-in-depth gap for
+        // SQL injection and catching typos like `where: { emial: 'x' }` with a
+        // clear error instead of a cryptic Postgres "column does not exist".
+        const snake = camelToSnake(field);
+        if (this.tableMeta.reverseColumnMap?.[snake]) {
+            return snake;
+        }
+        if (this.tableMeta.allColumns?.includes(snake)) {
+            return snake;
+        }
+        throw new ValidationError(`[turbine] Unknown field "${field}" on table "${this.table}". ` +
+            `Known fields: ${Object.keys(this.tableMeta.columnMap).join(', ') || '(none)'}.`);
     }
     /** Convert camelCase field name to a double-quoted SQL identifier */
     toSqlColumn(field) {
@@ -1580,7 +1594,7 @@ export class QueryInterface {
     /**
      * Fingerprint a relation filter sub-where for some/every/none.
      */
-    fingerprintRelFilter(targetTable, subWhere) {
+    fingerprintRelFilter(_targetTable, subWhere) {
         const keys = Object.keys(subWhere)
             .filter((k) => subWhere[k] !== undefined)
             .sort();
@@ -1692,7 +1706,7 @@ export class QueryInterface {
         const meta = this.schema.tables[targetTable];
         if (!meta)
             return;
-        for (const [field, value] of Object.entries(subWhere)) {
+        for (const [_field, value] of Object.entries(subWhere)) {
             if (value === undefined)
                 continue;
             if (value === null)

package/dist/schema-builder.js

@@ -255,15 +255,35 @@ export class ColumnBuilder {
         return { ...this._config };
     }
 }
+/** Type guard: is `prop` a known nullary ColumnBuilder type method? */
+function isNullaryColumnType(prop) {
+    return (prop === 'serial' ||
+        prop === 'bigint' ||
+        prop === 'integer' ||
+        prop === 'smallint' ||
+        prop === 'text' ||
+        prop === 'boolean' ||
+        prop === 'timestamp' ||
+        prop === 'date' ||
+        prop === 'json' ||
+        prop === 'uuid' ||
+        prop === 'real' ||
+        prop === 'doublePrecision' ||
+        prop === 'numeric' ||
+        prop === 'bytea');
+}
 /** @deprecated Use defineSchema() with plain objects instead */
 export const column = new Proxy({}, {
     get(_target, prop) {
         if (prop === 'varchar')
             return (length) => new ColumnBuilder().varchar(length);
+        if (isNullaryColumnType(prop)) {
+            return () => {
+                const builder = new ColumnBuilder();
+                return builder[prop]();
+            };
+        }
         return () => {
-            const builder = new ColumnBuilder();
-            if (typeof builder[prop] === 'function')
-                return builder[prop].call(builder);
             throw new Error(`Unknown column type: ${prop}`);
         };
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "turbine-orm",
-  "version": "0.8.0",
+  "version": "0.9.1",
   "description": "Postgres-native TypeScript ORM — runs on Neon, Vercel Postgres, Cloudflare, Supabase. Streaming cursors, typed errors, single-query nested relations. 1 dependency, ~110KB",
   "type": "module",
   "exports": {
@@ -36,6 +36,7 @@
   ],
   "sideEffects": false,
   "scripts": {
+    "prebuild": "node scripts/build-studio-ui.mjs",
     "build": "tsc && tsc --project tsconfig.cjs.json && echo '{\"type\":\"commonjs\"}' > dist/cjs/package.json",
     "dev": "tsc --watch",
     "typecheck": "tsc --noEmit --project tsconfig.test.json",
@@ -43,13 +44,16 @@
     "status": "tsx src/cli/index.ts status",
     "examples": "tsx examples/examples.ts",
     "test": "tsx --test src/test/*.test.ts",
-    "test:unit": "tsx --test src/test/schema-builder.test.ts src/test/errors.test.ts src/test/stress.test.ts src/test/migrate.test.ts src/test/update-operators.test.ts src/test/empty-where-guard.test.ts src/test/cli.test.ts src/test/serverless.test.ts src/test/pipeline.test.ts src/test/pipeline-submittable.test.ts src/test/with-inference.test.ts src/test/operator-validation.test.ts src/test/unlimited-warning.test.ts src/test/generate-relations.test.ts src/test/stream-and-parse.test.ts src/test/sql-cache.test.ts",
-    "test:coverage": "c8 tsx --test src/test/schema-builder.test.ts src/test/errors.test.ts src/test/stress.test.ts src/test/migrate.test.ts src/test/update-operators.test.ts src/test/empty-where-guard.test.ts src/test/cli.test.ts src/test/serverless.test.ts src/test/pipeline.test.ts src/test/pipeline-submittable.test.ts src/test/with-inference.test.ts src/test/operator-validation.test.ts src/test/unlimited-warning.test.ts src/test/generate-relations.test.ts src/test/stream-and-parse.test.ts src/test/sql-cache.test.ts",
+    "test:unit": "tsx --test src/test/schema-builder.test.ts src/test/errors.test.ts src/test/stress.test.ts src/test/migrate.test.ts src/test/update-operators.test.ts src/test/empty-where-guard.test.ts src/test/cli.test.ts src/test/serverless.test.ts src/test/pipeline.test.ts src/test/pipeline-submittable.test.ts src/test/with-inference.test.ts src/test/operator-validation.test.ts src/test/unlimited-warning.test.ts src/test/generate-relations.test.ts src/test/stream-and-parse.test.ts src/test/sql-cache.test.ts src/test/studio.test.ts src/test/sql-injection.test.ts src/test/cli-flags.test.ts",
+    "test:coverage": "c8 tsx --test src/test/schema-builder.test.ts src/test/errors.test.ts src/test/stress.test.ts src/test/migrate.test.ts src/test/update-operators.test.ts src/test/empty-where-guard.test.ts src/test/cli.test.ts src/test/serverless.test.ts src/test/pipeline.test.ts src/test/pipeline-submittable.test.ts src/test/with-inference.test.ts src/test/operator-validation.test.ts src/test/unlimited-warning.test.ts src/test/generate-relations.test.ts src/test/stream-and-parse.test.ts src/test/sql-cache.test.ts src/test/studio.test.ts src/test/sql-injection.test.ts src/test/cli-flags.test.ts",
     "lint": "biome check src/",
     "lint:fix": "biome check --write src/",
     "format": "biome format --write src/",
     "prepublishOnly": "npm run build && npm run typecheck && npm run lint && npm run test:unit",
-    "prepare": "husky"
+    "prepare": "husky",
+    "site:dev": "cd site && npm run dev",
+    "site:build": "cd site && npm run build",
+    "site:deploy": "cd site && vercel --prod"
   },
   "engines": {
     "node": ">=18.0.0"