Charis 12869fcd9f studio: flip executeSql signature to SafeSqlFragment (7/7) (#46007) ...

## Summary

Final PR in the SafeSql migration stack. Stacked on top of #46006.

Tightens `executeSql`'s `sql` parameter from `string` to
`SafeSqlFragment`. Any future raw-string caller is now a compile error —
the SafeSql safety property becomes structural rather than
convention-based.

Also adapts the AI `execute_sql` tool to promote AI-generated SQL via
`acceptUntrustedSql(untrustedSql(sql))` inside the `execute` callback.
The tool's existing \`needsApproval: true\` gate ensures `execute` only
runs after the user has explicitly approved — that approval is the
gesture that promotes untrusted to safe.

## Test plan

- [x] `pnpm typecheck` passes
- [x] Grep for any remaining raw-string `executeSql` calls in
`apps/studio` returns nothing
- [x] Dev-server smoke: AI tool approval flow executes SQL

2026-05-15 20:07:54 +00:00

..

__templates

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

access-tokens

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

actions

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

ai

studio: ColumnTypeRef cascade + FK type comparison fixes (2/7) (#45903)

2026-05-14 15:12:08 -04:00

analytics

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

api-authorization

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

api-keys

feat: add edge function secret installation method (#45826)

2026-05-14 13:52:29 +05:30

api-settings

feat(studio): extend safe SQL model to policy editor and related interfaces (#45560)

2026-05-05 12:02:52 -04:00

auth

Skip invalidating auth config when toggling security email notification in template editor page (#44888)

2026-04-16 09:27:57 +10:00

aws-accounts

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

banned-ips

feat(studio): advisor signal items for banned IPs (#44372)

2026-04-20 10:33:56 +10:00

branches

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

cli

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

config

studio: convert more executeSql callers to SafeSqlFragment (#45645)

2026-05-06 12:21:48 -04:00

content

feat(studio): mark sql provenance for safety (#45336)

2026-05-04 13:08:06 -04:00

content-api

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

custom-domains

Support optionally remove custom domain addon when deleting custom domain after activated (#45880)

2026-05-15 16:41:58 +08:00

database

studio: SafeSql for reports, query performance, privileges (4/7) (#45998)

2026-05-15 14:50:38 -04:00

database-columns

studio: ColumnTypeRef cascade + FK type comparison fixes (2/7) (#45903)

2026-05-14 15:12:08 -04:00

database-cron-jobs

studio: convert more executeSql callers to SafeSqlFragment (#45645)

2026-05-06 12:21:48 -04:00

database-event-triggers

studio: convert more executeSql callers to SafeSqlFragment (#45645)

2026-05-06 12:21:48 -04:00

database-extensions

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

database-functions

studio,pg-meta: SafeSql for functions/policies/triggers (3/7) (#45990)

2026-05-15 12:08:20 -04:00

database-indexes

studio: convert more executeSql callers to SafeSqlFragment (#45645)

2026-05-06 12:21:48 -04:00

database-integrations/stripe

studio: convert more executeSql callers to SafeSqlFragment (#45645)

2026-05-06 12:21:48 -04:00

database-policies

studio,pg-meta: SafeSql for functions/policies/triggers (3/7) (#45990)

2026-05-15 12:08:20 -04:00

database-publications

Consolidate grid header actions in table editor into a single row (#45504)

2026-05-06 10:53:49 +08:00

database-queues

studio: convert more executeSql callers to SafeSqlFragment (#45645)

2026-05-06 12:21:48 -04:00

database-roles

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

database-triggers

chore(studio): drop @supabase/postgres-meta in favor of @supabase/pg-meta (#45844)

2026-05-13 16:07:10 +00:00

docs

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

documents

feat: iso27001 certificate (#44963)

2026-04-21 16:38:03 +12:00

edge-functions

feat(assistant): trace-level scorers + server-side tool execution with needsApproval (#45654)

2026-05-12 15:24:21 -04:00

entitlements

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

entity-types

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

enumerated-types

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

fdw

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

feedback

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

foreign-tables

chore(studio): drop @supabase/postgres-meta in favor of @supabase/pg-meta (#45844)

2026-05-13 16:07:10 +00:00

graphql

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

integrations

Refactor merge page into smaller components + add admonition if branch cannot be merged via dashboard (#45515)

2026-05-05 16:32:37 +08:00

invoices

feat: expose tax in upcoming invoice (#44732)

2026-04-15 12:34:28 -03:00

jit-db-access

chore(studio): clean up temporary access response typing (#45354)

2026-04-29 14:12:33 +08:00

jwt-signing-keys

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

lint

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

log-drains

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

logs

studio(logs): use safe sql escaping for new logs queries (#45887)

2026-05-14 10:29:50 -04:00

marketplace

feat: restore a physical backup by id only (#45631)

2026-05-06 21:31:11 +08:00

materialized-views

chore(studio): drop @supabase/postgres-meta in favor of @supabase/pg-meta (#45844)

2026-05-13 16:07:10 +00:00

misc

Feature Preview: RLS Tester (#45121)

2026-04-28 15:02:49 +08:00

network-restrictions

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

notifications

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

oauth

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

oauth-custom-providers

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

oauth-secrets

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

oauth-server-apps

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

open-api

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

organization-members

feat: add batch email org invites (#44832)

2026-04-23 18:02:08 +00:00

organizations

chore(billing): use new balance endpoint (#45481)

2026-05-07 16:44:01 -03:00

partners

feat: expose tax in upcoming invoice (#44732)

2026-04-15 12:34:28 -03:00

permissions

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

platform

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

platform-apps

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

prefetchers

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

privileges

studio: SafeSql for reports, query performance, privileges (4/7) (#45998)

2026-05-15 14:50:38 -04:00

profile

chore: remove format param from audit log query (#45466)

2026-05-04 16:24:44 -07:00

projects

[FE-3145] feat(studio): use data_api_revoke_default_privileges flag (#45683)

2026-05-08 13:24:25 +08:00

read-replicas

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

realtime

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

replication

feat(studio): add support for new ducklake destination in replication UI (#45370)

2026-04-29 21:42:05 +02:00

reports

studio: SafeSql for reports, query performance, privileges (4/7) (#45998)

2026-05-15 14:50:38 -04:00

scoped-access-tokens

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

secrets

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

service-status

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

sql

studio: flip executeSql signature to SafeSqlFragment (7/7) (#46007)

2026-05-15 20:07:54 +00:00

ssl-enforcement

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

sso

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

storage

studio: convert more executeSql callers to SafeSqlFragment (#45645)

2026-05-06 12:21:48 -04:00

stripe

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

subscriptions

chore(billing): use new balance endpoint (#45481)

2026-05-07 16:44:01 -03:00

support

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

table-editor

studio: ColumnTypeRef cascade + FK type comparison fixes (2/7) (#45903)

2026-05-14 15:12:08 -04:00

table-rows

feat(studio): mark sql provenance for safety (#45336)

2026-05-04 13:08:06 -04:00

tables

studio: ColumnTypeRef cascade + FK type comparison fixes (2/7) (#45903)

2026-05-14 15:12:08 -04:00

telemetry

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

third-party-auth

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

usage

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

utils

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

vault

feat(studio): mark sql provenance for safety (#45336)

2026-05-04 13:08:06 -04:00

views

chore(studio): drop @supabase/postgres-meta in favor of @supabase/pg-meta (#45844)

2026-05-13 16:07:10 +00:00

api.d.ts

chore: cleanup packages (#27770)

2024-07-04 14:48:10 +08:00

common.types.ts

fix(studio): handle large cron.job_run_details table gracefully (#41992)

2026-01-22 11:17:49 -05:00

error-patterns.test.ts

feat: improve db overload debugging UX (#43564)

2026-03-16 11:22:30 +01:00

error-patterns.ts

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00

fetchers.ts

[FE-3034] feat(studio): render multi-line SQL error HINTs (#45038)

2026-04-20 22:32:35 +08:00

handleError.test.ts

[FE-3034] feat(studio): render multi-line SQL error HINTs (#45038)

2026-04-20 22:32:35 +08:00

query-client.ts

cleanup: fix import order and prefixes for studio/data (#44501)

2026-04-03 09:15:57 +02:00