Greg Richardson 538f9e3e82 fix: prevent AI assistant from soliciting sensitive creds (#45692) ...

Adds prompt guardrails and evals to prevent the AI assistant from asking
users to share sensitive data (API keys, `.env` contents, etc.) and to
warn when credentials are shared.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Stronger safety behavior: assistant now refuses requests to share full
environment files, asks for variable names only, and directs users to
secure secret-management tooling.
* Immediate warning and guidance if credentials or other sensitive
values are pasted in chat, without repeating exposed secrets.
* **Behavior**
* Clarified evaluation rules so responses more consistently follow the
new safety guidance.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-05-07 13:22:19 -06:00

..

ai

fix: prevent AI assistant from soliciting sensitive creds (#45692)

2026-05-07 13:22:19 -06:00

api

feat(studio): mark sql provenance for safety (#45336)

2026-05-04 13:08:06 -04:00

constants

feat(studio): add timezone picker to user dropdown (#45517)

2026-05-06 14:52:36 +02:00

telemetry

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

validation

fix(studio): tighten webhook endpoint validation (#43892)

2026-03-19 11:43:02 +11:00

auth.tsx

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

base64url.ts

feat: jwt signing key dialog supports bring your own key (#36730)

2025-07-03 12:41:11 +02:00

breadcrumbs.test.ts

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

breadcrumbs.ts

feat(support form): attach dashboard logs (#39539)

2025-10-22 08:57:49 -04:00

cloudprovider-utils.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

cloudprovider-utils.ts

chore: Move the studio app to apps/studio (#18915)

2023-11-15 12:38:55 +01:00

data-api-types.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

datetime.test.ts

feat(studio): add timezone picker to user dropdown (#45517)

2026-05-06 14:52:36 +02:00

datetime.tsx

feat(studio): add timezone picker to user dropdown (#45517)

2026-05-06 14:52:36 +02:00

dayjs.ts

fix(studio): resolve outstanding Sentry issues (#44106)

2026-03-23 21:20:47 +00:00

error-reporting.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

error-reporting.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

formatSql.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

formatSql.ts

feat(studio): mark sql provenance for safety (#45336)

2026-05-04 13:08:06 -04:00

get-error-message.test.ts

chore(query-perf): better error handling and sentry tracking (#41278)

2025-12-15 20:39:09 +01:00

get-error-message.ts

chore(query-perf): better error handling and sentry tracking (#41278)

2025-12-15 20:39:09 +01:00

github.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

github.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

gotrue.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

gotrue.ts

Clean up barrel files part 4 (#40015)

2025-10-31 00:30:42 +08:00

helpers.test.ts

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

helpers.ts

fix(studio): add option to treat empty CSV cells as NULL on import (#43281)

2026-03-31 11:05:08 -04:00

http-status-codes.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

http-status-codes.ts

feat: add auth reports FE-1569 (#36555)

2025-06-27 11:10:25 +02:00

integration-utils.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

integration-utils.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

isNonNullable.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

isNonNullable.ts

Refactor Storage Create/Edit/Empty/Delete Modals to use Shadcn components (#37517)

2025-08-14 21:23:08 +02:00

keyboard.ts

feat(studio): add keyboard shortcuts to Database listing pages (#45467)

2026-05-04 07:08:35 -06:00

local-storage.test.ts

feat: add user preference to enable queue operations (#44366)

2026-04-06 13:52:53 +00:00

migration-utils.test.ts

fix(migrations): parse migration version timestamps as UTC SU-353303 (#44655)

2026-04-08 16:54:31 +02:00

migration-utils.ts

fix(migrations): parse migration version timestamps as UTC SU-353303 (#44655)

2026-04-08 16:54:31 +02:00

mime.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

mime.ts

feat: use TUS for file uploads in dashboard (#28030)

2024-07-17 13:27:00 +08:00

navigation.test.ts

chore: adds tests (#42653)

2026-02-11 09:50:11 +01:00

navigation.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

page-title.test.ts

feat(studio): page titles (core) (#43538)

2026-03-09 15:25:05 +07:00

page-title.ts

feat(studio): page titles (core) (#43538)

2026-03-09 15:25:05 +07:00

password-strength.test.ts

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

password-strength.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

pathname.utils.ts

feat: nested mobile nav menu (#43333)

2026-03-11 13:55:20 +01:00

pg-format.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

pg-format.ts

chore: Move the studio app to apps/studio (#18915)

2023-11-15 12:38:55 +01:00

pingPostgrest.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

pingPostgrest.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

posthog.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

posthog.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

profile.tsx

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

project-supabase-client.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

project-supabase-client.ts

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

project-transition-state.test.ts

feat(studio): add stuck pausing and restoring escalations (#43368)

2026-04-02 11:09:18 +11:00

project-transition-state.ts

feat(studio): add stuck pausing and restoring escalations (#43368)

2026-04-02 11:09:18 +11:00

project.tsx

Refactor restore to new project by breaking into smaller components (#30604)

2024-11-22 16:42:12 +08:00

restore-estimate.test.ts

feat(studio): add stuck pausing and restoring escalations (#43368)

2026-04-02 11:09:18 +11:00

restore-estimate.ts

feat(studio): add stuck pausing and restoring escalations (#43368)

2026-04-02 11:09:18 +11:00

ringBuffer.test.ts

feat(support form): attach dashboard logs (#39539)

2025-10-22 08:57:49 -04:00

ringBuffer.ts

feat(support form): attach dashboard logs (#39539)

2025-10-22 08:57:49 -04:00

role-impersonation.test.ts

feat(studio): mark sql provenance for safety (#45336)

2026-05-04 13:08:06 -04:00

role-impersonation.ts

feat(studio): mark sql provenance for safety (#45336)

2026-05-04 13:08:06 -04:00

sanitize.test.ts

feat(support form): attach dashboard logs (#39539)

2025-10-22 08:57:49 -04:00

sanitize.ts

feat(support form): attach dashboard logs (#39539)

2025-10-22 08:57:49 -04:00

semver.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

semver.ts

fix(studio): handle large cron.job_run_details table gracefully (#41992)

2026-01-22 11:17:49 -05:00

sql-event-parser.test.ts

[FE-3134] fix(studio): handle ALTER TABLE IF EXISTS in RLS detection (#45493)

2026-05-04 16:21:47 +08:00

sql-event-parser.ts

[FE-3134] fix(studio): handle ALTER TABLE IF EXISTS in RLS detection (#45493)

2026-05-04 16:21:47 +08:00

sql-identifier-quoting.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

sql-identifier-quoting.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

sql-parameters.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

sql-parameters.ts

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

telemetry.tsx

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

toast-errors.tsx

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

toaster.tsx

chore: Clean the ui package from next imports (#44278)

2026-03-30 10:58:37 +02:00

type-helpers.ts

Enable or disable Data API access per table (#41218)

2026-01-07 12:12:15 -05:00

upload.test.ts

chore(studio}: enforce import order, remove bare import specifiers (#44585)

2026-04-07 20:34:10 -04:00

upload.ts

Enforce noUnusedLocals and noUnusedParameters in tsconfig.json + fix all related issues (#45264)

2026-04-27 17:42:34 +08:00

void.test.ts

chore: adds tests (#42653)

2026-02-11 09:50:11 +01:00

void.ts

chore: Move the studio app to apps/studio (#18915)

2023-11-15 12:38:55 +01:00