Function validateWriteSql

packages/core/src/scripts/db/exec.ts:178–202

(sql: string, index: number)

}

function validateWriteSql(sql: string, index: number): string {
  const normalized = normalizeUserSql(sql, index);
  const upper = normalized.toUpperCase();
  const allowed = ["INSERT", "UPDATE", "DELETE", "REPLACE"];
  const blocked = ["SELECT", "WITH", "EXPLAIN", "PRAGMA"];

  if (blocked.some((kw) => upper.startsWith(kw))) {
    fail(
      `Statement ${index}: use db-query for SELECT/read statements. db-exec is for writes only.`,
    );
  }
  if (upper.startsWith("CREATE") || upper.startsWith("ALTER")) {
    fail(
      `Statement ${index}: schema changes are not allowed through db-exec. Additive schema changes must go through reviewed migrations/startup code, not ad-hoc agent SQL.`,
    );
  }
  if (!allowed.some((kw) => upper.startsWith(kw))) {
    fail(
      `Statement ${index}: only ${allowed.join(", ")} statements are allowed. ` +
        `Dangerous operations like DROP, ATTACH, VACUUM, DETACH, CREATE, and ALTER are blocked.`,
    );
  }
  assertNoSensitiveFrameworkTables(normalized, "write");
  return normalized;
}

function convertQuestionMarksToPostgresParams(sql: string): string {
  let index = 0;