Task: Add bound parameters to sqlgen
This page documents a task in the sqlgen follow-up story. It captures the goal, current status, acceptance, and any notes or results.
Goal
Adopt native sqlgen bound-parameter support so the project can stop using libpq escapes for SQL-injection safety.
Status
| Field | Value |
|---|---|
| State | BLOCKED |
| Parent story | sqlgen follow-up |
| Now | BLOCKED on upstream + vcpkg release. |
| Waiting on | vcpkg picking up the sqlgen release with the merged features. |
| Next | Resume once vcpkg has the release. |
| Last touched | 2026-02-20 |
Acceptance
- Bound parameters supported across sqlgen sessions + connections.
- Existing libpq escape sites migrated.
Plan
Captured during execution; cleared into the parent story on close.
Notes
Upstream getml/sqlgen#119 landed in main; waiting on a vcpkg release.
Result
Not landed; waiting on vcpkg release.