X_SQL_LITERAL_UNSCANNED
Means
the rule read nothing, so no copy of the escape was checked
Typical cause
packages/db/src/sql.ts was not among the scanned files — moved, renamed, or the scan pointed at the wrong tree. Reported as a blind rule rather than as a clean answer, because "one module builds a SQL string literal" is what a correct tree says too
Fix
restore the file, or update OWNER in scripts/sql-literal-copies.ts if literal() moved — then bun run sql-literal-copies