diff --git a/frontend/internal-packages/db/package.json b/frontend/internal-packages/db/package.json
index 8d99ccc982..7e4a1f022b 100644
--- a/frontend/internal-packages/db/package.json
+++ b/frontend/internal-packages/db/package.json
@@ -16,7 +16,7 @@
     "@biomejs/biome": "2.2.4",
     "@liam-hq/configs": "workspace:*",
     "eslint": "9.36.0",
-    "supabase": "2.40.6",
+    "supabase": "2.45.4",
     "type-fest": "4.41.0",
     "typescript": "5.9.2",
     "vitest": "3.2.4"
diff --git a/frontend/internal-packages/db/supabase/database.types.ts b/frontend/internal-packages/db/supabase/database.types.ts
index 09bdc5b12d..57b6c99161 100644
--- a/frontend/internal-packages/db/supabase/database.types.ts
+++ b/frontend/internal-packages/db/supabase/database.types.ts
@@ -762,7 +762,7 @@ export type Database = {
       }
       l2_normalize: {
         Args: { '': string } | { '': unknown } | { '': unknown }
-        Returns: string
+        Returns: unknown
       }
       put_checkpoint: {
         Args: { p_blobs: Json; p_checkpoint: Json }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index eb98489baf..eb8783237d 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -494,8 +494,8 @@ importers:
         specifier: 9.36.0
         version: 9.36.0(jiti@2.6.0)
       supabase:
-        specifier: 2.40.6
-        version: 2.40.6
+        specifier: 2.45.4
+        version: 2.45.4
       type-fest:
         specifier: 4.41.0
         version: 4.41.0
@@ -10522,8 +10522,8 @@ packages:
       babel-plugin-macros:
         optional: true
 
-  supabase@2.40.6:
-    resolution: {integrity: sha512-62hDYEmYN9uTZ5TCtW6UM9MS7rBNLH+4eBrCt3zyTbsy8HizSuk1jY2tJjj/tx/SutIeUTU0gNGh7jeP5mBLdw==}
+  supabase@2.45.4:
+    resolution: {integrity: sha512-8vdSNARcY9c/Nj5oMSHGEHI4ayl8zY2znShUBx3m7BN5DyXHxuetNv552R9x1dRBgfHatwkohLW68fuu5TvOqw==}
     engines: {npm: '>=8'}
     hasBin: true
 
@@ -10579,8 +10579,8 @@ packages:
     resolution: {integrity: sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==}
     engines: {node: '>=10'}
 
-  tar@7.4.3:
-    resolution: {integrity: sha512-5S7Va8hKfV7W5U6g3aYxXmlPoZVAwUMy9AOKyF2fVuZa2UD3qZjg578OrLRt8PcNN1PleVaL/5/yYATNL0ICUw==}
+  tar@7.4.4:
+    resolution: {integrity: sha512-O1z7ajPkjTgEgmTGz0v9X4eqeEXTDREPTO77pVC1Nbs86feBU1Zhdg+edzavPmYW1olxkwsqA2v4uOw6E8LeDg==}
     engines: {node: '>=18'}
 
   tar@7.5.1:
@@ -22309,12 +22309,12 @@ snapshots:
     optionalDependencies:
       '@babel/core': 7.28.4
 
-  supabase@2.40.6:
+  supabase@2.45.4:
     dependencies:
       bin-links: 5.0.0
       https-proxy-agent: 7.0.6
       node-fetch: 3.3.2
-      tar: 7.4.3
+      tar: 7.4.4
     transitivePeerDependencies:
       - supports-color
 
@@ -22397,13 +22397,12 @@ snapshots:
       mkdirp: 1.0.4
       yallist: 4.0.0
 
-  tar@7.4.3:
+  tar@7.4.4:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0
       minipass: 7.1.2
       minizlib: 3.1.0
-      mkdirp: 3.0.1
       yallist: 5.0.0
 
   tar@7.5.1:
diff --git a/scripts/extract-supabase-anon-key.sh b/scripts/extract-supabase-anon-key.sh
index aa6d603908..80b9c62089 100755
--- a/scripts/extract-supabase-anon-key.sh
+++ b/scripts/extract-supabase-anon-key.sh
@@ -1,15 +1,15 @@
 #!/bin/bash
 
-# Execute the supabase status command and capture its output
-STATUS_OUTPUT=$(pnpm --filter @liam-hq/db exec supabase status)
+# Execute the supabase status command with env output format and capture its output
+STATUS_OUTPUT=$(pnpm --filter @liam-hq/db exec supabase status -o env)
 
-# Extract the first anon key from the output
-# Using a more precise grep pattern to match only the anon key line
-ANON_KEY_LINE=$(echo "$STATUS_OUTPUT" | grep -m 1 "anon key:")
+# Extract the anon key from the output
+# Using grep to match the ANON_KEY line
+ANON_KEY_LINE=$(echo "$STATUS_OUTPUT" | grep "^ANON_KEY=")
 
-# Clean up and extract just the key
-# Remove "anon key: " prefix
-ANON_KEY=$(echo "$ANON_KEY_LINE" | sed 's/.*anon key: \(.*\)/\1/' | tr -d ' ')
+# Clean up and extract just the key value
+# Remove ANON_KEY=" prefix and trailing "
+ANON_KEY=$(echo "$ANON_KEY_LINE" | sed 's/^ANON_KEY="\(.*\)"$/\1/')
 
 if [ -z "$ANON_KEY" ]; then
   echo "Failed to extract the anon key from Supabase status output"
diff --git a/scripts/extract-supabase-service-key.sh b/scripts/extract-supabase-service-key.sh
index 90d8be3404..3c1532029c 100755
--- a/scripts/extract-supabase-service-key.sh
+++ b/scripts/extract-supabase-service-key.sh
@@ -1,15 +1,15 @@
 #!/bin/bash
 
-# Execute the supabase status command and capture its output
-STATUS_OUTPUT=$(pnpm --filter @liam-hq/db exec supabase status)
+# Execute the supabase status command with env output format and capture its output
+STATUS_OUTPUT=$(pnpm --filter @liam-hq/db exec supabase status -o env)
 
 # Extract the service role key from the output
-# Using a precise grep pattern to match only the service role key line
-SERVICE_KEY_LINE=$(echo "$STATUS_OUTPUT" | grep -m 1 "service_role key:")
+# Using grep to match the SERVICE_ROLE_KEY line
+SERVICE_KEY_LINE=$(echo "$STATUS_OUTPUT" | grep "^SERVICE_ROLE_KEY=")
 
-# Clean up and extract just the key
-# Remove "service_role key: " prefix
-SERVICE_KEY=$(echo "$SERVICE_KEY_LINE" | sed 's/.*service_role key: \(.*\)/\1/' | tr -d ' ')
+# Clean up and extract just the key value
+# Remove SERVICE_ROLE_KEY=" prefix and trailing "
+SERVICE_KEY=$(echo "$SERVICE_KEY_LINE" | sed 's/^SERVICE_ROLE_KEY="\(.*\)"$/\1/')
 
 if [ -z "$SERVICE_KEY" ]; then
   echo "Failed to extract the service role key from Supabase status output"