Changelog.
Every release of the agent, the CLI, the MCP server and the plugins. Agents update themselves.
- Your weekly Pulse on a server without an account
- Standalone: everything on a server on its own
- Rewind the whole database in place on a server on its own
- Pulse with history on a server on its own
- PostgreSQL in Docker with no account
- A second copy on a server on its own: sudo rowsafe secondcopy add
- Prometheus metrics on a server on its own
- Guard on a server on its own: full-copy previews and masked copies
- Logs on a server on its own: rowsafe logs, logs forward
- Security check and fixes on a server on its own
- A server without an account, from another computer over SSH
- Files and Docker volumes on a server running Rowsafe on its own
- Major PostgreSQL upgrades, security updates and reboots on a server on its own
- MySQL and MariaDB on a server on its own
- rowsafe pulse mongodb://: MongoDB without an account
- MongoDB on a server on its own
- Redis and Valkey on a server on its own
- SQLite on a server on its own
- ClickHouse on a server on its own
- OpenSearch, Qdrant and Meilisearch on a server on its own
- A standby on a second server, without an account
- README: everything a server does on its own
- Alerts on a server without an account (Slack, Discord, ntfy, webhook)
- MCP: get_agent_action / list_agent_actions; publish to the MCP Registry on each release
- Codex plugin: OpenAI directory package and make openai-plugin-zip
- CLI: more alert channels, a server's own files, scheduled restarts
- Installer: no account by default; CLI tips
- Rowsafe without an account: the agent runs its own control plane
- No account: work through connection poolers (PgBouncer, Supavisor, Neon)
- CLI: opt-in anonymous usage counts (rowsafe telemetry)
- CLI: save a database once, use it by name (no account)
- No account: rowsafe schema and rowsafe explain, for AI coding agents
- CLI for AI agents: Windows builds, npm package, rowsafe init writes AGENTS.md
- Log in later: sudo rowsafe login connects a server without an account
- Windows: the CLI builds again
- Guard without an account: preview, the guard hook and check_migration
- CLI: predictable for AI agents (--json everywhere, exit codes, no prompts without a terminal, errors with the next step)
- Launch: demo GIF in the README, no account leads with the installer, launch drafts
- Rowsafe without an account: MySQL and MariaDB (rowsafe pulse mysql://...)
- Bump github.com/pganalyze/pg_query_go/v6 from 6.2.2 to 6.2.5 in the go group
- Agent: drill copies are removed even while a stopping restore still writes
- New servers: query statistics on, security updates installed at setup
- PgBouncer on public addresses takes encrypted connections only
- Agent: a pair's standby can take its primary's restart-only settings
- **One click restore:** restore a copy of the database at any second next to production, compare it with production, and **bring back deleted or changed rows**. Or **rewind the whole database in place**, with an undo for 7 days.
- **Find the moment:** find when rows were deleted or changed, then restore to just before it.
- **Every change within about 60 seconds** reaches your storage (was about 5 minutes).
- **Second backup copy** in another bucket or provider, and what your storage costs each month.
- **Files and uploads** backed up next to the database, and restored with it (only the folders you choose at install).
- **Fork** a database to another server, at any time in the past, optionally masked.
- Unchanged, and now alternates between your two copies when you have a second one.
- **Apply fix** on findings: clean up tables, drop unused indexes, end stuck sessions, create indexes, move sequences forward, and more. Destructive fixes save a Mark first.
- **Failed tasks explained** in plain words, with a fix button (for example storage keys, a full bucket folder, the wrong region, a full disk).
- **Tuning:** the settings that matter, explained, and "Tune for this server".
- **Logs** with private values removed on your server, and forwarding to Datadog, Better Stack, Papertrail, Loki, Elasticsearch, syslog or a webhook.
- **Recommendations:** schema, query and capacity advice, and **indexes proven faster on a copy** of your database before they are suggested.
- **Security check:** who can reach your database from the internet, passwords, TLS, with one-click fixes and an opt-in firewall rule.
- **Ask Rowsafe:** ask questions about your database in plain words (Pro and Business, or your own AI key).
- **Updates and upgrades:** PostgreSQL minor updates, server security updates, reboots, and major upgrades after a rehearsal on a copy, with undo.
- **Standby server** that stays in sync, with opt-in automatic failover, and **move to a new server** with a planned switchover.
- **Connection pooling** (PgBouncer), managed for you.
- **Databases and users** created from the dashboard; passwords are encrypted from your server to your browser.
- **Move in** from DigitalOcean, RDS, Supabase, Neon, Heroku, Render, Railway and others with near-zero downtime.
- **Docker:** restart and rewind with one click, through a small container-control sidecar.
- **Migration preview:** run a migration on a fresh copy first and see locks, rewrites and time: Safe, Careful or Dangerous.
- **Safe copies:** masked copies of your database for developers and AI agents; Rowsafe never makes or sees their passwords.
- **GitHub Action** that saves a Mark before each deploy.
- AI assistants can plan and read, save Marks, preview migrations and make masked copies. They can never change production.
- **MySQL 8.0 and 8.4, MariaDB 10.6, 10.11 and 11.4, MongoDB 6.0 to 8.0 (replica sets):** backups, restore to any second, Proof, Rewind copies and Pulse.
- A new home page: "Everything is safe", or the few things that need you, each with its button.
- Each database's pages grouped into Overview, Rewind, Proof, Pulse, Guard and Manage, each with one plain sentence about what it's for.
- Every root-level action is opt-in at install and limited to what root allowed. This release had independent security reviews of all root-level code; everything they found was fixed before release.
- Fixes and small improvements.
- Fixes and small improvements.
- Fixes and small improvements.