rowsafe

README

Rowsafe

Sleep at night. Rowsafe backs up the databases you already run, lets you restore to any second, and proves every week that your backups actually restore. This repository is the open-source part of Rowsafe: the agent that runs on your servers, the rowsafe CLI, the installer and the MCP server for AI agents.

Everything that touches your data is here, under Apache-2.0, so you can read exactly what runs on your machines.

Documentation: rowsafe.sh/docs · Status: PostgreSQL 13–18 on Linux servers and in Docker. MySQL, MariaDB, MongoDB and Redis are planned.

Get started

rowsafe login                                          # opens the dashboard to approve this machine
rowsafe hosts enroll-token                             # prints the install command for your server
curl -fsSL https://rowsafe.sh | sudo sh -s rse_…       # on the database server

The installer does the rest on the server: it installs the agent, sets up storage, finds PostgreSQL, shows you the plan and asks before turning on backups (and before restarting PostgreSQL, if that is needed). To set up from your workstation instead: rowsafe adopt app, then rowsafe apply app.

Rewind: continuous backups, restore to any second.

rowsafe status            # is everything protected?
rowsafe mark before-drop  # a named point (a Mark) you can restore to
rowsafe backups app       # backups and the recovery window

Proof: every week Rowsafe restores your latest backup into a scratch copy and checks it.

rowsafe proof app         # run the restore test now
rowsafe proofs app        # past results

Pulse: how your databases are doing.

rowsafe pulse             # a 0-100 score per database, with what to fix in plain language
rowsafe top app           # the queries that take the most time, and which got slower
rowsafe insights app      # largest tables, unused indexes, wasted space, vacuum

Guard: the safety net for AI agents. rowsafe mcp and the Claude Code plugin create a restore point before migrations and destructive SQL.

Full guide: Quickstart.

What's in this repository

Path	What it is
cmd/rowsafe-agent, internal/agent	The agent. Makes outbound HTTPS requests only and runs a fixed set of tasks: inspect, adopt, check, backup, restore test, restore point, and a PostgreSQL restart when you ask for one.
cmd/rowsafe, client	The CLI.
mcp, integrations/claude-code	Guard: rowsafe mcp, an MCP server for AI assistants, and a Claude Code plugin that creates a restore point before migrations.
collect	What the agent's monitoring reads: database and host metrics, locks, replication, query statistics and table insights.
protocol	The API types shared by the agent, the CLI and the Rowsafe service.
internal/pgbackrest, internal/pginspect	PostgreSQL backup and inspection.
scripts/install.sh	The installer served at https://rowsafe.sh.
release, cmd/rowsafe-release	Release signing and verification.

Safety by design

• Never restarts your database on its own. When a change needs a restart, you choose when: the installer asks, or you click Restart in the dashboard or run rowsafe restart. AI agents can't restart it.
• Plan before apply. You see every change before anything happens.
• Isolated restore tests that can't touch production or its backups.
• Signed, verifiable releases with automatic rollback of a bad update. See verifying releases.
• Your secrets stay on your server, and backups are encrypted before upload.
• Backups go easy on your server. Backups and restore tests run at low CPU and disk priority (nice, ionice), so PostgreSQL comes first. pgBackRest uses one process on servers with up to 4 CPUs and two on bigger ones (process-max), and compresses with zstd. Copying each change to your bucket (archive-push, run by PostgreSQL) is left at normal priority so it never falls behind.
• Monitoring is read-only and light. Short statement and lock timeouts on every query; heavier table checks run every 30 minutes, in the background, and back off when slow. ROWSAFE_COLLECT_QUERY_TEXT=false keeps query text on your server; ROWSAFE_MONITORING=false turns monitoring off.

Build from source

make build   # bin/rowsafe, bin/rowsafe-agent, bin/rowsafe-release
make test
make lint

Release builds are reproducible (make dist). Locally built agents run but never auto-update.

Contributing and security

Issues and pull requests are welcome; see CONTRIBUTING.md. Documentation lives in rowsafe/docs. Report vulnerabilities privately through GitHub security advisories (SECURITY.md).

License

Apache License 2.0. Copyright 2026 Adraa Labs.