v1.4.02026-08-01SecurityAddedFixed
Type-aware discovery and reset
- SecurityServer reset no longer drops every non-system database on the host. It previously had no filter, so resetting a Frappe server could take unrelated databases with it. Reset is now plan-then-apply: you see exactly what will be destroyed, with provenance for how each item was identified, before anything runs.
- AddedA mandatory backup gate in front of any destructive reset, with the restore verified before the reset proceeds.
- AddedPer-type discovery for Frappe benches, Docker workloads and database engines, so reset understands what it is looking at rather than pattern-matching filenames.
- FixedThe reset confirmation modal described a narrower scope than the operation actually had.
v1.3.02026-07-28AddedImproved
Point-in-time recovery and verified restores
- AddedPoint-in-time recovery for managed Postgres, so the blast radius of a bad migration is seconds rather than the hours since the last nightly dump.
- AddedAutomated restore verification: backups are restored into a throwaway instance, checked, and destroyed. A backup is only marked verified after it has actually come back.
- ImprovedRetention is now tiered per database and expiry runs as its own audited job rather than as a side effect.
v1.2.02026-07-19Added
The AI Engine
- AddedBring-your-own-key AI across multiple providers. Your key, your bill, and no model provider is contacted unless you configure one.
- AddedProposal-gated execution. The engine cannot act directly — it writes a proposal, a human reviews the exact diff, and only on approval does the work enter the same job queue a human would have used.
- AddedRetrieval over your own fleet, so answers are about your servers, jobs and logs rather than generic documentation.
- AddedScheduled AI reports and a read-only assistant for asking questions without granting write access.
v1.1.02026-07-04AddedSecurityFixed
Per-project-type dashboards
- SecurityFixed a cross-tenant alert leak. Alerts had no tenant column, so an alert raised in one organization could be visible from another.
- FixedEight of the ten project types were silently rendering the Frappe dashboard. Each type now has its own.
- FixedClusters attached by kubeconfig were never monitored.
- AddedOne aggregated dashboard endpoint behind a provider registry, so a new project type ships with a dashboard instead of inheriting the wrong one.
v1.0.02026-06-20AddedSecurity
Self-hosted install
- AddedA published Docker Compose install: three secrets, one command, no source checkout and no registry login.
- SecurityThe backend now refuses to start on missing or published-default secrets, before it opens a network connection. Previously a default JWT signing key produced a warning and carried on, in a shipped image.
- AddedOne switch selects self-hosted or multi-tenant mode against a single shared schema.