Read-only first
Agent-written SQL is treated as a proposal until dopedb parses, classifies, and enforces the safety policy.
Open-source local AI database client
dopedb is a local-first AI database client: talk to your database through an AI agent while credentials, write approvals, rollback previews, and audit logs stay inside a native macOS app.

Safety boundary
dopedb is built for the uncomfortable middle ground: powerful AI help, production database caution, and a human who still needs the final say.
Agent-written SQL is treated as a proposal until dopedb parses, classifies, and enforces the safety policy.
Connections and secrets live in the native app boundary instead of being handed directly to the spawned agent.
Queries, approvals, previews, and execution results are recorded so every database action has a trail.
Daily flow
codex -> proposed write
UPDATE customers
SET plan = 'pro'
WHERE id = 1842;
dopedb safety:
classification: write
rows estimated: 1
preview: rollback transaction ready
approval: requiredDownload
The first public channel is macOS through GitHub Releases. The app checks the signed release feed and enables updates from Settings when a newer version is available.
Until dopedb is notarized with an Apple Developer ID, approve it from System Settings, Privacy & Security, Open Anyway after confirming the file came from GitHub Releases.
Project docs