# 🚀 Data Forge Release Notes ## [v1.4.1] - 2026-03-10 ### 🛡️ Enhanced AI Security - **Runtime Decryption**: AI API keys are now decrypted only at the moment of use. They remain encrypted at rest using AES-GCM in `localStorage` and configuration files, preventing plain-text exposure. - **Unified Secure Handling**: Integrated secure decryption logic across all AI-driven features: - **AICopilot**: Instant decryption for schema-aware SQL generation. - **SQL Fixer**: Secure key handling during multi-step error analysis. - **Performance Advisor**: Decrypted access for execution plan optimization. - **Plan Explainer**: Safe API key usage for human-readable plan breakdowns. ### 💅 AI Copilot UI Overhaul - **Responsive Geometry**: The AI overlay now uses flexible widths (`w-[95%]`) and max-height constraints to fit perfectly within the SQL Editor on screens of all sizes. - **Scrollable Intelligence**: Added a dedicated scrollable area for long AI responses (`overflow-y-auto`) while pinning action buttons (Execute/Insert) to the bottom. - **Layout Refinement**: Improved the spacing and readability of safety warnings and generated SQL previews. --- ### 🧠 Intelligent Querying & Filtering - **Smart Filter Suggestions**: Replaced the standard filter input with a context-aware **Intelligent Filter**. - **Column Autocomplete**: Automatically recognizes and suggests columns from the active table as you type. - **SQL Command Palette**: Real-time suggestions for SQL keywords (`AND`, `OR`, `LIKE`, `IN`, `IS NULL`) and operators. - **Productivity Boost**: Smart cursor handling and keyboard navigation (Arrows + Enter/Tab) for rapid filter building. ### 🍱 Branding & Identity - **New App Icon**: Updated the main landing page to feature the official **Data Forge** high-resolution icon, replacing the generic database symbol. - **Visual Refinement**: Polished the feedback animations for table filtering and empty states. ### 🛠 Stability & Enhancements - **Metadata Resilience**: Improved Cross-database schema intelligence for faster suggestion loading in the SQL Editor. --- ## [v1.3.0] - 2026-03-09 ### 🖥️ Desktop & Electron Stability - **MSSQL Update Fix**: Resolved a critical issue where `rowsAffected` return values caused crashes in the Electron environment. - **Smart Table Resolution**: MSSQL update operations now use fully qualified 3-part names (`[database].[schema].[table]`). This prevents "Invalid object name" errors when executing updates across different database contexts. - **Execution Plan Repair**: Fixed a "Client-side exception" that occurred specifically in Electron when using the "Explain" feature for MySQL and PostgreSQL. ### 🎨 UI & Layout Optimization - **Ergonomic View Switcher**: Relocated the **Table / Chart / Execution Plan** toggle from the top-right floating corner to the **bottom pagination bar**. - **Header Visibility**: This layout change ensures that table headers are never blocked by UI overlays, maintaining full interactivity for sorting and filtering. - **Unified Controls**: The result mode switcher is now consistently available in the footer across all result views (Table, Chart, and Plan). --- ## [v1.2.1] - 2026-03-06 ### 🛡️ Security & Hardening - **Universal LocalStorage Encryption**: Implemented a unified encryption layer using Electron `safeStorage` for Desktop and **Web Crypto (AES-GCM)** for Web. - **Encrypted Sensitive Data**: SQL Query History, Bookmarks, and AI API Keys are now fully encrypted at rest. - **Automatic Security Migration**: Plain-text data from older versions is automatically detected and migrated to the encrypted format upon first load. - **SQL Injection Prevention**: Hardened identifier sanitization for table/column names and whitelisted sort parameters. - **Improved Read-Only Enforcement**: destructive SQL command detection is now more robust by stripping all comment types before validation. ### ✨ UX & Workflow Improvements - **"Close All Tabs" Feature**: Added a dedicated button (with confirmation) at the left of the tab bar to quickly clear your workspace. - **Visual Query Builder Auto-Execute**: Generated SQL commands now automatically run when clicking "Execute", removing the need for a second click in the query tab. - **Premium Empty States**: Redesigned the "No Data" state in tables with modern icons, glowing effects, and clearer secondary guidance. - **Smart Reset Controls**: The "Reset to Page 1" button now only appears when necessary (e.g., when not on the first page). ### 🐛 Bug Fixes - Fixed an issue where the generated query from the Visual Query Builder required manual execution. - Resolved identifier escaping issues for PostgreSQL and MSSQL during data updates. - Improved URL validation for IPC window handlers. - **Whitelist Ordering**: The `orderBy` and `orderDir` parameters are now strictly sanitized to prevent identifier-based SQL injection. - **Quoting Logic**: Refined dialect-aware quoting (`[]` for MSSQL, `""` for Postgres, ` `` ` for MySQL) to ensure structural integrity during query generation. - **Enhanced Read-Only Mode**: The safety engine now strips **all SQL comments** (line and block styles) before validation. This prevents bypass attempts that use commented-out destructive commands. - **IPC URL Validation**: Restricted the `window:open` handler to only allow internal application routes, preventing unauthorized external navigation from the renderer. #### 🐞 Stability Fixes - **Async Connection Lifecycle**: Updated the connection workflow to be fully asynchronous, resolving race conditions during session restoration. - **Crypto Fallbacks**: Added graceful degradation for Linux environments where native secret storage might be unavailable. --- ## [v1.2.0] - 2026-03-06 ### Safety, Intelligence & Compliance #### 🛡️ Production Safety & Environment Management - **Environment Color Coding**: Assign a color label (Red/Orange/Green/Purple) to each database connection. The color is displayed as a 4px bar under the header, as a side-bar accent in the Sidebar footer dot, and as color-coded connection cards on the dashboard. - **Read-Only Mode**: New toggle in connection settings enforces `SELECT`-only policy for a connection. Destructive SQL (`UPDATE`, `DELETE`, `INSERT`, `DROP`, `ALTER`, `TRUNCATE`, `EXEC`, etc.) is blocked at the backend API with HTTP 403 — immune to SQL comment bypass attempts. - **Safety Banner & Badge**: A persistent red banner beneath the header and a `Read-Only` badge in the toolbar appear whenever a read-only connection is active. - **Connection Card Indicators**: History cards now display environment color borders and a 🛡️ Shield badge for read-only connections. #### 💅 Advanced SQL Linter & Formatter - **Real-Time SQL Linter**: 10 lint rules fire automatically as you type (debounced 600ms). Rules cover: `SELECT *` (L001), `UPDATE/DELETE` without `WHERE` (L002/L003, Error level), leading-wildcard `LIKE` (L004), non-sargable `WHERE` functions (L005), `!=` vs `<>` style (L007), missing aggregate aliases (L008), `ORDER BY` without `TOP/LIMIT` (L009), and `WITH (NOLOCK)` dirty-read risk for MSSQL (L010). - **Collapsible Lint Panel**: Appears below the SQL editor, shows badge counts by severity (Error/Warning/Info). Click any issue to expand its fix suggestion. Click the code badge to jump to the exact line/column. - **SQL Formatter**: `Cmd+Shift+F` keyboard shortcut + toolbar button. Uppercases all SQL keywords, normalizes indentation (4-space), and structures clauses on new lines. #### 🕵️ Data Masking (Privacy & Compliance) - **Auto-Detection**: 30+ regex patterns automatically identify sensitive column names: password, email, phone, SSN, national_id, credit_card, cvv, iban, salary, token, api_key, address, dob, otp, and more. - **Smart Contextual Masks**: Email → `jo•••@domain.com`, Phone → `•••-•••-5678`, Credit Card → `•••• •••• •••• 1234`, others → `P••••••d`. - **Masking ON by Default**: Table views start with sensitive data protected. A 🛡️ shield icon appears in masked column headers. - **Per-Table Toggle**: "Masked (N)" button in the DataTable footer toggles masking for the entire result set. Toggling off clears all individual cell reveals too. - **Click-to-Reveal**: Single click on any masked cell reveals just that cell — global masking remains in effect. #### 🗑️ Bulk Row Deletion - **Checkbox Selection**: Per-row checkboxes + "Select All" in the table header. - **Drop Rows Button**: Appears when rows are selected; generates dialect-aware `DELETE` SQL with smart PK detection. - **Type-Safe Deletion**: Handles ISO date strings, booleans, and NULLs correctly for MSSQL, PostgreSQL, MySQL, and MariaDB. --- ## [v1.1.1] - 2026-03-05 ### High-Performance Styling & Documentation - **Premium Theme System**: Fully integrated **Light Mode** and **Dark Mode** toggle. - **Auto-Theme Detection**: Persistent theme selection via `localStorage` with flicker-free loading scripts. - **Theme Parity**: Monaco SQL Editor now deep-links with the application theme (`vs-dark`/`light`). - **Default Theme Change**: **Light Mode** is now the default theme for a cleaner initial experience. - **Documentation Center**: Launched the built-in `/documents` portal with comprehensive guides for users and developers. - **Version Tracking**: Unified versioning across the UI, Documentation, and Package metadata. --- ## [v1.1.0] - 2026-03-05 ### Smart Updates & Dialect Parity - **Cross-Dialect Update Logic**: Refined `UPDATE` query generation for MSSQL, MySQL, and PostgreSQL. - **Affected Rows Precision**: Improved `rowsAffected` and `rowCount` detection logic across different database drivers. - **Smart Targeting**: Inline editing now prioritizes `id`, `uuid`, or `pk` columns for safer `WHERE` clause generation. - **Redundant Naming Fix**: Resolved the `"db.db.table"` naming conflict in MariaDB update statements. - **MSSQL Crash Fix**: Resolved `"Cannot read properties of undefined (reading 'rowsAffected')"` for SQL Server. - **Defensive Error Handling**: Non-destructive alerts when attempting updates on views or query results with non-identifiable tables. --- ## [v1.0.0] - 2026-03-05 ### The Official Launch - **Official Product Release** - **The Designer Suite**: Introduced Table, View, Procedure, and Visual Query designers. - **AI Forge**: AI-powered code completion, performance advisor, and SQL fixer. - **Enterprise Utilities**: Schema comparison, Import Wizard, and Server Monitor. - **Obsidian-Glass Aesthetic**: Premium dark theme (v1.0.0 default). - **Native IPC Core**: Production-ready stability via Electron. --- *Built with ❤️ for Database Engineers — THREE MAN DEV, Bangkok 2026*