Work / Developer tool · VS Code extension
Fleet DB Client
Every server and database in the fleet, one click away in VS Code. Production hosts physically can't be opened read-write by accident.
- Role
- Author
- Status
- v0.1.0 packaged
- Year
- 2026
- Link
- Private
1 clickserver → SSH, database → SQL
0database ports exposed
RO>enforced on production
The problem
Generic database clients don't know which host is production. One wrong tab and a hosting server with a dozen client databases is exposed to a stray UPDATE.
What I built
- A sidebar tree generated from the SSH config: click a server for a terminal, click a database for a SQL console, and the same inventory works from the command line.
- Hosts flagged read-only get SET SESSION TRANSACTION READ ONLY and --safe-updates, an RO> prompt, a red banner before the shell opens, and a lock on the tab.
- SSH-only access over Tailscale. No database port is ever opened or tunnelled across the public internet.
Stack
TypeScriptVS Code Extension APISSHMariaDB / MySQLTailscale