Last week I wrote about pgbrake, an MCP server that makes an agent's SQL writes undoable. People pointed out the obvious hole: agents don't only touch the database through SQL. They also run terminal commands, and prisma migrate reset --force wipes everything without a single SQL statement going through the MCP server.
pgbrake 0.2.0 adds a Claude Code PreToolUse hook for that. It watches Bash commands for migration tools doing destructive things: prisma migrate reset --force, drizzle-kit push --force, alembic downgrade base and similar. When it sees one, it takes a pg_dump snapshot first (if PGBRAKE_DSN is set), then stops and asks you.
pgbrake install-hook
That's the whole setup.
The hook is part of Pro, which is $29 one-time for the first 100 licenses, then $39. No subscription, 14-day refund, and the key is checked offline, so pgbrake never phones home. Pro also lifts the free tier's 20-change undo limit and adds pgbrake log --export csv|json.
The SQL side (undo, approvals, audit log) stays free and MIT.
What it doesn't do yet: Codex hooks, a policy file for custom rules, and online key revocation. If one of those would decide whether you'd use it, tell me which.
https://github.com/lexang/pgbrake
https://lexang.github.io/#pricing