Changelog

What changed in Sovaria, newest first. Each entry is dated by when the work landed in our code; the status page shows incidents and uptime.

Firestore-level queries, enterprise sign-in, point-in-time recovery

Documents gain OR filters, aggregations, collection groups and vector search. Auth gains SCIM and blocking hooks. Dedicated databases can be restored to any second.

  • DocumentsOR and AND filter groups, nested like Firestore's or() / and(), and count, sum and average aggregations computed on the server. Read more
  • DocumentsCollection-group queries across every subcollection with the same name, and live listeners on collection groups. Read more
  • DocumentsVector search on documents (findNearest) on pgvector, under the same rules as every other query. Read more
  • AuthSCIM 2.0 provisioning, so identity providers such as Okta and Microsoft Entra can create, update and remove app users. Read more
  • AuthBlocking hooks that run before a user is created or signs in, and can refuse or enrich the request. Read more
  • AuthAnonymous users are faster to create, and policies and SQL can tell them apart (auth.jwt()->>'is_anonymous'). Read more
  • AuthToken signing does less work per request, so sign-in and refresh are quicker under load.
  • DatabasePoint-in-time recovery for dedicated project databases: restore to a chosen moment, not only to a daily backup. Read more
  • DatabaseFaster SQL: repeated statements skip re-analysis, each project gets more pooled connections, and busy projects wait briefly for a slot instead of failing. Read more
  • RealtimeA faster connect path and message fan-out (each message is encoded once for all subscribers), with the measured numbers published. Read more
  • FunctionsNode.js 24, Go 1.27 and Bun 1.4 runtimes. A function that stops without a result now says why: a signal, a sandbox limit or its own error output. Read more
  • SecurityEvery engine has its own database and cache logins, platform images are signed in CI, and a security scan runs weekly. Read more
  • DocsReference pages for the Swift, Kotlin and Dart SDKs, eight framework quickstarts, and tutorials for chat, payments, RAG and migrating from Supabase or Firebase. Read more

Simulation 2.0 and Sovariq for Chrome

Simulations run sealed, so nothing they do leaves Sovaria. Sovariq can work in your own browser.

  • SimulationSealed runs: emails, webhooks, payments and other outbound calls made during a simulation are recorded but never sent. Read more
  • SimulationTopology, limits, integrations and security drills in one report, each finding marked as intended or not. Read more
  • AISovariq for Chrome: Sovariq reads the page you're on and, on paid plans, clicks, types and fills forms for you. It asks before anything irreversible. Read more
  • PlatformEvery service runs with memory, CPU and process limits, so one busy component can't starve the others.

Knowledge bases, a public status page and Sovariq credits

Build RAG into your app with knowledge bases and agents. Follow uptime on the status page.

  • AIKnowledge bases (RAG): add files, text and web pages, search them with citations, and give agents access. Each user only finds what they may read. Read more
  • AIAgents in your app keep conversation threads, and each project can choose its embedding model or bring its own key. Read more
  • AISovariq has five effort levels (low to ultra) and a visual mode that shows each step on the console's own pages. Read more
  • PlatformA public status page: every service checked each minute, with 90 days of uptime and incidents. Read more
  • AuthSliding-window rate limits on sign-in, sign-up, refresh, magic links, codes and password resets. Read more
  • DatabaseNew keys and timestamps fill themselves in (identity, gen_random_uuid(), now()), and PostGIS is available in new databases. Read more
  • SDKs and CLIsov import also moves Convex and any Postgres (Neon, RDS, Railway), and keeps Argon2, Lucia scrypt and Django passwords working. Read more
  • BillingAI use is counted in Sovariq credits, India is billed in fixed rupee prices, and add-ons start once they are paid for. Read more

Hosted MCP server

Connect Claude, ChatGPT, Cursor or VS Code to your projects with a sign-in instead of a pasted key.

  • AIA hosted MCP server with OAuth sign-in: AI assistants act as you, under your role and your project's rules, and you can see and disconnect each connection. Read more
  • AISovariq answers "where is…" questions with a link that opens the right console page, and uses far fewer tokens per request. Read more

Your own encryption keys

Enterprise projects can encrypt stored files with a key they control.

  • StorageBring your own encryption key (Enterprise): files are encrypted with a data key wrapped by your key, which you can rotate. Read more
  • DocumentsRules can match subcollections under every document with patterns such as users/*/orders. Read more

Abuse protection and receipts

CAPTCHA on sign-in pages, per-address abuse guards and proper payment receipts.

  • AuthTurnstile or hCaptcha on sign-in, magic-link and password-reset requests, and per-address abuse limits you set per project. Read more
  • FunctionsFunction bandwidth is metered with hard caps, and every process a run started is stopped when it ends. Read more
  • BillingPayment receipts with a GST breakdown. Read more

Project sign-in keys and auth helpers in SQL

App users get tokens signed with each project's own key, and SQL can read who is calling.

  • AuthApp-user tokens are signed with the project's own ES256 key, and auth.uid(), auth.role(), auth.jwt(), auth.email() and auth.has_role() work in every project database. Read more
  • DatabaseNew databases include pgvector and pg_graphql. Saved SQL queries can be private or shared with the team, and the SQL editor runs whole scripts in one transaction. Read more
  • AIProject agents built from your project's tools, with your own SQL and function tools. Read more

Want changes before they ship?

Teams in the early-access programme try new features first and talk directly with the people building them.

Join early access