siclaw 0.1.0 → 0.1.2

package/dist/gateway/cron/cron-service.d.ts

@@ -0,0 +1,49 @@
+/**
+ * CronService — In-process cron scheduler for Gateway
+ *
+ * Replaces the standalone cron process. Runs timers directly in the
+ * Gateway process and calls configRepo for DB access (no HTTP proxy).
+ * Job execution delegates to /api/internal/agent-prompt on localhost.
+ */
+import { CronScheduler, type CronJobRow } from "../../cron/cron-scheduler.js";
+import type { ConfigRepository } from "../db/repositories/config-repo.js";
+import type { NotificationRepository } from "../db/repositories/notification-repo.js";
+export type SendToUserFn = (userId: string, event: string, payload: Record<string, unknown>) => void;
+export declare class CronService {
+    readonly scheduler: CronScheduler;
+    /** Channel notification callback — set by gateway-main after construction */
+    onNotify?: (data: {
+        userId: string;
+        jobName: string;
+        result: string;
+        resultText: string;
+        error?: string;
+    }) => void;
+    private configRepo;
+    private notifRepo;
+    private sendToUser;
+    private gatewayPort;
+    private staleLockTimer;
+    private purgeTimer;
+    private sessionPurgeTimer;
+    constructor(opts: {
+        configRepo: ConfigRepository;
+        notifRepo: NotificationRepository;
+        sendToUser: SendToUserFn;
+        gatewayPort: number;
+    });
+    /** Load all active jobs and start background timers */
+    start(): Promise<void>;
+    /** Execute a single cron job */
+    private execute;
+    /** Record run history + push notification */
+    private recordResult;
+    /** Add or update a job in the scheduler */
+    addOrUpdate(job: CronJobRow): void;
+    /** Cancel a job from the scheduler */
+    cancel(jobId: string): void;
+    /** Stop all timers and clean up */
+    stop(): void;
+    private purgeNotifications;
+    private purgeSessions;
+}

package/dist/gateway/cron/cron-service.js

@@ -0,0 +1,259 @@
+/**
+ * CronService — In-process cron scheduler for Gateway
+ *
+ * Replaces the standalone cron process. Runs timers directly in the
+ * Gateway process and calls configRepo for DB access (no HTTP proxy).
+ * Job execution delegates to /api/internal/agent-prompt on localhost.
+ */
+import crypto from "node:crypto";
+import { CronScheduler } from "../../cron/cron-scheduler.js";
+const EXECUTION_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes
+const STALE_LOCK_CLEANUP_MS = 6 * 60 * 1000; // 6 min
+const PURGE_INTERVAL_MS = 24 * 60 * 60 * 1000; // 24 hours
+const NOTIFICATION_RETENTION_DAYS = 30;
+const SESSION_SOFT_DELETE_DAYS = 180;
+const SESSION_HARD_DELETE_DAYS = 30;
+const STATS_RETENTION_DAYS = 90;
+export class CronService {
+    scheduler;
+    /** Channel notification callback — set by gateway-main after construction */
+    onNotify;
+    configRepo;
+    notifRepo;
+    sendToUser;
+    gatewayPort;
+    staleLockTimer = null;
+    purgeTimer = null;
+    sessionPurgeTimer = null;
+    constructor(opts) {
+        this.configRepo = opts.configRepo;
+        this.notifRepo = opts.notifRepo;
+        this.sendToUser = opts.sendToUser;
+        this.gatewayPort = opts.gatewayPort;
+        this.scheduler = new CronScheduler((job) => this.execute(job));
+    }
+    /** Load all active jobs and start background timers */
+    async start() {
+        // Load all active jobs
+        const jobs = await this.configRepo.listAllActiveCronJobs();
+        for (const job of jobs) {
+            this.scheduler.addOrUpdate(job);
+        }
+        console.log(`[cron-service] Loaded ${jobs.length} active jobs`);
+        // Stale lock cleanup every 6 minutes
+        this.staleLockTimer = setInterval(async () => {
+            try {
+                await this.configRepo.clearStaleLocks(STALE_LOCK_CLEANUP_MS);
+            }
+            catch (err) {
+                console.warn("[cron-service] clearStaleLocks failed:", err instanceof Error ? err.message : err);
+            }
+        }, STALE_LOCK_CLEANUP_MS);
+        this.staleLockTimer.unref();
+        // Daily notification purge
+        this.purgeNotifications();
+        this.purgeTimer = setInterval(() => this.purgeNotifications(), PURGE_INTERVAL_MS);
+        this.purgeTimer.unref();
+        // Daily session purge
+        this.purgeSessions();
+        this.sessionPurgeTimer = setInterval(() => this.purgeSessions(), PURGE_INTERVAL_MS);
+        this.sessionPurgeTimer.unref();
+        console.log("[cron-service] Started");
+    }
+    /** Execute a single cron job */
+    async execute(job) {
+        // Re-validate from DB
+        const current = await this.configRepo.getCronJobById(job.id);
+        if (!current || current.status !== "active") {
+            console.log(`[cron-service] Job ${job.id} no longer active, skipping`);
+            return;
+        }
+        // Acquire execution lock
+        const executionId = crypto.randomUUID();
+        const locked = await this.configRepo.lockJobForExecution(job.id, executionId);
+        if (!locked) {
+            console.log(`[cron-service] Job ${job.id} already locked, skipping`);
+            return;
+        }
+        const workspaceId = current.workspaceId ?? undefined;
+        console.log(`[cron-service] Executing job ${job.id} (${job.name}) for user ${job.userId}${workspaceId ? ` ws=${workspaceId}` : ""}`);
+        try {
+            const sessionId = `cron-${job.id}-${Date.now()}`;
+            const prompt = buildCronPrompt(current);
+            const resp = await fetch(`http://localhost:${this.gatewayPort}/api/internal/agent-prompt`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    userId: current.userId,
+                    sessionId,
+                    text: prompt,
+                    timeoutMs: EXECUTION_TIMEOUT_MS,
+                    caller: "cron",
+                    workspaceId,
+                }),
+                signal: AbortSignal.timeout(EXECUTION_TIMEOUT_MS + 10_000),
+            });
+            const data = await resp.json();
+            if (!resp.ok || data.status !== "success") {
+                throw new Error(data.error || `agent-prompt returned status=${data.status} http=${resp.status}`);
+            }
+            const resultText = data.resultText || "";
+            // Record success
+            try {
+                await this.configRepo.updateCronJobRun(job.id, "success");
+            }
+            catch (e) {
+                console.warn(`[cron-service] updateCronJobRun failed for ${job.id}:`, e instanceof Error ? e.message : e);
+            }
+            console.log(`[cron-service] Job ${job.id} completed in ${data.durationMs}ms, resultText length=${resultText.length}`);
+            // Write run record + notification
+            await this.recordResult(job, "success", resultText, undefined, data.durationMs);
+        }
+        catch (err) {
+            console.error(`[cron-service] Job ${job.id} failed:`, err);
+            try {
+                await this.configRepo.updateCronJobRun(job.id, "failure");
+            }
+            catch (e) {
+                console.warn(`[cron-service] updateCronJobRun failed for ${job.id}:`, e instanceof Error ? e.message : e);
+            }
+            await this.recordResult(job, "failure", "", err instanceof Error ? err.message : String(err));
+        }
+        finally {
+            try {
+                await this.configRepo.unlockJob(job.id, executionId);
+            }
+            catch (err) {
+                console.warn(`[cron-service] Failed to unlock job ${job.id}:`, err instanceof Error ? err.message : err);
+            }
+        }
+    }
+    /** Record run history + push notification */
+    async recordResult(job, result, resultText, error, durationMs) {
+        // Persist run record
+        try {
+            await this.configRepo.insertCronJobRun({
+                jobId: job.id,
+                status: result,
+                resultText: resultText || undefined,
+                error,
+                durationMs,
+            });
+        }
+        catch (runErr) {
+            console.warn("[cron-service] Failed to insert cron run:", runErr instanceof Error ? runErr.message : runErr);
+        }
+        // Create notification
+        const notifType = result === "success" ? "cron_success" : "cron_failure";
+        const notifMessage = result === "success" ? resultText : (error || "Unknown error");
+        const notifId = await this.notifRepo.create({
+            userId: job.userId,
+            type: notifType,
+            title: job.name,
+            message: notifMessage,
+            relatedId: job.id,
+        });
+        // Push via WebSocket
+        this.sendToUser(job.userId, "notification", {
+            id: notifId,
+            type: notifType,
+            title: job.name,
+            message: notifMessage,
+            relatedId: job.id,
+            isRead: false,
+            createdAt: new Date().toISOString(),
+        });
+        // Channel notification callback
+        if (this.onNotify) {
+            this.onNotify({
+                userId: job.userId,
+                jobName: job.name,
+                result,
+                resultText,
+                error,
+            });
+        }
+    }
+    /** Add or update a job in the scheduler */
+    addOrUpdate(job) {
+        this.scheduler.addOrUpdate(job);
+    }
+    /** Cancel a job from the scheduler */
+    cancel(jobId) {
+        this.scheduler.cancel(jobId);
+    }
+    /** Stop all timers and clean up */
+    stop() {
+        this.scheduler.stop();
+        if (this.staleLockTimer) {
+            clearInterval(this.staleLockTimer);
+            this.staleLockTimer = null;
+        }
+        if (this.purgeTimer) {
+            clearInterval(this.purgeTimer);
+            this.purgeTimer = null;
+        }
+        if (this.sessionPurgeTimer) {
+            clearInterval(this.sessionPurgeTimer);
+            this.sessionPurgeTimer = null;
+        }
+        console.log("[cron-service] Stopped");
+    }
+    async purgeNotifications() {
+        try {
+            const resp = await fetch(`http://localhost:${this.gatewayPort}/api/internal/notifications/purge`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ retentionDays: NOTIFICATION_RETENTION_DAYS }),
+                signal: AbortSignal.timeout(10_000),
+            });
+            const data = await resp.json();
+            console.log(`[cron-service] Notification purge: deleted=${data.deleted ?? 0}`);
+        }
+        catch (err) {
+            console.warn("[cron-service] Notification purge failed:", err instanceof Error ? err.message : err);
+        }
+    }
+    async purgeSessions() {
+        try {
+            const resp = await fetch(`http://localhost:${this.gatewayPort}/api/internal/sessions/purge`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    statsRetentionDays: STATS_RETENTION_DAYS,
+                    softDeleteInactiveDays: SESSION_SOFT_DELETE_DAYS,
+                    hardDeleteAfterDays: SESSION_HARD_DELETE_DAYS,
+                }),
+                signal: AbortSignal.timeout(30_000),
+            });
+            const data = (await resp.json());
+            console.log(`[cron-service] Session purge: softDeleted=${data.softDeleted}, ` +
+                `statsPurged=${data.statsPurged}, sessionsPurged=${data.sessionsPurged}`);
+        }
+        catch (err) {
+            console.warn("[cron-service] Session purge failed:", err instanceof Error ? err.message : err);
+        }
+    }
+}
+function buildCronPrompt(job) {
+    const parts = [
+        `[System: You are executing an automated scheduled task in NON-INTERACTIVE mode.
+
+Rules:
+- Perform the task described below directly and report the result.
+- Do NOT ask the user any questions or request confirmations — there is no user to respond.
+- If multiple environments, hosts, or credentials are available, operate on ALL of them unless the task description specifies a particular target.
+- Do NOT create, modify, delete, pause, or manage any schedules.
+- Keep the output concise and structured.
+- Respond in the same language as the task name and description below.]`,
+        `Task: ${job.name}`,
+    ];
+    if (job.description) {
+        parts.push(`Instructions: ${job.description}`);
+    }
+    if (job.skillId) {
+        parts.push(`Execute skill: ${job.skillId}`);
+    }
+    return parts.join("\n\n");
+}
+//# sourceMappingURL=cron-service.js.map

package/dist/gateway/cron/cron-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron-service.js","sourceRoot":"","sources":["../../../src/gateway/cron/cron-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,aAAa,EAAmB,MAAM,8BAA8B,CAAC;AAI9E,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AACxD,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ;AACrD,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW;AAC1D,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAIhC,MAAM,OAAO,WAAW;IACb,SAAS,CAAgB;IAClC,6EAA6E;IAC7E,QAAQ,CAA2G;IAE3G,UAAU,CAAmB;IAC7B,SAAS,CAAyB;IAClC,UAAU,CAAe;IACzB,WAAW,CAAS;IACpB,cAAc,GAA0B,IAAI,CAAC;IAC7C,UAAU,GAA0B,IAAI,CAAC;IACzC,iBAAiB,GAA0B,IAAI,CAAC;IAExD,YAAY,IAKX;QACC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,aAAa,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,KAAK;QACT,uBAAuB;QACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC;QAC3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAiB,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC;QAEhE,qCAAqC;QACrC,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YAC3C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACnG,CAAC;QACH,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC1B,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAE5B,2BAA2B;QAC3B,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAClF,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAExB,sBAAsB;QACtB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACpF,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAE/B,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IAED,gCAAgC;IACxB,KAAK,CAAC,OAAO,CAAC,GAAe;QACnC,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,CAAC,EAAE,6BAA6B,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,yBAAyB;QACzB,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,CAAC,EAAE,2BAA2B,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,gCAAgC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,cAAc,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAErI,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAExC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,CAAC,WAAW,4BAA4B,EAAE;gBACzF,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,SAAS;oBACT,IAAI,EAAE,MAAM;oBACZ,SAAS,EAAE,oBAAoB;oBAC/B,MAAM,EAAE,MAAM;oBACd,WAAW;iBACZ,CAAC;gBACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,oBAAoB,GAAG,MAAM,CAAC;aAC3D,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAE3B,CAAC;YAEF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,gCAAgC,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACnG,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;YAEzC,iBAAiB;YACjB,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAC5E,OAAO,CAAC,IAAI,CAAC,8CAA8C,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5G,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,CAAC,EAAE,iBAAiB,IAAI,CAAC,UAAU,yBAAyB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAEtH,kCAAkC;YAClC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBAC5E,OAAO,CAAC,IAAI,CAAC,8CAA8C,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5G,CAAC;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChG,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;IACH,CAAC;IAED,6CAA6C;IACrC,KAAK,CAAC,YAAY,CACxB,GAAe,EACf,MAA6B,EAC7B,UAAkB,EAClB,KAAc,EACd,UAAmB;QAEnB,qBAAqB;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;gBACrC,KAAK,EAAE,GAAG,CAAC,EAAE;gBACb,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,UAAU,IAAI,SAAS;gBACnC,KAAK;gBACL,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,2CAA2C,EAAE,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/G,CAAC;QAED,sBAAsB;QACtB,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC;QACzE,MAAM,YAAY,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC1C,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,GAAG,CAAC,IAAI;YACf,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,GAAG,CAAC,EAAE;SAClB,CAAC,CAAC;QAEH,qBAAqB;QACrB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE;YAC1C,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,GAAG,CAAC,IAAI;YACf,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,GAAG,CAAC,EAAE;YACjB,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QAEH,gCAAgC;QAChC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC;gBACZ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,GAAG,CAAC,IAAI;gBACjB,MAAM;gBACN,UAAU;gBACV,KAAK;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,WAAW,CAAC,GAAe;QACzB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,sCAAsC;IACtC,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,mCAAmC;IACnC,IAAI;QACF,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACtC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,CAAC,WAAW,mCAAmC,EAAE;gBAChG,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,2BAA2B,EAAE,CAAC;gBACpE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA0B,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,8CAA8C,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,CAAC,WAAW,8BAA8B,EAAE;gBAC3F,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,kBAAkB,EAAE,oBAAoB;oBACxC,sBAAsB,EAAE,wBAAwB;oBAChD,mBAAmB,EAAE,wBAAwB;iBAC9C,CAAC;gBACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA2B,CAAC;YAC3D,OAAO,CAAC,GAAG,CACT,6CAA6C,IAAI,CAAC,WAAW,IAAI;gBAC/D,eAAe,IAAI,CAAC,WAAW,oBAAoB,IAAI,CAAC,cAAc,EAAE,CAC3E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sCAAsC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;CACF;AAED,SAAS,eAAe,CAAC,GAAe;IACtC,MAAM,KAAK,GAAG;QACZ;;;;;;;;wEAQoE;QACpE,SAAS,GAAG,CAAC,IAAI,EAAE;KACpB,CAAC;IACF,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}

package/dist/gateway/db/init-schema.js

@@ -48,6 +48,9 @@ const DDL_STATEMENTS = [
     tool_input TEXT,
     metadata JSON DEFAULT NULL,
     timestamp TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    user_id VARCHAR(64),
+    outcome VARCHAR(16),
+    duration_ms INT,
     FOREIGN KEY (session_id) REFERENCES sessions(id) ON DELETE CASCADE
   )`,
     `CREATE TABLE IF NOT EXISTS skills (
@@ -95,7 +98,18 @@ const DDL_STATEMENTS = [
     locked_by VARCHAR(64),
     locked_at TIMESTAMP NULL,
     env_id VARCHAR(64),
+    workspace_id VARCHAR(64),
     FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+  )`,
+    `CREATE TABLE IF NOT EXISTS cron_job_runs (
+    id VARCHAR(64) PRIMARY KEY,
+    job_id VARCHAR(64) NOT NULL,
+    status VARCHAR(20) NOT NULL,
+    result_text TEXT,
+    error TEXT,
+    duration_ms INT,
+    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    FOREIGN KEY (job_id) REFERENCES cron_jobs(id) ON DELETE CASCADE
   )`,
     `CREATE TABLE IF NOT EXISTS cron_instances (
     instance_id VARCHAR(64) PRIMARY KEY,
@@ -128,6 +142,7 @@ const DDL_STATEMENTS = [
     id VARCHAR(64) PRIMARY KEY,
     name VARCHAR(255) NOT NULL,
     is_test BOOLEAN NOT NULL DEFAULT FALSE,
+    api_server VARCHAR(512) NOT NULL DEFAULT '',
     created_by VARCHAR(32),
     allowed_servers TEXT,
     default_kubeconfig LONGTEXT,
@@ -244,6 +259,7 @@ const DDL_STATEMENTS = [
     user_id VARCHAR(32) NOT NULL,
     name VARCHAR(100) NOT NULL,
     is_default BOOLEAN NOT NULL DEFAULT FALSE,
+    env_type VARCHAR(10) NOT NULL DEFAULT 'prod',
     config_json JSON,
     created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
     updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
@@ -316,6 +332,22 @@ const DDL_STATEMENTS = [
     updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
     FOREIGN KEY (created_by) REFERENCES users(id)
   )`,
+    `CREATE TABLE IF NOT EXISTS session_stats (
+    id VARCHAR(64) PRIMARY KEY,
+    session_id VARCHAR(64) NOT NULL,
+    user_id VARCHAR(32) NOT NULL,
+    provider VARCHAR(64),
+    model VARCHAR(128),
+    input_tokens INT DEFAULT 0,
+    output_tokens INT DEFAULT 0,
+    cache_read_tokens INT DEFAULT 0,
+    cache_write_tokens INT DEFAULT 0,
+    duration_ms INT DEFAULT 0,
+    prompt_count INT DEFAULT 0,
+    tool_call_count INT DEFAULT 0,
+    skill_call_count INT DEFAULT 0,
+    created_at BIGINT NOT NULL
+  )`,
 ];
 // Indexes — handled separately since MySQL lacks CREATE INDEX IF NOT EXISTS
 const INDEX_STATEMENTS = [
@@ -333,6 +365,13 @@ const INDEX_STATEMENTS = [
     `ALTER TABLE skill_versions ADD INDEX idx_skill_versions_skill (skill_id, version)`,
     `ALTER TABLE skill_contents ADD INDEX idx_skill_contents_skill (skill_id)`,
     `ALTER TABLE credentials ADD INDEX idx_credentials_user (user_id, type)`,
+    `ALTER TABLE session_stats ADD INDEX idx_session_stats_created (created_at)`,
+    `ALTER TABLE session_stats ADD INDEX idx_session_stats_user (user_id, created_at)`,
+    `ALTER TABLE messages ADD INDEX idx_messages_audit (role, user_id, timestamp, id)`,
+    `ALTER TABLE messages ADD INDEX idx_messages_tool_name (tool_name)`,
+    `ALTER TABLE cron_job_runs ADD INDEX idx_cron_job_runs_job (job_id, created_at)`,
+    `ALTER TABLE cron_jobs ADD INDEX idx_cron_jobs_status_assigned (status, assigned_to)`,
+    `ALTER TABLE cron_instances ADD INDEX idx_cron_instances_heartbeat (heartbeat_at)`,
 ];
 export async function initSchema(db) {
     if (isSqlite())
@@ -351,6 +390,11 @@ export async function initSchema(db) {
         `ALTER TABLE skills MODIFY COLUMN scope ENUM('builtin','team','personal') NOT NULL DEFAULT 'personal'`,
         `ALTER TABLE skills MODIFY COLUMN review_status ENUM('draft','pending','approved') NOT NULL DEFAULT 'draft'`,
         `ALTER TABLE skills ADD COLUMN labels_json JSON NULL`,
+        // ADR-011: environment isolation
+        `ALTER TABLE workspaces ADD COLUMN env_type VARCHAR(10) NOT NULL DEFAULT 'prod' AFTER is_default`,
+        `ALTER TABLE environments ADD COLUMN api_server VARCHAR(512) NOT NULL DEFAULT '' AFTER is_test`,
+        `ALTER TABLE cron_jobs ADD COLUMN workspace_id VARCHAR(64)`,
+        `ALTER TABLE cron_jobs ADD CONSTRAINT fk_cron_jobs_workspace FOREIGN KEY (workspace_id) REFERENCES workspaces(id)`,
     ];
     for (const stmt of MIGRATIONS) {
         try {

package/dist/gateway/db/init-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-schema.js","sourceRoot":"","sources":["../../../src/gateway/db/init-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,cAAc,GAAG;IACrB;;;;;;;;IAQE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;;;;;;;;;;;;;IAsBE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;;;;;;;IAeE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;IAKE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;;;;IAaE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;IAUE;IAEF;;;;;IAKE;IAEF;;;;;IAKE;IAEF;;;;;;IAME;IAEF;;;;;;IAME;IAEF;;;;IAIE;IAEF;;;;;;;;;;;;;;;;;IAiBE;IAEF;;;;;;;;;;;;;;;;IAgBE;CAEH,CAAC;AAEF,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG;IACvB,4EAA4E;IAC5E,6EAA6E;IAC7E,uDAAuD;IACvD,4DAA4D;IAC5D,qFAAqF;IACrF,oEAAoE;IACpE,2FAA2F;IAC3F,oFAAoF;IACpF,+EAA+E;IAC/E,4EAA4E;IAC5E,0EAA0E;IAC1E,mFAAmF;IACnF,0EAA0E;IAC1E,wEAAwE;CACzE,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAY;IAC3C,IAAI,QAAQ,EAAE;QAAE,OAAO,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAE3C,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,iEAAiE;IACjE,MAAM,UAAU,GAAG;QACjB,2EAA2E;QAC3E,mEAAmE;QACnE,qEAAqE;QACrE,qEAAqE;QACrE,0CAA0C;QAC1C,sGAAsG;QACtG,4GAA4G;QAC5G,qDAAqD;KACtD,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;YACjD,4DAA4D;YAC5D,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,oBAAoB;gBAAE,SAAS;YAC3E,wCAAwC;YACxC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBAAE,SAAS;YACvD,qBAAqB;YACrB,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,KAAK,gBAAgB,IAAI,GAAG,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACnC,CAAC"}
+{"version":3,"file":"init-schema.js","sourceRoot":"","sources":["../../../src/gateway/db/init-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,cAAc,GAAG;IACrB;;;;;;;;IAQE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;;;;IAaE;IAEF;;;;;;;;;;;;;;;;;;;;;;IAsBE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;;;;;;;;IAgBE;IAEF;;;;;;;;;IASE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;IAKE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;;;;IAaE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;IAKE;IAEF;;;;;IAKE;IAEF;;;;;;IAME;IAEF;;;;;;IAME;IAEF;;;;IAIE;IAEF;;;;;;;;;;;;;;;;;IAiBE;IAEF;;;;;;;;;;;;;;;;IAgBE;IAEF;;;;;;;;;;;;;;;IAeE;CAEH,CAAC;AAEF,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG;IACvB,4EAA4E;IAC5E,6EAA6E;IAC7E,uDAAuD;IACvD,4DAA4D;IAC5D,qFAAqF;IACrF,oEAAoE;IACpE,2FAA2F;IAC3F,oFAAoF;IACpF,+EAA+E;IAC/E,4EAA4E;IAC5E,0EAA0E;IAC1E,mFAAmF;IACnF,0EAA0E;IAC1E,wEAAwE;IACxE,4EAA4E;IAC5E,kFAAkF;IAClF,kFAAkF;IAClF,mEAAmE;IACnE,gFAAgF;IAChF,qFAAqF;IACrF,kFAAkF;CACnF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAY;IAC3C,IAAI,QAAQ,EAAE;QAAE,OAAO,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAE3C,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,iEAAiE;IACjE,MAAM,UAAU,GAAG;QACjB,2EAA2E;QAC3E,mEAAmE;QACnE,qEAAqE;QACrE,qEAAqE;QACrE,0CAA0C;QAC1C,sGAAsG;QACtG,4GAA4G;QAC5G,qDAAqD;QACrD,iCAAiC;QACjC,iGAAiG;QACjG,+FAA+F;QAC/F,2DAA2D;QAC3D,kHAAkH;KACnH,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;YACjD,4DAA4D;YAC5D,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,oBAAoB;gBAAE,SAAS;YAC3E,wCAAwC;YACxC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBAAE,SAAS;YACvD,qBAAqB;YACrB,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,KAAK,gBAAgB,IAAI,GAAG,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACnC,CAAC"}

package/dist/gateway/db/migrate-sqlite.js

@@ -44,7 +44,10 @@ const DDL_STATEMENTS = [
     tool_name TEXT,
     tool_input TEXT,
     metadata TEXT,
-    timestamp INTEGER NOT NULL DEFAULT (unixepoch())
+    timestamp INTEGER NOT NULL DEFAULT (unixepoch()),
+    user_id TEXT,
+    outcome TEXT,
+    duration_ms INTEGER
   )`,
     `CREATE TABLE IF NOT EXISTS skills (
     id TEXT PRIMARY KEY,
@@ -88,7 +91,17 @@ const DDL_STATEMENTS = [
     assigned_to TEXT,
     locked_by TEXT,
     locked_at INTEGER,
-    env_id TEXT
+    env_id TEXT,
+    workspace_id TEXT
+  )`,
+    `CREATE TABLE IF NOT EXISTS cron_job_runs (
+    id TEXT PRIMARY KEY,
+    job_id TEXT NOT NULL REFERENCES cron_jobs(id) ON DELETE CASCADE,
+    status TEXT NOT NULL,
+    result_text TEXT,
+    error TEXT,
+    duration_ms INTEGER,
+    created_at INTEGER NOT NULL DEFAULT (unixepoch())
   )`,
     `CREATE TABLE IF NOT EXISTS cron_instances (
     instance_id TEXT PRIMARY KEY,
@@ -118,6 +131,7 @@ const DDL_STATEMENTS = [
     id TEXT PRIMARY KEY,
     name TEXT NOT NULL,
     is_test INTEGER NOT NULL DEFAULT 0,
+    api_server TEXT NOT NULL DEFAULT '',
     created_by TEXT,
     allowed_servers TEXT,
     default_kubeconfig TEXT,
@@ -225,6 +239,7 @@ const DDL_STATEMENTS = [
     user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
     name TEXT NOT NULL,
     is_default INTEGER NOT NULL DEFAULT 0,
+    env_type TEXT NOT NULL DEFAULT 'prod',
     config_json TEXT,
     created_at INTEGER NOT NULL DEFAULT (unixepoch()),
     updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
@@ -271,6 +286,22 @@ const DDL_STATEMENTS = [
     sort_order INTEGER NOT NULL DEFAULT 0,
     created_at INTEGER NOT NULL DEFAULT (unixepoch()),
     UNIQUE (provider_id, model_id)
+  )`,
+    `CREATE TABLE IF NOT EXISTS session_stats (
+    id                TEXT PRIMARY KEY,
+    session_id        TEXT NOT NULL,
+    user_id           TEXT NOT NULL,
+    provider          TEXT,
+    model             TEXT,
+    input_tokens      INTEGER DEFAULT 0,
+    output_tokens     INTEGER DEFAULT 0,
+    cache_read_tokens INTEGER DEFAULT 0,
+    cache_write_tokens INTEGER DEFAULT 0,
+    duration_ms       INTEGER DEFAULT 0,
+    prompt_count      INTEGER DEFAULT 0,
+    tool_call_count   INTEGER DEFAULT 0,
+    skill_call_count  INTEGER DEFAULT 0,
+    created_at        INTEGER NOT NULL
   )`,
     `CREATE TABLE IF NOT EXISTS mcp_servers (
     id TEXT PRIMARY KEY,
@@ -304,6 +335,13 @@ const INDEX_STATEMENTS = [
     `CREATE INDEX IF NOT EXISTS idx_skill_versions_skill ON skill_versions(skill_id, version)`,
     `CREATE INDEX IF NOT EXISTS idx_skill_contents_skill ON skill_contents(skill_id)`,
     `CREATE INDEX IF NOT EXISTS idx_credentials_user ON credentials(user_id, type)`,
+    `CREATE INDEX IF NOT EXISTS idx_session_stats_created ON session_stats(created_at)`,
+    `CREATE INDEX IF NOT EXISTS idx_session_stats_user ON session_stats(user_id, created_at)`,
+    `CREATE INDEX IF NOT EXISTS idx_messages_audit ON messages(role, user_id, timestamp, id)`,
+    `CREATE INDEX IF NOT EXISTS idx_messages_tool_name ON messages(tool_name)`,
+    `CREATE INDEX IF NOT EXISTS idx_cron_job_runs_job ON cron_job_runs(job_id, created_at)`,
+    `CREATE INDEX IF NOT EXISTS idx_cron_jobs_status_assigned ON cron_jobs(status, assigned_to)`,
+    `CREATE INDEX IF NOT EXISTS idx_cron_instances_heartbeat ON cron_instances(heartbeat_at)`,
 ];
 export async function runSqliteMigrations(db) {
     console.log("[db] Running SQLite migrations...");
@@ -313,6 +351,34 @@ export async function runSqliteMigrations(db) {
     for (const ddl of DDL_STATEMENTS) {
         sdb.run(sql.raw(ddl));
     }
+    // Schema migrations — handle existing databases missing new columns.
+    // Must run BEFORE index creation, since some indexes reference new columns.
+    const MIGRATIONS = [
+        // ADR-011: environment isolation
+        `ALTER TABLE workspaces ADD COLUMN env_type TEXT NOT NULL DEFAULT 'prod'`,
+        `ALTER TABLE environments ADD COLUMN api_server TEXT NOT NULL DEFAULT ''`,
+        `ALTER TABLE cron_jobs ADD COLUMN workspace_id TEXT`,
+    ];
+    // Backfill: copy allowedServers[0] → apiServer for rows that haven't been set
+    const BACKFILLS = [
+        `UPDATE environments SET api_server = TRIM(SUBSTR(allowed_servers, 1, CASE WHEN INSTR(allowed_servers, ',') > 0 THEN INSTR(allowed_servers, ',') - 1 ELSE LENGTH(allowed_servers) END)) WHERE api_server = '' AND allowed_servers != ''`,
+    ];
+    for (const stmt of MIGRATIONS) {
+        try {
+            sdb.run(sql.raw(stmt));
+        }
+        catch (_err) {
+            // Ignore "duplicate column name" errors (column already exists)
+        }
+    }
+    for (const stmt of BACKFILLS) {
+        try {
+            sdb.run(sql.raw(stmt));
+        }
+        catch (_err) {
+            // Backfill may fail on empty tables — safe to ignore
+        }
+    }
     for (const ddl of INDEX_STATEMENTS) {
         sdb.run(sql.raw(ddl));
     }
@@ -325,9 +391,12 @@ export async function runSqliteMigrations(db) {
       UPDATE mcp_servers SET updated_at = unixepoch() WHERE id = NEW.id;
     END
   `));
-    // Seed default embedding config if not present
+    // Seed default embedding config if not present (empty = unconfigured)
     sdb.run(sql.raw(`INSERT OR IGNORE INTO embedding_config (id, provider_name, model, dimensions, updated_at)
-     VALUES ('default', 'default', 'BAAI/bge-m3', 1024, ${Math.floor(Date.now() / 1000)})`));
+     VALUES ('default', '', '', 1024, ${Math.floor(Date.now() / 1000)})`));
+    // Clean up old seed that hardcoded BAAI/bge-m3 as default
+    sdb.run(sql.raw(`UPDATE embedding_config SET provider_name = '', model = ''
+     WHERE id = 'default' AND provider_name = 'default' AND model = 'BAAI/bge-m3'`));
     // Persist schema changes to disk immediately (sql.js is in-memory)
     flushSqliteDb();
     console.log("[db] SQLite migrations complete");

package/dist/gateway/db/migrate-sqlite.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrate-sqlite.js","sourceRoot":"","sources":["../../../src/gateway/db/migrate-sqlite.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,cAAc,GAAG;IACrB;;;;;;;;IAQE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;;;;;;;;;;;;;;IAqBE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;;;;;IAcE;IAEF;;;;;;IAME;IAEF;;;;;;;;;IASE;IAEF;;;;;;IAME;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;IAQE;IAEF;;;;IAIE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;IAME;IAEF;;;;;;;;;IASE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;;;;;;;;;;;;;IAgBE;IAEF;;;;;;;;;;;;;;;IAeE;CACH,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,mFAAmF;IACnF,oFAAoF;IACpF,8DAA8D;IAC9D,mEAAmE;IACnE,4FAA4F;IAC5F,2EAA2E;IAC3E,kGAAkG;IAClG,2FAA2F;IAC3F,sFAAsF;IACtF,mFAAmF;IACnF,iFAAiF;IACjF,0FAA0F;IAC1F,iFAAiF;IACjF,+EAA+E;CAChF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAY;IACpD,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEjD,gEAAgE;IAChE,8EAA8E;IAC9E,MAAM,GAAG,GAAG,EAAS,CAAC;IAEtB,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,oGAAoG;IACpG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;;;;;;;GAOf,CAAC,CAAC,CAAC;IAEJ,+CAA+C;IAC/C,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CACb;0DACsD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CACvF,CAAC,CAAC;IAEH,mEAAmE;IACnE,aAAa,EAAE,CAAC;IAEhB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"migrate-sqlite.js","sourceRoot":"","sources":["../../../src/gateway/db/migrate-sqlite.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,cAAc,GAAG;IACrB;;;;;;;;IAQE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;;;;;;;;;;;;IAqBE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;;;;;;IAeE;IAEF;;;;;;;;IAQE;IAEF;;;;;;IAME;IAEF;;;;;;;;;IASE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;IAQE;IAEF;;;;IAIE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;IAUE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;;;;;;;;;;;;;IAgBE;IAEF;;;;;;;;;;;;;;;IAeE;IAEF;;;;;;;;;;;;;;;IAeE;CACH,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,mFAAmF;IACnF,oFAAoF;IACpF,8DAA8D;IAC9D,mEAAmE;IACnE,4FAA4F;IAC5F,2EAA2E;IAC3E,kGAAkG;IAClG,2FAA2F;IAC3F,sFAAsF;IACtF,mFAAmF;IACnF,iFAAiF;IACjF,0FAA0F;IAC1F,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,yFAAyF;IACzF,yFAAyF;IACzF,0EAA0E;IAC1E,uFAAuF;IACvF,4FAA4F;IAC5F,yFAAyF;CAC1F,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAY;IACpD,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEjD,gEAAgE;IAChE,8EAA8E;IAC9E,MAAM,GAAG,GAAG,EAAS,CAAC;IAEtB,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,qEAAqE;IACrE,4EAA4E;IAC5E,MAAM,UAAU,GAAG;QACjB,iCAAiC;QACjC,yEAAyE;QACzE,yEAAyE;QACzE,oDAAoD;KACrD,CAAC;IACF,8EAA8E;IAC9E,MAAM,SAAS,GAAG;QAChB,wOAAwO;KACzO,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,IAAS,EAAE,CAAC;YACnB,gEAAgE;QAClE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,IAAS,EAAE,CAAC;YACnB,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,oGAAoG;IACpG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;;;;;;;GAOf,CAAC,CAAC,CAAC;IAEJ,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CACb;wCACoC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CACrE,CAAC,CAAC;IACH,0DAA0D;IAC1D,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CACb;kFAC8E,CAC/E,CAAC,CAAC;IAEH,mEAAmE;IACnE,aAAa,EAAE,CAAC;IAEhB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;AACjD,CAAC"}

package/dist/gateway/db/repositories/chat-repo.d.ts

@@ -15,7 +15,6 @@ export declare class ChatRepository {
         lastActiveAt: Date;
         messageCount: number;
         deletedAt: Date | null;
-        s3Key: string | null;
     }[]>;
     getSession(sessionId: string): Promise<{
         id: string;
@@ -27,7 +26,6 @@ export declare class ChatRepository {
         lastActiveAt: Date;
         messageCount: number;
         deletedAt: Date | null;
-        s3Key: string | null;
     }>;
     createSession(userId: string, title?: string, workspaceId?: string): Promise<{
         id: `${string}-${string}-${string}-${string}-${string}`;
@@ -51,6 +49,9 @@ export declare class ChatRepository {
         toolInput: string | null;
         metadata: Record<string, unknown> | null;
         timestamp: Date;
+        userId: string | null;
+        outcome: string | null;
+        durationMs: number | null;
     }[]>;
     appendMessage(msg: {
         sessionId: string;
@@ -59,6 +60,59 @@ export declare class ChatRepository {
         toolName?: string;
         toolInput?: string;
         metadata?: Record<string, unknown>;
+        userId?: string;
+        outcome?: "success" | "error" | "blocked";
+        durationMs?: number;
     }): Promise<`${string}-${string}-${string}-${string}-${string}`>;
+    getMessageById(messageId: string): Promise<{
+        id: string;
+        sessionId: string;
+        role: "user" | "assistant" | "tool";
+        content: string;
+        toolName: string | null;
+        toolInput: string | null;
+        metadata: Record<string, unknown> | null;
+        timestamp: Date;
+        userId: string | null;
+        outcome: string | null;
+        durationMs: number | null;
+    }>;
+    queryAuditLogs(opts: {
+        userId?: string;
+        userName?: string;
+        toolName?: string;
+        outcome?: string;
+        startDate?: number;
+        endDate?: number;
+        cursorTs?: number;
+        cursorId?: string;
+        limit: number;
+    }): Promise<{
+        id: string;
+        userId: string | null;
+        userName: string | null;
+        toolName: string | null;
+        toolInput: string | null;
+        outcome: string | null;
+        durationMs: number | null;
+        timestamp: Date;
+    }[]>;
+    private static readonly BATCH_SIZE;
+    /**
+     * Soft-delete inactive sessions (no activity for `inactiveDays`).
+     * Only targets sessions that haven't been deleted yet.
+     */
+    softDeleteInactiveSessions(inactiveDays: number): Promise<number>;
+    /**
+     * Hard-delete sessions that were soft-deleted more than `deletedDays` ago.
+     * Messages are cleaned up automatically via FK CASCADE.
+     */
+    purgeDeletedSessions(deletedDays: number): Promise<number>;
+    /**
+     * Hard-delete session_stats older than `retentionDays`.
+     * Note: sessionStats.createdAt is a raw epoch number in milliseconds
+     * (no mode:"timestamp"), so we compare with numeric ms, not Date.
+     */
+    purgeOldSessionStats(retentionDays: number): Promise<number>;
     updateMetadata(userId: string, messageId: string, metadata: Record<string, unknown>): Promise<void>;
 }