siclaw 0.1.2 → 0.1.4

package/dist/gateway/db/init-schema.js

@@ -97,7 +97,6 @@ const DDL_STATEMENTS = [
     assigned_to VARCHAR(64),
     locked_by VARCHAR(64),
     locked_at TIMESTAMP NULL,
-    env_id VARCHAR(64),
     workspace_id VARCHAR(64),
     FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
   )`,
@@ -138,27 +137,29 @@ const DDL_STATEMENTS = [
     FOREIGN KEY (skill_id) REFERENCES skills(id) ON DELETE CASCADE,
     FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
   )`,
-    `CREATE TABLE IF NOT EXISTS environments (
+    `CREATE TABLE IF NOT EXISTS clusters (
     id VARCHAR(64) PRIMARY KEY,
     name VARCHAR(255) NOT NULL,
+    infra_context TEXT,
     is_test BOOLEAN NOT NULL DEFAULT FALSE,
     api_server VARCHAR(512) NOT NULL DEFAULT '',
     created_by VARCHAR(32),
     allowed_servers TEXT,
     default_kubeconfig LONGTEXT,
+    debug_image TEXT,
     created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
     updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
   )`,
-    `CREATE TABLE IF NOT EXISTS user_env_configs (
+    `CREATE TABLE IF NOT EXISTS user_cluster_configs (
     id VARCHAR(64) PRIMARY KEY,
     user_id VARCHAR(32) NOT NULL,
-    env_id VARCHAR(64) NOT NULL,
+    cluster_id VARCHAR(64) NOT NULL,
     kubeconfig TEXT NOT NULL,
     created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
     updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
     FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
-    FOREIGN KEY (env_id) REFERENCES environments(id) ON DELETE CASCADE,
-    UNIQUE KEY uk_user_env (user_id, env_id)
+    FOREIGN KEY (cluster_id) REFERENCES clusters(id) ON DELETE CASCADE,
+    UNIQUE KEY uk_user_cluster (user_id, cluster_id)
   )`,
     `CREATE TABLE IF NOT EXISTS user_disabled_skills (
     user_id VARCHAR(32) NOT NULL,
@@ -278,12 +279,12 @@ const DDL_STATEMENTS = [
     PRIMARY KEY (workspace_id, tool_name),
     FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE
   )`,
-    `CREATE TABLE IF NOT EXISTS workspace_environments (
+    `CREATE TABLE IF NOT EXISTS workspace_clusters (
     workspace_id VARCHAR(64) NOT NULL,
-    env_id VARCHAR(64) NOT NULL,
-    PRIMARY KEY (workspace_id, env_id),
+    cluster_id VARCHAR(64) NOT NULL,
+    PRIMARY KEY (workspace_id, cluster_id),
     FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE,
-    FOREIGN KEY (env_id) REFERENCES environments(id) ON DELETE CASCADE
+    FOREIGN KEY (cluster_id) REFERENCES clusters(id) ON DELETE CASCADE
   )`,
     `CREATE TABLE IF NOT EXISTS workspace_credentials (
     workspace_id VARCHAR(64) NOT NULL,
@@ -314,6 +315,17 @@ const DDL_STATEMENTS = [
     created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
     FOREIGN KEY (provider_id) REFERENCES model_providers(id) ON DELETE CASCADE,
     UNIQUE KEY uk_provider_model (provider_id, model_id)
+  )`,
+    `CREATE TABLE IF NOT EXISTS knowledge_docs (
+    id VARCHAR(64) PRIMARY KEY,
+    name VARCHAR(500) NOT NULL,
+    file_path VARCHAR(500) NOT NULL,
+    size_bytes INT NOT NULL DEFAULT 0,
+    chunk_count INT NOT NULL DEFAULT 0,
+    uploaded_by VARCHAR(32),
+    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+    FOREIGN KEY (uploaded_by) REFERENCES users(id) ON DELETE SET NULL
   )`,
     `CREATE TABLE IF NOT EXISTS mcp_servers (
     id VARCHAR(64) PRIMARY KEY,
@@ -348,6 +360,20 @@ const DDL_STATEMENTS = [
     skill_call_count INT DEFAULT 0,
     created_at BIGINT NOT NULL
   )`,
+    `CREATE TABLE IF NOT EXISTS feedback_reports (
+    id VARCHAR(64) PRIMARY KEY,
+    session_id VARCHAR(64) NOT NULL,
+    user_id VARCHAR(32) NOT NULL,
+    workspace_id VARCHAR(64),
+    overall_rating INT CHECK(overall_rating BETWEEN 1 AND 5),
+    summary TEXT NOT NULL,
+    decision_points JSON,
+    strengths JSON,
+    improvements JSON,
+    tags JSON,
+    feedback_conversation JSON,
+    created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP
+  )`,
 ];
 // Indexes — handled separately since MySQL lacks CREATE INDEX IF NOT EXISTS
 const INDEX_STATEMENTS = [
@@ -360,8 +386,8 @@ const INDEX_STATEMENTS = [
     `ALTER TABLE notifications ADD INDEX idx_notifications_user (user_id, is_read, created_at)`,
     `ALTER TABLE skill_reviews ADD INDEX idx_skill_reviews_skill (skill_id, created_at)`,
     `ALTER TABLE user_permissions ADD INDEX idx_user_permissions_perm (permission)`,
-    `ALTER TABLE user_env_configs ADD INDEX idx_user_env_configs_user (user_id)`,
-    `ALTER TABLE user_env_configs ADD INDEX idx_user_env_configs_env (env_id)`,
+    `ALTER TABLE user_cluster_configs ADD INDEX idx_user_cluster_configs_user (user_id)`,
+    `ALTER TABLE user_cluster_configs ADD INDEX idx_user_cluster_configs_cluster (cluster_id)`,
     `ALTER TABLE skill_versions ADD INDEX idx_skill_versions_skill (skill_id, version)`,
     `ALTER TABLE skill_contents ADD INDEX idx_skill_contents_skill (skill_id)`,
     `ALTER TABLE credentials ADD INDEX idx_credentials_user (user_id, type)`,
@@ -372,15 +398,19 @@ const INDEX_STATEMENTS = [
     `ALTER TABLE cron_job_runs ADD INDEX idx_cron_job_runs_job (job_id, created_at)`,
     `ALTER TABLE cron_jobs ADD INDEX idx_cron_jobs_status_assigned (status, assigned_to)`,
     `ALTER TABLE cron_instances ADD INDEX idx_cron_instances_heartbeat (heartbeat_at)`,
+    `ALTER TABLE knowledge_docs ADD INDEX idx_knowledge_docs_name (name(255))`,
+    `ALTER TABLE feedback_reports ADD INDEX idx_feedback_reports_user (user_id, created_at)`,
+    `ALTER TABLE feedback_reports ADD INDEX idx_feedback_reports_session (session_id)`,
 ];
 export async function initSchema(db) {
     if (isSqlite())
         return runSqliteMigrations(db);
     console.log("[db] Initialising schema...");
-    for (const ddl of DDL_STATEMENTS) {
-        await db.execute(sql.raw(ddl));
-    }
-    // Schema migrations — run after DDL to handle existing databases
+    // Schema migrations run FIRST — existing databases need column adds and table
+    // renames BEFORE DDL_STATEMENTS, because DDL uses new table names (clusters,
+    // user_cluster_configs, workspace_clusters). If DDL ran first, CREATE TABLE
+    // IF NOT EXISTS would create empty tables with new names, blocking the RENAME
+    // and leaving data stranded in old tables.
     const MIGRATIONS = [
         // skill_versions: s3_key NOT NULL → NULL, add specs + scripts_json columns
         `ALTER TABLE skill_versions MODIFY COLUMN s3_key VARCHAR(500) NULL`,
@@ -393,8 +423,21 @@ export async function initSchema(db) {
         // ADR-011: environment isolation
         `ALTER TABLE workspaces ADD COLUMN env_type VARCHAR(10) NOT NULL DEFAULT 'prod' AFTER is_default`,
         `ALTER TABLE environments ADD COLUMN api_server VARCHAR(512) NOT NULL DEFAULT '' AFTER is_test`,
+        `ALTER TABLE environments ADD COLUMN description TEXT AFTER name`,
+        // Rename environments → clusters
+        `RENAME TABLE environments TO clusters`,
+        `RENAME TABLE user_env_configs TO user_cluster_configs`,
+        `RENAME TABLE workspace_environments TO workspace_clusters`,
+        `ALTER TABLE user_cluster_configs CHANGE COLUMN env_id cluster_id VARCHAR(64) NOT NULL`,
+        `ALTER TABLE workspace_clusters CHANGE COLUMN env_id cluster_id VARCHAR(64) NOT NULL`,
+        // Rename description → infra_context
+        `ALTER TABLE clusters CHANGE COLUMN description infra_context TEXT`,
         `ALTER TABLE cron_jobs ADD COLUMN workspace_id VARCHAR(64)`,
         `ALTER TABLE cron_jobs ADD CONSTRAINT fk_cron_jobs_workspace FOREIGN KEY (workspace_id) REFERENCES workspaces(id)`,
+        // Knowledge docs: drop description column
+        `ALTER TABLE knowledge_docs DROP COLUMN description`,
+        // Per-cluster debug image
+        `ALTER TABLE clusters ADD COLUMN debug_image TEXT`,
     ];
     for (const stmt of MIGRATIONS) {
         try {
@@ -408,10 +451,16 @@ export async function initSchema(db) {
             // Ignore if column type already matches
             if (String(err).includes("ER_DUP_FIELDNAME"))
                 continue;
+            // Ignore "table doesn't exist" (fresh install) and "already renamed"
+            if (code === "ER_NO_SUCH_TABLE" || code === "ER_TABLE_EXISTS_ERROR")
+                continue;
             // Log but don't fail
             console.warn("[db] Migration warning:", String(err).slice(0, 200));
         }
     }
+    for (const ddl of DDL_STATEMENTS) {
+        await db.execute(sql.raw(ddl));
+    }
     // Create indexes (ignore ER_DUP_KEYNAME if already exist)
     for (const ddl of INDEX_STATEMENTS) {
         try {

package/dist/gateway/db/init-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-schema.js","sourceRoot":"","sources":["../../../src/gateway/db/init-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,cAAc,GAAG;IACrB;;;;;;;;IAQE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;;;;IAaE;IAEF;;;;;;;;;;;;;;;;;;;;;;IAsBE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;;;;;;;;IAgBE;IAEF;;;;;;;;;IASE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;IAKE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;;;;IAaE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;IAKE;IAEF;;;;;IAKE;IAEF;;;;;;IAME;IAEF;;;;;;IAME;IAEF;;;;IAIE;IAEF;;;;;;;;;;;;;;;;;IAiBE;IAEF;;;;;;;;;;;;;;;;IAgBE;IAEF;;;;;;;;;;;;;;;IAeE;CAEH,CAAC;AAEF,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG;IACvB,4EAA4E;IAC5E,6EAA6E;IAC7E,uDAAuD;IACvD,4DAA4D;IAC5D,qFAAqF;IACrF,oEAAoE;IACpE,2FAA2F;IAC3F,oFAAoF;IACpF,+EAA+E;IAC/E,4EAA4E;IAC5E,0EAA0E;IAC1E,mFAAmF;IACnF,0EAA0E;IAC1E,wEAAwE;IACxE,4EAA4E;IAC5E,kFAAkF;IAClF,kFAAkF;IAClF,mEAAmE;IACnE,gFAAgF;IAChF,qFAAqF;IACrF,kFAAkF;CACnF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAY;IAC3C,IAAI,QAAQ,EAAE;QAAE,OAAO,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAE3C,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,iEAAiE;IACjE,MAAM,UAAU,GAAG;QACjB,2EAA2E;QAC3E,mEAAmE;QACnE,qEAAqE;QACrE,qEAAqE;QACrE,0CAA0C;QAC1C,sGAAsG;QACtG,4GAA4G;QAC5G,qDAAqD;QACrD,iCAAiC;QACjC,iGAAiG;QACjG,+FAA+F;QAC/F,2DAA2D;QAC3D,kHAAkH;KACnH,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;YACjD,4DAA4D;YAC5D,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,oBAAoB;gBAAE,SAAS;YAC3E,wCAAwC;YACxC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBAAE,SAAS;YACvD,qBAAqB;YACrB,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,KAAK,gBAAgB,IAAI,GAAG,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACnC,CAAC"}
+{"version":3,"file":"init-schema.js","sourceRoot":"","sources":["../../../src/gateway/db/init-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,cAAc,GAAG;IACrB;;;;;;;;IAQE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;;;;IAaE;IAEF;;;;;;;;;;;;;;;;;;;;;;IAsBE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;;;;;;;IAeE;IAEF;;;;;;;;;IASE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;IAKE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;IAQE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;;;;IAaE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;IAKE;IAEF;;;;;IAKE;IAEF;;;;;;IAME;IAEF;;;;;;IAME;IAEF;;;;IAIE;IAEF;;;;;;;;;;;;;;;;;IAiBE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;;;;;;;;;IAgBE;IAEF;;;;;;;;;;;;;;;IAeE;IAEF;;;;;;;;;;;;;IAaE;CAEH,CAAC;AAEF,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG;IACvB,4EAA4E;IAC5E,6EAA6E;IAC7E,uDAAuD;IACvD,4DAA4D;IAC5D,qFAAqF;IACrF,oEAAoE;IACpE,2FAA2F;IAC3F,oFAAoF;IACpF,+EAA+E;IAC/E,oFAAoF;IACpF,0FAA0F;IAC1F,mFAAmF;IACnF,0EAA0E;IAC1E,wEAAwE;IACxE,4EAA4E;IAC5E,kFAAkF;IAClF,kFAAkF;IAClF,mEAAmE;IACnE,gFAAgF;IAChF,qFAAqF;IACrF,kFAAkF;IAClF,0EAA0E;IAC1E,wFAAwF;IACxF,kFAAkF;CACnF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAY;IAC3C,IAAI,QAAQ,EAAE;QAAE,OAAO,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAE3C,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,2CAA2C;IAC3C,MAAM,UAAU,GAAG;QACjB,2EAA2E;QAC3E,mEAAmE;QACnE,qEAAqE;QACrE,qEAAqE;QACrE,0CAA0C;QAC1C,sGAAsG;QACtG,4GAA4G;QAC5G,qDAAqD;QACrD,iCAAiC;QACjC,iGAAiG;QACjG,+FAA+F;QAC/F,iEAAiE;QACjE,iCAAiC;QACjC,uCAAuC;QACvC,uDAAuD;QACvD,2DAA2D;QAC3D,uFAAuF;QACvF,qFAAqF;QACrF,qCAAqC;QACrC,mEAAmE;QACnE,2DAA2D;QAC3D,kHAAkH;QAClH,0CAA0C;QAC1C,oDAAoD;QACpD,0BAA0B;QAC1B,kDAAkD;KACnD,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;YACjD,4DAA4D;YAC5D,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,oBAAoB;gBAAE,SAAS;YAC3E,wCAAwC;YACxC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBAAE,SAAS;YACvD,qEAAqE;YACrE,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,uBAAuB;gBAAE,SAAS;YAC9E,qBAAqB;YACrB,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,0DAA0D;IAC1D,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,KAAK,gBAAgB,IAAI,GAAG,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACnC,CAAC"}

package/dist/gateway/db/migrate-sqlite.js

@@ -91,7 +91,6 @@ const DDL_STATEMENTS = [
     assigned_to TEXT,
     locked_by TEXT,
     locked_at INTEGER,
-    env_id TEXT,
     workspace_id TEXT
   )`,
     `CREATE TABLE IF NOT EXISTS cron_job_runs (
@@ -127,25 +126,27 @@ const DDL_STATEMENTS = [
     vote INTEGER NOT NULL,
     created_at INTEGER NOT NULL DEFAULT (unixepoch())
   )`,
-    `CREATE TABLE IF NOT EXISTS environments (
+    `CREATE TABLE IF NOT EXISTS clusters (
     id TEXT PRIMARY KEY,
     name TEXT NOT NULL,
+    infra_context TEXT,
     is_test INTEGER NOT NULL DEFAULT 0,
     api_server TEXT NOT NULL DEFAULT '',
     created_by TEXT,
     allowed_servers TEXT,
     default_kubeconfig TEXT,
+    debug_image TEXT,
     created_at INTEGER NOT NULL DEFAULT (unixepoch()),
     updated_at INTEGER NOT NULL DEFAULT (unixepoch())
   )`,
-    `CREATE TABLE IF NOT EXISTS user_env_configs (
+    `CREATE TABLE IF NOT EXISTS user_cluster_configs (
     id TEXT PRIMARY KEY,
     user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-    env_id TEXT NOT NULL REFERENCES environments(id) ON DELETE CASCADE,
+    cluster_id TEXT NOT NULL REFERENCES clusters(id) ON DELETE CASCADE,
     kubeconfig TEXT NOT NULL,
     created_at INTEGER NOT NULL DEFAULT (unixepoch()),
     updated_at INTEGER NOT NULL DEFAULT (unixepoch()),
-    UNIQUE (user_id, env_id)
+    UNIQUE (user_id, cluster_id)
   )`,
     `CREATE TABLE IF NOT EXISTS user_disabled_skills (
     user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
@@ -255,10 +256,10 @@ const DDL_STATEMENTS = [
     tool_name TEXT NOT NULL,
     PRIMARY KEY (workspace_id, tool_name)
   )`,
-    `CREATE TABLE IF NOT EXISTS workspace_environments (
+    `CREATE TABLE IF NOT EXISTS workspace_clusters (
     workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
-    env_id TEXT NOT NULL REFERENCES environments(id) ON DELETE CASCADE,
-    PRIMARY KEY (workspace_id, env_id)
+    cluster_id TEXT NOT NULL REFERENCES clusters(id) ON DELETE CASCADE,
+    PRIMARY KEY (workspace_id, cluster_id)
   )`,
     `CREATE TABLE IF NOT EXISTS workspace_credentials (
     workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
@@ -302,6 +303,16 @@ const DDL_STATEMENTS = [
     tool_call_count   INTEGER DEFAULT 0,
     skill_call_count  INTEGER DEFAULT 0,
     created_at        INTEGER NOT NULL
+  )`,
+    `CREATE TABLE IF NOT EXISTS knowledge_docs (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    file_path TEXT NOT NULL,
+    size_bytes INTEGER NOT NULL DEFAULT 0,
+    chunk_count INTEGER NOT NULL DEFAULT 0,
+    uploaded_by TEXT REFERENCES users(id) ON DELETE SET NULL,
+    created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+    updated_at INTEGER NOT NULL DEFAULT (unixepoch())
   )`,
     `CREATE TABLE IF NOT EXISTS mcp_servers (
     id TEXT PRIMARY KEY,
@@ -319,6 +330,20 @@ const DDL_STATEMENTS = [
     created_at INTEGER NOT NULL DEFAULT (unixepoch()),
     updated_at INTEGER NOT NULL DEFAULT (unixepoch())
   )`,
+    `CREATE TABLE IF NOT EXISTS feedback_reports (
+    id TEXT PRIMARY KEY,
+    session_id TEXT NOT NULL,
+    user_id TEXT NOT NULL,
+    workspace_id TEXT,
+    overall_rating INTEGER CHECK(overall_rating BETWEEN 1 AND 5),
+    summary TEXT NOT NULL,
+    decision_points TEXT,
+    strengths TEXT,
+    improvements TEXT,
+    tags TEXT,
+    feedback_conversation TEXT,
+    created_at INTEGER NOT NULL DEFAULT (unixepoch())
+  )`,
 ];
 const INDEX_STATEMENTS = [
     `CREATE INDEX IF NOT EXISTS idx_sessions_user ON sessions(user_id, last_active_at)`,
@@ -330,8 +355,8 @@ const INDEX_STATEMENTS = [
     `CREATE INDEX IF NOT EXISTS idx_notifications_user ON notifications(user_id, is_read, created_at)`,
     `CREATE INDEX IF NOT EXISTS idx_skill_reviews_skill ON skill_reviews(skill_id, created_at)`,
     `CREATE INDEX IF NOT EXISTS idx_user_permissions_perm ON user_permissions(permission)`,
-    `CREATE INDEX IF NOT EXISTS idx_user_env_configs_user ON user_env_configs(user_id)`,
-    `CREATE INDEX IF NOT EXISTS idx_user_env_configs_env ON user_env_configs(env_id)`,
+    `CREATE INDEX IF NOT EXISTS idx_user_cluster_configs_user ON user_cluster_configs(user_id)`,
+    `CREATE INDEX IF NOT EXISTS idx_user_cluster_configs_cluster ON user_cluster_configs(cluster_id)`,
     `CREATE INDEX IF NOT EXISTS idx_skill_versions_skill ON skill_versions(skill_id, version)`,
     `CREATE INDEX IF NOT EXISTS idx_skill_contents_skill ON skill_contents(skill_id)`,
     `CREATE INDEX IF NOT EXISTS idx_credentials_user ON credentials(user_id, type)`,
@@ -342,35 +367,55 @@ const INDEX_STATEMENTS = [
     `CREATE INDEX IF NOT EXISTS idx_cron_job_runs_job ON cron_job_runs(job_id, created_at)`,
     `CREATE INDEX IF NOT EXISTS idx_cron_jobs_status_assigned ON cron_jobs(status, assigned_to)`,
     `CREATE INDEX IF NOT EXISTS idx_cron_instances_heartbeat ON cron_instances(heartbeat_at)`,
+    `CREATE INDEX IF NOT EXISTS idx_feedback_reports_user ON feedback_reports(user_id, created_at)`,
+    `CREATE INDEX IF NOT EXISTS idx_feedback_reports_session ON feedback_reports(session_id)`,
+    `CREATE INDEX IF NOT EXISTS idx_knowledge_docs_name ON knowledge_docs(name)`,
 ];
 export async function runSqliteMigrations(db) {
     console.log("[db] Running SQLite migrations...");
     // sql.js drizzle instance has .run()/.all() but NOT .execute().
     // Cast to 'any' since db is typed as MySql2Database (the unified type alias).
     const sdb = db;
-    for (const ddl of DDL_STATEMENTS) {
-        sdb.run(sql.raw(ddl));
-    }
-    // Schema migrations — handle existing databases missing new columns.
-    // Must run BEFORE index creation, since some indexes reference new columns.
+    // Schema migrations run FIRST — existing databases need column adds and table
+    // renames BEFORE DDL_STATEMENTS, because DDL uses new table names (clusters,
+    // user_cluster_configs, workspace_clusters). If DDL ran first, CREATE TABLE
+    // IF NOT EXISTS would create empty tables with new names, blocking the RENAME
+    // and leaving data stranded in old tables.
     const MIGRATIONS = [
         // ADR-011: environment isolation
         `ALTER TABLE workspaces ADD COLUMN env_type TEXT NOT NULL DEFAULT 'prod'`,
         `ALTER TABLE environments ADD COLUMN api_server TEXT NOT NULL DEFAULT ''`,
         `ALTER TABLE cron_jobs ADD COLUMN workspace_id TEXT`,
-    ];
-    // Backfill: copy allowedServers[0] → apiServer for rows that haven't been set
-    const BACKFILLS = [
-        `UPDATE environments SET api_server = TRIM(SUBSTR(allowed_servers, 1, CASE WHEN INSTR(allowed_servers, ',') > 0 THEN INSTR(allowed_servers, ',') - 1 ELSE LENGTH(allowed_servers) END)) WHERE api_server = '' AND allowed_servers != ''`,
+        `ALTER TABLE environments ADD COLUMN description TEXT`,
+        // Rename environments → clusters
+        `ALTER TABLE environments RENAME TO clusters`,
+        `ALTER TABLE user_env_configs RENAME TO user_cluster_configs`,
+        `ALTER TABLE workspace_environments RENAME TO workspace_clusters`,
+        `ALTER TABLE user_cluster_configs RENAME COLUMN env_id TO cluster_id`,
+        `ALTER TABLE workspace_clusters RENAME COLUMN env_id TO cluster_id`,
+        // Rename description → infra_context
+        `ALTER TABLE clusters RENAME COLUMN description TO infra_context`,
+        // Knowledge docs: drop description column
+        `ALTER TABLE knowledge_docs DROP COLUMN description`,
+        // Per-cluster debug image
+        `ALTER TABLE clusters ADD COLUMN debug_image TEXT`,
     ];
     for (const stmt of MIGRATIONS) {
         try {
             sdb.run(sql.raw(stmt));
         }
         catch (_err) {
-            // Ignore "duplicate column name" errors (column already exists)
+            // Ignore errors: "duplicate column", "no such table" (fresh DB), "already renamed", etc.
         }
     }
+    // DDL: create tables that don't exist yet (fresh installs, or tables unaffected by migrations).
+    for (const ddl of DDL_STATEMENTS) {
+        sdb.run(sql.raw(ddl));
+    }
+    // Backfill: copy allowedServers[0] → apiServer for rows that haven't been set
+    const BACKFILLS = [
+        `UPDATE clusters SET api_server = TRIM(SUBSTR(allowed_servers, 1, CASE WHEN INSTR(allowed_servers, ',') > 0 THEN INSTR(allowed_servers, ',') - 1 ELSE LENGTH(allowed_servers) END)) WHERE api_server = '' AND allowed_servers != ''`,
+    ];
     for (const stmt of BACKFILLS) {
         try {
             sdb.run(sql.raw(stmt));
@@ -390,6 +435,14 @@ export async function runSqliteMigrations(db) {
     BEGIN
       UPDATE mcp_servers SET updated_at = unixepoch() WHERE id = NEW.id;
     END
+  `));
+    sdb.run(sql.raw(`
+    CREATE TRIGGER IF NOT EXISTS trg_knowledge_docs_updated_at
+    AFTER UPDATE ON knowledge_docs
+    FOR EACH ROW
+    BEGIN
+      UPDATE knowledge_docs SET updated_at = unixepoch() WHERE id = NEW.id;
+    END
   `));
     // Seed default embedding config if not present (empty = unconfigured)
     sdb.run(sql.raw(`INSERT OR IGNORE INTO embedding_config (id, provider_name, model, dimensions, updated_at)

package/dist/gateway/db/migrate-sqlite.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrate-sqlite.js","sourceRoot":"","sources":["../../../src/gateway/db/migrate-sqlite.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,cAAc,GAAG;IACrB;;;;;;;;IAQE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;;;;;;;;;;;;IAqBE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;;;;;;IAeE;IAEF;;;;;;;;IAQE;IAEF;;;;;;IAME;IAEF;;;;;;;;;IASE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;;IAQE;IAEF;;;;IAIE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;IAUE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;;;;;;;;;;;;;IAgBE;IAEF;;;;;;;;;;;;;;;IAeE;IAEF;;;;;;;;;;;;;;;IAeE;CACH,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,mFAAmF;IACnF,oFAAoF;IACpF,8DAA8D;IAC9D,mEAAmE;IACnE,4FAA4F;IAC5F,2EAA2E;IAC3E,kGAAkG;IAClG,2FAA2F;IAC3F,sFAAsF;IACtF,mFAAmF;IACnF,iFAAiF;IACjF,0FAA0F;IAC1F,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,yFAAyF;IACzF,yFAAyF;IACzF,0EAA0E;IAC1E,uFAAuF;IACvF,4FAA4F;IAC5F,yFAAyF;CAC1F,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAY;IACpD,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEjD,gEAAgE;IAChE,8EAA8E;IAC9E,MAAM,GAAG,GAAG,EAAS,CAAC;IAEtB,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,qEAAqE;IACrE,4EAA4E;IAC5E,MAAM,UAAU,GAAG;QACjB,iCAAiC;QACjC,yEAAyE;QACzE,yEAAyE;QACzE,oDAAoD;KACrD,CAAC;IACF,8EAA8E;IAC9E,MAAM,SAAS,GAAG;QAChB,wOAAwO;KACzO,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,IAAS,EAAE,CAAC;YACnB,gEAAgE;QAClE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,IAAS,EAAE,CAAC;YACnB,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,oGAAoG;IACpG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;;;;;;;GAOf,CAAC,CAAC,CAAC;IAEJ,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CACb;wCACoC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CACrE,CAAC,CAAC;IACH,0DAA0D;IAC1D,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CACb;kFAC8E,CAC/E,CAAC,CAAC;IAEH,mEAAmE;IACnE,aAAa,EAAE,CAAC;IAEhB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"migrate-sqlite.js","sourceRoot":"","sources":["../../../src/gateway/db/migrate-sqlite.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,cAAc,GAAG;IACrB;;;;;;;;IAQE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;;;;;;;;;;;;;IAqBE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;;;;;IAcE;IAEF;;;;;;;;IAQE;IAEF;;;;;;IAME;IAEF;;;;;;;;;IASE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;IAQE;IAEF;;;;IAIE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;;IAOE;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;;;;;IAYE;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;;;;IAWE;IAEF;;;;;;;;;;IAUE;IAEF;;;;;;IAME;IAEF;;;;;;;;;;IAUE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;IAIE;IAEF;;;;;;;;;;;;;;;;IAgBE;IAEF;;;;;;;;;;;;;;;IAeE;IAEF;;;;;;;;;IASE;IAEF;;;;;;;;;;;;;;;IAeE;IAEF;;;;;;;;;;;;;IAaE;CACH,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,mFAAmF;IACnF,oFAAoF;IACpF,8DAA8D;IAC9D,mEAAmE;IACnE,4FAA4F;IAC5F,2EAA2E;IAC3E,kGAAkG;IAClG,2FAA2F;IAC3F,sFAAsF;IACtF,2FAA2F;IAC3F,iGAAiG;IACjG,0FAA0F;IAC1F,iFAAiF;IACjF,+EAA+E;IAC/E,mFAAmF;IACnF,yFAAyF;IACzF,yFAAyF;IACzF,0EAA0E;IAC1E,uFAAuF;IACvF,4FAA4F;IAC5F,yFAAyF;IACzF,+FAA+F;IAC/F,yFAAyF;IACzF,4EAA4E;CAC7E,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAY;IACpD,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAEjD,gEAAgE;IAChE,8EAA8E;IAC9E,MAAM,GAAG,GAAG,EAAS,CAAC;IAEtB,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,2CAA2C;IAC3C,MAAM,UAAU,GAAG;QACjB,iCAAiC;QACjC,yEAAyE;QACzE,yEAAyE;QACzE,oDAAoD;QACpD,sDAAsD;QACtD,iCAAiC;QACjC,6CAA6C;QAC7C,6DAA6D;QAC7D,iEAAiE;QACjE,qEAAqE;QACrE,mEAAmE;QACnE,qCAAqC;QACrC,iEAAiE;QACjE,0CAA0C;QAC1C,oDAAoD;QACpD,0BAA0B;QAC1B,kDAAkD;KACnD,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,IAAS,EAAE,CAAC;YACnB,yFAAyF;QAC3F,CAAC;IACH,CAAC;IAED,gGAAgG;IAChG,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,8EAA8E;IAC9E,MAAM,SAAS,GAAG;QAChB,oOAAoO;KACrO,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,IAAS,EAAE,CAAC;YACnB,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,oGAAoG;IACpG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;;;;;;;GAOf,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;;;;;;;GAOf,CAAC,CAAC,CAAC;IAEJ,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CACb;wCACoC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CACrE,CAAC,CAAC;IACH,0DAA0D;IAC1D,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CACb;kFAC8E,CAC/E,CAAC,CAAC;IAEH,mEAAmE;IACnE,aAAa,EAAE,CAAC;IAEhB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;AACjD,CAAC"}

package/dist/gateway/db/repositories/cluster-repo.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Cluster Repository — CRUD for admin-managed K8s clusters
+ */
+import type { Database } from "../index.js";
+export declare class ClusterRepository {
+    private db;
+    constructor(db: Database);
+    list(): Promise<{
+        id: string;
+        name: string;
+        infraContext: string | null;
+        isTest: boolean;
+        apiServer: string;
+        allowedServers: string | null;
+        defaultKubeconfig: string | null;
+        debugImage: string | null;
+        createdBy: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }[]>;
+    getById(id: string): Promise<{
+        id: string;
+        name: string;
+        infraContext: string | null;
+        isTest: boolean;
+        apiServer: string;
+        allowedServers: string | null;
+        defaultKubeconfig: string | null;
+        debugImage: string | null;
+        createdBy: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }>;
+    listByIds(ids: string[]): Promise<{
+        id: string;
+        name: string;
+        infraContext: string | null;
+        isTest: boolean;
+        apiServer: string;
+        allowedServers: string | null;
+        defaultKubeconfig: string | null;
+        debugImage: string | null;
+        createdBy: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }[]>;
+    save(cluster: {
+        id?: string;
+        name: string;
+        infraContext?: string | null;
+        isTest?: boolean;
+        apiServer: string;
+        allowedServers?: string | null;
+        defaultKubeconfig?: string | null;
+        debugImage?: string | null;
+    }, createdBy?: string): Promise<string>;
+    clearDefaultKubeconfig(clusterId: string): Promise<void>;
+    delete(id: string): Promise<void>;
+}

package/dist/gateway/db/repositories/cluster-repo.js

@@ -0,0 +1,107 @@
+/**
+ * Cluster Repository — CRUD for admin-managed K8s clusters
+ */
+import crypto from "node:crypto";
+import { eq, inArray } from "drizzle-orm";
+import { clusters } from "../schema.js";
+export class ClusterRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async list() {
+        return this.db
+            .select({
+            id: clusters.id,
+            name: clusters.name,
+            infraContext: clusters.infraContext,
+            isTest: clusters.isTest,
+            apiServer: clusters.apiServer,
+            allowedServers: clusters.allowedServers,
+            defaultKubeconfig: clusters.defaultKubeconfig,
+            debugImage: clusters.debugImage,
+            createdBy: clusters.createdBy,
+            createdAt: clusters.createdAt,
+            updatedAt: clusters.updatedAt,
+        })
+            .from(clusters);
+    }
+    async getById(id) {
+        const rows = await this.db
+            .select()
+            .from(clusters)
+            .where(eq(clusters.id, id))
+            .limit(1);
+        return rows[0] ?? null;
+    }
+    async listByIds(ids) {
+        if (ids.length === 0)
+            return [];
+        return this.db
+            .select({
+            id: clusters.id,
+            name: clusters.name,
+            infraContext: clusters.infraContext,
+            isTest: clusters.isTest,
+            apiServer: clusters.apiServer,
+            allowedServers: clusters.allowedServers,
+            defaultKubeconfig: clusters.defaultKubeconfig,
+            debugImage: clusters.debugImage,
+            createdBy: clusters.createdBy,
+            createdAt: clusters.createdAt,
+            updatedAt: clusters.updatedAt,
+        })
+            .from(clusters)
+            .where(inArray(clusters.id, ids));
+    }
+    async save(cluster, createdBy) {
+        if (!cluster.apiServer || typeof cluster.apiServer !== "string" || !cluster.apiServer.trim()) {
+            throw new Error("apiServer is required and must be a non-empty string");
+        }
+        if (cluster.id) {
+            // Update existing
+            const updates = { name: cluster.name, apiServer: cluster.apiServer };
+            if (cluster.infraContext !== undefined)
+                updates.infraContext = cluster.infraContext;
+            if (cluster.isTest !== undefined)
+                updates.isTest = cluster.isTest;
+            if (cluster.allowedServers !== undefined)
+                updates.allowedServers = cluster.allowedServers;
+            if (cluster.defaultKubeconfig !== undefined)
+                updates.defaultKubeconfig = cluster.defaultKubeconfig;
+            if (cluster.debugImage !== undefined)
+                updates.debugImage = cluster.debugImage;
+            await this.db
+                .update(clusters)
+                .set(updates)
+                .where(eq(clusters.id, cluster.id));
+            return cluster.id;
+        }
+        // Create new
+        const id = crypto.randomBytes(12).toString("hex");
+        await this.db.insert(clusters).values({
+            id,
+            name: cluster.name,
+            infraContext: cluster.infraContext ?? null,
+            isTest: cluster.isTest ?? false,
+            apiServer: cluster.apiServer,
+            allowedServers: cluster.allowedServers ?? null,
+            defaultKubeconfig: cluster.defaultKubeconfig ?? null,
+            debugImage: cluster.debugImage ?? null,
+            createdBy: createdBy ?? null,
+        });
+        return id;
+    }
+    async clearDefaultKubeconfig(clusterId) {
+        await this.db
+            .update(clusters)
+            .set({ defaultKubeconfig: null })
+            .where(eq(clusters.id, clusterId));
+    }
+    async delete(id) {
+        await this.db
+            .delete(clusters)
+            .where(eq(clusters.id, id));
+    }
+}
+//# sourceMappingURL=cluster-repo.js.map

package/dist/gateway/db/repositories/cluster-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cluster-repo.js","sourceRoot":"","sources":["../../../../src/gateway/db/repositories/cluster-repo.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,MAAM,OAAO,iBAAiB;IACR;IAApB,YAAoB,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAEpC,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,EAAE;aACX,MAAM,CAAC;YACN,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC;aACD,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aAC1B,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAa;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,EAAE;aACX,MAAM,CAAC;YACN,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC;aACD,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,OAAwM,EACxM,SAAkB;QAElB,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7F,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,kBAAkB;YAClB,MAAM,OAAO,GAA4B,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YAC9F,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;gBAAE,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;YACpF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAClE,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;gBAAE,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;YAC1F,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS;gBAAE,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;YACnG,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;gBAAE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAC9E,MAAM,IAAI,CAAC,EAAE;iBACV,MAAM,CAAC,QAAQ,CAAC;iBAChB,GAAG,CAAC,OAAO,CAAC;iBACZ,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACtC,OAAO,OAAO,CAAC,EAAE,CAAC;QACpB,CAAC;QAED,aAAa;QACb,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;YACpC,EAAE;YACF,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;YAC1C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;YAC9C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI;YACpD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;YACtC,SAAS,EAAE,SAAS,IAAI,IAAI;SAC7B,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,QAAQ,CAAC;aAChB,GAAG,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;aAChC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,QAAQ,CAAC;aAChB,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/gateway/db/repositories/config-repo.d.ts

@@ -28,7 +28,6 @@ export declare class ConfigRepository {
         assignedTo: string | null;
         lockedBy: string | null;
         lockedAt: Date | null;
-        envId: string | null;
         workspaceId: string | null;
     }[]>;
     saveCronJob(userId: string, job: {
@@ -54,7 +53,6 @@ export declare class ConfigRepository {
         assignedTo: string | null;
         lockedBy: string | null;
         lockedAt: Date | null;
-        envId: string | null;
         workspaceId: string | null;
     }>;
     listAllActiveCronJobs(): Promise<{
@@ -70,7 +68,6 @@ export declare class ConfigRepository {
         assignedTo: string | null;
         lockedBy: string | null;
         lockedAt: Date | null;
-        envId: string | null;
         workspaceId: string | null;
     }[]>;
     listCronJobsByInstance(instanceId: string): Promise<{
@@ -86,7 +83,6 @@ export declare class ConfigRepository {
         assignedTo: string | null;
         lockedBy: string | null;
         lockedAt: Date | null;
-        envId: string | null;
         workspaceId: string | null;
     }[]>;
     updateCronJobRun(id: string, result: "success" | "failure"): Promise<void>;
@@ -152,7 +148,6 @@ export declare class ConfigRepository {
         assignedTo: string | null;
         lockedBy: string | null;
         lockedAt: Date | null;
-        envId: string | null;
         workspaceId: string | null;
     }[]>;
     /** Atomically lock a job for execution — returns true if locked by us */
@@ -161,6 +156,10 @@ export declare class ConfigRepository {
     unlockJob(jobId: string, executionId: string): Promise<void>;
     /** Clear locks older than thresholdMs (stale lock cleanup) */
     clearStaleLocks(thresholdMs: number): Promise<void>;
+    /** Count active (non-paused) jobs owned by a user */
+    countActiveJobsByUser(userId: string): Promise<number>;
+    /** Count jobs currently locked for execution (lockedBy IS NOT NULL) */
+    countCurrentlyExecutingJobs(): Promise<number>;
     listTriggers(userId: string): Promise<{
         id: string;
         userId: string;

package/dist/gateway/db/repositories/config-repo.js

@@ -261,6 +261,23 @@ export class ConfigRepository {
             .set({ lockedBy: null, lockedAt: null })
             .where(and(isNotNull(cronJobs.lockedBy), lte(cronJobs.lockedAt, cutoff)));
     }
+    // ─── Cron Limits Queries ─────────────────────────
+    /** Count active (non-paused) jobs owned by a user */
+    async countActiveJobsByUser(userId) {
+        const rows = await this.db
+            .select({ cnt: sql `count(*)` })
+            .from(cronJobs)
+            .where(and(eq(cronJobs.userId, userId), eq(cronJobs.status, "active")));
+        return Number(rows[0]?.cnt ?? 0);
+    }
+    /** Count jobs currently locked for execution (lockedBy IS NOT NULL) */
+    async countCurrentlyExecutingJobs() {
+        const rows = await this.db
+            .select({ cnt: sql `count(*)` })
+            .from(cronJobs)
+            .where(isNotNull(cronJobs.lockedBy));
+        return Number(rows[0]?.cnt ?? 0);
+    }
     // ─── Triggers ─────────────────────────────────
     async listTriggers(userId) {
         return this.db