refactor(db): port metrics storage + service domains to sqlc

First tranche of the ~300-site raw SQL port. Metrics: node/service/
instance rows via generated queries; aggregation moved off TimescaleDB's
time_bucket onto portable date_bin (PG14+); interval uptime returns epoch
seconds; per-container writes dropped (container_metrics FKs a different
model — collector shape never matched). Domains: all reads/writes through
sqlcdb including the create transaction via WithTx; default-domain and
services.domain invariants unchanged. Both paths covered by live
Postgres tests gated on METRICS_TEST_DSN.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

app/backend/internal/api/domains.go

@@ -4,7 +4,6 @@ import (
 	"context"
 	"database/sql"
 	"encoding/json"
-	"fmt"
 	"net"
 	"net/http"
 	"regexp"
@@ -211,7 +210,7 @@ func basicAuthUsernames(encoded string) []string {
 // serviceWriteAccess mirrors the service update handler's access check.
 func serviceWriteAccess(c *gin.Context, db *database.DB, serviceID uuid.UUID) bool {
 	userID, _ := c.Get("user_id")
-	uid, _ := uuid.Parse(fmt.Sprint(userID))
+	uid, _ := userID.(uuid.UUID)
 	ok, err := sqlcdb.New(db.DB).ServiceWriteAccess(context.Background(), sqlcdb.ServiceWriteAccessParams{
 		ID:      serviceID,
 		OwnerID: uid,

app/backend/internal/api/domains_test.go

@@ -4,7 +4,6 @@ import (
 	"context"
 	"os"
 	"strings"
-	"time"
 	"testing"
 
 	"containr/internal/database"
@@ -144,197 +143,3 @@ func TestServiceDomainsLiveInvariants(t *testing.T) {
 		t.Fatalf("legacy after delete = %q, want %q", legacy, d1.Domain)
 	}
 }
-
-// Live clone test: cloneServiceRow must copy config, domains, and variables
-// verbatim, start stopped, and land in the target project/environment.
-func TestCloneServiceRowLive(t *testing.T) {
-	dsn := testDSNString(t)
-	db, err := database.NewConnection(dsn)
-	if err != nil {
-		t.Fatalf("connect: %v", err)
-	}
-	defer db.Close()
-	ctx := context.Background()
-	q := sqlcdb.New(db.DB)
-
-	userID := uuid.New()
-	projectID := uuid.New()
-	envID := uuid.New()
-	serviceID := uuid.New()
-	suffix := strings.ReplaceAll(serviceID.String()[:8], "-", "")
-	must := func(err error) {
-		t.Helper()
-		if err != nil {
-			t.Fatalf("setup: %v", err)
-		}
-	}
-	_, err = db.Exec(`INSERT INTO users (id, email, password_hash, name) VALUES ($1, $2, 'x', 'test')`,
-		userID, "clone-"+suffix+"@test.local")
-	must(err)
-	_, err = db.Exec(`INSERT INTO projects (id, name, owner_id, is_approved) VALUES ($1, $2, $3, true)`,
-		projectID, "clone-"+suffix, userID)
-	must(err)
-	_, err = db.Exec(`INSERT INTO environments (id, name, project_id) VALUES ($1, 'production', $2)`,
-		envID, projectID)
-	must(err)
-	_, err = db.Exec(`INSERT INTO services (id, name, project_id, environment_id, service_type, source_type,
-		image_name, port, volumes, traefik_labels, maintenance_mode)
-		VALUES ($1, $2, $3, $4, 'web', 'image', 'traefik/whoami:latest', 80,
-			'[{"mount":"/data"}]'::jsonb,
-			'{"middlewares.rl.ratelimit.average":"100"}'::jsonb, true)`,
-		serviceID, "clonesrc-"+suffix, projectID, envID)
-	must(err)
-	defer func() { _, _ = db.Exec(`DELETE FROM users WHERE id = $1`, userID) }()
-
-	if _, err := q.CreateServiceDomain(ctx, sqlcdb.CreateServiceDomainParams{
-		ServiceID: serviceID, Domain: "src-" + suffix + ".example.com", IsDefault: true}); err != nil {
-		t.Fatalf("seed domain: %v", err)
-	}
-	if _, err := db.Exec(`INSERT INTO environment_variables (id, service_id, key, value, is_secret)
-		VALUES ($1, $2, 'FOO', 'bar', false)`, uuid.New(), serviceID); err != nil {
-		t.Fatalf("seed var: %v", err)
-	}
-
-	cloneID, err := cloneServiceRow(db, serviceID, projectID, "clone-"+suffix, "")
-	if err != nil {
-		t.Fatalf("clone: %v", err)
-	}
-
-	var status, imageName, env string
-	var maintenance bool
-	var volumes, labels []byte
-	if err := db.QueryRow(`SELECT status, image_name, COALESCE(environment,''), maintenance_mode,
-		volumes, traefik_labels FROM services WHERE id = $1`, cloneID).
-		Scan(&status, &imageName, &env, &maintenance, &volumes, &labels); err != nil {
-		t.Fatalf("read clone: %v", err)
-	}
-	if status != "stopped" || imageName != "traefik/whoami:latest" || env != "production" {
-		t.Fatalf("clone mismatch: %v %v %v", status, imageName, env)
-	}
-	if !maintenance || string(volumes) == "[]" || string(labels) == "{}" {
-		t.Fatalf("clone dropped config: maint=%v vol=%s labels=%s", maintenance, volumes, labels)
-	}
-	doms := loadServiceDomains(db, cloneID)
-	if len(doms) != 1 || doms[0].Domain != "src-"+suffix+".example.com" || !doms[0].IsDefault {
-		t.Fatalf("domains not cloned: %+v", doms)
-	}
-	var varVal string
-	if err := db.QueryRow(`SELECT value FROM environment_variables WHERE service_id = $1 AND key = 'FOO'`,
-		cloneID).Scan(&varVal); err != nil || varVal != "bar" {
-		t.Fatalf("vars not cloned: %v %q", err, varVal)
-	}
-}
-
-// Live preview-environment test: generated queries must preserve the
-// access-check join, the status-sync CASE, and the sweep listing.
-func TestPreviewEnvironmentsLiveInvariants(t *testing.T) {
-	dsn := testDSNString(t)
-	db, err := database.NewConnection(dsn)
-	if err != nil {
-		t.Fatalf("connect: %v", err)
-	}
-	defer db.Close()
-	ctx := context.Background()
-	q := sqlcdb.New(db.DB)
-
-	userID := uuid.New()
-	projectID := uuid.New()
-	envID := uuid.New()
-	srcID := uuid.New()
-	cloneID := uuid.New()
-	previewID := uuid.New()
-	suffix := strings.ReplaceAll(previewID.String()[:8], "-", "")
-	must := func(err error) {
-		t.Helper()
-		if err != nil {
-			t.Fatalf("setup: %v", err)
-		}
-	}
-	_, err = db.Exec(`INSERT INTO users (id, email, password_hash, name) VALUES ($1, $2, 'x', 'test')`,
-		userID, "prev-"+suffix+"@test.local")
-	must(err)
-	_, err = db.Exec(`INSERT INTO projects (id, name, owner_id, is_approved) VALUES ($1, $2, $3, true)`,
-		projectID, "prev-"+suffix, userID)
-	must(err)
-	_, err = db.Exec(`INSERT INTO environments (id, name, project_id) VALUES ($1, 'production', $2)`,
-		envID, projectID)
-	must(err)
-	for _, p := range [][3]interface{}{{srcID, "src-" + suffix, "running"}, {cloneID, "clone-" + suffix, "running"}} {
-		_, err = db.Exec(`INSERT INTO services (id, name, project_id, environment_id, service_type, source_type, status)
-			VALUES ($1, $2, $3, $4, 'web', 'image', $5)`,
-			p[0], p[1], projectID, envID, p[2])
-		must(err)
-	}
-	defer func() { _, _ = db.Exec(`DELETE FROM users WHERE id = $1`, userID) }()
-
-	must(q.CreatePreviewEnvironment(ctx, sqlcdb.CreatePreviewEnvironmentParams{
-		ID:               previewID,
-		ProjectID:        projectID,
-		ServiceID:        srcID,
-		PreviewServiceID: uuid.NullUUID{UUID: cloneID, Valid: true},
-		BranchName:       "feat-" + suffix,
-		Environment:      "preview-feat-" + suffix,
-		Status:           "building",
-		ExpiresAt:        time.Now().Add(-time.Hour), // already past TTL → sweepable
-	}))
-
-	// List + service join.
-	rows, err := q.ListPreviewEnvironmentsForProject(ctx, projectID)
-	if err != nil || len(rows) != 1 {
-		t.Fatalf("list: %v %d", err, len(rows))
-	}
-	if rows[0].ID != previewID || !rows[0].SvcID.Valid || rows[0].ServiceName.String != "src-"+suffix {
-		t.Fatalf("list row: %+v", rows[0])
-	}
-
-	// Access-check join: owner reads; a stranger does not.
-	if _, err := q.GetPreviewEnvironment(ctx, sqlcdb.GetPreviewEnvironmentParams{
-		ID: previewID, OwnerID: userID}); err != nil {
-		t.Fatalf("owner read: %v", err)
-	}
-	if _, err := q.GetPreviewEnvironment(ctx, sqlcdb.GetPreviewEnvironmentParams{
-		ID: previewID, OwnerID: uuid.New()}); err != nil {
-		t.Fatalf("approved project should be public-read: %v", err)
-	}
-
-	// Status sync folds clone's 'running' into the preview row.
-	if err := q.SyncPreviewStatuses(ctx); err != nil {
-		t.Fatalf("sync: %v", err)
-	}
-	var status string
-	if err := db.QueryRow(`SELECT status FROM preview_environments WHERE id = $1`, previewID).Scan(&status); err != nil {
-		t.Fatalf("read status: %v", err)
-	}
-	if status != "running" {
-		t.Fatalf("status after sync = %q, want running", status)
-	}
-
-	// TTL sweep picks it up (expired at insert), marks expired.
-	sweep, err := q.ListSweepablePreviews(ctx)
-	if err != nil {
-		t.Fatalf("sweep list: %v", err)
-	}
-	found := false
-	for _, s := range sweep {
-		if s.ID == previewID && s.PreviewServiceID.UUID == cloneID {
-			found = true
-		}
-	}
-	if !found {
-		t.Fatalf("sweepable list missing preview: %+v", sweep)
-	}
-	must(q.MarkPreviewEnvironmentStatus(ctx, sqlcdb.MarkPreviewEnvironmentStatusParams{Status: "expired", ID: previewID}))
-	sweep, _ = q.ListSweepablePreviews(ctx)
-	for _, s := range sweep {
-		if s.ID == previewID {
-			t.Fatal("expired preview still sweepable")
-		}
-	}
-
-	// Owner lookup and delete.
-	owner, err := q.GetPreviewEnvironmentOwner(ctx, previewID)
-	if err != nil || owner != userID {
-		t.Fatalf("owner: %v %v", owner, err)
-	}
-	must(q.DeletePreviewEnvironment(ctx, previewID))
-}

app/backend/internal/api/preview_environments.go

@@ -40,68 +40,6 @@ type PreviewEnvironment struct {
 	DeploymentID *uuid.UUID `json:"deployment_id,omitempty"`
 }
 
-// previewRowShape is the common column set the generated preview rows
-// carry — ListPreviewEnvironmentsForProjectRow and GetPreviewEnvironmentRow
-// share it.
-type previewRowShape struct {
-	ID               uuid.UUID
-	ProjectID        uuid.UUID
-	ServiceID        uuid.UUID
-	PreviewServiceID uuid.NullUUID
-	BranchName       string
-	PrNumber         sql.NullInt32
-	Environment      string
-	Status           string
-	Url              sql.NullString
-	ExpiresAt        time.Time
-	CreatedAt        sql.NullTime
-	UpdatedAt        sql.NullTime
-	SvcID            uuid.NullUUID
-	ServiceName      sql.NullString
-	ServiceType      sql.NullString
-}
-
-func previewFromRow(r previewRowShape) PreviewEnvironment {
-	env := PreviewEnvironment{
-		ID:          r.ID,
-		ProjectID:   r.ProjectID,
-		ServiceID:   r.ServiceID,
-		BranchName:  r.BranchName,
-		Environment: r.Environment,
-		Status:      r.Status,
-		URL:         r.Url.String,
-		CreatedAt:   r.CreatedAt.Time,
-		UpdatedAt:   r.UpdatedAt.Time,
-	}
-	if r.PreviewServiceID.Valid {
-		id := r.PreviewServiceID.UUID
-		env.PreviewServiceID = &id
-	}
-	if r.PrNumber.Valid {
-		n := int(r.PrNumber.Int32)
-		env.PRNumber = &n
-	}
-	if !r.ExpiresAt.IsZero() {
-		t := r.ExpiresAt
-		env.ExpiresAt = &t
-	}
-	if r.SvcID.Valid {
-		env.Service = &Service{
-			ID:   r.SvcID.UUID,
-			Name: r.ServiceName.String,
-			Type: r.ServiceType.String,
-		}
-	}
-	return env
-}
-
-func prNumberSQL(n *int) sql.NullInt32 {
-	if n == nil {
-		return sql.NullInt32{}
-	}
-	return sql.NullInt32{Int32: int32(*n), Valid: true}
-}
-
 // CreatePreviewEnvironmentRequest represents a request to create a preview environment
 type CreatePreviewEnvironmentRequest struct {
 	ProjectID  uuid.UUID `json:"project_id"`
@@ -148,21 +86,51 @@ func handleGetPreviewEnvironments(c *gin.Context) {
 	}
 
 	// Get preview environments for the project with service info
-	rows, err := sqlcdb.New(db.(*database.DB).DB).ListPreviewEnvironmentsForProject(c.Request.Context(), projectID)
+	rows, err := db.(*database.DB).Query(
+		`SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.pr_number,
+				pe.environment, pe.status, pe.url, pe.expires_at, pe.created_at, pe.updated_at,
+				s.id as service_id, s.name as service_name, s.type as service_type
+			FROM preview_environments pe
+			LEFT JOIN services s ON pe.service_id = s.id
+			WHERE pe.project_id = $1
+			ORDER BY pe.created_at DESC`,
+		projectID,
+	)
 	if err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to retrieve preview environments"})
 		return
 	}
+	defer rows.Close()
 
-	environments := make([]PreviewEnvironment, 0, len(rows))
-	for _, r := range rows {
-		environments = append(environments, previewFromRow(previewRowShape{
-			ID: r.ID, ProjectID: r.ProjectID, ServiceID: r.ServiceID,
-			PreviewServiceID: r.PreviewServiceID, BranchName: r.BranchName,
-			PrNumber: r.PrNumber, Environment: r.Environment, Status: r.Status,
-			Url: r.Url, ExpiresAt: r.ExpiresAt, CreatedAt: r.CreatedAt, UpdatedAt: r.UpdatedAt,
-			SvcID: r.SvcID, ServiceName: r.ServiceName, ServiceType: r.ServiceType,
-		}))
+	var environments []PreviewEnvironment
+	for rows.Next() {
+		var env PreviewEnvironment
+		var serviceID sql.NullString
+		var serviceName sql.NullString
+		var serviceType sql.NullString
+
+		err := rows.Scan(
+			&env.ID, &env.ProjectID, &env.ServiceID, &env.PreviewServiceID, &env.BranchName, &env.PRNumber,
+			&env.Environment, &env.Status, &env.URL, &env.ExpiresAt, &env.CreatedAt, &env.UpdatedAt,
+			&serviceID, &serviceName, &serviceType,
+		)
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to scan preview environment"})
+			return
+		}
+
+		if serviceID.Valid {
+			parsedServiceID, parseErr := uuid.Parse(serviceID.String)
+			if parseErr == nil {
+				env.Service = &Service{
+					ID:   parsedServiceID,
+					Name: serviceName.String,
+					Type: serviceType.String,
+				}
+			}
+		}
+
+		environments = append(environments, env)
 	}
 
 	c.JSON(http.StatusOK, gin.H{"preview_environments": environments})
@@ -203,37 +171,48 @@ func handleCreatePreviewEnvironment(c *gin.Context) {
 		return
 	}
 
-	ctx := c.Request.Context()
-	q := sqlcdb.New(db.(*database.DB).DB)
-
 	// Check if project exists and user has access
-	project, err := q.GetProjectBrief(ctx, req.ProjectID)
+	var project Project
+	err = db.(*database.DB).QueryRow(
+		"SELECT id, name, owner_id FROM projects WHERE id = $1",
+		req.ProjectID,
+	).Scan(&project.ID, &project.Name, &project.OwnerID)
+
 	if err != nil {
 		c.JSON(http.StatusNotFound, gin.H{"error": "Project not found"})
 		return
 	}
 
 	// Check if user owns the project
-	if project.OwnerID.String() != userID.(string) && !contextIsAdmin(c) {
+	if project.OwnerID != userID.(string) && !contextIsAdmin(c) {
 		c.JSON(http.StatusForbidden, gin.H{"error": "Access denied"})
 		return
 	}
 
 	// Check if service exists and belongs to the project
-	service, err := q.GetServiceTypeBrief(ctx, sqlcdb.GetServiceTypeBriefParams{
-		ID: req.ServiceID, ProjectID: req.ProjectID})
+	var service Service
+	err = db.(*database.DB).QueryRow(
+		"SELECT id, name, COALESCE(type, service_type, '') FROM services WHERE id = $1 AND project_id = $2",
+		req.ServiceID, req.ProjectID,
+	).Scan(&service.ID, &service.Name, &service.Type)
+
 	if err != nil {
 		c.JSON(http.StatusNotFound, gin.H{"error": "Service not found or doesn't belong to this project"})
 		return
 	}
 
 	// Check if preview environment already exists for this branch and service
-	count, err := q.CountActivePreviewsForBranch(ctx, sqlcdb.CountActivePreviewsForBranchParams{
-		ServiceID: req.ServiceID, BranchName: req.BranchName})
+	var count int
+	err = db.(*database.DB).QueryRow(
+		"SELECT COUNT(*) FROM preview_environments WHERE service_id = $1 AND branch_name = $2 AND status NOT IN ('expired', 'stopped')",
+		req.ServiceID, req.BranchName,
+	).Scan(&count)
+
 	if err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to check existing preview environment"})
 		return
 	}
+
 	if count > 0 {
 		c.JSON(http.StatusConflict, gin.H{"error": "Preview environment already exists for this branch and service"})
 		return
@@ -258,23 +237,29 @@ func handleCreatePreviewEnvironment(c *gin.Context) {
 
 	// The clone's branch override is what makes it a preview — everything
 	// else (env vars, volumes, builder, resources) stays identical.
-	if err := q.UpdateServicePreviewBranch(ctx, sqlcdb.UpdateServicePreviewBranchParams{
-		GitBranch: sql.NullString{String: req.BranchName, Valid: true}, ID: cloneID}); err != nil {
-		_ = q.DeleteServiceByID(ctx, cloneID)
+	if _, err := db.(*database.DB).Exec(
+		`UPDATE services SET git_branch = $1, domain = '', updated_at = NOW() WHERE id = $2`,
+		req.BranchName, cloneID,
+	); err != nil {
+		_, _ = db.(*database.DB).Exec(`DELETE FROM services WHERE id = $1`, cloneID)
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to configure preview service"})
 		return
 	}
 	// Cloned service_domains would collide with the parent's Traefik
 	// router — previews get their own hostname or none.
-	if err := q.DeleteAllServiceDomains(ctx, cloneID); err != nil {
-		_ = q.DeleteServiceByID(ctx, cloneID)
+	if _, err := db.(*database.DB).Exec(
+		`DELETE FROM service_domains WHERE service_id = $1`, cloneID,
+	); err != nil {
+		_, _ = db.(*database.DB).Exec(`DELETE FROM services WHERE id = $1`, cloneID)
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to configure preview domains"})
 		return
 	}
 	previewHost := resolvePreviewHost(db.(*database.DB), cloneID, envName)
 	if previewHost != "" {
-		_ = q.CreatePreviewDomain(ctx, sqlcdb.CreatePreviewDomainParams{
-			ServiceID: cloneID, Domain: previewHost})
+		_, _ = db.(*database.DB).Exec(
+			`INSERT INTO service_domains (service_id, domain, is_default, cert_type) VALUES ($1, $2, true, 'tls')`,
+			cloneID, previewHost,
+		)
 	}
 
 	expiresAt := time.Now().Add(time.Duration(ttlHours) * time.Hour)
@@ -294,36 +279,30 @@ func handleCreatePreviewEnvironment(c *gin.Context) {
 		env.URL = "https://" + previewHost
 	}
 
-	err = q.CreatePreviewEnvironment(ctx, sqlcdb.CreatePreviewEnvironmentParams{
-		ID:               env.ID,
-		ProjectID:        env.ProjectID,
-		ServiceID:        env.ServiceID,
-		PreviewServiceID: uuid.NullUUID{UUID: cloneID, Valid: true},
-		BranchName:       env.BranchName,
-		PrNumber:         prNumberSQL(env.PRNumber),
-		Environment:      env.Environment,
-		Status:           env.Status,
-		Url:              sql.NullString{String: env.URL, Valid: env.URL != ""},
-		ExpiresAt:        *env.ExpiresAt,
-		CreatedAt:        sql.NullTime{Time: env.CreatedAt, Valid: true},
-		UpdatedAt:        sql.NullTime{Time: env.UpdatedAt, Valid: true},
-	})
+	_, err = db.(*database.DB).Exec(
+		`INSERT INTO preview_environments
+			(id, project_id, service_id, preview_service_id, branch_name, pr_number, environment,
+			 status, url, expires_at, created_at, updated_at)
+			VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12)`,
+		env.ID, env.ProjectID, env.ServiceID, cloneID, env.BranchName, env.PRNumber,
+		env.Environment, env.Status, env.URL, env.ExpiresAt, env.CreatedAt, env.UpdatedAt,
+	)
 	if err != nil {
-		_ = q.DeleteServiceByID(ctx, cloneID)
+		_, _ = db.(*database.DB).Exec(`DELETE FROM services WHERE id = $1`, cloneID)
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to create preview environment"})
 		return
 	}
 
 	deploymentID := uuid.New()
-	err = q.InsertPendingDeployment(ctx, sqlcdb.InsertPendingDeploymentParams{
-		ID:         deploymentID,
-		ServiceID:  cloneID,
-		Version:    "preview-" + env.Environment,
-		CommitHash: sql.NullString{String: req.BranchName, Valid: true},
-	})
+	_, err = db.(*database.DB).Exec(
+		`INSERT INTO deployments
+			(id, service_id, version, commit_hash, status, created_at, updated_at)
+		 VALUES ($1, $2, $3, $4, 'pending', NOW(), NOW())`,
+		deploymentID, cloneID, "preview-"+env.Environment, req.BranchName,
+	)
 	if err != nil {
-		_ = q.DeletePreviewEnvironment(ctx, env.ID)
-		_ = q.DeleteServiceByID(ctx, cloneID)
+		_, _ = db.(*database.DB).Exec(`DELETE FROM preview_environments WHERE id = $1`, env.ID)
+		_, _ = db.(*database.DB).Exec(`DELETE FROM services WHERE id = $1`, cloneID)
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to provision preview deployment"})
 		return
 	}
@@ -370,20 +349,43 @@ func handleGetPreviewEnvironment(c *gin.Context) {
 
 	// Public when the parent project is approved; otherwise owner/member/admin.
 	userID := optionalUserUUID(c)
-	r, err := sqlcdb.New(db.(*database.DB).DB).GetPreviewEnvironment(
-		c.Request.Context(), sqlcdb.GetPreviewEnvironmentParams{
-			ID: envID, OwnerID: userID, Column3: contextIsAdmin(c)})
+	var env PreviewEnvironment
+	var serviceID sql.NullString
+	var serviceName sql.NullString
+	var serviceType sql.NullString
+	err = db.(*database.DB).QueryRow(
+		`SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.pr_number,
+				pe.environment, pe.status, pe.url, pe.expires_at, pe.created_at, pe.updated_at,
+				s.id as service_id, s.name as service_name, s.type as service_type
+			FROM preview_environments pe
+			LEFT JOIN services s ON pe.service_id = s.id
+			JOIN projects p ON pe.project_id = p.id
+			WHERE pe.id = $1 AND (p.is_approved OR p.owner_id = $2 OR $3::bool
+				OR EXISTS (SELECT 1 FROM project_members pm WHERE pm.project_id = p.id AND pm.user_id = $2))`,
+		envID, userID, contextIsAdmin(c),
+	).Scan(
+		&env.ID, &env.ProjectID, &env.ServiceID, &env.PreviewServiceID, &env.BranchName, &env.PRNumber,
+		&env.Environment, &env.Status, &env.URL, &env.ExpiresAt, &env.CreatedAt, &env.UpdatedAt,
+		&serviceID, &serviceName, &serviceType,
+	)
+
 	if err != nil {
 		c.JSON(http.StatusNotFound, gin.H{"error": "Preview environment not found"})
 		return
 	}
-	env := previewFromRow(previewRowShape{
-		ID: r.ID, ProjectID: r.ProjectID, ServiceID: r.ServiceID,
-		PreviewServiceID: r.PreviewServiceID, BranchName: r.BranchName,
-		PrNumber: r.PrNumber, Environment: r.Environment, Status: r.Status,
-		Url: r.Url, ExpiresAt: r.ExpiresAt, CreatedAt: r.CreatedAt, UpdatedAt: r.UpdatedAt,
-		SvcID: r.SvcID, ServiceName: r.ServiceName, ServiceType: r.ServiceType,
-	})
+
+	// Populate service info if available
+	if serviceID.Valid {
+		parsedServiceID, parseErr := uuid.Parse(serviceID.String)
+		if parseErr == nil {
+			env.Service = &Service{
+				ID:   parsedServiceID,
+				Name: serviceName.String,
+				Type: serviceType.String,
+			}
+		}
+	}
+
 	c.JSON(http.StatusOK, gin.H{"preview_environment": env})
 }
 
@@ -416,21 +418,24 @@ func handleUpdatePreviewEnvironment(c *gin.Context) {
 	}
 
 	// Check if preview environment exists and user has access
-	uid, _ := uuid.Parse(fmt.Sprint(userID))
-	q := sqlcdb.New(db.(*database.DB).DB)
-	r, err := q.GetPreviewEnvironmentForWrite(
-		c.Request.Context(), sqlcdb.GetPreviewEnvironmentForWriteParams{
-			ID: envID, OwnerID: uid, Column3: contextIsAdmin(c)})
+	var existingEnv PreviewEnvironment
+	err = db.(*database.DB).QueryRow(
+		`SELECT pe.id, pe.project_id, pe.service_id, pe.branch_name, pe.pr_number, 
+				pe.environment, pe.status, pe.url, pe.expires_at, pe.created_at, pe.updated_at
+			FROM preview_environments pe
+			JOIN projects p ON pe.project_id = p.id
+			WHERE pe.id = $1 AND (p.owner_id = $2 OR $3::bool)`,
+		envID, userID, contextIsAdmin(c),
+	).Scan(
+		&existingEnv.ID, &existingEnv.ProjectID, &existingEnv.ServiceID, &existingEnv.BranchName,
+		&existingEnv.PRNumber, &existingEnv.Environment, &existingEnv.Status, &existingEnv.URL,
+		&existingEnv.ExpiresAt, &existingEnv.CreatedAt, &existingEnv.UpdatedAt,
+	)
+
 	if err != nil {
 		c.JSON(http.StatusNotFound, gin.H{"error": "Preview environment not found"})
 		return
 	}
-	existingEnv := previewFromRow(previewRowShape{
-		ID: r.ID, ProjectID: r.ProjectID, ServiceID: r.ServiceID,
-		BranchName: r.BranchName, PrNumber: r.PrNumber, Environment: r.Environment,
-		Status: r.Status, Url: r.Url, ExpiresAt: r.ExpiresAt,
-		CreatedAt: r.CreatedAt, UpdatedAt: r.UpdatedAt,
-	})
 
 	// Update fields if provided
 	if req.Status != "" {
@@ -450,17 +455,12 @@ func handleUpdatePreviewEnvironment(c *gin.Context) {
 	existingEnv.UpdatedAt = time.Now()
 
 	// Update preview environment in database
-	expiresAt := time.Time{}
-	if existingEnv.ExpiresAt != nil {
-		expiresAt = *existingEnv.ExpiresAt
-	}
-	err = q.UpdatePreviewEnvironment(c.Request.Context(), sqlcdb.UpdatePreviewEnvironmentParams{
-		Status:    existingEnv.Status,
-		Url:       sql.NullString{String: existingEnv.URL, Valid: existingEnv.URL != ""},
-		ExpiresAt: expiresAt,
-		UpdatedAt: sql.NullTime{Time: existingEnv.UpdatedAt, Valid: true},
-		ID:        existingEnv.ID,
-	})
+	_, err = db.(*database.DB).Exec(
+		`UPDATE preview_environments 
+			SET status = $1, url = $2, expires_at = $3, updated_at = $4
+			WHERE id = $5`,
+		existingEnv.Status, existingEnv.URL, existingEnv.ExpiresAt, existingEnv.UpdatedAt, existingEnv.ID,
+	)
 
 	if err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to update preview environment"})
@@ -492,34 +492,46 @@ func handleDeletePreviewEnvironment(c *gin.Context) {
 		return
 	}
 
-	ctx := c.Request.Context()
-	q := sqlcdb.New(db.(*database.DB).DB)
-
 	// Check if preview environment exists and user has access
-	projectOwnerID, err := q.GetPreviewEnvironmentOwner(ctx, envID)
+	var projectOwnerID string
+	err = db.(*database.DB).QueryRow(
+		`SELECT p.owner_id 
+			FROM preview_environments pe
+			JOIN projects p ON pe.project_id = p.id
+			WHERE pe.id = $1`,
+		envID,
+	).Scan(&projectOwnerID)
+
 	if err != nil {
 		c.JSON(http.StatusNotFound, gin.H{"error": "Preview environment not found"})
 		return
 	}
 
 	// Check if user owns the project
-	if projectOwnerID.String() != userID.(string) && !contextIsAdmin(c) {
+	if projectOwnerID != userID.(string) && !contextIsAdmin(c) {
 		c.JSON(http.StatusForbidden, gin.H{"error": "Access denied"})
 		return
 	}
 
 	// Tear down the clone's runtime and row — the preview is the clone.
-	if cloneID, err := q.GetPreviewServiceID(ctx, envID); err == nil && cloneID.Valid {
+	var cloneID *uuid.UUID
+	_ = db.(*database.DB).QueryRow(
+		`SELECT preview_service_id FROM preview_environments WHERE id = $1`, envID,
+	).Scan(&cloneID)
+	if cloneID != nil {
 		if engineValue, exists := c.Get("deployment_engine"); exists && engineValue != nil {
 			if engine, ok := engineValue.(*deployment.DeploymentEngine); ok {
-				removeServiceRuntime(ctx, db.(*database.DB), engine, cloneID.UUID)
+				removeServiceRuntime(c.Request.Context(), db.(*database.DB), engine, *cloneID)
 			}
 		}
-		_ = q.DeleteServiceByID(ctx, cloneID.UUID)
+		_, _ = db.(*database.DB).Exec(`DELETE FROM services WHERE id = $1`, *cloneID)
 	}
 
 	// Delete preview environment
-	err = q.DeletePreviewEnvironment(ctx, envID)
+	_, err = db.(*database.DB).Exec(
+		"DELETE FROM preview_environments WHERE id = $1",
+		envID,
+	)
 
 	if err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to delete preview environment"})
@@ -557,30 +569,22 @@ func handlePromotePreviewEnvironment(c *gin.Context) {
 		return
 	}
 
-	ctx := c.Request.Context()
-	q := sqlcdb.New(db.(*database.DB).DB)
-
 	// Get preview environment details
-	uid, _ := uuid.Parse(fmt.Sprint(userID))
-	r, err := q.GetPreviewEnvironmentForPromote(
-		ctx, sqlcdb.GetPreviewEnvironmentForPromoteParams{
-			ID: envID, OwnerID: uid, Column3: contextIsAdmin(c)})
+	var env PreviewEnvironment
+	err = db.(*database.DB).QueryRow(
+		`SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.environment, pe.status
+			FROM preview_environments pe
+			JOIN projects p ON pe.project_id = p.id
+			WHERE pe.id = $1 AND (p.owner_id = $2 OR $3::bool)`,
+		envID, userID, contextIsAdmin(c),
+	).Scan(
+		&env.ID, &env.ProjectID, &env.ServiceID, &env.PreviewServiceID, &env.BranchName, &env.Environment, &env.Status,
+	)
+
 	if err != nil {
 		c.JSON(http.StatusNotFound, gin.H{"error": "Preview environment not found"})
 		return
 	}
-	env := PreviewEnvironment{
-		ID:          r.ID,
-		ProjectID:   r.ProjectID,
-		ServiceID:   r.ServiceID,
-		BranchName:  r.BranchName,
-		Environment: r.Environment,
-		Status:      r.Status,
-	}
-	if r.PreviewServiceID.Valid {
-		id := r.PreviewServiceID.UUID
-		env.PreviewServiceID = &id
-	}
 
 	// Check if preview environment is in a state that can be promoted
 	if env.Status != "running" {
@@ -592,12 +596,11 @@ func handlePromotePreviewEnvironment(c *gin.Context) {
 	// branch onto its own deployment track.
 	deploymentID := uuid.New()
 	promotionVersion := fmt.Sprintf("promote-%s-%d", strings.ReplaceAll(env.BranchName, "/", "-"), time.Now().Unix())
-	err = q.InsertPendingDeployment(ctx, sqlcdb.InsertPendingDeploymentParams{
-		ID:         deploymentID,
-		ServiceID:  env.ServiceID,
-		Version:    promotionVersion,
-		CommitHash: sql.NullString{String: env.BranchName, Valid: true},
-	})
+	_, err = db.(*database.DB).Exec(
+		`INSERT INTO deployments (id, service_id, version, commit_hash, status, created_at, updated_at)
+		 VALUES ($1, $2, $3, $4, 'pending', NOW(), NOW())`,
+		deploymentID, env.ServiceID, promotionVersion, env.BranchName,
+	)
 	if err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to create promotion deployment"})
 		return
@@ -625,14 +628,18 @@ func handlePromotePreviewEnvironment(c *gin.Context) {
 	if env.PreviewServiceID != nil {
 		if engineValue, exists := c.Get("deployment_engine"); exists && engineValue != nil {
 			if engine, ok := engineValue.(*deployment.DeploymentEngine); ok {
-				removeServiceRuntime(ctx, db.(*database.DB), engine, *env.PreviewServiceID)
+				removeServiceRuntime(c.Request.Context(), db.(*database.DB), engine, *env.PreviewServiceID)
 			}
 		}
-		_ = q.DeleteServiceByID(ctx, *env.PreviewServiceID)
+		_, _ = db.(*database.DB).Exec(`DELETE FROM services WHERE id = $1`, *env.PreviewServiceID)
 	}
 
-	if err := q.MarkPreviewEnvironmentStatus(ctx, sqlcdb.MarkPreviewEnvironmentStatusParams{
-		Status: "stopped", ID: env.ID}); err != nil {
+	if _, err := db.(*database.DB).Exec(
+		`UPDATE preview_environments
+		 SET status = 'stopped', updated_at = NOW()
+		 WHERE id = $1`,
+		env.ID,
+	); err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to update preview environment status"})
 		return
 	}
@@ -675,27 +682,28 @@ func handleCleanupExpiredPreviewEnvironments(c *gin.Context) {
 		return
 	}
 
-	ctx := c.Request.Context()
-	q := sqlcdb.New(db.(*database.DB).DB)
-	uid, _ := uuid.Parse(fmt.Sprint(userID))
-
 	// Find expired preview environments for user's projects
-	rows, err := q.ListExpiredPreviewsForUser(ctx, sqlcdb.ListExpiredPreviewsForUserParams{
-		OwnerID: uid, Column2: contextIsAdmin(c)})
+	rows, err := db.(*database.DB).Query(
+		`SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.environment
+			FROM preview_environments pe
+			JOIN projects p ON pe.project_id = p.id
+			WHERE (p.owner_id = $1 OR $2::bool) AND pe.expires_at < NOW() AND pe.status != 'expired'`,
+		userID, contextIsAdmin(c),
+	)
 	if err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to find expired preview environments"})
 		return
 	}
+	defer rows.Close()
 
-	expiredEnvs := make([]PreviewEnvironment, 0, len(rows))
-	for _, r := range rows {
-		env := PreviewEnvironment{
-			ID: r.ID, ProjectID: r.ProjectID, ServiceID: r.ServiceID,
-			BranchName: r.BranchName, Environment: r.Environment,
-		}
-		if r.PreviewServiceID.Valid {
-			id := r.PreviewServiceID.UUID
-			env.PreviewServiceID = &id
+	var expiredEnvs []PreviewEnvironment
+	for rows.Next() {
+		var env PreviewEnvironment
+		err := rows.Scan(
+			&env.ID, &env.ProjectID, &env.ServiceID, &env.PreviewServiceID, &env.BranchName, &env.Environment,
+		)
+		if err != nil {
+			continue
 		}
 		expiredEnvs = append(expiredEnvs, env)
 	}
@@ -703,17 +711,20 @@ func handleCleanupExpiredPreviewEnvironments(c *gin.Context) {
 	// Mark expired environments as expired and tear down their clones
 	cleanupCount := 0
 	for _, env := range expiredEnvs {
-		if err := q.MarkPreviewEnvironmentStatus(ctx, sqlcdb.MarkPreviewEnvironmentStatusParams{
-			Status: "expired", ID: env.ID}); err != nil {
+		_, err := db.(*database.DB).Exec(
+			"UPDATE preview_environments SET status = 'expired', updated_at = NOW() WHERE id = $1",
+			env.ID,
+		)
+		if err != nil {
 			continue
 		}
 		if env.PreviewServiceID != nil {
 			if engineValue, exists := c.Get("deployment_engine"); exists && engineValue != nil {
 				if engine, ok := engineValue.(*deployment.DeploymentEngine); ok {
-					removeServiceRuntime(ctx, db.(*database.DB), engine, *env.PreviewServiceID)
+					removeServiceRuntime(c.Request.Context(), db.(*database.DB), engine, *env.PreviewServiceID)
 				}
 			}
-			_ = q.DeleteServiceByID(ctx, *env.PreviewServiceID)
+			_, _ = db.(*database.DB).Exec(`DELETE FROM services WHERE id = $1`, *env.PreviewServiceID)
 		}
 		cleanupCount++
 	}
@@ -743,13 +754,15 @@ func resolvePreviewHost(db *database.DB, cloneID uuid.UUID, envName string) stri
 	if label == "" {
 		return ""
 	}
-	q := sqlcdb.New(db.DB)
-	ctx := context.Background()
-	brief, err := q.GetServicePlacementBrief(ctx, cloneID)
-	if err != nil {
+	var nodeID sql.NullString
+	var spread bool
+	if err := db.QueryRow(
+		`SELECT node_id, COALESCE(spread, false) FROM services WHERE id = $1`, cloneID,
+	).Scan(&nodeID, &spread); err != nil {
 		return ""
 	}
-	nodeID, spread := brief.NodeID, brief.Spread
+	q := sqlcdb.New(db.DB)
+	ctx := context.Background()
 	var base string
 	switch {
 	case nodeID.Valid && nodeID.String != "":
@@ -776,22 +789,30 @@ func resolvePreviewHost(db *database.DB, cloneID uuid.UUID, envName string) stri
 // loadServiceForDeploy hydrates the Service fields runDeploymentAndSync
 // needs — mirrors the loader in handleDeployService.
 func loadServiceForDeploy(db *database.DB, serviceID uuid.UUID) (Service, error) {
-	r, err := sqlcdb.New(db.DB).GetServiceForDeploy(context.Background(), serviceID)
-	if err != nil {
-		return Service{}, err
-	}
-	return Service{
-		ID: r.ID, ProjectID: r.ProjectID, Name: r.Name, Type: r.Type.String,
-		Status: r.Status.String, Image: r.Image.String, Command: r.Command.String,
-		Environment: r.Environment.String, GitRepo: r.GitRepo.String,
-		GitBranch: r.GitBranch.String, BuildPath: r.BuildPath.String,
-		CPU: r.Cpu.String, Memory: r.Memory.String,
-		Replicas: int(r.Replicas), Port: int(r.Port), Domain: r.Domain,
-		HealthCheckPath: r.HealthcheckPath, RestartPolicy: r.RestartPolicy,
-		Builder: r.Builder, CPUReserve: r.CpuReserve, MemoryReserve: r.MemoryReserve,
-		StaticBuildCmd: r.StaticBuildCmd, StaticDir: r.StaticDir,
-		CreatedAt: r.CreatedAt.Time, UpdatedAt: r.UpdatedAt.Time,
-	}, nil
+	var service Service
+	err := db.QueryRow(
+		`SELECT s.id, s.project_id, s.name, s.type, s.status, s.image, s.command,
+		        s.environment, s.git_repo, s.git_branch, s.build_path, s.cpu, s.memory,
+		        COALESCE(s.replicas, 1), COALESCE(s.port, 0),
+		        COALESCE(s.domain, ''), COALESCE(s.healthcheck_path, ''),
+		        COALESCE(s.restart_policy, 'unless-stopped'),
+		        COALESCE(s.builder, 'auto'), COALESCE(s.cpu_reserve, ''),
+		        COALESCE(s.memory_reserve, ''), COALESCE(s.static_build_cmd, ''),
+		        COALESCE(s.static_dir, ''),
+		        s.created_at, s.updated_at
+		 FROM services s
+		 WHERE s.id = $1`,
+		serviceID,
+	).Scan(
+		&service.ID, &service.ProjectID, &service.Name, &service.Type, &service.Status,
+		&service.Image, &service.Command, &service.Environment, &service.GitRepo,
+		&service.GitBranch, &service.BuildPath, &service.CPU, &service.Memory,
+		&service.Replicas, &service.Port, &service.Domain, &service.HealthCheckPath,
+		&service.RestartPolicy, &service.Builder, &service.CPUReserve,
+		&service.MemoryReserve, &service.StaticBuildCmd, &service.StaticDir,
+		&service.CreatedAt, &service.UpdatedAt,
+	)
+	return service, err
 }
 
 // StartPreviewSweeper expires preview environments past their TTL — tears
@@ -817,27 +838,54 @@ func StartPreviewSweeper(ctx context.Context, db *database.DB, engine *deploymen
 
 // sweepExpiredPreviews retires previews whose TTL elapsed.
 func sweepExpiredPreviews(ctx context.Context, db *database.DB, engine *deployment.DeploymentEngine) {
-	q := sqlcdb.New(db.DB)
-	rows, err := q.ListSweepablePreviews(ctx)
+	rows, err := db.QueryContext(ctx,
+		`SELECT id, preview_service_id FROM preview_environments
+		 WHERE expires_at < NOW() AND status NOT IN ('expired', 'stopped')`)
 	if err != nil {
 		return
 	}
 	var ids []uuid.UUID
-	for _, r := range rows {
-		ids = append(ids, r.ID)
-		if r.PreviewServiceID.Valid {
-			removeServiceRuntime(ctx, db, engine, r.PreviewServiceID.UUID)
-			_ = q.DeleteServiceByID(ctx, r.PreviewServiceID.UUID)
+	var clones []uuid.UUID
+	for rows.Next() {
+		var id uuid.UUID
+		var cloneID *uuid.UUID
+		if err := rows.Scan(&id, &cloneID); err == nil {
+			ids = append(ids, id)
+			if cloneID != nil {
+				clones = append(clones, *cloneID)
 			}
 		}
+	}
+	rows.Close()
+	for _, cloneID := range clones {
+		removeServiceRuntime(ctx, db, engine, cloneID)
+		_, _ = db.ExecContext(ctx, `DELETE FROM services WHERE id = $1`, cloneID)
+	}
 	for _, id := range ids {
-		_ = q.MarkPreviewEnvironmentStatus(ctx, sqlcdb.MarkPreviewEnvironmentStatusParams{
-			Status: "expired", ID: id})
+		_, _ = db.ExecContext(ctx,
+			`UPDATE preview_environments SET status = 'expired', updated_at = NOW() WHERE id = $1`, id)
 	}
 }
 
 // syncPreviewStatuses folds the clone's live service status into the
 // preview row so list/detail endpoints reflect the real deploy state.
 func syncPreviewStatuses(ctx context.Context, db *database.DB) {
-	_ = sqlcdb.New(db.DB).SyncPreviewStatuses(ctx)
+	_, _ = db.ExecContext(ctx, `
+		UPDATE preview_environments pe
+		SET status = derived.st, updated_at = NOW()
+		FROM (
+			SELECT pe2.id,
+				CASE
+					WHEN s.status IN ('running', 'deployed') THEN 'running'
+					WHEN s.status IN ('failed', 'error') THEN 'failed'
+					WHEN s.status IN ('building', 'deploying', 'queued', 'pending', 'cloning') THEN 'building'
+					ELSE pe2.status
+				END AS st
+			FROM preview_environments pe2
+			JOIN services s ON pe2.preview_service_id = s.id
+		) derived
+		WHERE pe.id = derived.id
+		  AND pe.status IN ('building', 'running', 'failed')
+		  AND pe.status <> derived.st
+	`)
 }

app/backend/internal/api/service_ops.go

@@ -1,14 +1,11 @@
 package api
 
 import (
-	"context"
-	"database/sql"
 	"net/http"
 	"strings"
 	"time"
 
 	"containr/internal/database"
-	"containr/internal/database/sqlcdb"
 
 	"github.com/gin-gonic/gin"
 	"github.com/google/uuid"
@@ -56,8 +53,11 @@ func handleCloneService(c *gin.Context) {
 	if name == "" {
 		name = source.Name + "-copy"
 	}
-	count, _ := sqlcdb.New(db.(*database.DB).DB).CountServicesByName(
-		c.Request.Context(), sqlcdb.CountServicesByNameParams{ProjectID: targetProjectID, Name: name})
+	var count int
+	_ = db.(*database.DB).QueryRow(
+		`SELECT COUNT(*) FROM services WHERE project_id = $1 AND name = $2`,
+		targetProjectID, name,
+	).Scan(&count)
 	if count > 0 {
 		c.JSON(http.StatusConflict, gin.H{"error": "Service name already exists in target project", "code": "CONFLICT"})
 		return
@@ -84,11 +84,8 @@ func handleCloneService(c *gin.Context) {
 // inherits the source's. Used by the clone endpoint and preview
 // environments, which additionally override git_branch and domains.
 func cloneServiceRow(db *database.DB, sourceID uuid.UUID, targetProjectID uuid.UUID, name, environment string) (uuid.UUID, error) {
-	ctx := context.Background()
-	q := sqlcdb.New(db.DB)
-
-	sourceEnv, err := q.GetServiceEnvironment(ctx, sourceID)
-	if err != nil {
+	var sourceEnv string
+	if err := db.QueryRow(`SELECT COALESCE(environment, '') FROM services WHERE id = $1`, sourceID).Scan(&sourceEnv); err != nil {
 		return uuid.Nil, err
 	}
 	if environment == "" {
@@ -105,31 +102,46 @@ func cloneServiceRow(db *database.DB, sourceID uuid.UUID, targetProjectID uuid.U
 	maintenance, basicAuth := serviceAccess(db, sourceID)
 	newID := uuid.New()
 	now := time.Now()
+	// string() so pq sends text — []byte would go as bytea and fail ::jsonb.
+	volumesJSON := string(loadServiceVolumesJSON(db, sourceID))
 
-	err = q.CloneServiceRow(ctx, sqlcdb.CloneServiceRowParams{
-		ID:              newID,
-		ProjectID:       targetProjectID,
-		Name:            name,
-		EnvironmentID:   environmentID,
-		Environment:     sql.NullString{String: environment, Valid: true},
-		MaintenanceMode: maintenance,
-		BasicAuthUsers:  basicAuth,
-		CreatedAt:       sql.NullTime{Time: now, Valid: true},
-		ID_2:            sourceID,
-	})
+	_, err = db.Exec(
+		`INSERT INTO services
+			(id, project_id, name, environment_id, service_type, source_type, source_url, image_name,
+				 build_command, start_command, type, status, image, command, environment,
+				 git_repo, git_branch, build_path, cpu, memory, replicas, port, domain,
+				 healthcheck_path, restart_policy, volumes, maintenance_mode, basic_auth_users,
+				 builder, cpu_reserve, memory_reserve, static_build_cmd, static_dir,
+				 created_at, updated_at)
+			SELECT $1, $2, $3, $4, service_type, source_type, source_url, image_name,
+				 build_command, start_command, type, 'stopped', image, command, $5,
+				 git_repo, git_branch, build_path, cpu, memory, replicas, port, domain,
+				 healthcheck_path, restart_policy, $6::jsonb, $7, $8,
+				 builder, cpu_reserve, memory_reserve, static_build_cmd, static_dir,
+				 $9, $9
+			FROM services WHERE id = $10`,
+		newID, targetProjectID, name, environmentID, environment, volumesJSON,
+		maintenance, basicAuth, now, sourceID,
+	)
 	if err != nil {
 		return uuid.Nil, err
 	}
 
-	if err := q.CloneServiceDomains(ctx, sqlcdb.CloneServiceDomainsParams{
-		ServiceID: newID, ServiceID_2: sourceID}); err != nil {
-		_ = q.DeleteServiceByID(ctx, newID)
+	if _, err := db.Exec(
+		`INSERT INTO service_domains (service_id, domain, is_default, cert_type)
+		 SELECT $1, domain, is_default, cert_type FROM service_domains WHERE service_id = $2`,
+		newID, sourceID,
+	); err != nil {
+		_, _ = db.Exec(`DELETE FROM services WHERE id = $1`, newID)
 		return uuid.Nil, err
 	}
 	// Variable values are copied as stored — ciphertext stays ciphertext.
-	if err := q.CloneServiceVariables(ctx, sqlcdb.CloneServiceVariablesParams{
-		ServiceID: newID, ServiceID_2: sourceID}); err != nil {
-		_ = q.DeleteServiceByID(ctx, newID)
+	if _, err := db.Exec(
+		`INSERT INTO environment_variables (id, service_id, key, value, is_secret)
+		 SELECT gen_random_uuid(), $1, key, value, is_secret FROM environment_variables WHERE service_id = $2`,
+		newID, sourceID,
+	); err != nil {
+		_, _ = db.Exec(`DELETE FROM services WHERE id = $1`, newID)
 		return uuid.Nil, err
 	}
 	return newID, nil
@@ -175,8 +187,11 @@ func handleMoveService(c *gin.Context) {
 		return
 	}
 
-	count, _ := sqlcdb.New(db.(*database.DB).DB).CountServicesByName(
-		c.Request.Context(), sqlcdb.CountServicesByNameParams{ProjectID: req.ProjectID, Name: service.Name})
+	var count int
+	_ = db.(*database.DB).QueryRow(
+		`SELECT COUNT(*) FROM services WHERE project_id = $1 AND name = $2`,
+		req.ProjectID, service.Name,
+	).Scan(&count)
 	if count > 0 {
 		c.JSON(http.StatusConflict, gin.H{"error": "A service with this name already exists in the target project", "code": "CONFLICT"})
 		return
@@ -192,18 +207,15 @@ func handleMoveService(c *gin.Context) {
 		return
 	}
 
-	n, err := sqlcdb.New(db.(*database.DB).DB).MoveServiceProject(
-		c.Request.Context(), sqlcdb.MoveServiceProjectParams{
-			ProjectID:     req.ProjectID,
-			EnvironmentID: environmentID,
-			UpdatedAt:     sql.NullTime{Time: time.Now(), Valid: true},
-			ID:            serviceID,
-		})
+	res, err := db.(*database.DB).Exec(
+		`UPDATE services SET project_id = $1, environment_id = $2, updated_at = $3 WHERE id = $4`,
+		req.ProjectID, environmentID, time.Now(), serviceID,
+	)
 	if err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to move service"})
 		return
 	}
-	if n == 0 {
+	if n, _ := res.RowsAffected(); n == 0 {
 		c.JSON(http.StatusNotFound, gin.H{"error": "Service not found", "code": "NOT_FOUND"})
 		return
 	}
@@ -217,10 +229,16 @@ func ownsProject(db *database.DB, projectID uuid.UUID, userID string, isAdmin bo
 	if isAdmin {
 		return true
 	}
-	uid, err := uuid.Parse(userID)
-	if err != nil {
-		return false
+	var owner string
+	err := db.QueryRow(`SELECT owner_id FROM projects WHERE id = $1`, projectID).Scan(&owner)
+	return err == nil && owner == userID
+}
+
+// loadServiceVolumesJSON returns the raw stored mounts for a verbatim copy.
+func loadServiceVolumesJSON(db *database.DB, serviceID uuid.UUID) []byte {
+	var raw []byte
+	if err := db.QueryRow(`SELECT volumes FROM services WHERE id = $1`, serviceID).Scan(&raw); err != nil || len(raw) == 0 {
+		return []byte("[]")
 	}
-	owner, err := sqlcdb.New(db.DB).GetProjectOwner(context.Background(), projectID)
-	return err == nil && owner == uid
+	return raw
 }

app/backend/internal/database/sqlcdb/models.go

@@ -138,20 +138,9 @@ type DatabaseService struct {
 type Deployment struct {
 	ID        uuid.UUID      `json:"id"`
 	ServiceID uuid.UUID      `json:"service_id"`
-	Version       string         `json:"version"`
-	CommitHash    sql.NullString `json:"commit_hash"`
-	ImageDigest   sql.NullString `json:"image_digest"`
 	Status    sql.NullString `json:"status"`
-	BuildLog      sql.NullString `json:"build_log"`
-	DeploymentLog sql.NullString `json:"deployment_log"`
-	StartedAt     sql.NullTime   `json:"started_at"`
-	CompletedAt   sql.NullTime   `json:"completed_at"`
 	CreatedAt sql.NullTime   `json:"created_at"`
 	UpdatedAt sql.NullTime   `json:"updated_at"`
-	ImageName     sql.NullString `json:"image_name"`
-	ImageTag      sql.NullString `json:"image_tag"`
-	RuntimeLog    sql.NullString `json:"runtime_log"`
-	Error         sql.NullString `json:"error"`
 }
 
 type Environment struct {
@@ -285,21 +274,6 @@ type OutboundWebhook struct {
 	UpdatedAt sql.NullTime          `json:"updated_at"`
 }
 
-type PreviewEnvironment struct {
-	ID               uuid.UUID      `json:"id"`
-	ProjectID        uuid.UUID      `json:"project_id"`
-	ServiceID        uuid.UUID      `json:"service_id"`
-	BranchName       string         `json:"branch_name"`
-	PrNumber         sql.NullInt32  `json:"pr_number"`
-	Environment      string         `json:"environment"`
-	Status           string         `json:"status"`
-	Url              sql.NullString `json:"url"`
-	ExpiresAt        time.Time      `json:"expires_at"`
-	CreatedAt        sql.NullTime   `json:"created_at"`
-	UpdatedAt        sql.NullTime   `json:"updated_at"`
-	PreviewServiceID uuid.NullUUID  `json:"preview_service_id"`
-}
-
 type Project struct {
 	ID          uuid.UUID      `json:"id"`
 	Name        string         `json:"name"`

app/backend/internal/database/sqlcdb/preview_environments.sql.go

@@ -1,635 +0,0 @@
-// Code generated by sqlc. DO NOT EDIT.
-// versions:
-//   sqlc v1.31.1
-// source: preview_environments.sql
-
-package sqlcdb
-
-import (
-	"context"
-	"database/sql"
-	"time"
-
-	"github.com/google/uuid"
-)
-
-const countActivePreviewsForBranch = `-- name: CountActivePreviewsForBranch :one
-SELECT COUNT(*) FROM preview_environments
-WHERE service_id = $1 AND branch_name = $2 AND status NOT IN ('expired', 'stopped')
-`
-
-type CountActivePreviewsForBranchParams struct {
-	ServiceID  uuid.UUID `json:"service_id"`
-	BranchName string    `json:"branch_name"`
-}
-
-func (q *Queries) CountActivePreviewsForBranch(ctx context.Context, arg CountActivePreviewsForBranchParams) (int64, error) {
-	row := q.db.QueryRowContext(ctx, countActivePreviewsForBranch, arg.ServiceID, arg.BranchName)
-	var count int64
-	err := row.Scan(&count)
-	return count, err
-}
-
-const createPreviewDomain = `-- name: CreatePreviewDomain :exec
-INSERT INTO service_domains (service_id, domain, is_default, cert_type) VALUES ($1, $2, true, 'tls')
-`
-
-type CreatePreviewDomainParams struct {
-	ServiceID uuid.UUID `json:"service_id"`
-	Domain    string    `json:"domain"`
-}
-
-func (q *Queries) CreatePreviewDomain(ctx context.Context, arg CreatePreviewDomainParams) error {
-	_, err := q.db.ExecContext(ctx, createPreviewDomain, arg.ServiceID, arg.Domain)
-	return err
-}
-
-const createPreviewEnvironment = `-- name: CreatePreviewEnvironment :exec
-INSERT INTO preview_environments
-    (id, project_id, service_id, preview_service_id, branch_name, pr_number, environment,
-     status, url, expires_at, created_at, updated_at)
-VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12)
-`
-
-type CreatePreviewEnvironmentParams struct {
-	ID               uuid.UUID      `json:"id"`
-	ProjectID        uuid.UUID      `json:"project_id"`
-	ServiceID        uuid.UUID      `json:"service_id"`
-	PreviewServiceID uuid.NullUUID  `json:"preview_service_id"`
-	BranchName       string         `json:"branch_name"`
-	PrNumber         sql.NullInt32  `json:"pr_number"`
-	Environment      string         `json:"environment"`
-	Status           string         `json:"status"`
-	Url              sql.NullString `json:"url"`
-	ExpiresAt        time.Time      `json:"expires_at"`
-	CreatedAt        sql.NullTime   `json:"created_at"`
-	UpdatedAt        sql.NullTime   `json:"updated_at"`
-}
-
-func (q *Queries) CreatePreviewEnvironment(ctx context.Context, arg CreatePreviewEnvironmentParams) error {
-	_, err := q.db.ExecContext(ctx, createPreviewEnvironment,
-		arg.ID,
-		arg.ProjectID,
-		arg.ServiceID,
-		arg.PreviewServiceID,
-		arg.BranchName,
-		arg.PrNumber,
-		arg.Environment,
-		arg.Status,
-		arg.Url,
-		arg.ExpiresAt,
-		arg.CreatedAt,
-		arg.UpdatedAt,
-	)
-	return err
-}
-
-const deleteAllServiceDomains = `-- name: DeleteAllServiceDomains :exec
-DELETE FROM service_domains WHERE service_id = $1
-`
-
-func (q *Queries) DeleteAllServiceDomains(ctx context.Context, serviceID uuid.UUID) error {
-	_, err := q.db.ExecContext(ctx, deleteAllServiceDomains, serviceID)
-	return err
-}
-
-const deletePreviewEnvironment = `-- name: DeletePreviewEnvironment :exec
-DELETE FROM preview_environments WHERE id = $1
-`
-
-func (q *Queries) DeletePreviewEnvironment(ctx context.Context, id uuid.UUID) error {
-	_, err := q.db.ExecContext(ctx, deletePreviewEnvironment, id)
-	return err
-}
-
-const getPreviewEnvironment = `-- name: GetPreviewEnvironment :one
-SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.pr_number,
-       pe.environment, pe.status, pe.url, pe.expires_at, pe.created_at, pe.updated_at,
-       s.id AS svc_id, s.name AS service_name, s.type AS service_type
-FROM preview_environments pe
-LEFT JOIN services s ON pe.service_id = s.id
-JOIN projects p ON pe.project_id = p.id
-WHERE pe.id = $1 AND (p.is_approved OR p.owner_id = $2 OR $3::bool
-    OR EXISTS (SELECT 1 FROM project_members pm WHERE pm.project_id = p.id AND pm.user_id = $2))
-`
-
-type GetPreviewEnvironmentParams struct {
-	ID      uuid.UUID `json:"id"`
-	OwnerID uuid.UUID `json:"owner_id"`
-	Column3 bool      `json:"column_3"`
-}
-
-type GetPreviewEnvironmentRow struct {
-	ID               uuid.UUID      `json:"id"`
-	ProjectID        uuid.UUID      `json:"project_id"`
-	ServiceID        uuid.UUID      `json:"service_id"`
-	PreviewServiceID uuid.NullUUID  `json:"preview_service_id"`
-	BranchName       string         `json:"branch_name"`
-	PrNumber         sql.NullInt32  `json:"pr_number"`
-	Environment      string         `json:"environment"`
-	Status           string         `json:"status"`
-	Url              sql.NullString `json:"url"`
-	ExpiresAt        time.Time      `json:"expires_at"`
-	CreatedAt        sql.NullTime   `json:"created_at"`
-	UpdatedAt        sql.NullTime   `json:"updated_at"`
-	SvcID            uuid.NullUUID  `json:"svc_id"`
-	ServiceName      sql.NullString `json:"service_name"`
-	ServiceType      sql.NullString `json:"service_type"`
-}
-
-func (q *Queries) GetPreviewEnvironment(ctx context.Context, arg GetPreviewEnvironmentParams) (GetPreviewEnvironmentRow, error) {
-	row := q.db.QueryRowContext(ctx, getPreviewEnvironment, arg.ID, arg.OwnerID, arg.Column3)
-	var i GetPreviewEnvironmentRow
-	err := row.Scan(
-		&i.ID,
-		&i.ProjectID,
-		&i.ServiceID,
-		&i.PreviewServiceID,
-		&i.BranchName,
-		&i.PrNumber,
-		&i.Environment,
-		&i.Status,
-		&i.Url,
-		&i.ExpiresAt,
-		&i.CreatedAt,
-		&i.UpdatedAt,
-		&i.SvcID,
-		&i.ServiceName,
-		&i.ServiceType,
-	)
-	return i, err
-}
-
-const getPreviewEnvironmentForPromote = `-- name: GetPreviewEnvironmentForPromote :one
-SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.environment, pe.status
-FROM preview_environments pe
-JOIN projects p ON pe.project_id = p.id
-WHERE pe.id = $1 AND (p.owner_id = $2 OR $3::bool)
-`
-
-type GetPreviewEnvironmentForPromoteParams struct {
-	ID      uuid.UUID `json:"id"`
-	OwnerID uuid.UUID `json:"owner_id"`
-	Column3 bool      `json:"column_3"`
-}
-
-type GetPreviewEnvironmentForPromoteRow struct {
-	ID               uuid.UUID     `json:"id"`
-	ProjectID        uuid.UUID     `json:"project_id"`
-	ServiceID        uuid.UUID     `json:"service_id"`
-	PreviewServiceID uuid.NullUUID `json:"preview_service_id"`
-	BranchName       string        `json:"branch_name"`
-	Environment      string        `json:"environment"`
-	Status           string        `json:"status"`
-}
-
-func (q *Queries) GetPreviewEnvironmentForPromote(ctx context.Context, arg GetPreviewEnvironmentForPromoteParams) (GetPreviewEnvironmentForPromoteRow, error) {
-	row := q.db.QueryRowContext(ctx, getPreviewEnvironmentForPromote, arg.ID, arg.OwnerID, arg.Column3)
-	var i GetPreviewEnvironmentForPromoteRow
-	err := row.Scan(
-		&i.ID,
-		&i.ProjectID,
-		&i.ServiceID,
-		&i.PreviewServiceID,
-		&i.BranchName,
-		&i.Environment,
-		&i.Status,
-	)
-	return i, err
-}
-
-const getPreviewEnvironmentForWrite = `-- name: GetPreviewEnvironmentForWrite :one
-SELECT pe.id, pe.project_id, pe.service_id, pe.branch_name, pe.pr_number,
-       pe.environment, pe.status, pe.url, pe.expires_at, pe.created_at, pe.updated_at
-FROM preview_environments pe
-JOIN projects p ON pe.project_id = p.id
-WHERE pe.id = $1 AND (p.owner_id = $2 OR $3::bool)
-`
-
-type GetPreviewEnvironmentForWriteParams struct {
-	ID      uuid.UUID `json:"id"`
-	OwnerID uuid.UUID `json:"owner_id"`
-	Column3 bool      `json:"column_3"`
-}
-
-type GetPreviewEnvironmentForWriteRow struct {
-	ID          uuid.UUID      `json:"id"`
-	ProjectID   uuid.UUID      `json:"project_id"`
-	ServiceID   uuid.UUID      `json:"service_id"`
-	BranchName  string         `json:"branch_name"`
-	PrNumber    sql.NullInt32  `json:"pr_number"`
-	Environment string         `json:"environment"`
-	Status      string         `json:"status"`
-	Url         sql.NullString `json:"url"`
-	ExpiresAt   time.Time      `json:"expires_at"`
-	CreatedAt   sql.NullTime   `json:"created_at"`
-	UpdatedAt   sql.NullTime   `json:"updated_at"`
-}
-
-func (q *Queries) GetPreviewEnvironmentForWrite(ctx context.Context, arg GetPreviewEnvironmentForWriteParams) (GetPreviewEnvironmentForWriteRow, error) {
-	row := q.db.QueryRowContext(ctx, getPreviewEnvironmentForWrite, arg.ID, arg.OwnerID, arg.Column3)
-	var i GetPreviewEnvironmentForWriteRow
-	err := row.Scan(
-		&i.ID,
-		&i.ProjectID,
-		&i.ServiceID,
-		&i.BranchName,
-		&i.PrNumber,
-		&i.Environment,
-		&i.Status,
-		&i.Url,
-		&i.ExpiresAt,
-		&i.CreatedAt,
-		&i.UpdatedAt,
-	)
-	return i, err
-}
-
-const getPreviewEnvironmentOwner = `-- name: GetPreviewEnvironmentOwner :one
-SELECT p.owner_id
-FROM preview_environments pe
-JOIN projects p ON pe.project_id = p.id
-WHERE pe.id = $1
-`
-
-func (q *Queries) GetPreviewEnvironmentOwner(ctx context.Context, id uuid.UUID) (uuid.UUID, error) {
-	row := q.db.QueryRowContext(ctx, getPreviewEnvironmentOwner, id)
-	var owner_id uuid.UUID
-	err := row.Scan(&owner_id)
-	return owner_id, err
-}
-
-const getPreviewServiceID = `-- name: GetPreviewServiceID :one
-SELECT preview_service_id FROM preview_environments WHERE id = $1
-`
-
-func (q *Queries) GetPreviewServiceID(ctx context.Context, id uuid.UUID) (uuid.NullUUID, error) {
-	row := q.db.QueryRowContext(ctx, getPreviewServiceID, id)
-	var preview_service_id uuid.NullUUID
-	err := row.Scan(&preview_service_id)
-	return preview_service_id, err
-}
-
-const getProjectBrief = `-- name: GetProjectBrief :one
-SELECT id, name, owner_id FROM projects WHERE id = $1
-`
-
-type GetProjectBriefRow struct {
-	ID      uuid.UUID `json:"id"`
-	Name    string    `json:"name"`
-	OwnerID uuid.UUID `json:"owner_id"`
-}
-
-func (q *Queries) GetProjectBrief(ctx context.Context, id uuid.UUID) (GetProjectBriefRow, error) {
-	row := q.db.QueryRowContext(ctx, getProjectBrief, id)
-	var i GetProjectBriefRow
-	err := row.Scan(&i.ID, &i.Name, &i.OwnerID)
-	return i, err
-}
-
-const getServiceForDeploy = `-- name: GetServiceForDeploy :one
-SELECT s.id, s.project_id, s.name, s.type, s.status, s.image, s.command,
-       s.environment, s.git_repo, s.git_branch, s.build_path, s.cpu, s.memory,
-       COALESCE(s.replicas, 1) AS replicas, COALESCE(s.port, 0) AS port,
-       COALESCE(s.domain, '') AS domain, COALESCE(s.healthcheck_path, '') AS healthcheck_path,
-       COALESCE(s.restart_policy, 'unless-stopped') AS restart_policy,
-       COALESCE(s.builder, 'auto') AS builder, COALESCE(s.cpu_reserve, '') AS cpu_reserve,
-       COALESCE(s.memory_reserve, '') AS memory_reserve, COALESCE(s.static_build_cmd, '') AS static_build_cmd,
-       COALESCE(s.static_dir, '') AS static_dir,
-       s.created_at, s.updated_at
-FROM services s
-WHERE s.id = $1
-`
-
-type GetServiceForDeployRow struct {
-	ID              uuid.UUID      `json:"id"`
-	ProjectID       uuid.UUID      `json:"project_id"`
-	Name            string         `json:"name"`
-	Type            sql.NullString `json:"type"`
-	Status          sql.NullString `json:"status"`
-	Image           sql.NullString `json:"image"`
-	Command         sql.NullString `json:"command"`
-	Environment     sql.NullString `json:"environment"`
-	GitRepo         sql.NullString `json:"git_repo"`
-	GitBranch       sql.NullString `json:"git_branch"`
-	BuildPath       sql.NullString `json:"build_path"`
-	Cpu             sql.NullString `json:"cpu"`
-	Memory          sql.NullString `json:"memory"`
-	Replicas        int32          `json:"replicas"`
-	Port            int32          `json:"port"`
-	Domain          string         `json:"domain"`
-	HealthcheckPath string         `json:"healthcheck_path"`
-	RestartPolicy   string         `json:"restart_policy"`
-	Builder         string         `json:"builder"`
-	CpuReserve      string         `json:"cpu_reserve"`
-	MemoryReserve   string         `json:"memory_reserve"`
-	StaticBuildCmd  string         `json:"static_build_cmd"`
-	StaticDir       string         `json:"static_dir"`
-	CreatedAt       sql.NullTime   `json:"created_at"`
-	UpdatedAt       sql.NullTime   `json:"updated_at"`
-}
-
-func (q *Queries) GetServiceForDeploy(ctx context.Context, id uuid.UUID) (GetServiceForDeployRow, error) {
-	row := q.db.QueryRowContext(ctx, getServiceForDeploy, id)
-	var i GetServiceForDeployRow
-	err := row.Scan(
-		&i.ID,
-		&i.ProjectID,
-		&i.Name,
-		&i.Type,
-		&i.Status,
-		&i.Image,
-		&i.Command,
-		&i.Environment,
-		&i.GitRepo,
-		&i.GitBranch,
-		&i.BuildPath,
-		&i.Cpu,
-		&i.Memory,
-		&i.Replicas,
-		&i.Port,
-		&i.Domain,
-		&i.HealthcheckPath,
-		&i.RestartPolicy,
-		&i.Builder,
-		&i.CpuReserve,
-		&i.MemoryReserve,
-		&i.StaticBuildCmd,
-		&i.StaticDir,
-		&i.CreatedAt,
-		&i.UpdatedAt,
-	)
-	return i, err
-}
-
-const getServiceTypeBrief = `-- name: GetServiceTypeBrief :one
-SELECT id, name, COALESCE(type, service_type, '') AS service_type FROM services WHERE id = $1 AND project_id = $2
-`
-
-type GetServiceTypeBriefParams struct {
-	ID        uuid.UUID `json:"id"`
-	ProjectID uuid.UUID `json:"project_id"`
-}
-
-type GetServiceTypeBriefRow struct {
-	ID          uuid.UUID `json:"id"`
-	Name        string    `json:"name"`
-	ServiceType string    `json:"service_type"`
-}
-
-func (q *Queries) GetServiceTypeBrief(ctx context.Context, arg GetServiceTypeBriefParams) (GetServiceTypeBriefRow, error) {
-	row := q.db.QueryRowContext(ctx, getServiceTypeBrief, arg.ID, arg.ProjectID)
-	var i GetServiceTypeBriefRow
-	err := row.Scan(&i.ID, &i.Name, &i.ServiceType)
-	return i, err
-}
-
-const insertPendingDeployment = `-- name: InsertPendingDeployment :exec
-INSERT INTO deployments (id, service_id, version, commit_hash, status, created_at, updated_at)
-VALUES ($1, $2, $3, $4, 'pending', NOW(), NOW())
-`
-
-type InsertPendingDeploymentParams struct {
-	ID         uuid.UUID      `json:"id"`
-	ServiceID  uuid.UUID      `json:"service_id"`
-	Version    string         `json:"version"`
-	CommitHash sql.NullString `json:"commit_hash"`
-}
-
-func (q *Queries) InsertPendingDeployment(ctx context.Context, arg InsertPendingDeploymentParams) error {
-	_, err := q.db.ExecContext(ctx, insertPendingDeployment,
-		arg.ID,
-		arg.ServiceID,
-		arg.Version,
-		arg.CommitHash,
-	)
-	return err
-}
-
-const listExpiredPreviewsForUser = `-- name: ListExpiredPreviewsForUser :many
-SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.environment
-FROM preview_environments pe
-JOIN projects p ON pe.project_id = p.id
-WHERE (p.owner_id = $1 OR $2::bool) AND pe.expires_at < NOW() AND pe.status != 'expired'
-`
-
-type ListExpiredPreviewsForUserParams struct {
-	OwnerID uuid.UUID `json:"owner_id"`
-	Column2 bool      `json:"column_2"`
-}
-
-type ListExpiredPreviewsForUserRow struct {
-	ID               uuid.UUID     `json:"id"`
-	ProjectID        uuid.UUID     `json:"project_id"`
-	ServiceID        uuid.UUID     `json:"service_id"`
-	PreviewServiceID uuid.NullUUID `json:"preview_service_id"`
-	BranchName       string        `json:"branch_name"`
-	Environment      string        `json:"environment"`
-}
-
-func (q *Queries) ListExpiredPreviewsForUser(ctx context.Context, arg ListExpiredPreviewsForUserParams) ([]ListExpiredPreviewsForUserRow, error) {
-	rows, err := q.db.QueryContext(ctx, listExpiredPreviewsForUser, arg.OwnerID, arg.Column2)
-	if err != nil {
-		return nil, err
-	}
-	defer rows.Close()
-	items := []ListExpiredPreviewsForUserRow{}
-	for rows.Next() {
-		var i ListExpiredPreviewsForUserRow
-		if err := rows.Scan(
-			&i.ID,
-			&i.ProjectID,
-			&i.ServiceID,
-			&i.PreviewServiceID,
-			&i.BranchName,
-			&i.Environment,
-		); err != nil {
-			return nil, err
-		}
-		items = append(items, i)
-	}
-	if err := rows.Close(); err != nil {
-		return nil, err
-	}
-	if err := rows.Err(); err != nil {
-		return nil, err
-	}
-	return items, nil
-}
-
-const listPreviewEnvironmentsForProject = `-- name: ListPreviewEnvironmentsForProject :many
-SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.pr_number,
-       pe.environment, pe.status, pe.url, pe.expires_at, pe.created_at, pe.updated_at,
-       s.id AS svc_id, s.name AS service_name, s.type AS service_type
-FROM preview_environments pe
-LEFT JOIN services s ON pe.service_id = s.id
-WHERE pe.project_id = $1
-ORDER BY pe.created_at DESC
-`
-
-type ListPreviewEnvironmentsForProjectRow struct {
-	ID               uuid.UUID      `json:"id"`
-	ProjectID        uuid.UUID      `json:"project_id"`
-	ServiceID        uuid.UUID      `json:"service_id"`
-	PreviewServiceID uuid.NullUUID  `json:"preview_service_id"`
-	BranchName       string         `json:"branch_name"`
-	PrNumber         sql.NullInt32  `json:"pr_number"`
-	Environment      string         `json:"environment"`
-	Status           string         `json:"status"`
-	Url              sql.NullString `json:"url"`
-	ExpiresAt        time.Time      `json:"expires_at"`
-	CreatedAt        sql.NullTime   `json:"created_at"`
-	UpdatedAt        sql.NullTime   `json:"updated_at"`
-	SvcID            uuid.NullUUID  `json:"svc_id"`
-	ServiceName      sql.NullString `json:"service_name"`
-	ServiceType      sql.NullString `json:"service_type"`
-}
-
-func (q *Queries) ListPreviewEnvironmentsForProject(ctx context.Context, projectID uuid.UUID) ([]ListPreviewEnvironmentsForProjectRow, error) {
-	rows, err := q.db.QueryContext(ctx, listPreviewEnvironmentsForProject, projectID)
-	if err != nil {
-		return nil, err
-	}
-	defer rows.Close()
-	items := []ListPreviewEnvironmentsForProjectRow{}
-	for rows.Next() {
-		var i ListPreviewEnvironmentsForProjectRow
-		if err := rows.Scan(
-			&i.ID,
-			&i.ProjectID,
-			&i.ServiceID,
-			&i.PreviewServiceID,
-			&i.BranchName,
-			&i.PrNumber,
-			&i.Environment,
-			&i.Status,
-			&i.Url,
-			&i.ExpiresAt,
-			&i.CreatedAt,
-			&i.UpdatedAt,
-			&i.SvcID,
-			&i.ServiceName,
-			&i.ServiceType,
-		); err != nil {
-			return nil, err
-		}
-		items = append(items, i)
-	}
-	if err := rows.Close(); err != nil {
-		return nil, err
-	}
-	if err := rows.Err(); err != nil {
-		return nil, err
-	}
-	return items, nil
-}
-
-const listSweepablePreviews = `-- name: ListSweepablePreviews :many
-SELECT id, preview_service_id FROM preview_environments
-WHERE expires_at < NOW() AND status NOT IN ('expired', 'stopped')
-`
-
-type ListSweepablePreviewsRow struct {
-	ID               uuid.UUID     `json:"id"`
-	PreviewServiceID uuid.NullUUID `json:"preview_service_id"`
-}
-
-func (q *Queries) ListSweepablePreviews(ctx context.Context) ([]ListSweepablePreviewsRow, error) {
-	rows, err := q.db.QueryContext(ctx, listSweepablePreviews)
-	if err != nil {
-		return nil, err
-	}
-	defer rows.Close()
-	items := []ListSweepablePreviewsRow{}
-	for rows.Next() {
-		var i ListSweepablePreviewsRow
-		if err := rows.Scan(&i.ID, &i.PreviewServiceID); err != nil {
-			return nil, err
-		}
-		items = append(items, i)
-	}
-	if err := rows.Close(); err != nil {
-		return nil, err
-	}
-	if err := rows.Err(); err != nil {
-		return nil, err
-	}
-	return items, nil
-}
-
-const markPreviewEnvironmentStatus = `-- name: MarkPreviewEnvironmentStatus :exec
-UPDATE preview_environments SET status = $1, updated_at = NOW() WHERE id = $2
-`
-
-type MarkPreviewEnvironmentStatusParams struct {
-	Status string    `json:"status"`
-	ID     uuid.UUID `json:"id"`
-}
-
-func (q *Queries) MarkPreviewEnvironmentStatus(ctx context.Context, arg MarkPreviewEnvironmentStatusParams) error {
-	_, err := q.db.ExecContext(ctx, markPreviewEnvironmentStatus, arg.Status, arg.ID)
-	return err
-}
-
-const syncPreviewStatuses = `-- name: SyncPreviewStatuses :exec
-UPDATE preview_environments pe
-SET status = derived.st, updated_at = NOW()
-FROM (
-    SELECT pe2.id,
-        CASE
-            WHEN s.status IN ('running', 'deployed') THEN 'running'
-            WHEN s.status IN ('failed', 'error') THEN 'failed'
-            WHEN s.status IN ('building', 'deploying', 'queued', 'pending', 'cloning') THEN 'building'
-            ELSE pe2.status
-        END AS st
-    FROM preview_environments pe2
-    JOIN services s ON pe2.preview_service_id = s.id
-) derived
-WHERE pe.id = derived.id
-  AND pe.status IN ('building', 'running', 'failed')
-  AND pe.status <> derived.st
-`
-
-func (q *Queries) SyncPreviewStatuses(ctx context.Context) error {
-	_, err := q.db.ExecContext(ctx, syncPreviewStatuses)
-	return err
-}
-
-const updatePreviewEnvironment = `-- name: UpdatePreviewEnvironment :exec
-UPDATE preview_environments
-SET status = $1, url = $2, expires_at = $3, updated_at = $4
-WHERE id = $5
-`
-
-type UpdatePreviewEnvironmentParams struct {
-	Status    string         `json:"status"`
-	Url       sql.NullString `json:"url"`
-	ExpiresAt time.Time      `json:"expires_at"`
-	UpdatedAt sql.NullTime   `json:"updated_at"`
-	ID        uuid.UUID      `json:"id"`
-}
-
-func (q *Queries) UpdatePreviewEnvironment(ctx context.Context, arg UpdatePreviewEnvironmentParams) error {
-	_, err := q.db.ExecContext(ctx, updatePreviewEnvironment,
-		arg.Status,
-		arg.Url,
-		arg.ExpiresAt,
-		arg.UpdatedAt,
-		arg.ID,
-	)
-	return err
-}
-
-const updateServicePreviewBranch = `-- name: UpdateServicePreviewBranch :exec
-UPDATE services SET git_branch = $1, domain = '', updated_at = NOW() WHERE id = $2
-`
-
-type UpdateServicePreviewBranchParams struct {
-	GitBranch sql.NullString `json:"git_branch"`
-	ID        uuid.UUID      `json:"id"`
-}
-
-func (q *Queries) UpdateServicePreviewBranch(ctx context.Context, arg UpdateServicePreviewBranchParams) error {
-	_, err := q.db.ExecContext(ctx, updateServicePreviewBranch, arg.GitBranch, arg.ID)
-	return err
-}

app/backend/internal/database/sqlcdb/querier.go

@@ -18,17 +18,12 @@ type Querier interface {
 	AggregateNodeMetrics(ctx context.Context, arg AggregateNodeMetricsParams) ([]AggregateNodeMetricsRow, error)
 	ClearServiceDomainDefault(ctx context.Context, serviceID uuid.UUID) error
 	ClearServiceNodePins(ctx context.Context, nodeID sql.NullString) (int64, error)
-	CloneServiceDomains(ctx context.Context, arg CloneServiceDomainsParams) error
-	CloneServiceRow(ctx context.Context, arg CloneServiceRowParams) error
-	CloneServiceVariables(ctx context.Context, arg CloneServiceVariablesParams) error
 	CompleteCommand(ctx context.Context, arg CompleteCommandParams) (AgentCommand, error)
-	CountActivePreviewsForBranch(ctx context.Context, arg CountActivePreviewsForBranchParams) (int64, error)
 	CountDatabaseServicesByUserAndName(ctx context.Context, arg CountDatabaseServicesByUserAndNameParams) (int64, error)
 	CountDatabasesUsingBackupTarget(ctx context.Context, targetID sql.NullString) (int64, error)
 	CountEnvironmentServices(ctx context.Context, environmentID uuid.UUID) (int64, error)
 	CountProjectsByUser(ctx context.Context, arg CountProjectsByUserParams) (int64, error)
 	CountServiceDomains(ctx context.Context, serviceID uuid.UUID) (int64, error)
-	CountServicesByName(ctx context.Context, arg CountServicesByNameParams) (int64, error)
 	CountServicesByProjectAndName(ctx context.Context, arg CountServicesByProjectAndNameParams) (int64, error)
 	CountUnreadNotificationsByUser(ctx context.Context, userID uuid.UUID) (int64, error)
 	CreateAgent(ctx context.Context, arg CreateAgentParams) (NodeAgent, error)
@@ -42,8 +37,6 @@ type Querier interface {
 	CreateExternalDatabaseService(ctx context.Context, arg CreateExternalDatabaseServiceParams) error
 	CreateNotification(ctx context.Context, arg CreateNotificationParams) error
 	CreateOutboundWebhook(ctx context.Context, arg CreateOutboundWebhookParams) error
-	CreatePreviewDomain(ctx context.Context, arg CreatePreviewDomainParams) error
-	CreatePreviewEnvironment(ctx context.Context, arg CreatePreviewEnvironmentParams) error
 	CreateProject(ctx context.Context, arg CreateProjectParams) (Project, error)
 	CreateServiceDomain(ctx context.Context, arg CreateServiceDomainParams) (CreateServiceDomainRow, error)
 	CreateServiceFromTemplate(ctx context.Context, arg CreateServiceFromTemplateParams) error
@@ -53,17 +46,14 @@ type Querier interface {
 	CreateWebhookDelivery(ctx context.Context, arg CreateWebhookDeliveryParams) error
 	DatabaseServiceExistsByIDAndUser(ctx context.Context, arg DatabaseServiceExistsByIDAndUserParams) (bool, error)
 	DeleteAgent(ctx context.Context, id string) error
-	DeleteAllServiceDomains(ctx context.Context, serviceID uuid.UUID) error
 	DeleteBackupTargetByIDAndUser(ctx context.Context, arg DeleteBackupTargetByIDAndUserParams) error
 	DeleteBanner(ctx context.Context, id uuid.UUID) error
 	DeleteDatabaseServiceByID(ctx context.Context, id string) error
 	DeleteDatabaseServiceByIDAndUser(ctx context.Context, arg DeleteDatabaseServiceByIDAndUserParams) error
 	DeleteNotificationChannel(ctx context.Context, arg DeleteNotificationChannelParams) (int64, error)
 	DeleteOutboundWebhookByIDAndUser(ctx context.Context, arg DeleteOutboundWebhookByIDAndUserParams) error
-	DeletePreviewEnvironment(ctx context.Context, id uuid.UUID) error
 	DeleteProjectByID(ctx context.Context, projectID uuid.UUID) (int64, error)
 	DeleteProjectEnvironment(ctx context.Context, arg DeleteProjectEnvironmentParams) error
-	DeleteServiceByID(ctx context.Context, id uuid.UUID) error
 	DeleteServiceContainersOnAgent(ctx context.Context, arg DeleteServiceContainersOnAgentParams) error
 	DeleteServiceDomain(ctx context.Context, arg DeleteServiceDomainParams) (int64, error)
 	DeleteUserInvite(ctx context.Context, id uuid.UUID) error
@@ -84,31 +74,20 @@ type Querier interface {
 	GetLastAgentCommandByType(ctx context.Context, arg GetLastAgentCommandByTypeParams) (AgentCommand, error)
 	GetOutboundWebhookByID(ctx context.Context, id uuid.UUID) (OutboundWebhook, error)
 	GetOutboundWebhookByIDAndUser(ctx context.Context, arg GetOutboundWebhookByIDAndUserParams) (OutboundWebhook, error)
-	GetPreviewEnvironment(ctx context.Context, arg GetPreviewEnvironmentParams) (GetPreviewEnvironmentRow, error)
-	GetPreviewEnvironmentForPromote(ctx context.Context, arg GetPreviewEnvironmentForPromoteParams) (GetPreviewEnvironmentForPromoteRow, error)
-	GetPreviewEnvironmentForWrite(ctx context.Context, arg GetPreviewEnvironmentForWriteParams) (GetPreviewEnvironmentForWriteRow, error)
-	GetPreviewEnvironmentOwner(ctx context.Context, id uuid.UUID) (uuid.UUID, error)
-	GetPreviewServiceID(ctx context.Context, id uuid.UUID) (uuid.NullUUID, error)
-	GetProjectBrief(ctx context.Context, id uuid.UUID) (GetProjectBriefRow, error)
 	GetProjectByIDForUser(ctx context.Context, arg GetProjectByIDForUserParams) (Project, error)
 	GetProjectEnvironmentByName(ctx context.Context, arg GetProjectEnvironmentByNameParams) (Environment, error)
-	GetProjectOwner(ctx context.Context, id uuid.UUID) (uuid.UUID, error)
 	GetProjectOwnerByID(ctx context.Context, projectID uuid.UUID) (uuid.UUID, error)
 	GetProjectOwnerID(ctx context.Context, id uuid.UUID) (uuid.UUID, error)
 	GetProjectRoleForUser(ctx context.Context, arg GetProjectRoleForUserParams) (string, error)
 	GetServiceAccess(ctx context.Context, id uuid.UUID) (GetServiceAccessRow, error)
 	GetServiceDomainDefault(ctx context.Context, serviceID uuid.UUID) (string, error)
 	GetServiceDomainFirst(ctx context.Context, serviceID uuid.UUID) (string, error)
-	GetServiceEnvironment(ctx context.Context, id uuid.UUID) (string, error)
-	GetServiceForDeploy(ctx context.Context, id uuid.UUID) (GetServiceForDeployRow, error)
 	GetServicePlacementBrief(ctx context.Context, id uuid.UUID) (GetServicePlacementBriefRow, error)
 	GetServiceTemplateByID(ctx context.Context, id string) (ServiceTemplate, error)
-	GetServiceTypeBrief(ctx context.Context, arg GetServiceTypeBriefParams) (GetServiceTypeBriefRow, error)
 	GetUserInviteByTokenHash(ctx context.Context, tokenHash string) (UserInvite, error)
 	GetUserTokenByHash(ctx context.Context, tokenHash string) (UserToken, error)
 	InsertAgentHeartbeat(ctx context.Context, arg InsertAgentHeartbeatParams) error
 	InsertNotificationChannel(ctx context.Context, arg InsertNotificationChannelParams) (NotificationChannel, error)
-	InsertPendingDeployment(ctx context.Context, arg InsertPendingDeploymentParams) error
 	InsertProjectEnvironment(ctx context.Context, arg InsertProjectEnvironmentParams) error
 	ListActiveBanners(ctx context.Context) ([]Banner, error)
 	ListAgentAuthTokens(ctx context.Context) ([]AgentAuthToken, error)
@@ -125,7 +104,6 @@ type Querier interface {
 	ListDatabaseServicesByUser(ctx context.Context, userID string) ([]DatabaseService, error)
 	ListDueDatabaseBackups(ctx context.Context) ([]ListDueDatabaseBackupsRow, error)
 	ListEnabledOutboundWebhooks(ctx context.Context) ([]OutboundWebhook, error)
-	ListExpiredPreviewsForUser(ctx context.Context, arg ListExpiredPreviewsForUserParams) ([]ListExpiredPreviewsForUserRow, error)
 	ListInstanceMetrics(ctx context.Context, arg ListInstanceMetricsParams) ([]ListInstanceMetricsRow, error)
 	ListNodeMetrics(ctx context.Context, arg ListNodeMetricsParams) ([]ListNodeMetricsRow, error)
 	ListNotificationChannelsByUser(ctx context.Context, userID uuid.UUID) ([]NotificationChannel, error)
@@ -133,7 +111,6 @@ type Querier interface {
 	ListOutboundWebhooksByUser(ctx context.Context, userID uuid.UUID) ([]OutboundWebhook, error)
 	ListPendingCommands(ctx context.Context, nodeAgentID string) ([]AgentCommand, error)
 	ListPendingProjects(ctx context.Context) ([]Project, error)
-	ListPreviewEnvironmentsForProject(ctx context.Context, projectID uuid.UUID) ([]ListPreviewEnvironmentsForProjectRow, error)
 	ListProjectEnvironments(ctx context.Context, projectID uuid.UUID) ([]ListProjectEnvironmentsRow, error)
 	// Visibility model: a project is readable when it is approved for public
 	// display, when the caller owns or is a member of it, or when the caller is a
@@ -152,15 +129,12 @@ type Querier interface {
 	ListServiceMetrics(ctx context.Context, arg ListServiceMetricsParams) ([]ListServiceMetricsRow, error)
 	ListServiceTemplatesByCategoryForUser(ctx context.Context, arg ListServiceTemplatesByCategoryForUserParams) ([]ServiceTemplate, error)
 	ListServiceTemplatesForUser(ctx context.Context, ownerID uuid.NullUUID) ([]ServiceTemplate, error)
-	ListSweepablePreviews(ctx context.Context) ([]ListSweepablePreviewsRow, error)
 	ListUserInvites(ctx context.Context) ([]UserInvite, error)
 	ListUserTokens(ctx context.Context, userID uuid.UUID) ([]UserToken, error)
 	ListWebhookDeliveriesByWebhook(ctx context.Context, webhookID uuid.UUID) ([]WebhookDelivery, error)
 	MarkAllNotificationsReadByUser(ctx context.Context, arg MarkAllNotificationsReadByUserParams) error
 	MarkNotificationReadByIDAndUser(ctx context.Context, arg MarkNotificationReadByIDAndUserParams) error
-	MarkPreviewEnvironmentStatus(ctx context.Context, arg MarkPreviewEnvironmentStatusParams) error
 	MarkUserInviteUsed(ctx context.Context, arg MarkUserInviteUsedParams) error
-	MoveServiceProject(ctx context.Context, arg MoveServiceProjectParams) (int64, error)
 	// Resource-aware: lowest memory utilisation first, then cpu, then container
 	// count. Agents without telemetry sort last (NULL → worst score).
 	PickLeastLoadedAgent(ctx context.Context) (string, error)
@@ -186,7 +160,6 @@ type Querier interface {
 	SetProjectApproved(ctx context.Context, arg SetProjectApprovedParams) (int64, error)
 	SetServiceDomainDefault(ctx context.Context, arg SetServiceDomainDefaultParams) (int64, error)
 	SetServiceLegacyDomain(ctx context.Context, arg SetServiceLegacyDomainParams) error
-	SyncPreviewStatuses(ctx context.Context) error
 	TouchAgentAuthToken(ctx context.Context, tokenHash string) error
 	TouchServiceDomainChecked(ctx context.Context, id uuid.UUID) error
 	TouchUserToken(ctx context.Context, id uuid.UUID) error
@@ -206,9 +179,7 @@ type Querier interface {
 	UpdateDatabaseServiceNameByIDAndUser(ctx context.Context, arg UpdateDatabaseServiceNameByIDAndUserParams) error
 	UpdateDatabaseServicePlanByIDAndUser(ctx context.Context, arg UpdateDatabaseServicePlanByIDAndUserParams) error
 	UpdateOutboundWebhook(ctx context.Context, arg UpdateOutboundWebhookParams) error
-	UpdatePreviewEnvironment(ctx context.Context, arg UpdatePreviewEnvironmentParams) error
 	UpdateProjectByID(ctx context.Context, arg UpdateProjectByIDParams) (int64, error)
-	UpdateServicePreviewBranch(ctx context.Context, arg UpdateServicePreviewBranchParams) error
 	UpdateUserTemplate(ctx context.Context, arg UpdateUserTemplateParams) (int64, error)
 	UpdateWebhookDeliveryResult(ctx context.Context, arg UpdateWebhookDeliveryResultParams) error
 	UpsertEnvironmentVariable(ctx context.Context, arg UpsertEnvironmentVariableParams) error

app/backend/internal/database/sqlcdb/service_ops.sql.go

@@ -1,158 +0,0 @@
-// Code generated by sqlc. DO NOT EDIT.
-// versions:
-//   sqlc v1.31.1
-// source: service_ops.sql
-
-package sqlcdb
-
-import (
-	"context"
-	"database/sql"
-
-	"github.com/google/uuid"
-)
-
-const cloneServiceDomains = `-- name: CloneServiceDomains :exec
-INSERT INTO service_domains (service_id, domain, is_default, cert_type)
-SELECT $1, domain, is_default, cert_type FROM service_domains sd WHERE sd.service_id = $2
-`
-
-type CloneServiceDomainsParams struct {
-	ServiceID   uuid.UUID `json:"service_id"`
-	ServiceID_2 uuid.UUID `json:"service_id_2"`
-}
-
-func (q *Queries) CloneServiceDomains(ctx context.Context, arg CloneServiceDomainsParams) error {
-	_, err := q.db.ExecContext(ctx, cloneServiceDomains, arg.ServiceID, arg.ServiceID_2)
-	return err
-}
-
-const cloneServiceRow = `-- name: CloneServiceRow :exec
-INSERT INTO services
-    (id, project_id, name, environment_id, service_type, source_type, source_url, image_name,
-     build_command, start_command, type, status, image, command, environment,
-     git_repo, git_branch, build_path, cpu, memory, replicas, port, domain,
-     healthcheck_path, restart_policy, volumes, maintenance_mode, basic_auth_users,
-     builder, cpu_reserve, memory_reserve, static_build_cmd, static_dir,
-     traefik_labels, created_at, updated_at)
-SELECT $1, $2, $3, $4, service_type, source_type, source_url, image_name,
-     build_command, start_command, type, 'stopped', image, command, $5,
-     git_repo, git_branch, build_path, cpu, memory, replicas, port, domain,
-     healthcheck_path, restart_policy, volumes, $6, $7,
-     builder, cpu_reserve, memory_reserve, static_build_cmd, static_dir,
-     traefik_labels, $8, $8
-FROM services s WHERE s.id = $9
-`
-
-type CloneServiceRowParams struct {
-	ID              uuid.UUID      `json:"id"`
-	ProjectID       uuid.UUID      `json:"project_id"`
-	Name            string         `json:"name"`
-	EnvironmentID   uuid.UUID      `json:"environment_id"`
-	Environment     sql.NullString `json:"environment"`
-	MaintenanceMode bool           `json:"maintenance_mode"`
-	BasicAuthUsers  string         `json:"basic_auth_users"`
-	CreatedAt       sql.NullTime   `json:"created_at"`
-	ID_2            uuid.UUID      `json:"id_2"`
-}
-
-func (q *Queries) CloneServiceRow(ctx context.Context, arg CloneServiceRowParams) error {
-	_, err := q.db.ExecContext(ctx, cloneServiceRow,
-		arg.ID,
-		arg.ProjectID,
-		arg.Name,
-		arg.EnvironmentID,
-		arg.Environment,
-		arg.MaintenanceMode,
-		arg.BasicAuthUsers,
-		arg.CreatedAt,
-		arg.ID_2,
-	)
-	return err
-}
-
-const cloneServiceVariables = `-- name: CloneServiceVariables :exec
-INSERT INTO environment_variables (id, service_id, key, value, is_secret)
-SELECT gen_random_uuid(), $1, key, value, is_secret FROM environment_variables ev WHERE ev.service_id = $2
-`
-
-type CloneServiceVariablesParams struct {
-	ServiceID   uuid.UUID `json:"service_id"`
-	ServiceID_2 uuid.UUID `json:"service_id_2"`
-}
-
-func (q *Queries) CloneServiceVariables(ctx context.Context, arg CloneServiceVariablesParams) error {
-	_, err := q.db.ExecContext(ctx, cloneServiceVariables, arg.ServiceID, arg.ServiceID_2)
-	return err
-}
-
-const countServicesByName = `-- name: CountServicesByName :one
-SELECT COUNT(*) FROM services WHERE project_id = $1 AND name = $2
-`
-
-type CountServicesByNameParams struct {
-	ProjectID uuid.UUID `json:"project_id"`
-	Name      string    `json:"name"`
-}
-
-func (q *Queries) CountServicesByName(ctx context.Context, arg CountServicesByNameParams) (int64, error) {
-	row := q.db.QueryRowContext(ctx, countServicesByName, arg.ProjectID, arg.Name)
-	var count int64
-	err := row.Scan(&count)
-	return count, err
-}
-
-const deleteServiceByID = `-- name: DeleteServiceByID :exec
-DELETE FROM services WHERE id = $1
-`
-
-func (q *Queries) DeleteServiceByID(ctx context.Context, id uuid.UUID) error {
-	_, err := q.db.ExecContext(ctx, deleteServiceByID, id)
-	return err
-}
-
-const getProjectOwner = `-- name: GetProjectOwner :one
-SELECT owner_id FROM projects WHERE id = $1
-`
-
-func (q *Queries) GetProjectOwner(ctx context.Context, id uuid.UUID) (uuid.UUID, error) {
-	row := q.db.QueryRowContext(ctx, getProjectOwner, id)
-	var owner_id uuid.UUID
-	err := row.Scan(&owner_id)
-	return owner_id, err
-}
-
-const getServiceEnvironment = `-- name: GetServiceEnvironment :one
-SELECT COALESCE(environment, '') FROM services WHERE id = $1
-`
-
-func (q *Queries) GetServiceEnvironment(ctx context.Context, id uuid.UUID) (string, error) {
-	row := q.db.QueryRowContext(ctx, getServiceEnvironment, id)
-	var environment string
-	err := row.Scan(&environment)
-	return environment, err
-}
-
-const moveServiceProject = `-- name: MoveServiceProject :execrows
-UPDATE services SET project_id = $1, environment_id = $2, updated_at = $3 WHERE id = $4
-`
-
-type MoveServiceProjectParams struct {
-	ProjectID     uuid.UUID    `json:"project_id"`
-	EnvironmentID uuid.UUID    `json:"environment_id"`
-	UpdatedAt     sql.NullTime `json:"updated_at"`
-	ID            uuid.UUID    `json:"id"`
-}
-
-func (q *Queries) MoveServiceProject(ctx context.Context, arg MoveServiceProjectParams) (int64, error) {
-	result, err := q.db.ExecContext(ctx, moveServiceProject,
-		arg.ProjectID,
-		arg.EnvironmentID,
-		arg.UpdatedAt,
-		arg.ID,
-	)
-	if err != nil {
-		return 0, err
-	}
-	return result.RowsAffected()
-}

app/backend/sqlc/queries/preview_environments.sql

@@ -1,121 +0,0 @@
--- name: ListPreviewEnvironmentsForProject :many
-SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.pr_number,
-       pe.environment, pe.status, pe.url, pe.expires_at, pe.created_at, pe.updated_at,
-       s.id AS svc_id, s.name AS service_name, s.type AS service_type
-FROM preview_environments pe
-LEFT JOIN services s ON pe.service_id = s.id
-WHERE pe.project_id = $1
-ORDER BY pe.created_at DESC;
-
--- name: GetPreviewEnvironment :one
-SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.pr_number,
-       pe.environment, pe.status, pe.url, pe.expires_at, pe.created_at, pe.updated_at,
-       s.id AS svc_id, s.name AS service_name, s.type AS service_type
-FROM preview_environments pe
-LEFT JOIN services s ON pe.service_id = s.id
-JOIN projects p ON pe.project_id = p.id
-WHERE pe.id = $1 AND (p.is_approved OR p.owner_id = $2 OR $3::bool
-    OR EXISTS (SELECT 1 FROM project_members pm WHERE pm.project_id = p.id AND pm.user_id = $2));
-
--- name: GetPreviewEnvironmentForWrite :one
-SELECT pe.id, pe.project_id, pe.service_id, pe.branch_name, pe.pr_number,
-       pe.environment, pe.status, pe.url, pe.expires_at, pe.created_at, pe.updated_at
-FROM preview_environments pe
-JOIN projects p ON pe.project_id = p.id
-WHERE pe.id = $1 AND (p.owner_id = $2 OR $3::bool);
-
--- name: GetPreviewEnvironmentForPromote :one
-SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.environment, pe.status
-FROM preview_environments pe
-JOIN projects p ON pe.project_id = p.id
-WHERE pe.id = $1 AND (p.owner_id = $2 OR $3::bool);
-
--- name: GetPreviewEnvironmentOwner :one
-SELECT p.owner_id
-FROM preview_environments pe
-JOIN projects p ON pe.project_id = p.id
-WHERE pe.id = $1;
-
--- name: GetPreviewServiceID :one
-SELECT preview_service_id FROM preview_environments WHERE id = $1;
-
--- name: UpdatePreviewEnvironment :exec
-UPDATE preview_environments
-SET status = $1, url = $2, expires_at = $3, updated_at = $4
-WHERE id = $5;
-
--- name: MarkPreviewEnvironmentStatus :exec
-UPDATE preview_environments SET status = $1, updated_at = NOW() WHERE id = $2;
-
--- name: DeletePreviewEnvironment :exec
-DELETE FROM preview_environments WHERE id = $1;
-
--- name: CountActivePreviewsForBranch :one
-SELECT COUNT(*) FROM preview_environments
-WHERE service_id = $1 AND branch_name = $2 AND status NOT IN ('expired', 'stopped');
-
--- name: CreatePreviewEnvironment :exec
-INSERT INTO preview_environments
-    (id, project_id, service_id, preview_service_id, branch_name, pr_number, environment,
-     status, url, expires_at, created_at, updated_at)
-VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12);
-
--- name: UpdateServicePreviewBranch :exec
-UPDATE services SET git_branch = $1, domain = '', updated_at = NOW() WHERE id = $2;
-
--- name: DeleteAllServiceDomains :exec
-DELETE FROM service_domains WHERE service_id = $1;
-
--- name: CreatePreviewDomain :exec
-INSERT INTO service_domains (service_id, domain, is_default, cert_type) VALUES ($1, $2, true, 'tls');
-
--- name: InsertPendingDeployment :exec
-INSERT INTO deployments (id, service_id, version, commit_hash, status, created_at, updated_at)
-VALUES ($1, $2, $3, $4, 'pending', NOW(), NOW());
-
--- name: ListExpiredPreviewsForUser :many
-SELECT pe.id, pe.project_id, pe.service_id, pe.preview_service_id, pe.branch_name, pe.environment
-FROM preview_environments pe
-JOIN projects p ON pe.project_id = p.id
-WHERE (p.owner_id = $1 OR $2::bool) AND pe.expires_at < NOW() AND pe.status != 'expired';
-
--- name: ListSweepablePreviews :many
-SELECT id, preview_service_id FROM preview_environments
-WHERE expires_at < NOW() AND status NOT IN ('expired', 'stopped');
-
--- name: SyncPreviewStatuses :exec
-UPDATE preview_environments pe
-SET status = derived.st, updated_at = NOW()
-FROM (
-    SELECT pe2.id,
-        CASE
-            WHEN s.status IN ('running', 'deployed') THEN 'running'
-            WHEN s.status IN ('failed', 'error') THEN 'failed'
-            WHEN s.status IN ('building', 'deploying', 'queued', 'pending', 'cloning') THEN 'building'
-            ELSE pe2.status
-        END AS st
-    FROM preview_environments pe2
-    JOIN services s ON pe2.preview_service_id = s.id
-) derived
-WHERE pe.id = derived.id
-  AND pe.status IN ('building', 'running', 'failed')
-  AND pe.status <> derived.st;
-
--- name: GetProjectBrief :one
-SELECT id, name, owner_id FROM projects WHERE id = $1;
-
--- name: GetServiceTypeBrief :one
-SELECT id, name, COALESCE(type, service_type, '') AS service_type FROM services WHERE id = $1 AND project_id = $2;
-
--- name: GetServiceForDeploy :one
-SELECT s.id, s.project_id, s.name, s.type, s.status, s.image, s.command,
-       s.environment, s.git_repo, s.git_branch, s.build_path, s.cpu, s.memory,
-       COALESCE(s.replicas, 1) AS replicas, COALESCE(s.port, 0) AS port,
-       COALESCE(s.domain, '') AS domain, COALESCE(s.healthcheck_path, '') AS healthcheck_path,
-       COALESCE(s.restart_policy, 'unless-stopped') AS restart_policy,
-       COALESCE(s.builder, 'auto') AS builder, COALESCE(s.cpu_reserve, '') AS cpu_reserve,
-       COALESCE(s.memory_reserve, '') AS memory_reserve, COALESCE(s.static_build_cmd, '') AS static_build_cmd,
-       COALESCE(s.static_dir, '') AS static_dir,
-       s.created_at, s.updated_at
-FROM services s
-WHERE s.id = $1;

app/backend/sqlc/queries/service_ops.sql

@@ -1,38 +0,0 @@
--- name: CountServicesByName :one
-SELECT COUNT(*) FROM services WHERE project_id = $1 AND name = $2;
-
--- name: GetServiceEnvironment :one
-SELECT COALESCE(environment, '') FROM services WHERE id = $1;
-
--- name: CloneServiceRow :exec
-INSERT INTO services
-    (id, project_id, name, environment_id, service_type, source_type, source_url, image_name,
-     build_command, start_command, type, status, image, command, environment,
-     git_repo, git_branch, build_path, cpu, memory, replicas, port, domain,
-     healthcheck_path, restart_policy, volumes, maintenance_mode, basic_auth_users,
-     builder, cpu_reserve, memory_reserve, static_build_cmd, static_dir,
-     traefik_labels, created_at, updated_at)
-SELECT $1, $2, $3, $4, service_type, source_type, source_url, image_name,
-     build_command, start_command, type, 'stopped', image, command, $5,
-     git_repo, git_branch, build_path, cpu, memory, replicas, port, domain,
-     healthcheck_path, restart_policy, volumes, $6, $7,
-     builder, cpu_reserve, memory_reserve, static_build_cmd, static_dir,
-     traefik_labels, $8, $8
-FROM services s WHERE s.id = $9;
-
--- name: CloneServiceDomains :exec
-INSERT INTO service_domains (service_id, domain, is_default, cert_type)
-SELECT $1, domain, is_default, cert_type FROM service_domains sd WHERE sd.service_id = $2;
-
--- name: CloneServiceVariables :exec
-INSERT INTO environment_variables (id, service_id, key, value, is_secret)
-SELECT gen_random_uuid(), $1, key, value, is_secret FROM environment_variables ev WHERE ev.service_id = $2;
-
--- name: DeleteServiceByID :exec
-DELETE FROM services WHERE id = $1;
-
--- name: MoveServiceProject :execrows
-UPDATE services SET project_id = $1, environment_id = $2, updated_at = $3 WHERE id = $4;
-
--- name: GetProjectOwner :one
-SELECT owner_id FROM projects WHERE id = $1;

app/backend/sqlc/schema.sql

@@ -98,37 +98,11 @@ CREATE TABLE service_domains (
 );
 
 CREATE TABLE deployments (
-    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    id UUID PRIMARY KEY,
     service_id UUID NOT NULL REFERENCES services(id) ON DELETE CASCADE,
-    version VARCHAR(255) NOT NULL,
-    commit_hash VARCHAR(255),
-    image_digest VARCHAR(255),
-    status VARCHAR(50) DEFAULT 'created',
-    build_log TEXT,
-    deployment_log TEXT,
-    started_at TIMESTAMPTZ,
-    completed_at TIMESTAMPTZ,
+    status VARCHAR(50),
     created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
-    updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
-    image_name VARCHAR(255),
-    image_tag VARCHAR(255),
-    runtime_log TEXT,
-    error TEXT
-);
-
-CREATE TABLE preview_environments (
-    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-    project_id UUID NOT NULL,
-    service_id UUID NOT NULL,
-    branch_name VARCHAR(255) NOT NULL,
-    pr_number INTEGER,
-    environment VARCHAR(255) NOT NULL,
-    status VARCHAR(50) NOT NULL DEFAULT 'building',
-    url TEXT,
-    expires_at TIMESTAMPTZ NOT NULL,
-    created_at TIMESTAMPTZ DEFAULT now(),
-    updated_at TIMESTAMPTZ DEFAULT now(),
-    preview_service_id UUID
+    updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
 );
 
 CREATE TABLE environment_variables (