feat: add protection lease concept for time-limited clone protection

Instead of infinite deletion protection, clones now get protected for a
configurable period. Key changes:

- Add protectionLeaseDurationMinutes config (default: 7 days)
- Add protectionRenewalDurationMinutes config (default: 3 days)
- Add protectionExpiryWarningMinutes config for warning notifications
- Add ProtectedTill field to Clone model with IsProtected() method
- Add background job to check lease expiry and send webhook warnings
- Add clone_protection_expiring and clone_protection_expired webhooks
- Update UI to show lease duration, expiry time, and renew button
- Update API to support renewLease parameter for lease renewal

Author: claude

engine/api/swagger-spec/dblab_openapi.yaml

@@ -1631,6 +1631,10 @@ components:
         protected:
           type: boolean
           default: false
+        protectedTill:
+          type: string
+          format: date-time
+          description: Time when the protection lease expires
         deleteAt:
           type: string
           format: date-time
@@ -1658,6 +1662,14 @@ components:
         maxIdleMinutes:
           type: integer
           format: int64
+        protectionLeaseDurationMinutes:
+          type: integer
+          format: int64
+          description: Protection lease duration in minutes
+        protectionRenewalDurationMinutes:
+          type: integer
+          format: int64
+          description: Protection renewal duration in minutes
     CreateClone:
       type: object
       properties:
@@ -1703,6 +1715,10 @@ components:
         protected:
           type: boolean
           default: false
+        renewLease:
+          type: boolean
+          default: false
+          description: When true, renews the protection lease for the clone
     StartObservationRequest:
       type: object
       properties:

engine/api/swagger-spec/dblab_server_swagger.yaml

@@ -1065,6 +1065,10 @@ components:
         protected:
           type: "boolean"
           default: false
+        protectedTill:
+          type: "string"
+          format: "date-time"
+          description: "Time when the protection lease expires"
         deleteAt:
           type: "string"
           format: "date-time"
@@ -1093,6 +1097,14 @@ components:
         maxIdleMinutes:
           type: "integer"
           format: "int64"
+        protectionLeaseDurationMinutes:
+          type: "integer"
+          format: "int64"
+          description: "Protection lease duration in minutes"
+        protectionRenewalDurationMinutes:
+          type: "integer"
+          format: "int64"
+          description: "Protection renewal duration in minutes"
 
     CreateClone:
       type: "object"
@@ -1136,6 +1148,10 @@ components:
         protected:
           type: "boolean"
           default: false
+        renewLease:
+          type: "boolean"
+          default: false
+          description: "When true, renews the protection lease for the clone"
 
     StartObservationRequest:
       type: "object"

engine/configs/config.example.logical_generic.yml

@@ -146,6 +146,9 @@ retrieval:  # Data retrieval: initial sync and ongoing updates. Two methods:
 cloning:
   accessHost: "localhost" # Host that will be specified in database connection info for all clones (only used to inform users)
   maxIdleMinutes: 120 # Automatically delete clones after the specified minutes of inactivity; 0 - disable automatic deletion
+  protectionLeaseDurationMinutes: 10080 # Clone protection lease duration in minutes (default: 7 days); 0 - infinite protection
+  protectionRenewalDurationMinutes: 4320 # Renewal duration in minutes (default: 3 days); 0 - use initial duration
+  protectionExpiryWarningMinutes: 1440 # Send warning webhook N minutes before expiry (default: 24 hours)
 
 diagnostic:
   logsRetentionDays: 7 # How many days to keep logs

engine/configs/config.example.logical_rds_iam.yml

@@ -146,6 +146,9 @@ retrieval:  # Data retrieval: initial sync and ongoing updates. Two methods:
 cloning:
   accessHost: "localhost" # Host that will be specified in database connection info for all clones (only used to inform users)
   maxIdleMinutes: 120 # Automatically delete clones after the specified minutes of inactivity; 0 - disable automatic deletion
+  protectionLeaseDurationMinutes: 10080 # Clone protection lease duration in minutes (default: 7 days); 0 - infinite protection
+  protectionRenewalDurationMinutes: 4320 # Renewal duration in minutes (default: 3 days); 0 - use initial duration
+  protectionExpiryWarningMinutes: 1440 # Send warning webhook N minutes before expiry (default: 24 hours)
 
 diagnostic:
   logsRetentionDays: 7 # How many days to keep logs

engine/configs/config.example.physical_generic.yml

@@ -114,6 +114,9 @@ retrieval:  # Data retrieval: initial sync and ongoing updates. Two methods:
 cloning:
   accessHost: "localhost" # Host that will be specified in database connection info for all clones (only used to inform users)
   maxIdleMinutes: 120 # Automatically delete clones after the specified minutes of inactivity; 0 - disable automatic deletion
+  protectionLeaseDurationMinutes: 10080 # Clone protection lease duration in minutes (default: 7 days); 0 - infinite protection
+  protectionRenewalDurationMinutes: 4320 # Renewal duration in minutes (default: 3 days); 0 - use initial duration
+  protectionExpiryWarningMinutes: 1440 # Send warning webhook N minutes before expiry (default: 24 hours)
 
 diagnostic:
   logsRetentionDays: 7 # How many days to keep logs

engine/configs/config.example.physical_pgbackrest.yml

@@ -144,6 +144,9 @@ retrieval:  # Data retrieval: initial sync and ongoing updates. Two methods:
 cloning:
   accessHost: "localhost" # Host that will be specified in database connection info for all clones (only used to inform users)
   maxIdleMinutes: 120 # Automatically delete clones after the specified minutes of inactivity; 0 - disable automatic deletion
+  protectionLeaseDurationMinutes: 10080 # Clone protection lease duration in minutes (default: 7 days); 0 - infinite protection
+  protectionRenewalDurationMinutes: 4320 # Renewal duration in minutes (default: 3 days); 0 - use initial duration
+  protectionExpiryWarningMinutes: 1440 # Send warning webhook N minutes before expiry (default: 24 hours)
 
 diagnostic:
   logsRetentionDays: 7 # How many days to keep logs

engine/configs/config.example.physical_walg.yml

@@ -117,6 +117,9 @@ retrieval:  # Data retrieval: initial sync and ongoing updates. Two methods:
 cloning:
   accessHost: "localhost" # Host that will be specified in database connection info for all clones (only used to inform users)
   maxIdleMinutes: 120 # Automatically delete clones after the specified minutes of inactivity; 0 - disable automatic deletion
+  protectionLeaseDurationMinutes: 10080 # Clone protection lease duration in minutes (default: 7 days); 0 - infinite protection
+  protectionRenewalDurationMinutes: 4320 # Renewal duration in minutes (default: 3 days); 0 - use initial duration
+  protectionExpiryWarningMinutes: 1440 # Send warning webhook N minutes before expiry (default: 24 hours)
 
 diagnostic:
   logsRetentionDays: 7 # How many days to keep logs