v11.0.0 — OAuth, Staged Deploys & PR Previews

Highlights

🔐 DB Auth — Google & GitHub OAuth

Supabase-style social sign-in, configured per project. Each project DB now has an auth_providers table; client_secret is AES-GCM encrypted. End users hit /api/db/auth/v1/<slug>/authorize/<provider> and come back with a JWT identical to the existing email login. Auto-link by email, avatar + provider badges in the user list, collapsed-by-default provider cards.

🚀 Web Hosting — Staged Deploys + Instant Rollback

Every deploy now builds into <slug>__staging, healthchecks (HTTP probe for node apps, HTML check for static), then atomically swaps with the live folder. Previous build is archived to <slug>__versions/v_<ts>_<sha>/. Last 3 versions kept for one-click rollback — new "Version History" card in the Overview tab. The live version stays online if a deploy fails.

🤖 AI Fix — now safe and reliable

The old AI Fix mutated the live build and could take the site down. Now it operates on the preserved staging dir (kept on disk after a failed deploy), applies AI patches, runs the full staged pipeline, and only swaps to live if the new build healthchecks green.

📊 Integrations — usage stats & fixed UI

GET /admin/integrations now returns per-integration usage data (total uses, unique apps, last used, per-app breakdown). New summary tiles (Connected · Total Uses · Apps Using · Last Activity) and click-to-expand per-app usage on each card. The "Connect a Service" picker is now scrollable, searchable, and grouped by category.

🔀 PR Previews — Netlify/Vercel-style

Open a PR → automatic preview deploy at /<slug>-pr-<n>/ on its own PM2 port. Sticky GitHub PR comment with the preview URL, build status, and commit SHA. Auto-rebuilds on push, tears down on close/merge. Webhook with HMAC SHA-256 verification, manual rebuild/close from a new "Previews" tab. Forks supported via the saved GitHub integration token.

Migrations

All schema changes are self-healing on first request — no manual migration needed:

• auth_users extended with provider, provider_id, full_name, avatar_url
• New tables: auth_providers (per project), web_hosting_versions, web_hosting_previews
• web_hosting_projects adds previews_enabled, previews_webhook_secret

Files

• backend/services/dbAuthOAuthService.js (new)
• backend/routes/dbAuthOAuth.js (new)
• backend/services/webHostingPreviewService.js (new)
• backend/routes/webHostingWebhook.js (new)
• frontend/src/components/ui/switch.jsx (new)
• Plus updates to dbService, webHostingService, routes/db, routes/webHosting, routes/integrations, server.js, Auth.jsx, IntegrationMonitor.jsx, webhosting/ProjectDashboard.jsx

🤖 Generated with Claude Code