Changelog

• Per-method authentication — each HTTP method (GET, POST, PUT, DELETE) can now independently require a JWT. Public reads with authenticated writes are a single toggle per table.
• Password reset flow — generated backends now include POST /forgot-password, POST /reset-password, and POST /change-password endpoints. Tokens expire after 1 hour and are delivered via your project's configured SMTP.
• Project backups — download a ZIP of your live database and schema JSON from the Backups page.
• Analytics dashboard — real-time request counts, status code breakdown, and per-project traffic graphs.
• Alpine.js bundled via npm — replaced CDN dependency with a Vite-compiled bundle for improved reliability and offline support.
• Schema versioning — exported schemas now include a schema_version: "2.0" field. Backwards-compatible import of v1.0 schemas still supported.
• Schema export/import and Clone now include all per-method auth fields.
• API documentation updated to reflect per-method auth badges and authentication banners per endpoint.

• Custom PHP scripts — write arbitrary PHP executed inside your generated backend. Optionally expose any script as a GET|POST /s/{slug} API endpoint with access to $pdo, requestData(), checkAuth(), and respond().
• Query endpoints — build read-only GET /q/{slug} endpoints visually without writing SQL: pick a table, select fields, add WHERE conditions, set ORDER BY and LIMIT.
• Cron tasks — schedule no-code database operations (delete_old, update_field) at every-minute, hourly, daily, or weekly frequency. The platform calls /_cron automatically for deployed projects.
• Outbound hooks — fire HTTP POST/GET/PUT/PATCH/DELETE requests to any URL on create, update, or delete events. Custom headers supported. Embedded in the generated PHP and works in both sandbox and downloaded code.
• Email templates — write HTML email templates with {{variable}} placeholder support. Each active template gets a POST /send-email/{slug} API endpoint automatically.
• Email triggers — auto-send emails when a record is created, updated, or deleted. Send to a field from the row (e.g. email) or a fixed address.
• SMTP configuration — configure per-project SMTP credentials (host, port, encryption, from address). Includes reset_password_url for password reset links.
• Ace code editor — PHP and HTML editors with syntax highlighting, indentation, and theme support for scripts and email templates.

• Inbound webhooks — subscribe to CRUD events on any table. Every call includes an X-Signature-256 HMAC-SHA256 header computed from your shared secret.
• Sandbox data viewer — browse, search, and paginate live records inside the sandbox without leaving the platform.
• Seed data — generate realistic Faker data for any table in the sandbox with one click.
• Sandbox deploy / undeploy — deploy and undeploy your backend instantly. Data persists across deploys.
• Request log — every sandbox request is logged (method, path, status, duration) and visible in the Analytics tab.

• Visual schema builder — create tables and columns without writing SQL. 12 field types: text, number, decimal, boolean, date, email, URL, JSON, password, file, enum, relation.
• Full CRUD API — every table gets GET, POST, PUT, DELETE, paginate, bulk create/delete, soft-delete restore, and CSV/JSON export endpoints.
• Auth table — mark any table as the auth provider to generate POST /register, POST /login, and GET /me with JWT (HS256) authentication. Password columns are bcrypt-hashed automatically.
• 1-click sandbox — deploy a live REST API in seconds, hosted on the platform at /api/{slug}/.
• PHP + SQLite export — download a single self-contained index.php with no Composer dependencies. Deploy anywhere PHP runs.
• OpenAPI docs — auto-generated Swagger UI and /openapi.json spec for every project. Includes schema, endpoints, auth requirements, and example requests.
• Column validation — required, min, max, pattern (regex), unique, enum values, and relation (foreign key) constraints — all validated at the API layer.
• Relation expansion — relation columns auto-expand the referenced row in list and get responses.
• Soft deletes — every table includes deleted_at. DELETE soft-deletes; POST /{id}/restore recovers it.
• Schema import / export / clone — export any project as a versioned JSON schema, import it to create a new project, or clone an existing one.
• Project templates — start from pre-built schemas: Blog, E-Commerce, SaaS, CRM.
• Project settings — configure JWT expiry, rate limit (req/min), and CORS origins per project.
• Search, sort & filter — all list endpoints support ?search=, ?sort=&order=, and ?filter_{field}= query parameters.
• Rate limiting — per-IP rate limiting (default 100 req/min) enforced inside the generated PHP.
• CORS — configurable Access-Control-Allow-Origin embedded in the generated PHP. Defaults to *.
• Multi-language UI — platform interface available in English, Spanish, German, French, and Italian.
• User profile & password management — update name, email, and password from the profile page.

Internal testing of the core code generation engine.