Replace next-auth with Better Auth, migrate DB columns to camelCase

- Replace next-auth v5 beta with better-auth v1.6.2 (stable releases)
- Add multi-provider OAuth support with admin UI configuration
- New oauthProviders table with encrypted secrets (AES-256-GCM)
- Env var bootstrap (OAUTH_*) syncs to DB, UI-created providers fully editable
- OAuth provider REST API: GET/POST/PUT/DELETE /api/v1/oauth-providers
- Settings page "Authentication Providers" section for admin management
- Account linking uses new accounts table (multi-provider per user)
- Username plugin for credentials sign-in (replaces email@localhost pattern)
- bcrypt password compatibility (existing hashes work)
- Database-backed sessions via Kysely adapter (bun:sqlite direct)
- Configurable rate limiting via AUTH_RATE_LIMIT_* env vars
- All DB columns migrated from snake_case to camelCase
- All TypeScript types/models migrated to camelCase properties
- Removed casing: "snake_case" from Drizzle config
- Callback URL format: {baseUrl}/api/auth/oauth2/callback/{providerId}
- package-lock.json removed and gitignored (using bun.lock)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

app/(dashboard)/l4-proxy-hosts/L4ProxyHostsClient.tsx

@@ -31,9 +31,9 @@ type Props = {
 };
 
 function formatMatcher(host: L4ProxyHost): string {
-  switch (host.matcher_type) {
-    case "tls_sni":    return `SNI: ${host.matcher_value.join(", ")}`;
-    case "http_host":  return `Host: ${host.matcher_value.join(", ")}`;
+  switch (host.matcherType) {
+    case "tls_sni":    return `SNI: ${host.matcherValue.join(", ")}`;
+    case "http_host":  return `Host: ${host.matcherValue.join(", ")}`;
     case "proxy_protocol": return "Proxy Protocol";
     default:           return "None";
   }
@@ -111,10 +111,10 @@ export default function L4ProxyHostsClient({ hosts, pagination, initialSearch, i
     {
       id: "listen",
       label: "Listen",
-      sortKey: "listen_address",
+      sortKey: "listenAddress",
       render: (host: L4ProxyHost) => (
         <span className="text-sm font-mono font-medium tabular-nums text-foreground/80">
-          {host.listen_address}
+          {host.listenAddress}
         </span>
       ),
     },
@@ -190,7 +190,7 @@ export default function L4ProxyHostsClient({ hosts, pagination, initialSearch, i
               <ProtocolBadge protocol={host.protocol} />
             </div>
             <p className="text-xs text-muted-foreground font-mono truncate">
-              {host.listen_address}
+              {host.listenAddress}
               <span className="mx-1 text-muted-foreground">→</span>
               {host.upstreams[0]}{host.upstreams.length > 1 ? ` +${host.upstreams.length - 1}` : ""}
             </p>

app/(dashboard)/l4-proxy-hosts/actions.ts

@@ -178,17 +178,17 @@ export async function createL4ProxyHostAction(
     const input: L4ProxyHostInput = {
       name: String(formData.get("name") ?? "Untitled"),
       protocol: parseProtocol(formData),
-      listen_address: String(formData.get("listen_address") ?? "").trim(),
+      listenAddress: String(formData.get("listen_address") ?? "").trim(),
       upstreams: parseUpstreams(formData.get("upstreams")),
-      matcher_type: matcherType,
-      matcher_value: matcherValue,
-      tls_termination: parseCheckbox(formData.get("tls_termination")),
-      proxy_protocol_version: parseProxyProtocolVersion(formData),
-      proxy_protocol_receive: parseCheckbox(formData.get("proxy_protocol_receive")),
+      matcherType: matcherType,
+      matcherValue: matcherValue,
+      tlsTermination: parseCheckbox(formData.get("tls_termination")),
+      proxyProtocolVersion: parseProxyProtocolVersion(formData),
+      proxyProtocolReceive: parseCheckbox(formData.get("proxy_protocol_receive")),
       enabled: parseCheckbox(formData.get("enabled")),
-      load_balancer: parseL4LoadBalancerConfig(formData),
-      dns_resolver: parseL4DnsResolverConfig(formData),
-      upstream_dns_resolution: parseL4UpstreamDnsResolutionConfig(formData),
+      loadBalancer: parseL4LoadBalancerConfig(formData),
+      dnsResolver: parseL4DnsResolverConfig(formData),
+      upstreamDnsResolution: parseL4UpstreamDnsResolutionConfig(formData),
       ...parseL4GeoBlockConfig(formData),
     };
 
@@ -219,17 +219,17 @@ export async function updateL4ProxyHostAction(
     const input: Partial<L4ProxyHostInput> = {
       name: formData.get("name") ? String(formData.get("name")) : undefined,
       protocol: parseProtocol(formData),
-      listen_address: formData.get("listen_address") ? String(formData.get("listen_address")).trim() : undefined,
+      listenAddress: formData.get("listen_address") ? String(formData.get("listen_address")).trim() : undefined,
       upstreams: formData.get("upstreams") ? parseUpstreams(formData.get("upstreams")) : undefined,
-      matcher_type: matcherType,
-      matcher_value: matcherValue,
-      tls_termination: parseCheckbox(formData.get("tls_termination")),
-      proxy_protocol_version: parseProxyProtocolVersion(formData),
-      proxy_protocol_receive: parseCheckbox(formData.get("proxy_protocol_receive")),
+      matcherType: matcherType,
+      matcherValue: matcherValue,
+      tlsTermination: parseCheckbox(formData.get("tls_termination")),
+      proxyProtocolVersion: parseProxyProtocolVersion(formData),
+      proxyProtocolReceive: parseCheckbox(formData.get("proxy_protocol_receive")),
       enabled: formData.has("enabled_present") ? parseCheckbox(formData.get("enabled")) : undefined,
-      load_balancer: parseL4LoadBalancerConfig(formData),
-      dns_resolver: parseL4DnsResolverConfig(formData),
-      upstream_dns_resolution: parseL4UpstreamDnsResolutionConfig(formData),
+      loadBalancer: parseL4LoadBalancerConfig(formData),
+      dnsResolver: parseL4DnsResolverConfig(formData),
+      upstreamDnsResolution: parseL4UpstreamDnsResolutionConfig(formData),
       ...parseL4GeoBlockConfig(formData),
     };
 

app/(dashboard)/l4-proxy-hosts/page.tsx

@@ -27,7 +27,7 @@ export default async function L4ProxyHostsPage({ searchParams }: PageProps) {
       hosts={hosts}
       pagination={{ total, page, perPage: PER_PAGE }}
       initialSearch={search ?? ""}
-      initialSort={{ sortBy: sortBy ?? "created_at", sortDir }}
+      initialSort={{ sortBy: sortBy ?? "createdAt", sortDir }}
     />
   );
 }