axiodb 22.3.1 → 22.4.2

package/electron/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "axiodb-control",
+  "productName": "AxioDB Control",
+  "version": "22.4.2",
+  "description": "Desktop GUI management application for AxioDB",
+  "main": "dist-electron/main.cjs",
+  "homepage": "https://axiodb.in",
+  "type": "module",
+  "author": {
+    "name": "Ankan Saha",
+    "email": "dev@axiodb.in"
+  },
+  "license": "MIT",
+  "scripts": {
+    "dev": "concurrently -k \"vite\" \"wait-on tcp:5173 && electron .\"",
+    "build:renderer": "vite build",
+    "build:main": "tsc -p tsconfig.json",
+    "build": "npm run build:renderer && npm run build:main && electron-builder --linux deb AppImage --win nsis --mac zip",
+    "dist": "npm run build:renderer && npm run build:main && electron-builder --linux deb AppImage",
+    "dist:linux": "npm run build:renderer && npm run build:main && electron-builder --linux deb AppImage",
+    "dist:win": "npm run build:renderer && npm run build:main && electron-builder --win nsis",
+    "dist:mac": "npm run build:renderer && npm run build:main && electron-builder --mac zip",
+    "dist:rpm": "npm run build:renderer && npm run build:main && electron-builder --linux rpm",
+    "dist:all": "npm run build:renderer && npm run build:main && electron-builder --linux deb AppImage --win nsis --mac zip",
+    "pack": "npm run build:renderer && npm run build:main && electron-builder --dir"
+  },
+  "dependencies": {
+    "@heroicons/react": "^1.0.6",
+    "@tailwindcss/vite": "^4.1.10",
+    "axios": "^1.12.0",
+    "framer-motion": "^12.23.12",
+    "react": "^19.1.0",
+    "react-dom": "^19.1.0",
+    "react-router-dom": "^7.6.2",
+    "recharts": "^2.15.4",
+    "tailwindcss": "^4.1.10",
+    "zustand": "^5.0.6"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.0",
+    "@types/react": "^19.1.2",
+    "@types/react-dom": "^19.1.2",
+    "@vitejs/plugin-react-swc": "^3.9.0",
+    "concurrently": "^9.1.2",
+    "cross-env": "^7.0.3",
+    "electron": "^34.2.0",
+    "electron-builder": "^25.1.8",
+    "typescript": "^5.8.0",
+    "vite": "^6.3.5",
+    "wait-on": "^8.0.2"
+  }
+}

package/electron/resources/after-install.sh

@@ -0,0 +1,45 @@
+#!/bin/bash
+set -e
+
+# Create command line link in /usr/bin
+if type update-alternatives 2>/dev/null >&1; then
+    if [ -L '/usr/bin/axiodb-control' -a -e '/usr/bin/axiodb-control' -a "`readlink '/usr/bin/axiodb-control'`" != '/etc/alternatives/axiodb-control' ]; then
+        rm -f '/usr/bin/axiodb-control'
+    fi
+    update-alternatives --install '/usr/bin/axiodb-control' 'axiodb-control' '/opt/AxioDB Control/axiodb-control' 100 || ln -sf '/opt/AxioDB Control/axiodb-control' '/usr/bin/axiodb-control'
+else
+    ln -sf '/opt/AxioDB Control/axiodb-control' '/usr/bin/axiodb-control'
+fi
+
+# Ensure chrome-sandbox permissions
+if [ -f '/opt/AxioDB Control/chrome-sandbox' ]; then
+    if ! { [[ -L /proc/self/ns/user ]] && unshare --user true; }; then
+        chmod 4755 '/opt/AxioDB Control/chrome-sandbox' || true
+    else
+        chmod 0755 '/opt/AxioDB Control/chrome-sandbox' || true
+    fi
+fi
+
+# Ensure authentic regular PNG file in /usr/share/pixmaps/ with standard read permissions
+if [ -d /usr/share/pixmaps ]; then
+    if [ -f /usr/share/icons/hicolor/512x512/apps/axiodb-control.png ]; then
+        cp -f /usr/share/icons/hicolor/512x512/apps/axiodb-control.png /usr/share/pixmaps/axiodb-control.png || true
+    elif [ -f "/opt/AxioDB Control/resources/icon.png" ]; then
+        cp -f "/opt/AxioDB Control/resources/icon.png" /usr/share/pixmaps/axiodb-control.png || true
+    fi
+    chmod 644 /usr/share/pixmaps/axiodb-control.png 2>/dev/null || true
+fi
+
+# Update icon caches so GNOME/KDE/XFCE/Cinnamon immediately recognizes the app icon
+if hash gtk-update-icon-cache 2>/dev/null; then
+    gtk-update-icon-cache -q -t -f /usr/share/icons/hicolor || true
+fi
+
+# Update mime and desktop databases
+if hash update-mime-database 2>/dev/null; then
+    update-mime-database /usr/share/mime || true
+fi
+
+if hash update-desktop-database 2>/dev/null; then
+    update-desktop-database /usr/share/applications || true
+fi

package/electron/resources/after-remove.sh

@@ -0,0 +1,29 @@
+#!/bin/bash
+set -e
+
+# Remove /usr/bin link
+if type update-alternatives 2>/dev/null >&1; then
+    update-alternatives --remove 'axiodb-control' '/opt/AxioDB Control/axiodb-control' || true
+fi
+if [ -L '/usr/bin/axiodb-control' ]; then
+    rm -f '/usr/bin/axiodb-control' || true
+fi
+
+# Remove pixmap file or symlink if present
+if [ -e /usr/share/pixmaps/axiodb-control.png ] || [ -L /usr/share/pixmaps/axiodb-control.png ]; then
+    rm -f /usr/share/pixmaps/axiodb-control.png || true
+fi
+
+# Update icon caches
+if hash gtk-update-icon-cache 2>/dev/null; then
+    gtk-update-icon-cache -q -t -f /usr/share/icons/hicolor || true
+fi
+
+# Update mime and desktop database
+if hash update-mime-database 2>/dev/null; then
+    update-mime-database /usr/share/mime || true
+fi
+
+if hash update-desktop-database 2>/dev/null; then
+    update-desktop-database /usr/share/applications || true
+fi

package/electron/src/App.jsx

@@ -0,0 +1,128 @@
+import React, { useEffect, useState } from "react";
+import { HashRouter as Router, Routes, Route, Navigate, useLocation } from "react-router-dom";
+import Titlebar from "./layout/Titlebar";
+import Sidebar from "./layout/Sidebar";
+import StatusBar from "./layout/StatusBar";
+import Welcome from "./pages/Welcome";
+import ConnectionHub from "./pages/ConnectionHub";
+import Documents from "./pages/Documents";
+import Dashboard from "./pages/Dashboard";
+import Import from "./pages/Import";
+import UserManagement from "./pages/UserManagement";
+import ForcePasswordChangeModal from "./components/auth/ForcePasswordChangeModal";
+import ErrorBoundary from "./components/ui/ErrorBoundary";
+import { useConnectionStore } from "./store/connectionStore";
+import { useAuthStore } from "./store/authStore";
+import authApi from "./api/authApi";
+
+const MainLayout = ({ children }) => {
+  const location = useLocation();
+
+  return (
+    <div className="flex-1 flex overflow-hidden bg-slate-50 text-slate-800">
+      <Sidebar />
+      <main
+        key={location.pathname}
+        className="flex-1 overflow-hidden bg-slate-50 flex flex-col animate-fadeIn min-w-0"
+      >
+        {children}
+      </main>
+    </div>
+  );
+};
+
+const AppContent = () => {
+  const { hasSeenWelcome, setHasSeenWelcome, isConnected, setPingLatency, getBaseUrl } = useConnectionStore();
+  const { mustChangePassword } = useAuthStore();
+  const [showForcePassword, setShowForcePassword] = useState(false);
+
+  useEffect(() => {
+    if (mustChangePassword) {
+      setShowForcePassword(true);
+    }
+  }, [mustChangePassword]);
+
+  // Periodic health ping every 10 seconds while connected — keeps the
+  // "connected X ms" latency in the titlebar and status bar fresh.
+  useEffect(() => {
+    if (!isConnected) return;
+
+    const ping = async () => {
+      try {
+        const res = await authApi.ping(getBaseUrl());
+        setPingLatency(res.latency);
+      } catch {
+        setPingLatency(null);
+      }
+    };
+
+    ping();
+    const interval = setInterval(ping, 10000);
+    return () => clearInterval(interval);
+  }, [isConnected, getBaseUrl, setPingLatency]);
+
+  // First launch: Animated Welcome
+  if (!hasSeenWelcome) {
+    return (
+      <div className="h-screen flex flex-col bg-slate-50 overflow-hidden text-slate-900">
+        <Titlebar />
+        <Welcome onGetStarted={() => setHasSeenWelcome(true)} />
+      </div>
+    );
+  }
+
+  // Offline: Connection Hub
+  if (!isConnected) {
+    return (
+      <div className="h-screen flex flex-col bg-slate-50 overflow-hidden text-slate-900">
+        <Titlebar />
+        <ConnectionHub
+          onConnected={() => {}}
+          onForcePasswordChange={() => setShowForcePassword(true)}
+        />
+        <ForcePasswordChangeModal
+          isOpen={showForcePassword}
+          onSuccess={() => setShowForcePassword(false)}
+        />
+      </div>
+    );
+  }
+
+  // Connected: Full Native Desktop Workspace
+  return (
+    <div className="h-screen flex flex-col bg-slate-50 overflow-hidden text-slate-900">
+      <Titlebar />
+
+      <ErrorBoundary>
+        <MainLayout>
+          <Routes>
+            <Route path="/" element={<Documents />} />
+            <Route path="/metrics" element={<Dashboard />} />
+            <Route path="/import" element={<Import />} />
+            <Route path="/users" element={<UserManagement />} />
+            <Route path="*" element={<Navigate to="/" replace />} />
+          </Routes>
+        </MainLayout>
+      </ErrorBoundary>
+
+      <StatusBar />
+
+      <ForcePasswordChangeModal
+        isOpen={showForcePassword}
+        onSuccess={() => setShowForcePassword(false)}
+      />
+    </div>
+  );
+};
+
+function App() {
+  return (
+    <ErrorBoundary>
+      <Router>
+        <AppContent />
+      </Router>
+    </ErrorBoundary>
+  );
+}
+
+export default App;

package/electron/src/api/authApi.js

@@ -0,0 +1,83 @@
+import apiClient from "./client";
+import { useConnectionStore } from "../store/connectionStore";
+
+const authApi = {
+  // Liveness & latency check
+  ping: async (targetBaseUrl) => {
+    const start = performance.now();
+    const url = targetBaseUrl ? `${targetBaseUrl.replace(/\/+$/, "")}/api/health` : "/api/health";
+    const res = await apiClient.get(url);
+    const latency = Math.max(1, Math.round(performance.now() - start));
+    const resultObj = { latency, success: true, ...(res.data || {}) };
+    return { ...res, ...resultObj };
+  },
+
+  // Login supporting both (username, password) and ({ username, password })
+  login: async (usernameOrObj, maybePassword) => {
+    let username = usernameOrObj;
+    let password = maybePassword;
+    if (typeof usernameOrObj === "object" && usernameOrObj !== null) {
+      username = usernameOrObj.username;
+      password = usernameOrObj.password;
+    }
+    const res = await apiClient.post("/api/auth/login", { username, password });
+    const userData = res.data?.data || {};
+    return { ...res, ...userData };
+  },
+
+  logout: () => apiClient.post("/api/auth/logout"),
+  fetchMe: () => apiClient.get("/api/auth/me"),
+  changePassword: (currentPassword, newPassword) =>
+    apiClient.patch("/api/auth/change-password", { currentPassword, newPassword }),
+
+  listUsers: () => apiClient.get("/api/auth/users"),
+  createUser: (username, password, role) =>
+    apiClient.post("/api/auth/users", { username, password, role }),
+  updateUserRole: (username, role) =>
+    apiClient.patch(`/api/auth/users/${encodeURIComponent(username)}/role`, { role }),
+  resetUserPassword: (username, newPassword) =>
+    apiClient.patch(`/api/auth/users/${encodeURIComponent(username)}/reset-password`, { newPassword }),
+  deleteUser: (username) => apiClient.delete(`/api/auth/users/${encodeURIComponent(username)}`),
+
+  listRoles: () => apiClient.get("/api/auth/roles"),
+  createRole: (roleName, permissions) =>
+    apiClient.post("/api/auth/roles", { roleName, permissions }),
+  listPermissions: () => apiClient.get("/api/auth/roles/permissions"),
+
+  // Direct probe alias
+  checkHealth: (targetBaseUrl) => authApi.ping(targetBaseUrl),
+
+  // Export a database as a tar.gz archive — uses native IPC in Electron for binary
+  // streaming, with a browser blob-download fallback for web dev.
+  exportDatabase: async (dbName) => {
+    const baseUrl = useConnectionStore.getState().getBaseUrl();
+
+    if (typeof window !== "undefined" && window.electronAPI?.exportDatabase) {
+      return window.electronAPI.exportDatabase(dbName, baseUrl);
+    }
+
+    const response = await apiClient.get("/api/db/export-database/", {
+      params: { dbName },
+      responseType: "blob",
+    });
+
+    const disposition = response.headers["content-disposition"];
+    const match = disposition?.match(/filename="(.+)"/);
+    const downloadName = match ? match[1] : `${dbName}.tar.gz`;
+
+    const url = window.URL.createObjectURL(new Blob([response.data], {
+      type: response.headers["content-type"] || "application/gzip",
+    }));
+    const link = document.createElement("a");
+    link.href = url;
+    link.setAttribute("download", downloadName);
+    document.body.appendChild(link);
+    link.click();
+    link.remove();
+    window.URL.revokeObjectURL(url);
+
+    return { canceled: false, success: true, filePath: downloadName };
+  },
+};
+
+export default authApi;

package/electron/src/api/client.js

@@ -0,0 +1,102 @@
+import axios from "axios";
+import { useConnectionStore } from "../store/connectionStore";
+import { useAuthStore } from "../store/authStore";
+
+const sanitizeHeaders = (rawHeaders) => {
+  const result = {};
+  if (!rawHeaders) return result;
+
+  const headersObj = typeof rawHeaders.toJSON === "function" ? rawHeaders.toJSON() : rawHeaders;
+
+  for (const [key, val] of Object.entries(headersObj)) {
+    if (val !== undefined && val !== null && typeof val !== "object") {
+      result[key] = String(val);
+    }
+  }
+  return result;
+};
+
+const customIpcAdapter = async (config) => {
+  if (typeof window !== "undefined" && window.electronAPI?.request) {
+    let fullUrl = config.url;
+    if (!fullUrl.startsWith("http://") && !fullUrl.startsWith("https://")) {
+      const baseUrl = config.baseURL || useConnectionStore.getState().getBaseUrl();
+      fullUrl = `${baseUrl.replace(/\/+$/, "")}/${fullUrl.replace(/^\/+/, "")}`;
+    }
+
+    try {
+      const res = await window.electronAPI.request({
+        url: fullUrl,
+        method: config.method || "GET",
+        headers: sanitizeHeaders(config.headers),
+        data: config.data,
+        params: config.params,
+        timeout: config.timeout,
+      });
+
+      const response = {
+        data: res.data,
+        status: res.status,
+        statusText: res.statusText,
+        headers: res.headers,
+        config,
+        request: {},
+      };
+
+      const validate = config.validateStatus || ((status) => status >= 200 && status < 300);
+      if (validate(res.status)) {
+        return response;
+      }
+
+      const message =
+        res.data && typeof res.data === "object" && res.data.message
+          ? String(res.data.message)
+          : `Request failed with status code ${res.status}`;
+
+      const error = new axios.AxiosError(
+        message,
+        res.status === 401 ? "ERR_BAD_REQUEST" : undefined,
+        config,
+        {},
+        response
+      );
+      return Promise.reject(error);
+    } catch (err) {
+      return Promise.reject(err);
+    }
+  }
+
+  // Fallback to standard fetch/xhr in browser dev
+  return axios.defaults.adapter(config);
+};
+
+const apiClient = axios.create({
+  adapter: customIpcAdapter,
+  withCredentials: true,
+  timeout: 30000,
+});
+
+apiClient.interceptors.request.use((config) => {
+  const baseUrl = useConnectionStore.getState().getBaseUrl();
+  config.baseURL = baseUrl;
+  return config;
+});
+
+apiClient.interceptors.response.use(
+  (response) => response,
+  (error) => {
+    if (error.response?.status === 401) {
+      const isLogin = error.config?.url?.includes("/api/auth/login");
+      if (!isLogin) {
+        useAuthStore.getState().clearSession();
+        useConnectionStore.getState().setConnectionError(
+          error.response?.data?.message || "Session expired or unauthorized (401). Please log in again."
+        );
+      }
+    }
+    return Promise.reject(error);
+  }
+);
+
+export default apiClient;
+export { customIpcAdapter, sanitizeHeaders };

package/electron/src/components/auth/CreateRoleModal.jsx

@@ -0,0 +1,189 @@
+import { useEffect, useState } from 'react'
+import authApi from '../../api/authApi'
+import Modal from '../ui/Modal'
+import Button from '../ui/Button'
+import { Input } from '../ui/Field'
+import { Alert, Badge, Skeleton } from '../ui/Feedback'
+
+const CreateRoleModal = ({ isOpen, onClose, onRoleCreated }) => {
+  const [roleName, setRoleName] = useState('')
+  const [permissionCatalogue, setPermissionCatalogue] = useState([])
+  const [selectedPermissions, setSelectedPermissions] = useState([])
+  const [isLoadingPermissions, setIsLoadingPermissions] = useState(false)
+  const [isSubmitting, setIsSubmitting] = useState(false)
+  const [error, setError] = useState('')
+
+  useEffect(() => {
+    if (!isOpen) return
+
+    setIsLoadingPermissions(true)
+    authApi
+      .listPermissions()
+      .then((response) => setPermissionCatalogue(response.data.data || []))
+      .catch(() => setError('Failed to load permission catalogue'))
+      .finally(() => setIsLoadingPermissions(false))
+  }, [isOpen])
+
+  const handleClose = () => {
+    setRoleName('')
+    setSelectedPermissions([])
+    setError('')
+    setIsSubmitting(false)
+    onClose()
+  }
+
+  const togglePermission = (key) => {
+    setSelectedPermissions((prev) =>
+      prev.includes(key) ? prev.filter((p) => p !== key) : [...prev, key]
+    )
+  }
+
+  const toggleGroup = (groupKeys, allSelected) => {
+    setSelectedPermissions((prev) => {
+      if (allSelected) {
+        return prev.filter((p) => !groupKeys.includes(p))
+      }
+      return [...new Set([...prev, ...groupKeys])]
+    })
+  }
+
+  const groupedPermissions = permissionCatalogue.reduce((acc, perm) => {
+    acc[perm.group] = acc[perm.group] || []
+    acc[perm.group].push(perm)
+    return acc
+  }, {})
+
+  const handleSubmit = async (e) => {
+    e.preventDefault()
+
+    if (!roleName.trim()) {
+      setError('Role name is required')
+      return
+    }
+    if (selectedPermissions.length === 0) {
+      setError('Select at least one permission')
+      return
+    }
+
+    setIsSubmitting(true)
+    setError('')
+
+    try {
+      await authApi.createRole(roleName, selectedPermissions)
+      onRoleCreated()
+      handleClose()
+    } catch (err) {
+      setError(err.response?.data?.message || 'Failed to create role. Please try again.')
+      setIsSubmitting(false)
+    }
+  }
+
+  const ShieldIcon = (
+    <svg className='h-5 w-5' fill='none' viewBox='0 0 24 24' stroke='currentColor' strokeWidth={2}>
+      <path strokeLinecap='round' strokeLinejoin='round' d='M9 12l2 2 4-4M12 3l7 4v5c0 4.42-3.05 8.56-7 9.75C8.05 20.56 5 16.42 5 12V7l7-4z' />
+    </svg>
+  )
+
+  return (
+    <Modal
+      isOpen={isOpen}
+      onClose={handleClose}
+      title='Create role'
+      subtitle={`${selectedPermissions.length} permission${selectedPermissions.length === 1 ? '' : 's'} selected`}
+      icon={ShieldIcon}
+      size='lg'
+      footer={
+        <>
+          <Button variant='secondary' onClick={handleClose} disabled={isSubmitting}>
+            Cancel
+          </Button>
+          <Button
+            onClick={handleSubmit}
+            loading={isSubmitting}
+            disabled={!roleName.trim() || selectedPermissions.length === 0}
+          >
+            Create role
+          </Button>
+        </>
+      }
+    >
+      <form onSubmit={handleSubmit} className='space-y-5'>
+        <Input
+          label='Role name'
+          value={roleName}
+          onChange={(event) => setRoleName(event.target.value)}
+          placeholder='Auditor'
+          autoFocus
+          autoComplete='off'
+          hint='Shown wherever roles are assigned. Choose something that describes the job, not the person.'
+        />
+
+        <div>
+          <p className='mb-2 text-sm font-medium text-ink-700'>Permissions</p>
+
+          {isLoadingPermissions
+            ? (
+              <div className='space-y-2'>
+                {[0, 1, 2].map((i) => <Skeleton key={i} className='h-20 w-full' />)}
+              </div>
+              )
+            : (
+              <div className='space-y-3'>
+                {Object.entries(groupedPermissions).map(([group, permissions]) => {
+                  const groupKeys = permissions.map((permission) => permission.key)
+                  const allSelected = groupKeys.every((key) => selectedPermissions.includes(key))
+
+                  return (
+                    <div key={group} className='rounded-lg border border-ink-200 bg-white'>
+                      <div className='flex items-center justify-between border-b border-ink-100 px-4 py-2.5'>
+                        <span className='text-sm font-semibold text-ink-900'>{group}</span>
+                        <button
+                          type='button'
+                          onClick={() => toggleGroup(groupKeys, allSelected)}
+                          className='text-xs font-medium text-brand-700 transition-colors hover:text-brand-800'
+                        >
+                          {allSelected ? 'Clear all' : 'Select all'}
+                        </button>
+                      </div>
+                      <div className='grid gap-1 p-2 sm:grid-cols-2'>
+                        {permissions.map((permission) => (
+                          <label
+                            key={permission.key}
+                            className='flex cursor-pointer items-start gap-2.5 rounded-md px-2 py-1.5 transition-colors hover:bg-ink-50'
+                          >
+                            <input
+                              type='checkbox'
+                              checked={selectedPermissions.includes(permission.key)}
+                              onChange={() => togglePermission(permission.key)}
+                              className='mt-0.5 h-4 w-4 shrink-0 rounded border-ink-300 text-brand-600 focus:ring-brand-500'
+                            />
+                            <span className='min-w-0'>
+                              <span className='block truncate text-sm text-ink-800'>
+                                {permission.description}
+                              </span>
+                              <span className='block truncate font-mono text-[11px] text-ink-400'>
+                                {permission.key}
+                              </span>
+                            </span>
+                          </label>
+                        ))}
+                      </div>
+                    </div>
+                  )
+                })}
+              </div>
+              )}
+        </div>
+
+        {selectedPermissions.length > 0 && (
+          <Badge tone='brand'>{selectedPermissions.length} selected</Badge>
+        )}
+
+        {error && <Alert tone='danger'>{error}</Alert>}
+        <button type='submit' className='hidden' aria-hidden='true' tabIndex={-1} />
+      </form>
+    </Modal>
+  )
+}
+
+export default CreateRoleModal