Orbusys

The system is divided into three primary layers: a frontend built with React, TypeScript, and Vite that communicates with a backend API built on Express and MongoDB. Data flow starts at the UI where forms are validated in‑real‑time using React Hook Form and Zod, then passed to the server where Joi schemas enforce strict payload structures before persisting with Mongoose models. Authentication relies on JWT tokens signed with bcrypt‑hashed passwords, while Helmet, CORS, and custom rate‑limiting middleware protect the API from common web threats.

Rich text content is authored with Tiptap, sanitized on the server to prevent XSS, and stored as HTML strings in MongoDB. The drag‑and‑drop ordering feature, powered by dnd‑kit, updates sequence indices instantly; a debounced update mechanism ensures the database remains consistent even under rapid user interactions. Electron bridges the web stack to the desktop, using IPC channels to synchronize local state with the remote API, and Electron Builder packages the app for cross‑platform distribution.

The build pipeline leverages ESLint, PostCSS, and Vite optimizations to produce a lightweight bundle. Security guardrails include JWT expiration handling, password hashing with bcrypt.js, and API throttling to mitigate brute‑force attempts. The overall topology follows a client‑server model with the Electron shell acting as a thin client that mirrors the web experience while providing native capabilities such as file system access and auto‑updates.