Technology stack
Overview of the frameworks, runtimes, drivers, and AI lanes actually used in Data Explorer today.
Frontend
| Technology | Version | Purpose |
|---|---|---|
| React | 19.2.x | Primary UI foundation for the entire client application. |
| Vite | 7.3.x | Fast dev server and build pipeline. |
| TypeScript | 5.9.x | Type safety for the client app; the backend currently uses its own TypeScript toolchain in the server package. |
| Tailwind CSS | 4.1.x | Utility-first styling across the whole UI surface. |
| Framer Motion | 12.38.x | Animation layer for transitions, drawers, AI bubbles, and motion-heavy UI. |
| Zustand | 5.0.x | Slice-based state management for tabs, AI chat, connections, and the shell. |
| @monaco-editor/react | 4.7.x | The Monaco wrapper used for the SQL editor, MQL editor, shortcuts, formatting, and completions. |
| @tanstack/react-query | 5.90.x | Server state, caching, and request synchronization. |
| @xyflow/react | 12.10.x | Canvas engine for ERD and visual diagram flows. |
| lucide-react | 0.563.x | Modern and flexible vector icon set. |
Backend
| Technology | Version | Purpose |
|---|---|---|
| NestJS | 11.x | Primary backend framework with module boundaries and DI. |
| Prisma | 6.19.x | ORM for app metadata: users, connections, saved queries, dashboards, billing metadata, and team entities. |
| BullMQ | 5.74.x | Background job queue management, currently most visible in migration and async workflows. |
| ioredis | 5.10.x | Redis connectivity for presence, notifications, cache, search indexing, and internal coordination. |
| Passport + JWT | 11.x / 4.x | Email login, Google/GitHub OAuth, and JWT session flow. |
| pg / mysql2 / mssql | 8.18 / 3.16 / 12.2 | Native database drivers for flexible SQL execution. |
| mongodb | 7.1.x | MongoDB driver for the NoSQL workspace and document-oriented execution. |
| RxJS | 7.8.x | Async stream processing, especially for AI SSE. |
Infra & Middleware
| Service | Provider | Purpose |
|---|---|---|
| Redis | Local / Upstash / AWS | Caching, BullMQ backend, and Rate limiting. |
| PostgreSQL | Local / Neon / Supabase | Metastore storing all internal app data. |
| Docker | Containerization | Packaging the entire ecosystem for one-click deployment. |
| Nginx | In Docker stack | Reverse proxy and serving frontend static files. |
AI stack & routing
| Lane / Provider | Example model | Purpose |
|---|---|---|
| Gemini default high-quality lane | gemini-3.5-flash / gemini-3.1-pro-preview / gemini-2.5-flash | The strongest default lane for reasoning, attachment-aware work, and requests that need higher reliability. |
| OpenRouter default auto lane | Env default hoặc model explicit từ catalog | The flexible lane behind the default auto chain, part of the vision flow, and some web-backed search paths depending on the model. |
| Groq fast lane | Llama 4 Scout / Llama 3.3 70B / Mixtral | The low-latency lane for rapid chat and short iteration loops. |
| Cerebras low-cost lane | Env-configured text model | A lower-cost lane for lighter prompts, not the main path for vision or live search. |
| Beeknoee explicit lane | GLM 4.7 Flash / Qwen 3 235B / MiniMax M2.7 | An explicit provider from the model catalog when you want to lock to a concrete model instead of relying on default fallback. |
The AI panel now supports routing modes such as Auto, Fast / Cheap, Best Quality, and Gemini Only. The UI also shows the actual provider/model that answered so routing decisions stay transparent. In the current wiring, Beeknoee is an explicit lane and does not insert itself into the default auto chain.
Testing & quality
| Tool | Version | Purpose |
|---|---|---|
| Vitest | 4.1.x | Frontend unit tests and component tests. |
| React Testing Library | 16.3.x | User-behavior-oriented UI testing. |
| Jest | 30.x | Backend test runner for NestJS services and controllers. |
| ts-jest | 29.2.x | TypeScript transform for the backend test suite. |
| fast-check | 4.x | Property-based fuzzing generating thousands of randomized inputs against the SQL/NoSQL guards and SSRF validator. |
| Pentest suites (Jest) | — | Adversarial suites simulating real attacks: identifier smuggling, CSRF header spoofing, IPv4-mapped IPv6, and unterminated literals. |
| Playwright | 1.5x | Multi-browser E2E (Chromium + Firefox) covering checkout, billing return, and the responsive workspace. |
| Trivy + SBOM | CI | Image vulnerability scanning, SBOM generation, and pinned base images in the containers pipeline. |
Ready to explore data?
Join the community on GitHub to contribute to the smartest local database IDE.
Launch App