https://axiodb.in/changelog Release notes and version history for AxioDB, the embedded database for Node.js. en Fri, 09 Oct 2026 06:28:39 GMT https://axiodb.in/changelog axiodb-22.21.3 Tue, 29 Sep 2026 00:00:00 GMT Changed: `axiodb serve full` now starts with GUI enabled (Dashboard at http://localhost:27018), matching the intent of a full-stack serve mode | Changed: other serve modes (http, tcp, tcp-auth) remain unchanged https://axiodb.in/changelog axiodb-22.21.2 Tue, 29 Sep 2026 00:00:00 GMT Verified: 100-feature runtime test suite passing on Node.js v26.8.1, Bun v1.4.0 (TS/JS runtime + TS/JS compiled binaries), and Deno v2.9.6 | Docs: Deno badge updated from partial 9/12 to tested v2.9.6 across README, llms.txt, llms-full.txt, SKILL.md, and docs-site Introduction page | Docs: Bun compiled binary support confirmed and documented https://axiodb.in/changelog axiodb-22.21.1 Tue, 29 Sep 2026 00:00:00 GMT Docs: footer redesigned with brand column (logo, tagline, version badge, npm link, GitHub/Stars/Forks icons), 4 organized link columns (Get Started, API & Data, Surfaces, Resources), RSS Feed and Blog links, and bottom bar with MIT license and maintainer credit | Docs: Seo component now auto-populates datePublished/dateModified from the latest changelog entry — all 22 pages get article freshness signals without per-page edits | Docs: sitemap.xml lastmod uses the changelog's latest date instead of the build date — Google ignores dates that change on every deploy https://axiodb.in/changelog axiodb-22.20.0 Mon, 28 Sep 2026 00:00:00 GMT Docs: README feature list regrouped into Core / Self-hostable server / Clients and apps — Docker moved out of 'Tooling' (it is a way to run the server, not a tool) and the Dashboard, AxioDBCloud client and Desktop app were split out of the server surfaces, since they are the things that talk to a surface rather than being one | Docs: restored the full `CHOICE` installer examples to the README (a table plus the four `CHOICE=2`/`CHOICE=3` Linux and Windows invocations) which had been reduced to a single sentence during the restructure; the values are verified against the `case` block in `cli/Scripts/install.sh` | Removed: `@fastify/cors`, `@fastify/cookie` and `@fastify/static` — replaced by first-party modules in `source/utility/` (`Cors.utils.ts`, `Cookie.utils.ts`, `StaticFile.utils.ts`), cutting `dependencies` from six packages to three. `fastify`, `tar` and `@fastify/multipart` stay declared, since Node has no built-in HTTP framework, tar container reader, or multipart/form-data parser and reimplementing them would put hand-written code on the security path (tar parsing consumes untrusted bytes; Fastify's `preHandler` short-circuit is what the auth guard depends on). Static file serving keeps explicit path containment — `resolveWithinRoot` rejects any request resolving outside the root, layered behind the existing dot-dot guard https://axiodb.in/changelog axiodb-22.15.1 Sat, 26 Sep 2026 00:00:00 GMT Fixed: aggregation stage count corrected from '60+ stages' to the 19 that are actually implemented (15 in `BUILT_IN_STAGE_OPERATORS` plus `$lookup`, `$facet`, `$bucket`, `$bucketAuto` handled inline in `Aggregation.Operation.ts`) — the inflated figure had propagated into the README, API reference, `llms-full.txt`, and the agent skill | Fixed: AxioDBCloud wire protocol corrected from '32 commands' to the 30 present in `source/tcp/types/command.types.ts` | Fixed: test suite count corrected from 13 to 14 (`aggregation` and `cache-options` were missing from every documented list) in AGENTS.md, CONTRIBUTING.md, copilot-instructions, and the performance/intro pages https://axiodb.in/changelog axiodb-22.11.0 Mon, 21 Sep 2026 00:00:00 GMT Fixed: npm packaging rules — corrected .npmignore rule from `cli/` to `/cli/` (preventing `lib/engine/cli/worker_process.js` from being stripped) and added `/electron/` so desktop GUI source and release artifacts are excluded from npm package deployments | Refactored: Electron desktop app (`AxioDB Control`) now directly imports `AxioDB` from the installed `axiodb` npm package (`import { AxioDB } from "axiodb"`) instead of using brittle relative path require hacks into `../../lib/` | Fixed: Electron storage IPC handlers — added strict type narrowing and safe fallbacks for query results across `store:getConnections`, `store:saveConnection`, `store:getSetting`, and `store:setSetting` https://axiodb.in/changelog axiodb-22.9.7 Mon, 21 Sep 2026 00:00:00 GMT New: Electron desktop GUI (`electron/`) — a full-featured desktop application mirroring the web GUI, with connection management, database/collection/document CRUD, query console, and live health/Latency monitoring | New: Splash screen with animated bouncy-balls loader — eliminates the first-open white flash when the Electron window initializes (transparent: false, backgroundColor: #f8fafc, closed via ready-to-show event) | New: Card-based document view in Electron Documents page — each document rendered as a card with Copy/Edit/Delete hover actions, _id hidden and displayed as #documentId, first 10 fields shown with 'Show more' to expand the rest https://axiodb.in/changelog axiodb-22.1.2 Sun, 06 Sep 2026 00:00:00 GMT Fixed: path traversal — user-controlled database/collection names are now run through PathSanitizer in `createDB`, `deleteDatabase`, `deleteCollection`, and `isCollectionExists` | Fixed: shell injection — `WorkerProcess.exec` (shell string) replaced with spawn-based `execCommandSafely` (no shell, args passed verbatim) for the `du`/`wc`/`powershell` calls in FolderManager/FileManager | Fixed: ReDoS — new `RegexGuard` helper statically rejects nested unbounded quantifiers (`(a+)+`) and overlapping alternation (`(a|aa)+`) in `$regex` / `$regexMatch` / `$match`, enforcing a 512-character pattern cap https://axiodb.in/changelog axiodb-21.7.8 Sat, 05 Sep 2026 00:00:00 GMT Breaking: the module-level InMemoryCache singleton (default export) is gone — every AxioDB instance now owns one cache, built in the constructor and passed down to databases, collections, read/update/delete paths, transactions, and the HTTP/TCP/MCP surfaces | New: `Cache?: boolean` (default true) — `Cache: false` disables caching entirely (reads always hit disk); `minTTL`/`maxTTL` (minutes, default 5/15) bound the per-entry randomized TTL; `cacheClearUp` (seconds, default 86400) sets the cleanup sweep interval | Changed: `InMemoryCache` is now a named export (`import { InMemoryCache }`) with `InMemoryCacheOptions`; the legacy `new InMemoryCache(cacheClearUpSeconds)` overload still works; invalid TTLs (`<= 0`, `maxTTL < minTTL`) throw https://axiodb.in/changelog axiodb-20.4.1 Tue, 01 Sep 2026 00:00:00 GMT Fixed: version drift — root package.json 20.4.1 vs Document 20.4.0 — synced Document/package.json, GUI/package.json, cli/VERSION, llms.txt, llms-full.txt, index.html, changelog to 20.4.1 | Fixed: stale '32 tools' in openapi.json:5, generate-seo-files.ts:210, index.html:262 FAQ — updated to 43 tools to match 43 distinct MCP tools on disk https://axiodb.in/changelog axiodb-20.4.0 Tue, 01 Sep 2026 00:00:00 GMT Fixed: read.test.js 'Exact match on indexed field is fast' flaky on Node 26 (881ms > 500ms on shared runner) — added warm-up query and raised threshold 500 → 1000ms | CI: added Gates 4-7 before matrix (HTTP API, TCP Transaction, TCP TLS, MCP Functional) in Push.yml and auto_ci.yml; auto_ci Gate 8 now non-matrix single 20.x; all versions bumped to 20.4.0 https://axiodb.in/changelog axiodb-20.3.3 Tue, 01 Sep 2026 00:00:00 GMT Docs: renamed tagline to 'SQLite Alternative for JavaScript' across README, package description, Introduction, Header, llms.txt, llms-full.txt | Fixed: Document site TypeScript TS2339 — added 'stars' to badgeUrls type (githubApi.getBadgeUrl('stars')); kept Socket full score via socket.dev/api/badge (dynamic), removed broken shields.io/socket, bundlephobia/minzip, Snyk 404 badges | Docs: added install size, jsDelivr hits, npm types, GitHub Stars dynamic badges to README and site hero; all numbers remain live from npm/GitHub/Socket https://axiodb.in/changelog axiodb-20.3.2 Tue, 01 Sep 2026 00:00:00 GMT Security: patched GHSA-83w8-p2f5-377r / CVE-2026-15074 — @fastify/static 9.3.0 → 10.1.3 fixes route-guard bypass via non-leading .. and %2E%2E path segments (CVSS 7.5); also patched GHSA-8pvw-jcv7-9cmj, GHSA-v2hh-gcrm-f6hx, GHSA-7p8r-x3mc-p8w7, GHSA-c96f-x56v-gq3h, GHSA-r292-9mhp-454m | Updated: @fastify/static 10.1.3, tar 7.5.22, find-my-way 9.9.0, fast-uri 3.1.6 — npm audit 0 vulnerabilities https://axiodb.in/changelog axiodb-20.3.1 Tue, 01 Sep 2026 00:00:00 GMT New: ACID transactions over TCP — BEGIN/COMMIT/ROLLBACK commands routed through a per-connection TransactionManager with WAL-backed durability, Wait-Die deadlock avoidance, and 30-second timeout | New: savepoints over TCP — SAVEPOINT, ROLLBACK_TO_SAVEPOINT, RELEASE_SAVEPOINT commands for partial rollback within a transaction | New: connection-pinned client — TransactionProxy pins all transactional operations to a single TCP connection so in-flight writes are visible to subsequent reads within the same transaction https://axiodb.in/changelog axiodb-19.2.0 Tue, 01 Sep 2026 00:00:00 GMT New: index hints on queries — `collection.query({ status: 'active' }).hint('status').exec()` forces the query engine to use a specific index instead of scanning | New: batch document read — `collection.findByIds(['id1', 'id2'])` retrieves multiple documents by ID in a single call; exposed over HTTP (POST /api/operation/all/by-ids/) and TCP (FIND_BY_IDS command) | Quality: all `any` types removed from the TypeScript source — every file in source/ now uses proper types (Record<string, unknown>, unknown, Document, etc.), zero `any` remaining https://axiodb.in/changelog axiodb-15.2.0 Thu, 27 Aug 2026 00:00:00 GMT New: AxioDB CLI — a Go-based command line tool for interacting with AxioDB servers via the TCP protocol. | New: Interactive REPL mode with MongoDB shell syntax — use, show dbs, show collections, db.coll.find(), db.coll.insert(), and all CRUD operations. | New: All 21 TCP commands supported — database, collection, document CRUD, aggregation, indexing, ping, disconnect. https://axiodb.in/changelog axiodb-15.1.0 Tue, 25 Aug 2026 00:00:00 GMT New: $lookup stage for cross-collection joins — supports both equality join (localField/foreignField) and pipeline-based join with $let/$$var binding. Foreign collection data is loaded via a resolver function threaded from Database through Collection to Aggregation. | New: OperatorRegistry — static class for registering custom stage operators, accumulators, and expression operators. Custom operators integrate seamlessly with built-in operators in the pipeline execution loop. | New: Full expression evaluator supporting 80+ operators — arithmetic ($add, $subtract, $multiply, $divide, $mod, $abs, $ceil, $floor, $sqrt, $pow, $round), string ($concat, $substr, $toLower, $toUpper, $trim, $split, $replaceOne, $replaceAll, $regexMatch), comparison ($eq, $gt, $gte, $lt, $lte, $ne, $cmp), logical ($and, $or, $not, $cond, $ifNull, $switch), array ($filter, $map, $reduce, $arrayElemAt, $concatArrays, $size, $slice, $range, $sortArray, $reverseArray, $zip), date ($year, $month, $dayOfMonth, $hour, $minute, $second, $dayOfWeek, $dayOfYear, $week, $dateToString, $dateFromString, $dateDiff, $dateAdd, $dateSubtract), type ($type, $convert, $toString, $toInt, $toDouble, $toBool, $isNumber, $isArray), set ($setEquals, $setIntersection, $setUnion, $setDifference, $setIsSubset), and misc ($literal, $getField, $mergeObjects, $let). https://axiodb.in/changelog axiodb-15.0.0 Sun, 09 Aug 2026 00:00:00 GMT Breaking, on-disk: the per-database collection registry moved from collection.meta (one JSON array) to collection.meta.jsonl (one appended line per collection). There is no migration - a database created before this release opens with an empty collection list until its collections are recreated. The .axiodb document files themselves are untouched. | Breaking, on-disk: the transaction registry moved from .transactions/txn-meta.json to .transactions/txn-meta.jsonl, and WAL files from {transactionId}.wal to {transactionId}.wal.jsonl. Any transaction still in flight across the upgrade is not recovered. | Performance: registering a transaction, changing its status, and removing it used to each read, parse, and rewrite the whole registry with an fsync - three full rewrites per transaction, each growing with the number of concurrent transactions. All three are now a single appended, fsync'd line, and the file is truncated whenever no transaction is left in flight. https://axiodb.in/changelog axiodb-14.1.5 Thu, 30 Jul 2026 00:00:00 GMT The 9 MCP tools that destroy or overwrite data (delete_database, delete_collection, delete_document, update_document, drop_index, delete_user, delete_role, update_user_role, reset_user_password) now ask a human through the MCP client's own confirmation prompt (elicitation/create) before touching the database, naming the exact target - decline, cancel, or an unchecked box aborts with 409 and never reaches a controller | Every one of the 43 MCP tools now ships readOnlyHint/destructiveHint/idempotentHint annotations, so clients can auto-approve reads and hold writes for review | Added authenticated MCP transactions with insert, update, delete, savepoints, commit, and rollback https://axiodb.in/changelog axiodb-14.1.4 Sat, 25 Jul 2026 00:00:00 GMT Fixed: a WAL append or .tmp staging-write failure during commit was silently swallowed - appendLog()/WriteFile() return an Error result instead of throwing, so the commit proceeded and mutated a document with no log to recover from. Both are now checked and abort the commit, routing into the existing rollback path. | Fixed: rollback left orphaned .tmp staging files behind (executeOperations can now throw mid-loop after staging some files); rollback() sweeps them. | Fixed: rollbackIndexUpdates only discarded the staged map, but stageIndexUpdates mutates the shared in-memory index cache in place (IndexCache.getIndex returns the live object) - a rolled-back transaction left a phantom index entry pointing at a never-written document, causing post-rollback "Failed to read file" noise and wasted reads. Rollback now invalidates the touched index fields so the next read reloads a clean copy from disk. https://axiodb.in/changelog axiodb-13.1.3 Fri, 24 Jul 2026 00:00:00 GMT Fixed: InMemoryCache's background eviction interval had no unref(), so any short-lived script or CLI process using AxioDB (a stated core use case) would never exit on its own without an explicit process.exit() call - it now unrefs the same way IndexCache's cleanup interval already did | Added a real crash-recovery test suite (npm test crash-recovery): spawns a child process hammering inserts/updates, SIGKILLs it mid-write with no graceful shutdown, then verifies from a fresh process that every recovered document is complete and valid, and the WAL is cleaned up - this is the one guarantee this project had only reasoned about, never actually tested, until now | Added regression tests for this release's index-reordering fix, the cache-invalidation-scope fix, and the "no match" error contract for UpdateOne/UpdateMany/deleteOne/deleteMany https://axiodb.in/changelog axiodb-13.1.1 Fri, 24 Jul 2026 00:00:00 GMT UpdateOne/UpdateMany/deleteOne/deleteMany now route through the same Transaction/WAL machinery insert() already used, instead of a separate ad-hoc lock-and-write path | Fixed: a failed index-sync after a successful document write used to be silently swallowed (fire-and-forget), leaving the index out of sync with no way to recover on crash - it's now staged and committed atomically with the document change, with WAL redo/undo on failure | Removed the now-redundant per-call LockManager/DocumentLoader-reread/DeleteIndex/InsertIndex wiring from UpdateOperation and DeleteOperation - Transaction already does locking, the fresh re-read under lock, and index staging correctly https://axiodb.in/changelog axiodb-13.0.0 Fri, 24 Jul 2026 00:00:00 GMT BREAKING: removed per-collection AES-256 encryption (isEncrypted/encryptionKey params on createCollection and every downstream API) - unnecessary overhead for an embedded database; existing encrypted collections will not be readable after upgrading | CryptoHelper/CryptoGraphy helpers, and every isEncrypted/encryptionKey parameter across Collection, Reader, Update, Delete, Aggregation, Transaction, Session, and the HTTP/TCP APIs, removed | Range queries ($gt/$gte/$lt/$lte) on indexed fields now resolve via a sorted-value binary search instead of a full collection scan https://axiodb.in/changelog axiodb-12.10.20+ Sun, 12 Jul 2026 00:00:00 GMT MCP server (Model Context Protocol) added to the Docker image, opt-in via AXIODB_MCP=true, exposing 32 tools over Streamable HTTP on port 27020 | Real login required (axiodb_login) - every tool is gated by the logged-in user's actual RBAC role, mirroring the HTTP Control Server's permissions exactly | Full coverage: database/collection/document CRUD, aggregation, indexes, dashboard stats, and user/role management (including a new role-deletion capability, added to both the HTTP API and MCP) https://axiodb.in/changelog axiodb-11.9.13+ Sat, 11 Jul 2026 00:00:00 GMT Connection pooling for AxioDBCloud with least-busy routing (fewest in-flight requests) instead of round-robin | Per-IP concurrent connection cap and connection-attempt rate limiting on the TCP server | TLS/SSL encryption support for TCP connections https://axiodb.in/changelog axiodb-9.7.7 Fri, 10 Jul 2026 00:00:00 GMT Session-based authentication with cookie support for the Control Server GUI | TCP authentication (RBAC) and index management commands added to AxioDBCloud https://axiodb.in/changelog axiodb-9.6.1 Fri, 27 Mar 2026 00:00:00 GMT AxioDB constructor refactored to accept a single options object instead of positional arguments https://axiodb.in/changelog axiodb-8.33.235 Mon, 23 Mar 2026 00:00:00 GMT Pseudo-ACID transaction compliance across CRUD operations | CI test matrix expanded across multiple Node.js versions | Query optimization in Reader and Searcher classes https://axiodb.in/changelog axiodb-7.33.234 Sun, 15 Mar 2026 00:00:00 GMT DocumentLoader and PathSanitizer utilities added to centralize safe file handling | Formal contributor rules and development guidelines added to the repo https://axiodb.in/changelog axiodb-6.33.128 Fri, 13 Mar 2026 00:00:00 GMT TCP server and ConnectionManager implemented - the foundation of AxioDBCloud remote access | Protocol error handling and HTTP-vs-TCP-port misconfiguration detection https://axiodb.in/changelog axiodb-6.33.127 Wed, 11 Mar 2026 00:00:00 GMT Selective cache invalidation and randomized TTL to avoid cache-stampede synchronization | DeleteIndex service for removing documents from indexes | IndexCache gained TTL-based expiry and cleanup https://axiodb.in/changelog axiodb-5.33.127 Tue, 10 Mar 2026 00:00:00 GMT TransactionIndexManager, TransactionRegistry, and Write-Ahead Log (WAL) services implemented | Foundation for session-based transactions with commit/rollback https://axiodb.in/changelog axiodb-3.31.104 Fri, 31 Oct 2025 00:00:00 GMT File processing parallelized with Promise.all across worker threads | Reader/search operations tuned to use all available CPU cores | Sorting utility optimized to use native comparison https://axiodb.in/changelog axiodb-2.30.93 Sun, 31 Aug 2025 00:00:00 GMT Database export as a compressed .tar.gz archive | Database import from an uploaded archive | Advanced JSON query search support https://axiodb.in/changelog axiodb-2.28.81 Sun, 24 Aug 2025 00:00:00 GMT API reference documentation page added to the Control Server GUI | Transaction token support added to the HTTP API https://axiodb.in/changelog axiodb-2.28.77 Wed, 20 Aug 2025 00:00:00 GMT Caching and transaction token support for collections and databases | Dashboard stats retrieval integrated with the cache layer https://axiodb.in/changelog axiodb-2.24.71 Mon, 11 Aug 2025 00:00:00 GMT Create, read, update, delete, and aggregate operations added to the Control Server GUI as modal-driven workflows | Advanced search with JSON query and document-ID lookup in the Documents page https://axiodb.in/changelog axiodb-2.19.65 Sun, 27 Jul 2025 00:00:00 GMT Database management routes/controller and GUI dashboard (Zustand state management) | JWT-based key management for database instances https://axiodb.in/changelog axiodb-2.18.54 Mon, 23 Jun 2025 00:00:00 GMT Legacy FileManager/FolderManager replaced by the current engine/ module structure | HashmapSearch replaced by worker-thread-based Searcher for parallel file reads https://axiodb.in/changelog axiodb-2.13.47 Sat, 21 Jun 2025 00:00:00 GMT AxioDB Control Server implemented on Fastify with health check and routes endpoints | Tailwind CSS integrated into the GUI https://axiodb.in/changelog axiodb-2.11.29 Sat, 14 Jun 2025 00:00:00 GMT JWT-based authentication checks added to the GUI | Schema validation for user registration and collection data https://axiodb.in/changelog axiodb-2.10.19 Sun, 08 Jun 2025 00:00:00 GMT First Docker setup: package.json, tsconfig.json, and a schema generator utility for containerized deployments https://axiodb.in/changelog axiodb-1.5.8 Wed, 02 Apr 2025 00:00:00 GMT Cache clearing wired into update and delete operations, and a clearAllCache method added https://axiodb.in/changelog axiodb-1.4.3 Wed, 26 Mar 2025 00:00:00 GMT aggregate() method added to Collection with MongoDB-style pipeline stages | $match filtering extended to support regex and object matching https://axiodb.in/changelog axiodb-1.3.9 Thu, 20 Mar 2025 00:00:00 GMT Reader class: query, sort, skip/limit pagination, and total-count support | DeleteOperation: deleteOne and deleteMany with detailed error handling | UpdateOperation: UpdateOne and UpdateMany with schema-aware partial updates https://axiodb.in/changelog axiodb-1.1.4 Fri, 28 Feb 2025 00:00:00 GMT CryptoHelper class added for AES encryption/decryption of collection data https://axiodb.in/changelog axiodb-1.1.2 Fri, 14 Feb 2025 00:00:00 GMT Collection and Database classes implemented - the foundation of the document store | FileManager/FolderManager error handling improved https://axiodb.in/changelog axiodb-1.0.16 Wed, 25 Dec 2024 00:00:00 GMT First GUI setup with Vite and React, alongside a server-file restructure https://axiodb.in/changelog axiodb-1.0.14 Mon, 23 Dec 2024 00:00:00 GMT InMemoryCache class added, with TTL-based expiry for cached query results https://axiodb.in/changelog axiodb-1.0.0 Sat, 07 Dec 2024 00:00:00 GMT Fastify HTTP server integrated into the project | The `Configuration` class was renamed to `AxioDB` | First working document insert feature https://axiodb.in/changelog axiodb-1.0.0 Tue, 01 Oct 2024 00:00:00 GMT Initial commit: repository scaffolding, FileManager/FolderManager engine, and an initial `Configuration` class (later renamed to `AxioDB`)