Official Systems & Architecture Documentation

Privacy is not
a feature.

It is the absolute foundation.

A complete technical breakdown of LiveCodeShare-Pro — a distributed 6-node microservice array, client-side AES-256 encryption, and Direct-to-LLM AI architecture engineered from the ground up for the most secure, anonymous collaborative IDE on the internet.

AES-256
End-to-End Encryption
6-Node
Microservice Array
Zero
Data Harvested
100%
Free Forever
Direct-to-LLM
AI Architecture
Section 01

Architect's Philosophy

"

LiveCodeShare-Prowas engineeredentirely from scratch.Designed for raw speed, built without heavy templates, bloated frameworks, or corporate trackers.

The platform integrates client-side encryption, secure routing pipelines, real-time media streams, and a distributed microservice architecture to ensure developers and engineers have access to premium collaborative toolswithout compromising their privacy, code security, or freedom of use.

IndependentBuilt from ScratchPrivacy First

Core Principles

Free

No premium tiers, no paywalls, no credit cards required

Zero Corporate Overlords

Uncompromised, fully independent development

Zero Data Harvesting

I do not want your data. Period.

Section 02

The Zero-Trust Doctrine

Client-Side Cryptography

AES-256 · PBKDF2 · 100K Iterations

We assume all networks — including our own — are fundamentally hostile. Your password is pushed throughPBKDF2 with 100,000 iterationsto become your localAES-256 cryptographic key.

Your codebase, voice streams, and screen-sharing frames are encryptedlocally on your hardwareinside your browser viaCryptoJSbefore a single byte leaves your machine.

Encryption Stack

AES-256-CBCPBKDF2-SHA1100K IterationsClient-Side Only

Obsessive Anonymity

Zero-Knowledge Identity Model

Identity logging is a massive liability. LiveCodeShare-Pro demandszero personal informationand operates withNo Central User Database— SQL or NoSQL.

No Email Addresses Required
No Accounts to Create
Zero IP Activity Logs (Fully Discarded)
Zero Analytics or Tracking Cookies

Session IDs are64-character cryptographically generated UIDsand aredestroyed immediately on connection termination.We couldn't identify you even if legally compelled.

Threat & Spam Shield

Active anti-spam · Strict CORS

We proactively defend collaborative rooms against malicious flooding, crash attempts, and unauthorized hijacks.

Dynamic anti-spam rate limiting
2.5MB payload size caps
Closed-ecosystem CORS policies

Our servers strictly enforceorigin restriction policiesthat allow traffic solely from the securelivecodeshare-pro.vercel.appproduction ecosystem.

Interactive Multi-Node Data Flow

Visualizing how code, video, and AI traffic intelligently routes back-and-forth between all participants.

Host UserLocal AES Encrypt
Shares API Keys
Peer UserLocal AES Decrypt
Uses Host Session
Our Relay ServerZero-Knowledge
Blind Router
Cannot Decrypt
AI ProviderDirect-to-LLM
Never Touches Server
Custom APIsAgora / Host Delegated
Two-Way AES-256 Default Relay
Direct AI Prompts & Results
Custom Delegated API Traffic
Section 03

Collaborative IDE Engine

Monaco Editor + Yjs CRDT Sync

VS Code Engine · Yjs CRDTs · Real-Time Sync

LiveCodeShare-Pro utilizes the powerfulMonaco Editor— the same engine powering VS Code. A high-performanceyjs-bundleimplementing Conflict-free Replicated Data Types (CRDTs) over WebSockets allows dozens of developers to type simultaneously with almost zero latency and zero data conflicts.

Real-Time Cursors

Peer cursor positions tracked at 40ms intervals. MonacodeltaDecorationsrender labeled floating cursors for every user.

Virtual File System

Drag-and-drop entire nested folders from your PC. The frontend recursively reads directories and builds a virtual JSON file tree synced to all peers instantly.

Shared Highlights

Spot a bug? Highlight it. LiveCodeShare-Pro syncs your selection range to all users, painting a glowing marker labeled with your name on their screens in real time.

Creator-Verification Permission Matrix

Malicious actors can wipe out hours of work. LiveCodeShare-Pro tracksfileCreatorsandfolderCreatorsnatively to enforce deletion rights at the socket level.

Host — Workspace Owner

Possesses the master cryptographic token. Can enforce Read-Only mode, kick users, disable AI and Screen Sharing, and forcefully terminate the entire room.

Standard Users

Mathematically prohibited from deleting a file unless their uniqueclientIdexplicitly matches the creator ID. Enforced at the socket layer, not UI.

Section 04

Agora RTC Media Streaming

Global Edge Network WebRTC

Standard collaborative tools struggle with WebRTC in strict corporate networks.LiveCodeShare-Pro utilizes the Agora RTC network, which intelligently routes Voice, Video, and Screen data over a proprietary global edge network. It seamlessly auto-switches from UDP to TCP if strict firewalls are detected, guaranteeing connections work everywhere.

High-Fidelity Audio & Video

01

Connect directly to Agora's Software Defined Real-time Network (SD-RTN™)

02

Hardware-accelerated encoding

Screen Sharing

01

Capture high-res display viagetDisplayMedia()

02

Full P2P / edge server routing bypassing the main NodeJS backend entirely

03

Supports massive multi-user sessions without degrading workspace performance

Hybrid Chat System

Text messages route through our dedicatedNode 05 Pub/Sub architecture. Voice Notes use theMediaRecorderAPI to generate fully-encrypted audio blobs, rendered with a custom HTML5 Canvas Audio Visualizer built purely in JavaScript.

Section 05

Multi-Modal Code Execution

Cloud Terminal & Stdin

Wandbox API Integration

LiveCodeShare-Pro integrates directly with theWandbox API. Dynamic matching maps your file extension to remote compilers. Crucially, we feature aCloud Input (stdin) panelallowing you to inject input forscanf(),cin, orinput()directly into the cloud process. Includes aDirect Run Toggleto bypass stdin entirely for pure algorithmic speed runs.

.py.rs.go.cpp.java.zig.ssl+30 more

Local Native Execution

100% Offline · JSZip Bundler

Don't want to send code to the cloud? LiveCodeShare-Pro usesJSZipentirely within your browser to generate a dynamic execution package with auto-generated.bat/.commandscripts. Your code is compiled entirely offline.

Almost zero network requests during execution

OnlineGDB Export

Breakpoint Debugging Bridge

For complex debugging sessions requiring step-by-step breakpoints, LiveCodeShare-Pro offers a one-click bridge to OnlineGDB. We automatically copy your code to the clipboard and launch the external environment for advanced C/C++ memory management.

Optimized for running code online.

Section 06

AI: Direct-to-LLM Architecture

Your API Key isNEVERcaptured by our servers.

Most platforms send your proprietary code and API keys to their central backend — silently logging your keys, reading your prompts, and stealing your source code.

LiveCodeShare-Pro uses a revolutionaryDirect-to-LLM Architecture. Our Node.js backend is completely bypassed.

01

API Key saved intolocalStorage— your browser's isolated storage.Nevertransmitted to our database.

02

JavaScript locally reads your editor viamonaco.editor.getValue().

03

Your browser opens aDirect Secure HTTPS tunnelstraight to the AI provider — completely bypassing LiveCode servers.

04

AI response streams directly to your screen. Our backend servers are100% blindto the entire transaction.

100% Offline AI — Local Ollama

For strict enterprise compliance, LiveCodeShare-Pro supportsLocal Ollama Integration. Select Ollama and your code is sent tohttp://localhost:11434. The AI executes entirely on your own hardware. Zero data leaves your room.

100% Free AI — Pollinations

Don't have an API Key? LiveCodeShare-Pro includesFree AI (GPT-4o) via Pollinations. No setup, no keys required. Plus, connect your own keys forGroq, OpenRouter, Gemini, Together AI, Anthropic or Hugging Face.

Find BugsExplain CodeRefactor

Architectural Data Flow Comparison

Traditional IDEs

Your Browser
API Key + Code
Their Server
Logs key & code
AI Provider

LiveCodeShare-Pro

Your Browser
API Key + Code
Groq / Gemini / Local
Direct HTTPS

Server 100% bypassed

Transparency Proof — app.js

Client-Side Only
app.js — ai_request_handler()
// 1. Read key from YOUR browser storage ONLY
const apiKey = localStorage.getItem('labi_ai_apikey');

// 2. Read code currently in editor RAM
const currentCode = state.editor.getValue();
const fullPrompt = userMessage + "\n\nContext:\n" + currentCode;

// 3. DIRECT fetch — zero LiveCode endpoints!
const res = await fetch('https://api.groq.com/openai/v1/chat', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${apiKey}`,
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    messages: [{ content: fullPrompt }]
  })
});

The Host can toggle AI off viatoggle-ai-feature— disables the interface for all peers.

Section 07

6-Node Microservice Architecture

To prevent lag for large teams, LiveCodeShare-Pro does not rely on a single server. Each workspace is automatically distributed across6 distinct Hugging Face Docker containersplus a 7th virtual client node — ensuring maximum bandwidth isolation per feature domain.

Node 01

Code Sync

Processes cursor movements, keystrokes, and file tree mutations via WebSockets without interference from media/chat loads.

Node 02

Voice Audio

Dedicated solely to receiving, queuing, and broadcasting encrypted TCP Base64 audio buffers to all connected peers in real time.

Node 03

Screen Share

Isolated image-processing node blasting compressed, encrypted JPEG DataURLs to watchers at ~8 FPS.

Node 04

Video Calls

Handles individual peer webcam feeds entirely separate from the screen share node, ensuring maximum bandwidth distribution across the full array.

Node 05

Chat & Presence

Our custom Pub/Sub engine. Eliminates third-party enterprise dependencies for text chat and typing indicators.

Node 06

Whiteboard Sync

Dedicated Excalidraw sync engine. Broadcasts drawing strokes and visual roadmap nodes with active anti-spam flood filters.

Node 07 — Virtual

AI Endpoint (Client-Side)

The 7th node doesn't exist on our servers. It executes on your local machine, bridging the gap directly between your code and external LLMs without any server involvement.

Section 09

Local Bridge Telemetry

Secure Local WebSocket Bridge

Node.js · 6-Digit PIN Authentication

While the Cloud Terminal integrates with Wandbox, some complex terminal workflows require executing directly on the host's filesystem. LiveCodeShare-Pro features aLocal Bridgearchitecture via a downloadablebridge.jsscript.

Pin-Secured Tunnels

Running the bridge on your local PC spawns an isolated Node.js environment listening on a local port. It generates a6-digit PINrequired to establish the WebSocket tunnel, preventing malicious scripts on your network from hijacking the execution layer.

Direct Standard I/O

The terminal output in your browser is piped directly from your machine'sstdoutandstderr, offering seamless interactivity for long-running scripts (like running a local development server) straight from the shared workspace.

Section 10

Data Persistence & Export

Permanent Workspaces & History

By default, all rooms are ephemeral. To retain files across sessions, creators can designate aPermanent Workspace. We previously offered this for free with a 2.5MB limit, but due to misuse and increasing complexity, it now requires an Admin Key. You cancontact meto get a key, which is still provided completely free of charge.Permanent rooms are truly permanent—there are no time-limits; your code stays safely preserved indefinitely until manually deleted.

LiveCodeShare-Pro also natively tracks yourRecent Workspaces History(up to 50 rooms) stored securely in your local browser, allowing you to seamlessly jump back into previous sessions with one click, or delete them to clear your track record.

Atomic Save Architecture:Permanent workspace states are written to disk using strict, synchronous atomic writes to guarantee no data corruption or race conditions even if clients disconnect simultaneously.

Zero-Friction I/O & Media Handling

Data portability is paramount. You are never locked into our ecosystem.

Native Image, PDF Viewer & Image Editor

Drag & drop large images or PDFs up to 2.5MB. The workspace natively encodes them into Base64 and renders them inline using high-performance iframes and canvas elements. Use the built-inImage Editorto draw, crop, highlight, and annotate images collaboratively before saving them directly back to the workspace.

Full Zip Export

At any moment, bundle the entire virtual filesystem viaJSZipdirectly to a.zipfile.

Optional Google Drive Integration

Save and backup your workspace files directly inside your personal Google Drive account. Since it runs completely client-side in your browser, Google Drive integration is fully optional and requires no account registrations or databases on our end.

Interactive Visual Roadmap Canvas

Built directly into the core IDE, theRoadmap Canvas Engineprovides a highly dynamic, node-based planning whiteboard.

Create a.roadmapfile or click the toolbar shortcut to instantly boot up the canvas. Your team can collaboratively place tasks, track milestones, draw freely with a rich set of pen and shape tools, draw connection arrows between nodes, and seamlessly export the entire plan as a high-resolution PNG. The engine nativelyauto-saves and syncsevery drag and keystroke across the decentralized room in real-time.

Custom Shortcuts & Resizable Terminal

Efficiency and ergonomics are heavily optimized to support intense programming sessions.

Users can configure a globalCtrl+Shift+R shortcutto instantly trigger a customized execution pipeline—be it the Local Bridge, Cloud Execution, downloading the file, or routing to OnlineGDB. Furthermore, the integrated Xterm.js panel features asmooth vertical resize drag-barthat dynamically reflows all ANSI characters to ensure terminal ergonomics stay perfectly aligned with your workflow preferences.

Section 12

Dynamic Workspace Interface

Real-Time Fluid Customization

A seamless developer experience requires an interface that adapts instantly. LiveCodeShare-Pro features a fully reactive frontend designed to feel native and responsive.

Editor Typography

Instantly toggle between Dark, Light, and High Contrast Editor themes, and adjust dynamic font sizing persisted securely vialocalStorage.

Floating Video Grid & YouTube PiP

Draggable, resizable PIP camera feeds using a dynamic grid layout. Includes a built-in YouTube video toggle button that lets you float video tutorials right inside your workspace so you can learn and code in the same display without tab switching.

Workspace Toggles & Security

Granular host controls to immediately freeze the room (Read-Only Mode), block calls, disable AI, or rigidlyLock the Workspaceto completely block any new incoming users. File deletion rights are strictly bound to cryptographic session IDs rather than display names, ensuring zero creator impersonation.

Local Offline Mode

A fully disconnected, serverless coding environment. Bypasses all socket connections and stores files purely in local memory (< 150MB RAM). Instantly wipes all code and data the moment you exit, providing the ultimate private scratchpad while retaining AI and Cloud execution capabilities.

Lightweight Mode (Save RAM)

Toggle on to aggressively strip away intensive UI features (like active user polling, team chat WebRTC rendering, and real-time cursor syncs) for pure, uninterrupted algorithmic coding and an ultra-low memory footprint.

Cluster Selection & Manual Join

Navigate network conditions seamlessly by selecting your target microservice cluster. Connect instantly via the public list, or use Manual Join with your Room ID and Password to bypass directory listings.

Distributed Highlighting

A multi-user marker tool. Highlight a range of code and broadcast your selection to all peers with a glowing name badge, making asynchronous code reviews instantly collaborative.

Section 12.5

Dynamic Database Advertisements

Remote, Non-Intrusive Monetization

LiveCodeShare-Pro employs a modernizedDynamic Database Advertisement System. Previously, advertisements were statically hardcoded into the client bundle, requiring a full platform redeploy for every sponsor update. This monolithic approach has been replaced.

Zero-Downtime Injection

Ads are now fetched asynchronously from a secure remote database (ads.js) upon application load. Sponsors, links, and creatives can be updated instantly via the database dashboard without taking down the microservice cluster or requiring a server restart.

Sandboxed Rendering

In keeping with theZero-Trust Doctrine, all external ad contents are sanitized using DOMPurify before being injected into the DOM. This ensures that third-party creatives cannot execute XSS attacks against the protected workspace.

Section 14

Integrated Terminal — xterm.js

Production-Grade Terminal Emulator

xterm.js v5.3 · Fit Addon · Real-Time I/O

LiveCodeShare-Pro embeds a fullxterm.js terminal emulator— the same engine powering VS Code's integrated terminal. It renders rich ANSI output, supports interactive stdin, and dynamically resizes to fit your workspace layout via thexterm-addon-fitplugin.

Cloud Execution Mode

Code is dispatched to theWandbox APIand results stream into the xterm instance. A dedicatedCloud stdin panellets you pre-fill input for interactive programs —scanf(),cin,input().

Local Bridge Mode

When connected via theLocal Bridge, the terminal pipes realstdoutandstderrfrom your machine's process directly into xterm — supporting long-running dev servers, build tools, and interactive REPLs.

Process Control

One-clickStop Processbutton to terminate any running command — local or cloud — without leaving the IDE.

Auto-Resize

The terminal auto-fits to your workspace dimensions usingxterm-addon-fitfor seamless layout integration.

ANSI Rendering

Full ANSI escape code support — colored compiler warnings, progress bars, and styled output render natively.

xterm.js v5.3xterm-addon-fitANSI RenderingProcess ControlAuto-Resize
Due Diligence

Frequently Asked Questions

Q

Do you steal or sell my code?

Absolutely not.All code passing through our WebSockets is encrypted with AES-256 before leaving your browser. Even if we inspected our own databases, we would only see scrambled strings. The decryption key is your room password — which we do not log or store in plaintext.

Q

Can your servers steal my API Keys?

Impossible by design.The entire AI chat module executes via client-side JavaScript. LiveCodeShare-Pro's backend servers have literally zero code written to intercept or receive these keys. The connection is made directly from your IP address to the AI provider.

Q

Are my AI Prompts used to train models?

Because LiveCodeShare-Pro doesn't process your AI requests, this depends on your chosen provider.Groq, Anthropic, and OpenRouter explicitly state they do NOT train on API data.For 100% certainty, select "Ollama" to run the AI completely offline on your own GPU.

Q

Is my screen share or voice call recorded?

No.Voice and Screen Share data operates as a pure real-time stream relay over TCP. Data chunks are held in Node.js volatile memory for milliseconds to broadcast to peers, then immediately overwritten by garbage collection.No disk writing ever occurs for media streams.

Q

Who built this and how much does it cost?

Myself,Labi Rana Magar, built this website. It is100% permanently freeto use. I built it for fun.

Q

Can you, the developer, enter my private rooms or see my code?

Absolutely not.We do not have the power to enter your room or see your code. The platform is built on azero-knowledgearchitecture. Your workspaces are protected by End-to-End AES encryption using a password that only you and your team know. Because our servers only route encrypted packets and never possess the decryption keys, we are completely blind to the contents of your workspace.

There areno administrative backdoors. We literally do not have the technical ability or permission to join your room without the explicit password, ensuring your code remains 100% invisible to anyone outside your trusted peers.

Q

Why is the collaborative code sync so fast and lag-free?

A 6-node dedicated microservice cluster.Each feature—keystroke sync, voice calls, whiteboard drawings, and video feeds—runs on its own isolated server. Zero bandwidth congestion by design.

Q

Is signing in to Google Drive mandatory to save files?

No, completely optional.You can code 100% anonymously and export your code to a.zipfile instantly. Google Drive login is only for optional cloud saves directly inside your own account.

Q

How does LiveCodeShare-Pro block malicious users from crashing a room?

Active anti-spam rate limiting and rigid CORS filters.The backend immediately kicks spammers exceeding keystroke/canvas thresholds and blocks any incoming request originating outside our verified Vercel production domain.

Hey! I'm Graphy. Ready to see how we saved 95% AI tokens? Let's explore!