feat: rebrand to rustCanvas, fix dark mode, add prod deploy

Dark toggle no longer panics on RefCell double-borrow; theme persists
in localStorage and applies html.dark for full UI + canvas. Production
Dockerfile builds WASM+server together; README deploy guide added.

Author: Anant Kumar

.dockerignore

@@ -0,0 +1,12 @@
+target
+dist
+.git
+.github
+*.md
+chat_history.md
+.env
+.env.*
+.DS_Store
+.idea
+.vscode
+**/.trunk

README.md

@@ -1,12 +1,13 @@
-# excaildraw
+# rustCanvas
 
-A scalable, Excalidraw-like collaborative drawing app built in full-stack Rust.
+A scalable, Excalidraw-like collaborative whiteboard built in full-stack Rust.
 
-- **Frontend:** Yew + WASM + HTML5 Canvas (Trunk) on port **3000**
+- **Frontend:** Yew + WASM + HTML5 Canvas (Trunk) — dev on port **3000**
 - **Backend:** Axum + Tokio + WebSockets on port **8080**
+- **Production:** Single server serves WASM UI + API from one port
 - **Shared core:** Excalidraw-compatible elements, JSON I/O, reconciliation, undo/redo, SVG export, rough sketch paths
-- **Persistence:** PostgreSQL (optional via `DATABASE_URL`) with in-memory fallback
-- **Scaling:** Redis pub/sub (optional via `REDIS_URL`) for multi-instance WebSocket broadcast
+- **Persistence:** PostgreSQL (optional) with in-memory fallback
+- **Scaling:** Redis pub/sub (optional) for multi-instance WebSocket broadcast
 - **Desktop:** Tauri 2 shell in `apps/desktop`
 
 ## Repository
@@ -15,17 +16,15 @@ https://github.com/antcybersec/excaildraw
 
 ## Features
 
-- **Drawing tools:** select/move (multi-select with Shift/Cmd), rectangle, ellipse, line, arrow, freehand, text, image
-- **Canvas:** infinite pan/zoom, grid, rough/sketch stroke rendering, selection highlights
+- **Drawing tools:** select/move, rectangle, ellipse, line, arrow, freehand, text, image, eraser
+- **Canvas:** infinite pan/zoom, light/dark theme, rough/sketch strokes, selection highlights
 - **Layers panel:** reorder elements, select from list
 - **History:** undo/redo (Ctrl+Z / Ctrl+Shift+Z / Ctrl+Y)
 - **Import/export:** `.excalidraw` JSON, SVG, PNG
 - **Collaboration:** WebSocket rooms, live sync, remote cursors
-- **E2E encryption:** optional room password — client encrypts sync payloads (AES-GCM); server relays ciphertext only
-- **Offline:** IndexedDB scene cache + pending update queue when disconnected
-- **Auth:** optional JWT (`POST /api/auth/token`); set `REQUIRE_AUTH=1` to gate room creation
-- **Rate limiting:** in-memory per-IP limits on REST endpoints
-- **API:** REST room create/load/save + WebSocket `/ws/{roomId}`
+- **E2E encryption:** optional room password (AES-GCM)
+- **Offline:** IndexedDB scene cache + pending update queue
+- **Auth:** optional JWT; set `REQUIRE_AUTH=1` to gate room creation
 
 ## Project structure
 
@@ -36,16 +35,16 @@ crates/
   server/   REST API, WebSocket sync, PostgreSQL, JWT, Redis broker
 apps/
   desktop/  Tauri 2 native shell
-docker/     Postgres + Redis compose + server Dockerfile
+docker/     Postgres + Redis compose + production Dockerfile
+scripts/    build-release.sh for local production builds
 ```
 
 ## Prerequisites
 
 - Rust 1.75+
 - `wasm32-unknown-unknown` target
 - [Trunk](https://trunkrs.dev/)
-- Docker (optional, for PostgreSQL + Redis)
-- Node/npm (optional, only if building Tauri icons via `tauri icon`)
+- Docker (optional, for PostgreSQL + Redis + production deploy)
 
 ```bash
 rustup target add wasm32-unknown-unknown
@@ -56,97 +55,119 @@ cargo install trunk
 
 | Variable | Default | Description |
 |----------|---------|-------------|
-| `DATABASE_URL` | *(none)* | PostgreSQL connection string; omit for in-memory rooms |
-| `REDIS_URL` | *(none)* | Redis URL for cross-instance room broadcast |
+| `PORT` | `8080` | HTTP listen port |
+| `FRONTEND_DIST` | `dist` | Path to Trunk `dist/` for serving the WASM UI |
+| `DATABASE_URL` | *(none)* | PostgreSQL connection string |
+| `REDIS_URL` | *(none)* | Redis URL for cross-instance broadcast |
 | `JWT_SECRET` | dev secret | HMAC secret for JWT signing |
 | `REQUIRE_AUTH` | *(off)* | Set to `1` to require Bearer token on `POST /api/rooms` |
 
 ## Development
 
-### 1. Start PostgreSQL + Redis (optional)
+### 1. Run API server
 
 ```bash
-docker compose -f docker/docker-compose.yml up -d
-export DATABASE_URL=postgres://excaildraw:excaildraw@localhost:5432/excaildraw
-export REDIS_URL=redis://localhost:6379
+cargo run -p excaildraw-server
+```
+
+### 2. Run web client (separate terminal)
+
+```bash
+cd crates/client && trunk serve --open
 ```
 
-Without `DATABASE_URL`, rooms persist in memory only for the server process lifetime.
+Open http://127.0.0.1:3000
+
+> Port **8080** is API-only in dev. The drawing UI is on **3000**.
 
-### 2. Run the API server
+### 3. Optional: Postgres + Redis
 
 ```bash
-cargo run -p excaildraw-server
+docker compose -f docker/docker-compose.yml up -d postgres redis
+export DATABASE_URL=postgres://excaildraw:excaildraw@localhost:5432/excaildraw
+export REDIS_URL=redis://localhost:6379
 ```
 
-Endpoints:
+### Collaboration
 
-| Method | Path | Description |
-|--------|------|-------------|
-| GET | `/health` | Health check |
-| POST | `/api/auth/token` | Issue JWT (`{"username":"..."}`) |
-| POST | `/api/rooms` | Create room |
-| GET | `/api/rooms/{id}` | Load room |
-| PUT | `/api/rooms/{id}` | Save room |
-| WS | `/ws/{id}` | Real-time sync |
+1. Optionally set a **room password** (E2E encryption)
+2. Click **Live collab** — creates a room and updates URL (`?room=...`)
+3. Share the URL (and password if used)
+4. Draw together — live sync + remote cursors
 
-### 3. Run the web client
+### Keyboard shortcuts
+
+| Key | Tool |
+|-----|------|
+| 1–9 | Tools (eraser = E) |
+| Scroll | Zoom |
+| Space + drag | Pan |
+| Shift | Constrain shapes |
+| Ctrl/Cmd + Z | Undo |
+
+## Production deployment
+
+### Option A — Docker (recommended)
+
+Builds WASM client + server into one image. Serves UI and API on port **8080**.
 
 ```bash
-cd crates/client && trunk serve --open
+docker compose -f docker/docker-compose.yml up -d --build
 ```
 
-Open http://127.0.0.1:3000
+Open http://localhost:8080
 
-### 4. Desktop app (Tauri)
+Includes Postgres + Redis for persistent rooms and horizontal scaling.
 
-Build the WASM client first, then run Tauri from the desktop crate:
+### Option B — Bare metal / VPS
 
 ```bash
-cd crates/client && trunk build --release
-cd ../../apps/desktop/src-tauri && cargo tauri dev
+./scripts/build-release.sh
+FRONTEND_DIST=./dist ./target/release/excaildraw-server
 ```
 
-Tauri loads the client from `http://127.0.0.1:3000` in dev or from `dist/` after `trunk build`.
+Put **nginx** or **Caddy** in front for HTTPS:
+
+```nginx
+server {
+    listen 443 ssl;
+    server_name your-domain.com;
+
+    location / {
+        proxy_pass http://127.0.0.1:8080;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+    }
+}
+```
 
-### Collaboration workflow
+WebSocket collab requires the `Upgrade` headers above.
 
-1. Optionally enter a **room password** for end-to-end encrypted sync
-2. Click **New Room** — creates a room and updates the URL (`?room=...`)
-3. Share the URL (and password, if used) with others
-4. Draw together — changes sync via WebSocket with reconciliation
-5. Remote cursors appear with colored labels
-6. Scene auto-saves to IndexedDB for offline reload
+### Option C — Static hosting + separate API
 
-### Keyboard shortcuts
+1. `cd crates/client && trunk build --release` → upload `dist/` to Cloudflare Pages / Netlify / S3
+2. Deploy server to Fly.io / Railway / Render with `DATABASE_URL` + `REDIS_URL`
+3. Set client API base via same-origin reverse proxy or configure CORS on server
 
-| Shortcut | Action |
-|----------|--------|
-| Scroll | Zoom |
-| Shift + drag | Pan |
-| Shift/Cmd + click | Add to selection |
-| Ctrl/Cmd + Z | Undo |
-| Ctrl/Cmd + Shift + Z | Redo |
-| Ctrl/Cmd + Y | Redo |
-| Ctrl/Cmd + S | Export JSON |
-| Delete / Backspace | Delete selection |
+### Pre-deploy checklist
+
+- [ ] Set `JWT_SECRET` to a strong random value
+- [ ] Set `DATABASE_URL` for room persistence
+- [ ] Set `REDIS_URL` if running multiple server instances
+- [ ] Build with `--release` (WASM + server)
+- [ ] Enable HTTPS (required for secure WebSockets in production)
+- [ ] Set `REQUIRE_AUTH=1` if you need gated room creation
 
-### Tests
+## Tests
 
 ```bash
 cargo test -p excaildraw-core -p excaildraw-server -p excaildraw-client
 cargo clippy -p excaildraw-core -p excaildraw-server -p excaildraw-client --all-targets -- -D warnings
 cd crates/client && trunk build --release
 ```
 
-## Roadmap
-
-See [excaildraw.md](./excaildraw.md) for full architecture. Future work:
-
-- OAuth providers, NATS alternative to Redis
-- Rough strokes in SVG export, async image rendering
-- Yrs CRDT migration for conflict-free offline edits
-
 ## License
 
 MIT

apps/desktop/src-tauri/tauri.conf.json

@@ -1,8 +1,8 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
-  "productName": "excaildraw",
+  "productName": "rustCanvas",
   "version": "0.1.0",
-  "identifier": "app.excaildraw.desktop",
+  "identifier": "app.rustcanvas.desktop",
   "build": {
     "frontendDist": "../../../dist",
     "devUrl": "http://127.0.0.1:3000",
@@ -12,7 +12,7 @@
   "app": {
     "windows": [
       {
-        "title": "excaildraw",
+        "title": "rustCanvas",
         "width": 1280,
         "height": 800,
         "resizable": true

crates/client/Cargo.toml

@@ -4,7 +4,7 @@ version.workspace = true
 edition.workspace = true
 license.workspace = true
 authors.workspace = true
-description = "WebAssembly client for excaildraw"
+description = "WebAssembly client for rustCanvas"
 
 [lib]
 crate-type = ["cdylib", "rlib"]
@@ -24,7 +24,9 @@ web-sys = { version = "0.3", features = [
     "CanvasRenderingContext2d",
     "Document",
     "Element",
+    "HtmlElement",
     "HtmlAnchorElement",
+    "Storage",
     "HtmlCanvasElement",
     "HtmlImageElement",
     "HtmlInputElement",

crates/client/index.html

@@ -3,7 +3,7 @@
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>excaildraw</title>
+    <title>rustCanvas</title>
     <link data-trunk rel="rust" />
     <link rel="preconnect" href="https://fonts.googleapis.com" />
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
@@ -29,13 +29,14 @@
         --tool-size: 36px;
       }
 
-      .app.dark {
+      html.dark {
         --color-surface: #1e1e1e;
         --color-surface-low: #121212;
         --color-border: rgba(255, 255, 255, 0.1);
         --color-text: #ececec;
         --color-text-muted: #9b9b9b;
-        --color-primary-light: rgba(105, 101, 219, 0.2);
+        --color-primary-light: rgba(105, 101, 219, 0.25);
+        --color-primary-darker: #8b87e8;
         --canvas-bg: #121212;
       }
 
@@ -67,7 +68,9 @@
         transition: background 0.15s, border-color 0.15s;
       }
       .chip:hover { background: var(--color-surface-low); border-color: rgba(0,0,0,0.12); }
-      .app.dark .chip:hover { border-color: rgba(255,255,255,0.18); }
+      html.dark .chip:hover { border-color: rgba(255,255,255,0.18); }
+      html.dark .tool-btn:hover { color: #8b87e8; }
+      html.dark .room-pass::placeholder { color: var(--color-text-muted); }
       .chip.primary { background: var(--color-primary); color: #fff; border-color: var(--color-primary); }
       .chip.primary:hover { background: var(--color-primary-darker); }
       .room-pass {

crates/client/src/app.rs

@@ -217,6 +217,14 @@ pub fn app() -> Html {
         })
     };
 
+    {
+        let theme = theme.clone();
+        use_effect_with((), move |_| {
+            crate::theme::apply_document_class(theme.borrow().dark);
+            || ()
+        });
+    }
+
     {
         let canvas_ref = canvas_ref.clone();
         let viewport = viewport.clone();
@@ -780,7 +788,7 @@ pub fn app() -> Html {
                         }
                     }
                     "toggle-theme" => {
-                        theme.borrow_mut().dark = !theme.borrow().dark;
+                        theme.borrow_mut().toggle();
                         bump_frame();
                     }
                     "collab" => {
@@ -1029,9 +1037,9 @@ pub fn app() -> Html {
     let dark_canvas = theme_snapshot.dark;
 
     html! {
-        <div class={classes!("app", dark_canvas.then_some("dark"))} ref={app_ref}>
+        <div class="app" ref={app_ref}>
             <header class="top-bar">
-                <div class="brand">{"ex"}<span>{"caildraw"}</span></div>
+                <div class="brand">{"rust"}<span>{"Canvas"}</span></div>
                 <div class="chip-group">
                     <button type="button" class="chip" data-action="undo">{"Undo"}</button>
                     <button type="button" class="chip" data-action="redo">{"Redo"}</button>

crates/client/src/crypto.rs

@@ -7,7 +7,7 @@ use sha2::{Digest, Sha256};
 
 fn derive_key(password: &str, room_id: &str) -> [u8; 32] {
     let mut hasher = Sha256::new();
-    hasher.update(format!("excaildraw:{room_id}:{password}"));
+    hasher.update(format!("rustcanvas:{room_id}:{password}"));
     hasher.finalize().into()
 }
 

crates/client/src/storage.rs

@@ -1,7 +1,7 @@
 use indexed_db_futures::prelude::*;
 use wasm_bindgen::JsValue;
 
-const DB_NAME: &str = "excaildraw";
+const DB_NAME: &str = "rustcanvas";
 const STORE: &str = "kv";
 
 async fn open_db() -> Result<IdbDatabase, JsValue> {