Phase 00 · Lesson 05

Architecture Atlas

≈ 2 min core reading · 516 source/companion words
Learning contract

What you should be able to do after this

  • Explain Architecture Atlas without relying on framework buzzwords.
  • Connect the lesson to the phase outcome: Explain the complete TaskFlow request path and identify which layer owns presentation, transport, business rules, persistence, identity, and operations.
  • Reproduce the relevant behavior and verify it with evidence.
  • Diagnose at least one representative failure instead of guessing.
Figure 0.5 — TaskFlow boundary map
Browser interaction
Next.js presentation boundary
HTTP request
NestJS controller/guard
Service/business rules
Prisma persistence
PostgreSQL
HTTP response
UI update
This lesson belongs to Phase 00. Keep the full request/data path visible even when today's code changes only one box.
Instructor workflow: predict first → implement the smallest slice → run it → inspect evidence → break one assumption → diagnose → explain it back. Do not copy the whole code block before understanding the first failing boundary.

Phase 00

Architecture Atlas A visual reference of the diagrams you will keep redrawing as the application evolves from two processes into a production system.

Book 5 · Visual architecture reference Course baseline: September 17, 2026 · Windows-first · Project-driven · Production-oriented

Contents 1. Atlas usage 7. Stage F server state

2. Stage A frontend only 8. Stage G collaboration

3. Stage B frontend + API 9. Stage H testing

4. Stage C persistence 10. Stage I production

5. Stage D authentication 11. Ownership reference

6. Stage E authorization

Phase 00 | Page 2 of 7

Use this atlas to test your mental model Do not treat these figures as posters. Cover the labels and redraw them from memory. If a diagram stops matching the implementation in a later phase, the implementation or the documentation needs correction.

Browser

Next.js

Figure 1 - Stage A: presentation only - The first mental model contains only a browser and Next.js.

Browser

Next.js

HTTP

NestJS + Fastify

Figure 2 - Stage B: independent API - The frontend now crosses an HTTP boundary to a separately running NestJS process.

Phase 00 | Page 3 of 7

Browser

Next.js

HTTP

NestJS service

Prisma 7.9.1

Supabase PostgreSQL

Figure 3 - Stage C: persistence - Prisma enters because the API now needs durable relational data.

Supabase Auth

Access token

Next.js

Bearer token

NestJS guard

Trusted user

Figure 4 - Stage D: authentication - Supabase Auth establishes identity; the backend validates the access token.

Phase 00 | Page 4 of 7

Verified user Workspace membership Requested resource

Authorization policy / service rule

Allowed operation

Figure 5 - Stage E: authorization boundary - Identity and resource access are separate decisions.

Server-owned state Client-owned state

TanStack Query Local / URL / Form state tasks · projects · users · API results dialogs · filters · inputs · navigation

Persistent truth Domain behavior

PostgreSQL Services / optional stores authoritative business data rules and interaction logic

Figure 6 - Stage F: state ownership - Server state, persistent truth, UI state and domain behavior should not be collapsed into one bucket.

Phase 00 | Page 5 of 7

Browser A NestJS API PostgreSQL

Realtime/event

Browser B

Figure 7 - Stage G: collaborative update paths - Realtime is optional and complements normal HTTP mutations rather than replacing them.

E2E Playwright

Integration / API tests

Unit tests services · rules · utilities

Figure 8 - Stage H: testing pyramid - Tests become broader and slower as they approach full-system behavior.

Phase 00 | Page 6 of 7

Vercel API host Users / browsers Next.js NestJS

Observability Supabase logs / errors Postgres + Auth

CI/CD: lint → typecheck → test → build → deploy

Figure 9 - Stage I: production topology - A deployment is multiple runtimes connected through explicit boundaries.

Ownership quick reference

Responsibility Primary owner

Rendering and interaction Next.js / React

Server-state cache TanStack Query

HTTP contract Controller + API DTO/validation boundary

Business rules NestJS service/application layer

Authentication identity Supabase Auth + backend token validation

Authorization Backend guards/policies/services

Database access Prisma

Persistent relational truth PostgreSQL

End-to-end behavior Playwright tests + deployed system

ATLAS EXERCISE

Close this PDF and redraw Figures 3, 5 and 9 from memory. Then explain which boundary you would inspect for a 403, a unique-constraint conflict, and a stale UI.

Phase 00 | Page 7 of 7

Executable lesson studio · architecture

Now turn the explanation into engineering skill.

Architecture Atlas matters because it changes a real boundary in TaskFlow. The goal is to understand the inputs, owner, observable output, and failure modes before adding more abstraction.

By the end, you should be able to

  • Explain Architecture Atlas in terms of concrete inputs, ownership, outputs, and evidence.
  • Implement or reproduce the smallest TaskFlow slice that demonstrates this architecture concept.
  • Diagnose one representative architecture failure using observable evidence instead of trial-and-error.
Figure 0.5B — Mental model
User intent
UI boundary
API contract
business rule
persistence
observable result
Read left-to-right while implementing. When debugging, walk right-to-left until the first observed fact differs from your prediction.
Code-along sequence

One coherent change at a time

  1. 01

    Restate the goal of “Architecture Atlas” as one observable behavior. Write the success signal before touching code.

  2. 02

    Trace the boundary map: User intent → UI boundary → API contract → business rule → persistence → observable result. Mark the one boundary this lesson changes.

  3. 03

    Inspect the current repository state and record the exact files, route, table, or runtime involved. Avoid creating an abstraction before you can name the existing owner.

  4. 04

    Implement the smallest vertical slice. Add one coherent change, run the narrowest verification command, and read the output before continuing.

  5. 05

    Connect the slice to TaskFlow’s phase artifact: A one-page architecture map plus an ADR-style note describing the responsibilities of Next.js, NestJS, Prisma, PostgreSQL/Supabase, and supporting infrastructure.. Verify behavior from the outside as a user or API client would.

  6. 06

    Create one controlled failure that is safe to reproduce. Predict the symptom first, capture evidence, locate the earliest broken boundary, then fix only that cause.

  7. 07

    Close the reference and rebuild or explain the core change from memory. Record what you would monitor or test before trusting the same change in production.

txtBoundary trace
Input -> owner -> transformation -> observable output -> failure evidence

Do not copy this as a finished answer. Predict what each boundary does, type the smallest useful slice, run it, then compare the result with your prediction.

Verification

Prove the happy path

  1. Run the narrowest relevant command or request and require a clean exit/status.
  2. Inspect the boundary-specific evidence: terminal output, Network panel, database row/query plan, test report, container health, or deployment logs.
  3. Repeat the behavior once after the change so a one-off cached or stale result cannot masquerade as success.
Break it on purpose

Build debugging memory

  1. Putting business rules in React components
  2. Change one assumption in the architecture example—identity, input, configuration, ordering, connectivity, or state—and predict the exact symptom before running it.
SymptomInvestigation path
Expected result does not appear

Return to the nearest observable boundary: input, network, process log, database, or rendered UI. Compare actual evidence with the predicted path.

A shortcut appears to fix it

Change one variable at a time and reproduce the original failure after the fix; otherwise you have correlation, not diagnosis.

Closed-reference challenge

Can you transfer the idea?

Without copying the final source, create a second small scenario that applies “Architecture Atlas” to a different TaskFlow resource or input. Write the acceptance criteria first, implement it, and provide the evidence that each criterion is satisfied.

Explain-back

Answer these without reopening the solution

  1. What problem does Architecture Atlas solve in TaskFlow, and what would be observably wrong without it?
  2. Which part of the architecture boundary owns the decision, and which neighboring layer must not own it?
  3. What evidence proves the happy path instead of merely suggesting it worked?
  4. Name one realistic failure or abuse case and the first place you would inspect.
  5. If requirements doubled tomorrow, which part of this design should stay stable and which part is allowed to change?
Lesson studio

Turn the reading into skill

01

Do it

Trace one failure: invalid input, missing authentication, forbidden action, database outage.

Use the smallest change that demonstrates this lesson. Stop after it works and capture evidence.
02

Break it safely

Putting business rules in React components

Predict the symptom before causing the failure. Then locate the earliest boundary where reality diverges from expectation.
03

Explain it back

Why does this responsibility live here, what input does it trust, what output proves success, and what would go wrong if another layer owned it?

If your explanation is vague, repeat the boundary trace before moving on.
Exit ticket

Before marking complete

Close the reference. Reproduce the core idea from memory or explain the exact request/data flow aloud. Then check your diff or notes for accidental shortcuts that bypass validation, authorization, error handling, or verification earned in earlier phases.