Track project · 14

Build Collaborative Tasks and Attachments

Add realtime updates and secure file attachments while keeping the database as the durable source of truth.

Build plan

Work through it one observable step at a time

01
Open the app in two browser sessions with separate users.
02
Create/update/delete a task in one browser and observe events in the other.
03
Reconcile realtime events with TanStack Query instead of maintaining a second independent store.
04
Simulate duplicate and out-of-order events and decide when to refetch.
05
Implement file selection and validate size/type metadata before upload.
06
Upload to storage and write authoritative metadata to PostgreSQL.
07
Authorize download based on verified workspace membership.
08
Delete metadata/object with an explicit lifecycle that can recover from partial failure.
09
Attempt an unsafe upload and unauthorized download and record the security evidence.

Evidence

Do not rely on “it seems to work”

Evidence to collect

A clean Git diff or file-tree changeCommands used and their exit/resultBrowser, HTTP, database, test, container, or CI evidence that proves the behaviorOne deliberate failure, the evidence you used, and the root-cause fixA short explanation of why the final responsibility lives in the chosen layer

Project exit ticket

Close the project only when these are true

Completion

I can demonstrate every deliverable.I can reproduce one key part without the walkthrough.I can explain one trade-off I deliberately chose.I can show one failure that my tests, constraints, or runbook now protects against.