🚀 TaskFlow

TaskFlow is a full-stack, production-ready task management system built on the Next.js App Router. It pairs a premium, dark-mode glassmorphic UI with a type-safe backend of Server Actions, optimistic updates, and role-based access control — then layers on genuinely useful AI features via OpenRouter.

• Kanban board with drag-and-drop (plus a click-to-move fallback) that updates status instantly.
• List and Calendar views that switch smoothly from a unified state bar.
• Instant client-side filtering & search — by keyword, priority, assignee and due date.
• Full CRUD via Server Actions with optimistic UI and react-hook-form
  • zod validation, so every action feels immediate.

• Team workspaces with secure, unique invite codes (create / join / regenerate).
• Member portal showing avatars, roles, and each teammate's active task load.
• Slide-out task details panel with a threaded comment section and an activity timeline that reads from the audit log (e.g. "Ali moved Fix the login auth bug to IN_REVIEW").

• AI Task Breakdown — turn a broad task into an actionable subtask checklist.
• Smart Triage — type casually ("Fix auth bug by Friday, high priority, assign to Ali") and AI extracts a structured task to pre-fill the form.
• Sprint Summary — a manager-only executive standup generated from the past week's activity.
• Resilient model fallback chain (free models → robust paid backstop) so the features degrade gracefully.

• strict TypeScript with zero any in application code.
• Error boundaries (error.tsx, global-error.tsx) + a custom 404 with polished screens.
• Route-level loading skeletons for the board, list and teams.
• Security headers (nosniff, SAMEORIGIN, referrer & permissions policies) and X-Powered-By disabled.

# 1. Install dependencies (also runs `prisma generate`)
npm install

# 2. Configure environment
cp .env.example .env        # then fill in the values

# 3. Sync the schema to your database
npm run db:push

# 4. (Optional) Seed a demo team with realistic data
npm run db:seed

# 5. Run it
npm run dev

Open http://localhost:3000. Unauthenticated traffic is redirected to /login — sign in with a demo account below, register a new one, or use Google.

Running npm run db:seed creates the NexSoft Product Team with one admin and five working members (each with assigned tasks, comments and a week of activity).

Password for every account: password000

Team invite code: NEX7QMK2

⚠️ These are throwaway demo credentials for local/demo use only — never reuse them for anything real.

src/
  app/
    (auth)/                 # Public login & register
    (dashboard)/            # Protected shell: dashboard, board, teams, settings
      board/                # Kanban / List / Calendar workspace
    api/
      auth/[...nextauth]/   # NextAuth handlers
      register/             # Credentials sign-up (bcrypt)
    error.tsx               # Route error boundary
    global-error.tsx        # Root error boundary
    not-found.tsx           # Custom 404
  auth.ts / auth.config.ts  # NextAuth (Prisma adapter + edge-safe base config)
  proxy.ts                  # Edge route protection (Next 16 middleware successor)
  components/
    workspace/              # Board, views, task dialog, details panel, AI
    teams/                  # Team workspace & member portal
  lib/
    actions/                # Server Actions: task, team, comment, ai
    ai/openrouter.ts        # OpenRouter client + model fallback
    data/                   # Server-only data access
    rbac.ts                 # Role-Based Access Control guards
    validations/            # Zod schemas
  generated/prisma/         # Generated Prisma client (gitignored)

Auth & RBAC — Credentials (bcrypt) + Google OAuth over a JWT session carrying the user id and role. proxy.ts bounces unauthenticated traffic to /login. Only ADMIN / MANAGER can create teams, manage roles, or run the sprint summary — enforced server-side in every action.

Data model — User, Team, Task, Comment (threaded), ActivityLog, plus the Auth.js tables. See prisma/schema.prisma.

1. Push to GitHub and import the repo in Vercel (Next.js auto-detected).
2. Add the environment variables below in Settings → Environment Variables (see .env.example).
3. Deploy — the build runs prisma generate && next build.

AUTH_URL / NEXTAUTH_URL are optional on Vercel when AUTH_TRUST_HOST=true. For Google OAuth in production, add https://<your-domain>/api/auth/callback/google as an authorized redirect URI.