Personal Lifecycle Tracker — Development Backlog

This backlog deconstructs product-spec.md and _docs/plan.md into atomic, verifiable implementation tasks.

---

Task Backlog Overview

Task ID	Component	Description	Status	Verification Criteria
TASK-01	Data Layer	Database schema & SQLAlchemy models (Users, Groups, Items)	DONE	Pytest test_database.py, tables migrated
TASK-02	Backend Auth	User registration, bcrypt hashing, JWT access tokens	DONE	Pytest test_auth.py, 401 on missing token
TASK-03	Groups API	Shared groups, invitations, member permissions	DONE	Pytest test_groups.py, owner/member rules
TASK-04	Items API	Lifecycle items CRUD (Renewals, Maintenance, Warranties)	DONE	Pytest test_items.py, common fields validation
TASK-05	Reminders	Overdue/upcoming detection and action summaries	DONE	Pytest test_reminders.py, due date filters
TASK-06	Daily Digest	Morning digest generation and email delivery simulator	DONE	Pytest digest endpoint, grouped summaries
TASK-07	Frontend Client	Centralized API client service (src/services/api.ts)	DONE	Unit tests with mock fallback
TASK-08	Frontend UI	React 19 dashboard, guided creation modal, filtering	DONE	Vitest component tests, responsive views
TASK-09	Containerization	Docker Compose multi-service topology (DB + App + Caddy)	DONE	make up, healthy /health checks
TASK-10	Integration QA	Multi-user PostgreSQL integration & Playwright E2E	DONE	27 integration tests, 17 E2E tests passing
TASK-11	Observability	OpenTelemetry traces, Prometheus metrics, Loki, Grafana	DONE	OTel Collector pipeline & dashboards active
TASK-12	Local K8s	Declarative Kind deployment manifests and PVC storage	DONE	make kind-deploy, pod readiness verified
TASK-13	CI/CD & Deploy	Two-stage ECR pipeline, dev/prod environments, Terraform	DONE	Keyless GitHub Actions OIDC deploy
TASK-14	Autonomous Ops	Headless on-call incident poller, policy, and runbooks	DONE	on-call-engineer/poll-alerts.py verified

---

Detailed Task Specifications

Task 1: Core Domain Models & Database Schema

• Objective: Establish the relational database foundation supporting both PostgreSQL and SQLite fallback.
• Entities:
  • User: id, email, password_hash, full_name, created_at.
  • Group: id, name, owner_id, created_at.
  • GroupMember: group_id, user_id, role, joined_at.
  • LifecycleItem: id, name, type (renewal | maintenance | warranty), due_date, status (active | completed), user_id, group_id, created_at, updated_at.
• Deliverables: backend/app/db_models.py, backend/app/database.py.

Task 2: Authentication & Token Authorization Service

• Objective: Implement stateless JWT authentication preventing unauthenticated access to personal or group resources.
• Endpoints: POST /api/v1/auth/register, POST /api/v1/auth/login, GET /api/v1/auth/me.
• Security: Passwords salted and hashed with bcrypt, access tokens signed with HMAC-SHA256, expiration enforced.
• Deliverables: backend/app/routers/auth.py, backend/app/auth.py.

Task 3: Shared Groups & Membership Access Layer

• Objective: Provide group collaboration where group members share lifecycle item tracking while maintaining group ownership boundaries.
• Endpoints: GET /api/v1/groups, POST /api/v1/groups, POST /api/v1/groups/{id}/members, DELETE /api/v1/groups/{id}/members/{user_id}.
• Rules: Group creator is designated owner. Members can view and edit shared items. Group items persist when members leave.
• Deliverables: backend/app/routers/groups.py.

Task 4: Lifecycle Items CRUD & Type Filtering

• Objective: Core CRUD API for the 3 supported lifecycle types (Renewals, Maintenance, Warranties).
• Endpoints: GET /api/v1/items, POST /api/v1/items, GET /api/v1/items/{id}, PUT /api/v1/items/{id}, DELETE /api/v1/items/{id}.
• Filters: Filter by type, status, group_id, due_before, due_after.
• Deliverables: backend/app/routers/items.py.

Task 5: Reminders Engine & Action Summaries

• Objective: Aggregate upcoming (due within 30 days) and overdue items into an instant action summary.
• Endpoints: GET /api/v1/reminders, GET /api/v1/reminders/summary.
• Deliverables: backend/app/routers/reminders.py.

Task 6: Daily Morning Email Digest Simulator

• Objective: Simulate daily 8:00 AM notification digests delivering scheduled reminders to registered users.
• Endpoints: POST /api/v1/reminders/digest/send, GET /api/v1/reminders/digest/history.
• Deliverables: Background digest dispatcher in backend with delivery logging.

Task 7: Centralized Frontend API Client

• Objective: Abstract all HTTP requests behind a single typed API client layer with mock fallback capability.
• Deliverables: frontend/src/services/api.ts.

Task 8: Interactive React 19 Frontend Components

• Objective: Modern, accessible UI implementing full lifecycle management.
• Components: Navigation, Auth modals, Item tables, Guided type creation wizard, Reminders drawer.
• Deliverables: frontend/src/App.tsx, frontend/src/components/.

Task 9: Containerization & Docker Compose Foundation

• Objective: Fully containerized local execution with zero host dependencies.
• Deliverables: docker-compose.yaml, docker-compose.prod.yml, Makefile.

Task 10: PostgreSQL Integration & Playwright E2E Testing

• Objective: Isolated integration tests against real PostgreSQL and browser journeys using Playwright.
• Deliverables: backend/tests/integration/, e2e/.