sis/docs/plans/2026-07-15-chorequest.md

Sis Implementation Plan

Goal: Build the complete Sis household chore tracker per BUILD_TASKS.md — auth, households, chores/schedules, activity recording, PWA, all styled with NeoBrutalismCSS.

Architecture: Monolithic Haskell/Orb backend serving JSON API routes + SQLite persistence. Mithril.js SPA frontend with client-side routing. Session-based auth via httpOnly cookies with PBKDF2-hashed passwords using crypton. All household-scoped data is protected by session middleware.

Tech Stack: Haskell (GHC 9.10), Orb/Warp, sqlite-simple, crypton (PBKDF2), aeson, Mithril.js v2, TypeScript, NeoBrutalismCSS CDN.

Product decisions:

• Any member can manage chores (edit/delete) — collaborative model
• Activity records are append-only (no edit/undo)
• "Anyone" chores: completing an occurrence clears it for the whole household
• Recurring: specific day-of-week/month, not just "every N days"
• Occurrences generated 90 days ahead, rolling window

---

Phase 0 — Foundation: DB schema + session infrastructure

Task 0.1: Database schema migrations

• Files: src/Sis/Database.hs
• Add runMigrations that creates all tables on startup: users, sessions, households, memberships, invites, chores, occurrences, activities.

Task 0.2: Password hashing module

• Files: New src/Sis/Auth.hs
• PBKDF2 via crypton: hashPassword, verifyPassword, generateSessionToken (32 random bytes hex), session cookie handling.

Task 0.3: Session middleware

• Files: src/Sis/Server.hs, src/Sis/Auth.hs
• Extract session token from cookie, load user, attach to request context. Auth-required routes check for valid user.

---

Phase 1 — Auth routes (Milestone 1)

Task 1.1: Auth route types + handlers

• Files: src/Sis/Server.hs
• POST /api/auth/signup, POST /api/auth/login, POST /api/auth/logout, GET /api/auth/me
• Validate unique email, password strength, matching confirmation.

Task 1.2: Frontend auth pages

• Files: frontend/src/components/LoginPage.ts, frontend/src/components/SignupPage.ts
• Signup form with inline validation. Login form with "remember me". Client-side router integration.

Task 1.3: Password reset

• Files: src/Sis/Server.hs, frontend/src/components/ForgotPassword.ts
• POST /api/auth/forgot-password (generates reset token), POST /api/auth/reset-password (consumes token).

---

Phase 2 — Households (Milestone 2)

Task 2.1: Household CRUD routes

• Files: src/Sis/Server.hs
• POST /api/households, GET /api/households, GET /api/households/:id, PUT /api/households/:id, DELETE /api/households/:id
• GET /api/households/:id/members, DELETE /api/households/:id/members/:userId

Task 2.2: Invite routes

• Files: src/Sis/Server.hs
• POST /api/households/:id/invites, GET /api/households/:id/invites, DELETE /api/households/:id/invites/:inviteId
• GET /api/invites/:code (public lookup), POST /api/invites/:code/accept

Task 2.3: Frontend household pages

• Files: frontend/src/components/HouseholdPage.ts, frontend/src/components/HouseholdList.ts, frontend/src/components/CreateHousehold.ts
• Household switcher, member list, invite panel.

---

Phase 3 — Chores (Milestone 3)

Task 3.1: Chore CRUD routes

• Files: src/Sis/Server.hs
• GET /api/households/:id/chores, POST /api/households/:id/chores, PUT /api/households/:id/chores/:id, DELETE /api/households/:id/chores/:id

Task 3.2: Occurrence generation logic

• Files: src/Sis/Database.hs (for occurrence queries)
• Generate rolling 90-day window of occurrences from recurring schedules. Recompute on schedule edit.

Task 3.3: Dashboard routes

• Files: src/Sis/Server.hs
• GET /api/households/:id/dashboard — returns overdue, due-today, completed-today stats and lists.

Task 3.4: Frontend chore + dashboard pages

• Files: frontend/src/components/DashboardPage.ts, frontend/src/components/ChoreList.ts, frontend/src/components/ChoreForm.ts

---

Phase 4 — Activity (Milestone 4)

Task 4.1: Activity record routes

• Files: src/Sis/Server.hs
• POST /api/occurrences/:id/activity

Task 4.2: Activity log routes

• Files: src/Sis/Server.hs
• GET /api/households/:id/activity?member=&status=&page=&perPage=

Task 4.3: Frontend activity pages

• Files: frontend/src/components/RecordActivity.ts, frontend/src/components/ActivityLog.ts

---

Phase 5 — PWA (Milestone 5)

Task 5.1: Manifest + service worker

• Files: frontend/public/manifest.json, frontend/public/sw.js
• Web app manifest, basic offline service worker.

Task 5.2: Frontend polish, routing, navigation

• Files: frontend/src/router.ts, frontend/src/components/Layout.ts, frontend/public/style.css
• Client-side router, nav bar, responsive layouts, all nav links.

---

Phase 6 — Seed data + tests (Milestone 6)

Task 6.1: Seed data route

• Files: src/Sis/Server.hs
• POST /api/seed — creates demo household with sample chores, members, activity.

Task 6.2: Backend tests

• Files: test/Spec.hs
• Test auth flow, household CRUD, chore CRUD, activity recording.