A task manager that answers the question the list never does — what should I do now. Tasks are weighted by how urgent they are, and the scheduler draws from them at random in proportion to those weights, once per 30-minute block, laying out the rest of the day rather than handing back a single answer.
It works signed out. Everything lives in the browser and survives a reload, and the account buttons say accounts are not configured on this server rather than blaming the network when no database is attached. Sign in and the same data lives in the account instead, so it follows you between browsers.
Accounts run on Neon Postgres over its HTTP driver, which is what makes them work on a serverless host: every query is a stateless request, so there is no connection pool to exhaust across instances and nothing is written to a filesystem that is read-only and discarded between requests anyway.
The security decisions are written down rather than assumed. Passwords are scrypt with a per-user salt, the parameters stored beside the hash so they can be raised later without a migration. Sessions are an httpOnly cookie holding a 256-bit token, of which only the digest is stored, so a stolen copy of the database cannot be replayed as a login. A wrong username and a wrong password give the same message, so the endpoint cannot be used to find out who has an account. Rate-limit counters live in Postgres rather than process memory, because otherwise every serverless instance would hand out an allowance of its own.
Moving from the device into an account is treated as a decision rather than a default: it offers to move the data or leave it, clears the local copy only once the server confirms it stored them, and asks on sign-in only when the account is completely empty — an account holding anything at all is left alone, because silently overwriting either copy is not a call to make on someone's behalf.