afloresc/pm_flow_dashboard

Purpose and Entry Points

PRO-FLOW is a single-page enterprise project-management dashboard for task execution, timelines, resource capacity, reporting, and AI-assisted audits. The browser enters through index.html and mounts React in src/main.tsx; src/App.tsx owns the authenticated application shell and workspace/view selection. server.ts is the Node/Express runtime entry point for development middleware, production static hosting, and backend API routes.

Authentication and Role Boundary

src/components/AuthScreen.tsx provides Firebase-backed sign-up/sign-in plus local demo sessions. Firebase mode delegates identity to Firebase Authentication and persists user roles in Firestore; demo mode stores a mock session in browser local storage. The app uses shared domain and role definitions from src/types.ts, allowing manager/member permissions to gate editing and allocation-oriented actions.

Project Data Synchronization

src/hooks/useProjectData.ts is the client data boundary and synchronization engine. It reads and writes project entities—including tasks, subtasks, resource allocations, logs, and comments—against Cloud Firestore for live collaboration, while providing LocalStorage fallback behavior when cloud access is unavailable. src/firebase.ts initializes the Firebase Auth and Firestore SDK clients used by this layer.

Workspace Modules

src/App.tsx composes the major operational views:

• src/components/TaskTracking.tsx: task CRUD, checklists, progress, logs, and discussion activity.

• src/components/GanttChart.tsx: expected-versus-actual schedule visualization and task navigation.

• src/components/ResourceAllocation.tsx: personnel/material registry, costs, assignments, and workload/overload indicators.

• src/components/AutomatedReporting.tsx: project exports, AI audit invocation, and AI-report export.

These components consume the shared project state rather than directly defining persistence infrastructure.

AI Audit Server Boundary

Gemini access is intentionally server-side: src/components/AutomatedReporting.tsx submits project/audit context to API routes exposed by server.ts. The Express layer uses the Gemini SDK and GEMINI_API_KEY environment secret, preventing that credential from reaching the browser. Returned audit results identify schedule risks, bottlenecks, cost variance, and potential resource reallocation; the client displays and exports the resulting report.

Runtime and Deployment Infrastructure

The frontend runs on React 19, TypeScript, Vite, MUI, Tailwind, Motion, and Lucide. vite.config.ts configures the frontend build; server.ts serves Vite during development and built static assets in production. Firebase deployment/project configuration and data-access policy are represented by firebase.json, firebase-blueprint.json, and firestore.rules. Node.js 18+ is the material runtime; Firebase Authentication, Cloud Firestore, and Gemini are the external managed services.

Security and Persistence Boundaries

Browser code may access Firebase through src/firebase.ts under Firestore rules in firestore.rules; durable authorization must therefore be enforced by Firebase policies rather than UI role checks alone. Server-only Gemini credentials belong in environment configuration (.env.example) and are mediated by server.ts. LocalStorage is a resilience/demo store, not an authoritative collaborative data source.