Restructure project + neo-brutalist UI redesign + professional constitution

[devin-ai-integration]

Summary

Ground-up restructure of IssueTrack-v1 with a professional project constitution, a modular backend, a modular frontend, and an editorial / neo-brutalist UI with no rounded corners anywhere.

Docs

• CONSTITUTION.md — mission, non-negotiables, module boundaries, design system, amendment process
• ARCHITECTURE.md — topology, folder layout, layered flow, error model, auth flow, schema
• CONTRIBUTING.md — setup, branching, commits, PR checklist, design-system quick-reference
• README.md — rewritten; includes API reference, screens, scripts
• .env.example — complete required/optional vars
• .gitignore — expanded

Backend (backend/src/…)

• New layout: config/, db/, middlewares/, modules/{auth,issues,solutions}/, utils/
• Every feature split into controller → service → repository → routes
• Typed ApiError class + centralized errorHandler middleware (consistent { error, code, details } shape)
• asyncHandler, authenticate, authorize, requestLogger, notFound middlewares
• config/env.js validates env vars at boot (fails fast)
• db/migrate.js creates tables idempotently at startup
• ESM throughout, no business logic in controllers, no inline role checks
• main in package.json points to backend/src/server.js

Frontend (frontend/src/…)

• New layout: api/, components/{layout,ui,issues,solutions}/, context/, hooks/, pages/, routes/, lib/, styles/
• api/client.js — fetch wrapper + ApiClientError; per-feature API files (auth, issues, solutions)
• AuthContext split into data (authContext.js) + provider (AuthContext.jsx) so Fast Refresh is happy; useAuth hook
• AppRoutes, ProtectedRoute, GuestRoute
• Reusable UI primitives: Button, Input, Textarea, Panel, StatTile, StatusTag, Spinner, EmptyState
• Pages rebuilt: Home, Login, Register, Issues, Issue, NotFound

Design system

• Global border-radius: 0 — sharp edges everywhere
• border-2 border-black surfaces + shadow-brutal offsets (6px 6px 0 0 #0a0a0a)
• Palette: neutral ink/paper, yellow-400 primary, red-500 destructive, emerald-500 positive, sky-400 informational
• Typography: Outfit (display) + JetBrains Mono (metadata, eyebrows, labels)
• Motion: translate-only hover interactions (no scale transforms, per the constitution)

Checks

• frontend: npm run lint → passes
• frontend: npm run build → passes (269 kB JS, 22 kB CSS)

Review & Testing Checklist for Human

Risk: yellow — large refactor, touches auth, DB bootstrap, and every page.

• Copy .env.example → .env, fill DB creds + JWT_SECRET, run npm run server and confirm the schema bootstrap logs database schema ensured and the server listens on :3000.
• cd frontend && npm run dev, open http://localhost:5000, walk through: register → login → raise issue → open issue detail → logout.
• Promote a user to admin (UPDATE users SET role = 'admin' WHERE admission_number = '…') and verify the solution form renders and POSTs successfully.
• Confirm the UI has no rounded corners anywhere (every surface should be a sharp rectangle).
• Hit an error path (wrong password, duplicate admission number, missing fields) and verify you get a readable toast with the server-provided message.

Notes

• No tests were added (none existed previously).
• The backend does not ship a linter; frontend ESLint config is unchanged.
• No database schema changes beyond what migrate.js already created — column names/types are preserved.

Link to Devin session: https://app.devin.ai/sessions/608d69870ca940098736d65af9292f41
Requested by: @agentVivek

---

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[devin-ai-integration]

Test results — all passed

End-to-end walkthrough against a locally-booted stack (Postgres 14 + npm run server + Vite dev). Devin session.

• It should register a new user and redirect to /issues — passed. Toast Account created, yellow user role tag in top bar.
• It should create an issue and update the stat tiles — passed. Card renders with status open + #0001; Total + Open tiles went 0 → 1.
• It should show pending-admin solution panel on issue detail — passed. No resolution form visible as a non-admin.
• It should reflect admin role after re-login — passed. After UPDATE users SET role='admin' + sign-out → sign-in, the badge switches from yellow user to black admin (session is re-hydrated from DB, not stale localStorage).
• It should allow admin to post a solution and render resolution — passed. Green RESOLVED block shows the exact notes and persists after hard reload.

Observations (not regressions — same as before the restructure)

• issues.status stays open after a solution is posted — posting a solution doesn't flip it. Total/Open stats don't decrement for the same reason. Worth triaging in a follow-up PR.

Evidence (screenshots)

Annotated screencast is attached in the Devin session. Happy to run a regression sweep (filter chips, delete-issue, validation errors) if you want a second pass.