Todos

Per-user task tracker. Each account gets its own audience-bound live query (todos_<uuid>); RLS ensures even REST queries can only see your rows.