Build a client portal for {{business_name}}, a {{business_type}}. Roles: {{user_roles}}. Each client sees only their own work, and staff manage everything from one place. For clients: - Invite-only sign-in by email link or password, with password reset; no public sign-up - A dashboard of their projects, each with status, next steps and due dates - File sharing both ways, with progress bars and a 50 MB limit per file - Messages on each project, with an email alert when someone replies For staff: - Create clients, invite their people, add projects and update status - See all files and messages, plus an activity log of who did what Security, which matters most here: - Access rules on every table and on file storage, so a client can never see another client's projects or files, even by guessing a link - Private file storage, with download links that expire within an hour - Roles kept in their own table that only staff can change - Rate limits on sign-in, and admin keys only in server functions, never in the browser Also: WCAG 2.2 AA, works well on phones, portal pages hidden from search engines, and a simple branded sign-in page. When you're done, list your assumptions and how you tested that clients can't see each other's data.