chore(cd): hardening of env settings

.gitea/workflows/deploy-socialize.yml

@@ -24,7 +24,7 @@ jobs:
             -t git.mapachotes.com/jbourdon/socialize-api:latest \
             -f backend/src/Socialize.Api/Dockerfile .
           docker build \
-            --build-arg VITE_API_URL=/api \
+            --build-arg VITE_API_URL=/ \
             -t git.mapachotes.com/jbourdon/socialize-web:${{ gitea.sha }} \
             -t git.mapachotes.com/jbourdon/socialize-web:latest \
             -f frontend/Dockerfile .
@@ -37,8 +37,9 @@ jobs:
 
   deploy:
     needs: image
-    runs-on: bookworm
+    runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
       - name: Install SSH client
         run: apt-get update && apt-get install -y openssh-client
       - name: Deploy on sobina
@@ -46,9 +47,29 @@ jobs:
           DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
           DEPLOY_USER: ${{ secrets.DEPLOY_USER }}
           DEPLOY_SSH_PRIVATE_KEY_B64: ${{ secrets.DEPLOY_SSH_PRIVATE_KEY_B64 }}
+          SOCIALIZE_IMAGE_TAG: ${{ gitea.sha }}
         run: |
+          : "${SOCIALIZE_IMAGE_TAG:?SOCIALIZE_IMAGE_TAG is required}"
+
           mkdir -p ~/.ssh
           printf '%s' "$DEPLOY_SSH_PRIVATE_KEY_B64" | base64 -d > ~/.ssh/deploy_key
           chmod 600 ~/.ssh/deploy_key
+
+          write_env_value() {
+            key="$1"
+            value="$2"
+            escaped_value="$(printf '%s' "$value" | sed "s/'/'\\\\''/g")"
+            printf "%s='%s'\n" "$key" "$escaped_value"
+          }
+
+          deploy_env="$(mktemp)"
+          {
+            write_env_value SOCIALIZE_IMAGE_TAG "$SOCIALIZE_IMAGE_TAG"
+          } > "$deploy_env"
+
+          scp -i ~/.ssh/deploy_key -o StrictHostKeyChecking=accept-new "$deploy_env" "$DEPLOY_USER@$DEPLOY_HOST:/srv/prod/socialize/.deploy.env"
+          rm -f "$deploy_env"
+          scp -i ~/.ssh/deploy_key -o StrictHostKeyChecking=accept-new deploy/compose.yml "$DEPLOY_USER@$DEPLOY_HOST:/srv/prod/socialize/compose.yml"
+
           ssh -i ~/.ssh/deploy_key -o StrictHostKeyChecking=accept-new "$DEPLOY_USER@$DEPLOY_HOST" \
-            'cd /srv/prod/socialize && ./deploy.sh'
+            'test -r /etc/socialize/socialize.env && cd /srv/prod/socialize && ./deploy.sh'

.gitignore

@@ -22,6 +22,10 @@ Thumbs.db
 # .NET
 bin/
 obj/
+**/[Bb]in/
+**/[Oo]bj/
+**/[Bb]in[\\]*
+**/[Oo]bj[\\]*
 TestResults/
 
 # Node
@@ -30,6 +34,7 @@ dist/
 .vite/
 
 # Local environment files
+.env
 *.local
 .env.local
 .env.*.local
@@ -38,5 +43,8 @@ App_Data/
 # Local SSL certificates
 *.pem
 
-# Ai
+# AI agent local state
+.agents
+.agents/
 .codex
+.codex/

README.md

@@ -76,6 +76,12 @@ http://localhost:8080
 http://<this-machine-lan-ip>:8080
 ```
 
+For preprod deployment, configure the `POSTGRES_PASSWORD`, `RESEND_API_KEY`,
+`RESEND_FROM_EMAIL`, and `JWT_SIGNING_KEY` Gitea secrets.
+The deploy workflow writes the remote `.env` file and syncs `deploy/compose.yml`
+before running the server deploy script.
+Use the raw Resend API key value for `RESEND_API_KEY`, without a `Bearer ` prefix.
+
 ## Solution
 
 ```bash

backend/src/Socialize.Api/DependencyInjection.cs

@@ -70,7 +70,6 @@ public static class DependencyInjection
         {
             authenticationBuilder.AddJwtBearer(JwtBearerDefaults.AuthenticationScheme, jwtBearerOptions =>
             {
-                jwtBearerOptions.Authority = "https://hutopy.com";
                 jwtBearerOptions.TokenValidationParameters = new TokenValidationParameters
                 {
                     ValidateIssuer = true,

backend/src/Socialize.Api/Folder.DotSettings

@@ -1,5 +0,0 @@
-<wpf:ResourceDictionary xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
-                        xmlns:s="clr-namespace:System;assembly=mscorlib"
-                        xmlns:wpf="http://schemas.microsoft.com/winfx/2006/xaml/presentation"
-                        xml:space="preserve">
-	<s:Boolean x:Key="/Default/UserDictionary/Words/=hutopy/@EntryIndexedValue">True</s:Boolean></wpf:ResourceDictionary>

backend/src/Socialize.Api/Infrastructure/DependencyInjection.cs

@@ -26,8 +26,14 @@ public static class DependencyInjection
 
         builder.Services.Configure<EmailerOptions>(
             builder.Configuration.GetSection(EmailerOptions.ConfigurationSection));
+        if (builder.Environment.IsDevelopment())
+        {
+            builder.Services.AddTransient<IEmailSender, LoggerEmailSender>();
+        }
+        else
+        {
             builder.Services.AddTransient<IEmailSender, ResendEmailSender>();
-        //builder.Services.AddTransient<IEmailSender, EmailSender>();
+        }
 
         builder.Services.AddHttpClient();
 

backend/src/Socialize.Api/Infrastructure/Emailer/Services/LoggerEmailSender.cs

@@ -5,18 +5,15 @@ namespace Socialize.Api.Infrastructure.Emailer.Services;
 public class LoggerEmailSender(ILogger<IEmailSender> logger)
     : IEmailSender
 {
-    public async Task SendEmailAsync(string email, string subject, string message)
+    public Task SendEmailAsync(string email, string subject, string message)
     {
-        try
+        logger.LogInformation(
-        {
+            "Development email to {Email} with subject {Subject}:{NewLine}{Message}",
-            logger.LogInformation("Sending email to {Email} with subject: {Subject}", email, subject);
+            email,
-            await Task.Delay(1000);
+            subject,
-            logger.LogInformation("Email sent successfully to {Email}", email);
+            Environment.NewLine,
-        }
+            message);
-        catch (Exception ex)
+
-        {
+        return Task.CompletedTask;
-            logger.LogError(ex, "Failed to send email to {Email}", email);
-            throw;
-        }
     }
 }

backend/src/Socialize.Api/Infrastructure/Emailer/Services/ResendEmailSender.cs

@@ -20,8 +20,24 @@ public class ResendEmailSender : IEmailSender
         _httpClient = httpClientFactory.CreateClient();
         _options = options.Value;
 
+        string apiKey = NormalizeApiKey(_options.ApiKey);
+        string fromEmail = _options.FromEmail?.Trim() ?? string.Empty;
+
+        if (string.IsNullOrWhiteSpace(apiKey))
+        {
+            throw new InvalidOperationException("Emailer:ApiKey is required when using Resend email delivery.");
+        }
+
+        if (string.IsNullOrWhiteSpace(fromEmail))
+        {
+            throw new InvalidOperationException("Emailer:FromEmail is required when using Resend email delivery.");
+        }
+
+        _options.ApiKey = apiKey;
+        _options.FromEmail = fromEmail;
+
         _httpClient.DefaultRequestHeaders.Authorization =
-            new AuthenticationHeaderValue("Bearer", _options.ApiKey);
+            new AuthenticationHeaderValue("Bearer", apiKey);
 
         _httpClient.DefaultRequestHeaders.Accept.Add(
             new MediaTypeWithQualityHeaderValue("application/json"));
@@ -43,4 +59,16 @@ public class ResendEmailSender : IEmailSender
                 $"Resend email failed: {response.StatusCode} - {body}");
         }
     }
+
+    private static string NormalizeApiKey(string? apiKey)
+    {
+        string normalized = apiKey?.Trim().Trim('"', '\'') ?? string.Empty;
+        const string bearerPrefix = "Bearer ";
+        if (normalized.StartsWith(bearerPrefix, StringComparison.OrdinalIgnoreCase))
+        {
+            normalized = normalized[bearerPrefix.Length..].Trim();
+        }
+
+        return normalized;
+    }
 }

backend/src/Socialize.Api/Migrations/20260505204545_Initial.Designer.cs

@@ -12,7 +12,7 @@ using Socialize.Api.Data;
 namespace Socialize.Api.Migrations
 {
     [DbContext(typeof(AppDbContext))]
-    [Migration("20260505192305_Initial")]
+    [Migration("20260505204545_Initial")]
     partial class Initial
     {
         /// <inheritdoc />
@@ -912,6 +912,29 @@ namespace Socialize.Api.Migrations
                         .ValueGeneratedOnAdd()
                         .HasColumnType("uuid");
 
+                    b.Property<string>("AttachmentBlobContainerName")
+                        .HasMaxLength(128)
+                        .HasColumnType("character varying(128)");
+
+                    b.Property<string>("AttachmentBlobName")
+                        .HasMaxLength(512)
+                        .HasColumnType("character varying(512)");
+
+                    b.Property<string>("AttachmentBlobUrl")
+                        .HasMaxLength(1024)
+                        .HasColumnType("character varying(1024)");
+
+                    b.Property<string>("AttachmentContentType")
+                        .HasMaxLength(128)
+                        .HasColumnType("character varying(128)");
+
+                    b.Property<string>("AttachmentFileName")
+                        .HasMaxLength(256)
+                        .HasColumnType("character varying(256)");
+
+                    b.Property<long?>("AttachmentSizeBytes")
+                        .HasColumnType("bigint");
+
                     b.Property<string>("AuthorDisplayName")
                         .IsRequired()
                         .HasMaxLength(256)

backend/src/Socialize.Api/Migrations/20260505204545_Initial.cs

@@ -282,6 +282,12 @@ namespace Socialize.Api.Migrations
                     AuthorDisplayName = table.Column<string>(type: "character varying(256)", maxLength: 256, nullable: false),
                     AuthorEmail = table.Column<string>(type: "character varying(256)", maxLength: 256, nullable: false),
                     Body = table.Column<string>(type: "character varying(4000)", maxLength: 4000, nullable: false),
+                    AttachmentFileName = table.Column<string>(type: "character varying(256)", maxLength: 256, nullable: true),
+                    AttachmentContentType = table.Column<string>(type: "character varying(128)", maxLength: 128, nullable: true),
+                    AttachmentSizeBytes = table.Column<long>(type: "bigint", nullable: true),
+                    AttachmentBlobContainerName = table.Column<string>(type: "character varying(128)", maxLength: 128, nullable: true),
+                    AttachmentBlobName = table.Column<string>(type: "character varying(512)", maxLength: 512, nullable: true),
+                    AttachmentBlobUrl = table.Column<string>(type: "character varying(1024)", maxLength: 1024, nullable: true),
                     CreatedAt = table.Column<DateTimeOffset>(type: "timestamp with time zone", nullable: false, defaultValueSql: "CURRENT_TIMESTAMP")
                 },
                 constraints: table =>

backend/src/Socialize.Api/Migrations/AppDbContextModelSnapshot.cs

@@ -909,6 +909,29 @@ namespace Socialize.Api.Migrations
                         .ValueGeneratedOnAdd()
                         .HasColumnType("uuid");
 
+                    b.Property<string>("AttachmentBlobContainerName")
+                        .HasMaxLength(128)
+                        .HasColumnType("character varying(128)");
+
+                    b.Property<string>("AttachmentBlobName")
+                        .HasMaxLength(512)
+                        .HasColumnType("character varying(512)");
+
+                    b.Property<string>("AttachmentBlobUrl")
+                        .HasMaxLength(1024)
+                        .HasColumnType("character varying(1024)");
+
+                    b.Property<string>("AttachmentContentType")
+                        .HasMaxLength(128)
+                        .HasColumnType("character varying(128)");
+
+                    b.Property<string>("AttachmentFileName")
+                        .HasMaxLength(256)
+                        .HasColumnType("character varying(256)");
+
+                    b.Property<long?>("AttachmentSizeBytes")
+                        .HasColumnType("bigint");
+
                     b.Property<string>("AuthorDisplayName")
                         .IsRequired()
                         .HasMaxLength(256)

backend/src/Socialize.Api/Modules/Comments/Data/Comment.cs

@@ -10,5 +10,11 @@ public class Comment
     public required string AuthorDisplayName { get; set; }
     public required string AuthorEmail { get; set; }
     public required string Body { get; set; }
+    public string? AttachmentFileName { get; set; }
+    public string? AttachmentContentType { get; set; }
+    public long? AttachmentSizeBytes { get; set; }
+    public string? AttachmentBlobContainerName { get; set; }
+    public string? AttachmentBlobName { get; set; }
+    public string? AttachmentBlobUrl { get; set; }
     public DateTimeOffset CreatedAt { get; init; }
 }

backend/src/Socialize.Api/Modules/Comments/Data/CommentModelConfiguration.cs

@@ -13,6 +13,11 @@ public static class CommentModelConfiguration
             comment.Property(x => x.AuthorDisplayName).HasMaxLength(256).IsRequired();
             comment.Property(x => x.AuthorEmail).HasMaxLength(256).IsRequired();
             comment.Property(x => x.Body).HasMaxLength(4000).IsRequired();
+            comment.Property(x => x.AttachmentFileName).HasMaxLength(256);
+            comment.Property(x => x.AttachmentContentType).HasMaxLength(128);
+            comment.Property(x => x.AttachmentBlobContainerName).HasMaxLength(128);
+            comment.Property(x => x.AttachmentBlobName).HasMaxLength(512);
+            comment.Property(x => x.AttachmentBlobUrl).HasMaxLength(1024);
             comment.Property(x => x.CreatedAt)
                 .ValueGeneratedOnAdd()
                 .HasDefaultValueSql("CURRENT_TIMESTAMP");

backend/src/Socialize.Api/Modules/Comments/Handlers/CreateComment.cs

@@ -1,6 +1,7 @@
 using FastEndpoints;
 using Microsoft.EntityFrameworkCore;
 using Socialize.Api.Data;
+using Socialize.Api.Infrastructure.BlobStorage.Contracts;
 using Socialize.Api.Infrastructure.Security;
 using Socialize.Api.Modules.ContentItems.Contracts;
 using Socialize.Api.Modules.ContentItems.Data;
@@ -14,7 +15,8 @@ public record CreateCommentRequest(
     Guid WorkspaceId,
     Guid ContentItemId,
     Guid? ParentCommentId,
-    string Body);
+    string Body,
+    IFormFile? Attachment);
 
 public class CreateCommentRequestValidator
     : Validator<CreateCommentRequest>
@@ -23,13 +25,14 @@ public class CreateCommentRequestValidator
     {
         RuleFor(x => x.WorkspaceId).NotEmpty();
         RuleFor(x => x.ContentItemId).NotEmpty();
-        RuleFor(x => x.Body).NotEmpty().MaximumLength(4000);
+        RuleFor(x => x.Body).MaximumLength(4000);
     }
 }
 
 public class CreateCommentHandler(
     AppDbContext dbContext,
     AccessScopeService accessScopeService,
+    IBlobStorage blobStorage,
     IContentItemActivityWriter activityWriter,
     INotificationEventWriter notificationEventWriter)
     : Endpoint<CreateCommentRequest, CommentDto>
@@ -38,10 +41,19 @@ public class CreateCommentHandler(
     {
         Post("/api/comments");
         Options(o => o.WithTags("Comments"));
+        AllowFileUploads();
     }
 
     public override async Task HandleAsync(CreateCommentRequest request, CancellationToken ct)
     {
+        string body = request.Body?.Trim() ?? string.Empty;
+        if (string.IsNullOrWhiteSpace(body) && request.Attachment is null)
+        {
+            AddError(request => request.Body, "A comment body or attachment is required.");
+            await SendErrorsAsync(StatusCodes.Status400BadRequest, ct);
+            return;
+        }
+
         ContentItem? contentItem = await dbContext.ContentItems
             .SingleOrDefaultAsync(
                 candidate => candidate.Id == request.ContentItemId && candidate.WorkspaceId == request.WorkspaceId,
@@ -75,16 +87,70 @@ public class CreateCommentHandler(
             }
         }
 
+        Guid commentId = Guid.NewGuid();
+        string? attachmentFileName = null;
+        string? attachmentContentType = null;
+        long? attachmentSizeBytes = null;
+        string? attachmentBlobName = null;
+        string? attachmentBlobUrl = null;
+
+        if (request.Attachment is not null)
+        {
+            string normalizedContentType = request.Attachment.ContentType.Trim().ToLowerInvariant();
+
+            if (request.Attachment.Length <= 0)
+            {
+                AddError(request => request.Attachment, "The attachment must not be empty.");
+                await SendErrorsAsync(StatusCodes.Status400BadRequest, ct);
+                return;
+            }
+
+            if (!IsInlineAttachmentContentType(normalizedContentType))
+            {
+                AddError(request => request.Attachment, "The attachment must be a PNG or JPEG image.");
+                await SendErrorsAsync(StatusCodes.Status400BadRequest, ct);
+                return;
+            }
+
+            attachmentFileName = NormalizeFileName(request.Attachment.FileName, normalizedContentType);
+            attachmentContentType = normalizedContentType;
+            attachmentSizeBytes = request.Attachment.Length;
+            attachmentBlobName =
+                $"{contentItem.WorkspaceId}/{SubDirectoryNames.Contents}/{contentItem.Id}/comments/{commentId}/{attachmentFileName}";
+
+            try
+            {
+                attachmentBlobUrl = await blobStorage.UploadFileAsync(
+                    ContainerNames.Workspaces,
+                    attachmentBlobName,
+                    request.Attachment.OpenReadStream(),
+                    normalizedContentType,
+                    ct);
+            }
+            catch (InvalidOperationException)
+            {
+                AddError(request => request.Attachment, "The attachment file is invalid or unsupported.");
+                await SendErrorsAsync(StatusCodes.Status400BadRequest, ct);
+                return;
+            }
+        }
+
         Comment comment = new()
         {
-            Id = Guid.NewGuid(),
+            Id = commentId,
             WorkspaceId = request.WorkspaceId,
             ContentItemId = request.ContentItemId,
             ParentCommentId = request.ParentCommentId,
             AuthorUserId = User.GetUserId(),
             AuthorDisplayName = User.GetAlias() ?? User.GetName(),
             AuthorEmail = User.GetEmail(),
-            Body = request.Body.Trim(),
+            Body = body,
+            AttachmentFileName = attachmentFileName,
+            AttachmentContentType = attachmentContentType,
+            AttachmentSizeBytes = attachmentSizeBytes,
+            AttachmentBlobContainerName = attachmentBlobName is not null ? ContainerNames.Workspaces : null,
+            AttachmentBlobName = attachmentBlobName,
+            AttachmentBlobUrl = attachmentBlobUrl,
             CreatedAt = DateTimeOffset.UtcNow,
         };
 
@@ -109,6 +175,7 @@ public class CreateCommentHandler(
                 JsonSerializer.Serialize(new
                 {
                     parentCommentId = comment.ParentCommentId,
+                    attachmentFileName = comment.AttachmentFileName,
                 })),
             ct);
 
@@ -135,8 +202,34 @@ public class CreateCommentHandler(
             comment.AuthorEmail,
             authorPortraitUrl,
             comment.Body,
+            comment.AttachmentFileName,
+            comment.AttachmentContentType,
+            comment.AttachmentSizeBytes,
+            comment.AttachmentBlobUrl,
             comment.CreatedAt);
 
         await SendAsync(dto, StatusCodes.Status201Created, ct);
     }
+
+    private static bool IsInlineAttachmentContentType(string contentType)
+    {
+        return contentType.Trim().ToLowerInvariant() is "image/png" or "image/jpeg" or "image/jpg";
+    }
+
+    private static string NormalizeFileName(string? fileName, string contentType)
+    {
+        string extension = contentType.Trim().ToLowerInvariant() switch
+        {
+            "image/png" => ".png",
+            "image/jpeg" or "image/jpg" => ".jpg",
+            _ => string.Empty,
+        };
+        string normalized = Path.GetFileName(fileName ?? string.Empty).Trim();
+        if (string.IsNullOrWhiteSpace(normalized))
+        {
+            return $"comment-attachment{extension}";
+        }
+
+        return normalized.Length > 256 ? normalized[..256] : normalized;
+    }
 }

backend/src/Socialize.Api/Modules/Comments/Handlers/GetComments.cs

@@ -19,6 +19,10 @@ public record CommentDto(
     string AuthorEmail,
     string? AuthorPortraitUrl,
     string Body,
+    string? AttachmentFileName,
+    string? AttachmentContentType,
+    long? AttachmentSizeBytes,
+    string? AttachmentBlobUrl,
     DateTimeOffset CreatedAt);
 
 public class GetCommentsHandler(
@@ -73,6 +77,10 @@ public class GetCommentsHandler(
                 comment.AuthorEmail,
                 authorPortraits.GetValueOrDefault(comment.AuthorUserId),
                 comment.Body,
+                comment.AttachmentFileName,
+                comment.AttachmentContentType,
+                comment.AttachmentSizeBytes,
+                comment.AttachmentBlobUrl,
                 comment.CreatedAt))
             .ToList();
 

backend/src/Socialize.Api/Modules/Feedback/Handlers/AttachMyFeedbackScreenshot.cs

@@ -38,8 +38,7 @@ public class AttachMyFeedbackScreenshotHandler(
         Guid reporterUserId = User.GetUserId();
 
         FeedbackReport? report = await dbContext.FeedbackReports
-            .Include(candidate => candidate.Tags)
+            .AsNoTracking()
-            .Include(candidate => candidate.Screenshot)
             .SingleOrDefaultAsync(
                 candidate => candidate.Id == id && candidate.ReporterUserId == reporterUserId,
                 ct);
@@ -50,7 +49,11 @@ public class AttachMyFeedbackScreenshotHandler(
             return;
         }
 
-        if (report.Screenshot is not null)
+        bool hasScreenshot = await dbContext.FeedbackScreenshots
+            .AsNoTracking()
+            .AnyAsync(candidate => candidate.FeedbackReportId == report.Id, ct);
+
+        if (hasScreenshot)
         {
             AddError("A screenshot is already attached to this feedback report.");
             await SendErrorsAsync(StatusCodes.Status409Conflict, ct);
@@ -94,7 +97,7 @@ public class AttachMyFeedbackScreenshotHandler(
         }
 
         DateTimeOffset now = DateTimeOffset.UtcNow;
-        report.Screenshot = new FeedbackScreenshot
+        FeedbackScreenshot screenshot = new()
         {
             Id = screenshotId,
             FeedbackReportId = report.Id,
@@ -105,10 +108,45 @@ public class AttachMyFeedbackScreenshotHandler(
             BlobName = blobName,
             CreatedAt = now,
         };
-        report.LastActivityAt = now;
 
+        await using Microsoft.EntityFrameworkCore.Storage.IDbContextTransaction transaction =
+            await dbContext.Database.BeginTransactionAsync(ct);
+
+        dbContext.FeedbackScreenshots.Add(screenshot);
+        try
+        {
             await dbContext.SaveChangesAsync(ct);
-        await SendOkAsync(report.ToDto(), ct);
+        }
+        catch (DbUpdateException)
+        {
+            await transaction.RollbackAsync(ct);
+            AddError("A screenshot is already attached to this feedback report.");
+            await SendErrorsAsync(StatusCodes.Status409Conflict, ct);
+            return;
+        }
+
+        int updatedRows = await dbContext.FeedbackReports
+            .Where(candidate => candidate.Id == report.Id && candidate.ReporterUserId == reporterUserId)
+            .ExecuteUpdateAsync(
+                setters => setters.SetProperty(candidate => candidate.LastActivityAt, now),
+                ct);
+
+        if (updatedRows == 0)
+        {
+            await transaction.RollbackAsync(ct);
+            await SendNotFoundAsync(ct);
+            return;
+        }
+
+        await transaction.CommitAsync(ct);
+
+        FeedbackReport responseReport = await dbContext.FeedbackReports
+            .AsNoTracking()
+            .Include(candidate => candidate.Tags)
+            .Include(candidate => candidate.Screenshot)
+            .SingleAsync(candidate => candidate.Id == report.Id, ct);
+
+        await SendOkAsync(responseReport.ToDto(), ct);
     }
 
     private static string NormalizeFileName(string? fileName, string extension)

backend/src/Socialize.Api/Modules/Identity/Handlers/Register.cs

@@ -32,10 +32,18 @@ public class RegisterHandler(
         RegisterRequest request,
         CancellationToken ct)
     {
-        // Check if the user already exists
         User? existingUser = await userManager.FindByEmailAsync(request.Email);
         if (existingUser is not null)
         {
+            if (!existingUser.EmailConfirmed)
+            {
+                await emailVerificationService.SendVerificationEmailAsync(existingUser);
+                await SendOkAsync(
+                    new RegisterResponse("Registration successful! Please check your email to verify your account."),
+                    ct);
+                return;
+            }
+
             await SendStringAsync(
                 "A user with this email already exists",
                 400,

backend/src/Socialize.Api/appsettings.Production.json

@@ -2,9 +2,6 @@
   "Stripe": {
     "SocializeRate": 0.05
   },
-  "Website": {
-    "FrontendBaseUrl": "https://socialize.mapachotes.com"
-  },
   "LocalBlobStorage": {
     "RootPath": "App_Data/blob-storage",
     "RequestPath": "/api/storage"

backend/src/Socialize.Api/bin\Debug/net10.0/BuildHost-net472/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.exe.config

@@ -1,60 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<configuration>
-    <startup>
-        <supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.7.2"/>
-    </startup>
-    <runtime>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.Build" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-15.1.0.0" newVersion="15.1.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.Build.Framework" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-15.1.0.0" newVersion="15.1.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.Build.Utilities.Core" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-15.1.0.0" newVersion="15.1.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.Build.Tasks.Core" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-15.1.0.0" newVersion="15.1.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.IO.Redist" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.1" newVersion="6.0.0.1"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Collections.Immutable" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-9.0.0.0" newVersion="9.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Memory" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-4.0.1.2" newVersion="4.0.1.2"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Runtime.CompilerServices.Unsafe" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-    </runtime>
-</configuration>

backend/src/Socialize.Api/bin\Debug/net10.0/BuildHost-netcore/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.deps.json

@@ -1,260 +0,0 @@
-{
-  "runtimeTarget": {
-    "name": ".NETCoreApp,Version=v6.0",
-    "signature": ""
-  },
-  "compilationOptions": {},
-  "targets": {
-    ".NETCoreApp,Version=v6.0": {
-      "Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost/4.14.0-3.25262.10": {
-        "dependencies": {
-          "Microsoft.Build.Locator": "1.6.10",
-          "Microsoft.CodeAnalysis.NetAnalyzers": "8.0.0-preview.23468.1",
-          "Microsoft.CodeAnalysis.PerformanceSensitiveAnalyzers": "3.3.4-beta1.22504.1",
-          "Microsoft.DotNet.XliffTasks": "9.0.0-beta.25255.5",
-          "Microsoft.VisualStudio.Threading.Analyzers": "17.13.2",
-          "Newtonsoft.Json": "13.0.3",
-          "Roslyn.Diagnostics.Analyzers": "3.11.0-beta1.24081.1",
-          "System.Collections.Immutable": "9.0.0",
-          "System.CommandLine": "2.0.0-beta4.24528.1"
-        },
-        "runtime": {
-          "Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.dll": {}
-        },
-        "resources": {
-          "cs/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "cs"
-          },
-          "de/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "de"
-          },
-          "es/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "es"
-          },
-          "fr/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "fr"
-          },
-          "it/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "it"
-          },
-          "ja/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "ja"
-          },
-          "ko/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "ko"
-          },
-          "pl/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "pl"
-          },
-          "pt-BR/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "pt-BR"
-          },
-          "ru/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "ru"
-          },
-          "tr/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "tr"
-          },
-          "zh-Hans/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "zh-Hans"
-          },
-          "zh-Hant/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.resources.dll": {
-            "locale": "zh-Hant"
-          }
-        }
-      },
-      "Microsoft.Build.Locator/1.6.10": {
-        "runtime": {
-          "lib/net6.0/Microsoft.Build.Locator.dll": {
-            "assemblyVersion": "1.0.0.0",
-            "fileVersion": "1.6.10.57384"
-          }
-        }
-      },
-      "Microsoft.CodeAnalysis.BannedApiAnalyzers/3.11.0-beta1.24081.1": {},
-      "Microsoft.CodeAnalysis.NetAnalyzers/8.0.0-preview.23468.1": {},
-      "Microsoft.CodeAnalysis.PerformanceSensitiveAnalyzers/3.3.4-beta1.22504.1": {},
-      "Microsoft.CodeAnalysis.PublicApiAnalyzers/3.11.0-beta1.24081.1": {},
-      "Microsoft.DotNet.XliffTasks/9.0.0-beta.25255.5": {},
-      "Microsoft.VisualStudio.Threading.Analyzers/17.13.2": {},
-      "Newtonsoft.Json/13.0.3": {
-        "runtime": {
-          "lib/net6.0/Newtonsoft.Json.dll": {
-            "assemblyVersion": "13.0.0.0",
-            "fileVersion": "13.0.3.27908"
-          }
-        }
-      },
-      "Roslyn.Diagnostics.Analyzers/3.11.0-beta1.24081.1": {
-        "dependencies": {
-          "Microsoft.CodeAnalysis.BannedApiAnalyzers": "3.11.0-beta1.24081.1",
-          "Microsoft.CodeAnalysis.PublicApiAnalyzers": "3.11.0-beta1.24081.1"
-        }
-      },
-      "System.Collections.Immutable/9.0.0": {
-        "dependencies": {
-          "System.Memory": "4.5.5",
-          "System.Runtime.CompilerServices.Unsafe": "6.0.0"
-        },
-        "runtime": {
-          "lib/netstandard2.0/System.Collections.Immutable.dll": {
-            "assemblyVersion": "9.0.0.0",
-            "fileVersion": "9.0.24.52809"
-          }
-        }
-      },
-      "System.CommandLine/2.0.0-beta4.24528.1": {
-        "dependencies": {
-          "System.Memory": "4.5.5"
-        },
-        "runtime": {
-          "lib/netstandard2.0/System.CommandLine.dll": {
-            "assemblyVersion": "2.0.0.0",
-            "fileVersion": "2.0.24.52801"
-          }
-        },
-        "resources": {
-          "lib/netstandard2.0/cs/System.CommandLine.resources.dll": {
-            "locale": "cs"
-          },
-          "lib/netstandard2.0/de/System.CommandLine.resources.dll": {
-            "locale": "de"
-          },
-          "lib/netstandard2.0/es/System.CommandLine.resources.dll": {
-            "locale": "es"
-          },
-          "lib/netstandard2.0/fr/System.CommandLine.resources.dll": {
-            "locale": "fr"
-          },
-          "lib/netstandard2.0/it/System.CommandLine.resources.dll": {
-            "locale": "it"
-          },
-          "lib/netstandard2.0/ja/System.CommandLine.resources.dll": {
-            "locale": "ja"
-          },
-          "lib/netstandard2.0/ko/System.CommandLine.resources.dll": {
-            "locale": "ko"
-          },
-          "lib/netstandard2.0/pl/System.CommandLine.resources.dll": {
-            "locale": "pl"
-          },
-          "lib/netstandard2.0/pt-BR/System.CommandLine.resources.dll": {
-            "locale": "pt-BR"
-          },
-          "lib/netstandard2.0/ru/System.CommandLine.resources.dll": {
-            "locale": "ru"
-          },
-          "lib/netstandard2.0/tr/System.CommandLine.resources.dll": {
-            "locale": "tr"
-          },
-          "lib/netstandard2.0/zh-Hans/System.CommandLine.resources.dll": {
-            "locale": "zh-Hans"
-          },
-          "lib/netstandard2.0/zh-Hant/System.CommandLine.resources.dll": {
-            "locale": "zh-Hant"
-          }
-        }
-      },
-      "System.Memory/4.5.5": {},
-      "System.Runtime.CompilerServices.Unsafe/6.0.0": {}
-    }
-  },
-  "libraries": {
-    "Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost/4.14.0-3.25262.10": {
-      "type": "project",
-      "serviceable": false,
-      "sha512": ""
-    },
-    "Microsoft.Build.Locator/1.6.10": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-DJhCkTGqy1LMJzEmG/2qxRTMHwdPc3WdVoGQI5o5mKHVo4dsHrCMLIyruwU/NSvPNSdvONlaf7jdFXnAMuxAuA==",
-      "path": "microsoft.build.locator/1.6.10",
-      "hashPath": "microsoft.build.locator.1.6.10.nupkg.sha512"
-    },
-    "Microsoft.CodeAnalysis.BannedApiAnalyzers/3.11.0-beta1.24081.1": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-DH6L3rsbjppLrHM2l2/NKbnMaYd0NFHx2pjZaFdrVcRkONrV3i9FHv6Id8Dp6/TmjhXQsJVJJFbhhjkpuP1xxg==",
-      "path": "microsoft.codeanalysis.bannedapianalyzers/3.11.0-beta1.24081.1",
-      "hashPath": "microsoft.codeanalysis.bannedapianalyzers.3.11.0-beta1.24081.1.nupkg.sha512"
-    },
-    "Microsoft.CodeAnalysis.NetAnalyzers/8.0.0-preview.23468.1": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-ZhIvyxmUCqb8OiU/VQfxfuAmIB4lQsjqhMVYKeoyxzSI+d7uR5Pzx3ZKoaIhPizQ15wa4lnyD6wg3TnSJ6P4LA==",
-      "path": "microsoft.codeanalysis.netanalyzers/8.0.0-preview.23468.1",
-      "hashPath": "microsoft.codeanalysis.netanalyzers.8.0.0-preview.23468.1.nupkg.sha512"
-    },
-    "Microsoft.CodeAnalysis.PerformanceSensitiveAnalyzers/3.3.4-beta1.22504.1": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-2XRlqPAzVke7Sb80+UqaC7o57OwfK+tIr+aIOxrx41RWDMeR2SBUW7kL4sd6hfLFfBNsLo3W5PT+UwfvwPaOzA==",
-      "path": "microsoft.codeanalysis.performancesensitiveanalyzers/3.3.4-beta1.22504.1",
-      "hashPath": "microsoft.codeanalysis.performancesensitiveanalyzers.3.3.4-beta1.22504.1.nupkg.sha512"
-    },
-    "Microsoft.CodeAnalysis.PublicApiAnalyzers/3.11.0-beta1.24081.1": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-3bYGBihvoNO0rhCOG1U9O50/4Q8suZ+glHqQLIAcKvnodSnSW+dYWYzTNb1UbS8pUS8nAUfxSFMwuMup/G5DtQ==",
-      "path": "microsoft.codeanalysis.publicapianalyzers/3.11.0-beta1.24081.1",
-      "hashPath": "microsoft.codeanalysis.publicapianalyzers.3.11.0-beta1.24081.1.nupkg.sha512"
-    },
-    "Microsoft.DotNet.XliffTasks/9.0.0-beta.25255.5": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-bb0fZB5ViPscdfYeWlmtyXJMzNkgcpkV5RWmXktfV9lwIUZgNZmFotUXrdcTyZzrN7v1tQK/Y6BGnbkP9gEsXg==",
-      "path": "microsoft.dotnet.xlifftasks/9.0.0-beta.25255.5",
-      "hashPath": "microsoft.dotnet.xlifftasks.9.0.0-beta.25255.5.nupkg.sha512"
-    },
-    "Microsoft.VisualStudio.Threading.Analyzers/17.13.2": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-Qcd8IlaTXZVq3wolBnzby1P7kWihdWaExtD8riumiKuG1sHa8EgjV/o70TMjTaeUMhomBbhfdC9OPwAHoZfnjQ==",
-      "path": "microsoft.visualstudio.threading.analyzers/17.13.2",
-      "hashPath": "microsoft.visualstudio.threading.analyzers.17.13.2.nupkg.sha512"
-    },
-    "Newtonsoft.Json/13.0.3": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-HrC5BXdl00IP9zeV+0Z848QWPAoCr9P3bDEZguI+gkLcBKAOxix/tLEAAHC+UvDNPv4a2d18lOReHMOagPa+zQ==",
-      "path": "newtonsoft.json/13.0.3",
-      "hashPath": "newtonsoft.json.13.0.3.nupkg.sha512"
-    },
-    "Roslyn.Diagnostics.Analyzers/3.11.0-beta1.24081.1": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-reHqZCDKifA+DURcL8jUfYkMGL4FpgNt5LI0uWTS6IpM8kKVbu/kO8byZsqfhBu4wUzT3MBDcoMfzhZPdENIpg==",
-      "path": "roslyn.diagnostics.analyzers/3.11.0-beta1.24081.1",
-      "hashPath": "roslyn.diagnostics.analyzers.3.11.0-beta1.24081.1.nupkg.sha512"
-    },
-    "System.Collections.Immutable/9.0.0": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-QhkXUl2gNrQtvPmtBTQHb0YsUrDiDQ2QS09YbtTTiSjGcf7NBqtYbrG/BE06zcBPCKEwQGzIv13IVdXNOSub2w==",
-      "path": "system.collections.immutable/9.0.0",
-      "hashPath": "system.collections.immutable.9.0.0.nupkg.sha512"
-    },
-    "System.CommandLine/2.0.0-beta4.24528.1": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-Xt8tsSU8yd0ZpbT9gl5DAwkMYWLo8PV1fq2R/belrUbHVVOIKqhLfbWksbdknUDpmzMHZenBtD6AGAp9uJTa2w==",
-      "path": "system.commandline/2.0.0-beta4.24528.1",
-      "hashPath": "system.commandline.2.0.0-beta4.24528.1.nupkg.sha512"
-    },
-    "System.Memory/4.5.5": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-XIWiDvKPXaTveaB7HVganDlOCRoj03l+jrwNvcge/t8vhGYKvqV+dMv6G4SAX2NoNmN0wZfVPTAlFwZcZvVOUw==",
-      "path": "system.memory/4.5.5",
-      "hashPath": "system.memory.4.5.5.nupkg.sha512"
-    },
-    "System.Runtime.CompilerServices.Unsafe/6.0.0": {
-      "type": "package",
-      "serviceable": true,
-      "sha512": "sha512-/iUeP3tq1S0XdNNoMz5C9twLSrM/TH+qElHkXWaPvuNOt+99G75NrV0OS2EqHx5wMN7popYjpc8oTjC1y16DLg==",
-      "path": "system.runtime.compilerservices.unsafe/6.0.0",
-      "hashPath": "system.runtime.compilerservices.unsafe.6.0.0.nupkg.sha512"
-    }
-  }
-}

backend/src/Socialize.Api/bin\Debug/net10.0/BuildHost-netcore/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.dll.config

@@ -1,659 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<configuration>
-    <runtime>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.Build" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-15.1.0.0" newVersion="15.1.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.Build.Framework" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-15.1.0.0" newVersion="15.1.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.Build.Utilities.Core" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-15.1.0.0" newVersion="15.1.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.Build.Tasks.Core" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-15.1.0.0" newVersion="15.1.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Collections.Immutable" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-9.0.0.0" newVersion="9.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.VisualBasic.Core" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-11.0.0.0" newVersion="11.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.Win32.Primitives" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="Microsoft.Win32.Registry" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Buffers" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Collections.Concurrent" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Collections.NonGeneric" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Collections.Specialized" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Collections" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.ComponentModel.Annotations" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.ComponentModel.EventBasedAsync" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.ComponentModel.Primitives" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.ComponentModel.TypeConverter" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.ComponentModel" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Console" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Data.Common" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Diagnostics.Contracts" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Diagnostics.FileVersionInfo" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Diagnostics.Process" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Diagnostics.StackTrace" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Diagnostics.TextWriterTraceListener" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Diagnostics.TraceSource" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Diagnostics.Tracing" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Drawing.Primitives" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.IO.Compression.ZipFile" publicKeyToken="b77a5c561934e089"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.IO.Compression" publicKeyToken="b77a5c561934e089" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.IO.FileSystem.AccessControl" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.IO.FileSystem.DriveInfo" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.IO.FileSystem.Watcher" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.IO.IsolatedStorage" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.IO.MemoryMappedFiles" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.IO.Pipes.AccessControl" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.IO.Pipes" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Linq.Expressions" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Linq.Parallel" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Linq.Queryable" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Linq" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Memory" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.HttpListener" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.Mail" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.NameResolution" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.NetworkInformation" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.Ping" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.Primitives" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.Requests" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.Security" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.ServicePoint" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.Sockets" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.WebClient" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.WebHeaderCollection" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.WebProxy" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.WebSockets.Client" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Net.WebSockets" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Numerics.Vectors" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.ObjectModel" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Reflection.Emit.ILGeneration" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Reflection.Emit.Lightweight" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Reflection.Emit" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Reflection.Primitives" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Resources.Writer" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Runtime.CompilerServices.VisualC" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Runtime.InteropServices.RuntimeInformation"
-                                  publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Runtime.InteropServices" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Runtime.Numerics" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Runtime.Serialization.Formatters" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Runtime.Serialization.Json" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Runtime.Serialization.Primitives" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Runtime.Serialization.Xml" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Runtime" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Security.AccessControl" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Security.Claims" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Security.Cryptography.Algorithms" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Security.Cryptography.Cng" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Security.Cryptography.Csp" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Security.Cryptography.Encoding" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Security.Cryptography.Primitives" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Security.Cryptography.X509Certificates" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Security.Principal.Windows" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Text.Encoding.Extensions" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Text.RegularExpressions" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Threading.Overlapped" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Threading.Tasks.Parallel" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Threading.Thread" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Threading.ThreadPool" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Threading" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Transactions.Local" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Web.HttpUtility" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Xml.ReaderWriter" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Xml.XDocument" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Xml.XPath.XDocument" publicKeyToken="b03f5f7f11d50a3a"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Xml.XPath" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Xml.XmlSerializer" publicKeyToken="b03f5f7f11d50a3a" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="netstandard" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-2.1.0.0" newVersion="2.1.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Configuration.ConfigurationManager" publicKeyToken="cc7b13ffcd2ddd51"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.Security.Cryptography.Xml" publicKeyToken="cc7b13ffcd2ddd51"
-                                  culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
-            <dependentAssembly>
-                <assemblyIdentity name="System.CodeDom" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral"/>
-                <bindingRedirect oldVersion="0.0.0.0-6.0.0.0" newVersion="6.0.0.0"/>
-            </dependentAssembly>
-        </assemblyBinding>
-    </runtime>
-</configuration>

backend/src/Socialize.Api/bin\Debug/net10.0/BuildHost-netcore/Microsoft.CodeAnalysis.Workspaces.MSBuild.BuildHost.runtimeconfig.json

@@ -1,13 +0,0 @@
-{
-  "runtimeOptions": {
-    "tfm": "net6.0",
-    "framework": {
-      "name": "Microsoft.NETCore.App",
-      "version": "6.0.0"
-    },
-    "rollForward": "Major",
-    "configProperties": {
-      "System.Reflection.Metadata.MetadataUpdater.IsSupported": false
-    }
-  }
-}

deploy/compose.yml

@@ -0,0 +1,61 @@
+services:
+  db:
+    image: postgres:16
+    restart: unless-stopped
+    env_file:
+      - /etc/socialize/socialize.env
+      - .deploy.env
+    environment:
+      POSTGRES_DB: ${POSTGRES_DB}
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+    volumes:
+      - ./postgres:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+    networks:
+      - internal
+
+  api:
+    image: git.mapachotes.com/jbourdon/socialize-api:${SOCIALIZE_IMAGE_TAG}
+    restart: unless-stopped
+    env_file:
+      - /etc/socialize/socialize.env
+      - .deploy.env
+    environment:
+      ASPNETCORE_ENVIRONMENT: ${ASPNETCORE_ENVIRONMENT}
+      ASPNETCORE_URLS: ${ASPNETCORE_URLS}
+      ConnectionStrings__PostgresConnection: Host=${POSTGRES_HOST};Port=${POSTGRES_PORT};Database=${POSTGRES_DB};Username=${POSTGRES_USER};Password=${POSTGRES_PASSWORD}
+      Website__FrontendBaseUrl: ${WEBSITE_FRONTEND_BASE_URL}
+      Emailer__ApiKey: ${RESEND_API_KEY}
+      Emailer__FromEmail: ${RESEND_FROM_EMAIL}
+      Authentication__Jwt__Issuer: ${JWT_ISSUER}
+      Authentication__Jwt__Audience: ${JWT_AUDIENCE}
+      Authentication__Jwt__Key: ${JWT_SIGNING_KEY}
+      Authentication__Jwt__Lifetime: ${JWT_LIFETIME}
+      Authentication__Jwt__RefreshTokenLifetime: ${JWT_REFRESH_TOKEN_LIFETIME}
+    depends_on:
+      db:
+        condition: service_healthy
+    volumes:
+      - ./blob-storage:/app/App_Data/blob-storage
+    expose:
+      - "8080"
+    networks:
+      - internal
+
+  web:
+    image: git.mapachotes.com/jbourdon/socialize-web:${SOCIALIZE_IMAGE_TAG}
+    restart: unless-stopped
+    depends_on:
+      - api
+    ports:
+      - "127.0.0.1:8080:80"
+    networks:
+      - internal
+
+networks:
+  internal:

docker-compose.yml

@@ -1,10 +1,10 @@
 services:
-  postgres:
+  db:
     image: postgres:latest
     environment:
-      POSTGRES_USER: sa
+      POSTGRES_USER: ${POSTGRES_USER:-sa}
-      POSTGRES_PASSWORD: P@ssword123!
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?POSTGRES_PASSWORD is required}
-      POSTGRES_DB: socialize
+      POSTGRES_DB: ${POSTGRES_DB:-socialize}
     ports:
       - "5433:5432"
     healthcheck:
@@ -18,11 +18,19 @@ services:
       context: .
       dockerfile: backend/src/Socialize.Api/Dockerfile
     environment:
-      ASPNETCORE_ENVIRONMENT: Development
+      ASPNETCORE_ENVIRONMENT: ${ASPNETCORE_ENVIRONMENT:-Development}
       ASPNETCORE_URLS: http://0.0.0.0:8080
-      ConnectionStrings__PostgresConnection: Host=postgres;Port=5432;Database=socialize;Username=sa;Password=P@ssword123!
+      ConnectionStrings__PostgresConnection: Host=${POSTGRES_HOST:-db};Port=${POSTGRES_PORT:-5432};Database=${POSTGRES_DB:-socialize};Username=${POSTGRES_USER:-sa};Password=${POSTGRES_PASSWORD:?POSTGRES_PASSWORD is required}
+      Website__FrontendBaseUrl: ${WEBSITE_FRONTEND_BASE_URL:-http://localhost:8080}
+      Emailer__ApiKey: ${RESEND_API_KEY:-}
+      Emailer__FromEmail: ${RESEND_FROM_EMAIL:-}
+      Authentication__Jwt__Issuer: ${JWT_ISSUER:-http://localhost:8080}
+      Authentication__Jwt__Audience: ${JWT_AUDIENCE:-socialize-local}
+      Authentication__Jwt__Key: ${JWT_SIGNING_KEY:-socialize-dev-local-signing-key-please-change}
+      Authentication__Jwt__Lifetime: ${JWT_LIFETIME:-00:05:00}
+      Authentication__Jwt__RefreshTokenLifetime: ${JWT_REFRESH_TOKEN_LIFETIME:-0.00:30:00}
     depends_on:
-      postgres:
+      db:
         condition: service_healthy
     expose:
       - "8080"

docs/README.md

@@ -28,13 +28,6 @@ This folder contains the project documentation used to guide product, implementa
 - [FEATURES/organizations.md](/home/jbourdon/repos/social-media/docs/FEATURES/organizations.md): organization account boundary, membership, billing, connectors, and workspace ownership.
 - [BACKLOG.md](/home/jbourdon/repos/social-media/docs/BACKLOG.md): deferred technical and product work.
 
-## Archived
-
-- [archive/PLAN.md](/home/jbourdon/repos/social-media/docs/archive/PLAN.md): early pivot plan.
-- [archive/SOCIALIZE.md](/home/jbourdon/repos/social-media/docs/archive/SOCIALIZE.md): original consolidated product brief.
-- [archive/Stripe.md](/home/jbourdon/repos/social-media/docs/archive/Stripe.md): legacy Hutopy monetization notes.
-- [archive/WORKSHEET.md](/home/jbourdon/repos/social-media/docs/archive/WORKSHEET.md): historical transition worksheet.
-
 ## Root Docs
 
 - [README.md](/home/jbourdon/repos/social-media/README.md): repository overview and local development setup.

docs/TASKS/app-shell/004-global-frontend-branding.md

@@ -0,0 +1,26 @@
+# Task: Add global frontend branding configuration
+
+## Goal
+
+Centralize product branding for the frontend so product name, visible brand marks, brand assets, and theme colors can be changed from one module instead of being hardcoded across shell and auth surfaces.
+
+## Relevant Files
+
+- `frontend/src/branding/branding.js`
+- `frontend/src/branding/applyBranding.js`
+- `frontend/src/components/branding/BrandMark.vue`
+- `frontend/src/components/branding/BrandLogo.vue`
+- `frontend/src/main.js`
+- `frontend/src/assets/main.css`
+- `frontend/src/layouts/main/AppSidebar.vue`
+- `frontend/src/static/components/LandingSiteMenu.vue`
+- `frontend/src/features/auth/views/RegisterView.vue`
+- `frontend/src/features/auth/views/LoginView.vue`
+- `frontend/public/images/brand/*`
+
+## Validation
+
+```bash
+cd frontend
+npm run build
+```

docs/TASKS/content/007-content-comment-composer-toolbar.md

@@ -0,0 +1,34 @@
+# Task: Polish content detail comment composer
+
+## Goal
+
+Make the content detail production comments composer feel like a collaboration input instead of a detached form.
+
+## Scope
+
+- Show the current user's avatar inside the comment composer.
+- Put the comment textarea to the right of the avatar.
+- Move the post action into the composer bottom row.
+- Add bottom-row controls for internal comment intent, media references, and member mentions.
+- Upload comment attachments from the user's computer to workspace blob storage.
+- Show uploaded comment attachments inline in the comment thread.
+- Add the minimal comments API contract and persistence needed for inline attachments.
+
+## Relevant Files
+
+- `frontend/src/features/content/views/ContentItemDetailView.vue`
+- `frontend/src/features/content/components/ContentCommentComposer.vue`
+- `frontend/src/features/content/components/ContentCommentFeed.vue`
+- `frontend/src/features/content/stores/contentItemDetailStore.js`
+- `backend/src/Socialize.Api/Modules/Comments/`
+- `shared/openapi/openapi.json`
+
+## Validation
+
+```bash
+cd frontend
+npm run build
+cd ..
+dotnet build backend/src/Socialize.Api/Socialize.Api.csproj -v minimal
+dotnet test backend/tests/Socialize.Tests/Socialize.Tests.csproj --no-build -v minimal
+```

docs/archive/PLAN.md

@@ -1,431 +0,0 @@
-# PLAN
-
-> Historical planning snapshot. This document reflects the early product-pivot plan and is not the source of truth for the current implementation state.
-
-## Purpose
-
-This document defines the build plan to close the gap between the current codebase and the target product described in [SOCIALIZE.md](/home/jbourdon/repos/social-media/docs/archive/SOCIALIZE.md).
-
-The current repository is a dead `Hutopy` codebase. The target product, temporarily named `Socialize`, is a workflow application for social media content review, revision, approval, and readiness for publication.
-
-This is a full product pivot, not a gradual feature expansion.
-
-## Goal
-
-Build a product that becomes the system of workflow for:
-
-- internal content review
-- provider collaboration
-- client approval
-- version tracking
-- audit trail
-- notification-driven progress
-- publication readiness handoff
-
-The first version should solve the approval pain cleanly before deeper integrations or scheduling features are added.
-
-## Gap Summary
-
-### Current Codebase
-
-The current repository contains:
-
-- backend modular structure with FastEndpoints and Entity Framework Core
-- authentication and infrastructure foundations
-- file storage patterns
-- frontend Vue application shell
-- legacy business modules centered on creators, tipping, memberships, and creator-facing experiences
-
-### Target Product
-
-The target product needs:
-
-- workspace and client management
-- provider and internal team collaboration
-- content item lifecycle management
-- asset and revision tracking
-- comments and approval workflow
-- workflow events and notifications
-- client-facing review portal
-- Google Drive-centered asset ownership
-- billing readiness for a future Software as a Service offering
-
-### Core Gap
-
-The codebase has technical scaffolding that can be reused, but the business domain is largely wrong for the target product.
-
-The main gap is not infrastructure. The main gap is domain shape, frontend surface, and workflow behavior.
-
-## Build Principles
-
-1. Reuse technical foundations when they help, but do not keep old business concepts for convenience.
-2. Keep the modular backend structure.
-3. Prefer clean domain language from day one over transitional naming.
-4. Build around Google Drive ownership first, not direct-upload-first assumptions.
-5. Deliver one vertical workflow before broad integrations.
-6. Remove legacy Hutopy product concepts early to reduce semantic drag.
-7. Keep changes reviewable and validate each phase before widening scope.
-
-## Keep, Replace, Remove
-
-### Keep
-
-- ASP.NET Core backend shell
-- FastEndpoints setup
-- modular registration pattern
-- Entity Framework Core with per-module context where useful
-- infrastructure wiring
-- authentication foundation if it can be adapted cleanly
-- payment infrastructure patterns and Stripe integration capability for future billing
-- blob or file-handling patterns that still apply
-- Vue, Vite, Pinia, router, and API client shell
-- deployment workflows if still useful for the new product
-
-### Replace
-
-- domain module set
-- route design
-- data model
-- frontend information architecture
-- user flows
-- branding and product language
-
-### Remove
-
-- creator domain concepts
-- creator public profile features
-- creator monetization flows
-- Hutopy naming across code and frontend copy
-- dead UI components and stores tied only to the old product
-
-### Retire And Rebuild
-
-- old tipping business flows
-- old membership business flows
-- creator-specific Stripe onboarding flows
-- payment routes and models that are tightly coupled to the dead Hutopy business model
-
-Keep the underlying payment capability, but rebuild the business-facing billing model around the new product when pricing and subscription design are ready.
-
-## Target Product Scope For Version 1
-
-Version 1 should own this workflow:
-
-1. Internal team creates a content item.
-2. Assets are linked from Google Drive.
-3. Publication message and metadata are attached.
-4. Internal reviewer or provider receives a request.
-5. Comments and revisions happen in one place.
-6. Client receives a review request.
-7. Client approves, rejects, or requests changes.
-8. Item becomes ready for publishing handoff.
-
-Not version 1:
-
-- full scheduling engine
-- full social publishing
-- advanced third-party synchronization
-- analytics suite
-- full digital asset management platform
-- full creative production tooling
-- customer billing and subscription management user flows
-
-## Target Backend Module Map
-
-Recommended backend modules:
-
-- `Identity`
-  - users, authentication, internal roles
-- `Workspaces`
-  - agencies or operating teams
-- `Clients`
-  - brands, creators, businesses served by a workspace
-- `Providers`
-  - external production partners
-- `Projects`
-  - grouped bodies of work for a client, which may later contain campaign concepts if needed
-- `ContentItems`
-  - reviewable units with metadata, copy, due dates, and status
-- `Assets`
-  - asset references, Google Drive linkage, versions, previews
-- `Approvals`
-  - review requests, approvers, decisions, status transitions
-- `Comments`
-  - threads, replies, resolution state, contextual discussion
-- `Notifications`
-  - workflow events, reminders, delivery preferences
-
-Possible later modules:
-
-- `Campaigns`
-- `Calendars`
-- `Integrations`
-- `Publishing`
-- `Analytics`
-- `Billing`
-
-## Target Frontend Surface
-
-Recommended frontend areas:
-
-- authentication
-- workspace switcher or workspace context
-- client list
-- project list
-- review queue dashboard
-- content item detail page
-- revision and comment timeline
-- approval status panel
-- notification center
-- external client review portal
-
-Later frontend areas:
-
-- calendar view
-- integration settings
-- publishing handoff dashboard
-- workflow analytics
-
-## Proposed Data Backbone
-
-### Content Item
-
-A content item should carry:
-
-- title
-- publication message
-- notes
-- project
-- client
-- creator or brand context where relevant
-- publication targets
-- publication dates by network when relevant
-- due date
-- current status
-- current active revision set
-
-### Asset
-
-An asset should carry:
-
-- asset type
-- source type
-- Google Drive file reference
-- preview metadata
-- current version
-- version history
-
-### Approval Request
-
-An approval request should carry:
-
-- target content item
-- requested reviewers
-- stage type
-- sent at
-- due at
-- decision state
-- decision history
-
-### Notification Event
-
-A notification event should carry:
-
-- event type
-- triggered by
-- target entity
-- recipients
-- delivery status
-- timestamps
-
-## Execution Strategy
-
-### Phase 0: Freeze Product Direction
-
-Deliverables:
-
-- validated worksheet in English
-- optional French mirror of the worksheet
-- agreed module map
-- agreed version 1 scope and anti-scope
-
-Exit criteria:
-
-- no ambiguity about the first workflow to build
-- no unresolved disagreement about Google Drive ownership
-
-### Phase 1: Remove Legacy Product Surface
-
-Goals:
-
-- reduce confusion from Hutopy concepts
-- make the codebase ready for the new domain
-
-Work:
-
-- remove or retire legacy frontend views tied to creators, tipping, and memberships
-- remove legacy backend modules that are clearly dead
-- rename product-facing strings, assets, and configuration references
-- identify infrastructure pieces that stay
-- preserve Stripe and payment infrastructure that can support future Software as a Service billing
-- identify backend modules that should be replaced instead of adapted
-
-Exit criteria:
-
-- codebase no longer communicates the old product direction
-- remaining code clearly supports reuse or is queued for replacement
-
-### Phase 2: Establish New Domain Skeleton
-
-Goals:
-
-- introduce the new product vocabulary into code
-- prepare clean module boundaries
-
-Work:
-
-- create new backend modules
-- define initial entities and contexts
-- wire modules in `Program.cs`
-- define route namespaces and tags
-- create frontend route skeleton for the new product
-- define new stores for auth, workspace context, review queue, and content items
-
-Exit criteria:
-
-- application compiles with the new module map in place
-- legacy domain is no longer the center of the app
-
-### Phase 3: Build The First Vertical Slice
-
-Vertical slice:
-
-- create content item
-- link Google Drive asset
-- add publication message and publication target data
-- request internal review
-- comment on item
-- request changes
-- upload or register a new revision
-- request client review
-- approve from client portal
-- mark ready to publish
-
-Backend work:
-
-- commands and queries for content item creation and retrieval
-- asset linkage and versioning
-- comment creation and retrieval
-- approval request and decision endpoints
-- status transition logic
-- workflow event emission
-
-Frontend work:
-
-- content item creation flow
-- content item detail view
-- comments panel
-- approval action UI
-- status timeline
-- simple client review page
-
-Exit criteria:
-
-- one item can move end-to-end from draft to approved
-- all actions are traceable in one place
-
-### Phase 4: Add Notification Backbone
-
-Goals:
-
-- make workflow movement visible without manual follow-up
-
-Work:
-
-- define notification event types
-- trigger events on comments, revisions, requests, and decisions
-- add email notifications
-- add in-app notification center or lightweight feed
-- add reminder jobs for pending reviews
-
-Exit criteria:
-
-- users are informed when workflow events occur
-- delayed approvals can be followed without manual chasing
-
-### Phase 5: Harden Version 1 For Real Usage
-
-Goals:
-
-- make the workflow usable for the first real client
-
-Work:
-
-- permissions and role hardening
-- validation and error handling
-- audit trail review
-- filtering and dashboard improvements
-- comment resolution
-- required approver logic if needed
-- publication dates by network support
-- quality pass on mobile review experience
-
-Exit criteria:
-
-- the first client can run a real approval cycle in the product
-
-### Phase 6: Evaluate Phase 2 Expansion
-
-Candidates:
-
-- calendar visibility
-- Google Drive sync improvements
-- Canva linkage
-- MailChimp approval path
-- scheduler handoff integrations
-- billing and subscription management for the Software as a Service offer
-
-Rule:
-
-Only start these after version 1 workflow is demonstrably useful.
-
-## Immediate Technical Tasks
-
-Recommended next implementation tasks:
-
-1. Rename the product and remove visible Hutopy branding.
-2. Inventory which backend modules are deleted versus replaced.
-3. Define the new backend module directories and initial project structure.
-4. Replace the frontend router with the new application surface.
-5. Model `ContentItem`, `Asset`, `AssetVersion`, `ApprovalRequest`, `ApprovalDecision`, `CommentThread`, and `NotificationEvent`.
-6. Implement the first vertical slice end to end.
-
-## Risks
-
-- scope creep into scheduling and publishing too early
-- forcing the new domain into old creator-centric structures
-- under-designing workflow status and revision semantics
-- overbuilding integrations before the core workflow is proven
-- making external review too heavy for clients
-
-## Validation Checklist
-
-Before claiming version 1 readiness:
-
-- a workspace can manage at least one client
-- a content item can include publication message and publication targets
-- assets can be linked from Google Drive
-- internal review can request changes
-- client review can approve or reject
-- status history is visible
-- notification events are triggered
-- the latest approved state is clear
-
-## Working Note
-
-This plan should be updated as soon as the first implementation decisions are made, especially:
-
-- exact module names
-- exact database boundaries
-- whether `Providers` stands alone or is modeled as a participant role
-- whether notifications are their own module or an infrastructure concern

docs/archive/SOCIALIZE.md

@@ -1,328 +0,0 @@
-# Social Media Approval Workflow
-
-Temporary product name: `Socialize`
-
-## Project Intent
-
-Build `Socialize`, an application that replaces the current approval process based on Google Drive, phone calls, emails, and spreadsheets.
-
-The product is not a public social network. It is an internal/external workflow tool for content review, feedback, approval, and publication readiness.
-
-## Shared Vocabulary
-
-- Approval workflow: the end-to-end process from draft creation to final approval.
-- Content item: the reviewable unit that bundles assets, publication message or copy, dates, and channel targets.
-- Asset: a file attached to a content item, such as a video, image, or document.
-- Revision: a new version of an asset or copy after feedback.
-- External reviewer: a client or partner who reviews content without being part of the internal team.
-- Provider: an external production partner, such as a film crew, photographer, editor, or designer, who may deliver drafts and receive change requests.
-- Software as a Service (SaaS): a cloud-based product used through the web, such as Canva, MailChimp, HootSuite, or Metricool.
-- Minimum Viable Product (MVP): the smallest product version that solves the main pain point well enough to validate the market.
-- Service Level Agreement (SLA): an agreed service target, such as a review deadline or escalation threshold.
-
-## Problem Statement
-
-Social media managers and production teams currently manage content approvals manually:
-
-- Assets are stored in Google Drive.
-- The social media manager may have back-and-forth with both upstream providers and downstream clients.
-- Feedback is exchanged by phone, email, messages, and spreadsheets.
-- Version history is unclear.
-- It is hard to know which file is the latest one.
-- Comments are scattered across multiple channels.
-- Internal approvals and client approvals follow similar patterns but are not centralized.
-- Follow-ups are manual, so approvals get delayed.
-
-Result: too much back-and-forth, poor traceability, avoidable delays, and risk of publishing the wrong asset or outdated copy.
-
-## Existing Tools Observed
-
-- Google Drive for videos, images, calendars, and documents
-- Google Sheets or similar for tracking comments and status
-- Phone and email for review/approval conversations
-- HootSuite
-- Metricool
-- Canva
-- MailChimp
-
-## Primary Users
-
-- Social media manager
-- Account manager / customer success
-- Client approver
-- External provider / production partner
-- Internal producer
-- Internal employee / content contributor
-- Administrator
-
-## Core Use Cases
-
-### 1. Client Approval Workflow
-
-A social media manager prepares content for a client and sends it for approval.
-
-The client should be able to:
-
-- view the content package
-- preview files
-- read captions, descriptions, and project notes
-- leave comments
-- request changes
-- approve or reject
-
-The team should be able to:
-
-- see approval status in real time
-- answer comments in context
-- upload revised versions
-- keep a clear audit trail of who said what and when
-- know exactly which version is approved
-
-### 2. Internal Production Workflow
-
-The same workflow should work internally for producers, employees, and external production partners before the content is shown to the client or scheduled for publishing.
-
-Example:
-
-- contributor uploads draft
-- external provider can upload draft or revised media
-- producer reviews and requests changes
-- manager approves for client review
-- client approves
-- content is marked ready to publish
-
-### 3. Content Package Review
-
-Approval should not be limited to a single file. A review item may include:
-
-- video
-- image
-- document
-- publication message / caption / copy
-- hashtags
-- links
-- publication dates
-- target channels or social networks
-
-## Current Workflow Summary
-
-Typical current flow:
-
-1. Team creates media assets.
-2. Files are placed in Google Drive by the team or by external providers.
-3. A manager sends links by email or message to providers, internal stakeholders, or clients.
-4. Feedback comes back by phone, email, spreadsheet, or chat.
-5. Team manually consolidates comments across provider feedback and client feedback.
-6. A revised version is uploaded.
-7. The cycle repeats until someone says it is approved.
-8. Approval status is manually tracked elsewhere.
-
-Main failure points:
-
-- no single source of truth
-- no structured approval states
-- no centralized threaded comments
-- no deadline reminders
-- no reliable audit trail
-- no approval gate before publishing
-
-## Target Workflow
-
-1. Create a project and associate it with a client.
-2. Create a review item or approval request.
-3. Attach assets or import them from Google Drive.
-4. Add metadata:
-   - title
-   - publication message / caption / copy
-   - target platform or social network
-   - publication dates by network when relevant
-   - due date
-   - reviewer(s)
-5. Send review request.
-6. Reviewers comment directly on the item.
-7. Team or provider uploads a revision or responds to comments.
-8. System tracks versions, status changes, and workflow events.
-9. Reviewer approves, rejects, or requests changes.
-10. Once all required approvals are complete, item becomes ready for scheduling/publishing.
-
-## Core Domain Objects
-
-- Workspace: the top-level account boundary for one agency or one operating team.
-- Client: the business, creator, or brand receiving the service and approving content.
-- Team member: an internal user working on content, reviews, or coordination.
-- Reviewer: any person asked to review and approve, whether internal or external.
-- Provider: an external production contributor such as a photographer, videographer, editor, or designer.
-- Project: the main work container for a client, grouping related content items, notes, participants, and timelines.
-- Content item: the reviewable unit that contains assets, publication message, channel targets, due dates, and approval state.
-- Asset: an attached file, such as a video, image, or document, referenced from Google Drive or stored directly.
-- Asset version: a specific revision of an asset, with traceability to who uploaded it and when.
-- Comment thread: a contextual discussion attached to a content item, asset, or revision.
-- Approval request: the act of asking one or more reviewers to review a specific version.
-- Approval decision: the outcome of a review request, such as approved, rejected, or changes requested.
-- Status history: the audit trail of workflow states and transitions over time.
-- Publication target: the intended destination for publication, such as Instagram, Facebook, LinkedIn, or a newsletter.
-- Notification event: a workflow event that informs users something changed, such as a new comment, revision, request, or approval.
-
-## Suggested Status Model
-
-- Draft
-- In internal review
-- Changes requested internally
-- Internal changes in progress
-- Ready for client review
-- In client review
-- Changes requested by client
-- Client changes in progress
-- Approved
-- Rejected
-- Ready to publish
-- Published
-- Archived
-
-## Minimum Viable Product (MVP) Scope
-
-The first version should focus on approval workflow, not direct publishing.
-
-### MVP Features
-
-- authentication and user roles
-- workspace/client/project structure
-- create a content item with metadata
-- upload assets or attach Google Drive links while keeping Google Drive as the source of truth when required by the client
-- version tracking for files and copy
-- centralized comments
-- approval decisions: approve, reject, request changes
-- activity timeline / audit trail
-- status dashboard by client, project, and due date
-- notifications and reminders when actions are completed or workflow events occur
-- simple approval portal for external clients
-
-### Strong MVP Candidate Features
-
-- required approvers
-- approval deadline
-- due dates per publication target or social network
-- compare current version vs previous version
-- "latest approved version" indicator
-- comment resolution
-- filtering by status, client, assignee, due date
-
-## Phase 2 Opportunities
-
-- Google Drive integration with file sync/import
-- HootSuite / Metricool export or handoff
-- Canva asset linking
-- MailChimp approval workflow for newsletters
-- calendar integration for publication planning visibility
-- annotated comments on images or video timestamps
-- reusable approval templates by content type
-- Service Level Agreement (SLA) reminders and escalations
-- analytics on turnaround time and bottlenecks
-- approval by email link
-- multi-stage approval rules per client
-
-## Key Automation Opportunities
-
-- auto-request approval when a content item reaches a defined stage
-- automatic notifications when a workflow action is completed or a workflow event occurs
-- automatic reminders before approval deadlines
-- automatic escalation when approval is overdue
-- automatic version labeling
-- automatic "ready to publish" state when all approvals are complete
-- automatic audit trail for every upload, comment, and decision
-- automatic client-facing review link generation
-- automatic notification when a new revision addresses requested changes
-
-## Important Product Decisions
-
-### 1. System of record for assets
-
-Options:
-
-- keep Google Drive as file storage and build workflow around it
-- upload files directly into this new application
-- support both
-
-Recommended first assumption:
-
-Keep Google Drive as the source of truth when the client requires ownership there, and support direct uploads later as an option. The first version should work cleanly with Drive links and imported metadata before deeper synchronization is considered.
-
-### 2. External reviewer experience
-
-Options:
-
-- reviewer account required
-- magic-link access without full account
-- both
-
-Recommended first assumption:
-
-Use magic-link review access for clients to reduce friction.
-
-### 3. Approval granularity
-
-Possible approval units:
-
-- entire content item
-- per asset
-- per caption/copy
-- per channel variation
-
-Recommended first assumption:
-
-Approve at the content item level in the Minimum Viable Product (MVP), with comments attached to assets and copy.
-
-## Business Rules To Confirm
-
-These do not block initial scoping, but we should capture them early so the product behavior matches the real approval process.
-
-- Can a client approve with unresolved comments?
-- Does approval require one reviewer or multiple reviewers?
-- Can internal approval and client approval happen in parallel?
-- Is approval valid only for the latest version?
-- Can an approved item be edited without reopening review?
-- Do different clients require different workflows?
-- Are videos, images, and documents all equally important on day one?
-- Is scheduling/publishing inside scope, or only "approval-ready" handoff?
-
-## Open Questions For Next Interview
-
-- Who is the buyer: agency, freelancer, or in-house marketing team?
-- Is the first target market agency-to-client approval, internal team approval, or both?
-- What content types are highest priority: video, image, documents, captions, newsletters?
-- How often do clients request changes after verbal approval?
-- What is the most painful step today?
-- What tools must remain in place at launch?
-- What approvals need legal or compliance traceability?
-- How many reviewers usually participate per item?
-- Is bilingual support required?
-- Is mobile review important on day one?
-
-## Minimum Viable Product (MVP) Success Criteria
-
-- reduce approval turnaround time
-- reduce back-and-forth across email/phone/spreadsheets
-- give one clear source of truth for latest version and current status
-- let a client approve without training
-- let the team see blocked items instantly
-
-## Product Positioning
-
-This product should be positioned as:
-
-"A review and approval workflow for social media content, not another content creation tool."
-
-The value is coordination, traceability, and faster approval cycles.
-
-## First Build Recommendation
-
-Build the first release around this narrow flow:
-
-1. team creates content item
-2. team uploads files and copy
-3. internal reviewer comments and requests changes
-4. team submits to client
-5. client comments and approves via simple link
-6. item becomes ready for publishing handoff
-
-If this flow works cleanly, integrations and scheduling can be added later.

docs/archive/Stripe.md

@@ -1,32 +0,0 @@
-# Stripe
-
-> Legacy Hutopy-era notes. These flows describe the old creator membership and tipping model and do not match the current workflow product.
-
-## Events Workflow
-
-### Membership
-
-1. checkout.session.completed	    
-  - Store StripeSubscriptionId, UserId, CreatorId, TierId
-  - Save a new Subscription entity with the status "Pending"
-
-2. invoice.payment_succeeded        
-  - Grant access (set Subscription.Active = true or similar)
-  - Record transaction or set StartDate
-  - Notify Creator (e.g., new member)
-
-3. customer.subscription.updated    
-  - Update `EndDate = CancelAt ?? CanceledAt`
-
-4. customer.subscription.deleted	
-  - Revoke access
-  - Mark Subscription as inactive/ended
-
-### Tips
-
-1. checkout.session.completed	    
-  - Store TipId, StripeSessionId, TipperId, CreatorId
-  - PaymentIntentStatus == "paid"
-  - Status = "Paid"
-  - Notify creator
-  - Record transaction

docs/archive/WORKSHEET.md

@@ -1,35 +0,0 @@
-> Historical worksheet from the product-pivot phase. Several items are completed, renamed, or superseded by the current codebase.
-
-What is left to do:
-
-  1. Replace frontend seeded stores with real API-backed stores.
-  2. Build authenticated loading for:
-      - workspaces
-      - clients
-      - projects
-      - content items
-  3. Add create flows:
-      - create workspace
-      - create client
-      - create project
-      - create content item
-  4. Build the first real content-item detail page.
-  5. Add the actual approval workflow domain:
-      - approval requests
-      - approval decisions
-      - status transitions
-  6. Add comments and revision tracking.
-  7. Add Google Drive asset linkage instead of placeholder source fields only.
-  8. Add notification/event backbone.
-  9. Remove or retire old Hutopy modules and routes once the new vertical slice replaces them.
-  10. Rename remaining Hutopy namespaces/product strings in the backend if you want the codebase semantics
-     cleaned up now instead of later.
-
-
-  So the main remaining substantive work is:
-
-1. finish full-site localization
-2. build real integrations backend for Google Drive and API keys
-3. deepen workspace/settings management
-4. continue workflow polish and broader comment/thread modeling if you want that
-   generalized again

docs/constraints.md

@@ -45,5 +45,4 @@ These are cross-cutting rules for the current product and codebase. They are int
 
 ## Naming Constraints
 
-- Prefer current product/domain language over Hutopy-era terminology.
 - Avoid reviving creator/tipping/membership concepts unless intentionally rebuilding them for the new product.

frontend/.env.production

@@ -1,4 +1,4 @@
-VITE_API_URL=/api
+VITE_API_URL=/
 VITE_STRIPE_API_KEY=51OoveVDrRyqXtNdBAxIo183PujtqFyU0xUMK9YNtIijcHeDlcLN6pqkZWHbgaBA0FHrwLMSoy3yVLN33NX8ExOxL00MSZwgJN7
 VITE_GOOGLE_CLIENT_ID=213344094492-7c83lqoh7mnjgadpeqo2lcs1krhbsnnd.apps.googleusercontent.com
 VITE_FACEBOOK_APP_ID=1076433907621883

frontend/Dockerfile

@@ -1,7 +1,7 @@
 FROM node:22-alpine AS build
 WORKDIR /app
 
-ARG VITE_API_URL=/api
+ARG VITE_API_URL=/
 ENV VITE_API_URL=$VITE_API_URL
 
 COPY frontend/package*.json ./
@@ -12,3 +12,4 @@ RUN npm run build
 
 FROM caddy:2-alpine AS runtime
 COPY --from=build /app/dist /srv
+COPY deploy/caddy/Caddyfile /etc/caddy/Caddyfile

frontend/public/images/brand/auth-illustration.svg

@@ -0,0 +1,16 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 420 240" role="img" aria-labelledby="title">
+  <title id="title">Socialize brand illustration</title>
+  <defs>
+    <linearGradient id="brand-gradient" x1="102" y1="52" x2="324" y2="194" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#ff8a3d"/>
+      <stop offset="1" stop-color="#ef4444"/>
+    </linearGradient>
+  </defs>
+  <rect width="420" height="240" rx="36" fill="#fbfaf6"/>
+  <rect x="58" y="44" width="304" height="152" rx="30" fill="#f4f6f3" stroke="#c7d2cc"/>
+  <rect x="82" y="68" width="112" height="104" rx="28" fill="url(#brand-gradient)"/>
+  <path d="M113 137c5.7 5.8 13.2 8.8 22.5 8.8 10.4 0 16.3-3.4 16.3-9.4 0-5.2-4.4-7.4-16-9.1-15.2-2.3-24.2-7.8-24.2-20.2 0-12.1 10.4-20.3 25.5-20.3 10.9 0 19.2 3.3 25.4 10.1l-9.6 8.9c-4.2-4.3-9.4-6.5-15.7-6.5-6.9 0-10.7 2.7-10.7 7.2 0 4.4 4.4 6.4 15.2 8 15.9 2.4 24.6 8.5 24.6 21.1 0 13.6-11 22-29.4 22-12.8 0-23-4-30.2-12z" fill="#fffaf2"/>
+  <path d="M224 86h72" stroke="#172033" stroke-width="12" stroke-linecap="round"/>
+  <path d="M224 118h112" stroke="#2fa58d" stroke-width="12" stroke-linecap="round"/>
+  <path d="M224 150h84" stroke="#ff8a3d" stroke-width="12" stroke-linecap="round"/>
+</svg>

frontend/public/images/brand/logo-mark.svg

@@ -0,0 +1,11 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 96 96" role="img" aria-labelledby="title">
+  <title id="title">Socialize mark</title>
+  <defs>
+    <linearGradient id="brand-gradient" x1="16" y1="12" x2="82" y2="88" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#ff8a3d"/>
+      <stop offset="1" stop-color="#ef4444"/>
+    </linearGradient>
+  </defs>
+  <rect width="96" height="96" rx="28" fill="url(#brand-gradient)"/>
+  <path d="M31 61.5c3.9 4.3 9.3 6.5 16.2 6.5 7.8 0 12.4-2.7 12.4-7.3 0-4.1-3.4-5.9-12.2-7.2-12.1-1.8-19-6.2-19-16.1 0-9.7 8.2-16.4 20.2-16.4 8.7 0 15.3 2.7 20.3 8.2l-8.3 8c-3.3-3.5-7.5-5.2-12.5-5.2-5.4 0-8.3 2.1-8.3 5.6 0 3.6 3.4 5.1 11.9 6.4 12.7 1.9 19.5 6.8 19.5 16.8 0 11-8.8 17.8-23.4 17.8-10.2 0-18.3-3.2-24.2-9.7z" fill="#fffaf2"/>
+</svg>

frontend/public/images/brand/logo.svg

@@ -0,0 +1,12 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 360 96" role="img" aria-labelledby="title">
+  <title id="title">Socialize</title>
+  <defs>
+    <linearGradient id="brand-gradient" x1="16" y1="12" x2="82" y2="88" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#ff8a3d"/>
+      <stop offset="1" stop-color="#ef4444"/>
+    </linearGradient>
+  </defs>
+  <rect width="96" height="96" rx="28" fill="url(#brand-gradient)"/>
+  <path d="M31 61.5c3.9 4.3 9.3 6.5 16.2 6.5 7.8 0 12.4-2.7 12.4-7.3 0-4.1-3.4-5.9-12.2-7.2-12.1-1.8-19-6.2-19-16.1 0-9.7 8.2-16.4 20.2-16.4 8.7 0 15.3 2.7 20.3 8.2l-8.3 8c-3.3-3.5-7.5-5.2-12.5-5.2-5.4 0-8.3 2.1-8.3 5.6 0 3.6 3.4 5.1 11.9 6.4 12.7 1.9 19.5 6.8 19.5 16.8 0 11-8.8 17.8-23.4 17.8-10.2 0-18.3-3.2-24.2-9.7z" fill="#fffaf2"/>
+  <text x="126" y="61" fill="#172033" font-family="Inter, Arial, sans-serif" font-size="35" font-weight="900" letter-spacing="6">SOCIALIZE</text>
+</svg>