first commit. added CI, Docker compose, blank client and server. used unit tests, they pass

.github/workflows/ci.yml

@@ -0,0 +1,44 @@
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+
+jobs:
+  server:
+    name: Go (build + vet + test)
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: server
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: server/go.mod
+          cache-dependency-path: server/go.sum
+
+      - run: go build ./...
+      - run: go vet ./...
+      - run: go test -race -cover ./...
+
+  web:
+    name: Web (build + lint)
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: web
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: web/package-lock.json
+
+      - run: npm ci
+      - run: npm run build
+      - run: npm run lint

.gitignore

@@ -0,0 +1,40 @@
+# --- Dependencies ---
+server/vendor/
+web/node_modules/
+
+# --- Build artifacts ---
+server/bin/
+server/dist/
+web/dist/
+*.exe
+*.test
+*.out
+
+# --- Runtime ---
+server/tmp/
+/data/
+*.log
+
+# --- Local config & secrets ---
+.env
+.env.local
+*.pem
+*.key
+*.crt
+
+# --- Go tooling ---
+coverage.out
+coverage.html
+server/coverage.*
+
+# --- Editor / OS ---
+.idea/
+.vscode/
+*.swp
+*.swo
+.DS_Store
+Thumbs.db
+
+# --- Misc ---
+server/api.gen.go
+server/openapi.yaml.gen

Dockerfile

@@ -0,0 +1,26 @@
+# --- Frontend build stage ---
+FROM node:22-alpine AS web
+WORKDIR /build/web
+COPY web/package.json web/package-lock.json ./
+RUN npm ci
+COPY web/ .
+RUN npm run build
+
+# --- Go build stage ---
+FROM golang:1.27-alpine AS api
+WORKDIR /build
+COPY server/go.mod server/go.sum ./
+RUN go mod download
+COPY server/ .
+RUN CGO_ENABLED=0 GOOS=linux go build -trimpath -ldflags="-s -w" -o /out/api ./cmd/api
+
+# --- Runtime stage ---
+FROM alpine:3.20 AS runtime
+RUN adduser -D -u 10001 app
+WORKDIR /app
+COPY --from=api --chown=app:app /out/api /app/api
+COPY --from=web --chown=app:app /build/web/dist /app/web
+USER app
+ENV MESSENGER_STATIC_DIR=/app/web
+EXPOSE 8080
+ENTRYPOINT ["/app/api"]

README.md

@@ -0,0 +1,70 @@
+# Messenger
+
+Self-hosted messenger for family and friends. Built from scratch: Go backend,
+React PWA frontend, PostgreSQL, WebRTC calls. Deployed on a home-lab mini PC.
+
+> **Status:** Phase 0 — project skeleton. No functionality yet, but everything
+> builds, tests pass, and the deployment shape is in place.
+
+## Repository layout
+
+```
+server/   Go API — config, logging, HTTP server, health endpoints
+web/      React + TypeScript + Vite frontend (PWA-ready)
+deploy/   docker-compose and operational config
+docs/     architecture, ADR, OpenAPI
+.github/  CI workflows
+```
+
+## Prerequisites
+
+- Go 1.27+
+- Node.js 22+
+- Docker + Docker Compose (for deployment)
+
+## Local development
+
+```bash
+# Backend
+cd server
+go run ./cmd/api              # listen on :8080
+
+# Frontend (separate terminal)
+cd web
+npm install
+npm run dev                   # Vite on :5173, proxies /api -> :8080
+```
+
+The frontend calls `/api/v1/ping` on load and renders the server response.
+
+## Useful endpoints
+
+| Endpoint     | Purpose                          |
+|--------------|----------------------------------|
+| `/healthz`   | Liveness probe                   |
+| `/readyz`    | Readiness probe                  |
+| `/api/v1/ping` | Round-trip check (JSON)        |
+
+## Deployment (Docker Compose)
+
+```bash
+cp deploy/.env.example deploy/.env   # adjust secrets
+cd deploy
+docker compose up -d --build
+```
+
+The API container is a single static binary that also serves the built
+frontend (`/app/web`). PostgreSQL runs alongside with a healthcheck.
+
+## Roadmap
+
+- **Phase 0** — skeleton, CI, Docker (current)
+- Phase 1 — auth (JWT + refresh in httpOnly cookie, argon2id), contacts, DMs, WebSocket delivery, receipts, typing
+- Phase 2 — groups, reactions, media upload + thumbnails (S3-like storage interface)
+- Phase 3 — search (pg_trgm), Web Push (VAPID), PWA offline
+- Phase 4 — P2P WebRTC calls via our WebSocket signalling + coturn TURN fallback
+- Phase 5 — metrics (Prometheus + VictoriaMetrics + Grafana), docs, hardening
+
+## License
+
+Proprietary for now; open-sourcing at v1.0.

deploy/.env.example

@@ -0,0 +1,8 @@
+# Copy to .env and adjust.
+
+MESSENGER_ENV=production
+MESSENGER_ALLOWED_ORIGINS=https://msg.example.com
+
+POSTGRES_USER=messenger
+POSTGRES_PASSWORD=change-me
+POSTGRES_DB=messenger

deploy/docker-compose.yml

@@ -0,0 +1,36 @@
+services:
+  api:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    image: messenger/api:latest
+    restart: unless-stopped
+    environment:
+      MESSENGER_ENV: ${MESSENGER_ENV:-production}
+      MESSENGER_HTTP_ADDR: ":8080"
+      MESSENGER_ALLOWED_ORIGINS: ${MESSENGER_ALLOWED_ORIGINS:-}
+    ports:
+      - "8080:8080"
+    depends_on:
+      postgres:
+        condition: service_healthy
+
+  postgres:
+    image: postgres:17-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-messenger}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-messenger}
+      POSTGRES_DB: ${POSTGRES_DB:-messenger}
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    ports:
+      - "127.0.0.1:5432:5432"
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-messenger} -d ${POSTGRES_DB:-messenger}"]
+      interval: 5s
+      timeout: 3s
+      retries: 10
+
+volumes:
+  pgdata:

server/cmd/api/main.go

@@ -0,0 +1,61 @@
+// Command api is the HTTP entrypoint of the messenger backend.
+//
+// It wires configuration, logging and the HTTP server together and
+// supports graceful shutdown on SIGINT/SIGTERM.
+package main
+
+import (
+	"context"
+	"errors"
+	"net/http"
+	"os"
+	"os/signal"
+	"syscall"
+	"time"
+
+	"messenger/internal/platform/config"
+	"messenger/internal/platform/logger"
+	"messenger/internal/server"
+)
+
+func main() {
+	log := logger.New()
+
+	cfg, err := config.Load()
+	if err != nil {
+		log.Error("invalid configuration", "error", err)
+		os.Exit(1)
+	}
+
+	httpServer := server.New(cfg, log)
+
+	// Run the server in a goroutine so that shutdown can be triggered
+	// from the signal handler below.
+	go func() {
+		log.Info("http server listening",
+			"addr", cfg.HTTPAddr,
+			"static_dir", cfg.StaticDir,
+			"env", cfg.Environment,
+		)
+		if err := httpServer.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
+			log.Error("http server failed", "error", err)
+			os.Exit(1)
+		}
+	}()
+
+	// Wait for a termination signal, then drain in-flight requests.
+	ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
+	defer stop()
+
+	<-ctx.Done()
+	log.Info("shutting down")
+
+	shutdownCtx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
+	defer cancel()
+
+	if err := httpServer.Shutdown(shutdownCtx); err != nil {
+		log.Error("graceful shutdown failed", "error", err)
+		os.Exit(1)
+	}
+	log.Info("server stopped cleanly")
+}

server/go.mod

@@ -0,0 +1,3 @@
+module messenger
+
+go 1.27

server/internal/platform/config/config.go

@@ -0,0 +1,56 @@
+// Package config loads the server configuration from environment
+// variables with sane defaults for local development.
+package config
+
+import (
+	"fmt"
+	"os"
+	"strings"
+)
+
+// Config holds all runtime configuration for the API server.
+type Config struct {
+	// HTTPAddr is the listen address, e.g. ":8080".
+	HTTPAddr string
+	// StaticDir points to the built frontend (React/Vite dist).
+	// Empty disables static file serving.
+	StaticDir string
+	// Environment is "development", "staging" or "production".
+	Environment string
+	// AllowedOrigins is a comma-separated list of CORS origins
+	// allowed to call the API from a browser.
+	AllowedOrigins []string
+}
+
+// Load reads configuration from the environment, falling back to
+// development-friendly defaults. Unknown values are validated.
+func Load() (*Config, error) {
+	cfg := &Config{
+		HTTPAddr:    fromEnv("MESSENGER_HTTP_ADDR", ":8080"),
+		StaticDir:   os.Getenv("MESSENGER_STATIC_DIR"),
+		Environment: fromEnv("MESSENGER_ENV", "development"),
+	}
+
+	for _, origin := range strings.Split(fromEnv("MESSENGER_ALLOWED_ORIGINS", ""), ",") {
+		if origin = strings.TrimSpace(origin); origin != "" {
+			cfg.AllowedOrigins = append(cfg.AllowedOrigins, origin)
+		}
+	}
+
+	switch cfg.Environment {
+	case "development", "staging", "production":
+	default:
+		return nil, fmt.Errorf("MESSENGER_ENV must be one of development|staging|production, got %q", cfg.Environment)
+	}
+
+	return cfg, nil
+}
+
+// fromEnv returns the value of the environment variable name, or
+// fallback if the variable is unset or empty.
+func fromEnv(name, fallback string) string {
+	if v := os.Getenv(name); v != "" {
+		return v
+	}
+	return fallback
+}

server/internal/platform/config/config_test.go

@@ -0,0 +1,49 @@
+package config
+
+import (
+	"testing"
+)
+
+func TestLoadDefaults(t *testing.T) {
+	t.Setenv("MESSENGER_HTTP_ADDR", "")
+	t.Setenv("MESSENGER_ENV", "")
+
+	cfg, err := Load()
+	if err != nil {
+		t.Fatalf("Load() error = %v", err)
+	}
+	if cfg.HTTPAddr != ":8080" {
+		t.Errorf("HTTPAddr = %q, want %q", cfg.HTTPAddr, ":8080")
+	}
+	if cfg.Environment != "development" {
+		t.Errorf("Environment = %q, want development", cfg.Environment)
+	}
+}
+
+func TestLoadFromEnv(t *testing.T) {
+	t.Setenv("MESSENGER_HTTP_ADDR", ":9000")
+	t.Setenv("MESSENGER_ENV", "production")
+	t.Setenv("MESSENGER_ALLOWED_ORIGINS", "https://a.example, https://b.example")
+
+	cfg, err := Load()
+	if err != nil {
+		t.Fatalf("Load() error = %v", err)
+	}
+	if cfg.HTTPAddr != ":9000" {
+		t.Errorf("HTTPAddr = %q, want :9000", cfg.HTTPAddr)
+	}
+	if cfg.Environment != "production" {
+		t.Errorf("Environment = %q, want production", cfg.Environment)
+	}
+	if len(cfg.AllowedOrigins) != 2 || cfg.AllowedOrigins[1] != "https://b.example" {
+		t.Errorf("AllowedOrigins = %v, want [https://a.example https://b.example]", cfg.AllowedOrigins)
+	}
+}
+
+func TestLoadInvalidEnv(t *testing.T) {
+	t.Setenv("MESSENGER_ENV", "nope")
+
+	if _, err := Load(); err == nil {
+		t.Fatal("Load() error = nil, want validation error")
+	}
+}

server/internal/platform/logger/logger.go

@@ -0,0 +1,19 @@
+// Package logger provides a structured JSON logger built on log/slog.
+// In development a human-readable text handler is used.
+package logger
+
+import (
+	"log/slog"
+	"os"
+)
+
+// New returns a *slog.Logger configured for the current environment.
+func New() *slog.Logger {
+	level := slog.LevelDebug
+
+	handler := slog.NewTextHandler(os.Stdout, &slog.HandlerOptions{
+		Level: level,
+	})
+
+	return slog.New(handler)
+}

server/internal/server/middleware.go

@@ -0,0 +1,63 @@
+package server
+
+import (
+	"log/slog"
+	"net/http"
+	"runtime/debug"
+	"slices"
+	"time"
+)
+
+func cors(allowedOrigins []string, next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		origin := r.Header.Get("Origin")
+		if origin != "" && slices.Contains(allowedOrigins, origin) {
+			w.Header().Set("Access-Control-Allow-Origin", origin)
+			w.Header().Set("Vary", "Origin")
+			w.Header().Set("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE, OPTIONS")
+			w.Header().Set("Access-Control-Allow-Headers", "Content-Type, Authorization")
+		}
+		if r.Method == http.MethodOptions {
+			w.WriteHeader(http.StatusNoContent)
+			return
+		}
+		next.ServeHTTP(w, r)
+	})
+}
+
+func logRequests(log *slog.Logger, next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		start := time.Now()
+		rec := &statusRecorder{ResponseWriter: w, status: http.StatusOK}
+		next.ServeHTTP(rec, r)
+		log.Info("http request",
+			"method", r.Method,
+			"path", r.URL.Path,
+			"status", rec.status,
+			"duration_ms", time.Since(start).Milliseconds(),
+			"remote", r.RemoteAddr,
+		)
+	})
+}
+
+func recoverPanics(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		defer func() {
+			if rec := recover(); rec != nil {
+				slog.Error("panic recovered", "value", rec, "stack", string(debug.Stack()))
+				writeJSON(w, http.StatusInternalServerError, map[string]string{"error": "internal server error"})
+			}
+		}()
+		next.ServeHTTP(w, r)
+	})
+}
+
+type statusRecorder struct {
+	http.ResponseWriter
+	status int
+}
+
+func (r *statusRecorder) WriteHeader(code int) {
+	r.status = code
+	r.ResponseWriter.WriteHeader(code)
+}

server/internal/server/server.go

@@ -0,0 +1,84 @@
+// Package server wires the HTTP router, middleware and static file
+// serving into a production-ready http.Server.
+package server
+
+import (
+	"encoding/json"
+	"log/slog"
+	"net/http"
+	"time"
+
+	"messenger/internal/platform/config"
+)
+
+// New builds an *http.Server with all routes and middleware applied.
+func New(cfg *config.Config, log *slog.Logger) *http.Server {
+	mux := http.NewServeMux()
+
+	mux.HandleFunc("GET /healthz", func(w http.ResponseWriter, r *http.Request) {
+		writeJSON(w, http.StatusOK, map[string]string{"status": "ok"})
+	})
+
+	mux.HandleFunc("GET /readyz", func(w http.ResponseWriter, r *http.Request) {
+		writeJSON(w, http.StatusOK, map[string]string{"status": "ready"})
+	})
+
+	mux.HandleFunc("GET /api/v1/ping", func(w http.ResponseWriter, r *http.Request) {
+		writeJSON(w, http.StatusOK, map[string]string{
+			"message": "pong",
+			"time":    time.Now().UTC().Format(time.RFC3339),
+		})
+	})
+
+	if cfg.StaticDir != "" {
+		mux.Handle("/", spaHandler{staticDir: cfg.StaticDir, log: log})
+	}
+
+	handler := logRequests(log, recoverPanics(cors(cfg.AllowedOrigins, mux)))
+
+	return &http.Server{
+		Addr:              cfg.HTTPAddr,
+		Handler:           handler,
+		ReadHeaderTimeout: 5 * time.Second,
+		ReadTimeout:       15 * time.Second,
+		WriteTimeout:      30 * time.Second,
+		IdleTimeout:       2 * time.Minute,
+	}
+}
+
+// spaHandler serves the built frontend with a fallback to index.html
+// so client-side routes work on refresh.
+type spaHandler struct {
+	staticDir string
+	log       *slog.Logger
+}
+
+func (h spaHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
+	fs := http.Dir(h.staticDir)
+	path := r.URL.Path
+	if path == "/" {
+		path = "/index.html"
+	}
+
+	f, err := fs.Open(path)
+	if err != nil {
+		index, indexErr := fs.Open("/index.html")
+		if indexErr != nil {
+			http.NotFound(w, r)
+			return
+		}
+		defer index.Close()
+		http.ServeContent(w, r, "index.html", time.Time{}, index)
+		return
+	}
+	defer f.Close()
+	http.ServeContent(w, r, path, time.Time{}, f)
+}
+
+func writeJSON(w http.ResponseWriter, status int, body any) {
+	w.Header().Set("Content-Type", "application/json")
+	w.WriteHeader(status)
+	if err := json.NewEncoder(w).Encode(body); err != nil {
+		http.Error(w, "failed to encode response", http.StatusInternalServerError)
+	}
+}

web/.gitignore

@@ -0,0 +1,24 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+node_modules
+dist
+dist-ssr
+*.local
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?

web/.oxlintrc.json

@@ -0,0 +1,8 @@
+{
+  "$schema": "./node_modules/oxlint/configuration_schema.json",
+  "plugins": ["react", "typescript", "oxc"],
+  "rules": {
+    "react/rules-of-hooks": "error",
+    "react/only-export-components": ["warn", { "allowConstantExport": true }]
+  }
+}

web/README.md

@@ -0,0 +1,32 @@
+# React + TypeScript + Vite
+
+This template provides a minimal setup to get React working in Vite with HMR and some Oxlint rules.
+
+Currently, two official plugins are available:
+
+- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react) uses [Oxc](https://oxc.rs)
+- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc) uses [SWC](https://swc.rs/)
+
+## React Compiler
+
+The React Compiler is not enabled on this template because of its impact on dev & build performances. To add it, see [this documentation](https://react.dev/learn/react-compiler/installation).
+
+## Expanding the Oxlint configuration
+
+If you are developing a production application, we recommend enabling type-aware lint rules by installing `oxlint-tsgolint` and editing `.oxlintrc.json`:
+
+```json
+{
+  "$schema": "./node_modules/oxlint/configuration_schema.json",
+  "plugins": ["react", "typescript", "oxc"],
+  "options": {
+    "typeAware": true
+  },
+  "rules": {
+    "react/rules-of-hooks": "error",
+    "react/only-export-components": ["warn", { "allowConstantExport": true }]
+  }
+}
+```
+
+See the [Oxlint rules documentation](https://oxc.rs/docs/guide/usage/linter/rules) for the full list of rules and categories.

web/index.html

@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Messenger</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>

web/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "messenger-web",
+  "private": true,
+  "version": "0.1.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc -b && vite build",
+    "lint": "oxlint",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8"
+  },
+  "devDependencies": {
+    "@types/node": "^24.13.3",
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
+    "@vitejs/plugin-react": "^6.1.0",
+    "oxlint": "^1.79.0",
+    "typescript": "~6.0.2",
+    "vite": "^8.2.2"
+  }
+}

web/public/icons.svg

@@ -0,0 +1,24 @@
+<svg xmlns="http://www.w3.org/2000/svg">
+  <symbol id="bluesky-icon" viewBox="0 0 16 17">
+    <g clip-path="url(#bluesky-clip)"><path fill="#08060d" d="M7.75 7.735c-.693-1.348-2.58-3.86-4.334-5.097-1.68-1.187-2.32-.981-2.74-.79C.188 2.065.1 2.812.1 3.251s.241 3.602.398 4.13c.52 1.744 2.367 2.333 4.07 2.145-2.495.37-4.71 1.278-1.805 4.512 3.196 3.309 4.38-.71 4.987-2.746.608 2.036 1.307 5.91 4.93 2.746 2.72-2.746.747-4.143-1.747-4.512 1.702.189 3.55-.4 4.07-2.145.156-.528.397-3.691.397-4.13s-.088-1.186-.575-1.406c-.42-.19-1.06-.395-2.741.79-1.755 1.24-3.64 3.752-4.334 5.099"/></g>
+    <defs><clipPath id="bluesky-clip"><path fill="#fff" d="M.1.85h15.3v15.3H.1z"/></clipPath></defs>
+  </symbol>
+  <symbol id="discord-icon" viewBox="0 0 20 19">
+    <path fill="#08060d" d="M16.224 3.768a14.5 14.5 0 0 0-3.67-1.153c-.158.286-.343.67-.47.976a13.5 13.5 0 0 0-4.067 0c-.128-.306-.317-.69-.476-.976A14.4 14.4 0 0 0 3.868 3.77C1.546 7.28.916 10.703 1.231 14.077a14.7 14.7 0 0 0 4.5 2.306q.545-.748.965-1.587a9.5 9.5 0 0 1-1.518-.74q.191-.14.372-.293c2.927 1.369 6.107 1.369 8.999 0q.183.152.372.294-.723.437-1.52.74.418.838.963 1.588a14.6 14.6 0 0 0 4.504-2.308c.37-3.911-.63-7.302-2.644-10.309m-9.13 8.234c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.894 0 1.614.82 1.599 1.82.001 1-.705 1.82-1.6 1.82m5.91 0c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.893 0 1.614.82 1.599 1.82 0 1-.706 1.82-1.6 1.82"/>
+  </symbol>
+  <symbol id="documentation-icon" viewBox="0 0 21 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="m15.5 13.333 1.533 1.322c.645.555.967.833.967 1.178s-.322.623-.967 1.179L15.5 18.333m-3.333-5-1.534 1.322c-.644.555-.966.833-.966 1.178s.322.623.966 1.179l1.534 1.321"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M17.167 10.836v-4.32c0-1.41 0-2.117-.224-2.68-.359-.906-1.118-1.621-2.08-1.96-.599-.21-1.349-.21-2.848-.21-2.623 0-3.935 0-4.983.369-1.684.591-3.013 1.842-3.641 3.428C3 6.449 3 7.684 3 10.154v2.122c0 2.558 0 3.838.706 4.726q.306.383.713.671c.76.536 1.79.64 3.581.66"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M3 10a2.78 2.78 0 0 1 2.778-2.778c.555 0 1.209.097 1.748-.047.48-.129.854-.503.982-.982.145-.54.048-1.194.048-1.749a2.78 2.78 0 0 1 2.777-2.777"/>
+  </symbol>
+  <symbol id="github-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M9.356 1.85C5.05 1.85 1.57 5.356 1.57 9.694a7.84 7.84 0 0 0 5.324 7.44c.387.079.528-.168.528-.376 0-.182-.013-.805-.013-1.454-2.165.467-2.616-.935-2.616-.935-.349-.91-.864-1.143-.864-1.143-.71-.48.051-.48.051-.48.787.051 1.2.805 1.2.805.695 1.194 1.817.857 2.268.649.064-.507.27-.857.49-1.052-1.728-.182-3.545-.857-3.545-3.87 0-.857.31-1.558.8-2.104-.078-.195-.349-1 .077-2.078 0 0 .657-.208 2.14.805a7.5 7.5 0 0 1 1.946-.26c.657 0 1.328.092 1.946.26 1.483-1.013 2.14-.805 2.14-.805.426 1.078.155 1.883.078 2.078.502.546.799 1.247.799 2.104 0 3.013-1.818 3.675-3.558 3.87.284.247.528.714.528 1.454 0 1.052-.012 1.896-.012 2.156 0 .208.142.455.528.377a7.84 7.84 0 0 0 5.324-7.441c.013-4.338-3.48-7.844-7.773-7.844" clip-rule="evenodd"/>
+  </symbol>
+  <symbol id="social-icon" viewBox="0 0 20 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M12.5 6.667a4.167 4.167 0 1 0-8.334 0 4.167 4.167 0 0 0 8.334 0"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M2.5 16.667a5.833 5.833 0 0 1 8.75-5.053m3.837.474.513 1.035c.07.144.257.282.414.309l.93.155c.596.1.736.536.307.965l-.723.73a.64.64 0 0 0-.152.531l.207.903c.164.715-.213.991-.84.618l-.872-.52a.63.63 0 0 0-.577 0l-.872.52c-.624.373-1.003.094-.84-.618l.207-.903a.64.64 0 0 0-.152-.532l-.723-.729c-.426-.43-.289-.864.306-.964l.93-.156a.64.64 0 0 0 .412-.31l.513-1.034c.28-.562.735-.562 1.012 0"/>
+  </symbol>
+  <symbol id="x-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M1.893 1.98c.052.072 1.245 1.769 2.653 3.77l2.892 4.114c.183.261.333.48.333.486s-.068.089-.152.183l-.522.593-.765.867-3.597 4.087c-.375.426-.734.834-.798.905a1 1 0 0 0-.118.148c0 .01.236.017.664.017h.663l.729-.83c.4-.457.796-.906.879-.999a692 692 0 0 0 1.794-2.038c.034-.037.301-.34.594-.675l.551-.624.345-.392a7 7 0 0 1 .34-.374c.006 0 .93 1.306 2.052 2.903l2.084 2.965.045.063h2.275c1.87 0 2.273-.003 2.266-.021-.008-.02-1.098-1.572-3.894-5.547-2.013-2.862-2.28-3.246-2.273-3.266.008-.019.282-.332 2.085-2.38l2-2.274 1.567-1.782c.022-.028-.016-.03-.65-.03h-.674l-.3.342a871 871 0 0 1-1.782 2.025c-.067.075-.405.458-.75.852a100 100 0 0 1-.803.91c-.148.172-.299.344-.99 1.127-.304.343-.32.358-.345.327-.015-.019-.904-1.282-1.976-2.808L6.365 1.85H1.8zm1.782.91 8.078 11.294c.772 1.08 1.413 1.973 1.425 1.984.016.017.241.02 1.05.017l1.03-.004-2.694-3.766L7.796 5.75 5.722 2.852l-1.039-.004-1.039-.004z" clip-rule="evenodd"/>
+  </symbol>
+</svg>

web/src/App.tsx

@@ -0,0 +1,50 @@
+import { useEffect, useState } from 'react'
+import { pingApi, type PingResponse } from './api'
+import './index.css'
+
+type ApiState =
+  | { status: 'loading' }
+  | { status: 'ok'; data: PingResponse }
+  | { status: 'error'; error: string }
+
+function App() {
+  const [api, setApi] = useState<ApiState>({ status: 'loading' })
+
+  useEffect(() => {
+    let cancelled = false
+    pingApi()
+      .then((data) => {
+        if (!cancelled) setApi({ status: 'ok', data })
+      })
+      .catch((err: unknown) => {
+        if (!cancelled) setApi({ status: 'error', error: String(err) })
+      })
+    return () => {
+      cancelled = true
+    }
+  }, [])
+
+  return (
+    <main className="shell">
+      <h1>Messenger</h1>
+      <div className="card">
+        <div className="status-row">
+          <span className={`dot ${api.status}`} aria-hidden />
+          <span className="status-label">
+            {api.status === 'loading' && 'API: connecting…'}
+            {api.status === 'ok' && 'API: connected'}
+            {api.status === 'error' && 'API: unreachable'}
+          </span>
+        </div>
+        {api.status === 'ok' && (
+          <p className="detail">
+            {api.data.message} · server time {api.data.time}
+          </p>
+        )}
+        {api.status === 'error' && <p className="detail">{api.error}</p>}
+      </div>
+    </main>
+  )
+}
+
+export default App

web/src/api.ts

@@ -0,0 +1,12 @@
+export interface PingResponse {
+  message: string
+  time: string
+}
+
+export async function pingApi(): Promise<PingResponse> {
+  const res = await fetch('/api/v1/ping')
+  if (!res.ok) {
+    throw new Error(`API responded with ${res.status}`)
+  }
+  return res.json()
+}

web/src/index.css

@@ -0,0 +1,84 @@
+:root {
+  color-scheme: dark;
+  font-family: system-ui, -apple-system, "Segoe UI", sans-serif;
+  --bg: #0f1115;
+  --card: #1a1d24;
+  --text: #e8eaf0;
+  --muted: #9aa1ae;
+}
+
+* {
+  box-sizing: border-box;
+}
+
+body {
+  margin: 0;
+  background: var(--bg);
+  color: var(--text);
+  min-height: 100vh;
+  display: grid;
+  place-items: center;
+}
+
+.shell {
+  text-align: center;
+  padding: 2rem;
+}
+
+.shell h1 {
+  margin-bottom: 2rem;
+  font-size: 2.25rem;
+  letter-spacing: 0.06em;
+}
+
+.card {
+  background: var(--card);
+  border: 1px solid #262b35;
+  border-radius: 12px;
+  padding: 1.5rem 2.5rem;
+  min-width: 280px;
+}
+
+.status-row {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  gap: 0.6rem;
+}
+
+.dot {
+  width: 10px;
+  height: 10px;
+  border-radius: 50%;
+  background: var(--muted);
+}
+
+.dot.ok {
+  background: #34d399;
+  box-shadow: 0 0 8px #34d39988;
+}
+
+.dot.error {
+  background: #f87171;
+  box-shadow: 0 0 8px #f8717188;
+}
+
+.dot.loading {
+  animation: pulse 1s ease-in-out infinite;
+}
+
+.status-label {
+  font-weight: 600;
+}
+
+.detail {
+  margin: 0.75rem 0 0;
+  color: var(--muted);
+  font-size: 0.875rem;
+}
+
+@keyframes pulse {
+  50% {
+    opacity: 0.35;
+  }
+}

web/src/main.tsx

@@ -0,0 +1,10 @@
+import { StrictMode } from 'react'
+import { createRoot } from 'react-dom/client'
+import './index.css'
+import App from './App.tsx'
+
+createRoot(document.getElementById('root')!).render(
+  <StrictMode>
+    <App />
+  </StrictMode>,
+)

web/tsconfig.app.json

@@ -0,0 +1,26 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.app.tsbuildinfo",
+    "target": "es2023",
+    "lib": ["ES2023", "DOM"],
+    "module": "esnext",
+    "types": ["vite/client"],
+    "allowArbitraryExtensions": true,
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+    "jsx": "react-jsx",
+
+    /* Linting */
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": ["src"]
+}

web/tsconfig.json

@@ -0,0 +1,7 @@
+{
+  "files": [],
+  "references": [
+    { "path": "./tsconfig.app.json" },
+    { "path": "./tsconfig.node.json" }
+  ]
+}

web/tsconfig.node.json

@@ -0,0 +1,23 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.node.tsbuildinfo",
+    "target": "es2023",
+    "lib": ["ES2023"],
+    "types": ["node"],
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "module": "nodenext",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+
+    /* Linting */
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": ["vite.config.ts"]
+}

web/vite.config.ts

@@ -0,0 +1,15 @@
+import react from '@vitejs/plugin-react'
+import { defineConfig } from 'vite'
+
+// https://vite.dev/config/
+export default defineConfig({
+  plugins: [react()],
+  server: {
+    proxy: {
+      '/api': {
+        target: 'http://localhost:8080',
+        changeOrigin: true,
+      },
+    },
+  },
+})