Initial commit

.claude/settings.local.json

@@ -0,0 +1,17 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(dotnet new:*)",
+      "Bash(dotnet sln:*)",
+      "Bash(dotnet add:*)",
+      "Bash(dotnet build:*)",
+      "Bash(dotnet tool:*)",
+      "Bash(dotnet ef:*)",
+      "Bash(timeout 8 dotnet run)",
+      "Bash(npm create:*)",
+      "Bash(npm install:*)",
+      "Bash(npm run:*)",
+      "Bash(npx playwright:*)"
+    ]
+  }
+}

.github/workflows/e2e.yml

@@ -0,0 +1,75 @@
+name: E2E Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  e2e:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      # ── Docker ────────────────────────────────────────────────────────────
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build images
+        run: docker compose -f cicd/docker/docker-compose.yml build
+
+      - name: Start services
+        run: docker compose -f cicd/docker/docker-compose.yml up -d
+        env:
+          # Falls back to the default in docker-compose.yml if the secret is absent
+          JWT_KEY: ${{ secrets.JWT_KEY }}
+
+      - name: Wait for frontend to be ready
+        run: |
+          echo "Waiting for services to become healthy..."
+          timeout 120 bash -c \
+            'until curl -sf http://localhost > /dev/null; do echo "  still waiting..."; sleep 3; done'
+          echo "Services are ready."
+
+      # ── Playwright ────────────────────────────────────────────────────────
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: 'npm'
+          cache-dependency-path: tests/e2e/package-lock.json
+
+      - name: Install dependencies
+        working-directory: tests/e2e
+        run: npm ci
+
+      - name: Install Playwright browsers
+        working-directory: tests/e2e
+        run: npx playwright install --with-deps chromium
+
+      - name: Run E2E tests
+        working-directory: tests/e2e
+        env:
+          BASE_URL: http://localhost
+          CI: 'true'
+        run: npx playwright test
+
+      # ── Artifacts ─────────────────────────────────────────────────────────
+      - name: Upload Playwright report
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: playwright-report
+          path: tests/e2e/playwright-report/
+          retention-days: 30
+
+      - name: Dump Docker logs on failure
+        if: failure()
+        run: docker compose -f cicd/docker/docker-compose.yml logs
+
+      # ── Cleanup ───────────────────────────────────────────────────────────
+      - name: Stop services
+        if: always()
+        run: docker compose -f cicd/docker/docker-compose.yml down -v

.gitignore

@@ -0,0 +1,54 @@
+# -------------------------
+# .NET
+# -------------------------
+src/backend/**/bin/
+src/backend/**/obj/
+src/backend/**/*.user
+src/backend/**/.vs/
+
+# SQLite databases
+*.db
+*.db-shm
+*.db-wal
+
+# -------------------------
+# Node / Frontend
+# -------------------------
+src/frontend/node_modules/
+src/frontend/dist/
+src/frontend/.env
+src/frontend/.env.*
+
+# -------------------------
+# Docker
+# -------------------------
+cicd/docker/.env
+
+# -------------------------
+# IDEs
+# -------------------------
+.vs/
+.vscode/
+.idea/
+*.suo
+*.user
+
+# -------------------------
+# OS
+# -------------------------
+.DS_Store
+Thumbs.db
+
+# -------------------------
+# Playwright
+# -------------------------
+tests/e2e/node_modules/
+tests/e2e/playwright-report/
+tests/e2e/test-results/
+tests/e2e/.cache/
+
+# -------------------------
+# Logs
+# -------------------------
+*.log
+logs/

cicd/docker/.env.example

@@ -0,0 +1,12 @@
+# Copy this file to .env and fill in the values before running docker compose
+
+# Port the app is exposed on (default: 80)
+PORT=80
+
+# JWT — use a long random string in production
+JWT_KEY=randall-super-secret-jwt-key-change-in-production-32chars
+JWT_ISSUER=randall-api
+JWT_AUDIENCE=randall-app
+
+# ASP.NET Core environment
+ASPNETCORE_ENVIRONMENT=Production

cicd/docker/Dockerfile.backend

@@ -0,0 +1,30 @@
+# Build stage
+FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+WORKDIR /src
+
+# Restore — copy only project files first to cache the NuGet layer
+COPY src/backend/Randall.slnx                                                   src/backend/
+COPY src/backend/src/Randall.Domain/Randall.Domain.csproj                      src/backend/src/Randall.Domain/
+COPY src/backend/src/Randall.Application/Randall.Application.csproj            src/backend/src/Randall.Application/
+COPY src/backend/src/Randall.Infrastructure/Randall.Infrastructure.csproj      src/backend/src/Randall.Infrastructure/
+COPY src/backend/src/Randall.Api/Randall.Api.csproj                            src/backend/src/Randall.Api/
+RUN dotnet restore "src/backend/src/Randall.Api/Randall.Api.csproj"
+
+# Build — copy source only (no bin/obj/db files)
+COPY src/backend/src/ src/backend/src/
+RUN dotnet publish "src/backend/src/Randall.Api/Randall.Api.csproj" \
+    -c Release -o /app/publish
+
+# Runtime stage
+FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS runtime
+WORKDIR /app
+
+RUN apt-get update && apt-get install -y --no-install-recommends curl && rm -rf /var/lib/apt/lists/*
+RUN mkdir -p /app/data
+COPY --from=build /app/publish .
+
+ENV ASPNETCORE_URLS=http://+:8080
+ENV ConnectionStrings__DefaultConnection="Data Source=/app/data/randall.db"
+
+EXPOSE 8080
+ENTRYPOINT ["dotnet", "Randall.Api.dll"]

cicd/docker/Dockerfile.backend.dockerignore

@@ -0,0 +1,18 @@
+# Not needed for backend build
+src/frontend/
+cicd/
+
+# Build artifacts
+src/backend/**/bin/
+src/backend/**/obj/
+
+# Local database files
+src/backend/**/*.db
+src/backend/**/*.db-shm
+src/backend/**/*.db-wal
+
+# IDE and git
+.git/
+.vs/
+**/*.user
+**/.idea/

cicd/docker/Dockerfile.frontend

@@ -0,0 +1,24 @@
+# Build stage
+FROM node:22-alpine AS build
+WORKDIR /app
+
+# Install dependencies — copy lockfiles first to cache the npm layer
+COPY src/frontend/package.json src/frontend/package-lock.json ./
+RUN npm ci
+
+# Copy source
+COPY src/frontend/index.html ./
+COPY src/frontend/vite.config.ts ./
+COPY src/frontend/tsconfig.json src/frontend/tsconfig.app.json src/frontend/tsconfig.node.json ./
+COPY src/frontend/eslint.config.js ./
+COPY src/frontend/src/ ./src/
+COPY src/frontend/public/ ./public/
+
+RUN npm run build
+
+# Serve stage
+FROM nginx:alpine AS runtime
+COPY --from=build /app/dist /usr/share/nginx/html
+COPY cicd/docker/nginx.conf /etc/nginx/conf.d/default.conf
+
+EXPOSE 80

cicd/docker/Dockerfile.frontend.dockerignore

@@ -0,0 +1,16 @@
+# Not needed for frontend build
+src/backend/
+
+# Build artifacts and dependencies
+src/frontend/node_modules/
+src/frontend/dist/
+
+# Secrets — never bake these into an image
+src/frontend/.env
+src/frontend/.env.*
+
+# IDE and git
+.git/
+.vs/
+**/*.user
+**/.idea/

cicd/docker/docker-compose.yml

@@ -0,0 +1,34 @@
+services:
+  backend:
+    build:
+      context: ../..
+      dockerfile: cicd/docker/Dockerfile.backend
+    environment:
+      - ConnectionStrings__DefaultConnection=Data Source=/app/data/randall.db
+      - Jwt__Key=${JWT_KEY:-randall-super-secret-jwt-key-change-in-production-32chars}
+      - Jwt__Issuer=${JWT_ISSUER:-randall-api}
+      - Jwt__Audience=${JWT_AUDIENCE:-randall-app}
+      - ASPNETCORE_ENVIRONMENT=${ASPNETCORE_ENVIRONMENT:-Production}
+    volumes:
+      - db-data:/app/data
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 10s
+
+  frontend:
+    build:
+      context: ../..
+      dockerfile: cicd/docker/Dockerfile.frontend
+    ports:
+      - "${PORT:-80}:80"
+    depends_on:
+      backend:
+        condition: service_healthy
+    restart: unless-stopped
+
+volumes:
+  db-data:

cicd/docker/nginx.conf

@@ -0,0 +1,21 @@
+server {
+    listen 80;
+    server_name _;
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # Proxy API calls to the backend
+    location /api/ {
+        proxy_pass         http://backend:8080;
+        proxy_http_version 1.1;
+        proxy_set_header   Host              $host;
+        proxy_set_header   X-Real-IP         $remote_addr;
+        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header   X-Forwarded-Proto $scheme;
+    }
+
+    # SPA fallback — all unmatched routes serve index.html
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}

src/backend/Randall.slnx

@@ -0,0 +1,8 @@
+<Solution>
+  <Folder Name="/src/">
+    <Project Path="src/Randall.Api/Randall.Api.csproj" />
+    <Project Path="src/Randall.Application/Randall.Application.csproj" />
+    <Project Path="src/Randall.Domain/Randall.Domain.csproj" />
+    <Project Path="src/Randall.Infrastructure/Randall.Infrastructure.csproj" />
+  </Folder>
+</Solution>

src/backend/src/Randall.Api/Admin/AdminController.cs

@@ -0,0 +1,70 @@
+using System.Security.Claims;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Randall.Application.Admin.ApproveUser;
+using Randall.Application.Admin.DeleteUser;
+using Randall.Application.Admin.GetAllUsers;
+using Randall.Application.Admin.GetPendingUsers;
+using Randall.Application.Admin.MakeAdmin;
+
+namespace Randall.Api.Admin;
+
+[ApiController]
+[Route("api/admin")]
+[Authorize]
+public class AdminController(
+    GetAllUsersHandler getAllUsersHandler,
+    GetPendingUsersHandler getPendingUsersHandler,
+    ApproveUserHandler approveUserHandler,
+    DeleteUserHandler deleteUserHandler,
+    MakeAdminHandler makeAdminHandler) : ControllerBase
+{
+    private bool IsAdmin =>
+        User.FindFirstValue("isAdmin") == "true";
+
+    [HttpGet("users")]
+    public async Task<IActionResult> GetAllUsers(CancellationToken ct)
+    {
+        if (!IsAdmin) return Forbid();
+        var result = await getAllUsersHandler.HandleAsync(ct);
+        return Ok(result.Value);
+    }
+
+    [HttpGet("users/pending")]
+    public async Task<IActionResult> GetPendingUsers(CancellationToken ct)
+    {
+        if (!IsAdmin) return Forbid();
+        var result = await getPendingUsersHandler.HandleAsync(ct);
+        return Ok(result.Value);
+    }
+
+    [HttpPost("users/{id}/approve")]
+    public async Task<IActionResult> ApproveUser(Guid id, CancellationToken ct)
+    {
+        if (!IsAdmin) return Forbid();
+        var result = await approveUserHandler.HandleAsync(new ApproveUserCommand(id), ct);
+        if (!result.IsSuccess)
+            return BadRequest(new ProblemDetails { Detail = result.Error });
+        return NoContent();
+    }
+
+    [HttpPost("users/{id}/make-admin")]
+    public async Task<IActionResult> MakeAdmin(Guid id, CancellationToken ct)
+    {
+        if (!IsAdmin) return Forbid();
+        var result = await makeAdminHandler.HandleAsync(new MakeAdminCommand(id), ct);
+        if (!result.IsSuccess)
+            return BadRequest(new ProblemDetails { Detail = result.Error });
+        return NoContent();
+    }
+
+    [HttpDelete("users/{id}")]
+    public async Task<IActionResult> DeleteUser(Guid id, CancellationToken ct)
+    {
+        if (!IsAdmin) return Forbid();
+        var result = await deleteUserHandler.HandleAsync(new DeleteUserCommand(id), ct);
+        if (!result.IsSuccess)
+            return BadRequest(new ProblemDetails { Detail = result.Error });
+        return NoContent();
+    }
+}

src/backend/src/Randall.Api/Auth/AuthController.cs

@@ -0,0 +1,39 @@
+using Microsoft.AspNetCore.Mvc;
+using Randall.Application.Auth;
+using Randall.Application.Auth.Login;
+using Randall.Application.Auth.Register;
+
+namespace Randall.Api.Auth;
+
+[ApiController]
+[Route("api/auth")]
+public class AuthController(RegisterHandler registerHandler, LoginHandler loginHandler) : ControllerBase
+{
+    [HttpPost("register")]
+    [ProducesResponseType<RegisterResponse>(StatusCodes.Status200OK)]
+    [ProducesResponseType<ProblemDetails>(StatusCodes.Status400BadRequest)]
+    public async Task<IActionResult> Register([FromBody] AuthRequest request, CancellationToken ct)
+    {
+        var result = await registerHandler.HandleAsync(
+            new RegisterCommand(request.Email, request.Name ?? string.Empty, request.Password), ct);
+
+        if (!result.IsSuccess)
+            return BadRequest(new ProblemDetails { Detail = result.Error });
+
+        return Ok(result.Value);
+    }
+
+    [HttpPost("login")]
+    [ProducesResponseType<AuthResponse>(StatusCodes.Status200OK)]
+    [ProducesResponseType<ProblemDetails>(StatusCodes.Status400BadRequest)]
+    public async Task<IActionResult> Login([FromBody] AuthRequest request, CancellationToken ct)
+    {
+        var result = await loginHandler.HandleAsync(
+            new LoginCommand(request.Email, request.Password), ct);
+
+        if (!result.IsSuccess)
+            return BadRequest(new ProblemDetails { Detail = result.Error });
+
+        return Ok(result.Value);
+    }
+}

src/backend/src/Randall.Api/Auth/AuthRequest.cs

@@ -0,0 +1,3 @@
+namespace Randall.Api.Auth;
+
+public record AuthRequest(string Email, string Password, string? Name);

src/backend/src/Randall.Api/Program.cs

@@ -0,0 +1,68 @@
+using System.Text;
+using Microsoft.AspNetCore.Authentication.JwtBearer;
+using Microsoft.IdentityModel.Tokens;
+using Randall.Application;
+using Randall.Application.Common;
+using Randall.Infrastructure;
+using Randall.Infrastructure.Persistence;
+using Randall.Infrastructure.Persistence.Seeding;
+
+var builder = WebApplication.CreateBuilder(args);
+
+builder.Services.AddHealthChecks();
+builder.Services.AddControllers()
+    .AddJsonOptions(o =>
+        o.JsonSerializerOptions.Converters.Add(new System.Text.Json.Serialization.JsonStringEnumConverter()));
+builder.Services.AddEndpointsApiExplorer();
+builder.Services.AddSwaggerGen();
+
+builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
+    .AddJwtBearer(options =>
+    {
+        options.MapInboundClaims = false;
+        options.TokenValidationParameters = new TokenValidationParameters
+        {
+            ValidateIssuer = true,
+            ValidateAudience = true,
+            ValidateLifetime = true,
+            ValidateIssuerSigningKey = true,
+            ValidIssuer = builder.Configuration["Jwt:Issuer"],
+            ValidAudience = builder.Configuration["Jwt:Audience"],
+            IssuerSigningKey = new SymmetricSecurityKey(
+                Encoding.UTF8.GetBytes(builder.Configuration["Jwt:Key"]!)),
+        };
+    });
+
+builder.Services.AddAuthorization();
+builder.Services.AddApplication();
+builder.Services.AddInfrastructure(builder.Configuration);
+
+builder.Services.AddCors(options =>
+{
+    options.AddDefaultPolicy(policy =>
+        policy.AllowAnyOrigin().AllowAnyMethod().AllowAnyHeader());
+});
+
+var app = builder.Build();
+
+using (var scope = app.Services.CreateScope())
+{
+    var db = scope.ServiceProvider.GetRequiredService<AppDbContext>();
+    var hasher = scope.ServiceProvider.GetRequiredService<IPasswordHasher>();
+    await DatabaseSeeder.SeedAsync(db, hasher);
+}
+
+if (app.Environment.IsDevelopment())
+{
+    app.UseSwagger();
+    app.UseSwaggerUI();
+}
+
+app.MapHealthChecks("/health");
+app.UseCors();
+if (app.Environment.IsDevelopment()) app.UseHttpsRedirection();
+app.UseAuthentication();
+app.UseAuthorization();
+app.MapControllers();
+
+app.Run();

src/backend/src/Randall.Api/Properties/launchSettings.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://json.schemastore.org/launchsettings.json",
+  "profiles": {
+    "http": {
+      "commandName": "Project",
+      "dotnetRunMessages": true,
+      "launchBrowser": false,
+      "applicationUrl": "http://localhost:5180",
+      "environmentVariables": {
+        "ASPNETCORE_ENVIRONMENT": "Development"
+      }
+    },
+    "https": {
+      "commandName": "Project",
+      "dotnetRunMessages": true,
+      "launchBrowser": false,
+      "applicationUrl": "https://localhost:7004;http://localhost:5180",
+      "environmentVariables": {
+        "ASPNETCORE_ENVIRONMENT": "Development"
+      }
+    }
+  }
+}

src/backend/src/Randall.Api/Randall.Api.csproj

@@ -0,0 +1,24 @@
+<Project Sdk="Microsoft.NET.Sdk.Web">
+
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.5" />
+    <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.2" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.5">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+    <PackageReference Include="Swashbuckle.AspNetCore" Version="10.1.5" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\Randall.Application\Randall.Application.csproj" />
+    <ProjectReference Include="..\Randall.Infrastructure\Randall.Infrastructure.csproj" />
+  </ItemGroup>
+
+</Project>

src/backend/src/Randall.Api/Randall.Api.http

@@ -0,0 +1,6 @@
+@Randall.Api_HostAddress = http://localhost:5180
+
+GET {{Randall.Api_HostAddress}}/weatherforecast/
+Accept: application/json
+
+###

src/backend/src/Randall.Api/Reservations/CreateReservationRequest.cs

@@ -0,0 +1,3 @@
+namespace Randall.Api.Reservations;
+
+public record CreateReservationRequest(Guid WorkplaceId, DateOnly Date);

src/backend/src/Randall.Api/Reservations/ReservationsController.cs

@@ -0,0 +1,78 @@
+using System.IdentityModel.Tokens.Jwt;
+using System.Security.Claims;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Randall.Application.Reservations.CancelReservation;
+using Randall.Application.Reservations.CreateReservation;
+using Randall.Application.Reservations.GetMyReservations;
+using Randall.Application.Reservations.GetReservationById;
+
+namespace Randall.Api.Reservations;
+
+[ApiController]
+[Route("api/reservations")]
+[Authorize]
+public class ReservationsController(
+    CreateReservationHandler createHandler,
+    CancelReservationHandler cancelHandler,
+    GetMyReservationsHandler getMyHandler,
+    GetReservationByIdHandler getByIdHandler) : ControllerBase
+{
+    private string UserEmail => User.FindFirstValue(JwtRegisteredClaimNames.Email)!;
+    private string UserName => User.FindFirstValue(JwtRegisteredClaimNames.Name)!;
+
+    [HttpPost]
+    [ProducesResponseType<CreatedReservationDto>(StatusCodes.Status201Created)]
+    [ProducesResponseType<ProblemDetails>(StatusCodes.Status400BadRequest)]
+    public async Task<IActionResult> Create([FromBody] CreateReservationRequest request, CancellationToken ct)
+    {
+        var command = new CreateReservationCommand(request.WorkplaceId, UserEmail, UserName, request.Date);
+        var result = await createHandler.HandleAsync(command, ct);
+
+        if (!result.IsSuccess)
+            return BadRequest(new ProblemDetails { Detail = result.Error });
+
+        return CreatedAtAction(nameof(GetById), new { id = result.Value!.Id }, result.Value);
+    }
+
+    [HttpGet("{id:guid}")]
+    [ProducesResponseType<ReservationDetailDto>(StatusCodes.Status200OK)]
+    [ProducesResponseType<ProblemDetails>(StatusCodes.Status404NotFound)]
+    public async Task<IActionResult> GetById(Guid id, CancellationToken ct)
+    {
+        var result = await getByIdHandler.HandleAsync(new GetReservationByIdQuery(id), ct);
+
+        if (!result.IsSuccess)
+            return NotFound(new ProblemDetails { Detail = result.Error });
+
+        return Ok(result.Value);
+    }
+
+    [HttpGet("my")]
+    [ProducesResponseType<IReadOnlyList<ReservationDto>>(StatusCodes.Status200OK)]
+    public async Task<IActionResult> GetMy(CancellationToken ct)
+    {
+        var result = await getMyHandler.HandleAsync(new GetMyReservationsQuery(UserEmail), ct);
+        return Ok(result.Value);
+    }
+
+    [HttpDelete("{id:guid}")]
+    [ProducesResponseType(StatusCodes.Status204NoContent)]
+    [ProducesResponseType<ProblemDetails>(StatusCodes.Status400BadRequest)]
+    [ProducesResponseType<ProblemDetails>(StatusCodes.Status404NotFound)]
+    public async Task<IActionResult> Cancel(Guid id, CancellationToken ct)
+    {
+        var command = new CancelReservationCommand(id, UserEmail);
+        var result = await cancelHandler.HandleAsync(command, ct);
+
+        if (!result.IsSuccess)
+        {
+            if (result.Error!.Contains("not found"))
+                return NotFound(new ProblemDetails { Detail = result.Error });
+
+            return BadRequest(new ProblemDetails { Detail = result.Error });
+        }
+
+        return NoContent();
+    }
+}

src/backend/src/Randall.Api/Workplaces/WorkplacesController.cs

@@ -0,0 +1,50 @@
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+using Randall.Application.Workplaces.GetAllWorkplaces;
+using Randall.Application.Workplaces.GetAvailableWorkplaces;
+using Randall.Application.Workplaces.GetWorkplaceSchedule;
+
+namespace Randall.Api.Workplaces;
+
+[ApiController]
+[Route("api/workplaces")]
+[Authorize]
+public class WorkplacesController(
+    GetAllWorkplacesHandler getAllHandler,
+    GetAvailableWorkplacesHandler getAvailableHandler,
+    GetWorkplaceScheduleHandler getScheduleHandler) : ControllerBase
+{
+    [HttpGet]
+    [ProducesResponseType<IReadOnlyList<WorkplaceDto>>(StatusCodes.Status200OK)]
+    public async Task<IActionResult> GetAll(CancellationToken ct)
+    {
+        var result = await getAllHandler.HandleAsync(ct);
+        return Ok(result.Value);
+    }
+
+    [HttpGet("available")]
+    [ProducesResponseType<IReadOnlyList<AvailableWorkplaceDto>>(StatusCodes.Status200OK)]
+    [ProducesResponseType<ProblemDetails>(StatusCodes.Status400BadRequest)]
+    public async Task<IActionResult> GetAvailable([FromQuery] DateOnly date, CancellationToken ct)
+    {
+        var result = await getAvailableHandler.HandleAsync(new GetAvailableWorkplacesQuery(date), ct);
+
+        if (!result.IsSuccess)
+            return BadRequest(new ProblemDetails { Detail = result.Error });
+
+        return Ok(result.Value);
+    }
+
+    [HttpGet("schedule")]
+    [ProducesResponseType<IReadOnlyList<WorkplaceScheduleDto>>(StatusCodes.Status200OK)]
+    [ProducesResponseType<ProblemDetails>(StatusCodes.Status400BadRequest)]
+    public async Task<IActionResult> GetSchedule([FromQuery] DateOnly date, CancellationToken ct)
+    {
+        var result = await getScheduleHandler.HandleAsync(date, ct);
+
+        if (!result.IsSuccess)
+            return BadRequest(new ProblemDetails { Detail = result.Error });
+
+        return Ok(result.Value);
+    }
+}

src/backend/src/Randall.Api/appsettings.Development.json

@@ -0,0 +1,8 @@
+{
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    }
+  }
+}

src/backend/src/Randall.Api/appsettings.json

@@ -0,0 +1,17 @@
+{
+  "ConnectionStrings": {
+    "DefaultConnection": "Data Source=randall.db"
+  },
+  "Jwt": {
+    "Key": "randall-super-secret-jwt-key-change-in-production-32chars",
+    "Issuer": "randall-api",
+    "Audience": "randall-app"
+  },
+  "Logging": {
+    "LogLevel": {
+      "Default": "Information",
+      "Microsoft.AspNetCore": "Warning"
+    }
+  },
+  "AllowedHosts": "*"
+}

src/backend/src/Randall.Application/Admin/ApproveUser/ApproveUserCommand.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Admin.ApproveUser;
+
+public record ApproveUserCommand(Guid UserId);

src/backend/src/Randall.Application/Admin/ApproveUser/ApproveUserHandler.cs

@@ -0,0 +1,18 @@
+using Randall.Domain.Common;
+using Randall.Domain.Users;
+
+namespace Randall.Application.Admin.ApproveUser;
+
+public class ApproveUserHandler(IUserRepository userRepository)
+{
+    public async Task<Result> HandleAsync(ApproveUserCommand command, CancellationToken ct = default)
+    {
+        var user = await userRepository.GetByIdAsync(command.UserId, ct);
+        if (user is null)
+            return Result.Failure("User not found.");
+
+        user.Approve();
+        await userRepository.SaveChangesAsync(ct);
+        return Result.Success();
+    }
+}

src/backend/src/Randall.Application/Admin/DeleteUser/DeleteUserCommand.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Admin.DeleteUser;
+
+public record DeleteUserCommand(Guid UserId);

src/backend/src/Randall.Application/Admin/DeleteUser/DeleteUserHandler.cs

@@ -0,0 +1,21 @@
+using Randall.Domain.Common;
+using Randall.Domain.Users;
+
+namespace Randall.Application.Admin.DeleteUser;
+
+public class DeleteUserHandler(IUserRepository userRepository)
+{
+    public async Task<Result> HandleAsync(DeleteUserCommand command, CancellationToken ct = default)
+    {
+        var user = await userRepository.GetByIdAsync(command.UserId, ct);
+        if (user is null)
+            return Result.Failure("User not found.");
+
+        if (user.IsAdmin)
+            return Result.Failure("Admin users cannot be deleted.");
+
+        userRepository.Delete(user);
+        await userRepository.SaveChangesAsync(ct);
+        return Result.Success();
+    }
+}

src/backend/src/Randall.Application/Admin/GetAllUsers/AdminUserDto.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Admin.GetAllUsers;
+
+public record AdminUserDto(Guid Id, string Name, string Email, bool IsApproved, bool IsAdmin);

src/backend/src/Randall.Application/Admin/GetAllUsers/GetAllUsersHandler.cs

@@ -0,0 +1,14 @@
+using Randall.Domain.Common;
+using Randall.Domain.Users;
+
+namespace Randall.Application.Admin.GetAllUsers;
+
+public class GetAllUsersHandler(IUserRepository userRepository)
+{
+    public async Task<Result<List<AdminUserDto>>> HandleAsync(CancellationToken ct = default)
+    {
+        var users = await userRepository.GetAllAsync(ct);
+        var dtos = users.Select(u => new AdminUserDto(u.Id, u.Name, u.Email, u.IsApproved, u.IsAdmin)).ToList();
+        return Result.Success(dtos);
+    }
+}

src/backend/src/Randall.Application/Admin/GetPendingUsers/GetPendingUsersHandler.cs

@@ -0,0 +1,14 @@
+using Randall.Domain.Common;
+using Randall.Domain.Users;
+
+namespace Randall.Application.Admin.GetPendingUsers;
+
+public class GetPendingUsersHandler(IUserRepository userRepository)
+{
+    public async Task<Result<List<PendingUserDto>>> HandleAsync(CancellationToken ct = default)
+    {
+        var users = await userRepository.GetPendingAsync(ct);
+        var dtos = users.Select(u => new PendingUserDto(u.Id, u.Name, u.Email)).ToList();
+        return Result.Success(dtos);
+    }
+}

src/backend/src/Randall.Application/Admin/GetPendingUsers/PendingUserDto.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Admin.GetPendingUsers;
+
+public record PendingUserDto(Guid Id, string Name, string Email);

src/backend/src/Randall.Application/Admin/MakeAdmin/MakeAdminCommand.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Admin.MakeAdmin;
+
+public record MakeAdminCommand(Guid UserId);

src/backend/src/Randall.Application/Admin/MakeAdmin/MakeAdminHandler.cs

@@ -0,0 +1,18 @@
+using Randall.Domain.Common;
+using Randall.Domain.Users;
+
+namespace Randall.Application.Admin.MakeAdmin;
+
+public class MakeAdminHandler(IUserRepository userRepository)
+{
+    public async Task<Result> HandleAsync(MakeAdminCommand command, CancellationToken ct = default)
+    {
+        var user = await userRepository.GetByIdAsync(command.UserId, ct);
+        if (user is null)
+            return Result.Failure("User not found.");
+
+        user.MakeAdmin();
+        await userRepository.SaveChangesAsync(ct);
+        return Result.Success();
+    }
+}

src/backend/src/Randall.Application/Auth/AuthResponse.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Auth;
+
+public record AuthResponse(string Token, string Name, string Email, bool IsAdmin);

src/backend/src/Randall.Application/Auth/Login/LoginCommand.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Auth.Login;
+
+public record LoginCommand(string Email, string Password);

src/backend/src/Randall.Application/Auth/Login/LoginHandler.cs

@@ -0,0 +1,24 @@
+using Randall.Application.Common;
+using Randall.Domain.Common;
+using Randall.Domain.Users;
+
+namespace Randall.Application.Auth.Login;
+
+public class LoginHandler(
+    IUserRepository userRepository,
+    IPasswordHasher passwordHasher,
+    IJwtTokenService jwtTokenService)
+{
+    public async Task<Result<AuthResponse>> HandleAsync(LoginCommand command, CancellationToken ct = default)
+    {
+        var user = await userRepository.GetByEmailAsync(command.Email, ct);
+        if (user is null || !passwordHasher.Verify(command.Password, user.PasswordHash))
+            return Result.Failure<AuthResponse>("Invalid email or password.");
+
+        if (!user.IsApproved)
+            return Result.Failure<AuthResponse>("Your account is pending approval by an administrator.");
+
+        var token = jwtTokenService.GenerateToken(user.Id, user.Email, user.Name, user.IsAdmin);
+        return Result.Success(new AuthResponse(token, user.Name, user.Email, user.IsAdmin));
+    }
+}

src/backend/src/Randall.Application/Auth/Register/RegisterCommand.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Auth.Register;
+
+public record RegisterCommand(string Email, string Name, string Password);

src/backend/src/Randall.Application/Auth/Register/RegisterHandler.cs

@@ -0,0 +1,26 @@
+using Randall.Application.Common;
+using Randall.Domain.Common;
+using Randall.Domain.Users;
+
+namespace Randall.Application.Auth.Register;
+
+public class RegisterHandler(IUserRepository userRepository, IPasswordHasher passwordHasher)
+{
+    public async Task<Result<RegisterResponse>> HandleAsync(RegisterCommand command, CancellationToken ct = default)
+    {
+        var exists = await userRepository.ExistsByEmailAsync(command.Email, ct);
+        if (exists)
+            return Result.Failure<RegisterResponse>("An account with this email already exists.");
+
+        var hash = passwordHasher.Hash(command.Password);
+
+        var result = User.Create(command.Email, command.Name, hash);
+        if (!result.IsSuccess)
+            return Result.Failure<RegisterResponse>(result.Error!);
+
+        await userRepository.AddAsync(result.Value!, ct);
+        await userRepository.SaveChangesAsync(ct);
+
+        return Result.Success(new RegisterResponse("Your account is pending approval by an administrator."));
+    }
+}

src/backend/src/Randall.Application/Auth/Register/RegisterResponse.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Auth.Register;
+
+public record RegisterResponse(string Message);

src/backend/src/Randall.Application/Common/IJwtTokenService.cs

@@ -0,0 +1,6 @@
+namespace Randall.Application.Common;
+
+public interface IJwtTokenService
+{
+    string GenerateToken(Guid userId, string email, string name, bool isAdmin);
+}

src/backend/src/Randall.Application/Common/IPasswordHasher.cs

@@ -0,0 +1,7 @@
+namespace Randall.Application.Common;
+
+public interface IPasswordHasher
+{
+    string Hash(string password);
+    bool Verify(string password, string hash);
+}

src/backend/src/Randall.Application/DependencyInjection.cs

@@ -0,0 +1,41 @@
+using Microsoft.Extensions.DependencyInjection;
+using Randall.Application.Admin.ApproveUser;
+using Randall.Application.Admin.DeleteUser;
+using Randall.Application.Admin.GetAllUsers;
+using Randall.Application.Admin.GetPendingUsers;
+using Randall.Application.Admin.MakeAdmin;
+using Randall.Application.Auth.Login;
+using Randall.Application.Auth.Register;
+using Randall.Application.Reservations.CancelReservation;
+using Randall.Application.Reservations.CreateReservation;
+using Randall.Application.Reservations.GetMyReservations;
+using Randall.Application.Reservations.GetReservationById;
+using Randall.Application.Workplaces.GetAllWorkplaces;
+using Randall.Application.Workplaces.GetAvailableWorkplaces;
+using Randall.Application.Workplaces.GetWorkplaceSchedule;
+
+namespace Randall.Application;
+
+public static class DependencyInjection
+{
+    public static IServiceCollection AddApplication(this IServiceCollection services)
+    {
+        services.AddScoped<RegisterHandler>();
+        services.AddScoped<LoginHandler>();
+        services.AddScoped<GetAllUsersHandler>();
+        services.AddScoped<GetPendingUsersHandler>();
+        services.AddScoped<ApproveUserHandler>();
+        services.AddScoped<DeleteUserHandler>();
+        services.AddScoped<MakeAdminHandler>();
+
+        services.AddScoped<GetAllWorkplacesHandler>();
+        services.AddScoped<GetAvailableWorkplacesHandler>();
+        services.AddScoped<GetWorkplaceScheduleHandler>();
+        services.AddScoped<CreateReservationHandler>();
+        services.AddScoped<CancelReservationHandler>();
+        services.AddScoped<GetMyReservationsHandler>();
+        services.AddScoped<GetReservationByIdHandler>();
+
+        return services;
+    }
+}

src/backend/src/Randall.Application/Randall.Application.csproj

@@ -0,0 +1,17 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\Randall.Domain\Randall.Domain.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.5" />
+  </ItemGroup>
+
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+  </PropertyGroup>
+
+</Project>

src/backend/src/Randall.Application/Reservations/CancelReservation/CancelReservationCommand.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Reservations.CancelReservation;
+
+public record CancelReservationCommand(Guid ReservationId, string EmployeeEmail);

src/backend/src/Randall.Application/Reservations/CancelReservation/CancelReservationHandler.cs

@@ -0,0 +1,30 @@
+using Randall.Domain.Common;
+using Randall.Domain.Reservations;
+
+namespace Randall.Application.Reservations.CancelReservation;
+
+public class CancelReservationHandler(IReservationRepository reservationRepository)
+{
+    public async Task<Result> HandleAsync(
+        CancelReservationCommand command,
+        CancellationToken ct = default)
+    {
+        var reservation = await reservationRepository.GetByIdAsync(command.ReservationId, ct);
+        if (reservation is null)
+            return Result.Failure("Reservation not found.");
+
+        if (!string.Equals(reservation.EmployeeEmail, command.EmployeeEmail, StringComparison.OrdinalIgnoreCase))
+            return Result.Failure("You are not allowed to cancel this reservation.");
+
+        var today = DateOnly.FromDateTime(DateTime.UtcNow);
+        if (reservation.Date < today)
+            return Result.Failure("Cannot cancel a reservation for a past date.");
+
+        var result = reservation.Cancel();
+        if (!result.IsSuccess)
+            return result;
+
+        await reservationRepository.SaveChangesAsync(ct);
+        return Result.Success();
+    }
+}

src/backend/src/Randall.Application/Reservations/CreateReservation/CreateReservationCommand.cs

@@ -0,0 +1,7 @@
+namespace Randall.Application.Reservations.CreateReservation;
+
+public record CreateReservationCommand(
+    Guid WorkplaceId,
+    string EmployeeEmail,
+    string EmployeeName,
+    DateOnly Date);

src/backend/src/Randall.Application/Reservations/CreateReservation/CreateReservationHandler.cs

@@ -0,0 +1,51 @@
+using Randall.Domain.Common;
+using Randall.Domain.Reservations;
+using Randall.Domain.Workplaces;
+
+namespace Randall.Application.Reservations.CreateReservation;
+
+public class CreateReservationHandler(
+    IWorkplaceRepository workplaceRepository,
+    IReservationRepository reservationRepository)
+{
+    public async Task<Result<CreatedReservationDto>> HandleAsync(
+        CreateReservationCommand command,
+        CancellationToken ct = default)
+    {
+        var workplace = await workplaceRepository.GetByIdAsync(command.WorkplaceId, ct);
+        if (workplace is null || !workplace.IsActive)
+            return Result.Failure<CreatedReservationDto>("Workplace not found or inactive.");
+
+        var today = DateOnly.FromDateTime(DateTime.UtcNow);
+
+        var alreadyBookedByEmployee = await reservationRepository
+            .ExistsActiveForEmployeeOnDateAsync(command.EmployeeEmail, command.Date, ct);
+        if (alreadyBookedByEmployee)
+            return Result.Failure<CreatedReservationDto>("You already have a reservation on this date.");
+
+        var workplaceTaken = await reservationRepository
+            .ExistsActiveForWorkplaceOnDateAsync(command.WorkplaceId, command.Date, ct);
+        if (workplaceTaken)
+            return Result.Failure<CreatedReservationDto>("This workplace is already reserved on the requested date.");
+
+        var result = Reservation.Create(
+            command.WorkplaceId,
+            command.EmployeeEmail,
+            command.EmployeeName,
+            command.Date,
+            today);
+
+        if (!result.IsSuccess)
+            return Result.Failure<CreatedReservationDto>(result.Error!);
+
+        var reservation = result.Value!;
+        await reservationRepository.AddAsync(reservation, ct);
+        await reservationRepository.SaveChangesAsync(ct);
+
+        return Result.Success(new CreatedReservationDto(
+            reservation.Id,
+            reservation.WorkplaceId,
+            reservation.EmployeeName,
+            reservation.Date));
+    }
+}

src/backend/src/Randall.Application/Reservations/CreateReservation/CreatedReservationDto.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Reservations.CreateReservation;
+
+public record CreatedReservationDto(Guid Id, Guid WorkplaceId, string EmployeeName, DateOnly Date);

src/backend/src/Randall.Application/Reservations/GetMyReservations/GetMyReservationsHandler.cs

@@ -0,0 +1,33 @@
+using Randall.Domain.Common;
+using Randall.Domain.Reservations;
+using Randall.Domain.Workplaces;
+
+namespace Randall.Application.Reservations.GetMyReservations;
+
+public class GetMyReservationsHandler(
+    IReservationRepository reservationRepository,
+    IWorkplaceRepository workplaceRepository)
+{
+    public async Task<Result<IReadOnlyList<ReservationDto>>> HandleAsync(
+        GetMyReservationsQuery query,
+        CancellationToken ct = default)
+    {
+        var reservations = await reservationRepository.GetByEmployeeAsync(query.EmployeeEmail, ct);
+
+        var dtos = new List<ReservationDto>();
+        foreach (var r in reservations.OrderByDescending(r => r.Date))
+        {
+            var workplace = await workplaceRepository.GetByIdAsync(r.WorkplaceId, ct);
+            dtos.Add(new ReservationDto(
+                r.Id,
+                r.WorkplaceId,
+                workplace?.Name ?? "Unknown",
+                workplace?.Location ?? "Unknown",
+                r.Date,
+                r.Status,
+                r.CreatedAt));
+        }
+
+        return Result.Success<IReadOnlyList<ReservationDto>>(dtos);
+    }
+}

src/backend/src/Randall.Application/Reservations/GetMyReservations/GetMyReservationsQuery.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Reservations.GetMyReservations;
+
+public record GetMyReservationsQuery(string EmployeeEmail);

src/backend/src/Randall.Application/Reservations/GetMyReservations/ReservationDto.cs

@@ -0,0 +1,12 @@
+using Randall.Domain.Reservations;
+
+namespace Randall.Application.Reservations.GetMyReservations;
+
+public record ReservationDto(
+    Guid Id,
+    Guid WorkplaceId,
+    string WorkplaceName,
+    string WorkplaceLocation,
+    DateOnly Date,
+    ReservationStatus Status,
+    DateTime CreatedAt);

src/backend/src/Randall.Application/Reservations/GetReservationById/GetReservationByIdHandler.cs

@@ -0,0 +1,32 @@
+using Randall.Domain.Common;
+using Randall.Domain.Reservations;
+using Randall.Domain.Workplaces;
+
+namespace Randall.Application.Reservations.GetReservationById;
+
+public class GetReservationByIdHandler(
+    IReservationRepository reservationRepository,
+    IWorkplaceRepository workplaceRepository)
+{
+    public async Task<Result<ReservationDetailDto>> HandleAsync(
+        GetReservationByIdQuery query,
+        CancellationToken ct = default)
+    {
+        var reservation = await reservationRepository.GetByIdAsync(query.ReservationId, ct);
+        if (reservation is null)
+            return Result.Failure<ReservationDetailDto>("Reservation not found.");
+
+        var workplace = await workplaceRepository.GetByIdAsync(reservation.WorkplaceId, ct);
+
+        return Result.Success(new ReservationDetailDto(
+            reservation.Id,
+            reservation.WorkplaceId,
+            workplace?.Name ?? "Unknown",
+            workplace?.Location ?? "Unknown",
+            reservation.EmployeeName,
+            reservation.EmployeeEmail,
+            reservation.Date,
+            reservation.Status,
+            reservation.CreatedAt));
+    }
+}

src/backend/src/Randall.Application/Reservations/GetReservationById/GetReservationByIdQuery.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Reservations.GetReservationById;
+
+public record GetReservationByIdQuery(Guid ReservationId);

src/backend/src/Randall.Application/Reservations/GetReservationById/ReservationDetailDto.cs

@@ -0,0 +1,14 @@
+using Randall.Domain.Reservations;
+
+namespace Randall.Application.Reservations.GetReservationById;
+
+public record ReservationDetailDto(
+    Guid Id,
+    Guid WorkplaceId,
+    string WorkplaceName,
+    string WorkplaceLocation,
+    string EmployeeName,
+    string EmployeeEmail,
+    DateOnly Date,
+    ReservationStatus Status,
+    DateTime CreatedAt);

src/backend/src/Randall.Application/Workplaces/GetAllWorkplaces/GetAllWorkplacesHandler.cs

@@ -0,0 +1,19 @@
+using Randall.Domain.Common;
+using Randall.Domain.Workplaces;
+
+namespace Randall.Application.Workplaces.GetAllWorkplaces;
+
+public record WorkplaceDto(Guid Id, string Name, string Location);
+
+public class GetAllWorkplacesHandler(IWorkplaceRepository workplaceRepository)
+{
+    public async Task<Result<IReadOnlyList<WorkplaceDto>>> HandleAsync(CancellationToken ct = default)
+    {
+        var workplaces = await workplaceRepository.GetAllActiveAsync(ct);
+        var dtos = workplaces
+            .Select(w => new WorkplaceDto(w.Id, w.Name, w.Location))
+            .ToList();
+
+        return Result.Success<IReadOnlyList<WorkplaceDto>>(dtos);
+    }
+}

src/backend/src/Randall.Application/Workplaces/GetAvailableWorkplaces/AvailableWorkplaceDto.cs

@@ -0,0 +1,6 @@
+namespace Randall.Application.Workplaces.GetAvailableWorkplaces;
+
+public record AvailableWorkplaceDto(
+    Guid Id,
+    string Name,
+    string Location);

src/backend/src/Randall.Application/Workplaces/GetAvailableWorkplaces/GetAvailableWorkplacesHandler.cs

@@ -0,0 +1,36 @@
+using Randall.Domain.Common;
+using Randall.Domain.Reservations;
+using Randall.Domain.Workplaces;
+
+namespace Randall.Application.Workplaces.GetAvailableWorkplaces;
+
+public class GetAvailableWorkplacesHandler(
+    IWorkplaceRepository workplaceRepository,
+    IReservationRepository reservationRepository)
+{
+    public async Task<Result<IReadOnlyList<AvailableWorkplaceDto>>> HandleAsync(
+        GetAvailableWorkplacesQuery query,
+        CancellationToken ct = default)
+    {
+        var today = DateOnly.FromDateTime(DateTime.UtcNow);
+
+        if (query.Date < today)
+            return Result.Failure<IReadOnlyList<AvailableWorkplaceDto>>("Date cannot be in the past.");
+
+        if (query.Date > today.AddDays(Reservation.MaxAdvanceDays))
+            return Result.Failure<IReadOnlyList<AvailableWorkplaceDto>>(
+                $"Date cannot be more than {Reservation.MaxAdvanceDays} days in advance.");
+
+        var workplaces = await workplaceRepository.GetAllActiveAsync(ct);
+
+        var available = new List<AvailableWorkplaceDto>();
+        foreach (var workplace in workplaces)
+        {
+            var isTaken = await reservationRepository.ExistsActiveForWorkplaceOnDateAsync(workplace.Id, query.Date, ct);
+            if (!isTaken)
+                available.Add(new AvailableWorkplaceDto(workplace.Id, workplace.Name, workplace.Location));
+        }
+
+        return Result.Success<IReadOnlyList<AvailableWorkplaceDto>>(available);
+    }
+}

src/backend/src/Randall.Application/Workplaces/GetAvailableWorkplaces/GetAvailableWorkplacesQuery.cs

@@ -0,0 +1,3 @@
+namespace Randall.Application.Workplaces.GetAvailableWorkplaces;
+
+public record GetAvailableWorkplacesQuery(DateOnly Date);

src/backend/src/Randall.Application/Workplaces/GetWorkplaceSchedule/GetWorkplaceScheduleHandler.cs

@@ -0,0 +1,42 @@
+using Randall.Domain.Common;
+using Randall.Domain.Reservations;
+using Randall.Domain.Workplaces;
+
+namespace Randall.Application.Workplaces.GetWorkplaceSchedule;
+
+public class GetWorkplaceScheduleHandler(
+    IWorkplaceRepository workplaceRepository,
+    IReservationRepository reservationRepository)
+{
+    public async Task<Result<IReadOnlyList<WorkplaceScheduleDto>>> HandleAsync(
+        DateOnly date,
+        CancellationToken ct = default)
+    {
+        var today = DateOnly.FromDateTime(DateTime.UtcNow);
+
+        if (date < today)
+            return Result.Failure<IReadOnlyList<WorkplaceScheduleDto>>("Date cannot be in the past.");
+
+        if (date > today.AddDays(Reservation.MaxAdvanceDays))
+            return Result.Failure<IReadOnlyList<WorkplaceScheduleDto>>(
+                $"Date cannot be more than {Reservation.MaxAdvanceDays} days in advance.");
+
+        var workplaces = await workplaceRepository.GetAllActiveAsync(ct);
+        var reservations = await reservationRepository.GetActiveReservationsForDateAsync(date, ct);
+
+        var reservationByWorkplace = reservations.ToDictionary(r => r.WorkplaceId);
+
+        var schedule = workplaces.Select(w =>
+        {
+            var hasReservation = reservationByWorkplace.TryGetValue(w.Id, out var reservation);
+            return new WorkplaceScheduleDto(
+                w.Id,
+                w.Name,
+                w.Location,
+                IsAvailable: !hasReservation,
+                ReservedBy: hasReservation ? reservation!.EmployeeName : null);
+        }).ToList();
+
+        return Result.Success<IReadOnlyList<WorkplaceScheduleDto>>(schedule);
+    }
+}

src/backend/src/Randall.Application/Workplaces/GetWorkplaceSchedule/WorkplaceScheduleDto.cs

@@ -0,0 +1,8 @@
+namespace Randall.Application.Workplaces.GetWorkplaceSchedule;
+
+public record WorkplaceScheduleDto(
+    Guid Id,
+    string Name,
+    string Location,
+    bool IsAvailable,
+    string? ReservedBy);

src/backend/src/Randall.Domain/Common/Entity.cs

@@ -0,0 +1,9 @@
+namespace Randall.Domain.Common;
+
+public abstract class Entity
+{
+    public Guid Id { get; protected set; }
+
+    protected Entity() => Id = Guid.NewGuid();
+    protected Entity(Guid id) => Id = id;
+}

src/backend/src/Randall.Domain/Common/Result.cs

@@ -0,0 +1,33 @@
+namespace Randall.Domain.Common;
+
+public class Result
+{
+    public bool IsSuccess { get; }
+    public string? Error { get; }
+
+    protected Result(bool isSuccess, string? error)
+    {
+        IsSuccess = isSuccess;
+        Error = error;
+    }
+
+    public static Result Success() => new(true, null);
+    public static Result Failure(string error) => new(false, error);
+
+    public static Result<T> Success<T>(T value) => Result<T>.Ok(value);
+    public static Result<T> Failure<T>(string error) => Result<T>.Fail(error);
+}
+
+public class Result<T> : Result
+{
+    public T? Value { get; }
+
+    private Result(bool isSuccess, T? value, string? error)
+        : base(isSuccess, error)
+    {
+        Value = value;
+    }
+
+    public static Result<T> Ok(T value) => new(true, value, null);
+    public static Result<T> Fail(string error) => new(false, default, error);
+}

src/backend/src/Randall.Domain/Randall.Domain.csproj

@@ -0,0 +1,9 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+  </PropertyGroup>
+
+</Project>

src/backend/src/Randall.Domain/Reservations/IReservationRepository.cs

@@ -0,0 +1,13 @@
+namespace Randall.Domain.Reservations;
+
+public interface IReservationRepository
+{
+    Task<Reservation?> GetByIdAsync(Guid id, CancellationToken ct = default);
+    Task<IReadOnlyList<Reservation>> GetByEmployeeAsync(string employeeEmail, CancellationToken ct = default);
+    Task<IReadOnlyList<Reservation>> GetByWorkplaceAndDateAsync(Guid workplaceId, DateOnly date, CancellationToken ct = default);
+    Task<IReadOnlyList<Reservation>> GetActiveReservationsForDateAsync(DateOnly date, CancellationToken ct = default);
+    Task<bool> ExistsActiveForEmployeeOnDateAsync(string employeeEmail, DateOnly date, CancellationToken ct = default);
+    Task<bool> ExistsActiveForWorkplaceOnDateAsync(Guid workplaceId, DateOnly date, CancellationToken ct = default);
+    Task AddAsync(Reservation reservation, CancellationToken ct = default);
+    Task SaveChangesAsync(CancellationToken ct = default);
+}

src/backend/src/Randall.Domain/Reservations/Reservation.cs

@@ -0,0 +1,58 @@
+using Randall.Domain.Common;
+
+namespace Randall.Domain.Reservations;
+
+public class Reservation : Entity
+{
+    public static readonly int MaxAdvanceDays = 14;
+
+    public Guid WorkplaceId { get; private set; }
+    public string EmployeeEmail { get; private set; }
+    public string EmployeeName { get; private set; }
+    public DateOnly Date { get; private set; }
+    public ReservationStatus Status { get; private set; }
+    public DateTime CreatedAt { get; private set; }
+
+    // EF Core constructor
+    private Reservation() : base()
+    {
+        EmployeeEmail = string.Empty;
+        EmployeeName = string.Empty;
+    }
+
+    private Reservation(Guid workplaceId, string employeeEmail, string employeeName, DateOnly date)
+        : base()
+    {
+        WorkplaceId = workplaceId;
+        EmployeeEmail = employeeEmail;
+        EmployeeName = employeeName;
+        Date = date;
+        Status = ReservationStatus.Active;
+        CreatedAt = DateTime.UtcNow;
+    }
+
+    public static Result<Reservation> Create(
+        Guid workplaceId,
+        string employeeEmail,
+        string employeeName,
+        DateOnly date,
+        DateOnly today)
+    {
+        if (date < today)
+            return Result.Failure<Reservation>("Cannot reserve a workplace in the past.");
+
+        if (date > today.AddDays(MaxAdvanceDays))
+            return Result.Failure<Reservation>($"Cannot reserve more than {MaxAdvanceDays} days in advance.");
+
+        return Result.Success(new Reservation(workplaceId, employeeEmail, employeeName, date));
+    }
+
+    public Result Cancel()
+    {
+        if (Status == ReservationStatus.Cancelled)
+            return Result.Failure("Reservation is already cancelled.");
+
+        Status = ReservationStatus.Cancelled;
+        return Result.Success();
+    }
+}

src/backend/src/Randall.Domain/Reservations/ReservationStatus.cs

@@ -0,0 +1,7 @@
+namespace Randall.Domain.Reservations;
+
+public enum ReservationStatus
+{
+    Active,
+    Cancelled
+}

src/backend/src/Randall.Domain/Users/IUserRepository.cs

@@ -0,0 +1,14 @@
+namespace Randall.Domain.Users;
+
+public interface IUserRepository
+{
+    Task<User?> GetByEmailAsync(string email, CancellationToken ct = default);
+    Task<User?> GetByIdAsync(Guid id, CancellationToken ct = default);
+    Task<bool> ExistsByEmailAsync(string email, CancellationToken ct = default);
+    Task<List<User>> GetPendingAsync(CancellationToken ct = default);
+    Task<List<User>> GetAllAsync(CancellationToken ct = default);
+    Task<List<User>> GetAllNonAdminAsync(CancellationToken ct = default);
+    Task AddAsync(User user, CancellationToken ct = default);
+    void Delete(User user);
+    Task SaveChangesAsync(CancellationToken ct = default);
+}

src/backend/src/Randall.Domain/Users/User.cs

@@ -0,0 +1,47 @@
+using Randall.Domain.Common;
+
+namespace Randall.Domain.Users;
+
+public class User : Entity
+{
+    public string Email { get; private set; }
+    public string Name { get; private set; }
+    public string PasswordHash { get; private set; }
+    public bool IsApproved { get; private set; }
+    public bool IsAdmin { get; private set; }
+
+    private User() : base()
+    {
+        Email = string.Empty;
+        Name = string.Empty;
+        PasswordHash = string.Empty;
+    }
+
+    private User(string email, string name, string passwordHash, bool isAdmin) : base()
+    {
+        Email = email;
+        Name = name;
+        PasswordHash = passwordHash;
+        IsAdmin = isAdmin;
+        IsApproved = isAdmin; // admins are auto-approved
+    }
+
+    public static Result<User> Create(string email, string name, string passwordHash, bool isAdmin = false)
+    {
+        if (string.IsNullOrWhiteSpace(email))
+            return Result.Failure<User>("Email is required.");
+
+        if (string.IsNullOrWhiteSpace(name))
+            return Result.Failure<User>("Name is required.");
+
+        return Result.Success(new User(email.ToLowerInvariant(), name.Trim(), passwordHash, isAdmin));
+    }
+
+    public void Approve() => IsApproved = true;
+
+    public void MakeAdmin()
+    {
+        IsAdmin = true;
+        IsApproved = true;
+    }
+}

src/backend/src/Randall.Domain/Workplaces/IWorkplaceRepository.cs

@@ -0,0 +1,7 @@
+namespace Randall.Domain.Workplaces;
+
+public interface IWorkplaceRepository
+{
+    Task<Workplace?> GetByIdAsync(Guid id, CancellationToken ct = default);
+    Task<IReadOnlyList<Workplace>> GetAllActiveAsync(CancellationToken ct = default);
+}

src/backend/src/Randall.Domain/Workplaces/Workplace.cs

@@ -0,0 +1,26 @@
+using Randall.Domain.Common;
+
+namespace Randall.Domain.Workplaces;
+
+public class Workplace : Entity
+{
+    public string Name { get; private set; }
+    public string Location { get; private set; }
+    public bool IsActive { get; private set; }
+
+    private Workplace() : base()
+    {
+        Name = string.Empty;
+        Location = string.Empty;
+    }
+
+    public Workplace(string name, string location) : base()
+    {
+        Name = name;
+        Location = location;
+        IsActive = true;
+    }
+
+    public void Deactivate() => IsActive = false;
+    public void Activate() => IsActive = true;
+}

src/backend/src/Randall.Infrastructure/DependencyInjection.cs

@@ -0,0 +1,34 @@
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Randall.Application.Common;
+using Randall.Domain.Reservations;
+using Randall.Domain.Users;
+using Randall.Domain.Workplaces;
+using Randall.Infrastructure.Persistence;
+using Randall.Infrastructure.Persistence.Reservations;
+using Randall.Infrastructure.Persistence.Users;
+using Randall.Infrastructure.Persistence.Workplaces;
+using Randall.Infrastructure.Security;
+
+namespace Randall.Infrastructure;
+
+public static class DependencyInjection
+{
+    public static IServiceCollection AddInfrastructure(
+        this IServiceCollection services,
+        IConfiguration configuration)
+    {
+        services.AddDbContext<AppDbContext>(options =>
+            options.UseSqlite(configuration.GetConnectionString("DefaultConnection")));
+
+        services.AddScoped<IWorkplaceRepository, WorkplaceRepository>();
+        services.AddScoped<IReservationRepository, ReservationRepository>();
+        services.AddScoped<IUserRepository, UserRepository>();
+
+        services.AddSingleton<IPasswordHasher, PasswordHasher>();
+        services.AddSingleton<IJwtTokenService, JwtTokenService>();
+
+        return services;
+    }
+}

src/backend/src/Randall.Infrastructure/Migrations/20260321184811_InitialCreate.Designer.cs

@@ -0,0 +1,86 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Randall.Infrastructure.Persistence;
+
+#nullable disable
+
+namespace Randall.Infrastructure.Migrations
+{
+    [DbContext(typeof(AppDbContext))]
+    [Migration("20260321184811_InitialCreate")]
+    partial class InitialCreate
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder.HasAnnotation("ProductVersion", "10.0.5");
+
+            modelBuilder.Entity("Randall.Domain.Reservations.Reservation", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("TEXT");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("TEXT");
+
+                    b.Property<DateOnly>("Date")
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("EmployeeEmail")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("EmployeeName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<int>("Status")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<Guid>("WorkplaceId")
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeEmail", "Date");
+
+                    b.HasIndex("WorkplaceId", "Date");
+
+                    b.ToTable("Reservations");
+                });
+
+            modelBuilder.Entity("Randall.Domain.Workplaces.Workplace", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("TEXT");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<string>("Location")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Workplaces");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}

src/backend/src/Randall.Infrastructure/Migrations/20260321184811_InitialCreate.cs

@@ -0,0 +1,66 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Randall.Infrastructure.Migrations
+{
+    /// <inheritdoc />
+    public partial class InitialCreate : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "Reservations",
+                columns: table => new
+                {
+                    Id = table.Column<Guid>(type: "TEXT", nullable: false),
+                    WorkplaceId = table.Column<Guid>(type: "TEXT", nullable: false),
+                    EmployeeEmail = table.Column<string>(type: "TEXT", maxLength: 200, nullable: false),
+                    EmployeeName = table.Column<string>(type: "TEXT", maxLength: 200, nullable: false),
+                    Date = table.Column<DateOnly>(type: "TEXT", nullable: false),
+                    Status = table.Column<int>(type: "INTEGER", nullable: false),
+                    CreatedAt = table.Column<DateTime>(type: "TEXT", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_Reservations", x => x.Id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "Workplaces",
+                columns: table => new
+                {
+                    Id = table.Column<Guid>(type: "TEXT", nullable: false),
+                    Name = table.Column<string>(type: "TEXT", maxLength: 100, nullable: false),
+                    Location = table.Column<string>(type: "TEXT", maxLength: 200, nullable: false),
+                    IsActive = table.Column<bool>(type: "INTEGER", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_Workplaces", x => x.Id);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Reservations_EmployeeEmail_Date",
+                table: "Reservations",
+                columns: new[] { "EmployeeEmail", "Date" });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Reservations_WorkplaceId_Date",
+                table: "Reservations",
+                columns: new[] { "WorkplaceId", "Date" });
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "Reservations");
+
+            migrationBuilder.DropTable(
+                name: "Workplaces");
+        }
+    }
+}

src/backend/src/Randall.Infrastructure/Migrations/20260321191704_AddUsers.Designer.cs

@@ -0,0 +1,114 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Randall.Infrastructure.Persistence;
+
+#nullable disable
+
+namespace Randall.Infrastructure.Migrations
+{
+    [DbContext(typeof(AppDbContext))]
+    [Migration("20260321191704_AddUsers")]
+    partial class AddUsers
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder.HasAnnotation("ProductVersion", "10.0.5");
+
+            modelBuilder.Entity("Randall.Domain.Reservations.Reservation", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("TEXT");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("TEXT");
+
+                    b.Property<DateOnly>("Date")
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("EmployeeEmail")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("EmployeeName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<int>("Status")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<Guid>("WorkplaceId")
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeEmail", "Date");
+
+                    b.HasIndex("WorkplaceId", "Date");
+
+                    b.ToTable("Reservations");
+                });
+
+            modelBuilder.Entity("Randall.Domain.Users.User", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("PasswordHash")
+                        .IsRequired()
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Email")
+                        .IsUnique();
+
+                    b.ToTable("Users");
+                });
+
+            modelBuilder.Entity("Randall.Domain.Workplaces.Workplace", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("TEXT");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<string>("Location")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Workplaces");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}

src/backend/src/Randall.Infrastructure/Migrations/20260321191704_AddUsers.cs

@@ -0,0 +1,42 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Randall.Infrastructure.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddUsers : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "Users",
+                columns: table => new
+                {
+                    Id = table.Column<Guid>(type: "TEXT", nullable: false),
+                    Email = table.Column<string>(type: "TEXT", maxLength: 200, nullable: false),
+                    Name = table.Column<string>(type: "TEXT", maxLength: 200, nullable: false),
+                    PasswordHash = table.Column<string>(type: "TEXT", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_Users", x => x.Id);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Users_Email",
+                table: "Users",
+                column: "Email",
+                unique: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "Users");
+        }
+    }
+}

src/backend/src/Randall.Infrastructure/Migrations/20260323120000_AddUserApproval.Designer.cs

@@ -0,0 +1,120 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Randall.Infrastructure.Persistence;
+
+#nullable disable
+
+namespace Randall.Infrastructure.Migrations
+{
+    [DbContext(typeof(AppDbContext))]
+    [Migration("20260323120000_AddUserApproval")]
+    partial class AddUserApproval
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder.HasAnnotation("ProductVersion", "10.0.5");
+
+            modelBuilder.Entity("Randall.Domain.Reservations.Reservation", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("TEXT");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("TEXT");
+
+                    b.Property<DateOnly>("Date")
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("EmployeeEmail")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("EmployeeName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<int>("Status")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<Guid>("WorkplaceId")
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeEmail", "Date");
+
+                    b.HasIndex("WorkplaceId", "Date");
+
+                    b.ToTable("Reservations");
+                });
+
+            modelBuilder.Entity("Randall.Domain.Users.User", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<bool>("IsAdmin")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<bool>("IsApproved")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("PasswordHash")
+                        .IsRequired()
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Email")
+                        .IsUnique();
+
+                    b.ToTable("Users");
+                });
+
+            modelBuilder.Entity("Randall.Domain.Workplaces.Workplace", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("TEXT");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<string>("Location")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Workplaces");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}

src/backend/src/Randall.Infrastructure/Migrations/20260323120000_AddUserApproval.cs

@@ -0,0 +1,35 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Randall.Infrastructure.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddUserApproval : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<bool>(
+                name: "IsAdmin",
+                table: "Users",
+                type: "INTEGER",
+                nullable: false,
+                defaultValue: false);
+
+            migrationBuilder.AddColumn<bool>(
+                name: "IsApproved",
+                table: "Users",
+                type: "INTEGER",
+                nullable: false,
+                defaultValue: false);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(name: "IsAdmin", table: "Users");
+            migrationBuilder.DropColumn(name: "IsApproved", table: "Users");
+        }
+    }
+}

src/backend/src/Randall.Infrastructure/Migrations/AppDbContextModelSnapshot.cs

@@ -0,0 +1,117 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Randall.Infrastructure.Persistence;
+
+#nullable disable
+
+namespace Randall.Infrastructure.Migrations
+{
+    [DbContext(typeof(AppDbContext))]
+    partial class AppDbContextModelSnapshot : ModelSnapshot
+    {
+        protected override void BuildModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder.HasAnnotation("ProductVersion", "10.0.5");
+
+            modelBuilder.Entity("Randall.Domain.Reservations.Reservation", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("TEXT");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("TEXT");
+
+                    b.Property<DateOnly>("Date")
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("EmployeeEmail")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("EmployeeName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<int>("Status")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<Guid>("WorkplaceId")
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("EmployeeEmail", "Date");
+
+                    b.HasIndex("WorkplaceId", "Date");
+
+                    b.ToTable("Reservations");
+                });
+
+            modelBuilder.Entity("Randall.Domain.Users.User", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<bool>("IsAdmin")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<bool>("IsApproved")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("PasswordHash")
+                        .IsRequired()
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("Email")
+                        .IsUnique();
+
+                    b.ToTable("Users");
+                });
+
+            modelBuilder.Entity("Randall.Domain.Workplaces.Workplace", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("TEXT");
+
+                    b.Property<bool>("IsActive")
+                        .HasColumnType("INTEGER");
+
+                    b.Property<string>("Location")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("TEXT");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("TEXT");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("Workplaces");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}

src/backend/src/Randall.Infrastructure/Persistence/AppDbContext.cs

@@ -0,0 +1,49 @@
+using Microsoft.EntityFrameworkCore;
+using Randall.Domain.Reservations;
+using Randall.Domain.Users;
+using Randall.Domain.Workplaces;
+
+namespace Randall.Infrastructure.Persistence;
+
+public class AppDbContext(DbContextOptions<AppDbContext> options) : DbContext(options)
+{
+    public DbSet<Workplace> Workplaces => Set<Workplace>();
+    public DbSet<Reservation> Reservations => Set<Reservation>();
+    public DbSet<User> Users => Set<User>();
+
+    protected override void OnModelCreating(ModelBuilder modelBuilder)
+    {
+        modelBuilder.Entity<Workplace>(entity =>
+        {
+            entity.HasKey(w => w.Id);
+            entity.Property(w => w.Name).IsRequired().HasMaxLength(100);
+            entity.Property(w => w.Location).IsRequired().HasMaxLength(200);
+            entity.Property(w => w.IsActive).IsRequired();
+        });
+
+        modelBuilder.Entity<Reservation>(entity =>
+        {
+            entity.HasKey(r => r.Id);
+            entity.Property(r => r.WorkplaceId).IsRequired();
+            entity.Property(r => r.EmployeeEmail).IsRequired().HasMaxLength(200);
+            entity.Property(r => r.EmployeeName).IsRequired().HasMaxLength(200);
+            entity.Property(r => r.Date).IsRequired();
+            entity.Property(r => r.Status).IsRequired();
+            entity.Property(r => r.CreatedAt).IsRequired();
+
+            entity.HasIndex(r => new { r.WorkplaceId, r.Date });
+            entity.HasIndex(r => new { r.EmployeeEmail, r.Date });
+        });
+
+        modelBuilder.Entity<User>(entity =>
+        {
+            entity.HasKey(u => u.Id);
+            entity.Property(u => u.Email).IsRequired().HasMaxLength(200);
+            entity.Property(u => u.Name).IsRequired().HasMaxLength(200);
+            entity.Property(u => u.PasswordHash).IsRequired();
+            entity.Property(u => u.IsApproved).IsRequired();
+            entity.Property(u => u.IsAdmin).IsRequired();
+            entity.HasIndex(u => u.Email).IsUnique();
+        });
+    }
+}

src/backend/src/Randall.Infrastructure/Persistence/Reservations/ReservationRepository.cs

@@ -0,0 +1,49 @@
+using Microsoft.EntityFrameworkCore;
+using Randall.Domain.Reservations;
+
+namespace Randall.Infrastructure.Persistence.Reservations;
+
+public class ReservationRepository(AppDbContext context) : IReservationRepository
+{
+    public Task<Reservation?> GetByIdAsync(Guid id, CancellationToken ct = default) =>
+        context.Reservations.FirstOrDefaultAsync(r => r.Id == id, ct);
+
+    public async Task<IReadOnlyList<Reservation>> GetByEmployeeAsync(string employeeEmail, CancellationToken ct = default) =>
+        await context.Reservations
+            .Where(r => r.EmployeeEmail.ToLower() == employeeEmail.ToLower())
+            .ToListAsync(ct);
+
+    public async Task<IReadOnlyList<Reservation>> GetByWorkplaceAndDateAsync(
+        Guid workplaceId, DateOnly date, CancellationToken ct = default) =>
+        await context.Reservations
+            .Where(r => r.WorkplaceId == workplaceId && r.Date == date)
+            .ToListAsync(ct);
+
+    public Task<bool> ExistsActiveForEmployeeOnDateAsync(
+        string employeeEmail, DateOnly date, CancellationToken ct = default) =>
+        context.Reservations.AnyAsync(
+            r => r.EmployeeEmail.ToLower() == employeeEmail.ToLower()
+              && r.Date == date
+              && r.Status == ReservationStatus.Active,
+            ct);
+
+    public Task<bool> ExistsActiveForWorkplaceOnDateAsync(
+        Guid workplaceId, DateOnly date, CancellationToken ct = default) =>
+        context.Reservations.AnyAsync(
+            r => r.WorkplaceId == workplaceId
+              && r.Date == date
+              && r.Status == ReservationStatus.Active,
+            ct);
+
+    public async Task<IReadOnlyList<Reservation>> GetActiveReservationsForDateAsync(
+        DateOnly date, CancellationToken ct = default) =>
+        await context.Reservations
+            .Where(r => r.Date == date && r.Status == ReservationStatus.Active)
+            .ToListAsync(ct);
+
+    public async Task AddAsync(Reservation reservation, CancellationToken ct = default) =>
+        await context.Reservations.AddAsync(reservation, ct);
+
+    public Task SaveChangesAsync(CancellationToken ct = default) =>
+        context.SaveChangesAsync(ct);
+}

src/backend/src/Randall.Infrastructure/Persistence/Seeding/DatabaseSeeder.cs

@@ -0,0 +1,50 @@
+using Microsoft.EntityFrameworkCore;
+using Randall.Application.Common;
+using Randall.Domain.Users;
+using Randall.Domain.Workplaces;
+
+namespace Randall.Infrastructure.Persistence.Seeding;
+
+public static class DatabaseSeeder
+{
+    private static readonly (string Name, string Location)[] ExpectedWorkplaces =
+    [
+        ("D13", "Pod A"), ("D14", "Pod A"), ("D15", "Pod A"), ("D16", "Pod A"),
+        ("D9",  "Pod A"), ("D10", "Pod A"), ("D11", "Pod A"), ("D12", "Pod A"),
+        ("D5",  "Pod B"), ("D6",  "Pod B"), ("D7",  "Pod B"), ("D8",  "Pod B"),
+        ("D1",  "Pod B"), ("D2",  "Pod B"), ("D3",  "Pod B"), ("D4",  "Pod B"),
+    ];
+
+    private const string AdminEmail = "admin@randall.local";
+    private const string AdminPassword = "Admin@123";
+
+    public static async Task SeedAsync(AppDbContext context, IPasswordHasher passwordHasher)
+    {
+        await context.Database.MigrateAsync();
+
+        // Seed workplaces
+        var existing = await context.Workplaces.ToListAsync();
+        var expectedSet = ExpectedWorkplaces.Select(w => w.Name + w.Location).ToHashSet();
+        var existingSet = existing.Select(w => w.Name + w.Location).ToHashSet();
+
+        if (!expectedSet.SetEquals(existingSet))
+        {
+            context.Workplaces.RemoveRange(existing);
+            await context.SaveChangesAsync();
+
+            var workplaces = ExpectedWorkplaces.Select(w => new Workplace(w.Name, w.Location));
+            context.Workplaces.AddRange(workplaces);
+            await context.SaveChangesAsync();
+        }
+
+        // Seed admin user
+        var adminExists = await context.Users.AnyAsync(u => u.Email == AdminEmail);
+        if (!adminExists)
+        {
+            var hash = passwordHasher.Hash(AdminPassword);
+            var admin = User.Create(AdminEmail, "Admin", hash, isAdmin: true).Value!;
+            context.Users.Add(admin);
+            await context.SaveChangesAsync();
+        }
+    }
+}

src/backend/src/Randall.Infrastructure/Persistence/Users/UserRepository.cs

@@ -0,0 +1,34 @@
+using Microsoft.EntityFrameworkCore;
+using Randall.Domain.Users;
+
+namespace Randall.Infrastructure.Persistence.Users;
+
+public class UserRepository(AppDbContext context) : IUserRepository
+{
+    public Task<User?> GetByEmailAsync(string email, CancellationToken ct = default) =>
+        context.Users.FirstOrDefaultAsync(u => u.Email == email.ToLowerInvariant(), ct);
+
+    public Task<User?> GetByIdAsync(Guid id, CancellationToken ct = default) =>
+        context.Users.FirstOrDefaultAsync(u => u.Id == id, ct);
+
+    public Task<bool> ExistsByEmailAsync(string email, CancellationToken ct = default) =>
+        context.Users.AnyAsync(u => u.Email == email.ToLowerInvariant(), ct);
+
+    public Task<List<User>> GetPendingAsync(CancellationToken ct = default) =>
+        context.Users.Where(u => !u.IsApproved && !u.IsAdmin).ToListAsync(ct);
+
+    public Task<List<User>> GetAllAsync(CancellationToken ct = default) =>
+        context.Users.OrderBy(u => u.Name).ToListAsync(ct);
+
+    public Task<List<User>> GetAllNonAdminAsync(CancellationToken ct = default) =>
+        context.Users.Where(u => !u.IsAdmin).OrderBy(u => u.Name).ToListAsync(ct);
+
+    public async Task AddAsync(User user, CancellationToken ct = default) =>
+        await context.Users.AddAsync(user, ct);
+
+    public void Delete(User user) =>
+        context.Users.Remove(user);
+
+    public Task SaveChangesAsync(CancellationToken ct = default) =>
+        context.SaveChangesAsync(ct);
+}

src/backend/src/Randall.Infrastructure/Persistence/Workplaces/WorkplaceRepository.cs

@@ -0,0 +1,13 @@
+using Microsoft.EntityFrameworkCore;
+using Randall.Domain.Workplaces;
+
+namespace Randall.Infrastructure.Persistence.Workplaces;
+
+public class WorkplaceRepository(AppDbContext context) : IWorkplaceRepository
+{
+    public Task<Workplace?> GetByIdAsync(Guid id, CancellationToken ct = default) =>
+        context.Workplaces.FirstOrDefaultAsync(w => w.Id == id, ct);
+
+    public async Task<IReadOnlyList<Workplace>> GetAllActiveAsync(CancellationToken ct = default) =>
+        await context.Workplaces.Where(w => w.IsActive).ToListAsync(ct);
+}

src/backend/src/Randall.Infrastructure/Randall.Infrastructure.csproj

@@ -0,0 +1,23 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\Randall.Domain\Randall.Domain.csproj" />
+    <ProjectReference Include="..\Randall.Application\Randall.Application.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.5">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.5" />
+    <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.16.0" />
+  </ItemGroup>
+
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+  </PropertyGroup>
+
+</Project>

src/backend/src/Randall.Infrastructure/Security/JwtTokenService.cs

@@ -0,0 +1,35 @@
+using System.IdentityModel.Tokens.Jwt;
+using System.Security.Claims;
+using System.Text;
+using Microsoft.Extensions.Configuration;
+using Microsoft.IdentityModel.Tokens;
+using Randall.Application.Common;
+
+namespace Randall.Infrastructure.Security;
+
+public class JwtTokenService(IConfiguration configuration) : IJwtTokenService
+{
+    public string GenerateToken(Guid userId, string email, string name, bool isAdmin)
+    {
+        var key = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(configuration["Jwt:Key"]!));
+        var credentials = new SigningCredentials(key, SecurityAlgorithms.HmacSha256);
+
+        var claims = new[]
+        {
+            new Claim(JwtRegisteredClaimNames.Sub, userId.ToString()),
+            new Claim(JwtRegisteredClaimNames.Email, email),
+            new Claim(JwtRegisteredClaimNames.Name, name),
+            new Claim(JwtRegisteredClaimNames.Jti, Guid.NewGuid().ToString()),
+            new Claim("isAdmin", isAdmin ? "true" : "false"),
+        };
+
+        var token = new JwtSecurityToken(
+            issuer: configuration["Jwt:Issuer"],
+            audience: configuration["Jwt:Audience"],
+            claims: claims,
+            expires: DateTime.UtcNow.AddDays(7),
+            signingCredentials: credentials);
+
+        return new JwtSecurityTokenHandler().WriteToken(token);
+    }
+}

src/backend/src/Randall.Infrastructure/Security/PasswordHasher.cs

@@ -0,0 +1,29 @@
+using System.Security.Cryptography;
+using Randall.Application.Common;
+
+namespace Randall.Infrastructure.Security;
+
+public class PasswordHasher : IPasswordHasher
+{
+    private const int Iterations = 100_000;
+    private const int HashSize = 32;
+    private const int SaltSize = 16;
+
+    public string Hash(string password)
+    {
+        var salt = RandomNumberGenerator.GetBytes(SaltSize);
+        var hash = Rfc2898DeriveBytes.Pbkdf2(password, salt, Iterations, HashAlgorithmName.SHA256, HashSize);
+        return $"{Convert.ToBase64String(salt)}:{Convert.ToBase64String(hash)}";
+    }
+
+    public bool Verify(string password, string hashedPassword)
+    {
+        var parts = hashedPassword.Split(':');
+        if (parts.Length != 2) return false;
+
+        var salt = Convert.FromBase64String(parts[0]);
+        var storedHash = Convert.FromBase64String(parts[1]);
+        var hash = Rfc2898DeriveBytes.Pbkdf2(password, salt, Iterations, HashAlgorithmName.SHA256, HashSize);
+        return CryptographicOperations.FixedTimeEquals(hash, storedHash);
+    }
+}

src/frontend/.gitignore

@@ -0,0 +1,24 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+node_modules
+dist
+dist-ssr
+*.local
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?

src/frontend/README.md

@@ -0,0 +1,73 @@
+# React + TypeScript + Vite
+
+This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
+
+Currently, two official plugins are available:
+
+- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react) uses [Oxc](https://oxc.rs)
+- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc) uses [SWC](https://swc.rs/)
+
+## React Compiler
+
+The React Compiler is not enabled on this template because of its impact on dev & build performances. To add it, see [this documentation](https://react.dev/learn/react-compiler/installation).
+
+## Expanding the ESLint configuration
+
+If you are developing a production application, we recommend updating the configuration to enable type-aware lint rules:
+
+```js
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{ts,tsx}'],
+    extends: [
+      // Other configs...
+
+      // Remove tseslint.configs.recommended and replace with this
+      tseslint.configs.recommendedTypeChecked,
+      // Alternatively, use this for stricter rules
+      tseslint.configs.strictTypeChecked,
+      // Optionally, add this for stylistic rules
+      tseslint.configs.stylisticTypeChecked,
+
+      // Other configs...
+    ],
+    languageOptions: {
+      parserOptions: {
+        project: ['./tsconfig.node.json', './tsconfig.app.json'],
+        tsconfigRootDir: import.meta.dirname,
+      },
+      // other options...
+    },
+  },
+])
+```
+
+You can also install [eslint-plugin-react-x](https://github.com/Rel1cx/eslint-react/tree/main/packages/plugins/eslint-plugin-react-x) and [eslint-plugin-react-dom](https://github.com/Rel1cx/eslint-react/tree/main/packages/plugins/eslint-plugin-react-dom) for React-specific lint rules:
+
+```js
+// eslint.config.js
+import reactX from 'eslint-plugin-react-x'
+import reactDom from 'eslint-plugin-react-dom'
+
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{ts,tsx}'],
+    extends: [
+      // Other configs...
+      // Enable lint rules for React
+      reactX.configs['recommended-typescript'],
+      // Enable lint rules for React DOM
+      reactDom.configs.recommended,
+    ],
+    languageOptions: {
+      parserOptions: {
+        project: ['./tsconfig.node.json', './tsconfig.app.json'],
+        tsconfigRootDir: import.meta.dirname,
+      },
+      // other options...
+    },
+  },
+])
+```

src/frontend/eslint.config.js

@@ -0,0 +1,23 @@
+import js from '@eslint/js'
+import globals from 'globals'
+import reactHooks from 'eslint-plugin-react-hooks'
+import reactRefresh from 'eslint-plugin-react-refresh'
+import tseslint from 'typescript-eslint'
+import { defineConfig, globalIgnores } from 'eslint/config'
+
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{ts,tsx}'],
+    extends: [
+      js.configs.recommended,
+      tseslint.configs.recommended,
+      reactHooks.configs.flat.recommended,
+      reactRefresh.configs.vite,
+    ],
+    languageOptions: {
+      ecmaVersion: 2020,
+      globals: globals.browser,
+    },
+  },
+])

src/frontend/index.html

@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>frontend</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>

src/frontend/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "frontend",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc -b && vite build",
+    "lint": "eslint .",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "react-router-dom": "^7.13.1"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.39.4",
+    "@tailwindcss/vite": "^4.2.2",
+    "@types/node": "^24.12.0",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^6.0.1",
+    "eslint": "^9.39.4",
+    "eslint-plugin-react-hooks": "^7.0.1",
+    "eslint-plugin-react-refresh": "^0.5.2",
+    "globals": "^17.4.0",
+    "tailwindcss": "^4.2.2",
+    "typescript": "~5.9.3",
+    "typescript-eslint": "^8.57.0",
+    "vite": "^8.0.1"
+  }
+}

src/frontend/public/icons.svg

@@ -0,0 +1,24 @@
+<svg xmlns="http://www.w3.org/2000/svg">
+  <symbol id="bluesky-icon" viewBox="0 0 16 17">
+    <g clip-path="url(#bluesky-clip)"><path fill="#08060d" d="M7.75 7.735c-.693-1.348-2.58-3.86-4.334-5.097-1.68-1.187-2.32-.981-2.74-.79C.188 2.065.1 2.812.1 3.251s.241 3.602.398 4.13c.52 1.744 2.367 2.333 4.07 2.145-2.495.37-4.71 1.278-1.805 4.512 3.196 3.309 4.38-.71 4.987-2.746.608 2.036 1.307 5.91 4.93 2.746 2.72-2.746.747-4.143-1.747-4.512 1.702.189 3.55-.4 4.07-2.145.156-.528.397-3.691.397-4.13s-.088-1.186-.575-1.406c-.42-.19-1.06-.395-2.741.79-1.755 1.24-3.64 3.752-4.334 5.099"/></g>
+    <defs><clipPath id="bluesky-clip"><path fill="#fff" d="M.1.85h15.3v15.3H.1z"/></clipPath></defs>
+  </symbol>
+  <symbol id="discord-icon" viewBox="0 0 20 19">
+    <path fill="#08060d" d="M16.224 3.768a14.5 14.5 0 0 0-3.67-1.153c-.158.286-.343.67-.47.976a13.5 13.5 0 0 0-4.067 0c-.128-.306-.317-.69-.476-.976A14.4 14.4 0 0 0 3.868 3.77C1.546 7.28.916 10.703 1.231 14.077a14.7 14.7 0 0 0 4.5 2.306q.545-.748.965-1.587a9.5 9.5 0 0 1-1.518-.74q.191-.14.372-.293c2.927 1.369 6.107 1.369 8.999 0q.183.152.372.294-.723.437-1.52.74.418.838.963 1.588a14.6 14.6 0 0 0 4.504-2.308c.37-3.911-.63-7.302-2.644-10.309m-9.13 8.234c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.894 0 1.614.82 1.599 1.82.001 1-.705 1.82-1.6 1.82m5.91 0c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.893 0 1.614.82 1.599 1.82 0 1-.706 1.82-1.6 1.82"/>
+  </symbol>
+  <symbol id="documentation-icon" viewBox="0 0 21 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="m15.5 13.333 1.533 1.322c.645.555.967.833.967 1.178s-.322.623-.967 1.179L15.5 18.333m-3.333-5-1.534 1.322c-.644.555-.966.833-.966 1.178s.322.623.966 1.179l1.534 1.321"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M17.167 10.836v-4.32c0-1.41 0-2.117-.224-2.68-.359-.906-1.118-1.621-2.08-1.96-.599-.21-1.349-.21-2.848-.21-2.623 0-3.935 0-4.983.369-1.684.591-3.013 1.842-3.641 3.428C3 6.449 3 7.684 3 10.154v2.122c0 2.558 0 3.838.706 4.726q.306.383.713.671c.76.536 1.79.64 3.581.66"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M3 10a2.78 2.78 0 0 1 2.778-2.778c.555 0 1.209.097 1.748-.047.48-.129.854-.503.982-.982.145-.54.048-1.194.048-1.749a2.78 2.78 0 0 1 2.777-2.777"/>
+  </symbol>
+  <symbol id="github-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M9.356 1.85C5.05 1.85 1.57 5.356 1.57 9.694a7.84 7.84 0 0 0 5.324 7.44c.387.079.528-.168.528-.376 0-.182-.013-.805-.013-1.454-2.165.467-2.616-.935-2.616-.935-.349-.91-.864-1.143-.864-1.143-.71-.48.051-.48.051-.48.787.051 1.2.805 1.2.805.695 1.194 1.817.857 2.268.649.064-.507.27-.857.49-1.052-1.728-.182-3.545-.857-3.545-3.87 0-.857.31-1.558.8-2.104-.078-.195-.349-1 .077-2.078 0 0 .657-.208 2.14.805a7.5 7.5 0 0 1 1.946-.26c.657 0 1.328.092 1.946.26 1.483-1.013 2.14-.805 2.14-.805.426 1.078.155 1.883.078 2.078.502.546.799 1.247.799 2.104 0 3.013-1.818 3.675-3.558 3.87.284.247.528.714.528 1.454 0 1.052-.012 1.896-.012 2.156 0 .208.142.455.528.377a7.84 7.84 0 0 0 5.324-7.441c.013-4.338-3.48-7.844-7.773-7.844" clip-rule="evenodd"/>
+  </symbol>
+  <symbol id="social-icon" viewBox="0 0 20 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M12.5 6.667a4.167 4.167 0 1 0-8.334 0 4.167 4.167 0 0 0 8.334 0"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M2.5 16.667a5.833 5.833 0 0 1 8.75-5.053m3.837.474.513 1.035c.07.144.257.282.414.309l.93.155c.596.1.736.536.307.965l-.723.73a.64.64 0 0 0-.152.531l.207.903c.164.715-.213.991-.84.618l-.872-.52a.63.63 0 0 0-.577 0l-.872.52c-.624.373-1.003.094-.84-.618l.207-.903a.64.64 0 0 0-.152-.532l-.723-.729c-.426-.43-.289-.864.306-.964l.93-.156a.64.64 0 0 0 .412-.31l.513-1.034c.28-.562.735-.562 1.012 0"/>
+  </symbol>
+  <symbol id="x-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M1.893 1.98c.052.072 1.245 1.769 2.653 3.77l2.892 4.114c.183.261.333.48.333.486s-.068.089-.152.183l-.522.593-.765.867-3.597 4.087c-.375.426-.734.834-.798.905a1 1 0 0 0-.118.148c0 .01.236.017.664.017h.663l.729-.83c.4-.457.796-.906.879-.999a692 692 0 0 0 1.794-2.038c.034-.037.301-.34.594-.675l.551-.624.345-.392a7 7 0 0 1 .34-.374c.006 0 .93 1.306 2.052 2.903l2.084 2.965.045.063h2.275c1.87 0 2.273-.003 2.266-.021-.008-.02-1.098-1.572-3.894-5.547-2.013-2.862-2.28-3.246-2.273-3.266.008-.019.282-.332 2.085-2.38l2-2.274 1.567-1.782c.022-.028-.016-.03-.65-.03h-.674l-.3.342a871 871 0 0 1-1.782 2.025c-.067.075-.405.458-.75.852a100 100 0 0 1-.803.91c-.148.172-.299.344-.99 1.127-.304.343-.32.358-.345.327-.015-.019-.904-1.282-1.976-2.808L6.365 1.85H1.8zm1.782.91 8.078 11.294c.772 1.08 1.413 1.973 1.425 1.984.016.017.241.02 1.05.017l1.03-.004-2.694-3.766L7.796 5.75 5.722 2.852l-1.039-.004-1.039-.004z" clip-rule="evenodd"/>
+  </symbol>
+</svg>

src/frontend/src/App.css

@@ -0,0 +1,184 @@
+.counter {
+  font-size: 16px;
+  padding: 5px 10px;
+  border-radius: 5px;
+  color: var(--accent);
+  background: var(--accent-bg);
+  border: 2px solid transparent;
+  transition: border-color 0.3s;
+  margin-bottom: 24px;
+
+  &:hover {
+    border-color: var(--accent-border);
+  }
+  &:focus-visible {
+    outline: 2px solid var(--accent);
+    outline-offset: 2px;
+  }
+}
+
+.hero {
+  position: relative;
+
+  .base,
+  .framework,
+  .vite {
+    inset-inline: 0;
+    margin: 0 auto;
+  }
+
+  .base {
+    width: 170px;
+    position: relative;
+    z-index: 0;
+  }
+
+  .framework,
+  .vite {
+    position: absolute;
+  }
+
+  .framework {
+    z-index: 1;
+    top: 34px;
+    height: 28px;
+    transform: perspective(2000px) rotateZ(300deg) rotateX(44deg) rotateY(39deg)
+      scale(1.4);
+  }
+
+  .vite {
+    z-index: 0;
+    top: 107px;
+    height: 26px;
+    width: auto;
+    transform: perspective(2000px) rotateZ(300deg) rotateX(40deg) rotateY(39deg)
+      scale(0.8);
+  }
+}
+
+#center {
+  display: flex;
+  flex-direction: column;
+  gap: 25px;
+  place-content: center;
+  place-items: center;
+  flex-grow: 1;
+
+  @media (max-width: 1024px) {
+    padding: 32px 20px 24px;
+    gap: 18px;
+  }
+}
+
+#next-steps {
+  display: flex;
+  border-top: 1px solid var(--border);
+  text-align: left;
+
+  & > div {
+    flex: 1 1 0;
+    padding: 32px;
+    @media (max-width: 1024px) {
+      padding: 24px 20px;
+    }
+  }
+
+  .icon {
+    margin-bottom: 16px;
+    width: 22px;
+    height: 22px;
+  }
+
+  @media (max-width: 1024px) {
+    flex-direction: column;
+    text-align: center;
+  }
+}
+
+#docs {
+  border-right: 1px solid var(--border);
+
+  @media (max-width: 1024px) {
+    border-right: none;
+    border-bottom: 1px solid var(--border);
+  }
+}
+
+#next-steps ul {
+  list-style: none;
+  padding: 0;
+  display: flex;
+  gap: 8px;
+  margin: 32px 0 0;
+
+  .logo {
+    height: 18px;
+  }
+
+  a {
+    color: var(--text-h);
+    font-size: 16px;
+    border-radius: 6px;
+    background: var(--social-bg);
+    display: flex;
+    padding: 6px 12px;
+    align-items: center;
+    gap: 8px;
+    text-decoration: none;
+    transition: box-shadow 0.3s;
+
+    &:hover {
+      box-shadow: var(--shadow);
+    }
+    .button-icon {
+      height: 18px;
+      width: 18px;
+    }
+  }
+
+  @media (max-width: 1024px) {
+    margin-top: 20px;
+    flex-wrap: wrap;
+    justify-content: center;
+
+    li {
+      flex: 1 1 calc(50% - 8px);
+    }
+
+    a {
+      width: 100%;
+      justify-content: center;
+      box-sizing: border-box;
+    }
+  }
+}
+
+#spacer {
+  height: 88px;
+  border-top: 1px solid var(--border);
+  @media (max-width: 1024px) {
+    height: 48px;
+  }
+}
+
+.ticks {
+  position: relative;
+  width: 100%;
+
+  &::before,
+  &::after {
+    content: '';
+    position: absolute;
+    top: -4.5px;
+    border: 5px solid transparent;
+  }
+
+  &::before {
+    left: 0;
+    border-left-color: var(--border);
+  }
+  &::after {
+    right: 0;
+    border-right-color: var(--border);
+  }
+}

src/frontend/src/App.tsx

@@ -0,0 +1,48 @@
+import { useState } from 'react';
+import { Navigate, Route, Routes } from 'react-router-dom';
+import type { AuthResponse } from './api/types';
+import { AuthPage } from './pages/AuthPage';
+import { AdminPage } from './pages/AdminPage';
+import { PlannerPage } from './pages/PlannerPage';
+
+function getStoredAuth(): AuthResponse | null {
+  const token = localStorage.getItem('token');
+  const name = localStorage.getItem('userName');
+  const email = localStorage.getItem('userEmail');
+  const isAdmin = localStorage.getItem('isAdmin') === 'true';
+  if (token && name && email) return { token, name, email, isAdmin };
+  return null;
+}
+
+export default function App() {
+  const [auth, setAuth] = useState<AuthResponse | null>(getStoredAuth);
+
+  function handleAuth(authData: AuthResponse) {
+    localStorage.setItem('token', authData.token);
+    localStorage.setItem('userName', authData.name);
+    localStorage.setItem('userEmail', authData.email);
+    localStorage.setItem('isAdmin', String(authData.isAdmin));
+    setAuth(authData);
+  }
+
+  function handleLogout() {
+    localStorage.removeItem('token');
+    localStorage.removeItem('userName');
+    localStorage.removeItem('userEmail');
+    localStorage.removeItem('isAdmin');
+    setAuth(null);
+  }
+
+  if (!auth) return <AuthPage onAuth={handleAuth} />;
+
+  return (
+    <Routes>
+      <Route path="/" element={<PlannerPage auth={auth} onLogout={handleLogout} />} />
+      <Route
+        path="/admin"
+        element={auth.isAdmin ? <AdminPage /> : <Navigate to="/" replace />}
+      />
+      <Route path="*" element={<Navigate to="/" replace />} />
+    </Routes>
+  );
+}

src/frontend/src/api/client.ts

@@ -0,0 +1,116 @@
+import type { AdminUser, AuthResponse, CreateReservationRequest, PendingUser, RegisterPendingResponse, Reservation, WorkplaceScheduleItem } from './types';
+
+const BASE = '/api';
+
+function getToken(): string | null {
+  return localStorage.getItem('token');
+}
+
+function authHeaders(): HeadersInit {
+  const token = getToken();
+  return token ? { Authorization: `Bearer ${token}` } : {};
+}
+
+async function handleResponse<T>(res: Response): Promise<T> {
+  if (!res.ok) {
+    const body = await res.json().catch(() => ({}));
+    throw new Error(body?.detail ?? `Request failed: ${res.status}`);
+  }
+  return res.json() as Promise<T>;
+}
+
+export const api = {
+  async login(email: string, password: string): Promise<AuthResponse> {
+    const res = await fetch(`${BASE}/auth/login`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ email, password }),
+    });
+    return handleResponse<AuthResponse>(res);
+  },
+
+  async register(email: string, name: string, password: string): Promise<RegisterPendingResponse> {
+    const res = await fetch(`${BASE}/auth/register`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ email, name, password }),
+    });
+    return handleResponse<RegisterPendingResponse>(res);
+  },
+
+  getAdminUsers(): Promise<AdminUser[]> {
+    return fetch(`${BASE}/admin/users`, {
+      headers: authHeaders(),
+    }).then(handleResponse<AdminUser[]>);
+  },
+
+  getPendingUsers(): Promise<PendingUser[]> {
+    return fetch(`${BASE}/admin/users/pending`, {
+      headers: authHeaders(),
+    }).then(handleResponse<PendingUser[]>);
+  },
+
+  async makeAdmin(id: string): Promise<void> {
+    const res = await fetch(`${BASE}/admin/users/${id}/make-admin`, {
+      method: 'POST',
+      headers: authHeaders(),
+    });
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      throw new Error(body?.detail ?? `Request failed: ${res.status}`);
+    }
+  },
+
+  async approveUser(id: string): Promise<void> {
+    const res = await fetch(`${BASE}/admin/users/${id}/approve`, {
+      method: 'POST',
+      headers: authHeaders(),
+    });
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      throw new Error(body?.detail ?? `Request failed: ${res.status}`);
+    }
+  },
+
+  async deleteUser(id: string): Promise<void> {
+    const res = await fetch(`${BASE}/admin/users/${id}`, {
+      method: 'DELETE',
+      headers: authHeaders(),
+    });
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      throw new Error(body?.detail ?? `Request failed: ${res.status}`);
+    }
+  },
+
+  getWorkplaceSchedule(date: string): Promise<WorkplaceScheduleItem[]> {
+    return fetch(`${BASE}/workplaces/schedule?date=${date}`, {
+      headers: authHeaders(),
+    }).then(handleResponse<WorkplaceScheduleItem[]>);
+  },
+
+  createReservation(data: CreateReservationRequest): Promise<{ id: string }> {
+    return fetch(`${BASE}/reservations`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', ...authHeaders() },
+      body: JSON.stringify(data),
+    }).then(handleResponse<{ id: string }>);
+  },
+
+  getMyReservations(): Promise<Reservation[]> {
+    return fetch(`${BASE}/reservations/my`, {
+      headers: authHeaders(),
+    }).then(handleResponse<Reservation[]>);
+  },
+
+  async cancelReservation(id: string): Promise<void> {
+    const res = await fetch(`${BASE}/reservations/${id}`, {
+      method: 'DELETE',
+      headers: authHeaders(),
+    });
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      throw new Error(body?.detail ?? `Request failed: ${res.status}`);
+    }
+  },
+};

src/frontend/src/api/types.ts

@@ -0,0 +1,61 @@
+export interface Workplace {
+  id: string;
+  name: string;
+  location: string;
+}
+
+export interface AvailableWorkplace {
+  id: string;
+  name: string;
+  location: string;
+}
+
+export interface Reservation {
+  id: string;
+  workplaceId: string;
+  workplaceName: string;
+  workplaceLocation: string;
+  employeeName: string;
+  employeeEmail: string;
+  date: string;
+  status: 'Active' | 'Cancelled';
+  createdAt: string;
+}
+
+export interface WorkplaceScheduleItem {
+  id: string;
+  name: string;
+  location: string;
+  isAvailable: boolean;
+  reservedBy: string | null;
+}
+
+export interface CreateReservationRequest {
+  workplaceId: string;
+  date: string;
+}
+
+export interface AuthResponse {
+  token: string;
+  name: string;
+  email: string;
+  isAdmin: boolean;
+}
+
+export interface RegisterPendingResponse {
+  message: string;
+}
+
+export interface PendingUser {
+  id: string;
+  name: string;
+  email: string;
+}
+
+export interface AdminUser {
+  id: string;
+  name: string;
+  email: string;
+  isApproved: boolean;
+  isAdmin: boolean;
+}

src/frontend/src/assets/react.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-hidden="true" role="img" class="iconify iconify--logos" width="35.93" height="32" preserveAspectRatio="xMidYMid meet" viewBox="0 0 256 228"><path fill="#00D8FF" d="M210.483 73.824a171.49 171.49 0 0 0-8.24-2.597c.465-1.9.893-3.777 1.273-5.621c6.238-30.281 2.16-54.676-11.769-62.708c-13.355-7.7-35.196.329-57.254 19.526a171.23 171.23 0 0 0-6.375 5.848a155.866 155.866 0 0 0-4.241-3.917C100.759 3.829 77.587-4.822 63.673 3.233C50.33 10.957 46.379 33.89 51.995 62.588a170.974 170.974 0 0 0 1.892 8.48c-3.28.932-6.445 1.924-9.474 2.98C17.309 83.498 0 98.307 0 113.668c0 15.865 18.582 31.778 46.812 41.427a145.52 145.52 0 0 0 6.921 2.165a167.467 167.467 0 0 0-2.01 9.138c-5.354 28.2-1.173 50.591 12.134 58.266c13.744 7.926 36.812-.22 59.273-19.855a145.567 145.567 0 0 0 5.342-4.923a168.064 168.064 0 0 0 6.92 6.314c21.758 18.722 43.246 26.282 56.54 18.586c13.731-7.949 18.194-32.003 12.4-61.268a145.016 145.016 0 0 0-1.535-6.842c1.62-.48 3.21-.974 4.76-1.488c29.348-9.723 48.443-25.443 48.443-41.52c0-15.417-17.868-30.326-45.517-39.844Zm-6.365 70.984c-1.4.463-2.836.91-4.3 1.345c-3.24-10.257-7.612-21.163-12.963-32.432c5.106-11 9.31-21.767 12.459-31.957c2.619.758 5.16 1.557 7.61 2.4c23.69 8.156 38.14 20.213 38.14 29.504c0 9.896-15.606 22.743-40.946 31.14Zm-10.514 20.834c2.562 12.94 2.927 24.64 1.23 33.787c-1.524 8.219-4.59 13.698-8.382 15.893c-8.067 4.67-25.32-1.4-43.927-17.412a156.726 156.726 0 0 1-6.437-5.87c7.214-7.889 14.423-17.06 21.459-27.246c12.376-1.098 24.068-2.894 34.671-5.345a134.17 134.17 0 0 1 1.386 6.193ZM87.276 214.515c-7.882 2.783-14.16 2.863-17.955.675c-8.075-4.657-11.432-22.636-6.853-46.752a156.923 156.923 0 0 1 1.869-8.499c10.486 2.32 22.093 3.988 34.498 4.994c7.084 9.967 14.501 19.128 21.976 27.15a134.668 134.668 0 0 1-4.877 4.492c-9.933 8.682-19.886 14.842-28.658 17.94ZM50.35 144.747c-12.483-4.267-22.792-9.812-29.858-15.863c-6.35-5.437-9.555-10.836-9.555-15.216c0-9.322 13.897-21.212 37.076-29.293c2.813-.98 5.757-1.905 8.812-2.773c3.204 10.42 7.406 21.315 12.477 32.332c-5.137 11.18-9.399 22.249-12.634 32.792a134.718 134.718 0 0 1-6.318-1.979Zm12.378-84.26c-4.811-24.587-1.616-43.134 6.425-47.789c8.564-4.958 27.502 2.111 47.463 19.835a144.318 144.318 0 0 1 3.841 3.545c-7.438 7.987-14.787 17.08-21.808 26.988c-12.04 1.116-23.565 2.908-34.161 5.309a160.342 160.342 0 0 1-1.76-7.887Zm110.427 27.268a347.8 347.8 0 0 0-7.785-12.803c8.168 1.033 15.994 2.404 23.343 4.08c-2.206 7.072-4.956 14.465-8.193 22.045a381.151 381.151 0 0 0-7.365-13.322Zm-45.032-43.861c5.044 5.465 10.096 11.566 15.065 18.186a322.04 322.04 0 0 0-30.257-.006c4.974-6.559 10.069-12.652 15.192-18.18ZM82.802 87.83a323.167 323.167 0 0 0-7.227 13.238c-3.184-7.553-5.909-14.98-8.134-22.152c7.304-1.634 15.093-2.97 23.209-3.984a321.524 321.524 0 0 0-7.848 12.897Zm8.081 65.352c-8.385-.936-16.291-2.203-23.593-3.793c2.26-7.3 5.045-14.885 8.298-22.6a321.187 321.187 0 0 0 7.257 13.246c2.594 4.48 5.28 8.868 8.038 13.147Zm37.542 31.03c-5.184-5.592-10.354-11.779-15.403-18.433c4.902.192 9.899.29 14.978.29c5.218 0 10.376-.117 15.453-.343c-4.985 6.774-10.018 12.97-15.028 18.486Zm52.198-57.817c3.422 7.8 6.306 15.345 8.596 22.52c-7.422 1.694-15.436 3.058-23.88 4.071a382.417 382.417 0 0 0 7.859-13.026a347.403 347.403 0 0 0 7.425-13.565Zm-16.898 8.101a358.557 358.557 0 0 1-12.281 19.815a329.4 329.4 0 0 1-23.444.823c-7.967 0-15.716-.248-23.178-.732a310.202 310.202 0 0 1-12.513-19.846h.001a307.41 307.41 0 0 1-10.923-20.627a310.278 310.278 0 0 1 10.89-20.637l-.001.001a307.318 307.318 0 0 1 12.413-19.761c7.613-.576 15.42-.876 23.31-.876H128c7.926 0 15.743.303 23.354.883a329.357 329.357 0 0 1 12.335 19.695a358.489 358.489 0 0 1 11.036 20.54a329.472 329.472 0 0 1-11 20.722Zm22.56-122.124c8.572 4.944 11.906 24.881 6.52 51.026c-.344 1.668-.73 3.367-1.15 5.09c-10.622-2.452-22.155-4.275-34.23-5.408c-7.034-10.017-14.323-19.124-21.64-27.008a160.789 160.789 0 0 1 5.888-5.4c18.9-16.447 36.564-22.941 44.612-18.3ZM128 90.808c12.625 0 22.86 10.235 22.86 22.86s-10.235 22.86-22.86 22.86s-22.86-10.235-22.86-22.86s10.235-22.86 22.86-22.86Z"></path></svg>