From 83af3206aec9e2238e5ddb026136f4907c7df298 Mon Sep 17 00:00:00 2001
From: Carl Marion <132995625+engrkwakwak@users.noreply.github.com>
Date: Sun, 24 May 2026 11:57:56 +0800
Subject: [PATCH 001/155] Eternelle-176 Strengthen code review and DDD
 enforcement in .coderabbit.yaml (#178)

* Eternelle-176 Strengthen code review and DDD enforcement in .coderabbit.yaml

- Refined tone and review instructions for Clean Architecture boundaries
- Added granular PR labeling and path-based review rules per layer
- Enforced DDD conventions: const MaxLength, event handler dependencies, IDOR guards
- Introduced custom automated checks for architectural compliance
- Disabled docstring warnings; set PR title requirements
- Added C# XML doc comment generation guidance
- Enabled additional security and quality tools
- Excluded build/IDE artifacts from review; updated SQL schema rules

* Update .coderabbit.yaml review checks and docstring mode

Revised custom review instructions to enforce new .cs file conventions, focusing on aggregate behavior, domain error handling, handler return types, and cross-module reference types. Replaced previous checks and set docstring pre-merge check mode to warning.
---
 .coderabbit.yaml | 143 +++++++++++++++++++++++++++++++++++++----------
 1 file changed, 112 insertions(+), 31 deletions(-)

diff --git a/.coderabbit.yaml b/.coderabbit.yaml
index c74c1d7..66c124b 100644
--- a/.coderabbit.yaml
+++ b/.coderabbit.yaml
@@ -1,5 +1,5 @@
 language: en-US
-tone_instructions: ".NET 10 modular monolith, DDD, Philippine wedding platform. Use precise DDD terms: aggregates, value objects, domain events, repositories. Enforce Clean Architecture boundaries strictly. Concise, actionable feedback only."
+tone_instructions: ".NET 10 modular monolith, DDD, Philippine wedding platform. Use precise DDD terms: aggregates, value objects, domain events, repositories. Enforce Clean Architecture layer boundaries. Concise, actionable feedback only."
 early_access: false
 enable_free_tier: true
 
@@ -9,6 +9,7 @@ reviews:
   high_level_summary: true
   high_level_summary_in_walkthrough: false
   review_status: true
+  review_details: false
   commit_status: true
   fail_commit_status: false
   collapse_walkthrough: false
@@ -22,11 +23,35 @@ reviews:
   auto_apply_labels: false
   suggested_reviewers: true
   auto_assign_reviewers: false
+  in_progress_fortune: false
   poem: false
   enable_prompt_for_ai_agents: true
   abort_on_close: true
   disable_cache: false
 
+  path_filters:
+    - "!**/bin/**"
+    - "!**/obj/**"
+    - "!**/.vs/**"
+
+  labeling_instructions:
+    - label: domain
+      instructions: Apply when the PR modifies files in a *.Domain project (aggregates, value objects, domain events, repository interfaces, domain errors).
+    - label: application
+      instructions: Apply when the PR modifies files in a *.Application project (commands, queries, handlers, validators, domain event handlers).
+    - label: infrastructure
+      instructions: Apply when the PR modifies files in a *.Infrastructure project (repositories, EF Core configurations, migrations, external service clients).
+    - label: integration-events
+      instructions: Apply when the PR modifies files in a *.IntegrationEvents project or adds/changes integration event handler classes.
+    - label: breaking-change
+      instructions: Apply when the PR changes an integration event contract (adds/removes/renames properties), changes a public API route or request/response shape, or removes a public interface member.
+    - label: migration
+      instructions: Apply when the PR adds or modifies EF Core migration files under Database/Migrations/.
+    - label: security
+      instructions: Apply when the PR touches authentication, authorization, IDOR guards, or secret/key handling.
+    - label: new-module
+      instructions: Apply when the PR introduces a new module (new *.Domain, *.Application, *.Infrastructure, *.Presentation, and *.IntegrationEvents projects for a previously non-existent module).
+
   path_instructions:
     - path: "src/Modules/**/**.Domain/**/*.cs"
       instructions: >
@@ -34,10 +59,11 @@ reviews:
         or any framework (EF Core, MediatR, Dapper, ASP.NET). Aggregates expose
         behaviour through methods only — no public setters outside the aggregate.
         Value objects must be immutable (sealed record or sealed class with private
-        constructor and static Create() factory). Domain errors must use the Error
-        type from Eternelle.Common.Domain. String length limits must be defined as
-        public static readonly int constants on the owning type (e.g.
-        Partner.MaxFirstNameLength), not magic numbers.
+        constructor and static Create() factory). Value object length limits must
+        use const int MaxLength (not static readonly — this is a monorepo compiled
+        from source). Domain errors must use the Error type from Eternelle.Common.Domain.
+        Domain events must use primary-constructor syntax and carry all data needed
+        for integration events at raise-time (no repository reload in handlers).
 
     - path: "src/Modules/**/**.Application/**/*.cs"
       instructions: >
@@ -48,9 +74,13 @@ reviews:
         Query handlers use Dapper via IDbConnectionFactory with CommandDefinition
         (including cancellationToken) — never EF Core.
         Command handlers use domain repository interfaces and IUnitOfWork.
-        String MaximumLength rules must reference domain constants, not hardcoded
-        numbers. Reorder handlers must validate completeness and duplicates via
-        HashSet comparison before iterating.
+        String MaximumLength rules must reference domain VO const constants (e.g.
+        PersonName.MaxLength), not hardcoded numbers.
+        Domain event handlers inject only IEventBus — no repository. All
+        integration-event payload is sourced from the domain event properties.
+        IDOR guard: handlers that accept a child-resource ID must verify the loaded
+        entity's parent ID matches the command's parent ID, and return an opaque
+        NotFound error (never a permission-specific error).
 
     - path: "src/Modules/**/**.Infrastructure/**/*.cs"
       instructions: >
@@ -59,17 +89,22 @@ reviews:
         have a ValueConverter registered globally in ConfigureConventions — not
         per-property. UseSnakeCaseNamingConvention() is active; explicit
         HasColumnName() is only needed when the snake_case default is wrong.
-        String length constants from the domain (e.g. Partner.MaxFirstNameLength)
-        must be referenced in HasMaxLength() — no magic numbers.
+        String HasMaxLength() calls must reference the domain VO const (e.g.
+        PersonName.MaxLength) — no magic numbers.
         Repositories are internal sealed classes implementing domain interfaces.
+        EF value converters for VOs: use FromPersistence() (internal, skips
+        validation) not Create() (which validates and returns Result<T>).
 
     - path: "src/Modules/**/**.Presentation/**/*.cs"
       instructions: >
         Presentation layer. Endpoints implement IEndpoint and are registered via
         MapEndpoints(). Endpoints must not contain business logic — they map HTTP
-        input to commands/queries and dispatch via ISender. HTTP responses follow
-        the TypedResults / Results pattern. No direct references to domain types
-        in endpoint request/response models.
+        input to commands/queries and dispatch via ISender. Route parent IDs
+        (e.g. {weddingId}, {groupId}) must be explicitly bound from the route and
+        passed through to the command — never dropped. Use Results.Created only
+        when creating a single addressable resource with a Location header;
+        use Results.Ok for reads or batch operations. Integration event handlers
+        live here and are registered via AddIntegrationEventHandlers().
 
     - path: "src/API/**/*.cs"
       instructions: >
@@ -90,8 +125,8 @@ reviews:
 
     - path: "**/*.sql"
       instructions: >
-        All tables live in the 'wedding' schema. Column names use snake_case.
-        UUIDs use gen_random_uuid() or are application-generated (UUIDv7).
+        All tables live in named schemas (e.g. wedding, identity). Column names
+        use snake_case. UUIDs use gen_random_uuid() or are application-generated.
         Prefer text columns with application-level length enforcement unless a
         DB constraint is explicitly required.
 
@@ -102,6 +137,9 @@ reviews:
     enabled: true
     auto_incremental_review: true
     auto_pause_after_reviewed_commits: 5
+    ignore_title_keywords:
+      - "wip"
+      - "draft"
     drafts: false
     base_branches:
       - main
@@ -115,21 +153,56 @@ reviews:
       enabled: true
     simplify:
       enabled: true
+    custom:
+      - name: check conventions
+        enabled: true
+        instructions: >
+          Review the changed .cs files for conventions not covered by pre-merge checks.
+          Check: (1) aggregates expose behaviour through methods only — no public setters
+          outside the aggregate root, (2) domain errors use Error.NotFound / Error.Problem /
+          Error.Conflict / Error.Failure from Eternelle.Common.Domain (never raw exceptions),
+          (3) handlers return Result or Result<T> — no throw for business rule violations,
+          (4) cross-module references use plain Guid, never a value object from another module.
+          Post a concise list of any violations found; if none, confirm compliance.
 
   pre_merge_checks:
     override_requested_reviewers_only: false
     docstrings:
       mode: warning
-      threshold: 80
     title:
       mode: warning
+      requirements: "Title should reference the Linear ticket (e.g. Eternelle-123) and be concise."
     description:
       mode: warning
     issue_assessment:
       mode: warning
+    custom_checks:
+      - name: IDOR route params wired
+        mode: error
+        instructions: >
+          For every Minimal API endpoint in the changed Presentation files:
+          verify that each route segment bound as a parameter (e.g. {weddingId},
+          {groupId}) is explicitly passed to the corresponding command or query.
+          Fail if any route parameter is bound but not forwarded to the command.
+      - name: VO MaxLength is const
+        mode: error
+        instructions: >
+          For every value object (sealed record or sealed class with a static Create
+          factory) in the changed Domain files: verify that length limit fields are
+          declared as const int (e.g. public const int MaxLength = 150;) and NOT as
+          static readonly int. Fail if any value object uses static readonly for a
+          length constant.
+      - name: Domain event handler no repository
+        mode: error
+        instructions: >
+          For every DomainEventHandler<T> in the changed Application files:
+          verify that the constructor does NOT inject a repository interface
+          (e.g. IWeddingRepository). The handler must inject only IEventBus and
+          source all integration-event payload from the domain event's own properties.
+          Fail if any domain event handler constructor has a repository parameter.
 
   tools:
-    # ── Relevant to this project ────────────────────────────────────────────
+    # ── Relevant to this project ──────────────────────────────────────────
     ast-grep:
       essential_rules: true
       rule_dirs: []
@@ -146,35 +219,33 @@ reviews:
     yamllint:
       enabled: true
     hadolint:
-      enabled: true # Dockerfile present
+      enabled: true
     actionlint:
-      enabled: true # GitHub Actions workflows
+      enabled: true
     shellcheck:
       enabled: true
     gitleaks:
-      enabled: true # Secrets scanning
+      enabled: true
     trufflehog:
-      enabled: true # Secrets scanning
+      enabled: true
     semgrep:
-      enabled: true # Security patterns
+      enabled: true
     opengrep:
       enabled: true
     trivy:
-      enabled: true # Vulnerability scanning
+      enabled: true
     osvScanner:
-      enabled: true # NuGet dependency CVEs
+      enabled: true
     checkov:
-      enabled: true # IaC / docker-compose security
+      enabled: true
     sqlfluff:
-      enabled: true # Raw SQL in migrations and Dapper queries
+      enabled: true
     dotenvLint:
       enabled: true
     psscriptanalyzer:
-      enabled: true # PowerShell scripts (PMC, CI scripts)
-    fortitudeLint:
-      enabled: false # Fortran linter - not applicable to a .NET/C# project
+      enabled: true
 
-    # ── Disabled — not applicable to a .NET/C# project ─────────────────────
+    # ── Disabled — not applicable to a .NET/C# project ───────────────────
     ruff:
       enabled: false
     flake8:
@@ -237,6 +308,8 @@ reviews:
       enabled: false
     checkmake:
       enabled: false
+    fortitudeLint:
+      enabled: false
 
 chat:
   art: true
@@ -255,10 +328,10 @@ knowledge_base:
   code_guidelines:
     enabled: true
     filePatterns:
+      - "**/CLAUDE.md"
       - "README.md"
       - "CONTRIBUTING.md"
       - "docs/**/*.md"
-      - ".coderabbit.yaml"
   learnings:
     scope: auto
   issues:
@@ -271,6 +344,14 @@ knowledge_base:
 code_generation:
   docstrings:
     language: en-US
+    path_instructions:
+      - path: "**/*.cs"
+        instructions: >
+          Generate XML doc comments (///) in C# summary style. Keep summaries
+          to one line. Do not describe obvious getters/setters or generated code.
+          For domain aggregate methods, describe the business intent and any
+          domain rules enforced. For value object Create() factories, describe
+          validation rules and the error returned on failure.
   unit_tests:
     path_instructions: []
 

From 35a10a6174a3f10cb469a879a4eaa272684bdb26 Mon Sep 17 00:00:00 2001
From: Carl Marion <132995625+engrkwakwak@users.noreply.github.com>
Date: Mon, 25 May 2026 13:53:50 +0800
Subject: [PATCH 002/155] Eternelle-174 Add Users module with CQRS, EF Core,
 and Keycloak auth (#175)

* Eternelle-174 Add Users module with CQRS, EF Core, and Keycloak auth

- Introduce Users module (Application, Domain, Infrastructure, IntegrationEvents, Presentation) and register in solution/API
- Implement user aggregate, value objects, roles, permissions, and domain events
- Add EF Core config, migrations, and schema for users, roles, permissions, outbox/inbox
- Provide CQRS handlers/validators for user registration, profile update, and queries
- Integrate Users module into API DI, health checks, and endpoints
- Add outbox/inbox processing jobs and idempotent event handlers
- Update configs for Users module settings and logging
- Add Keycloak service to docker-compose for authentication
- Refactor common auth/authorization namespaces
- Bump Microsoft.AspNetCore.Authentication.JwtBearer version

* Eternelle-174 Refactor user module: UserId, EF Core, validation, updates

- Switch UserRepository to use UserId value object for type safety
- Add Update method to IUserRepository and implementation
- Use CommandDefinition with cancellation tokens in Dapper queries
- Add UserIdConverter and configure EF Core for UserId conversion
- Move Permission/Role max length to constants and use in config
- Remove manual UserId conversion from UserConfiguration
- Validate required claims in RegisterUser endpoint
- Require FirstName/LastName in UpdateUserProfile request model
- Improve event handler registration logic for interface matching

* Set default Permission value and improve claim validation

Set Permission property default to empty string to avoid nulls.
Use string.IsNullOrWhiteSpace for stricter identity claim validation in RegisterUser.

* Refactor module config, improve message processing

- Move module config loading before registration in Program.cs
- Add health check updates
- Initialize Role.Name to empty string in private ctor
- Throw on null/whitespace identityId in User.Create
- Remove unused usings in Schemas.cs
- Use ON CONFLICT DO NOTHING for inbox inserts
- Use FOR UPDATE SKIP LOCKED in inbox/outbox queries
- Split processed/error update logic for messages
- Register Outbox/Inbox options with validation in UsersModule

* feat(weddings): add fail-fast validation for OutboxOptions and InboxOptions

* fix(weddings): pin AddDomainEventHandlers and AddIntegrationEventHandlers LINQ predicates to exact generic types

* fix(weddings): use handler short name for outbox consumer idempotency key

* fix(weddings): use handler short name for inbox consumer idempotency key

* Change ArgumentNullException to ArgumentException
---
 .claude/settings.local.json                   |   9 -
 .gitignore                                    |   3 +
 Directory.Packages.props                      |   2 +-
 Eternelle.slnx                                |   7 +
 docker-compose.dcproj                         |   5 +
 docker-compose.yml                            |  16 +
 src/API/Eternelle.Api/Eternelle.Api.csproj    |   1 +
 .../Extensions/MigrationExtensions.cs         |   2 +
 src/API/Eternelle.Api/Program.cs              |  22 +-
 .../appsettings.Development.json              |   4 +-
 .../modules.users.Development.json            |  12 +
 src/API/Eternelle.Api/modules.users.json      |  12 +
 .../ClaimsPrincipalExtensions.cs              |   4 +-
 .../Authentication/CustomClaims.cs            |   2 +-
 .../CustomClaimsTransformation.cs             |  11 +-
 .../PermissionAuthorizationHandler.cs         |   2 +-
 .../Eternelle.Common.Presentation.csproj      |   1 +
 .../Abstractions/Data/IUnitOfWork.cs          |   6 +
 .../AssemblyReference.cs                      |   8 +
 ...Eternelle.Modules.Users.Application.csproj |   9 +
 .../Users/GetUser/GetUserQuery.cs             |   5 +
 .../Users/GetUser/GetUserQueryHandler.cs      |  39 ++
 .../Users/GetUser/UserResponse.cs             |   3 +
 .../GetUserPermissionsQuery.cs                |   6 +
 .../GetUserPermissionsQueryHandler.cs         |  48 +++
 .../Users/RegisterUser/RegisterUserCommand.cs |   6 +
 .../RegisterUserCommandHandler.cs             |  50 +++
 .../RegisterUserCommandValidator.cs           |  15 +
 .../UserRegisteredDomainEventHandler.cs       |  25 ++
 .../Users/UpdateUser/UpdateUserComand.cs      |   6 +
 .../UpdateUser/UpdateUserCommandHandler.cs    |  54 +++
 .../UpdateUser/UpdateUserCommandValidator.cs  |  17 +
 .../UserProfileUpdatedDomainEventHandler.cs   |  25 ++
 .../AssemblyInfo.cs                           |   6 +
 .../Eternelle.Modules.Users.Domain.csproj     |   7 +
 .../Users/Email.cs                            |  43 +++
 .../Users/EmailErrors.cs                      |  15 +
 .../Users/IUserRepository.cs                  |  12 +
 .../Users/Permission.cs                       |  16 +
 .../Users/PersonName.cs                       |  33 ++
 .../Users/PersonNameErrors.cs                 |  12 +
 .../Users/PhoneNumber.cs                      |  38 ++
 .../Users/PhoneNumberErrors.cs                |  14 +
 .../Users/Role.cs                             |  22 ++
 .../Users/User.cs                             |  68 ++++
 .../Users/UserErrors.cs                       |  12 +
 .../Users/UserId.cs                           |  10 +
 .../Users/UserProfileUpdatedDomainEvent.cs    |  18 +
 .../Users/UserRegisteredDomainEvent.cs        |  18 +
 .../Authorization/PermissionService.cs        |  14 +
 .../Database/Converters/UserIdConverter.cs    |   7 +
 ...260521171549_AddUserAggregates.Designer.cs | 334 ++++++++++++++++++
 .../20260521171549_AddUserAggregates.cs       | 276 +++++++++++++++
 .../Migrations/UsersDbContextModelSnapshot.cs | 331 +++++++++++++++++
 .../Database/Schemas.cs                       |   6 +
 .../Database/UsersDbContext.cs                |  33 ++
 ...rnelle.Modules.Users.Infrastructure.csproj |  16 +
 .../Inbox/ConfigureProcessInboxJob.cs         |  23 ++
 .../IdempotentIntegrationEventHandler.cs      |  62 ++++
 .../Inbox/InboxOptions.cs                     |   8 +
 .../Inbox/IntegrationEventConsumer.cs         |  39 ++
 .../Inbox/ProcessInboxJob.cs                  | 143 ++++++++
 .../Outbox/ConfigureProcessOutboxJob.cs       |  23 ++
 .../Outbox/IdempotentDomainEventHandler.cs    |  61 ++++
 .../Outbox/OutboxOptions.cs                   |   8 +
 .../Outbox/ProcessOutboxJob.cs                | 144 ++++++++
 .../Users/PermissionConfiguration.cs          |  48 +++
 .../Users/RoleConfiguration.cs                |  32 ++
 .../Users/UserConfiguration.cs                |  47 +++
 .../Users/UserRepository.cs                   |  37 ++
 .../UsersModule.cs                            | 118 +++++++
 ...lle.Modules.Users.IntegrationEvents.csproj |   7 +
 .../UserProfileUpdatedIntegrationEvent.cs     |  29 ++
 .../UserRegisteredIntegrationEvent.cs         |  29 ++
 .../AssemblyReference.cs                      |   8 +
 ...ternelle.Modules.Users.Presentation.csproj |   8 +
 .../Permissions.cs                            |   7 +
 .../Tags.cs                                   |   6 +
 .../Users/GetUserProfile.cs                   |  27 ++
 .../Users/RegisterUser.cs                     |  40 +++
 .../Users/UpdateUserProfile.cs                |  40 +++
 .../Weddings/Wedding.cs                       |   2 +
 .../IdempotentIntegrationEventHandler.cs      |   2 +-
 .../Inbox/ProcessInboxJob.cs                  |  48 ++-
 .../Outbox/IdempotentDomainEventHandler.cs    |   2 +-
 .../Outbox/ProcessOutboxJob.cs                |  48 ++-
 .../WeddingsModule.cs                         |  16 +-
 87 files changed, 2846 insertions(+), 64 deletions(-)
 delete mode 100644 .claude/settings.local.json
 create mode 100644 src/API/Eternelle.Api/modules.users.Development.json
 create mode 100644 src/API/Eternelle.Api/modules.users.json
 rename src/Common/{Eternelle.Common.Infrastructure => Eternelle.Common.Application}/Authentication/ClaimsPrincipalExtensions.cs (91%)
 rename src/Common/{Eternelle.Common.Infrastructure => Eternelle.Common.Application}/Authentication/CustomClaims.cs (67%)
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Abstractions/Data/IUnitOfWork.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/AssemblyReference.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Eternelle.Modules.Users.Application.csproj
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQuery.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQueryHandler.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/UserResponse.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQuery.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQueryHandler.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommand.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommandHandler.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommandValidator.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/UserRegisteredDomainEventHandler.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserComand.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserCommandHandler.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserCommandValidator.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UserProfileUpdatedDomainEventHandler.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/AssemblyInfo.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Eternelle.Modules.Users.Domain.csproj
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Email.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/EmailErrors.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/IUserRepository.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Permission.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PersonName.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PersonNameErrors.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PhoneNumber.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PhoneNumberErrors.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Role.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/User.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserErrors.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserId.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserProfileUpdatedDomainEvent.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserRegisteredDomainEvent.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Authorization/PermissionService.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Converters/UserIdConverter.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260521171549_AddUserAggregates.Designer.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260521171549_AddUserAggregates.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/UsersDbContextModelSnapshot.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Schemas.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/UsersDbContext.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Eternelle.Modules.Users.Infrastructure.csproj
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/InboxOptions.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IntegrationEventConsumer.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/ProcessInboxJob.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/OutboxOptions.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/ProcessOutboxJob.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/PermissionConfiguration.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/RoleConfiguration.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/UserConfiguration.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/UserRepository.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/UsersModule.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/Eternelle.Modules.Users.IntegrationEvents.csproj
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/UserProfileUpdatedIntegrationEvent.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/UserRegisteredIntegrationEvent.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Presentation/AssemblyReference.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Presentation/Eternelle.Modules.Users.Presentation.csproj
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Presentation/Permissions.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Presentation/Tags.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/GetUserProfile.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/RegisterUser.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/UpdateUserProfile.cs

diff --git a/.claude/settings.local.json b/.claude/settings.local.json
deleted file mode 100644
index 8993c9d..0000000
--- a/.claude/settings.local.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(dotnet build *)",
-      "Bash(git stash *)",
-      "Bash(git add *)"
-    ]
-  }
-}
diff --git a/.gitignore b/.gitignore
index c7e1e07..95654be 100644
--- a/.gitignore
+++ b/.gitignore
@@ -54,3 +54,6 @@ appsettings.local.json
 /create-issues-guest-photos-retry.sh
 /create-issues-guest-photos.sh
 /create-issues.sh
+/docs/superpowers
+/.claude/settings.local.json
+/.files/eternelle-realm.json
diff --git a/Directory.Packages.props b/Directory.Packages.props
index ca73e67..2942e9f 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -17,7 +17,7 @@
     <PackageVersion Include="MassTransit" Version="9.1.0" />
     <PackageVersion Include="MassTransit.Redis" Version="9.1.0" />
     <PackageVersion Include="MediatR" Version="14.1.0" />
-    <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.7" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.8" />
     <PackageVersion Include="Microsoft.AspNetCore.Http" Version="2.3.9" />
     <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.7" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore.Tools" Version="10.0.4" />
diff --git a/Eternelle.slnx b/Eternelle.slnx
index 96e073b..b2c3b55 100644
--- a/Eternelle.slnx
+++ b/Eternelle.slnx
@@ -15,6 +15,13 @@
     <Project Path="src/Common/Eternelle.Common.Presentation/Eternelle.Common.Presentation.csproj" Id="54cfc49d-e0bb-44a0-84ac-ee35515c1b5e" />
   </Folder>
   <Folder Name="/src/Modules/" />
+  <Folder Name="/src/Modules/Users/">
+    <Project Path="src/Modules/Users/Eternelle.Modules.Users.Application/Eternelle.Modules.Users.Application.csproj" Id="27530601-1743-4d73-80d3-bddbf28d8eb2" />
+    <Project Path="src/Modules/Users/Eternelle.Modules.Users.Domain/Eternelle.Modules.Users.Domain.csproj" Id="823bb7bc-2382-4588-a404-73ae27f49b02" />
+    <Project Path="src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Eternelle.Modules.Users.Infrastructure.csproj" Id="290675fd-c75d-44e0-8cdc-52999a9ead97" />
+    <Project Path="src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/Eternelle.Modules.Users.IntegrationEvents.csproj" Id="f4f38cd7-8af7-44a6-a6aa-4b57bb9dc00d" />
+    <Project Path="src/Modules/Users/Eternelle.Modules.Users.Presentation/Eternelle.Modules.Users.Presentation.csproj" Id="d6dde47a-faab-4b24-9738-6fe5d9e71738" />
+  </Folder>
   <Folder Name="/src/Modules/Wedding/">
     <Project Path="src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Eternelle.Modules.Weddings.Application.csproj" Id="a6f4ff32-35b6-40bf-a034-4aff406678ea" />
     <Project Path="src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Eternelle.Modules.Weddings.Domain.csproj" Id="8ca34ec3-032b-4439-bc9f-318df0f9e87a" />
diff --git a/docker-compose.dcproj b/docker-compose.dcproj
index bc7cb0a..b450f4e 100644
--- a/docker-compose.dcproj
+++ b/docker-compose.dcproj
@@ -3,7 +3,12 @@
   <PropertyGroup Label="Globals">
     <ProjectVersion>2.1</ProjectVersion>
     <DockerTargetOS>Linux</DockerTargetOS>
+	<DockerPublishLocally>False</DockerPublishLocally>
     <ProjectGuid>81dded9d-158b-e303-5f62-77a2896d2a5a</ProjectGuid>
+	<DockerLaunchAction>LaunchBrowser</DockerLaunchAction>
+	<DockerServiceUrl>{Scheme}://localhost:{ServicePort}/scalar/v1</DockerServiceUrl>
+	<DockerServiceName>eternelle.api</DockerServiceName>
+	<DockerComposeProjectName>eternelle</DockerComposeProjectName>
   </PropertyGroup>
   <ItemGroup>
     <None Include="docker-compose.override.yml">
diff --git a/docker-compose.yml b/docker-compose.yml
index 43bc454..6cf9737 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -47,6 +47,22 @@ services:
       retries: 5
       start_period: 5s
 
+  eternelle.identity:
+    image: quay.io/keycloak/keycloak:26.5.1
+    container_name: Eternelle.Identity
+    command: start-dev --import-realm
+    environment:
+      - KC_HEALTH_ENABLED=true
+      - KEYCLOAK_ADMIN=admin
+      - KEYCLOAK_ADMIN_PASSWORD=admin
+    volumes:
+      - ./.containers/identity:/opt/keycloak/data
+      - ./.files:/opt/keycloak/data/import
+    ports:
+      - 18080:8080
+      - 9100:9000
+    user: root # Required to set volume permissions
+
   eternelle.seq:
     image: datalust/seq:latest
     container_name: Eternelle.Seq
diff --git a/src/API/Eternelle.Api/Eternelle.Api.csproj b/src/API/Eternelle.Api/Eternelle.Api.csproj
index 8cdf7ec..cc488d7 100644
--- a/src/API/Eternelle.Api/Eternelle.Api.csproj
+++ b/src/API/Eternelle.Api/Eternelle.Api.csproj
@@ -21,6 +21,7 @@
   </ItemGroup>
 
   <ItemGroup>
+    <ProjectReference Include="..\..\Modules\Users\Eternelle.Modules.Users.Infrastructure\Eternelle.Modules.Users.Infrastructure.csproj" />
     <ProjectReference Include="..\..\Modules\Weddings\Eternelle.Modules.Weddings.Infrastructure\Eternelle.Modules.Weddings.Infrastructure.csproj" />
   </ItemGroup>
 
diff --git a/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs b/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
index 9b8a883..b56f3b5 100644
--- a/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
+++ b/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
@@ -1,3 +1,4 @@
+using Eternelle.Modules.Users.Infrastructure.Database;
 using Eternelle.Modules.Weddings.Infrastructure.Database;
 using Microsoft.EntityFrameworkCore;
 
@@ -10,6 +11,7 @@ public static void ApplyMigrations(this IApplicationBuilder app)
         using IServiceScope scope = app.ApplicationServices.CreateScope();
 
         ApplyMigration<WeddingsDbContext>(scope);
+        ApplyMigration<UsersDbContext>(scope);
     }
 
     private static void ApplyMigration<TDbContext>(IServiceScope scope)
diff --git a/src/API/Eternelle.Api/Program.cs b/src/API/Eternelle.Api/Program.cs
index c03d8eb..b77968e 100644
--- a/src/API/Eternelle.Api/Program.cs
+++ b/src/API/Eternelle.Api/Program.cs
@@ -1,3 +1,4 @@
+using System.Threading.RateLimiting;
 using Eternelle.Api.Extensions;
 using Eternelle.Api.Middleware;
 using Eternelle.Api.OpenTelemetry;
@@ -5,14 +6,13 @@
 using Eternelle.Common.Infrastructure;
 using Eternelle.Common.Infrastructure.Configuration;
 using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Modules.Users.Infrastructure;
 using Eternelle.Modules.Weddings.Infrastructure;
 using Eternelle.Modules.Weddings.Presentation;
 using HealthChecks.UI.Client;
 using Microsoft.AspNetCore.Diagnostics.HealthChecks;
-using Microsoft.AspNetCore.RateLimiting;
 using Scalar.AspNetCore;
 using Serilog;
-using System.Threading.RateLimiting;
 
 WebApplicationBuilder builder = WebApplication.CreateBuilder(args);
 
@@ -24,7 +24,8 @@
 builder.Services.AddOpenApi();
 
 builder.Services.AddApplication([
-    Eternelle.Modules.Weddings.Application.AssemblyReference.Assembly
+    Eternelle.Modules.Weddings.Application.AssemblyReference.Assembly,
+    Eternelle.Modules.Users.Application.AssemblyReference.Assembly
 ]);
 
 string databaseConnectionString = builder.Configuration.GetConnectionStringOrThrow("Database");
@@ -36,14 +37,19 @@
     databaseConnectionString: databaseConnectionString,
     redisConnectionString: redisConnectionString);
 
+builder.Configuration.AddModuleConfiguration(["weddings", "users"]);
+
+Uri keyCloakHealthUrl = builder.Configuration.GetKeyCloakHealthUrl();
+
 builder.Services.AddHealthChecks()
     .AddNpgSql(databaseConnectionString)
-    .AddRedis(redisConnectionString);
-
-builder.Configuration.AddModuleConfiguration(["weddings"]);
+    .AddRedis(redisConnectionString)
+    .AddKeyCloak(keyCloakHealthUrl);
 
 builder.Services.AddWeddingsModule(builder.Configuration);
 
+builder.Services.AddUsersModule(builder.Configuration);
+
 builder.Services.AddRateLimiter(options =>
 {
     // IP-based fixed-window limiter for the public guest photo upload endpoint.
@@ -82,6 +88,10 @@
 
 app.UseExceptionHandler();
 
+app.UseAuthentication();
+
+app.UseAuthorization();
+
 app.UseRateLimiter();
 
 app.MapEndpoints();
diff --git a/src/API/Eternelle.Api/appsettings.Development.json b/src/API/Eternelle.Api/appsettings.Development.json
index ddb0ed2..0e710be 100644
--- a/src/API/Eternelle.Api/appsettings.Development.json
+++ b/src/API/Eternelle.Api/appsettings.Development.json
@@ -24,7 +24,9 @@
       "Override": {
         "Microsoft": "Information",
         "Eternelle.Modules.Weddings.Infrastructure.Outbox": "Warning",
-        "Eternelle.Modules.Weddings.Infrastructure.Inbox": "Warning"
+        "Eternelle.Modules.Weddings.Infrastructure.Inbox": "Warning",
+        "Eternelle.Modules.Users.Infrastructure.Outbox": "Warning",
+        "Eternelle.Modules.Users.Infrastructure.Inbox": "Warning"
       }
     },
     "WriteTo": [
diff --git a/src/API/Eternelle.Api/modules.users.Development.json b/src/API/Eternelle.Api/modules.users.Development.json
new file mode 100644
index 0000000..64be9fb
--- /dev/null
+++ b/src/API/Eternelle.Api/modules.users.Development.json
@@ -0,0 +1,12 @@
+{
+  "Users": {
+    "Outbox": {
+      "IntervalInSeconds": 5,
+      "BatchSize": 20
+    },
+    "Inbox": {
+      "IntervalInSeconds": 5,
+      "BatchSize": 20
+    }
+  }
+}
diff --git a/src/API/Eternelle.Api/modules.users.json b/src/API/Eternelle.Api/modules.users.json
new file mode 100644
index 0000000..b3e920d
--- /dev/null
+++ b/src/API/Eternelle.Api/modules.users.json
@@ -0,0 +1,12 @@
+{
+  "Users": {
+    "Outbox": {
+      "IntervalInSeconds": 5,
+      "BatchSize": 50
+    },
+    "Inbox": {
+      "IntervalInSeconds": 5,
+      "BatchSize": 50
+    }
+  }
+}
diff --git a/src/Common/Eternelle.Common.Infrastructure/Authentication/ClaimsPrincipalExtensions.cs b/src/Common/Eternelle.Common.Application/Authentication/ClaimsPrincipalExtensions.cs
similarity index 91%
rename from src/Common/Eternelle.Common.Infrastructure/Authentication/ClaimsPrincipalExtensions.cs
rename to src/Common/Eternelle.Common.Application/Authentication/ClaimsPrincipalExtensions.cs
index 97b2b35..18984f6 100644
--- a/src/Common/Eternelle.Common.Infrastructure/Authentication/ClaimsPrincipalExtensions.cs
+++ b/src/Common/Eternelle.Common.Application/Authentication/ClaimsPrincipalExtensions.cs
@@ -1,7 +1,7 @@
-using System.Security.Claims;
+using System.Security.Claims;
 using Eternelle.Common.Application.Exceptions;
 
-namespace Eternelle.Common.Infrastructure.Authentication;
+namespace Eternelle.Common.Application.Authentication;
 
 public static class ClaimsPrincipalExtensions
 {
diff --git a/src/Common/Eternelle.Common.Infrastructure/Authentication/CustomClaims.cs b/src/Common/Eternelle.Common.Application/Authentication/CustomClaims.cs
similarity index 67%
rename from src/Common/Eternelle.Common.Infrastructure/Authentication/CustomClaims.cs
rename to src/Common/Eternelle.Common.Application/Authentication/CustomClaims.cs
index 8bdd3ff..8cc7597 100644
--- a/src/Common/Eternelle.Common.Infrastructure/Authentication/CustomClaims.cs
+++ b/src/Common/Eternelle.Common.Application/Authentication/CustomClaims.cs
@@ -1,4 +1,4 @@
-namespace Eternelle.Common.Infrastructure.Authentication;
+namespace Eternelle.Common.Application.Authentication;
 
 public static class CustomClaims
 {
diff --git a/src/Common/Eternelle.Common.Infrastructure/Authorization/CustomClaimsTransformation.cs b/src/Common/Eternelle.Common.Infrastructure/Authorization/CustomClaimsTransformation.cs
index 3568a0d..2ea2a46 100644
--- a/src/Common/Eternelle.Common.Infrastructure/Authorization/CustomClaimsTransformation.cs
+++ b/src/Common/Eternelle.Common.Infrastructure/Authorization/CustomClaimsTransformation.cs
@@ -1,5 +1,5 @@
 using System.Security.Claims;
-using Eternelle.Common.Infrastructure.Authentication;
+using Eternelle.Common.Application.Authentication;
 using Eternelle.Common.Application.Authorization;
 using Eternelle.Common.Application.Exceptions;
 using Eternelle.Common.Domain;
@@ -27,6 +27,15 @@ public async Task<ClaimsPrincipal> TransformAsync(ClaimsPrincipal principal)
 
         if (result.IsFailure)
         {
+            // A valid token whose identity has no local user yet (e.g. the first call to
+            // /users/register right after Keycloak signup) has no app permissions. Return
+            // the principal unchanged rather than failing the request. Any other error is
+            // a real fault and still throws.
+            if (result.Error.Type == ErrorType.NotFound)
+            {
+                return principal;
+            }
+
             throw new EternelleException(nameof(IPermissionService.GetUserPermissionsAsync), result.Error);
         }
 
diff --git a/src/Common/Eternelle.Common.Infrastructure/Authorization/PermissionAuthorizationHandler.cs b/src/Common/Eternelle.Common.Infrastructure/Authorization/PermissionAuthorizationHandler.cs
index 00beafd..94c1eb4 100644
--- a/src/Common/Eternelle.Common.Infrastructure/Authorization/PermissionAuthorizationHandler.cs
+++ b/src/Common/Eternelle.Common.Infrastructure/Authorization/PermissionAuthorizationHandler.cs
@@ -1,4 +1,4 @@
-using Eternelle.Common.Infrastructure.Authentication;
+using Eternelle.Common.Application.Authentication;
 using Microsoft.AspNetCore.Authorization;
 
 namespace Eternelle.Common.Infrastructure.Authorization;
diff --git a/src/Common/Eternelle.Common.Presentation/Eternelle.Common.Presentation.csproj b/src/Common/Eternelle.Common.Presentation/Eternelle.Common.Presentation.csproj
index 5c9cdfd..526d4e9 100644
--- a/src/Common/Eternelle.Common.Presentation/Eternelle.Common.Presentation.csproj
+++ b/src/Common/Eternelle.Common.Presentation/Eternelle.Common.Presentation.csproj
@@ -5,6 +5,7 @@
   </ItemGroup>
 
   <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Common.Application\Eternelle.Common.Application.csproj" />
     <ProjectReference Include="..\Eternelle.Common.Domain\Eternelle.Common.Domain.csproj" />
   </ItemGroup>
 
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Abstractions/Data/IUnitOfWork.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Abstractions/Data/IUnitOfWork.cs
new file mode 100644
index 0000000..2266723
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Abstractions/Data/IUnitOfWork.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Users.Application.Abstractions.Data;
+
+public interface IUnitOfWork
+{
+    Task<int> SaveChangesAsync(CancellationToken cancellationToken = default);
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/AssemblyReference.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/AssemblyReference.cs
new file mode 100644
index 0000000..0cc8d12
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/AssemblyReference.cs
@@ -0,0 +1,8 @@
+using System.Reflection;
+
+namespace Eternelle.Modules.Users.Application;
+
+public static class AssemblyReference
+{
+    public static readonly Assembly Assembly = typeof(AssemblyReference).Assembly;
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Eternelle.Modules.Users.Application.csproj b/src/Modules/Users/Eternelle.Modules.Users.Application/Eternelle.Modules.Users.Application.csproj
new file mode 100644
index 0000000..8dac27b
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Eternelle.Modules.Users.Application.csproj
@@ -0,0 +1,9 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Users.Domain\Eternelle.Modules.Users.Domain.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Users.IntegrationEvents\Eternelle.Modules.Users.IntegrationEvents.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Application\Eternelle.Common.Application.csproj" />
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQuery.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQuery.cs
new file mode 100644
index 0000000..8d8e98c
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQuery.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Users.Application.Users.GetUser;
+
+public sealed record GetUserQuery(Guid UserId) : IQuery<UserResponse>;
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQueryHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQueryHandler.cs
new file mode 100644
index 0000000..a8250a8
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQueryHandler.cs
@@ -0,0 +1,39 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Users.Domain.Users;
+
+namespace Eternelle.Modules.Users.Application.Users.GetUser;
+
+internal sealed class GetUserQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetUserQuery, UserResponse>
+{
+    public async Task<Result<UserResponse>> Handle(GetUserQuery request, CancellationToken cancellationToken)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        const string sql =
+            $"""
+             SELECT
+                 id AS {nameof(UserResponse.Id)},
+                 email AS {nameof(UserResponse.Email)},
+                 first_name AS {nameof(UserResponse.FirstName)},
+                 last_name AS {nameof(UserResponse.LastName)},
+                 phone_number AS {nameof(UserResponse.PhoneNumber)}
+             FROM users.users
+             WHERE id = @UserId
+             """;
+
+        UserResponse? user = await connection.QuerySingleOrDefaultAsync<UserResponse>(
+            new CommandDefinition(sql, request, cancellationToken: cancellationToken));
+
+        if (user is null)
+        {
+            return Result.Failure<UserResponse>(UserErrors.NotFound(request.UserId));
+        }
+
+        return user;
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/UserResponse.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/UserResponse.cs
new file mode 100644
index 0000000..33182ec
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/UserResponse.cs
@@ -0,0 +1,3 @@
+namespace Eternelle.Modules.Users.Application.Users.GetUser;
+
+public sealed record UserResponse(Guid Id, string Email, string FirstName, string LastName, string? PhoneNumber);
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQuery.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQuery.cs
new file mode 100644
index 0000000..c311a47
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQuery.cs
@@ -0,0 +1,6 @@
+using Eternelle.Common.Application.Authorization;
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Users.Application.Users.GetUserPermissions;
+
+public sealed record GetUserPermissionsQuery(string IdentityId) : IQuery<PermissionsResponse>;
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQueryHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQueryHandler.cs
new file mode 100644
index 0000000..c8b94d2
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQueryHandler.cs
@@ -0,0 +1,48 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Authorization;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Users.Domain.Users;
+
+namespace Eternelle.Modules.Users.Application.Users.GetUserPermissions;
+
+internal sealed class GetUserPermissionsQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetUserPermissionsQuery, PermissionsResponse>
+{
+    public async Task<Result<PermissionsResponse>> Handle(
+        GetUserPermissionsQuery request,
+        CancellationToken cancellationToken)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        const string sql =
+            $"""
+             SELECT DISTINCT
+                 u.id AS {nameof(UserPermission.UserId)},
+                 rp.permission_code AS {nameof(UserPermission.Permission)}
+             FROM users.users u
+             JOIN users.user_roles ur ON ur.user_id = u.id
+             JOIN users.role_permissions rp ON rp.role_name = ur.role_name
+             WHERE u.identity_id = @IdentityId
+             """;
+
+        List<UserPermission> permissions = (await connection.QueryAsync<UserPermission>(
+            new CommandDefinition(sql, request, cancellationToken: cancellationToken))).AsList();
+
+        if (!permissions.Any())
+        {
+            return Result.Failure<PermissionsResponse>(UserErrors.NotFound(request.IdentityId));
+        }
+
+        return new PermissionsResponse(permissions[0].UserId, permissions.Select(p => p.Permission).ToHashSet());
+    }
+
+    internal sealed class UserPermission
+    {
+        internal Guid UserId { get; init; }
+
+        internal string Permission { get; init; } = string.Empty;
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommand.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommand.cs
new file mode 100644
index 0000000..7ea33c6
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommand.cs
@@ -0,0 +1,6 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Users.Application.Users.RegisterUser;
+
+public sealed record RegisterUserCommand(string IdentityId, string Email, string FirstName, string LastName)
+    : ICommand<Guid>;
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommandHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommandHandler.cs
new file mode 100644
index 0000000..8f74ca3
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommandHandler.cs
@@ -0,0 +1,50 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Users.Application.Abstractions.Data;
+using Eternelle.Modules.Users.Domain.Users;
+
+namespace Eternelle.Modules.Users.Application.Users.RegisterUser;
+
+internal sealed class RegisterUserCommandHandler(
+    IUserRepository userRepository,
+    IUnitOfWork unitOfWork)
+    : ICommandHandler<RegisterUserCommand, Guid>
+{
+    public async Task<Result<Guid>> Handle(RegisterUserCommand command, CancellationToken cancellationToken)
+    {
+        // Idempotent: signup happened at Keycloak, so a retried /users/register
+        // for an already-provisioned identity returns the existing local user.
+        User? existing = await userRepository.GetByIdentityIdAsync(command.IdentityId, cancellationToken);
+        if (existing is not null)
+        {
+            return existing.Id.Value;
+        }
+
+        Result<Email> email = Email.Create(command.Email);
+        Result<PersonName> firstName = PersonName.Create(command.FirstName);
+        Result<PersonName> lastName = PersonName.Create(command.LastName);
+
+        if (email.IsFailure)
+        {
+            return Result.Failure<Guid>(email.Error);
+        }
+
+        if (firstName.IsFailure)
+        {
+            return Result.Failure<Guid>(firstName.Error);
+        }
+
+        if (lastName.IsFailure)
+        {
+            return Result.Failure<Guid>(lastName.Error);
+        }
+
+        var user = User.Create(command.IdentityId, email.Value, firstName.Value, lastName.Value);
+
+        userRepository.Insert(user);
+
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return user.Id.Value;
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommandValidator.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommandValidator.cs
new file mode 100644
index 0000000..e5c5e2c
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/RegisterUserCommandValidator.cs
@@ -0,0 +1,15 @@
+using Eternelle.Modules.Users.Domain.Users;
+using FluentValidation;
+
+namespace Eternelle.Modules.Users.Application.Users.RegisterUser;
+
+internal sealed class RegisterUserCommandValidator : AbstractValidator<RegisterUserCommand>
+{
+    public RegisterUserCommandValidator()
+    {
+        RuleFor(c => c.IdentityId).NotEmpty();
+        RuleFor(c => c.Email).NotEmpty().EmailAddress().MaximumLength(Email.MaxLength);
+        RuleFor(c => c.FirstName).NotEmpty().MaximumLength(PersonName.MaxLength);
+        RuleFor(c => c.LastName).NotEmpty().MaximumLength(PersonName.MaxLength);
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/UserRegisteredDomainEventHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/UserRegisteredDomainEventHandler.cs
new file mode 100644
index 0000000..ec0a6ae
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/RegisterUser/UserRegisteredDomainEventHandler.cs
@@ -0,0 +1,25 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Users.Domain.Users;
+using Eternelle.Modules.Users.IntegrationEvents;
+
+namespace Eternelle.Modules.Users.Application.Users.RegisterUser;
+
+internal sealed class UserRegisteredDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<UserRegisteredDomainEvent>
+{
+    public override async Task Handle(
+        UserRegisteredDomainEvent domainEvent,
+        CancellationToken cancellationToken = default)
+    {
+        await eventBus.PublishAsync(
+            new UserRegisteredIntegrationEvent(
+                domainEvent.Id,
+                domainEvent.OccurredOnUtc,
+                domainEvent.UserId,
+                domainEvent.Email,
+                domainEvent.FirstName,
+                domainEvent.LastName),
+            cancellationToken);
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserComand.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserComand.cs
new file mode 100644
index 0000000..1963dc5
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserComand.cs
@@ -0,0 +1,6 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Users.Application.Users.UpdateUser;
+
+public sealed record UpdateUserCommand(Guid UserId, string FirstName, string LastName, string? PhoneNumber)
+    : ICommand;
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserCommandHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserCommandHandler.cs
new file mode 100644
index 0000000..0abf3e8
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserCommandHandler.cs
@@ -0,0 +1,54 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Users.Application.Abstractions.Data;
+using Eternelle.Modules.Users.Domain.Users;
+
+namespace Eternelle.Modules.Users.Application.Users.UpdateUser;
+
+internal sealed class UpdateUserCommandHandler(IUserRepository userRepository, IUnitOfWork unitOfWork)
+    : ICommandHandler<UpdateUserCommand>
+{
+    public async Task<Result> Handle(UpdateUserCommand command, CancellationToken cancellationToken)
+    {
+        // Target is always the authenticated caller — the endpoint sets UserId = claims.GetUserId(), so there is no IDOR surface here.
+        User? user = await userRepository.GetAsync(new UserId(command.UserId), cancellationToken);
+
+        if (user is null)
+        {
+            return Result.Failure(UserErrors.NotFound(command.UserId));
+        }
+
+        Result<PersonName> firstName = PersonName.Create(command.FirstName);
+        Result<PersonName> lastName = PersonName.Create(command.LastName);
+
+        if (firstName.IsFailure)
+        {
+            return Result.Failure(firstName.Error);
+        }
+
+        if (lastName.IsFailure)
+        {
+            return Result.Failure(lastName.Error);
+        }
+
+        PhoneNumber? phoneNumber = null;
+        if (command.PhoneNumber is not null)
+        {
+            Result<PhoneNumber> phone = PhoneNumber.Create(command.PhoneNumber);
+            if (phone.IsFailure)
+            {
+                return Result.Failure(phone.Error);
+            }
+
+            phoneNumber = phone.Value;
+        }
+
+        user.UpdateProfile(firstName.Value, lastName.Value, phoneNumber);
+
+        userRepository.Update(user);
+
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserCommandValidator.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserCommandValidator.cs
new file mode 100644
index 0000000..3be9a9c
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UpdateUserCommandValidator.cs
@@ -0,0 +1,17 @@
+using Eternelle.Modules.Users.Domain.Users;
+using FluentValidation;
+
+namespace Eternelle.Modules.Users.Application.Users.UpdateUser;
+
+internal sealed class UpdateUserCommandValidator : AbstractValidator<UpdateUserCommand>
+{
+    public UpdateUserCommandValidator()
+    {
+        RuleFor(c => c.UserId).NotEmpty();
+        RuleFor(c => c.FirstName).NotEmpty().MaximumLength(PersonName.MaxLength);
+        RuleFor(c => c.LastName).NotEmpty().MaximumLength(PersonName.MaxLength);
+        RuleFor(c => c.PhoneNumber)
+            .MaximumLength(PhoneNumber.MaxLength)
+            .When(c => c.PhoneNumber is not null);
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UserProfileUpdatedDomainEventHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UserProfileUpdatedDomainEventHandler.cs
new file mode 100644
index 0000000..716ebdb
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/UpdateUser/UserProfileUpdatedDomainEventHandler.cs
@@ -0,0 +1,25 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Users.Domain.Users;
+using Eternelle.Modules.Users.IntegrationEvents;
+
+namespace Eternelle.Modules.Users.Application.Users.UpdateUser;
+
+internal sealed class UserProfileUpdatedDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<UserProfileUpdatedDomainEvent>
+{
+    public override async Task Handle(
+        UserProfileUpdatedDomainEvent domainEvent,
+        CancellationToken cancellationToken = default)
+    {
+        await eventBus.PublishAsync(
+            new UserProfileUpdatedIntegrationEvent(
+                domainEvent.Id,
+                domainEvent.OccurredOnUtc,
+                domainEvent.UserId,
+                domainEvent.FirstName,
+                domainEvent.LastName,
+                domainEvent.PhoneNumber),
+            cancellationToken);
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/AssemblyInfo.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/AssemblyInfo.cs
new file mode 100644
index 0000000..7d3d2d9
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/AssemblyInfo.cs
@@ -0,0 +1,6 @@
+using System.Runtime.CompilerServices;
+
+// Allow the Infrastructure layer to access internal members — specifically
+// FromPersistence() factory methods on value objects, which bypass Create()
+// validation for values that were already validated on write.
+[assembly: InternalsVisibleTo("Eternelle.Modules.Users.Infrastructure")]
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Eternelle.Modules.Users.Domain.csproj b/src/Modules/Users/Eternelle.Modules.Users.Domain/Eternelle.Modules.Users.Domain.csproj
new file mode 100644
index 0000000..419ba76
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Eternelle.Modules.Users.Domain.csproj
@@ -0,0 +1,7 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Domain\Eternelle.Common.Domain.csproj" />
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Email.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Email.cs
new file mode 100644
index 0000000..92ebc80
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Email.cs
@@ -0,0 +1,43 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public sealed record Email
+{
+    public const int MaxLength = 300;
+
+    private Email(string value) => Value = value;
+
+    public string Value { get; }
+
+    public static Result<Email> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<Email>(EmailErrors.Empty);
+        }
+
+        string trimmed = raw.Trim();
+
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<Email>(EmailErrors.TooLong);
+        }
+
+        // Minimal structural check: exactly one '@', non-empty local and domain parts,
+        // and a dot in the domain. Full RFC validation is intentionally out of scope —
+        // Keycloak already validated the address at signup.
+        int at = trimmed.IndexOf('@');
+        if (at <= 0 || at != trimmed.LastIndexOf('@') || at == trimmed.Length - 1
+            || !trimmed[(at + 1)..].Contains('.'))
+        {
+            return Result.Failure<Email>(EmailErrors.InvalidFormat);
+        }
+
+        return Result.Success(new Email(trimmed));
+    }
+
+    public override string ToString() => Value;
+
+    internal static Email FromPersistence(string value) => new(value);
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/EmailErrors.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/EmailErrors.cs
new file mode 100644
index 0000000..e76547f
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/EmailErrors.cs
@@ -0,0 +1,15 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public static class EmailErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("Email.Empty", "Email must not be empty");
+
+    public static readonly Error TooLong =
+        Error.Problem("Email.TooLong", $"Email must not exceed {Email.MaxLength} characters");
+
+    public static readonly Error InvalidFormat =
+        Error.Problem("Email.InvalidFormat", "Email format is invalid");
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/IUserRepository.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/IUserRepository.cs
new file mode 100644
index 0000000..f86b131
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/IUserRepository.cs
@@ -0,0 +1,12 @@
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public interface IUserRepository
+{
+    Task<User?> GetAsync(UserId id, CancellationToken cancellationToken = default);
+
+    Task<User?> GetByIdentityIdAsync(string identityId, CancellationToken cancellationToken = default);
+
+    void Insert(User user);
+
+    void Update(User user);
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Permission.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Permission.cs
new file mode 100644
index 0000000..990ffad
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Permission.cs
@@ -0,0 +1,16 @@
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public sealed class Permission
+{
+    public const int CodeMaxLength = 100;
+
+    public static readonly Permission GetUser = new("users:read");
+    public static readonly Permission ModifyUser = new("users:update");
+
+    private Permission(string code)
+    {
+        Code = code;
+    }
+
+    public string Code { get; }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PersonName.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PersonName.cs
new file mode 100644
index 0000000..ba5a58e
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PersonName.cs
@@ -0,0 +1,33 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public sealed record PersonName
+{
+    public const int MaxLength = 200;
+
+    private PersonName(string value) => Value = value;
+
+    public string Value { get; }
+
+    public static Result<PersonName> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<PersonName>(PersonNameErrors.Empty);
+        }
+
+        string trimmed = raw.Trim();
+
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<PersonName>(PersonNameErrors.TooLong);
+        }
+
+        return Result.Success(new PersonName(trimmed));
+    }
+
+    public override string ToString() => Value;
+
+    internal static PersonName FromPersistence(string value) => new(value);
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PersonNameErrors.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PersonNameErrors.cs
new file mode 100644
index 0000000..ac0e3a5
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PersonNameErrors.cs
@@ -0,0 +1,12 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public static class PersonNameErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("PersonName.Empty", "Name must not be empty");
+
+    public static readonly Error TooLong =
+        Error.Problem("PersonName.TooLong", $"Name must not exceed {PersonName.MaxLength} characters");
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PhoneNumber.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PhoneNumber.cs
new file mode 100644
index 0000000..4a18597
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PhoneNumber.cs
@@ -0,0 +1,38 @@
+using System.Text.RegularExpressions;
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public sealed partial record PhoneNumber
+{
+    // E.164: '+' followed by a country code (first digit 1-9) and up to 14 more digits.
+    public const int MaxLength = 16; // '+' + 15 digits
+
+    private PhoneNumber(string value) => Value = value;
+
+    public string Value { get; }
+
+    public static Result<PhoneNumber> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<PhoneNumber>(PhoneNumberErrors.Empty);
+        }
+
+        string trimmed = raw.Trim();
+
+        if (!E164Regex().IsMatch(trimmed))
+        {
+            return Result.Failure<PhoneNumber>(PhoneNumberErrors.InvalidFormat);
+        }
+
+        return Result.Success(new PhoneNumber(trimmed));
+    }
+
+    public override string ToString() => Value;
+
+    internal static PhoneNumber FromPersistence(string value) => new(value);
+
+    [GeneratedRegex(@"^\+[1-9]\d{7,14}$")]
+    private static partial Regex E164Regex();
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PhoneNumberErrors.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PhoneNumberErrors.cs
new file mode 100644
index 0000000..30b6528
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/PhoneNumberErrors.cs
@@ -0,0 +1,14 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public static class PhoneNumberErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("PhoneNumber.Empty", "Phone number must not be empty");
+
+    public static readonly Error InvalidFormat =
+        Error.Problem(
+            "PhoneNumber.InvalidFormat",
+            "Phone number must be in E.164 format, e.g. +27831234567");
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Role.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Role.cs
new file mode 100644
index 0000000..0eb7885
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/Role.cs
@@ -0,0 +1,22 @@
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public sealed class Role
+{
+    public const int NameMaxLength = 50;
+
+    public static readonly Role Admin = new("Admin");
+    public static readonly Role Couple = new("Couple");
+    public static readonly Role Guest = new("Guest");
+
+    private Role(string name)
+    {
+        Name = name;
+    }
+
+    private Role()
+    {
+        Name = string.Empty;
+    }
+
+    public string Name { get; private set; }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/User.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/User.cs
new file mode 100644
index 0000000..d4ee4f8
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/User.cs
@@ -0,0 +1,68 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public sealed class User : Entity
+{
+    private readonly List<Role> _roles = [];
+
+    private User()
+    {
+    }
+
+    public UserId Id { get; private set; }
+
+    public string IdentityId { get; private set; }
+
+    public Email Email { get; private set; }
+
+    public PersonName FirstName { get; private set; }
+
+    public PersonName LastName { get; private set; }
+
+    public PhoneNumber? PhoneNumber { get; private set; }
+
+    public IReadOnlyCollection<Role> Roles => _roles.AsReadOnly();
+
+    public static User Create(string identityId, Email email, PersonName firstName, PersonName lastName)
+    {
+        ArgumentException.ThrowIfNullOrWhiteSpace(identityId);
+
+        var user = new User
+        {
+            Id = UserId.New(),
+            IdentityId = identityId,
+            Email = email,
+            FirstName = firstName,
+            LastName = lastName,
+        };
+
+        user._roles.Add(Role.Couple);
+
+        user.Raise(new UserRegisteredDomainEvent(
+            user.Id.Value,
+            user.Email.Value,
+            user.FirstName.Value,
+            user.LastName.Value));
+
+        return user;
+    }
+
+    public void UpdateProfile(PersonName firstName, PersonName lastName, PhoneNumber? phoneNumber)
+    {
+        if (FirstName == firstName && LastName == lastName && PhoneNumber == phoneNumber)
+        {
+            return;
+        }
+
+        FirstName = firstName;
+        LastName = lastName;
+        PhoneNumber = phoneNumber;
+
+        Raise(new UserProfileUpdatedDomainEvent(
+            Id.Value,
+            FirstName.Value,
+            LastName.Value,
+            PhoneNumber?.Value));
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserErrors.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserErrors.cs
new file mode 100644
index 0000000..7eff79c
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserErrors.cs
@@ -0,0 +1,12 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public static class UserErrors
+{
+    public static Error NotFound(Guid userId) =>
+        Error.NotFound("Users.NotFound", $"The user with the identifier {userId} not found");
+
+    public static Error NotFound(string identityId) =>
+        Error.NotFound("Users.NotFound", $"The user with the IDP identifier {identityId} not found");
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserId.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserId.cs
new file mode 100644
index 0000000..4383e16
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserId.cs
@@ -0,0 +1,10 @@
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public readonly record struct UserId(Guid Value)
+{
+    public static UserId New() => new(Guid.CreateVersion7());
+
+    public static UserId Empty => new(Guid.Empty);
+
+    public override string ToString() => Value.ToString();
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserProfileUpdatedDomainEvent.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserProfileUpdatedDomainEvent.cs
new file mode 100644
index 0000000..0ccb1de
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserProfileUpdatedDomainEvent.cs
@@ -0,0 +1,18 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public sealed class UserProfileUpdatedDomainEvent(
+    Guid userId,
+    string firstName,
+    string lastName,
+    string? phoneNumber) : DomainEvent
+{
+    public Guid UserId { get; init; } = userId;
+
+    public string FirstName { get; init; } = firstName;
+
+    public string LastName { get; init; } = lastName;
+
+    public string? PhoneNumber { get; init; } = phoneNumber;
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserRegisteredDomainEvent.cs b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserRegisteredDomainEvent.cs
new file mode 100644
index 0000000..c803ad3
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Domain/Users/UserRegisteredDomainEvent.cs
@@ -0,0 +1,18 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Users.Domain.Users;
+
+public sealed class UserRegisteredDomainEvent(
+    Guid userId,
+    string email,
+    string firstName,
+    string lastName) : DomainEvent
+{
+    public Guid UserId { get; init; } = userId;
+
+    public string Email { get; init; } = email;
+
+    public string FirstName { get; init; } = firstName;
+
+    public string LastName { get; init; } = lastName;
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Authorization/PermissionService.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Authorization/PermissionService.cs
new file mode 100644
index 0000000..f3ff80e
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Authorization/PermissionService.cs
@@ -0,0 +1,14 @@
+using Eternelle.Common.Application.Authorization;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Users.Application.Users.GetUserPermissions;
+using MediatR;
+
+namespace Eternelle.Modules.Users.Infrastructure.Authorization;
+
+internal sealed class PermissionService(ISender sender) : IPermissionService
+{
+    public async Task<Result<PermissionsResponse>> GetUserPermissionsAsync(string identityId)
+    {
+        return await sender.Send(new GetUserPermissionsQuery(identityId));
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Converters/UserIdConverter.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Converters/UserIdConverter.cs
new file mode 100644
index 0000000..b33e8f6
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Converters/UserIdConverter.cs
@@ -0,0 +1,7 @@
+using Eternelle.Modules.Users.Domain.Users;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Users.Infrastructure.Database.Converters;
+
+internal sealed class UserIdConverter()
+    : ValueConverter<UserId, Guid>(id => id.Value, value => new UserId(value));
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260521171549_AddUserAggregates.Designer.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260521171549_AddUserAggregates.Designer.cs
new file mode 100644
index 0000000..0eb66e0
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260521171549_AddUserAggregates.Designer.cs
@@ -0,0 +1,334 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Users.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Users.Infrastructure.Database.Migrations
+{
+    [DbContext(typeof(UsersDbContext))]
+    [Migration("20260521171549_AddUserAggregates")]
+    partial class AddUserAggregates
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("users")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.Permission", b =>
+                {
+                    b.Property<string>("Code")
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("code");
+
+                    b.HasKey("Code")
+                        .HasName("pk_permissions");
+
+                    b.ToTable("permissions", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            Code = "users:read"
+                        },
+                        new
+                        {
+                            Code = "users:update"
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.Role", b =>
+                {
+                    b.Property<string>("Name")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Name")
+                        .HasName("pk_roles");
+
+                    b.ToTable("roles", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            Name = "Admin"
+                        },
+                        new
+                        {
+                            Name = "Couple"
+                        },
+                        new
+                        {
+                            Name = "Guest"
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.User", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasMaxLength(300)
+                        .HasColumnType("character varying(300)")
+                        .HasColumnName("email");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("first_name");
+
+                    b.Property<string>("IdentityId")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("identity_id");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("last_name");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasMaxLength(16)
+                        .HasColumnType("character varying(16)")
+                        .HasColumnName("phone_number");
+
+                    b.HasKey("Id")
+                        .HasName("pk_users");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasDatabaseName("ix_users_email");
+
+                    b.HasIndex("IdentityId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_users_identity_id");
+
+                    b.ToTable("users", "users");
+                });
+
+            modelBuilder.Entity("PermissionRole", b =>
+                {
+                    b.Property<string>("PermissionCode")
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("permission_code");
+
+                    b.Property<string>("RoleName")
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("role_name");
+
+                    b.HasKey("PermissionCode", "RoleName")
+                        .HasName("pk_role_permissions");
+
+                    b.HasIndex("RoleName")
+                        .HasDatabaseName("ix_role_permissions_role_name");
+
+                    b.ToTable("role_permissions", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Couple"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:update",
+                            RoleName = "Couple"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Admin"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:update",
+                            RoleName = "Admin"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Guest"
+                        });
+                });
+
+            modelBuilder.Entity("RoleUser", b =>
+                {
+                    b.Property<string>("RolesName")
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("role_name");
+
+                    b.Property<Guid>("UserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("user_id");
+
+                    b.HasKey("RolesName", "UserId")
+                        .HasName("pk_user_roles");
+
+                    b.HasIndex("UserId")
+                        .HasDatabaseName("ix_user_roles_user_id");
+
+                    b.ToTable("user_roles", "users");
+                });
+
+            modelBuilder.Entity("PermissionRole", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Permission", null)
+                        .WithMany()
+                        .HasForeignKey("PermissionCode")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_role_permissions_permissions_permission_code");
+
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleName")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_role_permissions_roles_role_name");
+                });
+
+            modelBuilder.Entity("RoleUser", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RolesName")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_roles_roles_roles_name");
+
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.User", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_roles_users_user_id");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260521171549_AddUserAggregates.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260521171549_AddUserAggregates.cs
new file mode 100644
index 0000000..1844032
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260521171549_AddUserAggregates.cs
@@ -0,0 +1,276 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+#pragma warning disable CA1814 // Prefer jagged arrays over multidimensional
+
+namespace Eternelle.Modules.Users.Infrastructure.Database.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddUserAggregates : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.EnsureSchema(
+                name: "users");
+
+            migrationBuilder.CreateTable(
+                name: "inbox_message_consumers",
+                schema: "users",
+                columns: table => new
+                {
+                    inbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_inbox_message_consumers", x => new { x.inbox_message_id, x.name });
+                });
+
+            migrationBuilder.CreateTable(
+                name: "inbox_messages",
+                schema: "users",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    type = table.Column<string>(type: "text", nullable: false),
+                    content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
+                    occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                    error = table.Column<string>(type: "text", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_inbox_messages", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "outbox_message_consumers",
+                schema: "users",
+                columns: table => new
+                {
+                    outbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_outbox_message_consumers", x => new { x.outbox_message_id, x.name });
+                });
+
+            migrationBuilder.CreateTable(
+                name: "outbox_messages",
+                schema: "users",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    type = table.Column<string>(type: "text", nullable: false),
+                    content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
+                    occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                    error = table.Column<string>(type: "text", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_outbox_messages", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "permissions",
+                schema: "users",
+                columns: table => new
+                {
+                    code = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_permissions", x => x.code);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "roles",
+                schema: "users",
+                columns: table => new
+                {
+                    name = table.Column<string>(type: "character varying(50)", maxLength: 50, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_roles", x => x.name);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "users",
+                schema: "users",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    identity_id = table.Column<string>(type: "text", nullable: false),
+                    email = table.Column<string>(type: "character varying(300)", maxLength: 300, nullable: false),
+                    first_name = table.Column<string>(type: "character varying(200)", maxLength: 200, nullable: false),
+                    last_name = table.Column<string>(type: "character varying(200)", maxLength: 200, nullable: false),
+                    phone_number = table.Column<string>(type: "character varying(16)", maxLength: 16, nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_users", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "role_permissions",
+                schema: "users",
+                columns: table => new
+                {
+                    permission_code = table.Column<string>(type: "character varying(100)", nullable: false),
+                    role_name = table.Column<string>(type: "character varying(50)", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_role_permissions", x => new { x.permission_code, x.role_name });
+                    table.ForeignKey(
+                        name: "fk_role_permissions_permissions_permission_code",
+                        column: x => x.permission_code,
+                        principalSchema: "users",
+                        principalTable: "permissions",
+                        principalColumn: "code",
+                        onDelete: ReferentialAction.Cascade);
+                    table.ForeignKey(
+                        name: "fk_role_permissions_roles_role_name",
+                        column: x => x.role_name,
+                        principalSchema: "users",
+                        principalTable: "roles",
+                        principalColumn: "name",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "user_roles",
+                schema: "users",
+                columns: table => new
+                {
+                    role_name = table.Column<string>(type: "character varying(50)", nullable: false),
+                    user_id = table.Column<Guid>(type: "uuid", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_user_roles", x => new { x.role_name, x.user_id });
+                    table.ForeignKey(
+                        name: "fk_user_roles_roles_roles_name",
+                        column: x => x.role_name,
+                        principalSchema: "users",
+                        principalTable: "roles",
+                        principalColumn: "name",
+                        onDelete: ReferentialAction.Cascade);
+                    table.ForeignKey(
+                        name: "fk_user_roles_users_user_id",
+                        column: x => x.user_id,
+                        principalSchema: "users",
+                        principalTable: "users",
+                        principalColumn: "id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.InsertData(
+                schema: "users",
+                table: "permissions",
+                column: "code",
+                values: new object[]
+                {
+                    "users:read",
+                    "users:update"
+                });
+
+            migrationBuilder.InsertData(
+                schema: "users",
+                table: "roles",
+                column: "name",
+                values: new object[]
+                {
+                    "Admin",
+                    "Couple",
+                    "Guest"
+                });
+
+            migrationBuilder.InsertData(
+                schema: "users",
+                table: "role_permissions",
+                columns: new[] { "permission_code", "role_name" },
+                values: new object[,]
+                {
+                    { "users:read", "Admin" },
+                    { "users:read", "Couple" },
+                    { "users:read", "Guest" },
+                    { "users:update", "Admin" },
+                    { "users:update", "Couple" }
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "ix_role_permissions_role_name",
+                schema: "users",
+                table: "role_permissions",
+                column: "role_name");
+
+            migrationBuilder.CreateIndex(
+                name: "ix_user_roles_user_id",
+                schema: "users",
+                table: "user_roles",
+                column: "user_id");
+
+            migrationBuilder.CreateIndex(
+                name: "ix_users_email",
+                schema: "users",
+                table: "users",
+                column: "email",
+                unique: true);
+
+            migrationBuilder.CreateIndex(
+                name: "ix_users_identity_id",
+                schema: "users",
+                table: "users",
+                column: "identity_id",
+                unique: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "inbox_message_consumers",
+                schema: "users");
+
+            migrationBuilder.DropTable(
+                name: "inbox_messages",
+                schema: "users");
+
+            migrationBuilder.DropTable(
+                name: "outbox_message_consumers",
+                schema: "users");
+
+            migrationBuilder.DropTable(
+                name: "outbox_messages",
+                schema: "users");
+
+            migrationBuilder.DropTable(
+                name: "role_permissions",
+                schema: "users");
+
+            migrationBuilder.DropTable(
+                name: "user_roles",
+                schema: "users");
+
+            migrationBuilder.DropTable(
+                name: "permissions",
+                schema: "users");
+
+            migrationBuilder.DropTable(
+                name: "roles",
+                schema: "users");
+
+            migrationBuilder.DropTable(
+                name: "users",
+                schema: "users");
+        }
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/UsersDbContextModelSnapshot.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/UsersDbContextModelSnapshot.cs
new file mode 100644
index 0000000..8b89134
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/UsersDbContextModelSnapshot.cs
@@ -0,0 +1,331 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Users.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Users.Infrastructure.Database.Migrations
+{
+    [DbContext(typeof(UsersDbContext))]
+    partial class UsersDbContextModelSnapshot : ModelSnapshot
+    {
+        protected override void BuildModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("users")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.Permission", b =>
+                {
+                    b.Property<string>("Code")
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("code");
+
+                    b.HasKey("Code")
+                        .HasName("pk_permissions");
+
+                    b.ToTable("permissions", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            Code = "users:read"
+                        },
+                        new
+                        {
+                            Code = "users:update"
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.Role", b =>
+                {
+                    b.Property<string>("Name")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Name")
+                        .HasName("pk_roles");
+
+                    b.ToTable("roles", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            Name = "Admin"
+                        },
+                        new
+                        {
+                            Name = "Couple"
+                        },
+                        new
+                        {
+                            Name = "Guest"
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.User", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasMaxLength(300)
+                        .HasColumnType("character varying(300)")
+                        .HasColumnName("email");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("first_name");
+
+                    b.Property<string>("IdentityId")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("identity_id");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("last_name");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasMaxLength(16)
+                        .HasColumnType("character varying(16)")
+                        .HasColumnName("phone_number");
+
+                    b.HasKey("Id")
+                        .HasName("pk_users");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasDatabaseName("ix_users_email");
+
+                    b.HasIndex("IdentityId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_users_identity_id");
+
+                    b.ToTable("users", "users");
+                });
+
+            modelBuilder.Entity("PermissionRole", b =>
+                {
+                    b.Property<string>("PermissionCode")
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("permission_code");
+
+                    b.Property<string>("RoleName")
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("role_name");
+
+                    b.HasKey("PermissionCode", "RoleName")
+                        .HasName("pk_role_permissions");
+
+                    b.HasIndex("RoleName")
+                        .HasDatabaseName("ix_role_permissions_role_name");
+
+                    b.ToTable("role_permissions", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Couple"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:update",
+                            RoleName = "Couple"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Admin"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:update",
+                            RoleName = "Admin"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Guest"
+                        });
+                });
+
+            modelBuilder.Entity("RoleUser", b =>
+                {
+                    b.Property<string>("RolesName")
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("role_name");
+
+                    b.Property<Guid>("UserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("user_id");
+
+                    b.HasKey("RolesName", "UserId")
+                        .HasName("pk_user_roles");
+
+                    b.HasIndex("UserId")
+                        .HasDatabaseName("ix_user_roles_user_id");
+
+                    b.ToTable("user_roles", "users");
+                });
+
+            modelBuilder.Entity("PermissionRole", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Permission", null)
+                        .WithMany()
+                        .HasForeignKey("PermissionCode")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_role_permissions_permissions_permission_code");
+
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleName")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_role_permissions_roles_role_name");
+                });
+
+            modelBuilder.Entity("RoleUser", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RolesName")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_roles_roles_roles_name");
+
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.User", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_roles_users_user_id");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Schemas.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Schemas.cs
new file mode 100644
index 0000000..896d1d2
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Schemas.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Users.Infrastructure.Database;
+
+internal static class Schemas
+{
+    internal const string Users = "users";
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/UsersDbContext.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/UsersDbContext.cs
new file mode 100644
index 0000000..21866c7
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/UsersDbContext.cs
@@ -0,0 +1,33 @@
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Modules.Users.Application.Abstractions.Data;
+using Eternelle.Modules.Users.Domain.Users;
+using Eternelle.Modules.Users.Infrastructure.Database.Converters;
+using Eternelle.Modules.Users.Infrastructure.Users;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Users.Infrastructure.Database;
+
+public sealed class UsersDbContext(DbContextOptions<UsersDbContext> options) : DbContext(options), IUnitOfWork
+{
+    internal DbSet<User> Users { get; set; }
+
+    protected override void ConfigureConventions(ModelConfigurationBuilder configurationBuilder)
+    {
+        configurationBuilder.Properties<UserId>()
+            .HaveConversion<UserIdConverter>();
+    }
+
+    protected override void OnModelCreating(ModelBuilder modelBuilder)
+    {
+        modelBuilder.HasDefaultSchema(Schemas.Users);
+
+        modelBuilder.ApplyConfiguration(new OutboxMessageConfiguration());
+        modelBuilder.ApplyConfiguration(new OutboxMessageConsumerConfiguration());
+        modelBuilder.ApplyConfiguration(new InboxMessageConfiguration());
+        modelBuilder.ApplyConfiguration(new InboxMessageConsumerConfiguration());
+        modelBuilder.ApplyConfiguration(new UserConfiguration());
+        modelBuilder.ApplyConfiguration(new RoleConfiguration());
+        modelBuilder.ApplyConfiguration(new PermissionConfiguration());
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Eternelle.Modules.Users.Infrastructure.csproj b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Eternelle.Modules.Users.Infrastructure.csproj
new file mode 100644
index 0000000..2f19678
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Eternelle.Modules.Users.Infrastructure.csproj
@@ -0,0 +1,16 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Users.Application\Eternelle.Modules.Users.Application.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Users.Presentation\Eternelle.Modules.Users.Presentation.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Infrastructure\Eternelle.Common.Infrastructure.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/ConfigureProcessInboxJob.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
new file mode 100644
index 0000000..6055a13
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
@@ -0,0 +1,23 @@
+using Microsoft.Extensions.Options;
+using Quartz;
+
+namespace Eternelle.Modules.Users.Infrastructure.Inbox;
+
+internal sealed class ConfigureProcessInboxJob(IOptions<InboxOptions> inboxOptions)
+    : IConfigureOptions<QuartzOptions>
+{
+    private readonly InboxOptions _inboxOptions = inboxOptions.Value;
+
+    public void Configure(QuartzOptions options)
+    {
+        string jobName = typeof(ProcessInboxJob).FullName!;
+
+        options
+            .AddJob<ProcessInboxJob>(configure => configure.WithIdentity(jobName))
+            .AddTrigger(configure =>
+                configure
+                    .ForJob(jobName)
+                    .WithSimpleSchedule(schedule =>
+                        schedule.WithIntervalInSeconds(_inboxOptions.IntervalInSeconds).RepeatForever()));
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
new file mode 100644
index 0000000..a76eda5
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
@@ -0,0 +1,62 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+
+namespace Eternelle.Modules.Users.Infrastructure.Inbox;
+
+internal sealed class IdempotentIntegrationEventHandler<TIntegrationEvent>(
+    IIntegrationEventHandler<TIntegrationEvent> decorated,
+    IDbConnectionFactory dbConnectionFactory)
+    : IntegrationEventHandler<TIntegrationEvent>
+    where TIntegrationEvent : IIntegrationEvent
+{
+    public override async Task Handle(
+        TIntegrationEvent integrationEvent,
+        CancellationToken cancellationToken = default)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        var inboxMessageConsumer = new InboxMessageConsumer(integrationEvent.Id, decorated.GetType().Name);
+
+        if (await InboxConsumerExistsAsync(connection, inboxMessageConsumer))
+        {
+            return;
+        }
+
+        await decorated.Handle(integrationEvent, cancellationToken);
+
+        await InsertInboxConsumerAsync(connection, inboxMessageConsumer);
+    }
+
+    private static async Task<bool> InboxConsumerExistsAsync(
+        DbConnection dbConnection,
+        InboxMessageConsumer inboxMessageConsumer)
+    {
+        const string sql =
+            """
+            SELECT EXISTS(
+                SELECT 1
+                FROM users.inbox_message_consumers
+                WHERE inbox_message_id = @InboxMessageId AND
+                      name = @Name
+            )
+            """;
+
+        return await dbConnection.ExecuteScalarAsync<bool>(sql, inboxMessageConsumer);
+    }
+
+    private static async Task InsertInboxConsumerAsync(
+        DbConnection dbConnection,
+        InboxMessageConsumer inboxMessageConsumer)
+    {
+        const string sql =
+            """
+            INSERT INTO users.inbox_message_consumers(inbox_message_id, name)
+            VALUES (@InboxMessageId, @Name)
+            """;
+
+        await dbConnection.ExecuteAsync(sql, inboxMessageConsumer);
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/InboxOptions.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/InboxOptions.cs
new file mode 100644
index 0000000..ea61b93
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/InboxOptions.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Users.Infrastructure.Inbox;
+
+internal sealed class InboxOptions
+{
+    public int IntervalInSeconds { get; init; }
+
+    public int BatchSize { get; init; }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IntegrationEventConsumer.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IntegrationEventConsumer.cs
new file mode 100644
index 0000000..3abbf06
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IntegrationEventConsumer.cs
@@ -0,0 +1,39 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using MassTransit;
+using Newtonsoft.Json;
+
+namespace Eternelle.Modules.Users.Infrastructure.Inbox;
+
+internal sealed class IntegrationEventConsumer<TIntegrationEvent>(IDbConnectionFactory dbConnectionFactory)
+    : IConsumer<TIntegrationEvent>
+    where TIntegrationEvent : IntegrationEvent
+{
+    public async Task Consume(ConsumeContext<TIntegrationEvent> context)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        TIntegrationEvent integrationEvent = context.Message;
+
+        var inboxMessage = new InboxMessage
+        {
+            Id = integrationEvent.Id,
+            Type = integrationEvent.GetType().Name,
+            Content = JsonConvert.SerializeObject(integrationEvent, SerializerSettings.Instance),
+            OccurredOnUtc = integrationEvent.OccurredOnUtc
+        };
+
+        const string sql =
+            """
+            INSERT INTO users.inbox_messages(id, type, content, occurred_on_utc)
+            VALUES (@Id, @Type, @Content::json, @OccurredOnUtc)
+            ON CONFLICT (id) DO NOTHING
+            """;
+
+        await connection.ExecuteAsync(sql, inboxMessage);
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/ProcessInboxJob.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/ProcessInboxJob.cs
new file mode 100644
index 0000000..92d553f
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/ProcessInboxJob.cs
@@ -0,0 +1,143 @@
+using System.Data;
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Newtonsoft.Json;
+using Quartz;
+
+namespace Eternelle.Modules.Users.Infrastructure.Inbox;
+
+[DisallowConcurrentExecution]
+internal sealed partial class ProcessInboxJob(
+    IDbConnectionFactory dbConnectionFactory,
+    IServiceScopeFactory serviceScopeFactory,
+    IDateTimeProvider dateTimeProvider,
+    IOptions<InboxOptions> inboxOptions,
+    ILogger<ProcessInboxJob> logger) : IJob
+{
+    private const string ModuleName = "Users";
+
+    public async Task Execute(IJobExecutionContext context)
+    {
+        LogBeginProcessing(logger, ModuleName);
+
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbTransaction transaction = await connection.BeginTransactionAsync();
+
+        IReadOnlyList<InboxMessageResponse> inboxMessages = await GetInboxMessagesAsync(connection, transaction);
+
+        foreach (InboxMessageResponse inboxMessage in inboxMessages)
+        {
+            Exception? exception = null;
+
+            try
+            {
+                IIntegrationEvent integrationEvent = JsonConvert.DeserializeObject<IIntegrationEvent>(
+                    inboxMessage.Content,
+                    SerializerSettings.Instance)!;
+
+                using IServiceScope scope = serviceScopeFactory.CreateScope();
+
+                IEnumerable<IIntegrationEventHandler> handlers = IntegrationEventHandlersFactory.GetHandlers(
+                    integrationEvent.GetType(),
+                    scope.ServiceProvider,
+                    Presentation.AssemblyReference.Assembly);
+
+                foreach (IIntegrationEventHandler integrationEventHandler in handlers)
+                {
+                    await integrationEventHandler.Handle(integrationEvent, context.CancellationToken);
+                }
+            }
+            catch (Exception caughtException)
+            {
+                LogProcessingError(logger, caughtException, ModuleName, inboxMessage.Id);
+
+                exception = caughtException;
+            }
+
+            await UpdateInboxMessageAsync(connection, transaction, inboxMessage, exception);
+        }
+
+        await transaction.CommitAsync();
+
+        LogCompleted(logger, ModuleName);
+    }
+
+    private async Task<IReadOnlyList<InboxMessageResponse>> GetInboxMessagesAsync(
+        IDbConnection connection,
+        IDbTransaction transaction)
+    {
+        string sql =
+            $"""
+             SELECT
+                id AS {nameof(InboxMessageResponse.Id)},
+                content AS {nameof(InboxMessageResponse.Content)}
+             FROM users.inbox_messages
+             WHERE processed_on_utc IS NULL
+             ORDER BY occurred_on_utc
+             LIMIT {inboxOptions.Value.BatchSize}
+             FOR UPDATE SKIP LOCKED
+             """;
+
+        IEnumerable<InboxMessageResponse> inboxMessages = await connection.QueryAsync<InboxMessageResponse>(
+            sql,
+            transaction: transaction);
+
+        return inboxMessages.AsList();
+    }
+
+    private async Task UpdateInboxMessageAsync(
+        IDbConnection connection,
+        IDbTransaction transaction,
+        InboxMessageResponse inboxMessage,
+        Exception? exception)
+    {
+        if (exception is null)
+        {
+            const string sql =
+                """
+                UPDATE users.inbox_messages
+                SET processed_on_utc = @ProcessedOnUtc,
+                    error = NULL
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { inboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                transaction: transaction);
+        }
+        else
+        {
+            const string sql =
+                """
+                UPDATE users.inbox_messages
+                SET error = @Error
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { inboxMessage.Id, Error = exception.ToString() },
+                transaction: transaction);
+        }
+    }
+
+    internal sealed record InboxMessageResponse(Guid Id, string Content);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Beginning to process inbox messages")]
+    private static partial void LogBeginProcessing(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Completed processing inbox messages")]
+    private static partial void LogCompleted(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Error, "{module} - Exception while processing inbox message {messageId}")]
+    private static partial void LogProcessingError(ILogger logger, Exception exception, string module, Guid messageId);
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
new file mode 100644
index 0000000..f0e94e6
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
@@ -0,0 +1,23 @@
+using Microsoft.Extensions.Options;
+using Quartz;
+
+namespace Eternelle.Modules.Users.Infrastructure.Outbox;
+
+internal sealed class ConfigureProcessOutboxJob(IOptions<OutboxOptions> outboxOptions)
+    : IConfigureOptions<QuartzOptions>
+{
+    private readonly OutboxOptions _outboxOptions = outboxOptions.Value;
+
+    public void Configure(QuartzOptions options)
+    {
+        string jobName = typeof(ProcessOutboxJob).FullName!;
+
+        options
+            .AddJob<ProcessOutboxJob>(configure => configure.WithIdentity(jobName))
+            .AddTrigger(configure =>
+                configure
+                    .ForJob(jobName)
+                    .WithSimpleSchedule(schedule =>
+                        schedule.WithIntervalInSeconds(_outboxOptions.IntervalInSeconds).RepeatForever()));
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
new file mode 100644
index 0000000..774927e
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -0,0 +1,61 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Infrastructure.Outbox;
+
+namespace Eternelle.Modules.Users.Infrastructure.Outbox;
+
+internal sealed class IdempotentDomainEventHandler<TDomainEvent>(
+    IDomainEventHandler<TDomainEvent> decorated,
+    IDbConnectionFactory dbConnectionFactory)
+    : DomainEventHandler<TDomainEvent>
+    where TDomainEvent : IDomainEvent
+{
+    public override async Task Handle(TDomainEvent domainEvent, CancellationToken cancellationToken = default)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
+
+        if (await OutboxConsumerExistsAsync(connection, outboxMessageConsumer))
+        {
+            return;
+        }
+
+        await decorated.Handle(domainEvent, cancellationToken);
+
+        await InsertOutboxConsumerAsync(connection, outboxMessageConsumer);
+    }
+
+    private static async Task<bool> OutboxConsumerExistsAsync(
+        DbConnection dbConnection,
+        OutboxMessageConsumer outboxMessageConsumer)
+    {
+        const string sql = 
+            """
+            SELECT EXISTS(
+                SELECT 1
+                FROM users.outbox_message_consumers
+                WHERE outbox_message_id = @OutboxMessageId AND
+                      name = @Name
+            )
+            """;
+
+        return await dbConnection.ExecuteScalarAsync<bool>(sql, outboxMessageConsumer);
+    }
+
+    private static async Task InsertOutboxConsumerAsync(
+        DbConnection dbConnection,
+        OutboxMessageConsumer outboxMessageConsumer)
+    {
+        const string sql =
+            """
+            INSERT INTO users.outbox_message_consumers(outbox_message_id, name)
+            VALUES (@OutboxMessageId, @Name)
+            """;
+
+        await dbConnection.ExecuteAsync(sql, outboxMessageConsumer);
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/OutboxOptions.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/OutboxOptions.cs
new file mode 100644
index 0000000..4d501fe
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/OutboxOptions.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Users.Infrastructure.Outbox;
+
+internal sealed class OutboxOptions
+{
+    public int IntervalInSeconds { get; init; }
+
+    public int BatchSize { get; init; }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/ProcessOutboxJob.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/ProcessOutboxJob.cs
new file mode 100644
index 0000000..e97b585
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/ProcessOutboxJob.cs
@@ -0,0 +1,144 @@
+using System.Data;
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Newtonsoft.Json;
+using Quartz;
+
+namespace Eternelle.Modules.Users.Infrastructure.Outbox;
+
+[DisallowConcurrentExecution]
+internal sealed partial class ProcessOutboxJob(
+    IDbConnectionFactory dbConnectionFactory,
+    IServiceScopeFactory serviceScopeFactory,
+    IDateTimeProvider dateTimeProvider,
+    IOptions<OutboxOptions> outboxOptions,
+    ILogger<ProcessOutboxJob> logger) : IJob
+{
+    private const string ModuleName = "Users";
+
+    public async Task Execute(IJobExecutionContext context)
+    {
+        LogBeginProcessing(logger, ModuleName);
+
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbTransaction transaction = await connection.BeginTransactionAsync();
+
+        IReadOnlyList<OutboxMessageResponse> outboxMessages = await GetOutboxMessagesAsync(connection, transaction);
+
+        foreach (OutboxMessageResponse outboxMessage in outboxMessages)
+        {
+            Exception? exception = null;
+
+            try
+            {
+                IDomainEvent domainEvent = JsonConvert.DeserializeObject<IDomainEvent>(
+                    outboxMessage.Content,
+                    SerializerSettings.Instance)!;
+
+                using IServiceScope scope = serviceScopeFactory.CreateScope();
+
+                IEnumerable<IDomainEventHandler> handlers = DomainEventHandlersFactory.GetHandlers(
+                    domainEvent.GetType(),
+                    scope.ServiceProvider,
+                    Application.AssemblyReference.Assembly);
+
+                foreach (IDomainEventHandler domainEventHandler in handlers)
+                {
+                    await domainEventHandler.Handle(domainEvent, context.CancellationToken);
+                }
+            }
+            catch (Exception caughtException)
+            {
+                LogProcessingError(logger, caughtException, ModuleName, outboxMessage.Id);
+
+                exception = caughtException;
+            }
+
+            await UpdateOutboxMessageAsync(connection, transaction, outboxMessage, exception);
+        }
+
+        await transaction.CommitAsync();
+
+        LogCompleted(logger, ModuleName);
+    }
+
+    private async Task<IReadOnlyList<OutboxMessageResponse>> GetOutboxMessagesAsync(
+        IDbConnection connection,
+        IDbTransaction transaction)
+    {
+        string sql =
+            $"""
+             SELECT
+                id AS {nameof(OutboxMessageResponse.Id)},
+                content AS {nameof(OutboxMessageResponse.Content)}
+             FROM users.outbox_messages
+             WHERE processed_on_utc IS NULL
+             ORDER BY occurred_on_utc
+             LIMIT {outboxOptions.Value.BatchSize}
+             FOR UPDATE SKIP LOCKED
+             """;
+
+        IEnumerable<OutboxMessageResponse> outboxMessages = await connection.QueryAsync<OutboxMessageResponse>(
+            sql,
+            transaction: transaction);
+
+        return outboxMessages.ToList();
+    }
+
+    private async Task UpdateOutboxMessageAsync(
+        IDbConnection connection,
+        IDbTransaction transaction,
+        OutboxMessageResponse outboxMessage,
+        Exception? exception)
+    {
+        if (exception is null)
+        {
+            const string sql =
+                """
+                UPDATE users.outbox_messages
+                SET processed_on_utc = @ProcessedOnUtc,
+                    error = NULL
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { outboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                transaction: transaction);
+        }
+        else
+        {
+            const string sql =
+                """
+                UPDATE users.outbox_messages
+                SET error = @Error
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { outboxMessage.Id, Error = exception.ToString() },
+                transaction: transaction);
+        }
+    }
+
+    internal sealed record OutboxMessageResponse(Guid Id, string Content);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Beginning to process outbox messages")]
+    private static partial void LogBeginProcessing(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Completed processing outbox messages")]
+    private static partial void LogCompleted(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Error, "{module} - Exception while processing outbox message {messageId}")]
+    private static partial void LogProcessingError(ILogger logger, Exception exception, string module, Guid messageId);
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/PermissionConfiguration.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/PermissionConfiguration.cs
new file mode 100644
index 0000000..63b50e4
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/PermissionConfiguration.cs
@@ -0,0 +1,48 @@
+using Eternelle.Modules.Users.Domain.Users;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Users.Infrastructure.Users;
+
+internal sealed class PermissionConfiguration : IEntityTypeConfiguration<Permission>
+{
+    public void Configure(EntityTypeBuilder<Permission> builder)
+    {
+        builder.ToTable("permissions");
+
+        builder.HasKey(p => p.Code);
+
+        builder.Property(p => p.Code).HasMaxLength(Permission.CodeMaxLength);
+
+        builder.HasData(
+            Permission.GetUser,
+            Permission.ModifyUser);
+
+        builder
+            .HasMany<Role>()
+            .WithMany()
+            .UsingEntity(joinBuilder =>
+            {
+                joinBuilder.ToTable("role_permissions");
+
+                joinBuilder.HasData(
+                    // Couple — a wedding owner manages their own profile.
+                    CreateRolePermission(Role.Couple, Permission.GetUser),
+                    CreateRolePermission(Role.Couple, Permission.ModifyUser),
+                    // Admin — full user management.
+                    CreateRolePermission(Role.Admin, Permission.GetUser),
+                    CreateRolePermission(Role.Admin, Permission.ModifyUser),
+                    // Guest — read-only profile.
+                    CreateRolePermission(Role.Guest, Permission.GetUser));
+            });
+    }
+
+    private static object CreateRolePermission(Role role, Permission permission)
+    {
+        return new
+        {
+            RoleName = role.Name,
+            PermissionCode = permission.Code
+        };
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/RoleConfiguration.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/RoleConfiguration.cs
new file mode 100644
index 0000000..6023644
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/RoleConfiguration.cs
@@ -0,0 +1,32 @@
+using Eternelle.Modules.Users.Domain.Users;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Users.Infrastructure.Users;
+
+internal sealed class RoleConfiguration : IEntityTypeConfiguration<Role>
+{
+    public void Configure(EntityTypeBuilder<Role> builder)
+    {
+        builder.ToTable("roles");
+
+        builder.HasKey(r => r.Name);
+
+        builder.Property(r => r.Name).HasMaxLength(Role.NameMaxLength);
+
+        builder
+            .HasMany<User>()
+            .WithMany(u => u.Roles)
+            .UsingEntity(joinBuilder =>
+            {
+                joinBuilder.ToTable("user_roles");
+
+                joinBuilder.Property("RolesName").HasColumnName("role_name");
+            });
+
+        builder.HasData(
+            Role.Admin,
+            Role.Couple,
+            Role.Guest);
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/UserConfiguration.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/UserConfiguration.cs
new file mode 100644
index 0000000..8ddd3cb
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/UserConfiguration.cs
@@ -0,0 +1,47 @@
+using Eternelle.Modules.Users.Domain.Users;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Users.Infrastructure.Users;
+
+internal sealed class UserConfiguration : IEntityTypeConfiguration<User>
+{
+    public void Configure(EntityTypeBuilder<User> builder)
+    {
+        builder.ToTable("users");
+
+        builder.HasKey(u => u.Id);
+
+        builder.Property(u => u.Id)
+            .ValueGeneratedNever();
+
+        builder.Property(u => u.IdentityId).IsRequired();
+
+        builder.Property(u => u.Email)
+            .HasConversion(v => v.Value, v => Email.FromPersistence(v))
+            .IsRequired()
+            .HasMaxLength(Email.MaxLength);
+
+        builder.Property(u => u.FirstName)
+            .HasConversion(v => v.Value, v => PersonName.FromPersistence(v))
+            .IsRequired()
+            .HasMaxLength(PersonName.MaxLength);
+
+        builder.Property(u => u.LastName)
+            .HasConversion(v => v.Value, v => PersonName.FromPersistence(v))
+            .IsRequired()
+            .HasMaxLength(PersonName.MaxLength);
+
+        // PhoneNumber is an optional VO. ?. is not allowed in expression-tree lambdas,
+        // so use explicit null checks (same approach as WeddingConfiguration.Hashtag).
+        builder.Property(u => u.PhoneNumber)
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? PhoneNumber.FromPersistence(v) : null)
+            .HasMaxLength(PhoneNumber.MaxLength);
+
+        builder.HasIndex(u => u.Email).IsUnique();
+
+        builder.HasIndex(u => u.IdentityId).IsUnique();
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/UserRepository.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/UserRepository.cs
new file mode 100644
index 0000000..80ae658
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Users/UserRepository.cs
@@ -0,0 +1,37 @@
+using Eternelle.Modules.Users.Domain.Users;
+using Eternelle.Modules.Users.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Users.Infrastructure.Users;
+
+internal sealed class UserRepository(UsersDbContext context) : IUserRepository
+{
+    public async Task<User?> GetAsync(UserId id, CancellationToken cancellationToken = default)
+    {
+        return await context.Users
+            .Include(u => u.Roles)
+            .SingleOrDefaultAsync(u => u.Id == id, cancellationToken);
+    }
+
+    public async Task<User?> GetByIdentityIdAsync(string identityId, CancellationToken cancellationToken = default)
+    {
+        return await context.Users
+            .Include(u => u.Roles)
+            .SingleOrDefaultAsync(u => u.IdentityId == identityId, cancellationToken);
+    }
+
+    public void Insert(User user)
+    {
+        foreach (Role role in user.Roles)
+        {
+            context.Attach(role);
+        }
+
+        context.Users.Add(user);
+    }
+
+    public void Update(User user)
+    {
+        context.Users.Update(user);
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/UsersModule.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/UsersModule.cs
new file mode 100644
index 0000000..bc1c717
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/UsersModule.cs
@@ -0,0 +1,118 @@
+using Eternelle.Common.Application.Authorization;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Modules.Users.Application.Abstractions.Data;
+using Eternelle.Modules.Users.Domain.Users;
+using Eternelle.Modules.Users.Infrastructure.Authorization;
+using Eternelle.Modules.Users.Infrastructure.Database;
+using Eternelle.Modules.Users.Infrastructure.Inbox;
+using Eternelle.Modules.Users.Infrastructure.Outbox;
+using Eternelle.Modules.Users.Infrastructure.Users;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+
+namespace Eternelle.Modules.Users.Infrastructure;
+
+public static class UsersModule
+{
+    public static IServiceCollection AddUsersModule(
+        this IServiceCollection services,
+        IConfiguration configuration)
+    {
+        services.AddDomainEventHandlers();
+
+        services.AddIntegrationEventHandlers();
+
+        services.AddInfrastructure(configuration);
+
+        services.AddEndpoints(Presentation.AssemblyReference.Assembly);
+
+        return services;
+    }
+
+    private static void AddInfrastructure(this IServiceCollection services, IConfiguration configuration)
+    {
+        services.AddScoped<IPermissionService, PermissionService>();
+
+        services.AddDbContext<UsersDbContext>((sp, options) =>
+            options
+                .UseNpgsql(
+                    configuration.GetConnectionString("Database"),
+                    npgsqlOptions => npgsqlOptions
+                        .MigrationsHistoryTable(HistoryRepository.DefaultTableName, Schemas.Users))
+                .AddInterceptors(sp.GetRequiredService<InsertOutboxMessagesInterceptor>())
+                .UseSnakeCaseNamingConvention());
+
+        services.AddScoped<IUserRepository, UserRepository>();
+
+        services.AddScoped<IUnitOfWork>(sp => sp.GetRequiredService<UsersDbContext>());
+
+        services.AddOptions<OutboxOptions>()
+            .Bind(configuration.GetSection("Users:Outbox"))
+            .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
+                "Users:Outbox: IntervalInSeconds and BatchSize must be greater than 0.")
+            .ValidateOnStart();
+
+        services.ConfigureOptions<ConfigureProcessOutboxJob>();
+
+        services.AddOptions<InboxOptions>()
+            .Bind(configuration.GetSection("Users:Inbox"))
+            .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
+                "Users:Inbox: IntervalInSeconds and BatchSize must be greater than 0.")
+            .ValidateOnStart();
+
+        services.ConfigureOptions<ConfigureProcessInboxJob>();
+    }
+
+    private static void AddDomainEventHandlers(this IServiceCollection services)
+    {
+        Type[] domainEventHandlers = Application.AssemblyReference.Assembly
+            .GetTypes()
+            .Where(t => t.IsAssignableTo(typeof(IDomainEventHandler)))
+            .ToArray();
+
+        foreach (Type domainEventHandler in domainEventHandlers)
+        {
+            services.TryAddScoped(domainEventHandler);
+
+            Type domainEvent = domainEventHandler
+                .GetInterfaces()
+                .Single(i => i.IsGenericType && i.GetGenericTypeDefinition() == typeof(IDomainEventHandler<>))
+                .GetGenericArguments()
+                .Single();
+
+            Type closedIdempotentHandler = typeof(IdempotentDomainEventHandler<>).MakeGenericType(domainEvent);
+
+            services.Decorate(domainEventHandler, closedIdempotentHandler);
+        }
+    }
+
+    private static void AddIntegrationEventHandlers(this IServiceCollection services)
+    {
+        Type[] integrationEventHandlers = Presentation.AssemblyReference.Assembly
+            .GetTypes()
+            .Where(t => t.IsAssignableTo(typeof(IIntegrationEventHandler)))
+            .ToArray();
+
+        foreach (Type integrationEventHandler in integrationEventHandlers)
+        {
+            services.TryAddScoped(integrationEventHandler);
+
+            Type integrationEvent = integrationEventHandler
+                .GetInterfaces()
+                .Single(i => i.IsGenericType && i.GetGenericTypeDefinition() == typeof(IIntegrationEventHandler<>))
+                .GetGenericArguments()
+                .Single();
+
+            Type closedIdempotentHandler =
+                typeof(IdempotentIntegrationEventHandler<>).MakeGenericType(integrationEvent);
+
+            services.Decorate(integrationEventHandler, closedIdempotentHandler);
+        }
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/Eternelle.Modules.Users.IntegrationEvents.csproj b/src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/Eternelle.Modules.Users.IntegrationEvents.csproj
new file mode 100644
index 0000000..b9e5a29
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/Eternelle.Modules.Users.IntegrationEvents.csproj
@@ -0,0 +1,7 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Application\Eternelle.Common.Application.csproj" />
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/UserProfileUpdatedIntegrationEvent.cs b/src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/UserProfileUpdatedIntegrationEvent.cs
new file mode 100644
index 0000000..7e93df0
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/UserProfileUpdatedIntegrationEvent.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Application.EventBus;
+
+namespace Eternelle.Modules.Users.IntegrationEvents;
+
+public sealed class UserProfileUpdatedIntegrationEvent : IntegrationEvent
+{
+    public UserProfileUpdatedIntegrationEvent(
+        Guid id,
+        DateTime occurredOnUtc,
+        Guid userId,
+        string firstName,
+        string lastName,
+        string? phoneNumber)
+        : base(id, occurredOnUtc)
+    {
+        UserId = userId;
+        FirstName = firstName;
+        LastName = lastName;
+        PhoneNumber = phoneNumber;
+    }
+
+    public Guid UserId { get; init; }
+
+    public string FirstName { get; init; }
+
+    public string LastName { get; init; }
+
+    public string? PhoneNumber { get; init; }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/UserRegisteredIntegrationEvent.cs b/src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/UserRegisteredIntegrationEvent.cs
new file mode 100644
index 0000000..cbb3168
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/UserRegisteredIntegrationEvent.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Application.EventBus;
+
+namespace Eternelle.Modules.Users.IntegrationEvents;
+
+public sealed class UserRegisteredIntegrationEvent : IntegrationEvent
+{
+    public UserRegisteredIntegrationEvent(
+        Guid id,
+        DateTime occurredOnUtc,
+        Guid userId,
+        string email,
+        string firstName,
+        string lastName)
+        : base(id, occurredOnUtc)
+    {
+        UserId = userId;
+        Email = email;
+        FirstName = firstName;
+        LastName = lastName;
+    }
+
+    public Guid UserId { get; init; }
+
+    public string Email { get; init; }
+
+    public string FirstName { get; init; }
+
+    public string LastName { get; init; }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Presentation/AssemblyReference.cs b/src/Modules/Users/Eternelle.Modules.Users.Presentation/AssemblyReference.cs
new file mode 100644
index 0000000..4917447
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Presentation/AssemblyReference.cs
@@ -0,0 +1,8 @@
+using System.Reflection;
+
+namespace Eternelle.Modules.Users.Presentation;
+
+public static class AssemblyReference
+{
+    public static readonly Assembly Assembly = typeof(AssemblyReference).Assembly;
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Presentation/Eternelle.Modules.Users.Presentation.csproj b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Eternelle.Modules.Users.Presentation.csproj
new file mode 100644
index 0000000..18d3bdd
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Eternelle.Modules.Users.Presentation.csproj
@@ -0,0 +1,8 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Presentation\Eternelle.Common.Presentation.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Users.Application\Eternelle.Modules.Users.Application.csproj" />
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Presentation/Permissions.cs b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Permissions.cs
new file mode 100644
index 0000000..c3b1c9f
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Permissions.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Users.Presentation;
+
+internal static class Permissions
+{
+    internal const string GetUser = "users:read";
+    internal const string ModifyUser = "users:update";
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Presentation/Tags.cs b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Tags.cs
new file mode 100644
index 0000000..024cf26
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Tags.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Users.Presentation;
+
+internal static class Tags
+{
+    internal const string Users = "Users";
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/GetUserProfile.cs b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/GetUserProfile.cs
new file mode 100644
index 0000000..3b6599d
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/GetUserProfile.cs
@@ -0,0 +1,27 @@
+using System.Security.Claims;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Application.Authentication;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Users.Application.Users.GetUser;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Users.Presentation.Users;
+
+internal sealed class GetUserProfile : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("users/profile", async (ClaimsPrincipal claims, ISender sender) =>
+        {
+            Result<UserResponse> result = await sender.Send(new GetUserQuery(claims.GetUserId()));
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .RequireAuthorization(Permissions.GetUser)
+        .WithTags(Tags.Users);
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/RegisterUser.cs b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/RegisterUser.cs
new file mode 100644
index 0000000..0e8ba35
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/RegisterUser.cs
@@ -0,0 +1,40 @@
+using System.Security.Claims;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Application.Authentication;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Users.Application.Users.RegisterUser;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Users.Presentation.Users;
+
+internal sealed class RegisterUser : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("users/register", async (ClaimsPrincipal claims, ISender sender) =>
+        {
+            string? email = claims.FindFirstValue(ClaimTypes.Email);
+            string? firstName = claims.FindFirstValue(ClaimTypes.GivenName);
+            string? lastName = claims.FindFirstValue(ClaimTypes.Surname);
+
+            if (string.IsNullOrWhiteSpace(email) || string.IsNullOrWhiteSpace(firstName) || string.IsNullOrWhiteSpace(lastName))
+            {
+                return Results.Problem("Required identity claims are missing.", statusCode: StatusCodes.Status400BadRequest);
+            }
+
+            Result<Guid> result = await sender.Send(new RegisterUserCommand(
+                claims.GetIdentityId(),
+                email,
+                firstName,
+                lastName));
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .RequireAuthorization()
+        .WithTags(Tags.Users);
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/UpdateUserProfile.cs b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/UpdateUserProfile.cs
new file mode 100644
index 0000000..c20960b
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/UpdateUserProfile.cs
@@ -0,0 +1,40 @@
+using System.Security.Claims;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Application.Authentication;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Users.Application.Users.UpdateUser;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Users.Presentation.Users;
+
+internal sealed class UpdateUserProfile : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPut("users/profile", async (Request request, ClaimsPrincipal claims, ISender sender) =>
+        {
+            Result result = await sender.Send(new UpdateUserCommand(
+                claims.GetUserId(),
+                request.FirstName,
+                request.LastName,
+                request.PhoneNumber));
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .RequireAuthorization(Permissions.ModifyUser)
+        .WithTags(Tags.Users);
+    }
+
+    internal sealed class Request
+    {
+        public required string FirstName { get; init; }
+
+        public required string LastName { get; init; }
+
+        public string? PhoneNumber { get; init; }
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
index c4e49ba..efcaabb 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
@@ -126,7 +126,9 @@ public Result UpdateDetails(
     public void ChangePlan(WeddingPlan plan, DateTime utcNow)
     {
         if (plan == Plan)
+        {
             return;
+        }
 
         WeddingPlan previousPlan = Plan;
         Plan = plan;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
index 935002c..a516f84 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
@@ -19,7 +19,7 @@ public override async Task Handle(
     {
         await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
 
-        var inboxMessageConsumer = new InboxMessageConsumer(integrationEvent.Id, decorated.GetType().FullName!);
+        var inboxMessageConsumer = new InboxMessageConsumer(integrationEvent.Id, decorated.GetType().Name);
 
         if (await InboxConsumerExistsAsync(connection, inboxMessageConsumer))
         {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/ProcessInboxJob.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/ProcessInboxJob.cs
index ed8516d..a8b2004 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/ProcessInboxJob.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/ProcessInboxJob.cs
@@ -83,7 +83,7 @@ FROM wedding.inbox_messages
              WHERE processed_on_utc IS NULL
              ORDER BY occurred_on_utc
              LIMIT {inboxOptions.Value.BatchSize}
-             FOR UPDATE
+             FOR UPDATE SKIP LOCKED
              """;
 
         IEnumerable<InboxMessageResponse> inboxMessages = await connection.QueryAsync<InboxMessageResponse>(
@@ -99,23 +99,35 @@ private async Task UpdateInboxMessageAsync(
         InboxMessageResponse inboxMessage,
         Exception? exception)
     {
-        const string sql =
-            """
-            UPDATE wedding.inbox_messages
-            SET processed_on_utc = @ProcessedOnUtc,
-                error = @Error
-            WHERE id = @Id
-            """;
-
-        await connection.ExecuteAsync(
-            sql,
-            new
-            {
-                inboxMessage.Id,
-                ProcessedOnUtc = dateTimeProvider.UtcNow,
-                Error = exception?.ToString()
-            },
-            transaction: transaction);
+        if (exception is null)
+        {
+            const string sql =
+                """
+                UPDATE wedding.inbox_messages
+                SET processed_on_utc = @ProcessedOnUtc,
+                    error = NULL
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { inboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                transaction: transaction);
+        }
+        else
+        {
+            const string sql =
+                """
+                UPDATE wedding.inbox_messages
+                SET error = @Error
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { inboxMessage.Id, Error = exception.ToString() },
+                transaction: transaction);
+        }
     }
 
     internal sealed record InboxMessageResponse(Guid Id, string Content);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
index 59f5a08..1d74f65 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -18,7 +18,7 @@ public override async Task Handle(TDomainEvent domainEvent, CancellationToken ca
     {
         await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
 
-        var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().FullName!);
+        var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
 
         if (await OutboxConsumerExistsAsync(connection, outboxMessageConsumer))
         {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/ProcessOutboxJob.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/ProcessOutboxJob.cs
index f9164db..9237f80 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/ProcessOutboxJob.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/ProcessOutboxJob.cs
@@ -84,7 +84,7 @@ FROM wedding.outbox_messages
              WHERE processed_on_utc IS NULL
              ORDER BY occurred_on_utc
              LIMIT {outboxOptions.Value.BatchSize}
-             FOR UPDATE
+             FOR UPDATE SKIP LOCKED
              """;
 
         IEnumerable<OutboxMessageResponse> outboxMessages = await connection.QueryAsync<OutboxMessageResponse>(
@@ -100,23 +100,35 @@ private async Task UpdateOutboxMessageAsync(
         OutboxMessageResponse outboxMessage,
         Exception? exception)
     {
-        const string sql =
-            """
-            UPDATE wedding.outbox_messages
-            SET processed_on_utc = @ProcessedOnUtc,
-                error = @Error
-            WHERE id = @Id
-            """;
-
-        await connection.ExecuteAsync(
-            sql,
-            new
-            {
-                outboxMessage.Id,
-                ProcessedOnUtc = dateTimeProvider.UtcNow,
-                Error = exception?.ToString()
-            },
-            transaction: transaction);
+        if (exception is null)
+        {
+            const string sql =
+                """
+                UPDATE wedding.outbox_messages
+                SET processed_on_utc = @ProcessedOnUtc,
+                    error = NULL
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { outboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                transaction: transaction);
+        }
+        else
+        {
+            const string sql =
+                """
+                UPDATE wedding.outbox_messages
+                SET error = @Error
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { outboxMessage.Id, Error = exception.ToString() },
+                transaction: transaction);
+        }
     }
 
     internal sealed record OutboxMessageResponse(Guid Id, string Content);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs
index 616603c..63f6cc1 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs
@@ -105,11 +105,19 @@ private static void AddInfrastructure(this IServiceCollection services, IConfigu
             .Validate(opts => !string.IsNullOrWhiteSpace(opts.BucketName), "PhotoStorage:BucketName must be provided")
             .ValidateOnStart();
 
-        services.Configure<OutboxOptions>(configuration.GetSection("Weddings:Outbox"));
+        services.AddOptions<OutboxOptions>()
+            .Bind(configuration.GetSection("Weddings:Outbox"))
+            .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
+                "Weddings:Outbox: IntervalInSeconds and BatchSize must be greater than 0.")
+            .ValidateOnStart();
 
         services.ConfigureOptions<ConfigureProcessOutboxJob>();
 
-        services.Configure<InboxOptions>(configuration.GetSection("Weddings:Inbox"));
+        services.AddOptions<InboxOptions>()
+            .Bind(configuration.GetSection("Weddings:Inbox"))
+            .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
+                "Weddings:Inbox: IntervalInSeconds and BatchSize must be greater than 0.")
+            .ValidateOnStart();
 
         services.ConfigureOptions<ConfigureProcessInboxJob>();
     }
@@ -127,7 +135,7 @@ private static void AddDomainEventHandlers(this IServiceCollection services)
 
             Type domainEvent = domainEventHandler
                 .GetInterfaces()
-                .Single(i => i.IsGenericType)
+                .Single(i => i.IsGenericType && i.GetGenericTypeDefinition() == typeof(IDomainEventHandler<>))
                 .GetGenericArguments()
                 .Single();
 
@@ -150,7 +158,7 @@ private static void AddIntegrationEventHandlers(this IServiceCollection services
 
             Type integrationEvent = integrationEventHandler
                 .GetInterfaces()
-                .Single(i => i.IsGenericType)
+                .Single(i => i.IsGenericType && i.GetGenericTypeDefinition() == typeof(IIntegrationEventHandler<>))
                 .GetGenericArguments()
                 .Single();
 

From 1b819b6f593a5f834c6adf73cbbbc32fd26d197d Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 12:27:28 +0800
Subject: [PATCH 003/155] feat(catalog): scaffold five-project module structure

---
 Eternelle.slnx                                | 22 +++++++++++++++++++
 .../AssemblyReference.cs                      |  8 +++++++
 ...ernelle.Modules.Catalog.Application.csproj |  9 ++++++++
 .../Eternelle.Modules.Catalog.Domain.csproj   |  7 ++++++
 .../Database/Schemas.cs                       |  6 +++++
 ...elle.Modules.Catalog.Infrastructure.csproj | 16 ++++++++++++++
 ...e.Modules.Catalog.IntegrationEvents.csproj |  7 ++++++
 .../AssemblyReference.cs                      |  8 +++++++
 ...rnelle.Modules.Catalog.Presentation.csproj |  8 +++++++
 9 files changed, 91 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/AssemblyReference.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Eternelle.Modules.Catalog.Application.csproj
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Eternelle.Modules.Catalog.Domain.csproj
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Schemas.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Eternelle.Modules.Catalog.Infrastructure.csproj
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/Eternelle.Modules.Catalog.IntegrationEvents.csproj
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/AssemblyReference.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Eternelle.Modules.Catalog.Presentation.csproj

diff --git a/Eternelle.slnx b/Eternelle.slnx
index b2c3b55..933c179 100644
--- a/Eternelle.slnx
+++ b/Eternelle.slnx
@@ -1,4 +1,19 @@
 <Solution>
+  <Folder Name="/docs/">
+    <File Path="docs/feature-gift-contributions.md" />
+    <File Path="docs/feature-guest-photo-upload.md" />
+    <File Path="docs/module-conventions.md" />
+  </Folder>
+  <Folder Name="/docs/superpowers/" />
+  <Folder Name="/docs/superpowers/plans/">
+    <File Path="docs/superpowers/plans/2026-05-20-users-module.md" />
+    <File Path="docs/superpowers/plans/2026-05-24-weddings-inbox-outbox-alignment.md" />
+    <File Path="docs/superpowers/plans/2026-05-27-catalog-module.md" />
+  </Folder>
+  <Folder Name="/docs/superpowers/specs/">
+    <File Path="docs/superpowers/specs/2026-05-20-users-module-design.md" />
+    <File Path="docs/superpowers/specs/2026-05-27-catalog-module-design.md" />
+  </Folder>
   <Folder Name="/Solution Items/">
     <File Path=".editorconfig" />
     <File Path="Directory.Build.props" />
@@ -15,6 +30,13 @@
     <Project Path="src/Common/Eternelle.Common.Presentation/Eternelle.Common.Presentation.csproj" Id="54cfc49d-e0bb-44a0-84ac-ee35515c1b5e" />
   </Folder>
   <Folder Name="/src/Modules/" />
+  <Folder Name="/src/Modules/Catalog/">
+    <Project Path="src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Eternelle.Modules.Catalog.Application.csproj" />
+    <Project Path="src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Eternelle.Modules.Catalog.Domain.csproj" />
+    <Project Path="src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Eternelle.Modules.Catalog.Infrastructure.csproj" />
+    <Project Path="src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/Eternelle.Modules.Catalog.IntegrationEvents.csproj" />
+    <Project Path="src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Eternelle.Modules.Catalog.Presentation.csproj" />
+  </Folder>
   <Folder Name="/src/Modules/Users/">
     <Project Path="src/Modules/Users/Eternelle.Modules.Users.Application/Eternelle.Modules.Users.Application.csproj" Id="27530601-1743-4d73-80d3-bddbf28d8eb2" />
     <Project Path="src/Modules/Users/Eternelle.Modules.Users.Domain/Eternelle.Modules.Users.Domain.csproj" Id="823bb7bc-2382-4588-a404-73ae27f49b02" />
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/AssemblyReference.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/AssemblyReference.cs
new file mode 100644
index 0000000..5600467
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/AssemblyReference.cs
@@ -0,0 +1,8 @@
+using System.Reflection;
+
+namespace Eternelle.Modules.Catalog.Application;
+
+public static class AssemblyReference
+{
+    public static readonly Assembly Assembly = typeof(AssemblyReference).Assembly;
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Eternelle.Modules.Catalog.Application.csproj b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Eternelle.Modules.Catalog.Application.csproj
new file mode 100644
index 0000000..a6c704f
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Eternelle.Modules.Catalog.Application.csproj
@@ -0,0 +1,9 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Catalog.Domain\Eternelle.Modules.Catalog.Domain.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Catalog.IntegrationEvents\Eternelle.Modules.Catalog.IntegrationEvents.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Application\Eternelle.Common.Application.csproj" />
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Eternelle.Modules.Catalog.Domain.csproj b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Eternelle.Modules.Catalog.Domain.csproj
new file mode 100644
index 0000000..06763b3
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Eternelle.Modules.Catalog.Domain.csproj
@@ -0,0 +1,7 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Domain\Eternelle.Common.Domain.csproj" />
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Schemas.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Schemas.cs
new file mode 100644
index 0000000..ee3561e
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Schemas.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Catalog.Infrastructure.Database;
+
+internal static class Schemas
+{
+    internal const string Catalog = "catalog";
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Eternelle.Modules.Catalog.Infrastructure.csproj b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Eternelle.Modules.Catalog.Infrastructure.csproj
new file mode 100644
index 0000000..6e1754e
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Eternelle.Modules.Catalog.Infrastructure.csproj
@@ -0,0 +1,16 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Catalog.Application\Eternelle.Modules.Catalog.Application.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Catalog.Presentation\Eternelle.Modules.Catalog.Presentation.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Infrastructure\Eternelle.Common.Infrastructure.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/Eternelle.Modules.Catalog.IntegrationEvents.csproj b/src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/Eternelle.Modules.Catalog.IntegrationEvents.csproj
new file mode 100644
index 0000000..b9e5a29
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/Eternelle.Modules.Catalog.IntegrationEvents.csproj
@@ -0,0 +1,7 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Application\Eternelle.Common.Application.csproj" />
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/AssemblyReference.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/AssemblyReference.cs
new file mode 100644
index 0000000..711bf77
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/AssemblyReference.cs
@@ -0,0 +1,8 @@
+using System.Reflection;
+
+namespace Eternelle.Modules.Catalog.Presentation;
+
+public static class AssemblyReference
+{
+    public static readonly Assembly Assembly = typeof(AssemblyReference).Assembly;
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Eternelle.Modules.Catalog.Presentation.csproj b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Eternelle.Modules.Catalog.Presentation.csproj
new file mode 100644
index 0000000..297b70e
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Eternelle.Modules.Catalog.Presentation.csproj
@@ -0,0 +1,8 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Catalog.Application\Eternelle.Modules.Catalog.Application.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Presentation\Eternelle.Common.Presentation.csproj" />
+  </ItemGroup>
+
+</Project>

From 75139b7f873938bbfb6609450d3125897158dedb Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 12:43:49 +0800
Subject: [PATCH 004/155] feat(catalog): add TemplateTier, PriceClass,
 SectionId enums

---
 .../Templates/PriceClass.cs                   |  8 ++++++++
 .../Templates/SectionId.cs                    | 20 +++++++++++++++++++
 .../Templates/TemplateTier.cs                 |  7 +++++++
 3 files changed, 35 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/PriceClass.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTier.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/PriceClass.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/PriceClass.cs
new file mode 100644
index 0000000..21ef21e
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/PriceClass.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public enum PriceClass
+{
+    Free = 1,
+    Pro = 2,
+    Plus = 3
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs
new file mode 100644
index 0000000..d87cdaa
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs
@@ -0,0 +1,20 @@
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+// Persisted as the enum NAME (string) so the Tenancy module can match selections
+// against this catalog by a stable identifier. Do not renumber/rename without a migration.
+public enum SectionId
+{
+    Hero,
+    Story,
+    Entourage,
+    DressCode,
+    Gallery,
+    GiftGuide,
+    Guestbook,
+    Venue,
+    Reminders,
+    Rsvp,
+    VendorCredits,
+    SnapShare,
+    GuestUploads
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTier.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTier.cs
new file mode 100644
index 0000000..1c94a31
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTier.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public enum TemplateTier
+{
+    FirstClass = 1,
+    Signature = 2
+}

From ab649c539670a632fb93ff0e94e0ccf19f4b8298 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 13:02:47 +0800
Subject: [PATCH 005/155] feat(catalog): add strongly-typed ids for Template
 and children

---
 .../Templates/TemplateId.cs                                | 7 +++++++
 .../Templates/TemplateSectionVariantId.cs                  | 7 +++++++
 .../Templates/TemplateSupportedSectionId.cs                | 7 +++++++
 .../Templates/TemplateThemeId.cs                           | 7 +++++++
 4 files changed, 28 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateId.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariantId.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSupportedSectionId.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeId.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateId.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateId.cs
new file mode 100644
index 0000000..619eb4c
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateId.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public readonly record struct TemplateId(Guid Value)
+{
+    public static TemplateId New() => new(Guid.CreateVersion7());
+    public override string ToString() => Value.ToString();
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariantId.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariantId.cs
new file mode 100644
index 0000000..c585487
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariantId.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public readonly record struct TemplateSectionVariantId(Guid Value)
+{
+    public static TemplateSectionVariantId New() => new(Guid.CreateVersion7());
+    public override string ToString() => Value.ToString();
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSupportedSectionId.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSupportedSectionId.cs
new file mode 100644
index 0000000..0f50248
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSupportedSectionId.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public readonly record struct TemplateSupportedSectionId(Guid Value)
+{
+    public static TemplateSupportedSectionId New() => new(Guid.CreateVersion7());
+    public override string ToString() => Value.ToString();
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeId.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeId.cs
new file mode 100644
index 0000000..d0c1508
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeId.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public readonly record struct TemplateThemeId(Guid Value)
+{
+    public static TemplateThemeId New() => new(Guid.CreateVersion7());
+    public override string ToString() => Value.ToString();
+}

From e88b1bdfd48a4e51abe275cb54e5853e59d879a4 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 13:04:19 +0800
Subject: [PATCH 006/155] feat(catalog): add value objects and errors

---
 .../Shared/ImageUrl.cs                        | 38 +++++++++++++++++++
 .../Shared/ImageUrlErrors.cs                  | 15 ++++++++
 .../Templates/TemplateDescription.cs          | 33 ++++++++++++++++
 .../Templates/TemplateDescriptionErrors.cs    | 12 ++++++
 .../Templates/TemplateName.cs                 | 33 ++++++++++++++++
 .../Templates/TemplateNameErrors.cs           | 12 ++++++
 .../Templates/TemplateThemeName.cs            | 33 ++++++++++++++++
 .../Templates/TemplateThemeNameErrors.cs      | 12 ++++++
 8 files changed, 188 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Shared/ImageUrl.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Shared/ImageUrlErrors.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateDescription.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateDescriptionErrors.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateName.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateNameErrors.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeName.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeNameErrors.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Shared/ImageUrl.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Shared/ImageUrl.cs
new file mode 100644
index 0000000..917e306
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Shared/ImageUrl.cs
@@ -0,0 +1,38 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Shared;
+
+public sealed record ImageUrl
+{
+    public const int MaxLength = 2048;
+
+    private ImageUrl(string value) => Value = value;
+
+    public string Value { get; }
+
+    public static Result<ImageUrl> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<ImageUrl>(ImageUrlErrors.Empty);
+        }
+
+        string trimmed = raw.Trim();
+
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<ImageUrl>(ImageUrlErrors.TooLong);
+        }
+
+        if (!Uri.TryCreate(trimmed, UriKind.RelativeOrAbsolute, out _))
+        {
+            return Result.Failure<ImageUrl>(ImageUrlErrors.InvalidFormat);
+        }
+
+        return Result.Success(new ImageUrl(trimmed));
+    }
+
+    public override string ToString() => Value;
+
+    internal static ImageUrl FromPersistence(string value) => new(value);
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Shared/ImageUrlErrors.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Shared/ImageUrlErrors.cs
new file mode 100644
index 0000000..df5ecce
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Shared/ImageUrlErrors.cs
@@ -0,0 +1,15 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Shared;
+
+internal static class ImageUrlErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("ImageUrl.Empty", "Image URL must not be empty");
+
+    public static readonly Error TooLong =
+        Error.Problem("ImageUrl.TooLong", $"Image URL must not exceed {ImageUrl.MaxLength} characters");
+
+    public static readonly Error InvalidFormat =
+        Error.Problem("ImageUrl.InvalidFormat", "Image URL must be a valid URI");
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateDescription.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateDescription.cs
new file mode 100644
index 0000000..0956f2e
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateDescription.cs
@@ -0,0 +1,33 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public sealed record TemplateDescription
+{
+    public const int MaxLength = 1000;
+
+    private TemplateDescription(string value) => Value = value;
+
+    public string Value { get; }
+
+    public static Result<TemplateDescription> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<TemplateDescription>(TemplateDescriptionErrors.Empty);
+        }
+
+        string trimmed = raw.Trim();
+
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<TemplateDescription>(TemplateDescriptionErrors.TooLong);
+        }
+
+        return Result.Success(new TemplateDescription(trimmed));
+    }
+
+    public override string ToString() => Value;
+
+    internal static TemplateDescription FromPersistence(string value) => new(value);
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateDescriptionErrors.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateDescriptionErrors.cs
new file mode 100644
index 0000000..f10497f
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateDescriptionErrors.cs
@@ -0,0 +1,12 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+internal static class TemplateDescriptionErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("TemplateDescription.Empty", "Template description must not be empty when provided");
+
+    public static readonly Error TooLong =
+        Error.Problem("TemplateDescription.TooLong", $"Template description must not exceed {TemplateDescription.MaxLength} characters");
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateName.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateName.cs
new file mode 100644
index 0000000..7f7a9c6
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateName.cs
@@ -0,0 +1,33 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public sealed record TemplateName
+{
+    public const int MaxLength = 150;
+
+    private TemplateName(string value) => Value = value;
+
+    public string Value { get; }
+
+    public static Result<TemplateName> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<TemplateName>(TemplateNameErrors.Empty);
+        }
+
+        string trimmed = raw.Trim();
+
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<TemplateName>(TemplateNameErrors.TooLong);
+        }
+
+        return Result.Success(new TemplateName(trimmed));
+    }
+
+    public override string ToString() => Value;
+
+    internal static TemplateName FromPersistence(string value) => new(value);
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateNameErrors.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateNameErrors.cs
new file mode 100644
index 0000000..cd2ef8b
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateNameErrors.cs
@@ -0,0 +1,12 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+internal static class TemplateNameErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("TemplateName.Empty", "Template name must not be empty");
+
+    public static readonly Error TooLong =
+        Error.Problem("TemplateName.TooLong", $"Template name must not exceed {TemplateName.MaxLength} characters");
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeName.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeName.cs
new file mode 100644
index 0000000..6a14a29
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeName.cs
@@ -0,0 +1,33 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public sealed record TemplateThemeName
+{
+    public const int MaxLength = 100;
+
+    private TemplateThemeName(string value) => Value = value;
+
+    public string Value { get; }
+
+    public static Result<TemplateThemeName> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<TemplateThemeName>(TemplateThemeNameErrors.Empty);
+        }
+
+        string trimmed = raw.Trim();
+
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<TemplateThemeName>(TemplateThemeNameErrors.TooLong);
+        }
+
+        return Result.Success(new TemplateThemeName(trimmed));
+    }
+
+    public override string ToString() => Value;
+
+    internal static TemplateThemeName FromPersistence(string value) => new(value);
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeNameErrors.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeNameErrors.cs
new file mode 100644
index 0000000..2fcf177
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateThemeNameErrors.cs
@@ -0,0 +1,12 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+internal static class TemplateThemeNameErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("TemplateThemeName.Empty", "Theme name must not be empty");
+
+    public static readonly Error TooLong =
+        Error.Problem("TemplateThemeName.TooLong", $"Theme name must not exceed {TemplateThemeName.MaxLength} characters");
+}

From e159b63b6aa774e209e1e2a504be2d0fde7f8e84 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 13:05:18 +0800
Subject: [PATCH 007/155] feat(catalog): add jsonb theme styling records

---
 .../Templates/ThemeStyling.cs                            | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ThemeStyling.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ThemeStyling.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ThemeStyling.cs
new file mode 100644
index 0000000..5301c1f
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ThemeStyling.cs
@@ -0,0 +1,9 @@
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+// Serialized to jsonb columns. Dictionaries keep the schema open for design tokens
+// (e.g. { "primary": "#1a1a1a", "accent": "#c8a96a" }) without a migration per token.
+public sealed record ThemeColors(IReadOnlyDictionary<string, string> Tokens);
+
+public sealed record ThemeTypography(IReadOnlyDictionary<string, string> Tokens);
+
+public sealed record ThemeTextures(IReadOnlyDictionary<string, string> Tokens);

From 5567a653858678d20c66b2496297dbf4816ace35 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 13:06:15 +0800
Subject: [PATCH 008/155] feat(catalog): add Template child entities with
 variant upload limit

---
 .../Templates/TemplateSectionVariant.cs       | 36 ++++++++++++++++++
 .../Templates/TemplateSupportedSection.cs     | 25 +++++++++++++
 .../Templates/TemplateTheme.cs                | 37 +++++++++++++++++++
 3 files changed, 98 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSupportedSection.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTheme.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
new file mode 100644
index 0000000..0f719e7
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
@@ -0,0 +1,36 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public sealed class TemplateSectionVariant : Entity
+{
+    private TemplateSectionVariant() { }
+
+    public TemplateSectionVariantId Id { get; private set; }
+    public TemplateId TemplateId { get; private set; }
+    public SectionId SectionId { get; private set; }
+    public string Variant { get; private set; } = null!;
+    public bool IsDefault { get; private set; }
+    public PriceClass PriceClass { get; private set; }
+
+    // Upload cap for upload-capable sections (e.g. GuestUploads). null = unlimited / N/A.
+    public int? UploadLimit { get; private set; }
+
+    internal static TemplateSectionVariant Create(
+        TemplateId templateId,
+        SectionId sectionId,
+        string variant,
+        bool isDefault,
+        PriceClass priceClass,
+        int? uploadLimit) =>
+        new()
+        {
+            Id = TemplateSectionVariantId.New(),
+            TemplateId = templateId,
+            SectionId = sectionId,
+            Variant = variant,
+            IsDefault = isDefault,
+            PriceClass = priceClass,
+            UploadLimit = uploadLimit
+        };
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSupportedSection.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSupportedSection.cs
new file mode 100644
index 0000000..d63c398
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSupportedSection.cs
@@ -0,0 +1,25 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public sealed class TemplateSupportedSection : Entity
+{
+    private TemplateSupportedSection() { }
+
+    public TemplateSupportedSectionId Id { get; private set; }
+    public TemplateId TemplateId { get; private set; }
+    public SectionId SectionId { get; private set; }
+    public int DisplayOrder { get; private set; }
+
+    internal static TemplateSupportedSection Create(
+        TemplateId templateId,
+        SectionId sectionId,
+        int displayOrder) =>
+        new()
+        {
+            Id = TemplateSupportedSectionId.New(),
+            TemplateId = templateId,
+            SectionId = sectionId,
+            DisplayOrder = displayOrder
+        };
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTheme.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTheme.cs
new file mode 100644
index 0000000..15c66df
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTheme.cs
@@ -0,0 +1,37 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public sealed class TemplateTheme : Entity
+{
+    private TemplateTheme() { }
+
+    public TemplateThemeId Id { get; private set; }
+    public TemplateId TemplateId { get; private set; }
+    public int ThemeIndex { get; private set; }
+    public TemplateThemeName Name { get; private set; } = null!;
+    public ThemeColors Colors { get; private set; } = null!;
+    public ThemeTypography Typography { get; private set; } = null!;
+    public ThemeTextures? Textures { get; private set; }
+    public bool IsDark { get; private set; }
+
+    internal static TemplateTheme Create(
+        TemplateId templateId,
+        int themeIndex,
+        TemplateThemeName name,
+        ThemeColors colors,
+        ThemeTypography typography,
+        ThemeTextures? textures,
+        bool isDark) =>
+        new()
+        {
+            Id = TemplateThemeId.New(),
+            TemplateId = templateId,
+            ThemeIndex = themeIndex,
+            Name = name,
+            Colors = colors,
+            Typography = typography,
+            Textures = textures,
+            IsDark = isDark
+        };
+}

From d503809e03a13ad7edcdfc48a37f9a2ba9642599 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 13:09:31 +0800
Subject: [PATCH 009/155] feat(catalog): add Template domain events and
 manifest payload

---
 .../Templates/TemplateCreatedDomainEvent.cs     | 13 +++++++++++++
 .../TemplateManifestChangedDomainEvent.cs       | 17 +++++++++++++++++
 .../Templates/TemplateManifestItem.cs           |  8 ++++++++
 3 files changed, 38 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateCreatedDomainEvent.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestChangedDomainEvent.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestItem.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateCreatedDomainEvent.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateCreatedDomainEvent.cs
new file mode 100644
index 0000000..f42b3e9
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateCreatedDomainEvent.cs
@@ -0,0 +1,13 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public sealed class TemplateCreatedDomainEvent(
+    TemplateId templateId,
+    string name,
+    string tier) : DomainEvent
+{
+    public TemplateId TemplateId { get; init; } = templateId;
+    public string Name { get; init; } = name;
+    public string Tier { get; init; } = tier;
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestChangedDomainEvent.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestChangedDomainEvent.cs
new file mode 100644
index 0000000..9e5d4fc
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestChangedDomainEvent.cs
@@ -0,0 +1,17 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public sealed class TemplateManifestChangedDomainEvent(
+    TemplateId templateId,
+    string name,
+    string tier,
+    IReadOnlyList<string> sectionIds,
+    IReadOnlyList<TemplateManifestItem> variants) : DomainEvent
+{
+    public TemplateId TemplateId { get; init; } = templateId;
+    public string Name { get; init; } = name;
+    public string Tier { get; init; } = tier;
+    public IReadOnlyList<string> SectionIds { get; init; } = sectionIds;
+    public IReadOnlyList<TemplateManifestItem> Variants { get; init; } = variants;
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestItem.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestItem.cs
new file mode 100644
index 0000000..15f0c9b
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestItem.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public sealed record TemplateManifestItem(
+    string SectionId,
+    string Variant,
+    string PriceClass,
+    bool IsDefault,
+    int? UploadLimit);

From f1ca0cead11432ba4f623d781c57091b3956cb10 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 13:10:23 +0800
Subject: [PATCH 010/155] feat(catalog): add TemplateErrors

---
 .../Templates/TemplateErrors.cs               | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateErrors.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateErrors.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateErrors.cs
new file mode 100644
index 0000000..f53d8ec
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateErrors.cs
@@ -0,0 +1,27 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public static class TemplateErrors
+{
+    public static Error NotFound(TemplateId id) =>
+        Error.NotFound("Catalog.Template.NotFound", $"Template '{id.Value}' was not found.");
+
+    public static readonly Error NameTaken =
+        Error.Conflict("Catalog.Template.NameTaken", "A template with this name already exists.");
+
+    public static readonly Error DuplicateThemeIndex =
+        Error.Conflict("Catalog.Template.DuplicateThemeIndex", "A theme with this index already exists for the template.");
+
+    public static readonly Error SectionAlreadySupported =
+        Error.Conflict("Catalog.Template.SectionAlreadySupported", "This section is already supported by the template.");
+
+    public static readonly Error SectionNotSupported =
+        Error.Problem("Catalog.Template.SectionNotSupported", "A variant cannot be added for a section the template does not support.");
+
+    public static readonly Error DuplicateDefaultVariant =
+        Error.Conflict("Catalog.Template.DuplicateDefaultVariant", "Only one default variant is allowed per section.");
+
+    public static readonly Error DuplicateVariant =
+        Error.Conflict("Catalog.Template.DuplicateVariant", "This variant already exists for the section.");
+}

From 8b245d68c1d3b257b9861d8fa959786f9dbf52fd Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 13:11:55 +0800
Subject: [PATCH 011/155] feat(catalog): add Template aggregate root

---
 .../Templates/Template.cs                     | 152 ++++++++++++++++++
 1 file changed, 152 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs
new file mode 100644
index 0000000..8115272
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs
@@ -0,0 +1,152 @@
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Catalog.Domain.Shared;
+
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public sealed class Template : Entity
+{
+    private readonly List<TemplateTheme> _themes = [];
+    private readonly List<TemplateSupportedSection> _supportedSections = [];
+    private readonly List<TemplateSectionVariant> _sectionVariants = [];
+
+    private Template() { }
+
+    public TemplateId Id { get; private set; }
+    public TemplateName Name { get; private set; } = null!;
+    public TemplateDescription? Description { get; private set; }
+    public TemplateTier Tier { get; private set; }
+    public ImageUrl? PreviewImageUrl { get; private set; }
+    public IReadOnlyList<string> Features { get; private set; } = [];
+    public DateTime CreatedAtUtc { get; private set; }
+    public DateTime UpdatedAtUtc { get; private set; }
+
+    public IReadOnlyCollection<TemplateTheme> Themes => _themes.AsReadOnly();
+    public IReadOnlyCollection<TemplateSupportedSection> SupportedSections => _supportedSections.AsReadOnly();
+    public IReadOnlyCollection<TemplateSectionVariant> SectionVariants => _sectionVariants.AsReadOnly();
+
+    public static Result<Template> Create(
+        TemplateName name,
+        TemplateDescription? description,
+        TemplateTier tier,
+        ImageUrl? previewImageUrl,
+        IReadOnlyList<string> features,
+        DateTime utcNow)
+    {
+        var template = new Template
+        {
+            Id = TemplateId.New(),
+            Name = name,
+            Description = description,
+            Tier = tier,
+            PreviewImageUrl = previewImageUrl,
+            Features = features,
+            CreatedAtUtc = utcNow,
+            UpdatedAtUtc = utcNow
+        };
+
+        template.Raise(new TemplateCreatedDomainEvent(template.Id, name.Value, tier.ToString()));
+        template.Raise(template.BuildManifestEvent());
+
+        return Result.Success(template);
+    }
+
+    public Result UpdateDetails(
+        TemplateName name,
+        TemplateDescription? description,
+        ImageUrl? previewImageUrl,
+        IReadOnlyList<string> features,
+        DateTime utcNow)
+    {
+        Name = name;
+        Description = description;
+        PreviewImageUrl = previewImageUrl;
+        Features = features;
+        UpdatedAtUtc = utcNow;
+
+        Raise(BuildManifestEvent());
+
+        return Result.Success();
+    }
+
+    public Result AddTheme(
+        int themeIndex,
+        TemplateThemeName name,
+        ThemeColors colors,
+        ThemeTypography typography,
+        ThemeTextures? textures,
+        bool isDark,
+        DateTime utcNow)
+    {
+        if (_themes.Any(t => t.ThemeIndex == themeIndex))
+        {
+            return Result.Failure(TemplateErrors.DuplicateThemeIndex);
+        }
+
+        _themes.Add(TemplateTheme.Create(Id, themeIndex, name, colors, typography, textures, isDark));
+        UpdatedAtUtc = utcNow;
+
+        Raise(BuildManifestEvent());
+
+        return Result.Success();
+    }
+
+    public Result AddSupportedSection(SectionId sectionId, int displayOrder, DateTime utcNow)
+    {
+        if (_supportedSections.Any(s => s.SectionId == sectionId))
+        {
+            return Result.Failure(TemplateErrors.SectionAlreadySupported);
+        }
+
+        _supportedSections.Add(TemplateSupportedSection.Create(Id, sectionId, displayOrder));
+        UpdatedAtUtc = utcNow;
+
+        Raise(BuildManifestEvent());
+
+        return Result.Success();
+    }
+
+    public Result AddSectionVariant(
+        SectionId sectionId,
+        string variant,
+        bool isDefault,
+        PriceClass priceClass,
+        int? uploadLimit,
+        DateTime utcNow)
+    {
+        if (_supportedSections.All(s => s.SectionId != sectionId))
+        {
+            return Result.Failure(TemplateErrors.SectionNotSupported);
+        }
+
+        if (_sectionVariants.Any(v => v.SectionId == sectionId &&
+                                      string.Equals(v.Variant, variant, StringComparison.OrdinalIgnoreCase)))
+        {
+            return Result.Failure(TemplateErrors.DuplicateVariant);
+        }
+
+        if (isDefault && _sectionVariants.Any(v => v.SectionId == sectionId && v.IsDefault))
+        {
+            return Result.Failure(TemplateErrors.DuplicateDefaultVariant);
+        }
+
+        _sectionVariants.Add(TemplateSectionVariant.Create(Id, sectionId, variant, isDefault, priceClass, uploadLimit));
+        UpdatedAtUtc = utcNow;
+
+        Raise(BuildManifestEvent());
+
+        return Result.Success();
+    }
+
+    private TemplateManifestChangedDomainEvent BuildManifestEvent() =>
+        new(
+            Id,
+            Name.Value,
+            Tier.ToString(),
+            [.. _supportedSections.Select(s => s.SectionId.ToString())],
+            [.. _sectionVariants.Select(v => new TemplateManifestItem(
+                v.SectionId.ToString(),
+                v.Variant,
+                v.PriceClass.ToString(),
+                v.IsDefault,
+                v.UploadLimit))]);
+}

From ba49d6eb7fb2d3d4c59bd162edcb6dfc466ef8da Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 13:12:34 +0800
Subject: [PATCH 012/155] feat(catalog): add ITemplateRepository

---
 .../Templates/ITemplateRepository.cs                 | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ITemplateRepository.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ITemplateRepository.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ITemplateRepository.cs
new file mode 100644
index 0000000..0a589a7
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ITemplateRepository.cs
@@ -0,0 +1,12 @@
+namespace Eternelle.Modules.Catalog.Domain.Templates;
+
+public interface ITemplateRepository
+{
+    Task<Template?> GetAsync(TemplateId id, CancellationToken cancellationToken = default);
+
+    Task<bool> NameExistsAsync(string name, CancellationToken cancellationToken = default);
+
+    void Insert(Template template);
+
+    void Update(Template template);
+}

From 0eb10cf3d57d5d1f844825ab462db9f33df51354 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 13:19:07 +0800
Subject: [PATCH 013/155] style(catalog): remove what-comment from UploadLimit
 property

---
 .../Templates/TemplateSectionVariant.cs                          | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
index 0f719e7..a191bbe 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
@@ -13,7 +13,6 @@ private TemplateSectionVariant() { }
     public bool IsDefault { get; private set; }
     public PriceClass PriceClass { get; private set; }
 
-    // Upload cap for upload-capable sections (e.g. GuestUploads). null = unlimited / N/A.
     public int? UploadLimit { get; private set; }
 
     internal static TemplateSectionVariant Create(

From 724f3fec6d89642bf37c3db0a5bd3b84b92ff45f Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 13:24:41 +0800
Subject: [PATCH 014/155] Eternelle-180 Add CatalogTemplateManifestChanged
 integration event

---
 ...TemplateManifestChangedIntegrationEvent.cs | 29 +++++++++++++++++++
 .../SectionVariantManifest.cs                 |  8 +++++
 2 files changed, 37 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/CatalogTemplateManifestChangedIntegrationEvent.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/SectionVariantManifest.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/CatalogTemplateManifestChangedIntegrationEvent.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/CatalogTemplateManifestChangedIntegrationEvent.cs
new file mode 100644
index 0000000..2b2dc6c
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/CatalogTemplateManifestChangedIntegrationEvent.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Application.EventBus;
+
+namespace Eternelle.Modules.Catalog.IntegrationEvents;
+
+public sealed class CatalogTemplateManifestChangedIntegrationEvent : IntegrationEvent
+{
+    public CatalogTemplateManifestChangedIntegrationEvent(
+        Guid id,
+        DateTime occurredOnUtc,
+        Guid templateId,
+        string name,
+        string tier,
+        IReadOnlyList<string> sectionIds,
+        IReadOnlyList<SectionVariantManifest> variants)
+        : base(id, occurredOnUtc)
+    {
+        TemplateId = templateId;
+        Name = name;
+        Tier = tier;
+        SectionIds = sectionIds;
+        Variants = variants;
+    }
+
+    public Guid TemplateId { get; init; }
+    public string Name { get; init; }
+    public string Tier { get; init; }
+    public IReadOnlyList<string> SectionIds { get; init; }
+    public IReadOnlyList<SectionVariantManifest> Variants { get; init; }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/SectionVariantManifest.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/SectionVariantManifest.cs
new file mode 100644
index 0000000..1a4888f
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/SectionVariantManifest.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Catalog.IntegrationEvents;
+
+public sealed record SectionVariantManifest(
+    string SectionId,
+    string Variant,
+    string PriceClass,
+    bool IsDefault,
+    int? UploadLimit);

From 29b8351d4b3ec76ef2f937f80d4e746710160395 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 14:38:45 +0800
Subject: [PATCH 015/155] Eternelle-180 Add IUnitOfWork and manifest
 domain-event handler

---
 .../Abstractions/Data/IUnitOfWork.cs          |  6 +++++
 ...mplateManifestChangedDomainEventHandler.cs | 27 +++++++++++++++++++
 2 files changed, 33 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Abstractions/Data/IUnitOfWork.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/TemplateManifestChangedDomainEventHandler.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Abstractions/Data/IUnitOfWork.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Abstractions/Data/IUnitOfWork.cs
new file mode 100644
index 0000000..a47c928
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Abstractions/Data/IUnitOfWork.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Catalog.Application.Abstractions.Data;
+
+public interface IUnitOfWork
+{
+    Task<int> SaveChangesAsync(CancellationToken cancellationToken = default);
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/TemplateManifestChangedDomainEventHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/TemplateManifestChangedDomainEventHandler.cs
new file mode 100644
index 0000000..a9f5c8e
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/TemplateManifestChangedDomainEventHandler.cs
@@ -0,0 +1,27 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Eternelle.Modules.Catalog.IntegrationEvents;
+
+namespace Eternelle.Modules.Catalog.Application.Templates;
+
+internal sealed class TemplateManifestChangedDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<TemplateManifestChangedDomainEvent>
+{
+    public override async Task Handle(
+        TemplateManifestChangedDomainEvent domainEvent,
+        CancellationToken cancellationToken = default)
+    {
+        await eventBus.PublishAsync(
+            new CatalogTemplateManifestChangedIntegrationEvent(
+                domainEvent.Id,
+                domainEvent.OccurredOnUtc,
+                domainEvent.TemplateId.Value,
+                domainEvent.Name,
+                domainEvent.Tier,
+                domainEvent.SectionIds,
+                [.. domainEvent.Variants.Select(v => new SectionVariantManifest(
+                    v.SectionId, v.Variant, v.PriceClass, v.IsDefault, v.UploadLimit))]),
+            cancellationToken);
+    }
+}

From 033c22c6f424d13ec6af4c3e00d6e5e65eb92267 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 14:44:29 +0800
Subject: [PATCH 016/155] Eternelle-180 Add CreateTemplate command and cache
 keys

---
 .../Templates/CatalogCacheKeys.cs             | 18 +++++
 .../CreateTemplate/CreateTemplateCommand.cs   | 11 +++
 .../CreateTemplateCommandHandler.cs           | 75 +++++++++++++++++++
 .../CreateTemplateCommandValidator.cs         | 16 ++++
 4 files changed, 120 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CatalogCacheKeys.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommand.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandValidator.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CatalogCacheKeys.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CatalogCacheKeys.cs
new file mode 100644
index 0000000..3c462ce
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CatalogCacheKeys.cs
@@ -0,0 +1,18 @@
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates;
+
+internal static class CatalogCacheKeys
+{
+    public static string TemplateById(Guid templateId) => $"catalog:template:{templateId}";
+
+    public static string TemplateList(TemplateTier? tier) =>
+        tier is null ? "catalog:templates:all" : $"catalog:templates:{tier}";
+
+    public static IReadOnlyList<string> AllTemplateListKeys() =>
+    [
+        TemplateList(null),
+        TemplateList(TemplateTier.FirstClass),
+        TemplateList(TemplateTier.Signature)
+    ];
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommand.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommand.cs
new file mode 100644
index 0000000..8af09bb
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommand.cs
@@ -0,0 +1,11 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.CreateTemplate;
+
+public sealed record CreateTemplateCommand(
+    string Name,
+    string? Description,
+    TemplateTier Tier,
+    string? PreviewImageUrl,
+    IReadOnlyList<string>? Features) : ICommand<Guid>;
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs
new file mode 100644
index 0000000..bbc812f
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs
@@ -0,0 +1,75 @@
+using Eternelle.Common.Application.Caching;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Catalog.Application.Abstractions.Data;
+using Eternelle.Modules.Catalog.Domain.Shared;
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.CreateTemplate;
+
+internal sealed class CreateTemplateCommandHandler(
+    ITemplateRepository templateRepository,
+    IUnitOfWork unitOfWork,
+    ICacheService cacheService,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<CreateTemplateCommand, Guid>
+{
+    public async Task<Result<Guid>> Handle(CreateTemplateCommand command, CancellationToken cancellationToken)
+    {
+        Result<TemplateName> nameResult = TemplateName.Create(command.Name);
+        if (nameResult.IsFailure)
+        {
+            return Result.Failure<Guid>(nameResult.Error);
+        }
+
+        TemplateDescription? description = null;
+        if (command.Description is not null)
+        {
+            Result<TemplateDescription> descriptionResult = TemplateDescription.Create(command.Description);
+            if (descriptionResult.IsFailure)
+            {
+                return Result.Failure<Guid>(descriptionResult.Error);
+            }
+            description = descriptionResult.Value;
+        }
+
+        ImageUrl? previewImageUrl = null;
+        if (command.PreviewImageUrl is not null)
+        {
+            Result<ImageUrl> previewResult = ImageUrl.Create(command.PreviewImageUrl);
+            if (previewResult.IsFailure)
+            {
+                return Result.Failure<Guid>(previewResult.Error);
+            }
+            previewImageUrl = previewResult.Value;
+        }
+
+        if (await templateRepository.NameExistsAsync(nameResult.Value.Value, cancellationToken))
+        {
+            return Result.Failure<Guid>(TemplateErrors.NameTaken);
+        }
+
+        Result<Template> templateResult = Template.Create(
+            nameResult.Value,
+            description,
+            command.Tier,
+            previewImageUrl,
+            command.Features ?? [],
+            dateTimeProvider.UtcNow);
+
+        if (templateResult.IsFailure)
+        {
+            return Result.Failure<Guid>(templateResult.Error);
+        }
+
+        templateRepository.Insert(templateResult.Value);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        foreach (string key in CatalogCacheKeys.AllTemplateListKeys())
+        {
+            await cacheService.RemoveAsync(key, cancellationToken);
+        }
+
+        return templateResult.Value.Id.Value;
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandValidator.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandValidator.cs
new file mode 100644
index 0000000..c6cb900
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandValidator.cs
@@ -0,0 +1,16 @@
+using Eternelle.Modules.Catalog.Domain.Shared;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using FluentValidation;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.CreateTemplate;
+
+internal sealed class CreateTemplateCommandValidator : AbstractValidator<CreateTemplateCommand>
+{
+    public CreateTemplateCommandValidator()
+    {
+        RuleFor(c => c.Name).NotEmpty().MaximumLength(TemplateName.MaxLength);
+        RuleFor(c => c.Description).MaximumLength(TemplateDescription.MaxLength).When(c => c.Description is not null);
+        RuleFor(c => c.Tier).IsInEnum();
+        RuleFor(c => c.PreviewImageUrl).MaximumLength(ImageUrl.MaxLength).When(c => c.PreviewImageUrl is not null);
+    }
+}

From 5027920b5cc5fe23ab76ca5d28741da70437bbf1 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 14:46:22 +0800
Subject: [PATCH 017/155] Eternelle-180 Add UpdateTemplate command

---
 .../UpdateTemplate/UpdateTemplateCommand.cs   | 10 +++
 .../UpdateTemplateCommandHandler.cs           | 82 +++++++++++++++++++
 .../UpdateTemplateCommandValidator.cs         | 16 ++++
 3 files changed, 108 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommand.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandHandler.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandValidator.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommand.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommand.cs
new file mode 100644
index 0000000..c4c468c
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommand.cs
@@ -0,0 +1,10 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.UpdateTemplate;
+
+public sealed record UpdateTemplateCommand(
+    Guid TemplateId,
+    string Name,
+    string? Description,
+    string? PreviewImageUrl,
+    IReadOnlyList<string>? Features) : ICommand;
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandHandler.cs
new file mode 100644
index 0000000..cdcebf3
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandHandler.cs
@@ -0,0 +1,82 @@
+using Eternelle.Common.Application.Caching;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Catalog.Application.Abstractions.Data;
+using Eternelle.Modules.Catalog.Domain.Shared;
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.UpdateTemplate;
+
+internal sealed class UpdateTemplateCommandHandler(
+    ITemplateRepository templateRepository,
+    IUnitOfWork unitOfWork,
+    ICacheService cacheService,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<UpdateTemplateCommand>
+{
+    public async Task<Result> Handle(UpdateTemplateCommand command, CancellationToken cancellationToken)
+    {
+        Template? template = await templateRepository.GetAsync(new TemplateId(command.TemplateId), cancellationToken);
+        if (template is null)
+        {
+            return Result.Failure(TemplateErrors.NotFound(new TemplateId(command.TemplateId)));
+        }
+
+        Result<TemplateName> nameResult = TemplateName.Create(command.Name);
+        if (nameResult.IsFailure)
+        {
+            return Result.Failure(nameResult.Error);
+        }
+
+        if (!string.Equals(nameResult.Value.Value, template.Name.Value, StringComparison.Ordinal) &&
+            await templateRepository.NameExistsAsync(nameResult.Value.Value, cancellationToken))
+        {
+            return Result.Failure(TemplateErrors.NameTaken);
+        }
+
+        TemplateDescription? description = null;
+        if (command.Description is not null)
+        {
+            Result<TemplateDescription> descriptionResult = TemplateDescription.Create(command.Description);
+            if (descriptionResult.IsFailure)
+            {
+                return Result.Failure(descriptionResult.Error);
+            }
+            description = descriptionResult.Value;
+        }
+
+        ImageUrl? previewImageUrl = null;
+        if (command.PreviewImageUrl is not null)
+        {
+            Result<ImageUrl> previewResult = ImageUrl.Create(command.PreviewImageUrl);
+            if (previewResult.IsFailure)
+            {
+                return Result.Failure(previewResult.Error);
+            }
+            previewImageUrl = previewResult.Value;
+        }
+
+        Result updateResult = template.UpdateDetails(
+            nameResult.Value, description, previewImageUrl, command.Features ?? [], dateTimeProvider.UtcNow);
+        if (updateResult.IsFailure)
+        {
+            return updateResult;
+        }
+
+        templateRepository.Update(template);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        await InvalidateAsync(cacheService, command.TemplateId, cancellationToken);
+
+        return Result.Success();
+    }
+
+    private static async Task InvalidateAsync(ICacheService cacheService, Guid templateId, CancellationToken cancellationToken)
+    {
+        await cacheService.RemoveAsync(CatalogCacheKeys.TemplateById(templateId), cancellationToken);
+        foreach (string key in CatalogCacheKeys.AllTemplateListKeys())
+        {
+            await cacheService.RemoveAsync(key, cancellationToken);
+        }
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandValidator.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandValidator.cs
new file mode 100644
index 0000000..1897dc7
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandValidator.cs
@@ -0,0 +1,16 @@
+using Eternelle.Modules.Catalog.Domain.Shared;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using FluentValidation;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.UpdateTemplate;
+
+internal sealed class UpdateTemplateCommandValidator : AbstractValidator<UpdateTemplateCommand>
+{
+    public UpdateTemplateCommandValidator()
+    {
+        RuleFor(c => c.TemplateId).NotEmpty();
+        RuleFor(c => c.Name).NotEmpty().MaximumLength(TemplateName.MaxLength);
+        RuleFor(c => c.Description).MaximumLength(TemplateDescription.MaxLength).When(c => c.Description is not null);
+        RuleFor(c => c.PreviewImageUrl).MaximumLength(ImageUrl.MaxLength).When(c => c.PreviewImageUrl is not null);
+    }
+}

From 09703e648b10dcbfe28ecf42687d2a12108511fb Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 14:49:17 +0800
Subject: [PATCH 018/155] Eternelle-180 Add AddTemplateTheme command

---
 .../AddTemplateThemeCommand.cs                | 12 +++++
 .../AddTemplateThemeCommandHandler.cs         | 48 +++++++++++++++++++
 .../AddTemplateThemeCommandValidator.cs       | 16 +++++++
 3 files changed, 76 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommand.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandHandler.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandValidator.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommand.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommand.cs
new file mode 100644
index 0000000..4b5806e
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommand.cs
@@ -0,0 +1,12 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.AddTemplateTheme;
+
+public sealed record AddTemplateThemeCommand(
+    Guid TemplateId,
+    int ThemeIndex,
+    string Name,
+    IReadOnlyDictionary<string, string> Colors,
+    IReadOnlyDictionary<string, string> Typography,
+    IReadOnlyDictionary<string, string>? Textures,
+    bool IsDark) : ICommand;
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandHandler.cs
new file mode 100644
index 0000000..5dca8fc
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandHandler.cs
@@ -0,0 +1,48 @@
+using Eternelle.Common.Application.Caching;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Catalog.Application.Abstractions.Data;
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.AddTemplateTheme;
+
+internal sealed class AddTemplateThemeCommandHandler(
+    ITemplateRepository templateRepository,
+    IUnitOfWork unitOfWork,
+    ICacheService cacheService,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<AddTemplateThemeCommand>
+{
+    public async Task<Result> Handle(AddTemplateThemeCommand command, CancellationToken cancellationToken)
+    {
+        Template? template = await templateRepository.GetAsync(new TemplateId(command.TemplateId), cancellationToken);
+        if (template is null)
+        {
+            return Result.Failure(TemplateErrors.NotFound(new TemplateId(command.TemplateId)));
+        }
+
+        Result<TemplateThemeName> nameResult = TemplateThemeName.Create(command.Name);
+        if (nameResult.IsFailure)
+        {
+            return Result.Failure(nameResult.Error);
+        }
+
+        var colors = new ThemeColors(command.Colors);
+        var typography = new ThemeTypography(command.Typography);
+        ThemeTextures? textures = command.Textures is null ? null : new ThemeTextures(command.Textures);
+
+        Result addResult = template.AddTheme(
+            command.ThemeIndex, nameResult.Value, colors, typography, textures, command.IsDark, dateTimeProvider.UtcNow);
+        if (addResult.IsFailure)
+        {
+            return addResult;
+        }
+
+        templateRepository.Update(template);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        await cacheService.RemoveAsync(CatalogCacheKeys.TemplateById(command.TemplateId), cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandValidator.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandValidator.cs
new file mode 100644
index 0000000..0ec91a8
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandValidator.cs
@@ -0,0 +1,16 @@
+using Eternelle.Modules.Catalog.Domain.Templates;
+using FluentValidation;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.AddTemplateTheme;
+
+internal sealed class AddTemplateThemeCommandValidator : AbstractValidator<AddTemplateThemeCommand>
+{
+    public AddTemplateThemeCommandValidator()
+    {
+        RuleFor(c => c.TemplateId).NotEmpty();
+        RuleFor(c => c.ThemeIndex).GreaterThanOrEqualTo(0);
+        RuleFor(c => c.Name).NotEmpty().MaximumLength(TemplateThemeName.MaxLength);
+        RuleFor(c => c.Colors).NotEmpty();
+        RuleFor(c => c.Typography).NotEmpty();
+    }
+}

From 8c828d5bf40928cfac7109de0af7cb1761690b4a Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 14:50:12 +0800
Subject: [PATCH 019/155] Eternelle-180 Add AddSupportedSection command

---
 .../AddSupportedSectionCommand.cs             |  9 +++++
 .../AddSupportedSectionCommandHandler.cs      | 37 +++++++++++++++++++
 .../AddSupportedSectionCommandValidator.cs    | 13 +++++++
 3 files changed, 59 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommand.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommandHandler.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommandValidator.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommand.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommand.cs
new file mode 100644
index 0000000..68cfaf0
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommand.cs
@@ -0,0 +1,9 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.AddSupportedSection;
+
+public sealed record AddSupportedSectionCommand(
+    Guid TemplateId,
+    SectionId SectionId,
+    int DisplayOrder) : ICommand;
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommandHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommandHandler.cs
new file mode 100644
index 0000000..a988833
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommandHandler.cs
@@ -0,0 +1,37 @@
+using Eternelle.Common.Application.Caching;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Catalog.Application.Abstractions.Data;
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.AddSupportedSection;
+
+internal sealed class AddSupportedSectionCommandHandler(
+    ITemplateRepository templateRepository,
+    IUnitOfWork unitOfWork,
+    ICacheService cacheService,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<AddSupportedSectionCommand>
+{
+    public async Task<Result> Handle(AddSupportedSectionCommand command, CancellationToken cancellationToken)
+    {
+        Template? template = await templateRepository.GetAsync(new TemplateId(command.TemplateId), cancellationToken);
+        if (template is null)
+        {
+            return Result.Failure(TemplateErrors.NotFound(new TemplateId(command.TemplateId)));
+        }
+
+        Result addResult = template.AddSupportedSection(command.SectionId, command.DisplayOrder, dateTimeProvider.UtcNow);
+        if (addResult.IsFailure)
+        {
+            return addResult;
+        }
+
+        templateRepository.Update(template);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        await cacheService.RemoveAsync(CatalogCacheKeys.TemplateById(command.TemplateId), cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommandValidator.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommandValidator.cs
new file mode 100644
index 0000000..be601cc
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSupportedSection/AddSupportedSectionCommandValidator.cs
@@ -0,0 +1,13 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.AddSupportedSection;
+
+internal sealed class AddSupportedSectionCommandValidator : AbstractValidator<AddSupportedSectionCommand>
+{
+    public AddSupportedSectionCommandValidator()
+    {
+        RuleFor(c => c.TemplateId).NotEmpty();
+        RuleFor(c => c.SectionId).IsInEnum();
+        RuleFor(c => c.DisplayOrder).GreaterThanOrEqualTo(0);
+    }
+}

From 942a68bc5a76c96a323a7314432d04546b1df61a Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 14:51:53 +0800
Subject: [PATCH 020/155] Eternelle-180 Add AddSectionVariant command with
 upload limit

---
 .../AddSectionVariantCommand.cs               | 12 ++++++
 .../AddSectionVariantCommandHandler.cs        | 39 +++++++++++++++++++
 .../AddSectionVariantCommandValidator.cs      | 15 +++++++
 3 files changed, 66 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommand.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandHandler.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandValidator.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommand.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommand.cs
new file mode 100644
index 0000000..3f7a747
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommand.cs
@@ -0,0 +1,12 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.AddSectionVariant;
+
+public sealed record AddSectionVariantCommand(
+    Guid TemplateId,
+    SectionId SectionId,
+    string Variant,
+    bool IsDefault,
+    PriceClass PriceClass,
+    int? UploadLimit) : ICommand;
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandHandler.cs
new file mode 100644
index 0000000..4dcd906
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandHandler.cs
@@ -0,0 +1,39 @@
+using Eternelle.Common.Application.Caching;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Catalog.Application.Abstractions.Data;
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.AddSectionVariant;
+
+internal sealed class AddSectionVariantCommandHandler(
+    ITemplateRepository templateRepository,
+    IUnitOfWork unitOfWork,
+    ICacheService cacheService,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<AddSectionVariantCommand>
+{
+    public async Task<Result> Handle(AddSectionVariantCommand command, CancellationToken cancellationToken)
+    {
+        Template? template = await templateRepository.GetAsync(new TemplateId(command.TemplateId), cancellationToken);
+        if (template is null)
+        {
+            return Result.Failure(TemplateErrors.NotFound(new TemplateId(command.TemplateId)));
+        }
+
+        Result addResult = template.AddSectionVariant(
+            command.SectionId, command.Variant.Trim(), command.IsDefault, command.PriceClass,
+            command.UploadLimit, dateTimeProvider.UtcNow);
+        if (addResult.IsFailure)
+        {
+            return addResult;
+        }
+
+        templateRepository.Update(template);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        await cacheService.RemoveAsync(CatalogCacheKeys.TemplateById(command.TemplateId), cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandValidator.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandValidator.cs
new file mode 100644
index 0000000..38957de
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandValidator.cs
@@ -0,0 +1,15 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.AddSectionVariant;
+
+internal sealed class AddSectionVariantCommandValidator : AbstractValidator<AddSectionVariantCommand>
+{
+    public AddSectionVariantCommandValidator()
+    {
+        RuleFor(c => c.TemplateId).NotEmpty();
+        RuleFor(c => c.SectionId).IsInEnum();
+        RuleFor(c => c.Variant).NotEmpty().MaximumLength(100);
+        RuleFor(c => c.PriceClass).IsInEnum();
+        RuleFor(c => c.UploadLimit).GreaterThan(0).When(c => c.UploadLimit is not null);
+    }
+}

From febdab8534c4c764964ca1bea77557ada1cff58f Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 14:57:24 +0800
Subject: [PATCH 021/155] Eternelle-180 Add GetTemplates query

---
 .../GetTemplates/GetTemplatesQuery.cs         |  7 +++
 .../GetTemplates/GetTemplatesQueryHandler.cs  | 52 +++++++++++++++++++
 .../GetTemplates/TemplateSummaryResponse.cs   |  8 +++
 3 files changed, 67 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQuery.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQueryHandler.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/TemplateSummaryResponse.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQuery.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQuery.cs
new file mode 100644
index 0000000..30f0c72
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQuery.cs
@@ -0,0 +1,7 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.GetTemplates;
+
+public sealed record GetTemplatesQuery(TemplateTier? Tier)
+    : IQuery<IReadOnlyList<TemplateSummaryResponse>>;
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQueryHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQueryHandler.cs
new file mode 100644
index 0000000..ba986fd
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQueryHandler.cs
@@ -0,0 +1,52 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Caching;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.GetTemplates;
+
+internal sealed class GetTemplatesQueryHandler(
+    IDbConnectionFactory dbConnectionFactory,
+    ICacheService cacheService)
+    : IQueryHandler<GetTemplatesQuery, IReadOnlyList<TemplateSummaryResponse>>
+{
+    public async Task<Result<IReadOnlyList<TemplateSummaryResponse>>> Handle(
+        GetTemplatesQuery query,
+        CancellationToken cancellationToken)
+    {
+        string cacheKey = CatalogCacheKeys.TemplateList(query.Tier);
+
+        IReadOnlyList<TemplateSummaryResponse>? cached =
+            await cacheService.GetAsync<IReadOnlyList<TemplateSummaryResponse>>(cacheKey, cancellationToken);
+        if (cached is not null)
+        {
+            return Result.Success(cached);
+        }
+
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        const string sql =
+            $"""
+             SELECT
+                 t.id                AS {nameof(TemplateSummaryResponse.Id)},
+                 t.name              AS {nameof(TemplateSummaryResponse.Name)},
+                 t.description       AS {nameof(TemplateSummaryResponse.Description)},
+                 t.tier              AS {nameof(TemplateSummaryResponse.Tier)},
+                 t.preview_image_url AS {nameof(TemplateSummaryResponse.PreviewImageUrl)}
+             FROM catalog.templates t
+             WHERE (@Tier IS NULL OR t.tier = @Tier)
+             ORDER BY t.name ASC
+             """;
+
+        IEnumerable<TemplateSummaryResponse> rows = await connection.QueryAsync<TemplateSummaryResponse>(
+            new CommandDefinition(sql, new { Tier = query.Tier?.ToString() }, cancellationToken: cancellationToken));
+
+        IReadOnlyList<TemplateSummaryResponse> result = [.. rows];
+
+        await cacheService.SetAsync(cacheKey, result, TimeSpan.FromMinutes(30), cancellationToken);
+
+        return Result.Success(result);
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/TemplateSummaryResponse.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/TemplateSummaryResponse.cs
new file mode 100644
index 0000000..ececb74
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/TemplateSummaryResponse.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Catalog.Application.Templates.GetTemplates;
+
+public sealed record TemplateSummaryResponse(
+    Guid Id,
+    string Name,
+    string? Description,
+    string Tier,
+    string? PreviewImageUrl);

From af8134e8b76ee469fdde7458384c43b7342af75c Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 14:59:37 +0800
Subject: [PATCH 022/155] Eternelle-180 Add GetTemplateById query

---
 .../GetTemplateById/GetTemplateByIdQuery.cs   |   5 +
 .../GetTemplateByIdQueryHandler.cs            | 107 ++++++++++++++++++
 .../GetTemplateById/TemplateDetailResponse.cs |  33 ++++++
 3 files changed, 145 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQuery.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQueryHandler.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/TemplateDetailResponse.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQuery.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQuery.cs
new file mode 100644
index 0000000..ef46ba7
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQuery.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.GetTemplateById;
+
+public sealed record GetTemplateByIdQuery(Guid TemplateId) : IQuery<TemplateDetailResponse>;
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQueryHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQueryHandler.cs
new file mode 100644
index 0000000..f8ea139
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQueryHandler.cs
@@ -0,0 +1,107 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Caching;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.GetTemplateById;
+
+internal sealed class GetTemplateByIdQueryHandler(
+    IDbConnectionFactory dbConnectionFactory,
+    ICacheService cacheService)
+    : IQueryHandler<GetTemplateByIdQuery, TemplateDetailResponse>
+{
+    public async Task<Result<TemplateDetailResponse>> Handle(
+        GetTemplateByIdQuery query,
+        CancellationToken cancellationToken)
+    {
+        string cacheKey = CatalogCacheKeys.TemplateById(query.TemplateId);
+
+        TemplateDetailResponse? cached =
+            await cacheService.GetAsync<TemplateDetailResponse>(cacheKey, cancellationToken);
+        if (cached is not null)
+        {
+            return Result.Success(cached);
+        }
+
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        const string headSql =
+            """
+            SELECT id, name, description, tier, preview_image_url
+            FROM catalog.templates
+            WHERE id = @TemplateId
+            """;
+
+        TemplateHeadRow? head = await connection.QuerySingleOrDefaultAsync<TemplateHeadRow>(
+            new CommandDefinition(headSql, new { query.TemplateId }, cancellationToken: cancellationToken));
+
+        if (head is null)
+        {
+            return Result.Failure<TemplateDetailResponse>(
+                TemplateErrors.NotFound(new TemplateId(query.TemplateId)));
+        }
+
+        const string themesSql =
+            $"""
+            SELECT
+                id            AS {nameof(ThemeResponse.Id)},
+                theme_index   AS {nameof(ThemeResponse.ThemeIndex)},
+                name          AS {nameof(ThemeResponse.Name)},
+                colors        AS {nameof(ThemeResponse.ColorsJson)},
+                typography    AS {nameof(ThemeResponse.TypographyJson)},
+                textures      AS {nameof(ThemeResponse.TexturesJson)},
+                is_dark       AS {nameof(ThemeResponse.IsDark)}
+            FROM catalog.template_themes
+            WHERE template_id = @TemplateId
+            ORDER BY theme_index ASC
+            """;
+
+        const string sectionsSql =
+            $"""
+            SELECT
+                id            AS {nameof(SupportedSectionResponse.Id)},
+                section_id    AS {nameof(SupportedSectionResponse.SectionId)},
+                display_order AS {nameof(SupportedSectionResponse.DisplayOrder)}
+            FROM catalog.template_supported_sections
+            WHERE template_id = @TemplateId
+            ORDER BY display_order ASC
+            """;
+
+        const string variantsSql =
+            $"""
+            SELECT
+                id           AS {nameof(SectionVariantResponse.Id)},
+                section_id   AS {nameof(SectionVariantResponse.SectionId)},
+                variant      AS {nameof(SectionVariantResponse.Variant)},
+                is_default   AS {nameof(SectionVariantResponse.IsDefault)},
+                price_class  AS {nameof(SectionVariantResponse.PriceClass)},
+                upload_limit AS {nameof(SectionVariantResponse.UploadLimit)}
+            FROM catalog.template_section_variants
+            WHERE template_id = @TemplateId
+            ORDER BY section_id ASC, variant ASC
+            """;
+
+        object args = new { TemplateId = head.Id };
+
+        IEnumerable<ThemeResponse> themes = await connection.QueryAsync<ThemeResponse>(
+            new CommandDefinition(themesSql, args, cancellationToken: cancellationToken));
+        IEnumerable<SupportedSectionResponse> sections = await connection.QueryAsync<SupportedSectionResponse>(
+            new CommandDefinition(sectionsSql, args, cancellationToken: cancellationToken));
+        IEnumerable<SectionVariantResponse> variants = await connection.QueryAsync<SectionVariantResponse>(
+            new CommandDefinition(variantsSql, args, cancellationToken: cancellationToken));
+
+        var result = new TemplateDetailResponse(
+            head.Id, head.Name, head.Description, head.Tier, head.PreviewImageUrl,
+            [.. themes], [.. sections], [.. variants]);
+
+        await cacheService.SetAsync(cacheKey, result, TimeSpan.FromMinutes(30), cancellationToken);
+
+        return Result.Success(result);
+    }
+
+    private sealed record TemplateHeadRow(
+        Guid Id, string Name, string? Description, string Tier, string? PreviewImageUrl);
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/TemplateDetailResponse.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/TemplateDetailResponse.cs
new file mode 100644
index 0000000..7e5495d
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/TemplateDetailResponse.cs
@@ -0,0 +1,33 @@
+namespace Eternelle.Modules.Catalog.Application.Templates.GetTemplateById;
+
+public sealed record TemplateDetailResponse(
+    Guid Id,
+    string Name,
+    string? Description,
+    string Tier,
+    string? PreviewImageUrl,
+    IReadOnlyList<ThemeResponse> Themes,
+    IReadOnlyList<SupportedSectionResponse> Sections,
+    IReadOnlyList<SectionVariantResponse> Variants);
+
+public sealed record ThemeResponse(
+    Guid Id,
+    int ThemeIndex,
+    string Name,
+    string ColorsJson,
+    string TypographyJson,
+    string? TexturesJson,
+    bool IsDark);
+
+public sealed record SupportedSectionResponse(
+    Guid Id,
+    string SectionId,
+    int DisplayOrder);
+
+public sealed record SectionVariantResponse(
+    Guid Id,
+    string SectionId,
+    string Variant,
+    bool IsDefault,
+    string PriceClass,
+    int? UploadLimit);

From 231b6b5878c9ff4aa8b8a7df6d40aec277b3d092 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 15:01:59 +0800
Subject: [PATCH 023/155] Eternelle-180 Add GetSupportedSections and
 GetSectionVariants queries

---
 .../GetSectionVariantsQuery.cs                |  8 ++++
 .../GetSectionVariantsQueryHandler.cs         | 41 +++++++++++++++++++
 .../GetSupportedSectionsQuery.cs              |  7 ++++
 .../GetSupportedSectionsQueryHandler.cs       | 35 ++++++++++++++++
 4 files changed, 91 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQuery.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQueryHandler.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQuery.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQueryHandler.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQuery.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQuery.cs
new file mode 100644
index 0000000..b5c92f8
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQuery.cs
@@ -0,0 +1,8 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Catalog.Application.Templates.GetTemplateById;
+using Eternelle.Modules.Catalog.Domain.Templates;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.GetSectionVariants;
+
+public sealed record GetSectionVariantsQuery(Guid TemplateId, SectionId SectionId)
+    : IQuery<IReadOnlyList<SectionVariantResponse>>;
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQueryHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQueryHandler.cs
new file mode 100644
index 0000000..8823201
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQueryHandler.cs
@@ -0,0 +1,41 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Catalog.Application.Templates.GetTemplateById;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.GetSectionVariants;
+
+internal sealed class GetSectionVariantsQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetSectionVariantsQuery, IReadOnlyList<SectionVariantResponse>>
+{
+    public async Task<Result<IReadOnlyList<SectionVariantResponse>>> Handle(
+        GetSectionVariantsQuery query,
+        CancellationToken cancellationToken)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        const string sql =
+            $"""
+            SELECT
+                id           AS {nameof(SectionVariantResponse.Id)},
+                section_id   AS {nameof(SectionVariantResponse.SectionId)},
+                variant      AS {nameof(SectionVariantResponse.Variant)},
+                is_default   AS {nameof(SectionVariantResponse.IsDefault)},
+                price_class  AS {nameof(SectionVariantResponse.PriceClass)},
+                upload_limit AS {nameof(SectionVariantResponse.UploadLimit)}
+            FROM catalog.template_section_variants
+            WHERE template_id = @TemplateId AND section_id = @SectionId
+            ORDER BY variant ASC
+            """;
+
+        IEnumerable<SectionVariantResponse> rows = await connection.QueryAsync<SectionVariantResponse>(
+            new CommandDefinition(
+                sql,
+                new { query.TemplateId, SectionId = query.SectionId.ToString() },
+                cancellationToken: cancellationToken));
+
+        return Result.Success<IReadOnlyList<SectionVariantResponse>>([.. rows]);
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQuery.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQuery.cs
new file mode 100644
index 0000000..1481e10
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQuery.cs
@@ -0,0 +1,7 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Catalog.Application.Templates.GetTemplateById;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.GetSupportedSections;
+
+public sealed record GetSupportedSectionsQuery(Guid TemplateId)
+    : IQuery<IReadOnlyList<SupportedSectionResponse>>;
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQueryHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQueryHandler.cs
new file mode 100644
index 0000000..cd09b42
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQueryHandler.cs
@@ -0,0 +1,35 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Catalog.Application.Templates.GetTemplateById;
+
+namespace Eternelle.Modules.Catalog.Application.Templates.GetSupportedSections;
+
+internal sealed class GetSupportedSectionsQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetSupportedSectionsQuery, IReadOnlyList<SupportedSectionResponse>>
+{
+    public async Task<Result<IReadOnlyList<SupportedSectionResponse>>> Handle(
+        GetSupportedSectionsQuery query,
+        CancellationToken cancellationToken)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        const string sql =
+            $"""
+            SELECT
+                id            AS {nameof(SupportedSectionResponse.Id)},
+                section_id    AS {nameof(SupportedSectionResponse.SectionId)},
+                display_order AS {nameof(SupportedSectionResponse.DisplayOrder)}
+            FROM catalog.template_supported_sections
+            WHERE template_id = @TemplateId
+            ORDER BY display_order ASC
+            """;
+
+        IEnumerable<SupportedSectionResponse> rows = await connection.QueryAsync<SupportedSectionResponse>(
+            new CommandDefinition(sql, new { query.TemplateId }, cancellationToken: cancellationToken));
+
+        return Result.Success<IReadOnlyList<SupportedSectionResponse>>([.. rows]);
+    }
+}

From e7f88eea4076b282a68bd3d5622b2293cbb1281c Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 16:50:18 +0800
Subject: [PATCH 024/155] Eternelle-180 Add CatalogDbContext, id converters,
 and entity configurations

Adds InternalsVisibleTo for the Infrastructure layer to access VO FromPersistence()
methods, plus EF Core entity type configurations for all Template aggregates.
---
 .../AssemblyInfo.cs                           |  6 ++
 .../Database/CatalogDbContext.cs              | 35 +++++++++++
 .../Converters/TemplateIdConverter.cs         |  7 +++
 .../TemplateSectionVariantIdConverter.cs      |  7 +++
 .../TemplateSupportedSectionIdConverter.cs    |  7 +++
 .../Converters/TemplateThemeIdConverter.cs    |  7 +++
 .../Templates/TemplateConfiguration.cs        | 63 +++++++++++++++++++
 .../TemplateSectionVariantConfiguration.cs    | 41 ++++++++++++
 .../TemplateSupportedSectionConfiguration.cs  | 27 ++++++++
 .../Templates/TemplateThemeConfiguration.cs   | 49 +++++++++++++++
 10 files changed, 249 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/AssemblyInfo.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/CatalogDbContext.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateIdConverter.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateSectionVariantIdConverter.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateSupportedSectionIdConverter.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateThemeIdConverter.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateConfiguration.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSupportedSectionConfiguration.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateThemeConfiguration.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/AssemblyInfo.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/AssemblyInfo.cs
new file mode 100644
index 0000000..34b942b
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/AssemblyInfo.cs
@@ -0,0 +1,6 @@
+using System.Runtime.CompilerServices;
+
+// Allow the Infrastructure layer to access internal members — specifically
+// FromPersistence() factory methods on value objects, which bypass Create()
+// validation for values that were already validated on write.
+[assembly: InternalsVisibleTo("Eternelle.Modules.Catalog.Infrastructure")]
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/CatalogDbContext.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/CatalogDbContext.cs
new file mode 100644
index 0000000..7df1f75
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/CatalogDbContext.cs
@@ -0,0 +1,35 @@
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Modules.Catalog.Application.Abstractions.Data;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Eternelle.Modules.Catalog.Infrastructure.Database.Converters;
+using Eternelle.Modules.Catalog.Infrastructure.Templates;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Database;
+
+public sealed class CatalogDbContext(DbContextOptions<CatalogDbContext> options)
+    : DbContext(options), IUnitOfWork
+{
+    internal DbSet<Template> Templates { get; set; }
+
+    protected override void ConfigureConventions(ModelConfigurationBuilder configurationBuilder)
+    {
+        configurationBuilder.Properties<TemplateId>().HaveConversion<TemplateIdConverter>();
+        configurationBuilder.Properties<TemplateThemeId>().HaveConversion<TemplateThemeIdConverter>();
+        configurationBuilder.Properties<TemplateSupportedSectionId>().HaveConversion<TemplateSupportedSectionIdConverter>();
+        configurationBuilder.Properties<TemplateSectionVariantId>().HaveConversion<TemplateSectionVariantIdConverter>();
+    }
+
+    protected override void OnModelCreating(ModelBuilder modelBuilder)
+    {
+        modelBuilder.HasDefaultSchema(Schemas.Catalog);
+
+        modelBuilder.ApplyConfiguration(new OutboxMessageConfiguration());
+        modelBuilder.ApplyConfiguration(new OutboxMessageConsumerConfiguration());
+
+        modelBuilder.ApplyConfiguration(new TemplateConfiguration());
+        modelBuilder.ApplyConfiguration(new TemplateThemeConfiguration());
+        modelBuilder.ApplyConfiguration(new TemplateSupportedSectionConfiguration());
+        modelBuilder.ApplyConfiguration(new TemplateSectionVariantConfiguration());
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateIdConverter.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateIdConverter.cs
new file mode 100644
index 0000000..8bf1b1d
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateIdConverter.cs
@@ -0,0 +1,7 @@
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Database.Converters;
+
+internal sealed class TemplateIdConverter()
+    : ValueConverter<TemplateId, Guid>(id => id.Value, value => new TemplateId(value));
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateSectionVariantIdConverter.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateSectionVariantIdConverter.cs
new file mode 100644
index 0000000..0ee72b9
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateSectionVariantIdConverter.cs
@@ -0,0 +1,7 @@
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Database.Converters;
+
+internal sealed class TemplateSectionVariantIdConverter()
+    : ValueConverter<TemplateSectionVariantId, Guid>(id => id.Value, value => new TemplateSectionVariantId(value));
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateSupportedSectionIdConverter.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateSupportedSectionIdConverter.cs
new file mode 100644
index 0000000..bded9a7
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateSupportedSectionIdConverter.cs
@@ -0,0 +1,7 @@
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Database.Converters;
+
+internal sealed class TemplateSupportedSectionIdConverter()
+    : ValueConverter<TemplateSupportedSectionId, Guid>(id => id.Value, value => new TemplateSupportedSectionId(value));
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateThemeIdConverter.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateThemeIdConverter.cs
new file mode 100644
index 0000000..394e2a1
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Converters/TemplateThemeIdConverter.cs
@@ -0,0 +1,7 @@
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Database.Converters;
+
+internal sealed class TemplateThemeIdConverter()
+    : ValueConverter<TemplateThemeId, Guid>(id => id.Value, value => new TemplateThemeId(value));
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateConfiguration.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateConfiguration.cs
new file mode 100644
index 0000000..18fac0e
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateConfiguration.cs
@@ -0,0 +1,63 @@
+using System.Text.Json;
+using Eternelle.Modules.Catalog.Domain.Shared;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.ChangeTracking;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Templates;
+
+internal sealed class TemplateConfiguration : IEntityTypeConfiguration<Template>
+{
+    public void Configure(EntityTypeBuilder<Template> builder)
+    {
+        builder.ToTable("templates");
+        builder.HasKey(t => t.Id);
+
+        builder.Property(t => t.Name)
+            .HasConversion(v => v.Value, v => TemplateName.FromPersistence(v))
+            .IsRequired()
+            .HasMaxLength(TemplateName.MaxLength);
+
+        builder.HasIndex(t => t.Name).IsUnique().HasDatabaseName("ix_templates_name");
+
+        builder.Property(t => t.Description)
+            .HasConversion(
+                v => v == null ? null : v.Value,
+                v => v == null ? null : TemplateDescription.FromPersistence(v))
+            .HasMaxLength(TemplateDescription.MaxLength);
+
+        builder.Property(t => t.Tier)
+            .HasConversion<string>()
+            .IsRequired();
+
+        builder.Property(t => t.PreviewImageUrl)
+            .HasConversion(
+                v => v == null ? null : v.Value,
+                v => v == null ? null : ImageUrl.FromPersistence(v))
+            .HasMaxLength(ImageUrl.MaxLength);
+
+        var featuresComparer = new ValueComparer<IReadOnlyList<string>>(
+            (a, b) => a!.SequenceEqual(b!),
+            v => v.Aggregate(0, (hash, item) => HashCode.Combine(hash, item.GetHashCode())),
+            v => v.ToList());
+
+        builder.Property(t => t.Features)
+            .HasColumnType("jsonb")
+            .HasConversion(
+                v => JsonSerializer.Serialize(v, (JsonSerializerOptions?)null),
+                v => JsonSerializer.Deserialize<List<string>>(v, (JsonSerializerOptions?)null) ?? new List<string>())
+            .Metadata.SetValueComparer(featuresComparer);
+
+        builder.Property(t => t.CreatedAtUtc).IsRequired();
+        builder.Property(t => t.UpdatedAtUtc).IsRequired();
+
+        builder.HasMany(t => t.Themes).WithOne().HasForeignKey(x => x.TemplateId).OnDelete(DeleteBehavior.Cascade);
+        builder.HasMany(t => t.SupportedSections).WithOne().HasForeignKey(x => x.TemplateId).OnDelete(DeleteBehavior.Cascade);
+        builder.HasMany(t => t.SectionVariants).WithOne().HasForeignKey(x => x.TemplateId).OnDelete(DeleteBehavior.Cascade);
+
+        builder.Metadata.FindNavigation(nameof(Template.Themes))!.SetPropertyAccessMode(PropertyAccessMode.Field);
+        builder.Metadata.FindNavigation(nameof(Template.SupportedSections))!.SetPropertyAccessMode(PropertyAccessMode.Field);
+        builder.Metadata.FindNavigation(nameof(Template.SectionVariants))!.SetPropertyAccessMode(PropertyAccessMode.Field);
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs
new file mode 100644
index 0000000..c285e95
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs
@@ -0,0 +1,41 @@
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Templates;
+
+internal sealed class TemplateSectionVariantConfiguration : IEntityTypeConfiguration<TemplateSectionVariant>
+{
+    public void Configure(EntityTypeBuilder<TemplateSectionVariant> builder)
+    {
+        builder.ToTable("template_section_variants");
+        builder.HasKey(v => v.Id);
+
+        builder.Property(v => v.TemplateId).IsRequired();
+
+        builder.Property(v => v.SectionId)
+            .HasConversion<string>()
+            .IsRequired()
+            .HasMaxLength(50);
+
+        builder.Property(v => v.Variant).IsRequired().HasMaxLength(100);
+
+        builder.Property(v => v.IsDefault).IsRequired();
+
+        builder.Property(v => v.PriceClass)
+            .HasConversion<string>()
+            .IsRequired()
+            .HasMaxLength(50);
+
+        builder.Property(v => v.UploadLimit);
+
+        builder.HasIndex(v => new { v.TemplateId, v.SectionId, v.Variant })
+            .IsUnique()
+            .HasDatabaseName("ix_template_section_variants_template_id_section_id_variant");
+
+        builder.HasIndex(v => new { v.TemplateId, v.SectionId })
+            .IsUnique()
+            .HasFilter("is_default = true")
+            .HasDatabaseName("ux_template_section_variants_one_default");
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSupportedSectionConfiguration.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSupportedSectionConfiguration.cs
new file mode 100644
index 0000000..d2b0efd
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSupportedSectionConfiguration.cs
@@ -0,0 +1,27 @@
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Templates;
+
+internal sealed class TemplateSupportedSectionConfiguration : IEntityTypeConfiguration<TemplateSupportedSection>
+{
+    public void Configure(EntityTypeBuilder<TemplateSupportedSection> builder)
+    {
+        builder.ToTable("template_supported_sections");
+        builder.HasKey(s => s.Id);
+
+        builder.Property(s => s.TemplateId).IsRequired();
+
+        builder.Property(s => s.SectionId)
+            .HasConversion<string>()
+            .IsRequired()
+            .HasMaxLength(50);
+
+        builder.Property(s => s.DisplayOrder).IsRequired();
+
+        builder.HasIndex(s => new { s.TemplateId, s.SectionId })
+            .IsUnique()
+            .HasDatabaseName("ix_template_supported_sections_template_id_section_id");
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateThemeConfiguration.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateThemeConfiguration.cs
new file mode 100644
index 0000000..c0f08dd
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateThemeConfiguration.cs
@@ -0,0 +1,49 @@
+using System.Text.Json;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Templates;
+
+internal sealed class TemplateThemeConfiguration : IEntityTypeConfiguration<TemplateTheme>
+{
+    public void Configure(EntityTypeBuilder<TemplateTheme> builder)
+    {
+        builder.ToTable("template_themes");
+        builder.HasKey(t => t.Id);
+
+        builder.Property(t => t.TemplateId).IsRequired();
+        builder.Property(t => t.ThemeIndex).IsRequired();
+
+        builder.Property(t => t.Name)
+            .HasConversion(v => v.Value, v => TemplateThemeName.FromPersistence(v))
+            .IsRequired()
+            .HasMaxLength(TemplateThemeName.MaxLength);
+
+        builder.Property(t => t.Colors)
+            .HasColumnType("jsonb")
+            .HasConversion(
+                v => JsonSerializer.Serialize(v, (JsonSerializerOptions?)null),
+                v => JsonSerializer.Deserialize<ThemeColors>(v, (JsonSerializerOptions?)null)!)
+            .IsRequired();
+
+        builder.Property(t => t.Typography)
+            .HasColumnType("jsonb")
+            .HasConversion(
+                v => JsonSerializer.Serialize(v, (JsonSerializerOptions?)null),
+                v => JsonSerializer.Deserialize<ThemeTypography>(v, (JsonSerializerOptions?)null)!)
+            .IsRequired();
+
+        builder.Property(t => t.Textures)
+            .HasColumnType("jsonb")
+            .HasConversion(
+                v => v != null ? JsonSerializer.Serialize(v, (JsonSerializerOptions?)null) : null,
+                v => v != null ? JsonSerializer.Deserialize<ThemeTextures>(v, (JsonSerializerOptions?)null) : null);
+
+        builder.Property(t => t.IsDark).IsRequired();
+
+        builder.HasIndex(t => new { t.TemplateId, t.ThemeIndex })
+            .IsUnique()
+            .HasDatabaseName("ix_template_themes_template_id_theme_index");
+    }
+}

From e4d23ee1de05b56bf322ea0c55c2ea6486c23689 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 16:52:05 +0800
Subject: [PATCH 025/155] Eternelle-180 Add TemplateRepository

---
 .../Templates/TemplateRepository.cs           | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateRepository.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateRepository.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateRepository.cs
new file mode 100644
index 0000000..0aea752
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateRepository.cs
@@ -0,0 +1,22 @@
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Eternelle.Modules.Catalog.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Templates;
+
+internal sealed class TemplateRepository(CatalogDbContext context) : ITemplateRepository
+{
+    public async Task<Template?> GetAsync(TemplateId id, CancellationToken cancellationToken = default) =>
+        await context.Templates
+            .Include(t => t.Themes)
+            .Include(t => t.SupportedSections)
+            .Include(t => t.SectionVariants)
+            .FirstOrDefaultAsync(t => t.Id == id, cancellationToken);
+
+    public async Task<bool> NameExistsAsync(string name, CancellationToken cancellationToken = default) =>
+        await context.Templates.AnyAsync(t => t.Name == TemplateName.FromPersistence(name), cancellationToken);
+
+    public void Insert(Template template) => context.Templates.Add(template);
+
+    public void Update(Template template) => context.Templates.Update(template);
+}

From bf5d704d2455715b3d0fe3522a94a5b78ca9bfef Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 16:54:48 +0800
Subject: [PATCH 026/155] Eternelle-180 Add outbox plumbing and CatalogModule
 DI

---
 .../CatalogModule.cs                          |  78 ++++++++++
 .../Outbox/ConfigureProcessOutboxJob.cs       |  29 ++++
 .../Outbox/IdempotentDomainEventHandler.cs    |  62 ++++++++
 .../Outbox/OutboxOptions.cs                   |   7 +
 .../Outbox/ProcessOutboxJob.cs                | 144 ++++++++++++++++++
 5 files changed, 320 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/CatalogModule.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/OutboxOptions.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/ProcessOutboxJob.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/CatalogModule.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/CatalogModule.cs
new file mode 100644
index 0000000..0bbbffd
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/CatalogModule.cs
@@ -0,0 +1,78 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Modules.Catalog.Application.Abstractions.Data;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using Eternelle.Modules.Catalog.Infrastructure.Database;
+using Eternelle.Modules.Catalog.Infrastructure.Outbox;
+using Eternelle.Modules.Catalog.Infrastructure.Templates;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+
+namespace Eternelle.Modules.Catalog.Infrastructure;
+
+public static class CatalogModule
+{
+    public static IServiceCollection AddCatalogModule(
+        this IServiceCollection services,
+        IConfiguration configuration)
+    {
+        services.AddDomainEventHandlers();
+
+        services.AddInfrastructure(configuration);
+
+        services.AddEndpoints(Presentation.AssemblyReference.Assembly);
+
+        return services;
+    }
+
+    private static void AddInfrastructure(this IServiceCollection services, IConfiguration configuration)
+    {
+        services.AddDbContext<CatalogDbContext>((sp, options) =>
+            options
+                .UseNpgsql(
+                    configuration.GetConnectionString("Database"),
+                    npgsqlOptions => npgsqlOptions
+                        .MigrationsHistoryTable(HistoryRepository.DefaultTableName, Schemas.Catalog))
+                .UseSnakeCaseNamingConvention()
+                .AddInterceptors(sp.GetRequiredService<InsertOutboxMessagesInterceptor>()));
+
+        services.AddScoped<IUnitOfWork>(sp => sp.GetRequiredService<CatalogDbContext>());
+
+        services.AddScoped<ITemplateRepository, TemplateRepository>();
+
+        services.AddOptions<OutboxOptions>()
+            .Bind(configuration.GetSection("Catalog:Outbox"))
+            .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
+                "Catalog:Outbox: IntervalInSeconds and BatchSize must be greater than 0.")
+            .ValidateOnStart();
+
+        services.ConfigureOptions<ConfigureProcessOutboxJob>();
+    }
+
+    private static void AddDomainEventHandlers(this IServiceCollection services)
+    {
+        Type[] domainEventHandlers = Application.AssemblyReference.Assembly
+            .GetTypes()
+            .Where(t => t.IsAssignableTo(typeof(IDomainEventHandler)))
+            .ToArray();
+
+        foreach (Type domainEventHandler in domainEventHandlers)
+        {
+            services.TryAddScoped(domainEventHandler);
+
+            Type domainEvent = domainEventHandler
+                .GetInterfaces()
+                .Single(i => i.IsGenericType && i.GetGenericTypeDefinition() == typeof(IDomainEventHandler<>))
+                .GetGenericArguments()
+                .Single();
+
+            Type closedIdempotentHandler = typeof(IdempotentDomainEventHandler<>).MakeGenericType(domainEvent);
+
+            services.Decorate(domainEventHandler, closedIdempotentHandler);
+        }
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
new file mode 100644
index 0000000..733c950
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
@@ -0,0 +1,29 @@
+using Microsoft.Extensions.Options;
+using Quartz;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Outbox;
+
+internal sealed class ConfigureProcessOutboxJob(IOptions<OutboxOptions> outboxOptions)
+    : IConfigureOptions<QuartzOptions>
+{
+    private readonly OutboxOptions _outboxOptions = outboxOptions.Value;
+
+    public void Configure(QuartzOptions options)
+    {
+        if (_outboxOptions.IntervalInSeconds <= 0)
+        {
+            throw new InvalidOperationException(
+                $"Catalog:Outbox:IntervalInSeconds must be a positive integer. Current value: {_outboxOptions.IntervalInSeconds}");
+        }
+
+        string jobName = typeof(ProcessOutboxJob).FullName!;
+
+        options
+            .AddJob<ProcessOutboxJob>(configure => configure.WithIdentity(jobName))
+            .AddTrigger(configure =>
+                configure
+                    .ForJob(jobName)
+                    .WithSimpleSchedule(schedule =>
+                        schedule.WithIntervalInSeconds(_outboxOptions.IntervalInSeconds).RepeatForever()));
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
new file mode 100644
index 0000000..84fc61e
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -0,0 +1,62 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Modules.Catalog.Infrastructure.Database;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Outbox;
+
+internal sealed class IdempotentDomainEventHandler<TDomainEvent>(
+    IDomainEventHandler<TDomainEvent> decorated,
+    IDbConnectionFactory dbConnectionFactory)
+    : DomainEventHandler<TDomainEvent>
+    where TDomainEvent : IDomainEvent
+{
+    public override async Task Handle(TDomainEvent domainEvent, CancellationToken cancellationToken = default)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
+
+        if (await OutboxConsumerExistsAsync(connection, outboxMessageConsumer))
+        {
+            return;
+        }
+
+        await decorated.Handle(domainEvent, cancellationToken);
+
+        await InsertOutboxConsumerAsync(connection, outboxMessageConsumer);
+    }
+
+    private static async Task<bool> OutboxConsumerExistsAsync(
+        DbConnection dbConnection,
+        OutboxMessageConsumer outboxMessageConsumer)
+    {
+        const string sql =
+            $"""
+            SELECT EXISTS(
+                SELECT 1
+                FROM {Schemas.Catalog}.outbox_message_consumers
+                WHERE outbox_message_id = @OutboxMessageId AND
+                      name = @Name
+            )
+            """;
+
+        return await dbConnection.ExecuteScalarAsync<bool>(sql, outboxMessageConsumer);
+    }
+
+    private static async Task InsertOutboxConsumerAsync(
+        DbConnection dbConnection,
+        OutboxMessageConsumer outboxMessageConsumer)
+    {
+        const string sql =
+            $"""
+            INSERT INTO {Schemas.Catalog}.outbox_message_consumers(outbox_message_id, name)
+            VALUES (@OutboxMessageId, @Name)
+            """;
+
+        await dbConnection.ExecuteAsync(sql, outboxMessageConsumer);
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/OutboxOptions.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/OutboxOptions.cs
new file mode 100644
index 0000000..e682248
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/OutboxOptions.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Catalog.Infrastructure.Outbox;
+
+internal sealed class OutboxOptions
+{
+    public int IntervalInSeconds { get; init; }
+    public int BatchSize { get; init; }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/ProcessOutboxJob.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/ProcessOutboxJob.cs
new file mode 100644
index 0000000..4971840
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/ProcessOutboxJob.cs
@@ -0,0 +1,144 @@
+using System.Data;
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Newtonsoft.Json;
+using Quartz;
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Outbox;
+
+[DisallowConcurrentExecution]
+internal sealed partial class ProcessOutboxJob(
+    IDbConnectionFactory dbConnectionFactory,
+    IServiceScopeFactory serviceScopeFactory,
+    IDateTimeProvider dateTimeProvider,
+    IOptions<OutboxOptions> outboxOptions,
+    ILogger<ProcessOutboxJob> logger) : IJob
+{
+    private const string ModuleName = "Catalog";
+
+    public async Task Execute(IJobExecutionContext context)
+    {
+        LogBeginProcessing(logger, ModuleName);
+
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbTransaction transaction = await connection.BeginTransactionAsync();
+
+        IReadOnlyList<OutboxMessageResponse> outboxMessages = await GetOutboxMessagesAsync(connection, transaction);
+
+        foreach (OutboxMessageResponse outboxMessage in outboxMessages)
+        {
+            Exception? exception = null;
+
+            try
+            {
+                IDomainEvent domainEvent = JsonConvert.DeserializeObject<IDomainEvent>(
+                    outboxMessage.Content,
+                    SerializerSettings.Instance)!;
+
+                using IServiceScope scope = serviceScopeFactory.CreateScope();
+
+                IEnumerable<IDomainEventHandler> handlers = DomainEventHandlersFactory.GetHandlers(
+                    domainEvent.GetType(),
+                    scope.ServiceProvider,
+                    Application.AssemblyReference.Assembly);
+
+                foreach (IDomainEventHandler domainEventHandler in handlers)
+                {
+                    await domainEventHandler.Handle(domainEvent, context.CancellationToken);
+                }
+            }
+            catch (Exception caughtException)
+            {
+                LogProcessingError(logger, caughtException, ModuleName, outboxMessage.Id);
+
+                exception = caughtException;
+            }
+
+            await UpdateOutboxMessageAsync(connection, transaction, outboxMessage, exception);
+        }
+
+        await transaction.CommitAsync();
+
+        LogCompleted(logger, ModuleName);
+    }
+
+    private async Task<IReadOnlyList<OutboxMessageResponse>> GetOutboxMessagesAsync(
+        IDbConnection connection,
+        IDbTransaction transaction)
+    {
+        string sql =
+            $"""
+             SELECT
+                id AS {nameof(OutboxMessageResponse.Id)},
+                content AS {nameof(OutboxMessageResponse.Content)}
+             FROM catalog.outbox_messages
+             WHERE processed_on_utc IS NULL
+             ORDER BY occurred_on_utc
+             LIMIT {outboxOptions.Value.BatchSize}
+             FOR UPDATE SKIP LOCKED
+             """;
+
+        IEnumerable<OutboxMessageResponse> outboxMessages = await connection.QueryAsync<OutboxMessageResponse>(
+            sql,
+            transaction: transaction);
+
+        return outboxMessages.ToList();
+    }
+
+    private async Task UpdateOutboxMessageAsync(
+        IDbConnection connection,
+        IDbTransaction transaction,
+        OutboxMessageResponse outboxMessage,
+        Exception? exception)
+    {
+        if (exception is null)
+        {
+            const string sql =
+                """
+                UPDATE catalog.outbox_messages
+                SET processed_on_utc = @ProcessedOnUtc,
+                    error = NULL
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { outboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                transaction: transaction);
+        }
+        else
+        {
+            const string sql =
+                """
+                UPDATE catalog.outbox_messages
+                SET error = @Error
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { outboxMessage.Id, Error = exception.ToString() },
+                transaction: transaction);
+        }
+    }
+
+    internal sealed record OutboxMessageResponse(Guid Id, string Content);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Beginning to process outbox messages")]
+    private static partial void LogBeginProcessing(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Completed processing outbox messages")]
+    private static partial void LogCompleted(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Error, "{module} - Exception while processing outbox message {messageId}")]
+    private static partial void LogProcessingError(ILogger logger, Exception exception, string module, Guid messageId);
+}

From 70bf5ea8f62d1042aa287a9c250a0b56b52c0b7b Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 17:25:04 +0800
Subject: [PATCH 027/155] Eternelle-180 Add presentation layer endpoints (Tasks
 26-27)

Public read endpoints (GetTemplates, GetTemplateById, GetSectionVariants) with AllowAnonymous; admin write endpoints (CreateTemplate, UpdateTemplate, AddTemplateTheme, AddSupportedSection, AddSectionVariant) gated behind catalog:manage policy.
---
 .../Tags.cs                                   |  6 +++
 .../Templates/AddSectionVariantEndpoint.cs    | 36 ++++++++++++++++
 .../Templates/AddSupportedSectionEndpoint.cs  | 34 +++++++++++++++
 .../Templates/AddTemplateThemeEndpoint.cs     | 41 +++++++++++++++++++
 .../Templates/CreateTemplateEndpoint.cs       | 41 +++++++++++++++++++
 .../Templates/GetSectionVariantsEndpoint.cs   | 32 +++++++++++++++
 .../Templates/GetTemplateByIdEndpoint.cs      | 29 +++++++++++++
 .../Templates/GetTemplatesEndpoint.cs         | 30 ++++++++++++++
 .../Templates/UpdateTemplateEndpoint.cs       | 38 +++++++++++++++++
 9 files changed, 287 insertions(+)
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Tags.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddSectionVariantEndpoint.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddSupportedSectionEndpoint.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddTemplateThemeEndpoint.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/CreateTemplateEndpoint.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetSectionVariantsEndpoint.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetTemplateByIdEndpoint.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetTemplatesEndpoint.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/UpdateTemplateEndpoint.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Tags.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Tags.cs
new file mode 100644
index 0000000..143da75
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Tags.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Catalog.Presentation;
+
+internal static class Tags
+{
+    internal const string Catalog = "Catalog";
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddSectionVariantEndpoint.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddSectionVariantEndpoint.cs
new file mode 100644
index 0000000..a0cc128
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddSectionVariantEndpoint.cs
@@ -0,0 +1,36 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Catalog.Application.Templates.AddSectionVariant;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Catalog.Presentation.Templates;
+
+internal sealed class AddSectionVariantEndpoint : IEndpoint
+{
+    internal sealed record Request(string Variant, bool IsDefault, PriceClass PriceClass, int? UploadLimit);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("catalog/templates/{templateId:guid}/sections/{sectionId}/variants", async (
+            Guid templateId,
+            SectionId sectionId,
+            Request request,
+            ISender sender,
+            CancellationToken cancellationToken) =>
+        {
+            var command = new AddSectionVariantCommand(
+                templateId, sectionId, request.Variant, request.IsDefault, request.PriceClass, request.UploadLimit);
+
+            Result result = await sender.Send(command, cancellationToken);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Catalog)
+        .RequireAuthorization("catalog:manage");
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddSupportedSectionEndpoint.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddSupportedSectionEndpoint.cs
new file mode 100644
index 0000000..80a3a03
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddSupportedSectionEndpoint.cs
@@ -0,0 +1,34 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Catalog.Application.Templates.AddSupportedSection;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Catalog.Presentation.Templates;
+
+internal sealed class AddSupportedSectionEndpoint : IEndpoint
+{
+    internal sealed record Request(SectionId SectionId, int DisplayOrder);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("catalog/templates/{templateId:guid}/sections", async (
+            Guid templateId,
+            Request request,
+            ISender sender,
+            CancellationToken cancellationToken) =>
+        {
+            var command = new AddSupportedSectionCommand(templateId, request.SectionId, request.DisplayOrder);
+
+            Result result = await sender.Send(command, cancellationToken);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Catalog)
+        .RequireAuthorization("catalog:manage");
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddTemplateThemeEndpoint.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddTemplateThemeEndpoint.cs
new file mode 100644
index 0000000..8ec0032
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/AddTemplateThemeEndpoint.cs
@@ -0,0 +1,41 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Catalog.Application.Templates.AddTemplateTheme;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Catalog.Presentation.Templates;
+
+internal sealed class AddTemplateThemeEndpoint : IEndpoint
+{
+    internal sealed record Request(
+        int ThemeIndex,
+        string Name,
+        IReadOnlyDictionary<string, string> Colors,
+        IReadOnlyDictionary<string, string> Typography,
+        IReadOnlyDictionary<string, string>? Textures,
+        bool IsDark);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("catalog/templates/{templateId:guid}/themes", async (
+            Guid templateId,
+            Request request,
+            ISender sender,
+            CancellationToken cancellationToken) =>
+        {
+            var command = new AddTemplateThemeCommand(
+                templateId, request.ThemeIndex, request.Name,
+                request.Colors, request.Typography, request.Textures, request.IsDark);
+
+            Result result = await sender.Send(command, cancellationToken);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Catalog)
+        .RequireAuthorization("catalog:manage");
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/CreateTemplateEndpoint.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/CreateTemplateEndpoint.cs
new file mode 100644
index 0000000..ad86c18
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/CreateTemplateEndpoint.cs
@@ -0,0 +1,41 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Catalog.Application.Templates.CreateTemplate;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Catalog.Presentation.Templates;
+
+internal sealed class CreateTemplateEndpoint : IEndpoint
+{
+    internal sealed record Request(
+        string Name,
+        string? Description,
+        TemplateTier Tier,
+        string? PreviewImageUrl,
+        IReadOnlyList<string>? Features);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("catalog/templates", async (
+            Request request,
+            ISender sender,
+            CancellationToken cancellationToken) =>
+        {
+            var command = new CreateTemplateCommand(
+                request.Name, request.Description, request.Tier, request.PreviewImageUrl, request.Features);
+
+            Result<Guid> result = await sender.Send(command, cancellationToken);
+
+            return result.Match(
+                id => Results.Created($"/catalog/templates/{id}", new { id }),
+                ApiResults.Problem);
+        })
+        .WithTags(Tags.Catalog)
+        .RequireAuthorization("catalog:manage");
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetSectionVariantsEndpoint.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetSectionVariantsEndpoint.cs
new file mode 100644
index 0000000..6c04779
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetSectionVariantsEndpoint.cs
@@ -0,0 +1,32 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Catalog.Application.Templates.GetSectionVariants;
+using Eternelle.Modules.Catalog.Application.Templates.GetTemplateById;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Catalog.Presentation.Templates;
+
+internal sealed class GetSectionVariantsEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("catalog/templates/{templateId:guid}/sections/{sectionId}/variants", async (
+            Guid templateId,
+            SectionId sectionId,
+            ISender sender,
+            CancellationToken cancellationToken) =>
+        {
+            Result<IReadOnlyList<SectionVariantResponse>> result =
+                await sender.Send(new GetSectionVariantsQuery(templateId, sectionId), cancellationToken);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Catalog)
+        .AllowAnonymous();
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetTemplateByIdEndpoint.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetTemplateByIdEndpoint.cs
new file mode 100644
index 0000000..4c7c68f
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetTemplateByIdEndpoint.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Catalog.Application.Templates.GetTemplateById;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Catalog.Presentation.Templates;
+
+internal sealed class GetTemplateByIdEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("catalog/templates/{templateId:guid}", async (
+            Guid templateId,
+            ISender sender,
+            CancellationToken cancellationToken) =>
+        {
+            Result<TemplateDetailResponse> result =
+                await sender.Send(new GetTemplateByIdQuery(templateId), cancellationToken);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Catalog)
+        .AllowAnonymous();
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetTemplatesEndpoint.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetTemplatesEndpoint.cs
new file mode 100644
index 0000000..7ca21de
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/GetTemplatesEndpoint.cs
@@ -0,0 +1,30 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Catalog.Application.Templates.GetTemplates;
+using Eternelle.Modules.Catalog.Domain.Templates;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Catalog.Presentation.Templates;
+
+internal sealed class GetTemplatesEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("catalog/templates", async (
+            TemplateTier? tier,
+            ISender sender,
+            CancellationToken cancellationToken) =>
+        {
+            Result<IReadOnlyList<TemplateSummaryResponse>> result =
+                await sender.Send(new GetTemplatesQuery(tier), cancellationToken);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Catalog)
+        .AllowAnonymous();
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/UpdateTemplateEndpoint.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/UpdateTemplateEndpoint.cs
new file mode 100644
index 0000000..ca644c3
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Templates/UpdateTemplateEndpoint.cs
@@ -0,0 +1,38 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Catalog.Application.Templates.UpdateTemplate;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Catalog.Presentation.Templates;
+
+internal sealed class UpdateTemplateEndpoint : IEndpoint
+{
+    internal sealed record Request(
+        string Name,
+        string? Description,
+        string? PreviewImageUrl,
+        IReadOnlyList<string>? Features);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPut("catalog/templates/{templateId:guid}", async (
+            Guid templateId,
+            Request request,
+            ISender sender,
+            CancellationToken cancellationToken) =>
+        {
+            var command = new UpdateTemplateCommand(
+                templateId, request.Name, request.Description, request.PreviewImageUrl, request.Features);
+
+            Result result = await sender.Send(command, cancellationToken);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Catalog)
+        .RequireAuthorization("catalog:manage");
+    }
+}

From 6be8d995b40cf0a8d12dff31b65deac819dfb7e4 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 17:57:21 +0800
Subject: [PATCH 028/155] Eternelle-180 Wire Catalog module into the API host
 and add initial migration

Registers CatalogModule in Program.cs (assembly, config, DI), adds catalog config
files, and generates the InitialCatalog EF migration with Kapilya seed data.
---
 src/API/Eternelle.Api/Eternelle.Api.csproj    |   1 +
 src/API/Eternelle.Api/Program.cs              |   8 +-
 .../modules.catalog.Development.json          |   8 +
 src/API/Eternelle.Api/modules.catalog.json    |   8 +
 .../20260527094230_InitialCatalog.Designer.cs | 302 ++++++++++++++++++
 .../20260527094230_InitialCatalog.cs          | 248 ++++++++++++++
 .../CatalogDbContextModelSnapshot.cs          | 299 +++++++++++++++++
 7 files changed, 872 insertions(+), 2 deletions(-)
 create mode 100644 src/API/Eternelle.Api/modules.catalog.Development.json
 create mode 100644 src/API/Eternelle.Api/modules.catalog.json
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.Designer.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
 create mode 100644 src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/CatalogDbContextModelSnapshot.cs

diff --git a/src/API/Eternelle.Api/Eternelle.Api.csproj b/src/API/Eternelle.Api/Eternelle.Api.csproj
index cc488d7..991e197 100644
--- a/src/API/Eternelle.Api/Eternelle.Api.csproj
+++ b/src/API/Eternelle.Api/Eternelle.Api.csproj
@@ -21,6 +21,7 @@
   </ItemGroup>
 
   <ItemGroup>
+    <ProjectReference Include="..\..\Modules\Catalog\Eternelle.Modules.Catalog.Infrastructure\Eternelle.Modules.Catalog.Infrastructure.csproj" />
     <ProjectReference Include="..\..\Modules\Users\Eternelle.Modules.Users.Infrastructure\Eternelle.Modules.Users.Infrastructure.csproj" />
     <ProjectReference Include="..\..\Modules\Weddings\Eternelle.Modules.Weddings.Infrastructure\Eternelle.Modules.Weddings.Infrastructure.csproj" />
   </ItemGroup>
diff --git a/src/API/Eternelle.Api/Program.cs b/src/API/Eternelle.Api/Program.cs
index b77968e..df3a262 100644
--- a/src/API/Eternelle.Api/Program.cs
+++ b/src/API/Eternelle.Api/Program.cs
@@ -6,6 +6,7 @@
 using Eternelle.Common.Infrastructure;
 using Eternelle.Common.Infrastructure.Configuration;
 using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Modules.Catalog.Infrastructure;
 using Eternelle.Modules.Users.Infrastructure;
 using Eternelle.Modules.Weddings.Infrastructure;
 using Eternelle.Modules.Weddings.Presentation;
@@ -25,7 +26,8 @@
 
 builder.Services.AddApplication([
     Eternelle.Modules.Weddings.Application.AssemblyReference.Assembly,
-    Eternelle.Modules.Users.Application.AssemblyReference.Assembly
+    Eternelle.Modules.Users.Application.AssemblyReference.Assembly,
+    Eternelle.Modules.Catalog.Application.AssemblyReference.Assembly
 ]);
 
 string databaseConnectionString = builder.Configuration.GetConnectionStringOrThrow("Database");
@@ -37,7 +39,7 @@
     databaseConnectionString: databaseConnectionString,
     redisConnectionString: redisConnectionString);
 
-builder.Configuration.AddModuleConfiguration(["weddings", "users"]);
+builder.Configuration.AddModuleConfiguration(["weddings", "users", "catalog"]);
 
 Uri keyCloakHealthUrl = builder.Configuration.GetKeyCloakHealthUrl();
 
@@ -50,6 +52,8 @@
 
 builder.Services.AddUsersModule(builder.Configuration);
 
+builder.Services.AddCatalogModule(builder.Configuration);
+
 builder.Services.AddRateLimiter(options =>
 {
     // IP-based fixed-window limiter for the public guest photo upload endpoint.
diff --git a/src/API/Eternelle.Api/modules.catalog.Development.json b/src/API/Eternelle.Api/modules.catalog.Development.json
new file mode 100644
index 0000000..61dfc8c
--- /dev/null
+++ b/src/API/Eternelle.Api/modules.catalog.Development.json
@@ -0,0 +1,8 @@
+{
+  "Catalog": {
+    "Outbox": {
+      "IntervalInSeconds": 10,
+      "BatchSize": 10
+    }
+  }
+}
diff --git a/src/API/Eternelle.Api/modules.catalog.json b/src/API/Eternelle.Api/modules.catalog.json
new file mode 100644
index 0000000..61dfc8c
--- /dev/null
+++ b/src/API/Eternelle.Api/modules.catalog.json
@@ -0,0 +1,8 @@
+{
+  "Catalog": {
+    "Outbox": {
+      "IntervalInSeconds": 10,
+      "BatchSize": 10
+    }
+  }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.Designer.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.Designer.cs
new file mode 100644
index 0000000..cb09aa6
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.Designer.cs
@@ -0,0 +1,302 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Catalog.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Database.Migrations
+{
+    [DbContext(typeof(CatalogDbContext))]
+    [Migration("20260527094230_InitialCatalog")]
+    partial class InitialCatalog
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("catalog")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.Template", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at_utc");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(1000)
+                        .HasColumnType("character varying(1000)")
+                        .HasColumnName("description");
+
+                    b.Property<string>("Features")
+                        .IsRequired()
+                        .HasColumnType("jsonb")
+                        .HasColumnName("features");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("PreviewImageUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("preview_image_url");
+
+                    b.Property<string>("Tier")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("tier");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at_utc");
+
+                    b.HasKey("Id")
+                        .HasName("pk_templates");
+
+                    b.HasIndex("Name")
+                        .IsUnique()
+                        .HasDatabaseName("ix_templates_name");
+
+                    b.ToTable("templates", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateSectionVariant", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<bool>("IsDefault")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_default");
+
+                    b.Property<string>("PriceClass")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("price_class");
+
+                    b.Property<string>("SectionId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("section_id");
+
+                    b.Property<Guid>("TemplateId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("template_id");
+
+                    b.Property<int?>("UploadLimit")
+                        .HasColumnType("integer")
+                        .HasColumnName("upload_limit");
+
+                    b.Property<string>("Variant")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("variant");
+
+                    b.HasKey("Id")
+                        .HasName("pk_template_section_variants");
+
+                    b.HasIndex("TemplateId", "SectionId")
+                        .IsUnique()
+                        .HasDatabaseName("ux_template_section_variants_one_default")
+                        .HasFilter("is_default = true");
+
+                    b.HasIndex("TemplateId", "SectionId", "Variant")
+                        .IsUnique()
+                        .HasDatabaseName("ix_template_section_variants_template_id_section_id_variant");
+
+                    b.ToTable("template_section_variants", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateSupportedSection", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("SectionId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("section_id");
+
+                    b.Property<Guid>("TemplateId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("template_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_template_supported_sections");
+
+                    b.HasIndex("TemplateId", "SectionId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_template_supported_sections_template_id_section_id");
+
+                    b.ToTable("template_supported_sections", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateTheme", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Colors")
+                        .IsRequired()
+                        .HasColumnType("jsonb")
+                        .HasColumnName("colors");
+
+                    b.Property<bool>("IsDark")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_dark");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<Guid>("TemplateId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("template_id");
+
+                    b.Property<string>("Textures")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("textures");
+
+                    b.Property<int>("ThemeIndex")
+                        .HasColumnType("integer")
+                        .HasColumnName("theme_index");
+
+                    b.Property<string>("Typography")
+                        .IsRequired()
+                        .HasColumnType("jsonb")
+                        .HasColumnName("typography");
+
+                    b.HasKey("Id")
+                        .HasName("pk_template_themes");
+
+                    b.HasIndex("TemplateId", "ThemeIndex")
+                        .IsUnique()
+                        .HasDatabaseName("ix_template_themes_template_id_theme_index");
+
+                    b.ToTable("template_themes", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateSectionVariant", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Catalog.Domain.Templates.Template", null)
+                        .WithMany("SectionVariants")
+                        .HasForeignKey("TemplateId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_template_section_variants_templates_template_id");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateSupportedSection", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Catalog.Domain.Templates.Template", null)
+                        .WithMany("SupportedSections")
+                        .HasForeignKey("TemplateId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_template_supported_sections_templates_template_id");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateTheme", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Catalog.Domain.Templates.Template", null)
+                        .WithMany("Themes")
+                        .HasForeignKey("TemplateId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_template_themes_templates_template_id");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.Template", b =>
+                {
+                    b.Navigation("SectionVariants");
+
+                    b.Navigation("SupportedSections");
+
+                    b.Navigation("Themes");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
new file mode 100644
index 0000000..ed89e38
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
@@ -0,0 +1,248 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Database.Migrations
+{
+    /// <inheritdoc />
+    public partial class InitialCatalog : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.EnsureSchema(
+                name: "catalog");
+
+            migrationBuilder.CreateTable(
+                name: "outbox_message_consumers",
+                schema: "catalog",
+                columns: table => new
+                {
+                    outbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_outbox_message_consumers", x => new { x.outbox_message_id, x.name });
+                });
+
+            migrationBuilder.CreateTable(
+                name: "outbox_messages",
+                schema: "catalog",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    type = table.Column<string>(type: "text", nullable: false),
+                    content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
+                    occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                    error = table.Column<string>(type: "text", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_outbox_messages", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "templates",
+                schema: "catalog",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    name = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: false),
+                    description = table.Column<string>(type: "character varying(1000)", maxLength: 1000, nullable: true),
+                    tier = table.Column<string>(type: "text", nullable: false),
+                    preview_image_url = table.Column<string>(type: "character varying(2048)", maxLength: 2048, nullable: true),
+                    features = table.Column<string>(type: "jsonb", nullable: false),
+                    created_at_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    updated_at_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_templates", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "template_section_variants",
+                schema: "catalog",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    template_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    section_id = table.Column<string>(type: "character varying(50)", maxLength: 50, nullable: false),
+                    variant = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false),
+                    is_default = table.Column<bool>(type: "boolean", nullable: false),
+                    price_class = table.Column<string>(type: "character varying(50)", maxLength: 50, nullable: false),
+                    upload_limit = table.Column<int>(type: "integer", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_template_section_variants", x => x.id);
+                    table.ForeignKey(
+                        name: "fk_template_section_variants_templates_template_id",
+                        column: x => x.template_id,
+                        principalSchema: "catalog",
+                        principalTable: "templates",
+                        principalColumn: "id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "template_supported_sections",
+                schema: "catalog",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    template_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    section_id = table.Column<string>(type: "character varying(50)", maxLength: 50, nullable: false),
+                    display_order = table.Column<int>(type: "integer", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_template_supported_sections", x => x.id);
+                    table.ForeignKey(
+                        name: "fk_template_supported_sections_templates_template_id",
+                        column: x => x.template_id,
+                        principalSchema: "catalog",
+                        principalTable: "templates",
+                        principalColumn: "id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "template_themes",
+                schema: "catalog",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    template_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    theme_index = table.Column<int>(type: "integer", nullable: false),
+                    name = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false),
+                    colors = table.Column<string>(type: "jsonb", nullable: false),
+                    typography = table.Column<string>(type: "jsonb", nullable: false),
+                    textures = table.Column<string>(type: "jsonb", nullable: true),
+                    is_dark = table.Column<bool>(type: "boolean", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_template_themes", x => x.id);
+                    table.ForeignKey(
+                        name: "fk_template_themes_templates_template_id",
+                        column: x => x.template_id,
+                        principalSchema: "catalog",
+                        principalTable: "templates",
+                        principalColumn: "id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "ix_template_section_variants_template_id_section_id_variant",
+                schema: "catalog",
+                table: "template_section_variants",
+                columns: new[] { "template_id", "section_id", "variant" },
+                unique: true);
+
+            migrationBuilder.CreateIndex(
+                name: "ux_template_section_variants_one_default",
+                schema: "catalog",
+                table: "template_section_variants",
+                columns: new[] { "template_id", "section_id" },
+                unique: true,
+                filter: "is_default = true");
+
+            migrationBuilder.CreateIndex(
+                name: "ix_template_supported_sections_template_id_section_id",
+                schema: "catalog",
+                table: "template_supported_sections",
+                columns: new[] { "template_id", "section_id" },
+                unique: true);
+
+            migrationBuilder.CreateIndex(
+                name: "ix_template_themes_template_id_theme_index",
+                schema: "catalog",
+                table: "template_themes",
+                columns: new[] { "template_id", "theme_index" },
+                unique: true);
+
+            migrationBuilder.CreateIndex(
+                name: "ix_templates_name",
+                schema: "catalog",
+                table: "templates",
+                column: "name",
+                unique: true);
+
+            migrationBuilder.Sql(
+                """
+                INSERT INTO catalog.templates (id, name, description, tier, preview_image_url, features, created_at_utc, updated_at_utc)
+                VALUES (
+                    '0190a000-0000-7000-8000-000000000001',
+                    'Kapilya',
+                    'A classic Filipino chapel-inspired wedding template.',
+                    'FirstClass',
+                    NULL,
+                    '[]'::jsonb,
+                    now() AT TIME ZONE 'utc',
+                    now() AT TIME ZONE 'utc');
+
+                INSERT INTO catalog.template_themes (id, template_id, theme_index, name, colors, typography, textures, is_dark)
+                VALUES
+                    ('0190a000-0000-7000-8000-000000000010', '0190a000-0000-7000-8000-000000000001', 0, 'Ivory',
+                     '{"primary":"#1a1a1a","accent":"#c8a96a","background":"#faf7f2"}'::jsonb,
+                     '{"heading":"Cormorant","body":"Inter"}'::jsonb, NULL, false),
+                    ('0190a000-0000-7000-8000-000000000011', '0190a000-0000-7000-8000-000000000001', 1, 'Midnight',
+                     '{"primary":"#f5f5f5","accent":"#c8a96a","background":"#10100f"}'::jsonb,
+                     '{"heading":"Cormorant","body":"Inter"}'::jsonb, NULL, true);
+
+                INSERT INTO catalog.template_supported_sections (id, template_id, section_id, display_order)
+                VALUES
+                    ('0190a000-0000-7000-8000-000000000020', '0190a000-0000-7000-8000-000000000001', 'Hero', 0),
+                    ('0190a000-0000-7000-8000-000000000021', '0190a000-0000-7000-8000-000000000001', 'Story', 1),
+                    ('0190a000-0000-7000-8000-000000000022', '0190a000-0000-7000-8000-000000000001', 'Entourage', 2),
+                    ('0190a000-0000-7000-8000-000000000023', '0190a000-0000-7000-8000-000000000001', 'Venue', 3),
+                    ('0190a000-0000-7000-8000-000000000024', '0190a000-0000-7000-8000-000000000001', 'Rsvp', 4),
+                    ('0190a000-0000-7000-8000-000000000025', '0190a000-0000-7000-8000-000000000001', 'GuestUploads', 5);
+
+                INSERT INTO catalog.template_section_variants (id, template_id, section_id, variant, is_default, price_class, upload_limit)
+                VALUES
+                    ('0190a000-0000-7000-8000-000000000030', '0190a000-0000-7000-8000-000000000001', 'Hero', 'classic', true, 'Free', NULL),
+                    ('0190a000-0000-7000-8000-000000000031', '0190a000-0000-7000-8000-000000000001', 'Hero', 'editorial', false, 'Plus', NULL),
+                    ('0190a000-0000-7000-8000-000000000032', '0190a000-0000-7000-8000-000000000001', 'Story', 'classic', true, 'Free', NULL),
+                    ('0190a000-0000-7000-8000-000000000033', '0190a000-0000-7000-8000-000000000001', 'Entourage', 'grid', true, 'Free', NULL),
+                    ('0190a000-0000-7000-8000-000000000034', '0190a000-0000-7000-8000-000000000001', 'Venue', 'map', true, 'Free', NULL),
+                    ('0190a000-0000-7000-8000-000000000035', '0190a000-0000-7000-8000-000000000001', 'Rsvp', 'simple', true, 'Free', NULL),
+                    ('0190a000-0000-7000-8000-000000000036', '0190a000-0000-7000-8000-000000000001', 'GuestUploads', 'free', true, 'Free', 50),
+                    ('0190a000-0000-7000-8000-000000000037', '0190a000-0000-7000-8000-000000000001', 'GuestUploads', 'pro', false, 'Pro', 250),
+                    ('0190a000-0000-7000-8000-000000000038', '0190a000-0000-7000-8000-000000000001', 'GuestUploads', 'plus', false, 'Plus', NULL);
+                """);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "outbox_message_consumers",
+                schema: "catalog");
+
+            migrationBuilder.DropTable(
+                name: "outbox_messages",
+                schema: "catalog");
+
+            migrationBuilder.DropTable(
+                name: "template_section_variants",
+                schema: "catalog");
+
+            migrationBuilder.DropTable(
+                name: "template_supported_sections",
+                schema: "catalog");
+
+            migrationBuilder.DropTable(
+                name: "template_themes",
+                schema: "catalog");
+
+            migrationBuilder.DropTable(
+                name: "templates",
+                schema: "catalog");
+        }
+    }
+}
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/CatalogDbContextModelSnapshot.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/CatalogDbContextModelSnapshot.cs
new file mode 100644
index 0000000..50e4645
--- /dev/null
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/CatalogDbContextModelSnapshot.cs
@@ -0,0 +1,299 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Catalog.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Catalog.Infrastructure.Database.Migrations
+{
+    [DbContext(typeof(CatalogDbContext))]
+    partial class CatalogDbContextModelSnapshot : ModelSnapshot
+    {
+        protected override void BuildModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("catalog")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.Template", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at_utc");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(1000)
+                        .HasColumnType("character varying(1000)")
+                        .HasColumnName("description");
+
+                    b.Property<string>("Features")
+                        .IsRequired()
+                        .HasColumnType("jsonb")
+                        .HasColumnName("features");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("PreviewImageUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("preview_image_url");
+
+                    b.Property<string>("Tier")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("tier");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at_utc");
+
+                    b.HasKey("Id")
+                        .HasName("pk_templates");
+
+                    b.HasIndex("Name")
+                        .IsUnique()
+                        .HasDatabaseName("ix_templates_name");
+
+                    b.ToTable("templates", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateSectionVariant", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<bool>("IsDefault")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_default");
+
+                    b.Property<string>("PriceClass")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("price_class");
+
+                    b.Property<string>("SectionId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("section_id");
+
+                    b.Property<Guid>("TemplateId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("template_id");
+
+                    b.Property<int?>("UploadLimit")
+                        .HasColumnType("integer")
+                        .HasColumnName("upload_limit");
+
+                    b.Property<string>("Variant")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("variant");
+
+                    b.HasKey("Id")
+                        .HasName("pk_template_section_variants");
+
+                    b.HasIndex("TemplateId", "SectionId")
+                        .IsUnique()
+                        .HasDatabaseName("ux_template_section_variants_one_default")
+                        .HasFilter("is_default = true");
+
+                    b.HasIndex("TemplateId", "SectionId", "Variant")
+                        .IsUnique()
+                        .HasDatabaseName("ix_template_section_variants_template_id_section_id_variant");
+
+                    b.ToTable("template_section_variants", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateSupportedSection", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("SectionId")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("section_id");
+
+                    b.Property<Guid>("TemplateId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("template_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_template_supported_sections");
+
+                    b.HasIndex("TemplateId", "SectionId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_template_supported_sections_template_id_section_id");
+
+                    b.ToTable("template_supported_sections", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateTheme", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Colors")
+                        .IsRequired()
+                        .HasColumnType("jsonb")
+                        .HasColumnName("colors");
+
+                    b.Property<bool>("IsDark")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_dark");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("name");
+
+                    b.Property<Guid>("TemplateId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("template_id");
+
+                    b.Property<string>("Textures")
+                        .HasColumnType("jsonb")
+                        .HasColumnName("textures");
+
+                    b.Property<int>("ThemeIndex")
+                        .HasColumnType("integer")
+                        .HasColumnName("theme_index");
+
+                    b.Property<string>("Typography")
+                        .IsRequired()
+                        .HasColumnType("jsonb")
+                        .HasColumnName("typography");
+
+                    b.HasKey("Id")
+                        .HasName("pk_template_themes");
+
+                    b.HasIndex("TemplateId", "ThemeIndex")
+                        .IsUnique()
+                        .HasDatabaseName("ix_template_themes_template_id_theme_index");
+
+                    b.ToTable("template_themes", "catalog");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateSectionVariant", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Catalog.Domain.Templates.Template", null)
+                        .WithMany("SectionVariants")
+                        .HasForeignKey("TemplateId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_template_section_variants_templates_template_id");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateSupportedSection", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Catalog.Domain.Templates.Template", null)
+                        .WithMany("SupportedSections")
+                        .HasForeignKey("TemplateId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_template_supported_sections_templates_template_id");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.TemplateTheme", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Catalog.Domain.Templates.Template", null)
+                        .WithMany("Themes")
+                        .HasForeignKey("TemplateId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_template_themes_templates_template_id");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Catalog.Domain.Templates.Template", b =>
+                {
+                    b.Navigation("SectionVariants");
+
+                    b.Navigation("SupportedSections");
+
+                    b.Navigation("Themes");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}

From 23873b55773b0dcd60e66d3713fe5ae423b35eb9 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 18:18:46 +0800
Subject: [PATCH 029/155] Eternelle-180 Seed catalog:manage permission for
 Admin role

Adds a Users migration that inserts the catalog:manage permission and
assigns it to the Admin role, enabling authorized catalog management
operations.
---
 ...020_AddCatalogManagePermission.Designer.cs | 334 ++++++++++++++++++
 ...260527101020_AddCatalogManagePermission.cs |  34 ++
 2 files changed, 368 insertions(+)
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.Designer.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs

diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.Designer.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.Designer.cs
new file mode 100644
index 0000000..cd54970
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.Designer.cs
@@ -0,0 +1,334 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Users.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Users.Infrastructure.Database.Migrations
+{
+    [DbContext(typeof(UsersDbContext))]
+    [Migration("20260527101020_AddCatalogManagePermission")]
+    partial class AddCatalogManagePermission
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("users")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.Permission", b =>
+                {
+                    b.Property<string>("Code")
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("code");
+
+                    b.HasKey("Code")
+                        .HasName("pk_permissions");
+
+                    b.ToTable("permissions", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            Code = "users:read"
+                        },
+                        new
+                        {
+                            Code = "users:update"
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.Role", b =>
+                {
+                    b.Property<string>("Name")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Name")
+                        .HasName("pk_roles");
+
+                    b.ToTable("roles", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            Name = "Admin"
+                        },
+                        new
+                        {
+                            Name = "Couple"
+                        },
+                        new
+                        {
+                            Name = "Guest"
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.User", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasMaxLength(300)
+                        .HasColumnType("character varying(300)")
+                        .HasColumnName("email");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("first_name");
+
+                    b.Property<string>("IdentityId")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("identity_id");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("last_name");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasMaxLength(16)
+                        .HasColumnType("character varying(16)")
+                        .HasColumnName("phone_number");
+
+                    b.HasKey("Id")
+                        .HasName("pk_users");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasDatabaseName("ix_users_email");
+
+                    b.HasIndex("IdentityId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_users_identity_id");
+
+                    b.ToTable("users", "users");
+                });
+
+            modelBuilder.Entity("PermissionRole", b =>
+                {
+                    b.Property<string>("PermissionCode")
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("permission_code");
+
+                    b.Property<string>("RoleName")
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("role_name");
+
+                    b.HasKey("PermissionCode", "RoleName")
+                        .HasName("pk_role_permissions");
+
+                    b.HasIndex("RoleName")
+                        .HasDatabaseName("ix_role_permissions_role_name");
+
+                    b.ToTable("role_permissions", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Couple"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:update",
+                            RoleName = "Couple"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Admin"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:update",
+                            RoleName = "Admin"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Guest"
+                        });
+                });
+
+            modelBuilder.Entity("RoleUser", b =>
+                {
+                    b.Property<string>("RolesName")
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("role_name");
+
+                    b.Property<Guid>("UserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("user_id");
+
+                    b.HasKey("RolesName", "UserId")
+                        .HasName("pk_user_roles");
+
+                    b.HasIndex("UserId")
+                        .HasDatabaseName("ix_user_roles_user_id");
+
+                    b.ToTable("user_roles", "users");
+                });
+
+            modelBuilder.Entity("PermissionRole", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Permission", null)
+                        .WithMany()
+                        .HasForeignKey("PermissionCode")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_role_permissions_permissions_permission_code");
+
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleName")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_role_permissions_roles_role_name");
+                });
+
+            modelBuilder.Entity("RoleUser", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RolesName")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_roles_roles_roles_name");
+
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.User", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_roles_users_user_id");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs
new file mode 100644
index 0000000..b4fdab2
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs
@@ -0,0 +1,34 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Eternelle.Modules.Users.Infrastructure.Database.Migrations;
+
+/// <inheritdoc />
+public partial class AddCatalogManagePermission : Migration
+{
+    /// <inheritdoc />
+    protected override void Up(MigrationBuilder migrationBuilder)
+    {
+        migrationBuilder.Sql(
+            """
+            INSERT INTO users.permissions (code)
+            VALUES ('catalog:manage')
+            ON CONFLICT DO NOTHING;
+
+            INSERT INTO users.role_permissions (permission_code, role_name)
+            VALUES ('catalog:manage', 'Admin')
+            ON CONFLICT DO NOTHING;
+            """);
+    }
+
+    /// <inheritdoc />
+    protected override void Down(MigrationBuilder migrationBuilder)
+    {
+        migrationBuilder.Sql(
+            """
+            DELETE FROM users.role_permissions WHERE permission_code = 'catalog:manage';
+            DELETE FROM users.permissions WHERE code = 'catalog:manage';
+            """);
+    }
+}

From 0d9417399877daca2fa2ee45ef270145bdaf1337 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 18:23:03 +0800
Subject: [PATCH 030/155] Eternelle-180 Apply file-scoped namespace and
 collection expression fixes to initial migration

---
 .../20260527094230_InitialCatalog.cs          | 59 +++++++++----------
 1 file changed, 29 insertions(+), 30 deletions(-)

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
index ed89e38..c61f666 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
@@ -3,11 +3,11 @@
 
 #nullable disable
 
-namespace Eternelle.Modules.Catalog.Infrastructure.Database.Migrations
+namespace Eternelle.Modules.Catalog.Infrastructure.Database.Migrations;
+
+/// <inheritdoc />
+public partial class InitialCatalog : Migration
 {
-    /// <inheritdoc />
-    public partial class InitialCatalog : Migration
-    {
         /// <inheritdoc />
         protected override void Up(MigrationBuilder migrationBuilder)
         {
@@ -140,14 +140,14 @@ protected override void Up(MigrationBuilder migrationBuilder)
                 name: "ix_template_section_variants_template_id_section_id_variant",
                 schema: "catalog",
                 table: "template_section_variants",
-                columns: new[] { "template_id", "section_id", "variant" },
+                columns: ["template_id", "section_id", "variant"],
                 unique: true);
 
             migrationBuilder.CreateIndex(
                 name: "ux_template_section_variants_one_default",
                 schema: "catalog",
                 table: "template_section_variants",
-                columns: new[] { "template_id", "section_id" },
+                columns: ["template_id", "section_id"],
                 unique: true,
                 filter: "is_default = true");
 
@@ -155,14 +155,14 @@ protected override void Up(MigrationBuilder migrationBuilder)
                 name: "ix_template_supported_sections_template_id_section_id",
                 schema: "catalog",
                 table: "template_supported_sections",
-                columns: new[] { "template_id", "section_id" },
+                columns: ["template_id", "section_id"],
                 unique: true);
 
             migrationBuilder.CreateIndex(
                 name: "ix_template_themes_template_id_theme_index",
                 schema: "catalog",
                 table: "template_themes",
-                columns: new[] { "template_id", "theme_index" },
+                columns: ["template_id", "theme_index"],
                 unique: true);
 
             migrationBuilder.CreateIndex(
@@ -217,32 +217,31 @@ INSERT INTO catalog.template_section_variants (id, template_id, section_id, vari
                 """);
         }
 
-        /// <inheritdoc />
-        protected override void Down(MigrationBuilder migrationBuilder)
-        {
-            migrationBuilder.DropTable(
-                name: "outbox_message_consumers",
-                schema: "catalog");
+    /// <inheritdoc />
+    protected override void Down(MigrationBuilder migrationBuilder)
+    {
+        migrationBuilder.DropTable(
+            name: "outbox_message_consumers",
+            schema: "catalog");
 
-            migrationBuilder.DropTable(
-                name: "outbox_messages",
-                schema: "catalog");
+        migrationBuilder.DropTable(
+            name: "outbox_messages",
+            schema: "catalog");
 
-            migrationBuilder.DropTable(
-                name: "template_section_variants",
-                schema: "catalog");
+        migrationBuilder.DropTable(
+            name: "template_section_variants",
+            schema: "catalog");
 
-            migrationBuilder.DropTable(
-                name: "template_supported_sections",
-                schema: "catalog");
+        migrationBuilder.DropTable(
+            name: "template_supported_sections",
+            schema: "catalog");
 
-            migrationBuilder.DropTable(
-                name: "template_themes",
-                schema: "catalog");
+        migrationBuilder.DropTable(
+            name: "template_themes",
+            schema: "catalog");
 
-            migrationBuilder.DropTable(
-                name: "templates",
-                schema: "catalog");
-        }
+        migrationBuilder.DropTable(
+            name: "templates",
+            schema: "catalog");
     }
 }

From 7ec9a039d925b6f2e3e8cb475527123c30ed9fa6 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 18:45:43 +0800
Subject: [PATCH 031/155] Eternelle-180 Add migration support for
 CatalogDbContext

Extended migration logic to include CatalogDbContext alongside WeddingsDbContext and UsersDbContext. Updated imports to reference the Catalog module's DbContext.
---
 src/API/Eternelle.Api/Extensions/MigrationExtensions.cs | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs b/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
index b56f3b5..0d62e02 100644
--- a/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
+++ b/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
@@ -1,3 +1,4 @@
+using Eternelle.Modules.Catalog.Infrastructure.Database;
 using Eternelle.Modules.Users.Infrastructure.Database;
 using Eternelle.Modules.Weddings.Infrastructure.Database;
 using Microsoft.EntityFrameworkCore;
@@ -12,6 +13,7 @@ public static void ApplyMigrations(this IApplicationBuilder app)
 
         ApplyMigration<WeddingsDbContext>(scope);
         ApplyMigration<UsersDbContext>(scope);
+        ApplyMigration<CatalogDbContext>(scope);
     }
 
     private static void ApplyMigration<TDbContext>(IServiceScope scope)

From fef0171d329a53602e3863ea718089526a8fa18b Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 19:19:40 +0800
Subject: [PATCH 032/155] Eternelle-180 Address code review findings on
 Template aggregate and validators

- Add MaxVariantLength constant to TemplateSectionVariant; reference it
  in AddSectionVariantCommandValidator and EF config (removes magic number)
- Add Textures validation rule in AddTemplateThemeCommandValidator (nullable guard)
- Wrap cache eviction loop in try/catch with ILogger in CreateTemplateCommandHandler
- Defensively copy features collection in Template.Create and UpdateDetails

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../AddSectionVariantCommandValidator.cs            |  3 ++-
 .../AddTemplateThemeCommandValidator.cs             |  1 +
 .../CreateTemplate/CreateTemplateCommandHandler.cs  | 13 +++++++++++--
 .../Templates/Template.cs                           |  4 ++--
 .../Templates/TemplateSectionVariant.cs             |  2 ++
 .../TemplateSectionVariantConfiguration.cs          |  2 +-
 6 files changed, 19 insertions(+), 6 deletions(-)

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandValidator.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandValidator.cs
index 38957de..f1e3654 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandValidator.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddSectionVariant/AddSectionVariantCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Modules.Catalog.Domain.Templates;
 using FluentValidation;
 
 namespace Eternelle.Modules.Catalog.Application.Templates.AddSectionVariant;
@@ -8,7 +9,7 @@ public AddSectionVariantCommandValidator()
     {
         RuleFor(c => c.TemplateId).NotEmpty();
         RuleFor(c => c.SectionId).IsInEnum();
-        RuleFor(c => c.Variant).NotEmpty().MaximumLength(100);
+        RuleFor(c => c.Variant).NotEmpty().MaximumLength(TemplateSectionVariant.MaxVariantLength);
         RuleFor(c => c.PriceClass).IsInEnum();
         RuleFor(c => c.UploadLimit).GreaterThan(0).When(c => c.UploadLimit is not null);
     }
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandValidator.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandValidator.cs
index 0ec91a8..b135666 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandValidator.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/AddTemplateTheme/AddTemplateThemeCommandValidator.cs
@@ -12,5 +12,6 @@ public AddTemplateThemeCommandValidator()
         RuleFor(c => c.Name).NotEmpty().MaximumLength(TemplateThemeName.MaxLength);
         RuleFor(c => c.Colors).NotEmpty();
         RuleFor(c => c.Typography).NotEmpty();
+        RuleFor(c => c.Textures).NotEmpty().When(c => c.Textures is not null);
     }
 }
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs
index bbc812f..375f5fb 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs
@@ -5,6 +5,7 @@
 using Eternelle.Modules.Catalog.Application.Abstractions.Data;
 using Eternelle.Modules.Catalog.Domain.Shared;
 using Eternelle.Modules.Catalog.Domain.Templates;
+using Microsoft.Extensions.Logging;
 
 namespace Eternelle.Modules.Catalog.Application.Templates.CreateTemplate;
 
@@ -12,7 +13,8 @@ internal sealed class CreateTemplateCommandHandler(
     ITemplateRepository templateRepository,
     IUnitOfWork unitOfWork,
     ICacheService cacheService,
-    IDateTimeProvider dateTimeProvider) : ICommandHandler<CreateTemplateCommand, Guid>
+    IDateTimeProvider dateTimeProvider,
+    ILogger<CreateTemplateCommandHandler> logger) : ICommandHandler<CreateTemplateCommand, Guid>
 {
     public async Task<Result<Guid>> Handle(CreateTemplateCommand command, CancellationToken cancellationToken)
     {
@@ -67,7 +69,14 @@ public async Task<Result<Guid>> Handle(CreateTemplateCommand command, Cancellati
 
         foreach (string key in CatalogCacheKeys.AllTemplateListKeys())
         {
-            await cacheService.RemoveAsync(key, cancellationToken);
+            try
+            {
+                await cacheService.RemoveAsync(key, cancellationToken);
+            }
+            catch (Exception ex)
+            {
+                logger.LogWarning(ex, "Failed to evict cache key '{Key}' after creating template {TemplateId}", key, templateResult.Value.Id.Value);
+            }
         }
 
         return templateResult.Value.Id.Value;
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs
index 8115272..d7640b8 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs
@@ -39,7 +39,7 @@ public static Result<Template> Create(
             Description = description,
             Tier = tier,
             PreviewImageUrl = previewImageUrl,
-            Features = features,
+            Features = [..features],
             CreatedAtUtc = utcNow,
             UpdatedAtUtc = utcNow
         };
@@ -60,7 +60,7 @@ public Result UpdateDetails(
         Name = name;
         Description = description;
         PreviewImageUrl = previewImageUrl;
-        Features = features;
+        Features = [..features];
         UpdatedAtUtc = utcNow;
 
         Raise(BuildManifestEvent());
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
index a191bbe..9299a6b 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
@@ -4,6 +4,8 @@ namespace Eternelle.Modules.Catalog.Domain.Templates;
 
 public sealed class TemplateSectionVariant : Entity
 {
+    public const int MaxVariantLength = 100;
+
     private TemplateSectionVariant() { }
 
     public TemplateSectionVariantId Id { get; private set; }
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs
index c285e95..bea4581 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs
@@ -18,7 +18,7 @@ public void Configure(EntityTypeBuilder<TemplateSectionVariant> builder)
             .IsRequired()
             .HasMaxLength(50);
 
-        builder.Property(v => v.Variant).IsRequired().HasMaxLength(100);
+        builder.Property(v => v.Variant).IsRequired().HasMaxLength(TemplateSectionVariant.MaxVariantLength);
 
         builder.Property(v => v.IsDefault).IsRequired();
 

From 8169c198d18df4c8449eeff004c971bc2501a50a Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 21:05:46 +0800
Subject: [PATCH 033/155] Eternelle-180 Refactor init patterns, migrations, and
 add comments

Updated TemplateManifestChangedDomainEvent to use collection expressions for property initialization. Added comments on null! usage in TemplateSectionVariant and TemplateTheme for clarity. Adjusted timestamp handling in InitialCatalog migration to use now(). Limited role_permissions deletion to 'Admin' in AddCatalogManagePermission Down migration.
---
 .../Templates/TemplateManifestChangedDomainEvent.cs           | 4 ++--
 .../Templates/TemplateSectionVariant.cs                       | 2 +-
 .../Templates/TemplateTheme.cs                                | 1 +
 .../Database/Migrations/20260527094230_InitialCatalog.cs      | 4 ++--
 .../Migrations/20260527101020_AddCatalogManagePermission.cs   | 3 +--
 5 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestChangedDomainEvent.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestChangedDomainEvent.cs
index 9e5d4fc..17ba61f 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestChangedDomainEvent.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateManifestChangedDomainEvent.cs
@@ -12,6 +12,6 @@ public sealed class TemplateManifestChangedDomainEvent(
     public TemplateId TemplateId { get; init; } = templateId;
     public string Name { get; init; } = name;
     public string Tier { get; init; } = tier;
-    public IReadOnlyList<string> SectionIds { get; init; } = sectionIds;
-    public IReadOnlyList<TemplateManifestItem> Variants { get; init; } = variants;
+    public IReadOnlyList<string> SectionIds { get; init; } = [..sectionIds];
+    public IReadOnlyList<TemplateManifestItem> Variants { get; init; } = [..variants];
 }
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
index 9299a6b..29d42e5 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateSectionVariant.cs
@@ -11,7 +11,7 @@ private TemplateSectionVariant() { }
     public TemplateSectionVariantId Id { get; private set; }
     public TemplateId TemplateId { get; private set; }
     public SectionId SectionId { get; private set; }
-    public string Variant { get; private set; } = null!;
+    public string Variant { get; private set; } = null!; // always set via Create() factory before exposure
     public bool IsDefault { get; private set; }
     public PriceClass PriceClass { get; private set; }
 
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTheme.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTheme.cs
index 15c66df..0021eab 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTheme.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateTheme.cs
@@ -9,6 +9,7 @@ private TemplateTheme() { }
     public TemplateThemeId Id { get; private set; }
     public TemplateId TemplateId { get; private set; }
     public int ThemeIndex { get; private set; }
+    // null! is safe: all three are set before exposure via Create() or EF Core materialization
     public TemplateThemeName Name { get; private set; } = null!;
     public ThemeColors Colors { get; private set; } = null!;
     public ThemeTypography Typography { get; private set; } = null!;
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
index c61f666..67c9429 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
@@ -182,8 +182,8 @@ INSERT INTO catalog.templates (id, name, description, tier, preview_image_url, f
                     'FirstClass',
                     NULL,
                     '[]'::jsonb,
-                    now() AT TIME ZONE 'utc',
-                    now() AT TIME ZONE 'utc');
+                    now(),
+                    now());
 
                 INSERT INTO catalog.template_themes (id, template_id, theme_index, name, colors, typography, textures, is_dark)
                 VALUES
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs
index b4fdab2..0aa869d 100644
--- a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs
@@ -27,8 +27,7 @@ protected override void Down(MigrationBuilder migrationBuilder)
     {
         migrationBuilder.Sql(
             """
-            DELETE FROM users.role_permissions WHERE permission_code = 'catalog:manage';
-            DELETE FROM users.permissions WHERE code = 'catalog:manage';
+            DELETE FROM users.role_permissions WHERE permission_code = 'catalog:manage' AND role_name = 'Admin';
             """);
     }
 }

From c5386beb0e75f1013c8251194deb9e196ed081ed Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Wed, 27 May 2026 23:24:28 +0800
Subject: [PATCH 034/155] Eternelle-184 Persist Catalog enums as integers;
 update docs and seed data
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Catalog enums (SectionId, Tier, PriceClass) are now stored as integers in the database. Updated entity configurations, migrations, and seed data accordingly. Revised documentation to reflect module renaming (Identity → Users) and next module focus (Tenancy).
---
 CLAUDE.md                                     | 16 +++-----
 .../Templates/SectionId.cs                    |  3 +-
 .../20260527094230_InitialCatalog.cs          | 40 +++++++++----------
 .../Templates/TemplateConfiguration.cs        |  2 +-
 .../TemplateSectionVariantConfiguration.cs    | 10 ++---
 .../TemplateSupportedSectionConfiguration.cs  |  5 +--
 6 files changed, 34 insertions(+), 42 deletions(-)

diff --git a/CLAUDE.md b/CLAUDE.md
index fe9721b..fdb9ab7 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -36,7 +36,7 @@ src/
         └── Eternelle.Modules.Weddings.IntegrationEvents/   ← integration event classes only
 ```
 
-Future modules follow the same **five-project** structure: **Identity → Tenancy → RSVP → Guestbook → Catalog**.
+Future modules follow the same **five-project** structure: **Users → Catalog → Tenancy → RSVP → Guestbook**.
 
 ---
 
@@ -45,11 +45,11 @@ Future modules follow the same **five-project** structure: **Identity → Tenanc
 | Module    | Domain | Application | Infrastructure | Presentation | IntegrationEvents |
 |-----------|--------|-------------|----------------|--------------|-------------------|
 | Weddings  | ✅      | ✅           | ✅              | ✅            | ✅                 |
-| Identity  | ❌      | ❌           | ❌              | ❌            | ❌                 |
+| Users     | ✅      | ✅           | ✅              | ✅            | ✅                 |
+| Catalog   | ✅      | ✅           | ✅              | ✅            | ✅                 |
 | Tenancy   | ❌      | ❌           | ❌              | ❌            | ❌                 |
 | RSVP      | ❌      | ❌           | ❌              | ❌            | ❌                 |
 | Guestbook | ❌      | ❌           | ❌              | ❌            | ❌                 |
-| Catalog   | ❌      | ❌           | ❌              | ❌            | ❌                 |
 
 ---
 
@@ -269,14 +269,10 @@ internal sealed class CreateWeddingEndpoint : IEndpoint
 
 ---
 
-## Next Module: Identity
+## Next Module: Tenancy
 
-Module name: **`Eternelle.Modules.Identity`** — not IAM.  
-Schema constant: `public static class Schemas { public const string Identity = "identity"; }`
-
-Rationale: matches `.NET` ecosystem convention (ASP.NET Core Identity), correct scope (auth + user profile), avoids acronym in namespace, already referenced as the example in `docs/module-conventions.md`.
-
-Cross-module data flow: `WeddingCreatedIntegrationEvent` → Identity handler stores a local copy of `WeddingId`/`TenantId`/`WeddingDate` in the `identity` schema. Identity never queries the `wedding` schema directly.
+Module name: **`Eternelle.Modules.Tenancy`**  
+Schema constant: `public static class Schemas { public const string Tenancy = "tenancy"; }`
 
 ---
 
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs
index d87cdaa..46aaff2 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs
@@ -1,7 +1,6 @@
 namespace Eternelle.Modules.Catalog.Domain.Templates;
 
-// Persisted as the enum NAME (string) so the Tenancy module can match selections
-// against this catalog by a stable identifier. Do not renumber/rename without a migration.
+// Persisted as the enum VALUE (integer). Do not reorder values without a migration.
 public enum SectionId
 {
     Hero,
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
index 67c9429..5cadd1b 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
@@ -52,7 +52,7 @@ protected override void Up(MigrationBuilder migrationBuilder)
                     id = table.Column<Guid>(type: "uuid", nullable: false),
                     name = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: false),
                     description = table.Column<string>(type: "character varying(1000)", maxLength: 1000, nullable: true),
-                    tier = table.Column<string>(type: "text", nullable: false),
+                    tier = table.Column<int>(type: "integer", nullable: false),
                     preview_image_url = table.Column<string>(type: "character varying(2048)", maxLength: 2048, nullable: true),
                     features = table.Column<string>(type: "jsonb", nullable: false),
                     created_at_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
@@ -70,10 +70,10 @@ protected override void Up(MigrationBuilder migrationBuilder)
                 {
                     id = table.Column<Guid>(type: "uuid", nullable: false),
                     template_id = table.Column<Guid>(type: "uuid", nullable: false),
-                    section_id = table.Column<string>(type: "character varying(50)", maxLength: 50, nullable: false),
+                    section_id = table.Column<int>(type: "integer", nullable: false),
                     variant = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false),
                     is_default = table.Column<bool>(type: "boolean", nullable: false),
-                    price_class = table.Column<string>(type: "character varying(50)", maxLength: 50, nullable: false),
+                    price_class = table.Column<int>(type: "integer", nullable: false),
                     upload_limit = table.Column<int>(type: "integer", nullable: true)
                 },
                 constraints: table =>
@@ -95,7 +95,7 @@ protected override void Up(MigrationBuilder migrationBuilder)
                 {
                     id = table.Column<Guid>(type: "uuid", nullable: false),
                     template_id = table.Column<Guid>(type: "uuid", nullable: false),
-                    section_id = table.Column<string>(type: "character varying(50)", maxLength: 50, nullable: false),
+                    section_id = table.Column<int>(type: "integer", nullable: false),
                     display_order = table.Column<int>(type: "integer", nullable: false)
                 },
                 constraints: table =>
@@ -179,7 +179,7 @@ INSERT INTO catalog.templates (id, name, description, tier, preview_image_url, f
                     '0190a000-0000-7000-8000-000000000001',
                     'Kapilya',
                     'A classic Filipino chapel-inspired wedding template.',
-                    'FirstClass',
+                    1,
                     NULL,
                     '[]'::jsonb,
                     now(),
@@ -196,24 +196,24 @@ INSERT INTO catalog.template_themes (id, template_id, theme_index, name, colors,
 
                 INSERT INTO catalog.template_supported_sections (id, template_id, section_id, display_order)
                 VALUES
-                    ('0190a000-0000-7000-8000-000000000020', '0190a000-0000-7000-8000-000000000001', 'Hero', 0),
-                    ('0190a000-0000-7000-8000-000000000021', '0190a000-0000-7000-8000-000000000001', 'Story', 1),
-                    ('0190a000-0000-7000-8000-000000000022', '0190a000-0000-7000-8000-000000000001', 'Entourage', 2),
-                    ('0190a000-0000-7000-8000-000000000023', '0190a000-0000-7000-8000-000000000001', 'Venue', 3),
-                    ('0190a000-0000-7000-8000-000000000024', '0190a000-0000-7000-8000-000000000001', 'Rsvp', 4),
-                    ('0190a000-0000-7000-8000-000000000025', '0190a000-0000-7000-8000-000000000001', 'GuestUploads', 5);
+                    ('0190a000-0000-7000-8000-000000000020', '0190a000-0000-7000-8000-000000000001', 0, 0),
+                    ('0190a000-0000-7000-8000-000000000021', '0190a000-0000-7000-8000-000000000001', 1, 1),
+                    ('0190a000-0000-7000-8000-000000000022', '0190a000-0000-7000-8000-000000000001', 2, 2),
+                    ('0190a000-0000-7000-8000-000000000023', '0190a000-0000-7000-8000-000000000001', 7, 3),
+                    ('0190a000-0000-7000-8000-000000000024', '0190a000-0000-7000-8000-000000000001', 9, 4),
+                    ('0190a000-0000-7000-8000-000000000025', '0190a000-0000-7000-8000-000000000001', 12, 5);
 
                 INSERT INTO catalog.template_section_variants (id, template_id, section_id, variant, is_default, price_class, upload_limit)
                 VALUES
-                    ('0190a000-0000-7000-8000-000000000030', '0190a000-0000-7000-8000-000000000001', 'Hero', 'classic', true, 'Free', NULL),
-                    ('0190a000-0000-7000-8000-000000000031', '0190a000-0000-7000-8000-000000000001', 'Hero', 'editorial', false, 'Plus', NULL),
-                    ('0190a000-0000-7000-8000-000000000032', '0190a000-0000-7000-8000-000000000001', 'Story', 'classic', true, 'Free', NULL),
-                    ('0190a000-0000-7000-8000-000000000033', '0190a000-0000-7000-8000-000000000001', 'Entourage', 'grid', true, 'Free', NULL),
-                    ('0190a000-0000-7000-8000-000000000034', '0190a000-0000-7000-8000-000000000001', 'Venue', 'map', true, 'Free', NULL),
-                    ('0190a000-0000-7000-8000-000000000035', '0190a000-0000-7000-8000-000000000001', 'Rsvp', 'simple', true, 'Free', NULL),
-                    ('0190a000-0000-7000-8000-000000000036', '0190a000-0000-7000-8000-000000000001', 'GuestUploads', 'free', true, 'Free', 50),
-                    ('0190a000-0000-7000-8000-000000000037', '0190a000-0000-7000-8000-000000000001', 'GuestUploads', 'pro', false, 'Pro', 250),
-                    ('0190a000-0000-7000-8000-000000000038', '0190a000-0000-7000-8000-000000000001', 'GuestUploads', 'plus', false, 'Plus', NULL);
+                    ('0190a000-0000-7000-8000-000000000030', '0190a000-0000-7000-8000-000000000001', 0,  'classic', true,  1, NULL),
+                    ('0190a000-0000-7000-8000-000000000031', '0190a000-0000-7000-8000-000000000001', 0,  'editorial', false, 3, NULL),
+                    ('0190a000-0000-7000-8000-000000000032', '0190a000-0000-7000-8000-000000000001', 1,  'classic', true,  1, NULL),
+                    ('0190a000-0000-7000-8000-000000000033', '0190a000-0000-7000-8000-000000000001', 2,  'grid', true,  1, NULL),
+                    ('0190a000-0000-7000-8000-000000000034', '0190a000-0000-7000-8000-000000000001', 7,  'map', true,  1, NULL),
+                    ('0190a000-0000-7000-8000-000000000035', '0190a000-0000-7000-8000-000000000001', 9,  'simple', true,  1, NULL),
+                    ('0190a000-0000-7000-8000-000000000036', '0190a000-0000-7000-8000-000000000001', 12, 'free', true,  1, 50),
+                    ('0190a000-0000-7000-8000-000000000037', '0190a000-0000-7000-8000-000000000001', 12, 'pro', false, 2, 250),
+                    ('0190a000-0000-7000-8000-000000000038', '0190a000-0000-7000-8000-000000000001', 12, 'plus', false, 3, NULL);
                 """);
         }
 
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateConfiguration.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateConfiguration.cs
index 18fac0e..0634747 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateConfiguration.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateConfiguration.cs
@@ -28,7 +28,7 @@ public void Configure(EntityTypeBuilder<Template> builder)
             .HasMaxLength(TemplateDescription.MaxLength);
 
         builder.Property(t => t.Tier)
-            .HasConversion<string>()
+            .HasConversion<int>()
             .IsRequired();
 
         builder.Property(t => t.PreviewImageUrl)
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs
index bea4581..f040d89 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSectionVariantConfiguration.cs
@@ -14,18 +14,16 @@ public void Configure(EntityTypeBuilder<TemplateSectionVariant> builder)
         builder.Property(v => v.TemplateId).IsRequired();
 
         builder.Property(v => v.SectionId)
-            .HasConversion<string>()
-            .IsRequired()
-            .HasMaxLength(50);
+            .HasConversion<int>()
+            .IsRequired();
 
         builder.Property(v => v.Variant).IsRequired().HasMaxLength(TemplateSectionVariant.MaxVariantLength);
 
         builder.Property(v => v.IsDefault).IsRequired();
 
         builder.Property(v => v.PriceClass)
-            .HasConversion<string>()
-            .IsRequired()
-            .HasMaxLength(50);
+            .HasConversion<int>()
+            .IsRequired();
 
         builder.Property(v => v.UploadLimit);
 
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSupportedSectionConfiguration.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSupportedSectionConfiguration.cs
index d2b0efd..ebbd092 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSupportedSectionConfiguration.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateSupportedSectionConfiguration.cs
@@ -14,9 +14,8 @@ public void Configure(EntityTypeBuilder<TemplateSupportedSection> builder)
         builder.Property(s => s.TemplateId).IsRequired();
 
         builder.Property(s => s.SectionId)
-            .HasConversion<string>()
-            .IsRequired()
-            .HasMaxLength(50);
+            .HasConversion<int>()
+            .IsRequired();
 
         builder.Property(s => s.DisplayOrder).IsRequired();
 

From ae87253a1bda9ee5b1316ade7fa7e9d41720f81e Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 10:59:55 +0800
Subject: [PATCH 035/155] Eternelle-186 Scaffold five-project module structure

---
 Eternelle.slnx                                   | 16 ++++++++++++++++
 .../Eternelle.Modules.Tenancy.Application.csproj |  9 +++++++++
 .../AssemblyInfo.cs                              |  6 ++++++
 .../Eternelle.Modules.Tenancy.Domain.csproj      |  7 +++++++
 ...ernelle.Modules.Tenancy.Infrastructure.csproj | 16 ++++++++++++++++
 ...elle.Modules.Tenancy.IntegrationEvents.csproj |  7 +++++++
 ...Eternelle.Modules.Tenancy.Presentation.csproj |  8 ++++++++
 7 files changed, 69 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Eternelle.Modules.Tenancy.Application.csproj
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/AssemblyInfo.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Eternelle.Modules.Tenancy.Domain.csproj
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/Eternelle.Modules.Tenancy.IntegrationEvents.csproj
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Eternelle.Modules.Tenancy.Presentation.csproj

diff --git a/Eternelle.slnx b/Eternelle.slnx
index 933c179..56937f5 100644
--- a/Eternelle.slnx
+++ b/Eternelle.slnx
@@ -1,18 +1,27 @@
 <Solution>
   <Folder Name="/docs/">
+    <File Path="docs/database-design.md" />
     <File Path="docs/feature-gift-contributions.md" />
     <File Path="docs/feature-guest-photo-upload.md" />
     <File Path="docs/module-conventions.md" />
   </Folder>
+  <Folder Name="/docs/modules/">
+    <File Path="docs/modules/catalog.md" />
+    <File Path="docs/modules/README.md" />
+    <File Path="docs/modules/users.md" />
+    <File Path="docs/modules/weddings.md" />
+  </Folder>
   <Folder Name="/docs/superpowers/" />
   <Folder Name="/docs/superpowers/plans/">
     <File Path="docs/superpowers/plans/2026-05-20-users-module.md" />
     <File Path="docs/superpowers/plans/2026-05-24-weddings-inbox-outbox-alignment.md" />
     <File Path="docs/superpowers/plans/2026-05-27-catalog-module.md" />
+    <File Path="docs/superpowers/plans/2026-05-28-tenancy-module.md" />
   </Folder>
   <Folder Name="/docs/superpowers/specs/">
     <File Path="docs/superpowers/specs/2026-05-20-users-module-design.md" />
     <File Path="docs/superpowers/specs/2026-05-27-catalog-module-design.md" />
+    <File Path="docs/superpowers/specs/2026-05-28-tenancy-module-design.md" />
   </Folder>
   <Folder Name="/Solution Items/">
     <File Path=".editorconfig" />
@@ -37,6 +46,13 @@
     <Project Path="src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/Eternelle.Modules.Catalog.IntegrationEvents.csproj" />
     <Project Path="src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Eternelle.Modules.Catalog.Presentation.csproj" />
   </Folder>
+  <Folder Name="/src/Modules/Tenancy/">
+    <Project Path="src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Eternelle.Modules.Tenancy.Application.csproj" />
+    <Project Path="src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Eternelle.Modules.Tenancy.Domain.csproj" />
+    <Project Path="src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj" />
+    <Project Path="src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/Eternelle.Modules.Tenancy.IntegrationEvents.csproj" />
+    <Project Path="src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Eternelle.Modules.Tenancy.Presentation.csproj" />
+  </Folder>
   <Folder Name="/src/Modules/Users/">
     <Project Path="src/Modules/Users/Eternelle.Modules.Users.Application/Eternelle.Modules.Users.Application.csproj" Id="27530601-1743-4d73-80d3-bddbf28d8eb2" />
     <Project Path="src/Modules/Users/Eternelle.Modules.Users.Domain/Eternelle.Modules.Users.Domain.csproj" Id="823bb7bc-2382-4588-a404-73ae27f49b02" />
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Eternelle.Modules.Tenancy.Application.csproj b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Eternelle.Modules.Tenancy.Application.csproj
new file mode 100644
index 0000000..8b54669
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Eternelle.Modules.Tenancy.Application.csproj
@@ -0,0 +1,9 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Tenancy.Domain\Eternelle.Modules.Tenancy.Domain.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Tenancy.IntegrationEvents\Eternelle.Modules.Tenancy.IntegrationEvents.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Application\Eternelle.Common.Application.csproj" />
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/AssemblyInfo.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/AssemblyInfo.cs
new file mode 100644
index 0000000..e955cf3
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/AssemblyInfo.cs
@@ -0,0 +1,6 @@
+using System.Runtime.CompilerServices;
+
+// Allow the Infrastructure layer to access internal members — specifically
+// FromPersistence() factory methods on value objects, which bypass Create()
+// validation for values that were already validated on write.
+[assembly: InternalsVisibleTo("Eternelle.Modules.Tenancy.Infrastructure")]
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Eternelle.Modules.Tenancy.Domain.csproj b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Eternelle.Modules.Tenancy.Domain.csproj
new file mode 100644
index 0000000..06763b3
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Eternelle.Modules.Tenancy.Domain.csproj
@@ -0,0 +1,7 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Domain\Eternelle.Common.Domain.csproj" />
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj
new file mode 100644
index 0000000..6569fa1
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj
@@ -0,0 +1,16 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Tenancy.Application\Eternelle.Modules.Tenancy.Application.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Tenancy.Presentation\Eternelle.Modules.Tenancy.Presentation.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Infrastructure\Eternelle.Common.Infrastructure.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/Eternelle.Modules.Tenancy.IntegrationEvents.csproj b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/Eternelle.Modules.Tenancy.IntegrationEvents.csproj
new file mode 100644
index 0000000..b9e5a29
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/Eternelle.Modules.Tenancy.IntegrationEvents.csproj
@@ -0,0 +1,7 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Application\Eternelle.Common.Application.csproj" />
+  </ItemGroup>
+
+</Project>
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Eternelle.Modules.Tenancy.Presentation.csproj b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Eternelle.Modules.Tenancy.Presentation.csproj
new file mode 100644
index 0000000..1bdf335
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Eternelle.Modules.Tenancy.Presentation.csproj
@@ -0,0 +1,8 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Tenancy.Application\Eternelle.Modules.Tenancy.Application.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Presentation\Eternelle.Common.Presentation.csproj" />
+  </ItemGroup>
+
+</Project>

From 6d85457708c32a03dc64d76db646d97dfc6399ef Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 11:24:31 +0800
Subject: [PATCH 036/155] Eternelle-186 Remove circular Presentation reference
 from Infrastructure

---
 .../Eternelle.Modules.Tenancy.Infrastructure.csproj              | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj
index 6569fa1..9a8812b 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj
@@ -2,7 +2,6 @@
 
   <ItemGroup>
     <ProjectReference Include="..\Eternelle.Modules.Tenancy.Application\Eternelle.Modules.Tenancy.Application.csproj" />
-    <ProjectReference Include="..\Eternelle.Modules.Tenancy.Presentation\Eternelle.Modules.Tenancy.Presentation.csproj" />
     <ProjectReference Include="..\..\..\Common\Eternelle.Common.Infrastructure\Eternelle.Common.Infrastructure.csproj" />
   </ItemGroup>
 

From d9ccd18e1b5c2a9a12fa2a43eb2c0e377f5a5f95 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 12:25:32 +0800
Subject: [PATCH 037/155] Eternelle-186 Add strongly-typed ids

---
 .../Eternelle.Modules.Tenancy.Domain/Tenants/TenantId.cs  | 8 ++++++++
 .../Tenants/TenantSectionEntryId.cs                       | 7 +++++++
 2 files changed, 15 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantId.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionEntryId.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantId.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantId.cs
new file mode 100644
index 0000000..261ae3a
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantId.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public readonly record struct TenantId(Guid Value)
+{
+    public static TenantId New() => new(Guid.CreateVersion7());
+    public static TenantId Empty => new(Guid.Empty);
+    public override string ToString() => Value.ToString();
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionEntryId.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionEntryId.cs
new file mode 100644
index 0000000..b0894df
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionEntryId.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public readonly record struct TenantSectionEntryId(Guid Value)
+{
+    public static TenantSectionEntryId New() => new(Guid.CreateVersion7());
+    public override string ToString() => Value.ToString();
+}

From 59e1e2727b0b8fe07c708b113df1d499fd41d17d Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 13:49:47 +0800
Subject: [PATCH 038/155] Eternelle-186 Add tenant value objects

---
 .../Tenants/SectionOverrideErrors.cs          | 12 +++++
 .../Tenants/SectionOverrideSubtitle.cs        | 30 ++++++++++++
 .../Tenants/SectionOverrideTitle.cs           | 30 ++++++++++++
 .../Tenants/TenantSlug.cs                     | 46 +++++++++++++++++++
 .../Tenants/TenantSlugErrors.cs               | 20 ++++++++
 5 files changed, 138 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideErrors.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideSubtitle.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideTitle.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlug.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlugErrors.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideErrors.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideErrors.cs
new file mode 100644
index 0000000..84c553f
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideErrors.cs
@@ -0,0 +1,12 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public static class SectionOverrideErrors
+{
+    public static readonly Error TitleTooLong =
+        Error.Problem("Tenancy.Section.OverrideTitleTooLong", $"Override title must be at most {SectionOverrideTitle.MaxLength} characters.");
+
+    public static readonly Error SubtitleTooLong =
+        Error.Problem("Tenancy.Section.OverrideSubtitleTooLong", $"Override subtitle must be at most {SectionOverrideSubtitle.MaxLength} characters.");
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideSubtitle.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideSubtitle.cs
new file mode 100644
index 0000000..18b96ac
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideSubtitle.cs
@@ -0,0 +1,30 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public sealed record SectionOverrideSubtitle
+{
+    public const int MaxLength = 200;
+
+    private SectionOverrideSubtitle(string value) => Value = value;
+
+    public string Value { get; }
+
+    public static Result<SectionOverrideSubtitle> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<SectionOverrideSubtitle>(SectionOverrideErrors.SubtitleTooLong);
+        }
+
+        string trimmed = raw.Trim();
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<SectionOverrideSubtitle>(SectionOverrideErrors.SubtitleTooLong);
+        }
+
+        return Result.Success(new SectionOverrideSubtitle(trimmed));
+    }
+
+    internal static SectionOverrideSubtitle FromPersistence(string value) => new(value);
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideTitle.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideTitle.cs
new file mode 100644
index 0000000..ee036a0
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideTitle.cs
@@ -0,0 +1,30 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public sealed record SectionOverrideTitle
+{
+    public const int MaxLength = 150;
+
+    private SectionOverrideTitle(string value) => Value = value;
+
+    public string Value { get; }
+
+    public static Result<SectionOverrideTitle> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<SectionOverrideTitle>(SectionOverrideErrors.TitleTooLong);
+        }
+
+        string trimmed = raw.Trim();
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<SectionOverrideTitle>(SectionOverrideErrors.TitleTooLong);
+        }
+
+        return Result.Success(new SectionOverrideTitle(trimmed));
+    }
+
+    internal static SectionOverrideTitle FromPersistence(string value) => new(value);
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlug.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlug.cs
new file mode 100644
index 0000000..806fbfa
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlug.cs
@@ -0,0 +1,46 @@
+using System.Text.RegularExpressions;
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public sealed partial record TenantSlug
+{
+    public const int MaxLength = 63;
+    public const int MinLength = 3;
+
+    private TenantSlug(string value) => Value = value;
+
+    public string Value { get; }
+
+    public static Result<TenantSlug> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<TenantSlug>(TenantSlugErrors.Empty);
+        }
+
+        string trimmed = raw.Trim().ToLowerInvariant();
+
+        if (trimmed.Length < MinLength)
+        {
+            return Result.Failure<TenantSlug>(TenantSlugErrors.TooShort);
+        }
+
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<TenantSlug>(TenantSlugErrors.TooLong);
+        }
+
+        if (!SlugRegex().IsMatch(trimmed))
+        {
+            return Result.Failure<TenantSlug>(TenantSlugErrors.InvalidFormat);
+        }
+
+        return Result.Success(new TenantSlug(trimmed));
+    }
+
+    internal static TenantSlug FromPersistence(string value) => new(value);
+
+    [GeneratedRegex("^[a-z0-9]+(-[a-z0-9]+)*$")]
+    private static partial Regex SlugRegex();
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlugErrors.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlugErrors.cs
new file mode 100644
index 0000000..ec6be1c
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlugErrors.cs
@@ -0,0 +1,20 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public static class TenantSlugErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("Tenancy.Slug.Empty", "Slug is required.");
+
+    public static readonly Error TooShort =
+        Error.Problem("Tenancy.Slug.TooShort", "Slug must be at least 3 characters.");
+
+    public static readonly Error TooLong =
+        Error.Problem("Tenancy.Slug.TooLong", $"Slug must be at most {TenantSlug.MaxLength} characters.");
+
+    public static readonly Error InvalidFormat =
+        Error.Problem(
+            "Tenancy.Slug.InvalidFormat",
+            "Slug may contain only lowercase letters, digits, and single hyphens, and must not start or end with a hyphen.");
+}

From 1945ebca37fae294bbb30f3cf36583a073d3971b Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 13:54:00 +0800
Subject: [PATCH 039/155] Eternelle-186 Add section keys and template section
 seed

---
 .../Tenants/SectionKeys.cs                            | 11 +++++++++++
 .../Tenants/TemplateSectionSeed.cs                    |  7 +++++++
 2 files changed, 18 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionKeys.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TemplateSectionSeed.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionKeys.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionKeys.cs
new file mode 100644
index 0000000..5776e73
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionKeys.cs
@@ -0,0 +1,11 @@
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+/// <summary>
+/// Section keys mirror the Catalog SectionId enum *names* (the manifest event carries
+/// section ids as strings). GuestUploads is the limit-bearing section: the uploadLimit
+/// of its selected variant is the wedding's guest-photo cap.
+/// </summary>
+public static class SectionKeys
+{
+    public const string GuestUploads = "GuestUploads";
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TemplateSectionSeed.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TemplateSectionSeed.cs
new file mode 100644
index 0000000..2eb8cdd
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TemplateSectionSeed.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+/// <summary>
+/// Computed by the application layer from the CatalogTemplate projection and passed into
+/// the Tenant aggregate when provisioning or reassigning a template.
+/// </summary>
+public sealed record TemplateSectionSeed(string SectionKey, string? DefaultVariant, int DisplayOrder);

From 1fe00061be94816bc71f7d976f9a8f831c403116 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 15:18:58 +0800
Subject: [PATCH 040/155] Eternelle-186 Add tenant domain events

---
 .../Tenants/TenantProvisionedDomainEvent.cs       | 15 +++++++++++++++
 .../Tenants/TenantPublishedDomainEvent.cs         |  8 ++++++++
 .../Tenants/TenantSectionsChangedDomainEvent.cs   |  9 +++++++++
 .../Tenants/TenantTemplateChangedDomainEvent.cs   |  9 +++++++++
 .../Tenants/TenantUnpublishedDomainEvent.cs       |  8 ++++++++
 5 files changed, 49 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantProvisionedDomainEvent.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantPublishedDomainEvent.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionsChangedDomainEvent.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantTemplateChangedDomainEvent.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantUnpublishedDomainEvent.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantProvisionedDomainEvent.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantProvisionedDomainEvent.cs
new file mode 100644
index 0000000..0a98d14
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantProvisionedDomainEvent.cs
@@ -0,0 +1,15 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public sealed class TenantProvisionedDomainEvent(
+    TenantId tenantId,
+    Guid ownerUserId,
+    DateOnly weddingDate,
+    int? uploadLimit) : DomainEvent
+{
+    public TenantId TenantId { get; init; } = tenantId;
+    public Guid OwnerUserId { get; init; } = ownerUserId;
+    public DateOnly WeddingDate { get; init; } = weddingDate;
+    public int? UploadLimit { get; init; } = uploadLimit;
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantPublishedDomainEvent.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantPublishedDomainEvent.cs
new file mode 100644
index 0000000..215b572
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantPublishedDomainEvent.cs
@@ -0,0 +1,8 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public sealed class TenantPublishedDomainEvent(TenantId tenantId) : DomainEvent
+{
+    public TenantId TenantId { get; init; } = tenantId;
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionsChangedDomainEvent.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionsChangedDomainEvent.cs
new file mode 100644
index 0000000..9f43767
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionsChangedDomainEvent.cs
@@ -0,0 +1,9 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public sealed class TenantSectionsChangedDomainEvent(TenantId tenantId, int? uploadLimit) : DomainEvent
+{
+    public TenantId TenantId { get; init; } = tenantId;
+    public int? UploadLimit { get; init; } = uploadLimit;
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantTemplateChangedDomainEvent.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantTemplateChangedDomainEvent.cs
new file mode 100644
index 0000000..16588b3
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantTemplateChangedDomainEvent.cs
@@ -0,0 +1,9 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public sealed class TenantTemplateChangedDomainEvent(TenantId tenantId, int? uploadLimit) : DomainEvent
+{
+    public TenantId TenantId { get; init; } = tenantId;
+    public int? UploadLimit { get; init; } = uploadLimit;
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantUnpublishedDomainEvent.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantUnpublishedDomainEvent.cs
new file mode 100644
index 0000000..442fca3
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantUnpublishedDomainEvent.cs
@@ -0,0 +1,8 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public sealed class TenantUnpublishedDomainEvent(TenantId tenantId) : DomainEvent
+{
+    public TenantId TenantId { get; init; } = tenantId;
+}

From 00426b641063c34d15217fe5631dc88632e25afb Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 15:19:22 +0800
Subject: [PATCH 041/155] Eternelle-186 Add TenantSectionEntry owned entity

---
 .../Tenants/TenantSectionEntry.cs             | 48 +++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionEntry.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionEntry.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionEntry.cs
new file mode 100644
index 0000000..b8fc32e
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSectionEntry.cs
@@ -0,0 +1,48 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public sealed class TenantSectionEntry : Entity
+{
+    private TenantSectionEntry() { }
+
+    public TenantSectionEntryId Id { get; private set; }
+    public TenantId TenantId { get; private set; }
+    public string SectionKey { get; private set; } = null!;
+    public bool Enabled { get; private set; }
+    public int DisplayOrder { get; private set; }
+    public string? Variant { get; private set; }
+    public SectionOverrideTitle? OverrideTitle { get; private set; }
+    public SectionOverrideSubtitle? OverrideSubtitle { get; private set; }
+
+    internal static TenantSectionEntry Create(
+        TenantId tenantId,
+        string sectionKey,
+        string? variant,
+        int displayOrder)
+        => new()
+        {
+            Id = TenantSectionEntryId.New(),
+            TenantId = tenantId,
+            SectionKey = sectionKey,
+            Variant = variant,
+            Enabled = true,
+            DisplayOrder = displayOrder
+        };
+
+    internal void Configure(
+        bool enabled,
+        string? variant,
+        SectionOverrideTitle? overrideTitle,
+        SectionOverrideSubtitle? overrideSubtitle)
+    {
+        Enabled = enabled;
+        Variant = variant;
+        OverrideTitle = overrideTitle;
+        OverrideSubtitle = overrideSubtitle;
+    }
+
+    internal void SetVariant(string? variant) => Variant = variant;
+
+    internal void SetDisplayOrder(int displayOrder) => DisplayOrder = displayOrder;
+}

From efcc7d024949435257c632177ddc4d82f66599ce Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 15:19:41 +0800
Subject: [PATCH 042/155] Eternelle-186 Add Tenant aggregate, errors, and
 repository interface

---
 .../Tenants/ITenantRepository.cs              |   9 +
 .../Tenants/Tenant.cs                         | 155 ++++++++++++++++++
 .../Tenants/TenantErrors.cs                   |  18 ++
 3 files changed, 182 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/ITenantRepository.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/Tenant.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantErrors.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/ITenantRepository.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/ITenantRepository.cs
new file mode 100644
index 0000000..f36699b
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/ITenantRepository.cs
@@ -0,0 +1,9 @@
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public interface ITenantRepository
+{
+    Task<Tenant?> GetByIdAsync(TenantId id, CancellationToken cancellationToken = default);
+    Task<bool> SlugExistsAsync(string slug, CancellationToken cancellationToken = default);
+    void Insert(Tenant tenant);
+    void Update(Tenant tenant);
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/Tenant.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/Tenant.cs
new file mode 100644
index 0000000..52f543f
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/Tenant.cs
@@ -0,0 +1,155 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public sealed class Tenant : Entity
+{
+    private readonly List<TenantSectionEntry> _sections = [];
+
+    private Tenant() { }
+
+    public TenantId Id { get; private set; }
+    public Guid OwnerUserId { get; private set; }
+    public TenantSlug Slug { get; private set; } = null!;
+    public bool Published { get; private set; }
+    public Guid TemplateId { get; private set; }
+    public int ThemeIndex { get; private set; }
+    public DateTime CreatedAtUtc { get; private set; }
+    public DateTime UpdatedAtUtc { get; private set; }
+
+    public IReadOnlyCollection<TenantSectionEntry> Sections => _sections.AsReadOnly();
+
+    public static Tenant Provision(
+        Guid ownerUserId,
+        TenantSlug slug,
+        Guid templateId,
+        int themeIndex,
+        DateOnly weddingDate,   // not stored — forwarded into TenantProvisionedDomainEvent for Wedding creation
+        IReadOnlyList<TemplateSectionSeed> supportedSections,
+        int? effectiveUploadLimit,
+        DateTime utcNow)
+    {
+        var tenant = new Tenant
+        {
+            Id = TenantId.New(),
+            OwnerUserId = ownerUserId,
+            Slug = slug,
+            Published = false,
+            TemplateId = templateId,
+            ThemeIndex = themeIndex,
+            CreatedAtUtc = utcNow,
+            UpdatedAtUtc = utcNow
+        };
+
+        foreach (TemplateSectionSeed seed in supportedSections)
+        {
+            tenant._sections.Add(
+                TenantSectionEntry.Create(tenant.Id, seed.SectionKey, seed.DefaultVariant, seed.DisplayOrder));
+        }
+
+        tenant.Raise(new TenantProvisionedDomainEvent(tenant.Id, ownerUserId, weddingDate, effectiveUploadLimit));
+
+        return tenant;
+    }
+
+    public Result AssignTemplate(
+        Guid templateId,
+        int themeIndex,
+        IReadOnlyList<TemplateSectionSeed> supportedSections,
+        int? effectiveUploadLimit,
+        DateTime utcNow)
+    {
+        TemplateId = templateId;
+        ThemeIndex = themeIndex;
+
+        var supportedByKey = supportedSections.ToDictionary(s => s.SectionKey);
+
+        _sections.RemoveAll(e => !supportedByKey.ContainsKey(e.SectionKey));
+
+        foreach (TemplateSectionSeed seed in supportedSections)
+        {
+            TenantSectionEntry? existing = _sections.SingleOrDefault(e => e.SectionKey == seed.SectionKey);
+            if (existing is null)
+            {
+                _sections.Add(TenantSectionEntry.Create(Id, seed.SectionKey, seed.DefaultVariant, seed.DisplayOrder));
+            }
+            else
+            {
+                existing.SetDisplayOrder(seed.DisplayOrder);
+                if (seed.DefaultVariant is not null && existing.Variant is null)
+                {
+                    existing.SetVariant(seed.DefaultVariant);
+                }
+            }
+        }
+
+        UpdatedAtUtc = utcNow;
+        Raise(new TenantTemplateChangedDomainEvent(Id, effectiveUploadLimit));
+        return Result.Success();
+    }
+
+    public Result ConfigureSection(
+        string sectionKey,
+        bool enabled,
+        string? variant,
+        SectionOverrideTitle? overrideTitle,
+        SectionOverrideSubtitle? overrideSubtitle,
+        int? effectiveUploadLimit,
+        DateTime utcNow)
+    {
+        TenantSectionEntry? entry = _sections.SingleOrDefault(e => e.SectionKey == sectionKey);
+        if (entry is null)
+        {
+            return Result.Failure(TenantErrors.SectionNotFound(sectionKey));
+        }
+
+        entry.Configure(enabled, variant, overrideTitle, overrideSubtitle);
+        UpdatedAtUtc = utcNow;
+        Raise(new TenantSectionsChangedDomainEvent(Id, effectiveUploadLimit));
+        return Result.Success();
+    }
+
+    public Result ReorderSections(IReadOnlyList<string> orderedSectionKeys, int? effectiveUploadLimit, DateTime utcNow)
+    {
+        HashSet<string> provided = [.. orderedSectionKeys];
+        if (orderedSectionKeys.Count != provided.Count ||
+            provided.Count != _sections.Count ||
+            !provided.SetEquals(_sections.Select(s => s.SectionKey)))
+        {
+            return Result.Failure(TenantErrors.ReorderListMismatch);
+        }
+
+        for (int i = 0; i < orderedSectionKeys.Count; i++)
+        {
+            _sections.Single(s => s.SectionKey == orderedSectionKeys[i]).SetDisplayOrder(i);
+        }
+
+        UpdatedAtUtc = utcNow;
+        Raise(new TenantSectionsChangedDomainEvent(Id, effectiveUploadLimit));
+        return Result.Success();
+    }
+
+    public void Publish(DateTime utcNow)
+    {
+        if (Published)
+        {
+            return;
+        }
+
+        Published = true;
+        UpdatedAtUtc = utcNow;
+        Raise(new TenantPublishedDomainEvent(Id));
+    }
+
+    public void Unpublish(DateTime utcNow)
+    {
+        if (!Published)
+        {
+            return;
+        }
+
+        Published = false;
+        UpdatedAtUtc = utcNow;
+        Raise(new TenantUnpublishedDomainEvent(Id));
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantErrors.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantErrors.cs
new file mode 100644
index 0000000..60de603
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantErrors.cs
@@ -0,0 +1,18 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Tenants;
+
+public static class TenantErrors
+{
+    public static Error NotFound(TenantId id) =>
+        Error.NotFound("Tenancy.NotFound", $"Tenant '{id.Value}' was not found.");
+
+    public static readonly Error SlugAlreadyTaken =
+        Error.Conflict("Tenancy.SlugAlreadyTaken", "That slug is already in use.");
+
+    public static Error SectionNotFound(string sectionKey) =>
+        Error.NotFound("Tenancy.SectionNotFound", $"Section '{sectionKey}' is not part of this tenant.");
+
+    public static readonly Error ReorderListMismatch =
+        Error.Problem("Tenancy.ReorderListMismatch", "The provided section list does not match the tenant's sections.");
+}

From 8fefefc971b8035550a4cefde90c1aa68a7b1ea8 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 15:25:35 +0800
Subject: [PATCH 043/155] Eternelle-186 Add CatalogTemplate projection model
 and reader interface

---
 .../Catalog/CatalogTemplate.cs                | 81 +++++++++++++++++++
 .../Catalog/ICatalogTemplateProjection.cs     |  7 ++
 2 files changed, 88 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplate.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/ICatalogTemplateProjection.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplate.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplate.cs
new file mode 100644
index 0000000..4be1b57
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplate.cs
@@ -0,0 +1,81 @@
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+
+namespace Eternelle.Modules.Tenancy.Domain.Catalog;
+
+public sealed class CatalogTemplate
+{
+    private CatalogTemplate() { }
+
+    public Guid TemplateId { get; private set; }
+    public string Name { get; private set; } = null!;
+    public string Tier { get; private set; } = null!;
+    public IReadOnlyList<string> SectionKeys { get; private set; } = [];      // ordered = display order
+    public IReadOnlyList<CatalogTemplateVariant> Variants { get; private set; } = [];
+    public DateTime UpdatedAtUtc { get; private set; }
+
+    public static CatalogTemplate Create(
+        Guid templateId,
+        string name,
+        string tier,
+        IReadOnlyList<string> sectionKeys,
+        IReadOnlyList<CatalogTemplateVariant> variants,
+        DateTime utcNow)
+        => new()
+        {
+            TemplateId = templateId,
+            Name = name,
+            Tier = tier,
+            SectionKeys = sectionKeys,
+            Variants = variants,
+            UpdatedAtUtc = utcNow
+        };
+
+    public void Update(
+        string name,
+        string tier,
+        IReadOnlyList<string> sectionKeys,
+        IReadOnlyList<CatalogTemplateVariant> variants,
+        DateTime utcNow)
+    {
+        Name = name;
+        Tier = tier;
+        SectionKeys = sectionKeys;
+        Variants = variants;
+        UpdatedAtUtc = utcNow;
+    }
+
+    // ─── Read helpers used by command handlers ───────────────────────────────
+
+    public IReadOnlyList<TemplateSectionSeed> ToSeeds() =>
+        [.. SectionKeys.Select((key, index) => new TemplateSectionSeed(key, DefaultVariant(key), index))];
+
+    public string? DefaultVariant(string sectionKey) =>
+        Variants.FirstOrDefault(v => v.SectionKey == sectionKey && v.IsDefault)?.Variant;
+
+    public bool IsValidVariant(string sectionKey, string variant) =>
+        Variants.Any(v => v.SectionKey == sectionKey &&
+                          string.Equals(v.Variant, variant, StringComparison.OrdinalIgnoreCase));
+
+    public bool SupportsSection(string sectionKey) => SectionKeys.Contains(sectionKey);
+
+    /// <summary>uploadLimit of the given section+variant; null = unlimited or not found.</summary>
+    public int? UploadLimitFor(string sectionKey, string? variant)
+    {
+        if (variant is null)
+        {
+            return null;
+        }
+
+        return Variants
+            .FirstOrDefault(v => v.SectionKey == sectionKey &&
+                                 string.Equals(v.Variant, variant, StringComparison.OrdinalIgnoreCase))
+            ?.UploadLimit;
+    }
+}
+
+public sealed record CatalogTemplateVariant(
+    string SectionKey,
+    string Variant,
+    string PriceClass,
+    int? UploadLimit,
+    bool IsDefault);
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/ICatalogTemplateProjection.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/ICatalogTemplateProjection.cs
new file mode 100644
index 0000000..9ba59a9
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/ICatalogTemplateProjection.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Tenancy.Domain.Catalog;
+
+public interface ICatalogTemplateProjection
+{
+    Task<CatalogTemplate?> GetAsync(Guid templateId, CancellationToken cancellationToken = default);
+    Task UpsertAsync(CatalogTemplate template, CancellationToken cancellationToken = default);
+}

From b409e83389b1806cf5da9600a738527fc1de328e Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 15:30:08 +0800
Subject: [PATCH 044/155] Eternelle-186 Add outbound integration events and
 Application AssemblyReference

---
 .../AssemblyReference.cs                      |  8 +++++
 .../TenantProvisionedIntegrationEvent.cs      | 29 +++++++++++++++++++
 ...enantUploadLimitChangedIntegrationEvent.cs | 21 ++++++++++++++
 3 files changed, 58 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/AssemblyReference.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/TenantProvisionedIntegrationEvent.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/TenantUploadLimitChangedIntegrationEvent.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/AssemblyReference.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/AssemblyReference.cs
new file mode 100644
index 0000000..970f578
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/AssemblyReference.cs
@@ -0,0 +1,8 @@
+using System.Reflection;
+
+namespace Eternelle.Modules.Tenancy.Application;
+
+public static class AssemblyReference
+{
+    public static readonly Assembly Assembly = typeof(AssemblyReference).Assembly;
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/TenantProvisionedIntegrationEvent.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/TenantProvisionedIntegrationEvent.cs
new file mode 100644
index 0000000..70bef9a
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/TenantProvisionedIntegrationEvent.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Application.EventBus;
+
+namespace Eternelle.Modules.Tenancy.IntegrationEvents;
+
+public sealed class TenantProvisionedIntegrationEvent : IntegrationEvent
+{
+    public TenantProvisionedIntegrationEvent(
+        Guid id,
+        DateTime occurredOnUtc,
+        Guid tenantId,
+        Guid ownerUserId,
+        DateOnly weddingDate,
+        int? uploadLimit)
+        : base(id, occurredOnUtc)
+    {
+        TenantId = tenantId;
+        OwnerUserId = ownerUserId;
+        WeddingDate = weddingDate;
+        UploadLimit = uploadLimit;
+    }
+
+    public Guid TenantId { get; init; }
+
+    public Guid OwnerUserId { get; init; }
+
+    public DateOnly WeddingDate { get; init; }
+
+    public int? UploadLimit { get; init; }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/TenantUploadLimitChangedIntegrationEvent.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/TenantUploadLimitChangedIntegrationEvent.cs
new file mode 100644
index 0000000..2af545b
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.IntegrationEvents/TenantUploadLimitChangedIntegrationEvent.cs
@@ -0,0 +1,21 @@
+using Eternelle.Common.Application.EventBus;
+
+namespace Eternelle.Modules.Tenancy.IntegrationEvents;
+
+public sealed class TenantUploadLimitChangedIntegrationEvent : IntegrationEvent
+{
+    public TenantUploadLimitChangedIntegrationEvent(
+        Guid id,
+        DateTime occurredOnUtc,
+        Guid tenantId,
+        int? uploadLimit)
+        : base(id, occurredOnUtc)
+    {
+        TenantId = tenantId;
+        UploadLimit = uploadLimit;
+    }
+
+    public Guid TenantId { get; init; }
+
+    public int? UploadLimit { get; init; }
+}

From b281e4954fa1a091220b3b432b4c0478de2712cf Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 15:34:07 +0800
Subject: [PATCH 045/155] Eternelle-186 Publish integration events from
 domain-event handlers

---
 .../TenantProvisionedDomainEventHandler.cs    | 23 ++++++++++++++
 .../Tenants/TenantUploadLimitChangedRelay.cs  | 30 +++++++++++++++++++
 2 files changed, 53 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/TenantProvisionedDomainEventHandler.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/TenantUploadLimitChangedRelay.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/TenantProvisionedDomainEventHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/TenantProvisionedDomainEventHandler.cs
new file mode 100644
index 0000000..a9c7dac
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/TenantProvisionedDomainEventHandler.cs
@@ -0,0 +1,23 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+using Eternelle.Modules.Tenancy.IntegrationEvents;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants;
+
+internal sealed class TenantProvisionedDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<TenantProvisionedDomainEvent>
+{
+    public override async Task Handle(TenantProvisionedDomainEvent domainEvent, CancellationToken cancellationToken = default)
+    {
+        await eventBus.PublishAsync(
+            new TenantProvisionedIntegrationEvent(
+                domainEvent.Id,
+                domainEvent.OccurredOnUtc,
+                domainEvent.TenantId.Value,
+                domainEvent.OwnerUserId,
+                domainEvent.WeddingDate,
+                domainEvent.UploadLimit),
+            cancellationToken);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/TenantUploadLimitChangedRelay.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/TenantUploadLimitChangedRelay.cs
new file mode 100644
index 0000000..aad824a
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/TenantUploadLimitChangedRelay.cs
@@ -0,0 +1,30 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+using Eternelle.Modules.Tenancy.IntegrationEvents;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants;
+
+internal sealed class TenantTemplateChangedDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<TenantTemplateChangedDomainEvent>
+{
+    public override async Task Handle(TenantTemplateChangedDomainEvent domainEvent, CancellationToken cancellationToken = default)
+    {
+        await eventBus.PublishAsync(
+            new TenantUploadLimitChangedIntegrationEvent(
+                domainEvent.Id, domainEvent.OccurredOnUtc, domainEvent.TenantId.Value, domainEvent.UploadLimit),
+            cancellationToken);
+    }
+}
+
+internal sealed class TenantSectionsChangedDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<TenantSectionsChangedDomainEvent>
+{
+    public override async Task Handle(TenantSectionsChangedDomainEvent domainEvent, CancellationToken cancellationToken = default)
+    {
+        await eventBus.PublishAsync(
+            new TenantUploadLimitChangedIntegrationEvent(
+                domainEvent.Id, domainEvent.OccurredOnUtc, domainEvent.TenantId.Value, domainEvent.UploadLimit),
+            cancellationToken);
+    }
+}

From 03b217836be76dbf6a3e80dcee21192f88e5d8e4 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 15:43:05 +0800
Subject: [PATCH 046/155] Eternelle-186 Add ProvisionTenant command

---
 .../Abstractions/Data/IUnitOfWork.cs          |  6 ++
 .../ProvisionTenant/ProvisionTenantCommand.cs | 10 ++++
 .../ProvisionTenantCommandHandler.cs          | 55 +++++++++++++++++++
 .../ProvisionTenantCommandValidator.cs        | 15 +++++
 .../Catalog/CatalogTemplateErrors.cs          | 12 ++++
 5 files changed, 98 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Abstractions/Data/IUnitOfWork.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommand.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommandHandler.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommandValidator.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplateErrors.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Abstractions/Data/IUnitOfWork.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Abstractions/Data/IUnitOfWork.cs
new file mode 100644
index 0000000..d347148
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Abstractions/Data/IUnitOfWork.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Tenancy.Application.Abstractions.Data;
+
+public interface IUnitOfWork
+{
+    Task<int> SaveChangesAsync(CancellationToken cancellationToken = default);
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommand.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommand.cs
new file mode 100644
index 0000000..b4755ea
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommand.cs
@@ -0,0 +1,10 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.ProvisionTenant;
+
+public sealed record ProvisionTenantCommand(
+    Guid OwnerUserId,
+    string Slug,
+    Guid TemplateId,
+    int ThemeIndex,
+    DateOnly WeddingDate) : ICommand<Guid>;
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommandHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommandHandler.cs
new file mode 100644
index 0000000..67ecd19
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommandHandler.cs
@@ -0,0 +1,55 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Tenancy.Application.Abstractions.Data;
+using Eternelle.Modules.Tenancy.Domain.Catalog;
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.ProvisionTenant;
+
+internal sealed class ProvisionTenantCommandHandler(
+    ITenantRepository tenantRepository,
+    ICatalogTemplateProjection catalogTemplates,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<ProvisionTenantCommand, Guid>
+{
+    public async Task<Result<Guid>> Handle(ProvisionTenantCommand command, CancellationToken cancellationToken)
+    {
+        Result<TenantSlug> slugResult = TenantSlug.Create(command.Slug);
+        if (slugResult.IsFailure)
+        {
+            return Result.Failure<Guid>(slugResult.Error);
+        }
+
+        if (await tenantRepository.SlugExistsAsync(slugResult.Value.Value, cancellationToken))
+        {
+            return Result.Failure<Guid>(TenantErrors.SlugAlreadyTaken);
+        }
+
+        CatalogTemplate? template = await catalogTemplates.GetAsync(command.TemplateId, cancellationToken);
+        if (template is null)
+        {
+            return Result.Failure<Guid>(CatalogTemplateErrors.NotFound(command.TemplateId));
+        }
+
+        IReadOnlyList<TemplateSectionSeed> seeds = template.ToSeeds();
+        int? uploadLimit = template.UploadLimitFor(
+            SectionKeys.GuestUploads,
+            template.DefaultVariant(SectionKeys.GuestUploads));
+
+        var tenant = Tenant.Provision(
+            command.OwnerUserId,
+            slugResult.Value,
+            command.TemplateId,
+            command.ThemeIndex,
+            command.WeddingDate,
+            seeds,
+            uploadLimit,
+            dateTimeProvider.UtcNow);
+
+        tenantRepository.Insert(tenant);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return tenant.Id.Value;
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommandValidator.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommandValidator.cs
new file mode 100644
index 0000000..2228ca8
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ProvisionTenant/ProvisionTenantCommandValidator.cs
@@ -0,0 +1,15 @@
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+using FluentValidation;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.ProvisionTenant;
+
+internal sealed class ProvisionTenantCommandValidator : AbstractValidator<ProvisionTenantCommand>
+{
+    public ProvisionTenantCommandValidator()
+    {
+        RuleFor(c => c.OwnerUserId).NotEmpty();
+        RuleFor(c => c.Slug).NotEmpty().MaximumLength(TenantSlug.MaxLength);
+        RuleFor(c => c.TemplateId).NotEmpty();
+        RuleFor(c => c.ThemeIndex).GreaterThanOrEqualTo(0);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplateErrors.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplateErrors.cs
new file mode 100644
index 0000000..8ff335a
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplateErrors.cs
@@ -0,0 +1,12 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Domain.Catalog;
+
+public static class CatalogTemplateErrors
+{
+    public static Error NotFound(Guid templateId) =>
+        Error.NotFound("Tenancy.Template.NotFound", $"Template '{templateId}' is not available.");
+
+    public static Error VariantNotValid(string sectionKey, string variant) =>
+        Error.Problem("Tenancy.Template.VariantNotValid", $"Variant '{variant}' is not valid for section '{sectionKey}'.");
+}

From abf6e47712ecf01f716f9ce9e27ab2ec60bb3a54 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 15:43:20 +0800
Subject: [PATCH 047/155] Eternelle-186 Add AssignTemplate, ConfigureSection,
 ReorderSections, Publish, Unpublish commands

---
 .../AssignTemplate/AssignTemplateCommand.cs   |  9 +++
 .../AssignTemplateCommandHandler.cs           | 54 +++++++++++++
 .../AssignTemplateCommandValidator.cs         | 14 ++++
 .../ConfigureSectionCommand.cs                | 12 +++
 .../ConfigureSectionCommandHandler.cs         | 76 +++++++++++++++++++
 .../ConfigureSectionCommandValidator.cs       | 16 ++++
 .../ReorderSections/ReorderSectionsCommand.cs |  5 ++
 .../ReorderSectionsCommandHandler.cs          | 33 ++++++++
 .../ReorderSectionsCommandValidator.cs        | 13 ++++
 .../SetPublished/PublishTenantCommand.cs      |  5 ++
 .../SetPublishedCommandHandlers.cs            | 49 ++++++++++++
 .../SetPublished/UnpublishTenantCommand.cs    |  5 ++
 12 files changed, 291 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommand.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandHandler.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandValidator.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommand.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandHandler.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandValidator.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommand.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandHandler.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandValidator.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/PublishTenantCommand.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/SetPublishedCommandHandlers.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/UnpublishTenantCommand.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommand.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommand.cs
new file mode 100644
index 0000000..2b96311
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommand.cs
@@ -0,0 +1,9 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.AssignTemplate;
+
+public sealed record AssignTemplateCommand(
+    Guid TenantId,
+    Guid CallerUserId,
+    Guid TemplateId,
+    int ThemeIndex) : ICommand;
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandHandler.cs
new file mode 100644
index 0000000..66c6ad5
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandHandler.cs
@@ -0,0 +1,54 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Tenancy.Application.Abstractions.Data;
+using Eternelle.Modules.Tenancy.Domain.Catalog;
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.AssignTemplate;
+
+internal sealed class AssignTemplateCommandHandler(
+    ITenantRepository tenantRepository,
+    ICatalogTemplateProjection catalogTemplates,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<AssignTemplateCommand>
+{
+    public async Task<Result> Handle(AssignTemplateCommand command, CancellationToken cancellationToken)
+    {
+        var tenantId = new TenantId(command.TenantId);
+        Tenant? tenant = await tenantRepository.GetByIdAsync(tenantId, cancellationToken);
+        if (tenant is null || tenant.OwnerUserId != command.CallerUserId)
+        {
+            return Result.Failure(TenantErrors.NotFound(tenantId));
+        }
+
+        CatalogTemplate? template = await catalogTemplates.GetAsync(command.TemplateId, cancellationToken);
+        if (template is null)
+        {
+            return Result.Failure(CatalogTemplateErrors.NotFound(command.TemplateId));
+        }
+
+        var existingVariants = tenant.Sections.ToDictionary(s => s.SectionKey, s => s.Variant);
+        IReadOnlyList<TemplateSectionSeed> seeds = [.. template.SectionKeys.Select((key, index) =>
+        {
+            string? defaultVariant = template.DefaultVariant(key);
+            existingVariants.TryGetValue(key, out string? current);
+            string? preserved = current is not null && template.IsValidVariant(key, current) ? current : defaultVariant;
+            return new TemplateSectionSeed(key, preserved, index);
+        })];
+
+        int? uploadLimit = template.UploadLimitFor(
+            SectionKeys.GuestUploads,
+            template.DefaultVariant(SectionKeys.GuestUploads));
+
+        Result result = tenant.AssignTemplate(command.TemplateId, command.ThemeIndex, seeds, uploadLimit, dateTimeProvider.UtcNow);
+        if (result.IsFailure)
+        {
+            return result;
+        }
+
+        tenantRepository.Update(tenant);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandValidator.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandValidator.cs
new file mode 100644
index 0000000..6058d65
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandValidator.cs
@@ -0,0 +1,14 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.AssignTemplate;
+
+internal sealed class AssignTemplateCommandValidator : AbstractValidator<AssignTemplateCommand>
+{
+    public AssignTemplateCommandValidator()
+    {
+        RuleFor(c => c.TenantId).NotEmpty();
+        RuleFor(c => c.CallerUserId).NotEmpty();
+        RuleFor(c => c.TemplateId).NotEmpty();
+        RuleFor(c => c.ThemeIndex).GreaterThanOrEqualTo(0);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommand.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommand.cs
new file mode 100644
index 0000000..6ad8514
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommand.cs
@@ -0,0 +1,12 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.ConfigureSection;
+
+public sealed record ConfigureSectionCommand(
+    Guid TenantId,
+    Guid CallerUserId,
+    string SectionKey,
+    bool Enabled,
+    string? Variant,
+    string? OverrideTitle,
+    string? OverrideSubtitle) : ICommand;
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandHandler.cs
new file mode 100644
index 0000000..b7630e9
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandHandler.cs
@@ -0,0 +1,76 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Tenancy.Application.Abstractions.Data;
+using Eternelle.Modules.Tenancy.Domain.Catalog;
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.ConfigureSection;
+
+internal sealed class ConfigureSectionCommandHandler(
+    ITenantRepository tenantRepository,
+    ICatalogTemplateProjection catalogTemplates,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<ConfigureSectionCommand>
+{
+    public async Task<Result> Handle(ConfigureSectionCommand command, CancellationToken cancellationToken)
+    {
+        var tenantId = new TenantId(command.TenantId);
+        Tenant? tenant = await tenantRepository.GetByIdAsync(tenantId, cancellationToken);
+        if (tenant is null || tenant.OwnerUserId != command.CallerUserId)
+        {
+            return Result.Failure(TenantErrors.NotFound(tenantId));
+        }
+
+        CatalogTemplate? template = await catalogTemplates.GetAsync(tenant.TemplateId, cancellationToken);
+        if (template is null)
+        {
+            return Result.Failure(CatalogTemplateErrors.NotFound(tenant.TemplateId));
+        }
+
+        if (command.Variant is not null && !template.IsValidVariant(command.SectionKey, command.Variant))
+        {
+            return Result.Failure(CatalogTemplateErrors.VariantNotValid(command.SectionKey, command.Variant));
+        }
+
+        SectionOverrideTitle? title = null;
+        if (command.OverrideTitle is not null)
+        {
+            Result<SectionOverrideTitle> r = SectionOverrideTitle.Create(command.OverrideTitle);
+            if (r.IsFailure)
+            {
+                return Result.Failure(r.Error);
+            }
+
+            title = r.Value;
+        }
+
+        SectionOverrideSubtitle? subtitle = null;
+        if (command.OverrideSubtitle is not null)
+        {
+            Result<SectionOverrideSubtitle> r = SectionOverrideSubtitle.Create(command.OverrideSubtitle);
+            if (r.IsFailure)
+            {
+                return Result.Failure(r.Error);
+            }
+
+            subtitle = r.Value;
+        }
+
+        string? guestUploadsVariant = command.SectionKey == SectionKeys.GuestUploads
+            ? command.Variant
+            : tenant.Sections.SingleOrDefault(s => s.SectionKey == SectionKeys.GuestUploads)?.Variant;
+        int? uploadLimit = template.UploadLimitFor(SectionKeys.GuestUploads, guestUploadsVariant);
+
+        Result result = tenant.ConfigureSection(
+            command.SectionKey, command.Enabled, command.Variant, title, subtitle, uploadLimit, dateTimeProvider.UtcNow);
+        if (result.IsFailure)
+        {
+            return result;
+        }
+
+        tenantRepository.Update(tenant);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandValidator.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandValidator.cs
new file mode 100644
index 0000000..bc864fc
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandValidator.cs
@@ -0,0 +1,16 @@
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+using FluentValidation;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.ConfigureSection;
+
+internal sealed class ConfigureSectionCommandValidator : AbstractValidator<ConfigureSectionCommand>
+{
+    public ConfigureSectionCommandValidator()
+    {
+        RuleFor(c => c.TenantId).NotEmpty();
+        RuleFor(c => c.CallerUserId).NotEmpty();
+        RuleFor(c => c.SectionKey).NotEmpty();
+        RuleFor(c => c.OverrideTitle).MaximumLength(SectionOverrideTitle.MaxLength).When(c => c.OverrideTitle is not null);
+        RuleFor(c => c.OverrideSubtitle).MaximumLength(SectionOverrideSubtitle.MaxLength).When(c => c.OverrideSubtitle is not null);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommand.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommand.cs
new file mode 100644
index 0000000..d78072b
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.ReorderSections;
+
+public sealed record ReorderSectionsCommand(Guid TenantId, Guid CallerUserId, IReadOnlyList<string> OrderedSectionKeys) : ICommand;
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandHandler.cs
new file mode 100644
index 0000000..f2a3966
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandHandler.cs
@@ -0,0 +1,33 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Tenancy.Application.Abstractions.Data;
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.ReorderSections;
+
+internal sealed class ReorderSectionsCommandHandler(
+    ITenantRepository tenantRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<ReorderSectionsCommand>
+{
+    public async Task<Result> Handle(ReorderSectionsCommand command, CancellationToken cancellationToken)
+    {
+        var tenantId = new TenantId(command.TenantId);
+        Tenant? tenant = await tenantRepository.GetByIdAsync(tenantId, cancellationToken);
+        if (tenant is null || tenant.OwnerUserId != command.CallerUserId)
+        {
+            return Result.Failure(TenantErrors.NotFound(tenantId));
+        }
+
+        Result result = tenant.ReorderSections(command.OrderedSectionKeys, null, dateTimeProvider.UtcNow);
+        if (result.IsFailure)
+        {
+            return result;
+        }
+
+        tenantRepository.Update(tenant);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandValidator.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandValidator.cs
new file mode 100644
index 0000000..008bd77
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandValidator.cs
@@ -0,0 +1,13 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.ReorderSections;
+
+internal sealed class ReorderSectionsCommandValidator : AbstractValidator<ReorderSectionsCommand>
+{
+    public ReorderSectionsCommandValidator()
+    {
+        RuleFor(c => c.TenantId).NotEmpty();
+        RuleFor(c => c.CallerUserId).NotEmpty();
+        RuleFor(c => c.OrderedSectionKeys).NotEmpty();
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/PublishTenantCommand.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/PublishTenantCommand.cs
new file mode 100644
index 0000000..4378e36
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/PublishTenantCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.SetPublished;
+
+public sealed record PublishTenantCommand(Guid TenantId, Guid CallerUserId) : ICommand;
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/SetPublishedCommandHandlers.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/SetPublishedCommandHandlers.cs
new file mode 100644
index 0000000..537a3e5
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/SetPublishedCommandHandlers.cs
@@ -0,0 +1,49 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Tenancy.Application.Abstractions.Data;
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.SetPublished;
+
+internal sealed class PublishTenantCommandHandler(
+    ITenantRepository tenantRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<PublishTenantCommand>
+{
+    public async Task<Result> Handle(PublishTenantCommand command, CancellationToken cancellationToken)
+    {
+        var tenantId = new TenantId(command.TenantId);
+        Tenant? tenant = await tenantRepository.GetByIdAsync(tenantId, cancellationToken);
+        if (tenant is null || tenant.OwnerUserId != command.CallerUserId)
+        {
+            return Result.Failure(TenantErrors.NotFound(tenantId));
+        }
+
+        tenant.Publish(dateTimeProvider.UtcNow);
+        tenantRepository.Update(tenant);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+        return Result.Success();
+    }
+}
+
+internal sealed class UnpublishTenantCommandHandler(
+    ITenantRepository tenantRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<UnpublishTenantCommand>
+{
+    public async Task<Result> Handle(UnpublishTenantCommand command, CancellationToken cancellationToken)
+    {
+        var tenantId = new TenantId(command.TenantId);
+        Tenant? tenant = await tenantRepository.GetByIdAsync(tenantId, cancellationToken);
+        if (tenant is null || tenant.OwnerUserId != command.CallerUserId)
+        {
+            return Result.Failure(TenantErrors.NotFound(tenantId));
+        }
+
+        tenant.Unpublish(dateTimeProvider.UtcNow);
+        tenantRepository.Update(tenant);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/UnpublishTenantCommand.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/UnpublishTenantCommand.cs
new file mode 100644
index 0000000..6adf4f5
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/SetPublished/UnpublishTenantCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.SetPublished;
+
+public sealed record UnpublishTenantCommand(Guid TenantId, Guid CallerUserId) : ICommand;

From 47b9123d1a42f373132aa3fb0a065428e07e28a6 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 16:37:32 +0800
Subject: [PATCH 048/155] Eternelle-186 Add tenant queries

---
 .../Tenants/GetTenant/GetTenantQuery.cs       |  5 +++
 .../GetTenant/GetTenantQueryHandler.cs        | 37 +++++++++++++++++++
 .../Tenants/GetTenant/TenantResponse.cs       |  9 +++++
 .../GetTenantSectionsQuery.cs                 |  5 +++
 .../GetTenantSectionsQueryHandler.cs          | 37 +++++++++++++++++++
 .../GetTenantSections/SectionEntryResponse.cs | 10 +++++
 6 files changed, 103 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQuery.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQueryHandler.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/TenantResponse.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQuery.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQueryHandler.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/SectionEntryResponse.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQuery.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQuery.cs
new file mode 100644
index 0000000..f074c7b
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQuery.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.GetTenant;
+
+public sealed record GetTenantQuery(Guid TenantId) : IQuery<TenantResponse>;
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQueryHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQueryHandler.cs
new file mode 100644
index 0000000..077dae2
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQueryHandler.cs
@@ -0,0 +1,37 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.GetTenant;
+
+internal sealed class GetTenantQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetTenantQuery, TenantResponse>
+{
+    public async Task<Result<TenantResponse>> Handle(GetTenantQuery query, CancellationToken cancellationToken)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        string sql =
+            $"""
+             SELECT
+                id            AS {nameof(TenantResponse.Id)},
+                owner_user_id AS {nameof(TenantResponse.OwnerUserId)},
+                slug          AS {nameof(TenantResponse.Slug)},
+                published     AS {nameof(TenantResponse.Published)},
+                template_id   AS {nameof(TenantResponse.TemplateId)},
+                theme_index   AS {nameof(TenantResponse.ThemeIndex)}
+             FROM tenancy.tenants
+             WHERE id = @TenantId
+             """;
+
+        TenantResponse? response = await connection.QuerySingleOrDefaultAsync<TenantResponse>(
+            new CommandDefinition(sql, new { query.TenantId }, cancellationToken: cancellationToken));
+
+        return response is null
+            ? Result.Failure<TenantResponse>(TenantErrors.NotFound(new TenantId(query.TenantId)))
+            : Result.Success(response);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/TenantResponse.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/TenantResponse.cs
new file mode 100644
index 0000000..748e4d0
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/TenantResponse.cs
@@ -0,0 +1,9 @@
+namespace Eternelle.Modules.Tenancy.Application.Tenants.GetTenant;
+
+public sealed record TenantResponse(
+    Guid Id,
+    Guid OwnerUserId,
+    string Slug,
+    bool Published,
+    Guid TemplateId,
+    int ThemeIndex);
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQuery.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQuery.cs
new file mode 100644
index 0000000..9b4b68d
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQuery.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.GetTenantSections;
+
+public sealed record GetTenantSectionsQuery(Guid TenantId) : IQuery<IReadOnlyList<SectionEntryResponse>>;
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQueryHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQueryHandler.cs
new file mode 100644
index 0000000..b28d1f0
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQueryHandler.cs
@@ -0,0 +1,37 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Tenancy.Application.Tenants.GetTenantSections;
+
+internal sealed class GetTenantSectionsQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetTenantSectionsQuery, IReadOnlyList<SectionEntryResponse>>
+{
+    public async Task<Result<IReadOnlyList<SectionEntryResponse>>> Handle(
+        GetTenantSectionsQuery query, CancellationToken cancellationToken)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        string sql =
+            $"""
+             SELECT
+                id                AS {nameof(SectionEntryResponse.Id)},
+                section_key       AS {nameof(SectionEntryResponse.SectionKey)},
+                enabled           AS {nameof(SectionEntryResponse.Enabled)},
+                display_order     AS {nameof(SectionEntryResponse.DisplayOrder)},
+                variant           AS {nameof(SectionEntryResponse.Variant)},
+                override_title    AS {nameof(SectionEntryResponse.OverrideTitle)},
+                override_subtitle AS {nameof(SectionEntryResponse.OverrideSubtitle)}
+             FROM tenancy.tenant_section_entries
+             WHERE tenant_id = @TenantId
+             ORDER BY display_order
+             """;
+
+        IEnumerable<SectionEntryResponse> rows = await connection.QueryAsync<SectionEntryResponse>(
+            new CommandDefinition(sql, new { query.TenantId }, cancellationToken: cancellationToken));
+
+        return Result.Success<IReadOnlyList<SectionEntryResponse>>(rows.AsList());
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/SectionEntryResponse.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/SectionEntryResponse.cs
new file mode 100644
index 0000000..c383334
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/SectionEntryResponse.cs
@@ -0,0 +1,10 @@
+namespace Eternelle.Modules.Tenancy.Application.Tenants.GetTenantSections;
+
+public sealed record SectionEntryResponse(
+    Guid Id,
+    string SectionKey,
+    bool Enabled,
+    int DisplayOrder,
+    string? Variant,
+    string? OverrideTitle,
+    string? OverrideSubtitle);

From 16f5250b3e4c0464792e4daad86b0755aff95359 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 17:10:15 +0800
Subject: [PATCH 049/155] Eternelle-186 Add DbContext, Schemas, and ID
 converters

---
 .../Database/Converters/TenantIdConverter.cs  |  8 ++++
 .../TenantSectionEntryIdConverter.cs          |  8 ++++
 .../Database/Schemas.cs                       |  6 +++
 .../Database/TenancyDbContext.cs              | 37 +++++++++++++++++++
 .../Database/TenancyDbContextFactory.cs       | 22 +++++++++++
 ...elle.Modules.Tenancy.Infrastructure.csproj |  2 +
 .../AssemblyReference.cs                      |  8 ++++
 7 files changed, 91 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Converters/TenantIdConverter.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Converters/TenantSectionEntryIdConverter.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Schemas.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/TenancyDbContext.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/TenancyDbContextFactory.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/AssemblyReference.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Converters/TenantIdConverter.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Converters/TenantIdConverter.cs
new file mode 100644
index 0000000..ea1d10b
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Converters/TenantIdConverter.cs
@@ -0,0 +1,8 @@
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Database.Converters;
+
+internal sealed class TenantIdConverter() : ValueConverter<TenantId, Guid>(
+    id => id.Value,
+    value => new TenantId(value));
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Converters/TenantSectionEntryIdConverter.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Converters/TenantSectionEntryIdConverter.cs
new file mode 100644
index 0000000..577e488
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Converters/TenantSectionEntryIdConverter.cs
@@ -0,0 +1,8 @@
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Database.Converters;
+
+internal sealed class TenantSectionEntryIdConverter() : ValueConverter<TenantSectionEntryId, Guid>(
+    id => id.Value,
+    value => new TenantSectionEntryId(value));
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Schemas.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Schemas.cs
new file mode 100644
index 0000000..a7a28ea
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/Schemas.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Tenancy.Infrastructure.Database;
+
+internal static class Schemas
+{
+    public const string Tenancy = "tenancy";
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/TenancyDbContext.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/TenancyDbContext.cs
new file mode 100644
index 0000000..1110254
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/TenancyDbContext.cs
@@ -0,0 +1,37 @@
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Modules.Tenancy.Application.Abstractions.Data;
+using Eternelle.Modules.Tenancy.Domain.Catalog;
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+using Eternelle.Modules.Tenancy.Infrastructure.Catalog;
+using Eternelle.Modules.Tenancy.Infrastructure.Database.Converters;
+using Eternelle.Modules.Tenancy.Infrastructure.Tenants;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Database;
+
+public sealed class TenancyDbContext(DbContextOptions<TenancyDbContext> options)
+    : DbContext(options), IUnitOfWork
+{
+    internal DbSet<Tenant> Tenants { get; set; }
+    internal DbSet<CatalogTemplate> CatalogTemplates { get; set; }
+
+    protected override void ConfigureConventions(ModelConfigurationBuilder configurationBuilder)
+    {
+        configurationBuilder.Properties<TenantId>().HaveConversion<TenantIdConverter>();
+        configurationBuilder.Properties<TenantSectionEntryId>().HaveConversion<TenantSectionEntryIdConverter>();
+    }
+
+    protected override void OnModelCreating(ModelBuilder modelBuilder)
+    {
+        modelBuilder.HasDefaultSchema(Schemas.Tenancy);
+
+        modelBuilder.ApplyConfiguration(new OutboxMessageConfiguration());
+        modelBuilder.ApplyConfiguration(new OutboxMessageConsumerConfiguration());
+        modelBuilder.ApplyConfiguration(new InboxMessageConfiguration());
+        modelBuilder.ApplyConfiguration(new InboxMessageConsumerConfiguration());
+
+        modelBuilder.ApplyConfiguration(new TenantConfiguration());
+        modelBuilder.ApplyConfiguration(new CatalogTemplateConfiguration());
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/TenancyDbContextFactory.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/TenancyDbContextFactory.cs
new file mode 100644
index 0000000..251d918
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Database/TenancyDbContextFactory.cs
@@ -0,0 +1,22 @@
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Design;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Database;
+
+internal sealed class TenancyDbContextFactory : IDesignTimeDbContextFactory<TenancyDbContext>
+{
+    public TenancyDbContext CreateDbContext(string[] args)
+    {
+#pragma warning disable S2068
+        DbContextOptionsBuilder<TenancyDbContext> optionsBuilder = new DbContextOptionsBuilder<TenancyDbContext>()
+            .UseNpgsql(
+                "Host=localhost;Port=5432;Database=eternelle;Username=postgres;Password=postgres",
+                npgsql => npgsql.MigrationsHistoryTable(
+                    HistoryRepository.DefaultTableName, Schemas.Tenancy))
+            .UseSnakeCaseNamingConvention();
+#pragma warning restore S2068
+
+        return new TenancyDbContext(optionsBuilder.Options);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj
index 9a8812b..a3a5681 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Eternelle.Modules.Tenancy.Infrastructure.csproj
@@ -2,7 +2,9 @@
 
   <ItemGroup>
     <ProjectReference Include="..\Eternelle.Modules.Tenancy.Application\Eternelle.Modules.Tenancy.Application.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Tenancy.Presentation\Eternelle.Modules.Tenancy.Presentation.csproj" />
     <ProjectReference Include="..\..\..\Common\Eternelle.Common.Infrastructure\Eternelle.Common.Infrastructure.csproj" />
+    <ProjectReference Include="..\..\Catalog\Eternelle.Modules.Catalog.IntegrationEvents\Eternelle.Modules.Catalog.IntegrationEvents.csproj" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/AssemblyReference.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/AssemblyReference.cs
new file mode 100644
index 0000000..e7a8a9d
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/AssemblyReference.cs
@@ -0,0 +1,8 @@
+using System.Reflection;
+
+namespace Eternelle.Modules.Tenancy.Presentation;
+
+public static class AssemblyReference
+{
+    public static readonly Assembly Assembly = typeof(AssemblyReference).Assembly;
+}

From 9446c2a69379d360a6c3ecbac264ca1173d33132 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 17:10:37 +0800
Subject: [PATCH 050/155] Eternelle-186 Add EF configs and repositories

---
 .../Catalog/CatalogTemplateConfiguration.cs   | 44 ++++++++++++++
 .../Catalog/CatalogTemplateProjection.cs      | 28 +++++++++
 .../Tenants/TenantConfiguration.cs            | 59 +++++++++++++++++++
 .../Tenants/TenantRepository.cs               | 20 +++++++
 4 files changed, 151 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Catalog/CatalogTemplateConfiguration.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Catalog/CatalogTemplateProjection.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Tenants/TenantConfiguration.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Tenants/TenantRepository.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Catalog/CatalogTemplateConfiguration.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Catalog/CatalogTemplateConfiguration.cs
new file mode 100644
index 0000000..07ed483
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Catalog/CatalogTemplateConfiguration.cs
@@ -0,0 +1,44 @@
+using System.Text.Json;
+using Eternelle.Modules.Tenancy.Domain.Catalog;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.ChangeTracking;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Catalog;
+
+internal sealed class CatalogTemplateConfiguration : IEntityTypeConfiguration<CatalogTemplate>
+{
+    public void Configure(EntityTypeBuilder<CatalogTemplate> builder)
+    {
+        builder.ToTable("catalog_templates");
+        builder.HasKey(t => t.TemplateId);
+
+        builder.Property(t => t.Name).IsRequired().HasMaxLength(150);
+        builder.Property(t => t.Tier).IsRequired().HasMaxLength(50);
+        builder.Property(t => t.UpdatedAtUtc).HasColumnName("updated_at").IsRequired();
+
+        var sectionKeysComparer = new ValueComparer<IReadOnlyList<string>>(
+            (a, b) => a!.SequenceEqual(b!),
+            v => v.Aggregate(0, (h, i) => HashCode.Combine(h, i.GetHashCode())),
+            v => v.ToList());
+
+        builder.Property(t => t.SectionKeys)
+            .HasColumnType("jsonb")
+            .HasConversion(
+                v => JsonSerializer.Serialize(v, (JsonSerializerOptions?)null),
+                v => JsonSerializer.Deserialize<List<string>>(v, (JsonSerializerOptions?)null) ?? new List<string>())
+            .Metadata.SetValueComparer(sectionKeysComparer);
+
+        var variantsComparer = new ValueComparer<IReadOnlyList<CatalogTemplateVariant>>(
+            (a, b) => a!.SequenceEqual(b!),
+            v => v.Aggregate(0, (h, i) => HashCode.Combine(h, i.GetHashCode())),
+            v => v.ToList());
+
+        builder.Property(t => t.Variants)
+            .HasColumnType("jsonb")
+            .HasConversion(
+                v => JsonSerializer.Serialize(v, (JsonSerializerOptions?)null),
+                v => JsonSerializer.Deserialize<List<CatalogTemplateVariant>>(v, (JsonSerializerOptions?)null) ?? new List<CatalogTemplateVariant>())
+            .Metadata.SetValueComparer(variantsComparer);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Catalog/CatalogTemplateProjection.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Catalog/CatalogTemplateProjection.cs
new file mode 100644
index 0000000..3e966f6
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Catalog/CatalogTemplateProjection.cs
@@ -0,0 +1,28 @@
+using Eternelle.Modules.Tenancy.Domain.Catalog;
+using Eternelle.Modules.Tenancy.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Catalog;
+
+internal sealed class CatalogTemplateProjection(TenancyDbContext context) : ICatalogTemplateProjection
+{
+    public async Task<CatalogTemplate?> GetAsync(Guid templateId, CancellationToken cancellationToken = default) =>
+        await context.CatalogTemplates.SingleOrDefaultAsync(t => t.TemplateId == templateId, cancellationToken);
+
+    public async Task UpsertAsync(CatalogTemplate template, CancellationToken cancellationToken = default)
+    {
+        CatalogTemplate? existing = await context.CatalogTemplates
+            .SingleOrDefaultAsync(t => t.TemplateId == template.TemplateId, cancellationToken);
+
+        if (existing is null)
+        {
+            context.CatalogTemplates.Add(template);
+        }
+        else
+        {
+            existing.Update(template.Name, template.Tier, template.SectionKeys, template.Variants, template.UpdatedAtUtc);
+        }
+
+        await context.SaveChangesAsync(cancellationToken);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Tenants/TenantConfiguration.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Tenants/TenantConfiguration.cs
new file mode 100644
index 0000000..47da260
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Tenants/TenantConfiguration.cs
@@ -0,0 +1,59 @@
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Tenants;
+
+internal sealed class TenantConfiguration : IEntityTypeConfiguration<Tenant>
+{
+    public void Configure(EntityTypeBuilder<Tenant> builder)
+    {
+        builder.ToTable("tenants");
+        builder.HasKey(t => t.Id);
+
+        builder.Property(t => t.OwnerUserId).IsRequired();
+
+        builder.Property(t => t.Slug)
+            .HasConversion(v => v.Value, v => TenantSlug.FromPersistence(v))
+            .IsRequired()
+            .HasMaxLength(TenantSlug.MaxLength);
+        builder.HasIndex(t => t.Slug).IsUnique();
+
+        builder.Property(t => t.Published).IsRequired();
+        builder.Property(t => t.TemplateId).IsRequired();
+        builder.Property(t => t.ThemeIndex).IsRequired();
+        builder.Property(t => t.CreatedAtUtc).HasColumnName("created_at").IsRequired();
+        builder.Property(t => t.UpdatedAtUtc).HasColumnName("updated_at").IsRequired();
+
+        builder.OwnsMany(t => t.Sections, section =>
+        {
+            section.ToTable("tenant_section_entries");
+            section.HasKey(s => s.Id);
+            section.WithOwner().HasForeignKey(s => s.TenantId);
+
+            section.Property(s => s.SectionKey).IsRequired().HasMaxLength(100);
+            section.Property(s => s.Enabled).IsRequired();
+            section.Property(s => s.DisplayOrder).IsRequired();
+            section.Property(s => s.Variant).HasMaxLength(100);
+
+            section.Property(s => s.OverrideTitle)
+                .HasConversion(
+                    v => v != null ? v.Value : null,
+                    v => v != null ? SectionOverrideTitle.FromPersistence(v) : null)
+                .HasMaxLength(SectionOverrideTitle.MaxLength);
+
+            section.Property(s => s.OverrideSubtitle)
+                .HasConversion(
+                    v => v != null ? v.Value : null,
+                    v => v != null ? SectionOverrideSubtitle.FromPersistence(v) : null)
+                .HasMaxLength(SectionOverrideSubtitle.MaxLength);
+
+            section.HasIndex(s => new { s.TenantId, s.SectionKey }).IsUnique();
+            section.HasIndex(s => new { s.TenantId, s.DisplayOrder });
+        });
+
+        builder.Navigation(t => t.Sections)
+            .HasField("_sections")
+            .UsePropertyAccessMode(PropertyAccessMode.Field);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Tenants/TenantRepository.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Tenants/TenantRepository.cs
new file mode 100644
index 0000000..9834695
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Tenants/TenantRepository.cs
@@ -0,0 +1,20 @@
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+using Eternelle.Modules.Tenancy.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Tenants;
+
+internal sealed class TenantRepository(TenancyDbContext context) : ITenantRepository
+{
+    public async Task<Tenant?> GetByIdAsync(TenantId id, CancellationToken cancellationToken = default) =>
+        await context.Tenants
+            .Include(t => t.Sections)
+            .SingleOrDefaultAsync(t => t.Id == id, cancellationToken);
+
+    public async Task<bool> SlugExistsAsync(string slug, CancellationToken cancellationToken = default) =>
+        await context.Tenants.AnyAsync(t => t.Slug.Value == slug, cancellationToken);
+
+    public void Insert(Tenant tenant) => context.Tenants.Add(tenant);
+
+    public void Update(Tenant tenant) => context.Tenants.Update(tenant);
+}

From 6022d93ad3c5406ea5d78aff0a9fd06402f45c30 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 17:10:54 +0800
Subject: [PATCH 051/155] Eternelle-186 Add outbox/inbox processing plumbing

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../Inbox/ConfigureProcessInboxJob.cs         |  23 +++
 .../IdempotentIntegrationEventHandler.cs      |  62 ++++++++
 .../Inbox/InboxOptions.cs                     |   8 +
 .../Inbox/IntegrationEventConsumer.cs         |  39 +++++
 .../Inbox/ProcessInboxJob.cs                  | 143 +++++++++++++++++
 .../Outbox/ConfigureProcessOutboxJob.cs       |  23 +++
 .../Outbox/IdempotentDomainEventHandler.cs    |  61 ++++++++
 .../Outbox/OutboxOptions.cs                   |   8 +
 .../Outbox/ProcessOutboxJob.cs                | 144 ++++++++++++++++++
 9 files changed, 511 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/InboxOptions.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IntegrationEventConsumer.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ProcessInboxJob.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/OutboxOptions.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/ProcessOutboxJob.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ConfigureProcessInboxJob.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
new file mode 100644
index 0000000..e704154
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
@@ -0,0 +1,23 @@
+using Microsoft.Extensions.Options;
+using Quartz;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Inbox;
+
+internal sealed class ConfigureProcessInboxJob(IOptions<InboxOptions> inboxOptions)
+    : IConfigureOptions<QuartzOptions>
+{
+    private readonly InboxOptions _inboxOptions = inboxOptions.Value;
+
+    public void Configure(QuartzOptions options)
+    {
+        string jobName = typeof(ProcessInboxJob).FullName!;
+
+        options
+            .AddJob<ProcessInboxJob>(configure => configure.WithIdentity(jobName))
+            .AddTrigger(configure =>
+                configure
+                    .ForJob(jobName)
+                    .WithSimpleSchedule(schedule =>
+                        schedule.WithIntervalInSeconds(_inboxOptions.IntervalInSeconds).RepeatForever()));
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
new file mode 100644
index 0000000..da48388
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
@@ -0,0 +1,62 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Inbox;
+
+internal sealed class IdempotentIntegrationEventHandler<TIntegrationEvent>(
+    IIntegrationEventHandler<TIntegrationEvent> decorated,
+    IDbConnectionFactory dbConnectionFactory)
+    : IntegrationEventHandler<TIntegrationEvent>
+    where TIntegrationEvent : IIntegrationEvent
+{
+    public override async Task Handle(
+        TIntegrationEvent integrationEvent,
+        CancellationToken cancellationToken = default)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        var inboxMessageConsumer = new InboxMessageConsumer(integrationEvent.Id, decorated.GetType().Name);
+
+        if (await InboxConsumerExistsAsync(connection, inboxMessageConsumer))
+        {
+            return;
+        }
+
+        await decorated.Handle(integrationEvent, cancellationToken);
+
+        await InsertInboxConsumerAsync(connection, inboxMessageConsumer);
+    }
+
+    private static async Task<bool> InboxConsumerExistsAsync(
+        DbConnection dbConnection,
+        InboxMessageConsumer inboxMessageConsumer)
+    {
+        const string sql =
+            """
+            SELECT EXISTS(
+                SELECT 1
+                FROM tenancy.inbox_message_consumers
+                WHERE inbox_message_id = @InboxMessageId AND
+                      name = @Name
+            )
+            """;
+
+        return await dbConnection.ExecuteScalarAsync<bool>(sql, inboxMessageConsumer);
+    }
+
+    private static async Task InsertInboxConsumerAsync(
+        DbConnection dbConnection,
+        InboxMessageConsumer inboxMessageConsumer)
+    {
+        const string sql =
+            """
+            INSERT INTO tenancy.inbox_message_consumers(inbox_message_id, name)
+            VALUES (@InboxMessageId, @Name)
+            """;
+
+        await dbConnection.ExecuteAsync(sql, inboxMessageConsumer);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/InboxOptions.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/InboxOptions.cs
new file mode 100644
index 0000000..c6d7d16
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/InboxOptions.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Tenancy.Infrastructure.Inbox;
+
+internal sealed class InboxOptions
+{
+    public int IntervalInSeconds { get; init; }
+
+    public int BatchSize { get; init; }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IntegrationEventConsumer.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IntegrationEventConsumer.cs
new file mode 100644
index 0000000..357407b
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IntegrationEventConsumer.cs
@@ -0,0 +1,39 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using MassTransit;
+using Newtonsoft.Json;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Inbox;
+
+internal sealed class IntegrationEventConsumer<TIntegrationEvent>(IDbConnectionFactory dbConnectionFactory)
+    : IConsumer<TIntegrationEvent>
+    where TIntegrationEvent : IntegrationEvent
+{
+    public async Task Consume(ConsumeContext<TIntegrationEvent> context)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        TIntegrationEvent integrationEvent = context.Message;
+
+        var inboxMessage = new InboxMessage
+        {
+            Id = integrationEvent.Id,
+            Type = integrationEvent.GetType().Name,
+            Content = JsonConvert.SerializeObject(integrationEvent, SerializerSettings.Instance),
+            OccurredOnUtc = integrationEvent.OccurredOnUtc
+        };
+
+        const string sql =
+            """
+            INSERT INTO tenancy.inbox_messages(id, type, content, occurred_on_utc)
+            VALUES (@Id, @Type, @Content::json, @OccurredOnUtc)
+            ON CONFLICT (id) DO NOTHING
+            """;
+
+        await connection.ExecuteAsync(sql, inboxMessage);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ProcessInboxJob.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ProcessInboxJob.cs
new file mode 100644
index 0000000..c4bfce9
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ProcessInboxJob.cs
@@ -0,0 +1,143 @@
+using System.Data;
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Newtonsoft.Json;
+using Quartz;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Inbox;
+
+[DisallowConcurrentExecution]
+internal sealed partial class ProcessInboxJob(
+    IDbConnectionFactory dbConnectionFactory,
+    IServiceScopeFactory serviceScopeFactory,
+    IDateTimeProvider dateTimeProvider,
+    IOptions<InboxOptions> inboxOptions,
+    ILogger<ProcessInboxJob> logger) : IJob
+{
+    private const string ModuleName = "Tenancy";
+
+    public async Task Execute(IJobExecutionContext context)
+    {
+        LogBeginProcessing(logger, ModuleName);
+
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbTransaction transaction = await connection.BeginTransactionAsync();
+
+        IReadOnlyList<InboxMessageResponse> inboxMessages = await GetInboxMessagesAsync(connection, transaction);
+
+        foreach (InboxMessageResponse inboxMessage in inboxMessages)
+        {
+            Exception? exception = null;
+
+            try
+            {
+                IIntegrationEvent integrationEvent = JsonConvert.DeserializeObject<IIntegrationEvent>(
+                    inboxMessage.Content,
+                    SerializerSettings.Instance)!;
+
+                using IServiceScope scope = serviceScopeFactory.CreateScope();
+
+                IEnumerable<IIntegrationEventHandler> handlers = IntegrationEventHandlersFactory.GetHandlers(
+                    integrationEvent.GetType(),
+                    scope.ServiceProvider,
+                    Presentation.AssemblyReference.Assembly);
+
+                foreach (IIntegrationEventHandler integrationEventHandler in handlers)
+                {
+                    await integrationEventHandler.Handle(integrationEvent, context.CancellationToken);
+                }
+            }
+            catch (Exception caughtException)
+            {
+                LogProcessingError(logger, caughtException, ModuleName, inboxMessage.Id);
+
+                exception = caughtException;
+            }
+
+            await UpdateInboxMessageAsync(connection, transaction, inboxMessage, exception);
+        }
+
+        await transaction.CommitAsync();
+
+        LogCompleted(logger, ModuleName);
+    }
+
+    private async Task<IReadOnlyList<InboxMessageResponse>> GetInboxMessagesAsync(
+        IDbConnection connection,
+        IDbTransaction transaction)
+    {
+        string sql =
+            $"""
+             SELECT
+                id AS {nameof(InboxMessageResponse.Id)},
+                content AS {nameof(InboxMessageResponse.Content)}
+             FROM tenancy.inbox_messages
+             WHERE processed_on_utc IS NULL
+             ORDER BY occurred_on_utc
+             LIMIT {inboxOptions.Value.BatchSize}
+             FOR UPDATE SKIP LOCKED
+             """;
+
+        IEnumerable<InboxMessageResponse> inboxMessages = await connection.QueryAsync<InboxMessageResponse>(
+            sql,
+            transaction: transaction);
+
+        return inboxMessages.AsList();
+    }
+
+    private async Task UpdateInboxMessageAsync(
+        IDbConnection connection,
+        IDbTransaction transaction,
+        InboxMessageResponse inboxMessage,
+        Exception? exception)
+    {
+        if (exception is null)
+        {
+            const string sql =
+                """
+                UPDATE tenancy.inbox_messages
+                SET processed_on_utc = @ProcessedOnUtc,
+                    error = NULL
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { inboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                transaction: transaction);
+        }
+        else
+        {
+            const string sql =
+                """
+                UPDATE tenancy.inbox_messages
+                SET error = @Error
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { inboxMessage.Id, Error = exception.ToString() },
+                transaction: transaction);
+        }
+    }
+
+    internal sealed record InboxMessageResponse(Guid Id, string Content);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Beginning to process inbox messages")]
+    private static partial void LogBeginProcessing(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Completed processing inbox messages")]
+    private static partial void LogCompleted(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Error, "{module} - Exception while processing inbox message {messageId}")]
+    private static partial void LogProcessingError(ILogger logger, Exception exception, string module, Guid messageId);
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
new file mode 100644
index 0000000..97e0ff3
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
@@ -0,0 +1,23 @@
+using Microsoft.Extensions.Options;
+using Quartz;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Outbox;
+
+internal sealed class ConfigureProcessOutboxJob(IOptions<OutboxOptions> outboxOptions)
+    : IConfigureOptions<QuartzOptions>
+{
+    private readonly OutboxOptions _outboxOptions = outboxOptions.Value;
+
+    public void Configure(QuartzOptions options)
+    {
+        string jobName = typeof(ProcessOutboxJob).FullName!;
+
+        options
+            .AddJob<ProcessOutboxJob>(configure => configure.WithIdentity(jobName))
+            .AddTrigger(configure =>
+                configure
+                    .ForJob(jobName)
+                    .WithSimpleSchedule(schedule =>
+                        schedule.WithIntervalInSeconds(_outboxOptions.IntervalInSeconds).RepeatForever()));
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
new file mode 100644
index 0000000..c93ff0f
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -0,0 +1,61 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Infrastructure.Outbox;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Outbox;
+
+internal sealed class IdempotentDomainEventHandler<TDomainEvent>(
+    IDomainEventHandler<TDomainEvent> decorated,
+    IDbConnectionFactory dbConnectionFactory)
+    : DomainEventHandler<TDomainEvent>
+    where TDomainEvent : IDomainEvent
+{
+    public override async Task Handle(TDomainEvent domainEvent, CancellationToken cancellationToken = default)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
+
+        if (await OutboxConsumerExistsAsync(connection, outboxMessageConsumer))
+        {
+            return;
+        }
+
+        await decorated.Handle(domainEvent, cancellationToken);
+
+        await InsertOutboxConsumerAsync(connection, outboxMessageConsumer);
+    }
+
+    private static async Task<bool> OutboxConsumerExistsAsync(
+        DbConnection dbConnection,
+        OutboxMessageConsumer outboxMessageConsumer)
+    {
+        const string sql =
+            """
+            SELECT EXISTS(
+                SELECT 1
+                FROM tenancy.outbox_message_consumers
+                WHERE outbox_message_id = @OutboxMessageId AND
+                      name = @Name
+            )
+            """;
+
+        return await dbConnection.ExecuteScalarAsync<bool>(sql, outboxMessageConsumer);
+    }
+
+    private static async Task InsertOutboxConsumerAsync(
+        DbConnection dbConnection,
+        OutboxMessageConsumer outboxMessageConsumer)
+    {
+        const string sql =
+            """
+            INSERT INTO tenancy.outbox_message_consumers(outbox_message_id, name)
+            VALUES (@OutboxMessageId, @Name)
+            """;
+
+        await dbConnection.ExecuteAsync(sql, outboxMessageConsumer);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/OutboxOptions.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/OutboxOptions.cs
new file mode 100644
index 0000000..1a34041
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/OutboxOptions.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Tenancy.Infrastructure.Outbox;
+
+internal sealed class OutboxOptions
+{
+    public int IntervalInSeconds { get; init; }
+
+    public int BatchSize { get; init; }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/ProcessOutboxJob.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/ProcessOutboxJob.cs
new file mode 100644
index 0000000..f52f43e
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/ProcessOutboxJob.cs
@@ -0,0 +1,144 @@
+using System.Data;
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Newtonsoft.Json;
+using Quartz;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Outbox;
+
+[DisallowConcurrentExecution]
+internal sealed partial class ProcessOutboxJob(
+    IDbConnectionFactory dbConnectionFactory,
+    IServiceScopeFactory serviceScopeFactory,
+    IDateTimeProvider dateTimeProvider,
+    IOptions<OutboxOptions> outboxOptions,
+    ILogger<ProcessOutboxJob> logger) : IJob
+{
+    private const string ModuleName = "Tenancy";
+
+    public async Task Execute(IJobExecutionContext context)
+    {
+        LogBeginProcessing(logger, ModuleName);
+
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbTransaction transaction = await connection.BeginTransactionAsync();
+
+        IReadOnlyList<OutboxMessageResponse> outboxMessages = await GetOutboxMessagesAsync(connection, transaction);
+
+        foreach (OutboxMessageResponse outboxMessage in outboxMessages)
+        {
+            Exception? exception = null;
+
+            try
+            {
+                IDomainEvent domainEvent = JsonConvert.DeserializeObject<IDomainEvent>(
+                    outboxMessage.Content,
+                    SerializerSettings.Instance)!;
+
+                using IServiceScope scope = serviceScopeFactory.CreateScope();
+
+                IEnumerable<IDomainEventHandler> handlers = DomainEventHandlersFactory.GetHandlers(
+                    domainEvent.GetType(),
+                    scope.ServiceProvider,
+                    Application.AssemblyReference.Assembly);
+
+                foreach (IDomainEventHandler domainEventHandler in handlers)
+                {
+                    await domainEventHandler.Handle(domainEvent, context.CancellationToken);
+                }
+            }
+            catch (Exception caughtException)
+            {
+                LogProcessingError(logger, caughtException, ModuleName, outboxMessage.Id);
+
+                exception = caughtException;
+            }
+
+            await UpdateOutboxMessageAsync(connection, transaction, outboxMessage, exception);
+        }
+
+        await transaction.CommitAsync();
+
+        LogCompleted(logger, ModuleName);
+    }
+
+    private async Task<IReadOnlyList<OutboxMessageResponse>> GetOutboxMessagesAsync(
+        IDbConnection connection,
+        IDbTransaction transaction)
+    {
+        string sql =
+            $"""
+             SELECT
+                id AS {nameof(OutboxMessageResponse.Id)},
+                content AS {nameof(OutboxMessageResponse.Content)}
+             FROM tenancy.outbox_messages
+             WHERE processed_on_utc IS NULL
+             ORDER BY occurred_on_utc
+             LIMIT {outboxOptions.Value.BatchSize}
+             FOR UPDATE SKIP LOCKED
+             """;
+
+        IEnumerable<OutboxMessageResponse> outboxMessages = await connection.QueryAsync<OutboxMessageResponse>(
+            sql,
+            transaction: transaction);
+
+        return outboxMessages.ToList();
+    }
+
+    private async Task UpdateOutboxMessageAsync(
+        IDbConnection connection,
+        IDbTransaction transaction,
+        OutboxMessageResponse outboxMessage,
+        Exception? exception)
+    {
+        if (exception is null)
+        {
+            const string sql =
+                """
+                UPDATE tenancy.outbox_messages
+                SET processed_on_utc = @ProcessedOnUtc,
+                    error = NULL
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { outboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                transaction: transaction);
+        }
+        else
+        {
+            const string sql =
+                """
+                UPDATE tenancy.outbox_messages
+                SET error = @Error
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { outboxMessage.Id, Error = exception.ToString() },
+                transaction: transaction);
+        }
+    }
+
+    internal sealed record OutboxMessageResponse(Guid Id, string Content);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Beginning to process outbox messages")]
+    private static partial void LogBeginProcessing(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Completed processing outbox messages")]
+    private static partial void LogCompleted(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Error, "{module} - Exception while processing outbox message {messageId}")]
+    private static partial void LogProcessingError(ILogger logger, Exception exception, string module, Guid messageId);
+}

From d1e6664533a870001c7be518d8054d06508cf328 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 17:11:02 +0800
Subject: [PATCH 052/155] Eternelle-186 Add module DI registration and consumer
 wiring

---
 .../TenancyModule.cs                          | 122 ++++++++++++++++++
 1 file changed, 122 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/TenancyModule.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/TenancyModule.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/TenancyModule.cs
new file mode 100644
index 0000000..f693f39
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/TenancyModule.cs
@@ -0,0 +1,122 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Modules.Catalog.IntegrationEvents;
+using Eternelle.Modules.Tenancy.Application.Abstractions.Data;
+using Eternelle.Modules.Tenancy.Domain.Catalog;
+using Eternelle.Modules.Tenancy.Domain.Tenants;
+using Eternelle.Modules.Tenancy.Infrastructure.Catalog;
+using Eternelle.Modules.Tenancy.Infrastructure.Database;
+using Eternelle.Modules.Tenancy.Infrastructure.Inbox;
+using Eternelle.Modules.Tenancy.Infrastructure.Outbox;
+using Eternelle.Modules.Tenancy.Infrastructure.Tenants;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+
+namespace Eternelle.Modules.Tenancy.Infrastructure;
+
+public static class TenancyModule
+{
+    public static IServiceCollection AddTenancyModule(
+        this IServiceCollection services,
+        IConfiguration configuration)
+    {
+        services.AddDomainEventHandlers();
+
+        services.AddIntegrationEventHandlers();
+
+        services.AddInfrastructure(configuration);
+
+        services.AddEndpoints(Presentation.AssemblyReference.Assembly);
+
+        return services;
+    }
+
+    private static void AddInfrastructure(this IServiceCollection services, IConfiguration configuration)
+    {
+        services.AddDbContext<TenancyDbContext>((sp, options) =>
+            options
+                .UseNpgsql(
+                    configuration.GetConnectionString("Database"),
+                    npgsqlOptions => npgsqlOptions
+                        .MigrationsHistoryTable(HistoryRepository.DefaultTableName, Schemas.Tenancy))
+                .AddInterceptors(sp.GetRequiredService<InsertOutboxMessagesInterceptor>())
+                .UseSnakeCaseNamingConvention());
+
+        services.AddScoped<IUnitOfWork>(sp => sp.GetRequiredService<TenancyDbContext>());
+        services.AddScoped<ITenantRepository, TenantRepository>();
+        services.AddScoped<ICatalogTemplateProjection, CatalogTemplateProjection>();
+
+        services.AddOptions<OutboxOptions>()
+            .Bind(configuration.GetSection("Tenancy:Outbox"))
+            .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
+                "Tenancy:Outbox: IntervalInSeconds and BatchSize must be greater than 0.")
+            .ValidateOnStart();
+
+        services.ConfigureOptions<ConfigureProcessOutboxJob>();
+
+        services.AddOptions<InboxOptions>()
+            .Bind(configuration.GetSection("Tenancy:Inbox"))
+            .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
+                "Tenancy:Inbox: IntervalInSeconds and BatchSize must be greater than 0.")
+            .ValidateOnStart();
+
+        services.ConfigureOptions<ConfigureProcessInboxJob>();
+    }
+
+    public static void ConfigureConsumers(MassTransit.IRegistrationConfigurator configurator)
+    {
+        configurator.AddConsumer<IntegrationEventConsumer<CatalogTemplateManifestChangedIntegrationEvent>>();
+    }
+
+    private static void AddDomainEventHandlers(this IServiceCollection services)
+    {
+        Type[] domainEventHandlers = Application.AssemblyReference.Assembly
+            .GetTypes()
+            .Where(t => t.IsAssignableTo(typeof(IDomainEventHandler)))
+            .ToArray();
+
+        foreach (Type domainEventHandler in domainEventHandlers)
+        {
+            services.TryAddScoped(domainEventHandler);
+
+            Type domainEvent = domainEventHandler
+                .GetInterfaces()
+                .Single(i => i.IsGenericType && i.GetGenericTypeDefinition() == typeof(IDomainEventHandler<>))
+                .GetGenericArguments()
+                .Single();
+
+            Type closedIdempotentHandler = typeof(IdempotentDomainEventHandler<>).MakeGenericType(domainEvent);
+
+            services.Decorate(domainEventHandler, closedIdempotentHandler);
+        }
+    }
+
+    private static void AddIntegrationEventHandlers(this IServiceCollection services)
+    {
+        Type[] integrationEventHandlers = Presentation.AssemblyReference.Assembly
+            .GetTypes()
+            .Where(t => t.IsAssignableTo(typeof(IIntegrationEventHandler)))
+            .ToArray();
+
+        foreach (Type integrationEventHandler in integrationEventHandlers)
+        {
+            services.TryAddScoped(integrationEventHandler);
+
+            Type integrationEvent = integrationEventHandler
+                .GetInterfaces()
+                .Single(i => i.IsGenericType && i.GetGenericTypeDefinition() == typeof(IIntegrationEventHandler<>))
+                .GetGenericArguments()
+                .Single();
+
+            Type closedIdempotentHandler =
+                typeof(IdempotentIntegrationEventHandler<>).MakeGenericType(integrationEvent);
+
+            services.Decorate(integrationEventHandler, closedIdempotentHandler);
+        }
+    }
+}

From cd42c80b8e4fd5a78e0afae9dd6334e389bd7d62 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 17:23:55 +0800
Subject: [PATCH 053/155] Eternelle-186 Consume Catalog manifest into local
 projection

---
 ...eManifestChangedIntegrationEventHandler.cs | 33 +++++++++++++++++++
 ...rnelle.Modules.Tenancy.Presentation.csproj |  1 +
 .../Tags.cs                                   |  6 ++++
 3 files changed, 40 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Catalog/CatalogTemplateManifestChangedIntegrationEventHandler.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tags.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Catalog/CatalogTemplateManifestChangedIntegrationEventHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Catalog/CatalogTemplateManifestChangedIntegrationEventHandler.cs
new file mode 100644
index 0000000..abed84f
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Catalog/CatalogTemplateManifestChangedIntegrationEventHandler.cs
@@ -0,0 +1,33 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Modules.Catalog.IntegrationEvents;
+using Eternelle.Modules.Tenancy.Domain.Catalog;
+
+namespace Eternelle.Modules.Tenancy.Presentation.Catalog;
+
+internal sealed class CatalogTemplateManifestChangedIntegrationEventHandler(
+    ICatalogTemplateProjection projection,
+    IDateTimeProvider dateTimeProvider)
+    : IntegrationEventHandler<CatalogTemplateManifestChangedIntegrationEvent>
+{
+    public override async Task Handle(
+        CatalogTemplateManifestChangedIntegrationEvent integrationEvent,
+        CancellationToken cancellationToken = default)
+    {
+        IReadOnlyList<CatalogTemplateVariant> variants =
+        [
+            .. integrationEvent.Variants.Select(v =>
+                new CatalogTemplateVariant(v.SectionId, v.Variant, v.PriceClass, v.UploadLimit, v.IsDefault))
+        ];
+
+        var template = CatalogTemplate.Create(
+            integrationEvent.TemplateId,
+            integrationEvent.Name,
+            integrationEvent.Tier,
+            integrationEvent.SectionIds,
+            variants,
+            dateTimeProvider.UtcNow);
+
+        await projection.UpsertAsync(template, cancellationToken);
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Eternelle.Modules.Tenancy.Presentation.csproj b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Eternelle.Modules.Tenancy.Presentation.csproj
index 1bdf335..3fa7b3a 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Eternelle.Modules.Tenancy.Presentation.csproj
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Eternelle.Modules.Tenancy.Presentation.csproj
@@ -3,6 +3,7 @@
   <ItemGroup>
     <ProjectReference Include="..\Eternelle.Modules.Tenancy.Application\Eternelle.Modules.Tenancy.Application.csproj" />
     <ProjectReference Include="..\..\..\Common\Eternelle.Common.Presentation\Eternelle.Common.Presentation.csproj" />
+    <ProjectReference Include="..\..\Catalog\Eternelle.Modules.Catalog.IntegrationEvents\Eternelle.Modules.Catalog.IntegrationEvents.csproj" />
   </ItemGroup>
 
 </Project>
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tags.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tags.cs
new file mode 100644
index 0000000..d76a9e9
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tags.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Tenancy.Presentation;
+
+internal static class Tags
+{
+    public const string Tenancy = "Tenancy";
+}

From ae1413000f2d74553578282a204fcfa661a88ed1 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 17:24:50 +0800
Subject: [PATCH 054/155] Eternelle-186 Add tenant endpoints

---
 .../Tenants/AssignTemplateEndpoint.cs         | 31 +++++++++++++++
 .../Tenants/ConfigureSectionEndpoint.cs       | 38 +++++++++++++++++++
 .../Tenants/GetTenantEndpoint.cs              | 27 +++++++++++++
 .../Tenants/GetTenantSectionsEndpoint.cs      | 27 +++++++++++++
 .../Tenants/ProvisionTenantEndpoint.cs        | 34 +++++++++++++++++
 .../Tenants/PublishTenantEndpoint.cs          | 29 ++++++++++++++
 .../Tenants/ReorderSectionsEndpoint.cs        | 31 +++++++++++++++
 .../Tenants/UnpublishTenantEndpoint.cs        | 29 ++++++++++++++
 8 files changed, 246 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/AssignTemplateEndpoint.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ConfigureSectionEndpoint.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/GetTenantEndpoint.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/GetTenantSectionsEndpoint.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ProvisionTenantEndpoint.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/PublishTenantEndpoint.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ReorderSectionsEndpoint.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/UnpublishTenantEndpoint.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/AssignTemplateEndpoint.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/AssignTemplateEndpoint.cs
new file mode 100644
index 0000000..dcb8507
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/AssignTemplateEndpoint.cs
@@ -0,0 +1,31 @@
+using Eternelle.Common.Application.Authentication;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Tenancy.Application.Tenants.AssignTemplate;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+using System.Security.Claims;
+
+namespace Eternelle.Modules.Tenancy.Presentation.Tenants;
+
+internal sealed class AssignTemplateEndpoint : IEndpoint
+{
+    internal sealed record Request(Guid TemplateId, int ThemeIndex);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPut("tenants/{tenantId:guid}/template", async (Guid tenantId, Request request, ClaimsPrincipal claims, ISender sender, CancellationToken ct) =>
+        {
+            var command = new AssignTemplateCommand(tenantId, claims.GetUserId(), request.TemplateId, request.ThemeIndex);
+
+            Result result = await sender.Send(command, ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Tenancy)
+        .RequireAuthorization("tenant:edit");
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ConfigureSectionEndpoint.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ConfigureSectionEndpoint.cs
new file mode 100644
index 0000000..543ddac
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ConfigureSectionEndpoint.cs
@@ -0,0 +1,38 @@
+using Eternelle.Common.Application.Authentication;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Tenancy.Application.Tenants.ConfigureSection;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+using System.Security.Claims;
+
+namespace Eternelle.Modules.Tenancy.Presentation.Tenants;
+
+internal sealed class ConfigureSectionEndpoint : IEndpoint
+{
+    internal sealed record Request(bool Enabled, string? Variant, string? OverrideTitle, string? OverrideSubtitle);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPut("tenants/{tenantId:guid}/sections/{sectionKey}", async (Guid tenantId, string sectionKey, Request request, ClaimsPrincipal claims, ISender sender, CancellationToken ct) =>
+        {
+            var command = new ConfigureSectionCommand(
+                tenantId,
+                claims.GetUserId(),
+                sectionKey,
+                request.Enabled,
+                request.Variant,
+                request.OverrideTitle,
+                request.OverrideSubtitle);
+
+            Result result = await sender.Send(command, ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Tenancy)
+        .RequireAuthorization("tenant:edit");
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/GetTenantEndpoint.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/GetTenantEndpoint.cs
new file mode 100644
index 0000000..19bfed0
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/GetTenantEndpoint.cs
@@ -0,0 +1,27 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Tenancy.Application.Tenants.GetTenant;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Tenancy.Presentation.Tenants;
+
+internal sealed class GetTenantEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("tenants/{tenantId:guid}", async (Guid tenantId, ISender sender, CancellationToken ct) =>
+        {
+            var query = new GetTenantQuery(tenantId);
+
+            Result<TenantResponse> result = await sender.Send(query, ct);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Tenancy)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/GetTenantSectionsEndpoint.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/GetTenantSectionsEndpoint.cs
new file mode 100644
index 0000000..ee3738d
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/GetTenantSectionsEndpoint.cs
@@ -0,0 +1,27 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Tenancy.Application.Tenants.GetTenantSections;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Tenancy.Presentation.Tenants;
+
+internal sealed class GetTenantSectionsEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("tenants/{tenantId:guid}/sections", async (Guid tenantId, ISender sender, CancellationToken ct) =>
+        {
+            var query = new GetTenantSectionsQuery(tenantId);
+
+            Result<IReadOnlyList<SectionEntryResponse>> result = await sender.Send(query, ct);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Tenancy)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ProvisionTenantEndpoint.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ProvisionTenantEndpoint.cs
new file mode 100644
index 0000000..967a987
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ProvisionTenantEndpoint.cs
@@ -0,0 +1,34 @@
+using Eternelle.Common.Application.Authentication;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Tenancy.Application.Tenants.ProvisionTenant;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+using System.Security.Claims;
+
+namespace Eternelle.Modules.Tenancy.Presentation.Tenants;
+
+internal sealed class ProvisionTenantEndpoint : IEndpoint
+{
+    internal sealed record Request(string Slug, Guid TemplateId, int ThemeIndex, DateOnly WeddingDate);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("tenants", async (Request request, ClaimsPrincipal claims, ISender sender, CancellationToken ct) =>
+        {
+            var command = new ProvisionTenantCommand(
+                claims.GetUserId(), request.Slug, request.TemplateId, request.ThemeIndex, request.WeddingDate);
+
+            Result<Guid> result = await sender.Send(command, ct);
+
+            return result.Match(
+                id => Results.Created($"/tenants/{id}", new { id }),
+                ApiResults.Problem);
+        })
+        .WithTags(Tags.Tenancy)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/PublishTenantEndpoint.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/PublishTenantEndpoint.cs
new file mode 100644
index 0000000..6ee7f14
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/PublishTenantEndpoint.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Application.Authentication;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Tenancy.Application.Tenants.SetPublished;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+using System.Security.Claims;
+
+namespace Eternelle.Modules.Tenancy.Presentation.Tenants;
+
+internal sealed class PublishTenantEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("tenants/{tenantId:guid}/publish", async (Guid tenantId, ClaimsPrincipal claims, ISender sender, CancellationToken ct) =>
+        {
+            var command = new PublishTenantCommand(tenantId, claims.GetUserId());
+
+            Result result = await sender.Send(command, ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Tenancy)
+        .RequireAuthorization("tenant:publish");
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ReorderSectionsEndpoint.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ReorderSectionsEndpoint.cs
new file mode 100644
index 0000000..fa13f34
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/ReorderSectionsEndpoint.cs
@@ -0,0 +1,31 @@
+using Eternelle.Common.Application.Authentication;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Tenancy.Application.Tenants.ReorderSections;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+using System.Security.Claims;
+
+namespace Eternelle.Modules.Tenancy.Presentation.Tenants;
+
+internal sealed class ReorderSectionsEndpoint : IEndpoint
+{
+    internal sealed record Request(IReadOnlyList<string> OrderedSectionKeys);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPatch("tenants/{tenantId:guid}/sections/reorder", async (Guid tenantId, Request request, ClaimsPrincipal claims, ISender sender, CancellationToken ct) =>
+        {
+            var command = new ReorderSectionsCommand(tenantId, claims.GetUserId(), request.OrderedSectionKeys);
+
+            Result result = await sender.Send(command, ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Tenancy)
+        .RequireAuthorization("tenant:edit");
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/UnpublishTenantEndpoint.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/UnpublishTenantEndpoint.cs
new file mode 100644
index 0000000..3549a6f
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Presentation/Tenants/UnpublishTenantEndpoint.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Application.Authentication;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Tenancy.Application.Tenants.SetPublished;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+using System.Security.Claims;
+
+namespace Eternelle.Modules.Tenancy.Presentation.Tenants;
+
+internal sealed class UnpublishTenantEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("tenants/{tenantId:guid}/unpublish", async (Guid tenantId, ClaimsPrincipal claims, ISender sender, CancellationToken ct) =>
+        {
+            var command = new UnpublishTenantCommand(tenantId, claims.GetUserId());
+
+            Result result = await sender.Send(command, ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Tenancy)
+        .RequireAuthorization("tenant:publish");
+    }
+}

From 97e9e7f7a027f70e4a81a78dee9e5f9c35571967 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 17:26:53 +0800
Subject: [PATCH 055/155] Eternelle-186 Add module configuration files

---
 src/API/Eternelle.Api/modules.tenancy.Development.json | 1 +
 src/API/Eternelle.Api/modules.tenancy.json             | 6 ++++++
 2 files changed, 7 insertions(+)
 create mode 100644 src/API/Eternelle.Api/modules.tenancy.Development.json
 create mode 100644 src/API/Eternelle.Api/modules.tenancy.json

diff --git a/src/API/Eternelle.Api/modules.tenancy.Development.json b/src/API/Eternelle.Api/modules.tenancy.Development.json
new file mode 100644
index 0000000..0967ef4
--- /dev/null
+++ b/src/API/Eternelle.Api/modules.tenancy.Development.json
@@ -0,0 +1 @@
+{}
diff --git a/src/API/Eternelle.Api/modules.tenancy.json b/src/API/Eternelle.Api/modules.tenancy.json
new file mode 100644
index 0000000..118f52c
--- /dev/null
+++ b/src/API/Eternelle.Api/modules.tenancy.json
@@ -0,0 +1,6 @@
+{
+  "Tenancy": {
+    "Outbox": { "IntervalInSeconds": 10, "BatchSize": 20 },
+    "Inbox": { "IntervalInSeconds": 10, "BatchSize": 20 }
+  }
+}

From a0b5001ac123fc0d9dbd4898b77c3831f06d452a Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 17:30:04 +0800
Subject: [PATCH 056/155] Eternelle-186 Wire Tenancy module into the API host

---
 src/API/Eternelle.Api/Eternelle.Api.csproj |  1 +
 src/API/Eternelle.Api/Program.cs           | 10 +++++++---
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/src/API/Eternelle.Api/Eternelle.Api.csproj b/src/API/Eternelle.Api/Eternelle.Api.csproj
index 991e197..dc3f0de 100644
--- a/src/API/Eternelle.Api/Eternelle.Api.csproj
+++ b/src/API/Eternelle.Api/Eternelle.Api.csproj
@@ -22,6 +22,7 @@
 
   <ItemGroup>
     <ProjectReference Include="..\..\Modules\Catalog\Eternelle.Modules.Catalog.Infrastructure\Eternelle.Modules.Catalog.Infrastructure.csproj" />
+    <ProjectReference Include="..\..\Modules\Tenancy\Eternelle.Modules.Tenancy.Infrastructure\Eternelle.Modules.Tenancy.Infrastructure.csproj" />
     <ProjectReference Include="..\..\Modules\Users\Eternelle.Modules.Users.Infrastructure\Eternelle.Modules.Users.Infrastructure.csproj" />
     <ProjectReference Include="..\..\Modules\Weddings\Eternelle.Modules.Weddings.Infrastructure\Eternelle.Modules.Weddings.Infrastructure.csproj" />
   </ItemGroup>
diff --git a/src/API/Eternelle.Api/Program.cs b/src/API/Eternelle.Api/Program.cs
index df3a262..a74ac59 100644
--- a/src/API/Eternelle.Api/Program.cs
+++ b/src/API/Eternelle.Api/Program.cs
@@ -7,6 +7,7 @@
 using Eternelle.Common.Infrastructure.Configuration;
 using Eternelle.Common.Presentation.Endpoints;
 using Eternelle.Modules.Catalog.Infrastructure;
+using Eternelle.Modules.Tenancy.Infrastructure;
 using Eternelle.Modules.Users.Infrastructure;
 using Eternelle.Modules.Weddings.Infrastructure;
 using Eternelle.Modules.Weddings.Presentation;
@@ -27,7 +28,8 @@
 builder.Services.AddApplication([
     Eternelle.Modules.Weddings.Application.AssemblyReference.Assembly,
     Eternelle.Modules.Users.Application.AssemblyReference.Assembly,
-    Eternelle.Modules.Catalog.Application.AssemblyReference.Assembly
+    Eternelle.Modules.Catalog.Application.AssemblyReference.Assembly,
+    Eternelle.Modules.Tenancy.Application.AssemblyReference.Assembly
 ]);
 
 string databaseConnectionString = builder.Configuration.GetConnectionStringOrThrow("Database");
@@ -35,11 +37,11 @@
 
 builder.Services.AddInfrastructure(
     DiagnosticsConfig.ServiceName,
-    moduleConfigureConsumers: [],
+    moduleConfigureConsumers: [TenancyModule.ConfigureConsumers],
     databaseConnectionString: databaseConnectionString,
     redisConnectionString: redisConnectionString);
 
-builder.Configuration.AddModuleConfiguration(["weddings", "users", "catalog"]);
+builder.Configuration.AddModuleConfiguration(["weddings", "users", "catalog", "tenancy"]);
 
 Uri keyCloakHealthUrl = builder.Configuration.GetKeyCloakHealthUrl();
 
@@ -54,6 +56,8 @@
 
 builder.Services.AddCatalogModule(builder.Configuration);
 
+builder.Services.AddTenancyModule(builder.Configuration);
+
 builder.Services.AddRateLimiter(options =>
 {
     // IP-based fixed-window limiter for the public guest photo upload endpoint.

From cc797e9ae993063f809327aa61b4910fff832923 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 17:36:05 +0800
Subject: [PATCH 057/155] Eternelle-186 Add InitialTenancy migration

---
 .../20260528093515_InitialTenancy.Designer.cs | 283 ++++++++++++++++++
 .../20260528093515_InitialTenancy.cs          | 192 ++++++++++++
 .../TenancyDbContextModelSnapshot.cs          | 280 +++++++++++++++++
 3 files changed, 755 insertions(+)
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.Designer.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.cs
 create mode 100644 src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/TenancyDbContextModelSnapshot.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.Designer.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.Designer.cs
new file mode 100644
index 0000000..b1dd213
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.Designer.cs
@@ -0,0 +1,283 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Tenancy.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Migrations
+{
+    [DbContext(typeof(TenancyDbContext))]
+    [Migration("20260528093515_InitialTenancy")]
+    partial class InitialTenancy
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("tenancy")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Tenancy.Domain.Catalog.CatalogTemplate", b =>
+                {
+                    b.Property<Guid>("TemplateId")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("template_id");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("SectionKeys")
+                        .IsRequired()
+                        .HasColumnType("jsonb")
+                        .HasColumnName("section_keys");
+
+                    b.Property<string>("Tier")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("tier");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at");
+
+                    b.Property<string>("Variants")
+                        .IsRequired()
+                        .HasColumnType("jsonb")
+                        .HasColumnName("variants");
+
+                    b.HasKey("TemplateId")
+                        .HasName("pk_catalog_templates");
+
+                    b.ToTable("catalog_templates", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Tenancy.Domain.Tenants.Tenant", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at");
+
+                    b.Property<Guid>("OwnerUserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("owner_user_id");
+
+                    b.Property<bool>("Published")
+                        .HasColumnType("boolean")
+                        .HasColumnName("published");
+
+                    b.Property<string>("Slug")
+                        .IsRequired()
+                        .HasMaxLength(63)
+                        .HasColumnType("character varying(63)")
+                        .HasColumnName("slug");
+
+                    b.Property<Guid>("TemplateId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("template_id");
+
+                    b.Property<int>("ThemeIndex")
+                        .HasColumnType("integer")
+                        .HasColumnName("theme_index");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at");
+
+                    b.HasKey("Id")
+                        .HasName("pk_tenants");
+
+                    b.HasIndex("Slug")
+                        .IsUnique()
+                        .HasDatabaseName("ix_tenants_slug");
+
+                    b.ToTable("tenants", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Tenancy.Domain.Tenants.Tenant", b =>
+                {
+                    b.OwnsMany("Eternelle.Modules.Tenancy.Domain.Tenants.TenantSectionEntry", "Sections", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<bool>("Enabled")
+                                .HasColumnType("boolean")
+                                .HasColumnName("enabled");
+
+                            b1.Property<string>("OverrideSubtitle")
+                                .HasMaxLength(200)
+                                .HasColumnType("character varying(200)")
+                                .HasColumnName("override_subtitle");
+
+                            b1.Property<string>("OverrideTitle")
+                                .HasMaxLength(150)
+                                .HasColumnType("character varying(150)")
+                                .HasColumnName("override_title");
+
+                            b1.Property<string>("SectionKey")
+                                .IsRequired()
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("section_key");
+
+                            b1.Property<Guid>("TenantId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("tenant_id");
+
+                            b1.Property<string>("Variant")
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("variant");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_tenant_section_entries");
+
+                            b1.HasIndex("TenantId", "DisplayOrder")
+                                .HasDatabaseName("ix_tenant_section_entries_tenant_id_display_order");
+
+                            b1.HasIndex("TenantId", "SectionKey")
+                                .IsUnique()
+                                .HasDatabaseName("ix_tenant_section_entries_tenant_id_section_key");
+
+                            b1.ToTable("tenant_section_entries", "tenancy");
+
+                            b1.WithOwner()
+                                .HasForeignKey("TenantId")
+                                .HasConstraintName("fk_tenant_section_entries_tenants_tenant_id");
+                        });
+
+                    b.Navigation("Sections");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.cs
new file mode 100644
index 0000000..bbc1dcc
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.cs
@@ -0,0 +1,192 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Migrations
+{
+    /// <inheritdoc />
+    public partial class InitialTenancy : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.EnsureSchema(
+                name: "tenancy");
+
+            migrationBuilder.CreateTable(
+                name: "catalog_templates",
+                schema: "tenancy",
+                columns: table => new
+                {
+                    template_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    name = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: false),
+                    tier = table.Column<string>(type: "character varying(50)", maxLength: 50, nullable: false),
+                    section_keys = table.Column<string>(type: "jsonb", nullable: false),
+                    variants = table.Column<string>(type: "jsonb", nullable: false),
+                    updated_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_catalog_templates", x => x.template_id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "inbox_message_consumers",
+                schema: "tenancy",
+                columns: table => new
+                {
+                    inbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_inbox_message_consumers", x => new { x.inbox_message_id, x.name });
+                });
+
+            migrationBuilder.CreateTable(
+                name: "inbox_messages",
+                schema: "tenancy",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    type = table.Column<string>(type: "text", nullable: false),
+                    content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
+                    occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                    error = table.Column<string>(type: "text", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_inbox_messages", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "outbox_message_consumers",
+                schema: "tenancy",
+                columns: table => new
+                {
+                    outbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_outbox_message_consumers", x => new { x.outbox_message_id, x.name });
+                });
+
+            migrationBuilder.CreateTable(
+                name: "outbox_messages",
+                schema: "tenancy",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    type = table.Column<string>(type: "text", nullable: false),
+                    content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
+                    occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                    error = table.Column<string>(type: "text", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_outbox_messages", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "tenants",
+                schema: "tenancy",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    owner_user_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    slug = table.Column<string>(type: "character varying(63)", maxLength: 63, nullable: false),
+                    published = table.Column<bool>(type: "boolean", nullable: false),
+                    template_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    theme_index = table.Column<int>(type: "integer", nullable: false),
+                    created_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    updated_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_tenants", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "tenant_section_entries",
+                schema: "tenancy",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    tenant_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    section_key = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false),
+                    enabled = table.Column<bool>(type: "boolean", nullable: false),
+                    display_order = table.Column<int>(type: "integer", nullable: false),
+                    variant = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: true),
+                    override_title = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: true),
+                    override_subtitle = table.Column<string>(type: "character varying(200)", maxLength: 200, nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_tenant_section_entries", x => x.id);
+                    table.ForeignKey(
+                        name: "fk_tenant_section_entries_tenants_tenant_id",
+                        column: x => x.tenant_id,
+                        principalSchema: "tenancy",
+                        principalTable: "tenants",
+                        principalColumn: "id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "ix_tenant_section_entries_tenant_id_display_order",
+                schema: "tenancy",
+                table: "tenant_section_entries",
+                columns: new[] { "tenant_id", "display_order" });
+
+            migrationBuilder.CreateIndex(
+                name: "ix_tenant_section_entries_tenant_id_section_key",
+                schema: "tenancy",
+                table: "tenant_section_entries",
+                columns: new[] { "tenant_id", "section_key" },
+                unique: true);
+
+            migrationBuilder.CreateIndex(
+                name: "ix_tenants_slug",
+                schema: "tenancy",
+                table: "tenants",
+                column: "slug",
+                unique: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "catalog_templates",
+                schema: "tenancy");
+
+            migrationBuilder.DropTable(
+                name: "inbox_message_consumers",
+                schema: "tenancy");
+
+            migrationBuilder.DropTable(
+                name: "inbox_messages",
+                schema: "tenancy");
+
+            migrationBuilder.DropTable(
+                name: "outbox_message_consumers",
+                schema: "tenancy");
+
+            migrationBuilder.DropTable(
+                name: "outbox_messages",
+                schema: "tenancy");
+
+            migrationBuilder.DropTable(
+                name: "tenant_section_entries",
+                schema: "tenancy");
+
+            migrationBuilder.DropTable(
+                name: "tenants",
+                schema: "tenancy");
+        }
+    }
+}
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/TenancyDbContextModelSnapshot.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/TenancyDbContextModelSnapshot.cs
new file mode 100644
index 0000000..b00d97f
--- /dev/null
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/TenancyDbContextModelSnapshot.cs
@@ -0,0 +1,280 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Tenancy.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Tenancy.Infrastructure.Migrations
+{
+    [DbContext(typeof(TenancyDbContext))]
+    partial class TenancyDbContextModelSnapshot : ModelSnapshot
+    {
+        protected override void BuildModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("tenancy")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Tenancy.Domain.Catalog.CatalogTemplate", b =>
+                {
+                    b.Property<Guid>("TemplateId")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("template_id");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("SectionKeys")
+                        .IsRequired()
+                        .HasColumnType("jsonb")
+                        .HasColumnName("section_keys");
+
+                    b.Property<string>("Tier")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("tier");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at");
+
+                    b.Property<string>("Variants")
+                        .IsRequired()
+                        .HasColumnType("jsonb")
+                        .HasColumnName("variants");
+
+                    b.HasKey("TemplateId")
+                        .HasName("pk_catalog_templates");
+
+                    b.ToTable("catalog_templates", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Tenancy.Domain.Tenants.Tenant", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at");
+
+                    b.Property<Guid>("OwnerUserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("owner_user_id");
+
+                    b.Property<bool>("Published")
+                        .HasColumnType("boolean")
+                        .HasColumnName("published");
+
+                    b.Property<string>("Slug")
+                        .IsRequired()
+                        .HasMaxLength(63)
+                        .HasColumnType("character varying(63)")
+                        .HasColumnName("slug");
+
+                    b.Property<Guid>("TemplateId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("template_id");
+
+                    b.Property<int>("ThemeIndex")
+                        .HasColumnType("integer")
+                        .HasColumnName("theme_index");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at");
+
+                    b.HasKey("Id")
+                        .HasName("pk_tenants");
+
+                    b.HasIndex("Slug")
+                        .IsUnique()
+                        .HasDatabaseName("ix_tenants_slug");
+
+                    b.ToTable("tenants", "tenancy");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Tenancy.Domain.Tenants.Tenant", b =>
+                {
+                    b.OwnsMany("Eternelle.Modules.Tenancy.Domain.Tenants.TenantSectionEntry", "Sections", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<bool>("Enabled")
+                                .HasColumnType("boolean")
+                                .HasColumnName("enabled");
+
+                            b1.Property<string>("OverrideSubtitle")
+                                .HasMaxLength(200)
+                                .HasColumnType("character varying(200)")
+                                .HasColumnName("override_subtitle");
+
+                            b1.Property<string>("OverrideTitle")
+                                .HasMaxLength(150)
+                                .HasColumnType("character varying(150)")
+                                .HasColumnName("override_title");
+
+                            b1.Property<string>("SectionKey")
+                                .IsRequired()
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("section_key");
+
+                            b1.Property<Guid>("TenantId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("tenant_id");
+
+                            b1.Property<string>("Variant")
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("variant");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_tenant_section_entries");
+
+                            b1.HasIndex("TenantId", "DisplayOrder")
+                                .HasDatabaseName("ix_tenant_section_entries_tenant_id_display_order");
+
+                            b1.HasIndex("TenantId", "SectionKey")
+                                .IsUnique()
+                                .HasDatabaseName("ix_tenant_section_entries_tenant_id_section_key");
+
+                            b1.ToTable("tenant_section_entries", "tenancy");
+
+                            b1.WithOwner()
+                                .HasForeignKey("TenantId")
+                                .HasConstraintName("fk_tenant_section_entries_tenants_tenant_id");
+                        });
+
+                    b.Navigation("Sections");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}

From cab5daf105a10bef9a7ec6afa7008dde4ef97070 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 18:54:25 +0800
Subject: [PATCH 058/155] Eternelle-186 Replace WeddingPlan with
 Tenancy-derived guest-photo limit; consume Tenancy events

---
 src/API/Eternelle.Api/Program.cs              |   6 +-
 .../modules.weddings.Development.json         |   3 -
 src/API/Eternelle.Api/modules.weddings.json   |   3 -
 .../20260528093515_InitialTenancy.cs          | 368 +++----
 .../Subscriptions/ISubscriptionPlanService.cs |  15 -
 .../Subscriptions/SubscriptionOptions.cs      |  16 -
 .../GenerateUploadSlotsCommandHandler.cs      |   4 +-
 .../RegisterGuestPhotosCommandHandler.cs      |   4 +-
 .../CreateWedding/CreateWeddingCommand.cs     |   3 +-
 .../CreateWeddingCommandHandler.cs            |   1 +
 .../SetGuestPhotoUploadLimitCommand.cs        |   5 +
 .../SetGuestPhotoUploadLimitCommandHandler.cs |  28 +
 .../Weddings/Wedding.cs                       |  27 +-
 .../Weddings/WeddingPlan.cs                   |  23 -
 .../Weddings/WeddingPlanChangedDomainEvent.cs |  12 -
 .../Weddings/WeddingPlanLimits.cs             |  38 -
 ...emoveWeddingPlanAddUploadLimit.Designer.cs | 933 ++++++++++++++++++
 ...8105138_RemoveWeddingPlanAddUploadLimit.cs |  42 +
 .../WeddingsDbContextModelSnapshot.cs         |  10 +-
 ...lle.Modules.Weddings.Infrastructure.csproj |   1 +
 .../Inbox/IntegrationEventConsumer.cs         |  39 +
 .../StubSubscriptionPlanService.cs            |  16 -
 .../Weddings/WeddingConfiguration.cs          |  10 +-
 .../WeddingsModule.cs                         |   7 +
 ...nelle.Modules.Weddings.Presentation.csproj |   1 +
 ...enantProvisionedIntegrationEventHandler.cs |  22 +
 ...loadLimitChangedIntegrationEventHandler.cs |  18 +
 .../Weddings/CreateWeddingEndpoint.cs         |  33 -
 28 files changed, 1308 insertions(+), 380 deletions(-)
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Subscriptions/ISubscriptionPlanService.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Subscriptions/SubscriptionOptions.cs
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommand.cs
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlan.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlanChangedDomainEvent.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlanLimits.cs
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260528105138_RemoveWeddingPlanAddUploadLimit.Designer.cs
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260528105138_RemoveWeddingPlanAddUploadLimit.cs
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IntegrationEventConsumer.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Subscriptions/StubSubscriptionPlanService.cs
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantProvisionedIntegrationEventHandler.cs
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/CreateWeddingEndpoint.cs

diff --git a/src/API/Eternelle.Api/Program.cs b/src/API/Eternelle.Api/Program.cs
index a74ac59..c4a29c2 100644
--- a/src/API/Eternelle.Api/Program.cs
+++ b/src/API/Eternelle.Api/Program.cs
@@ -37,7 +37,11 @@
 
 builder.Services.AddInfrastructure(
     DiagnosticsConfig.ServiceName,
-    moduleConfigureConsumers: [TenancyModule.ConfigureConsumers],
+    moduleConfigureConsumers:
+    [
+        TenancyModule.ConfigureConsumers,
+        WeddingsModule.ConfigureConsumers
+    ],
     databaseConnectionString: databaseConnectionString,
     redisConnectionString: redisConnectionString);
 
diff --git a/src/API/Eternelle.Api/modules.weddings.Development.json b/src/API/Eternelle.Api/modules.weddings.Development.json
index 9c59e83..dac4bd7 100644
--- a/src/API/Eternelle.Api/modules.weddings.Development.json
+++ b/src/API/Eternelle.Api/modules.weddings.Development.json
@@ -3,9 +3,6 @@
     "SnapShare": {
       "UploadBaseUrl": "http://localhost:5173/snap-share"
     },
-    "Subscription": {
-      "PhotoUploadLimit": null
-    },
     "PhotoStorage": {
       "ServiceUrl": "http://eternelle.minio:9000",
       "PublicUrl": "http://localhost:9000",
diff --git a/src/API/Eternelle.Api/modules.weddings.json b/src/API/Eternelle.Api/modules.weddings.json
index 8501ca1..095c9bc 100644
--- a/src/API/Eternelle.Api/modules.weddings.json
+++ b/src/API/Eternelle.Api/modules.weddings.json
@@ -3,9 +3,6 @@
     "SnapShare": {
       "UploadBaseUrl": ""
     },
-    "Subscription": {
-      "PhotoUploadLimit": null
-    },
     "PhotoStorage": {
       "ServiceUrl": "",
       "PublicUrl": "",
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.cs
index bbc1dcc..fa64204 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Migrations/20260528093515_InitialTenancy.cs
@@ -1,192 +1,194 @@
-using System;
+using System;
 using Microsoft.EntityFrameworkCore.Migrations;
 
 #nullable disable
 
-namespace Eternelle.Modules.Tenancy.Infrastructure.Migrations
+namespace Eternelle.Modules.Tenancy.Infrastructure.Migrations;
+
+/// <inheritdoc />
+public partial class InitialTenancy : Migration
 {
+    private static readonly string[] _tenantIdDisplayOrder = ["tenant_id", "display_order"];
+    private static readonly string[] _tenantIdSectionKey = ["tenant_id", "section_key"];
+
+    /// <inheritdoc />
+    protected override void Up(MigrationBuilder migrationBuilder)
+    {
+        migrationBuilder.EnsureSchema(
+            name: "tenancy");
+
+        migrationBuilder.CreateTable(
+            name: "catalog_templates",
+            schema: "tenancy",
+            columns: table => new
+            {
+                template_id = table.Column<Guid>(type: "uuid", nullable: false),
+                name = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: false),
+                tier = table.Column<string>(type: "character varying(50)", maxLength: 50, nullable: false),
+                section_keys = table.Column<string>(type: "jsonb", nullable: false),
+                variants = table.Column<string>(type: "jsonb", nullable: false),
+                updated_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_catalog_templates", x => x.template_id);
+            });
+
+        migrationBuilder.CreateTable(
+            name: "inbox_message_consumers",
+            schema: "tenancy",
+            columns: table => new
+            {
+                inbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
+                name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_inbox_message_consumers", x => new { x.inbox_message_id, x.name });
+            });
+
+        migrationBuilder.CreateTable(
+            name: "inbox_messages",
+            schema: "tenancy",
+            columns: table => new
+            {
+                id = table.Column<Guid>(type: "uuid", nullable: false),
+                type = table.Column<string>(type: "text", nullable: false),
+                content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
+                occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                error = table.Column<string>(type: "text", nullable: true)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_inbox_messages", x => x.id);
+            });
+
+        migrationBuilder.CreateTable(
+            name: "outbox_message_consumers",
+            schema: "tenancy",
+            columns: table => new
+            {
+                outbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
+                name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_outbox_message_consumers", x => new { x.outbox_message_id, x.name });
+            });
+
+        migrationBuilder.CreateTable(
+            name: "outbox_messages",
+            schema: "tenancy",
+            columns: table => new
+            {
+                id = table.Column<Guid>(type: "uuid", nullable: false),
+                type = table.Column<string>(type: "text", nullable: false),
+                content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
+                occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                error = table.Column<string>(type: "text", nullable: true)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_outbox_messages", x => x.id);
+            });
+
+        migrationBuilder.CreateTable(
+            name: "tenants",
+            schema: "tenancy",
+            columns: table => new
+            {
+                id = table.Column<Guid>(type: "uuid", nullable: false),
+                owner_user_id = table.Column<Guid>(type: "uuid", nullable: false),
+                slug = table.Column<string>(type: "character varying(63)", maxLength: 63, nullable: false),
+                published = table.Column<bool>(type: "boolean", nullable: false),
+                template_id = table.Column<Guid>(type: "uuid", nullable: false),
+                theme_index = table.Column<int>(type: "integer", nullable: false),
+                created_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                updated_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_tenants", x => x.id);
+            });
+
+        migrationBuilder.CreateTable(
+            name: "tenant_section_entries",
+            schema: "tenancy",
+            columns: table => new
+            {
+                id = table.Column<Guid>(type: "uuid", nullable: false),
+                tenant_id = table.Column<Guid>(type: "uuid", nullable: false),
+                section_key = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false),
+                enabled = table.Column<bool>(type: "boolean", nullable: false),
+                display_order = table.Column<int>(type: "integer", nullable: false),
+                variant = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: true),
+                override_title = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: true),
+                override_subtitle = table.Column<string>(type: "character varying(200)", maxLength: 200, nullable: true)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_tenant_section_entries", x => x.id);
+                table.ForeignKey(
+                    name: "fk_tenant_section_entries_tenants_tenant_id",
+                    column: x => x.tenant_id,
+                    principalSchema: "tenancy",
+                    principalTable: "tenants",
+                    principalColumn: "id",
+                    onDelete: ReferentialAction.Cascade);
+            });
+
+        migrationBuilder.CreateIndex(
+            name: "ix_tenant_section_entries_tenant_id_display_order",
+            schema: "tenancy",
+            table: "tenant_section_entries",
+            columns: _tenantIdDisplayOrder);
+
+        migrationBuilder.CreateIndex(
+            name: "ix_tenant_section_entries_tenant_id_section_key",
+            schema: "tenancy",
+            table: "tenant_section_entries",
+            columns: _tenantIdSectionKey,
+            unique: true);
+
+        migrationBuilder.CreateIndex(
+            name: "ix_tenants_slug",
+            schema: "tenancy",
+            table: "tenants",
+            column: "slug",
+            unique: true);
+    }
+
     /// <inheritdoc />
-    public partial class InitialTenancy : Migration
+    protected override void Down(MigrationBuilder migrationBuilder)
     {
-        /// <inheritdoc />
-        protected override void Up(MigrationBuilder migrationBuilder)
-        {
-            migrationBuilder.EnsureSchema(
-                name: "tenancy");
-
-            migrationBuilder.CreateTable(
-                name: "catalog_templates",
-                schema: "tenancy",
-                columns: table => new
-                {
-                    template_id = table.Column<Guid>(type: "uuid", nullable: false),
-                    name = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: false),
-                    tier = table.Column<string>(type: "character varying(50)", maxLength: 50, nullable: false),
-                    section_keys = table.Column<string>(type: "jsonb", nullable: false),
-                    variants = table.Column<string>(type: "jsonb", nullable: false),
-                    updated_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
-                },
-                constraints: table =>
-                {
-                    table.PrimaryKey("pk_catalog_templates", x => x.template_id);
-                });
-
-            migrationBuilder.CreateTable(
-                name: "inbox_message_consumers",
-                schema: "tenancy",
-                columns: table => new
-                {
-                    inbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
-                    name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
-                },
-                constraints: table =>
-                {
-                    table.PrimaryKey("pk_inbox_message_consumers", x => new { x.inbox_message_id, x.name });
-                });
-
-            migrationBuilder.CreateTable(
-                name: "inbox_messages",
-                schema: "tenancy",
-                columns: table => new
-                {
-                    id = table.Column<Guid>(type: "uuid", nullable: false),
-                    type = table.Column<string>(type: "text", nullable: false),
-                    content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
-                    occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
-                    processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
-                    error = table.Column<string>(type: "text", nullable: true)
-                },
-                constraints: table =>
-                {
-                    table.PrimaryKey("pk_inbox_messages", x => x.id);
-                });
-
-            migrationBuilder.CreateTable(
-                name: "outbox_message_consumers",
-                schema: "tenancy",
-                columns: table => new
-                {
-                    outbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
-                    name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
-                },
-                constraints: table =>
-                {
-                    table.PrimaryKey("pk_outbox_message_consumers", x => new { x.outbox_message_id, x.name });
-                });
-
-            migrationBuilder.CreateTable(
-                name: "outbox_messages",
-                schema: "tenancy",
-                columns: table => new
-                {
-                    id = table.Column<Guid>(type: "uuid", nullable: false),
-                    type = table.Column<string>(type: "text", nullable: false),
-                    content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
-                    occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
-                    processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
-                    error = table.Column<string>(type: "text", nullable: true)
-                },
-                constraints: table =>
-                {
-                    table.PrimaryKey("pk_outbox_messages", x => x.id);
-                });
-
-            migrationBuilder.CreateTable(
-                name: "tenants",
-                schema: "tenancy",
-                columns: table => new
-                {
-                    id = table.Column<Guid>(type: "uuid", nullable: false),
-                    owner_user_id = table.Column<Guid>(type: "uuid", nullable: false),
-                    slug = table.Column<string>(type: "character varying(63)", maxLength: 63, nullable: false),
-                    published = table.Column<bool>(type: "boolean", nullable: false),
-                    template_id = table.Column<Guid>(type: "uuid", nullable: false),
-                    theme_index = table.Column<int>(type: "integer", nullable: false),
-                    created_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
-                    updated_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
-                },
-                constraints: table =>
-                {
-                    table.PrimaryKey("pk_tenants", x => x.id);
-                });
-
-            migrationBuilder.CreateTable(
-                name: "tenant_section_entries",
-                schema: "tenancy",
-                columns: table => new
-                {
-                    id = table.Column<Guid>(type: "uuid", nullable: false),
-                    tenant_id = table.Column<Guid>(type: "uuid", nullable: false),
-                    section_key = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false),
-                    enabled = table.Column<bool>(type: "boolean", nullable: false),
-                    display_order = table.Column<int>(type: "integer", nullable: false),
-                    variant = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: true),
-                    override_title = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: true),
-                    override_subtitle = table.Column<string>(type: "character varying(200)", maxLength: 200, nullable: true)
-                },
-                constraints: table =>
-                {
-                    table.PrimaryKey("pk_tenant_section_entries", x => x.id);
-                    table.ForeignKey(
-                        name: "fk_tenant_section_entries_tenants_tenant_id",
-                        column: x => x.tenant_id,
-                        principalSchema: "tenancy",
-                        principalTable: "tenants",
-                        principalColumn: "id",
-                        onDelete: ReferentialAction.Cascade);
-                });
-
-            migrationBuilder.CreateIndex(
-                name: "ix_tenant_section_entries_tenant_id_display_order",
-                schema: "tenancy",
-                table: "tenant_section_entries",
-                columns: new[] { "tenant_id", "display_order" });
-
-            migrationBuilder.CreateIndex(
-                name: "ix_tenant_section_entries_tenant_id_section_key",
-                schema: "tenancy",
-                table: "tenant_section_entries",
-                columns: new[] { "tenant_id", "section_key" },
-                unique: true);
-
-            migrationBuilder.CreateIndex(
-                name: "ix_tenants_slug",
-                schema: "tenancy",
-                table: "tenants",
-                column: "slug",
-                unique: true);
-        }
-
-        /// <inheritdoc />
-        protected override void Down(MigrationBuilder migrationBuilder)
-        {
-            migrationBuilder.DropTable(
-                name: "catalog_templates",
-                schema: "tenancy");
-
-            migrationBuilder.DropTable(
-                name: "inbox_message_consumers",
-                schema: "tenancy");
-
-            migrationBuilder.DropTable(
-                name: "inbox_messages",
-                schema: "tenancy");
-
-            migrationBuilder.DropTable(
-                name: "outbox_message_consumers",
-                schema: "tenancy");
-
-            migrationBuilder.DropTable(
-                name: "outbox_messages",
-                schema: "tenancy");
-
-            migrationBuilder.DropTable(
-                name: "tenant_section_entries",
-                schema: "tenancy");
-
-            migrationBuilder.DropTable(
-                name: "tenants",
-                schema: "tenancy");
-        }
+        migrationBuilder.DropTable(
+            name: "catalog_templates",
+            schema: "tenancy");
+
+        migrationBuilder.DropTable(
+            name: "inbox_message_consumers",
+            schema: "tenancy");
+
+        migrationBuilder.DropTable(
+            name: "inbox_messages",
+            schema: "tenancy");
+
+        migrationBuilder.DropTable(
+            name: "outbox_message_consumers",
+            schema: "tenancy");
+
+        migrationBuilder.DropTable(
+            name: "outbox_messages",
+            schema: "tenancy");
+
+        migrationBuilder.DropTable(
+            name: "tenant_section_entries",
+            schema: "tenancy");
+
+        migrationBuilder.DropTable(
+            name: "tenants",
+            schema: "tenancy");
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Subscriptions/ISubscriptionPlanService.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Subscriptions/ISubscriptionPlanService.cs
deleted file mode 100644
index 9e9e6a1..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Subscriptions/ISubscriptionPlanService.cs
+++ /dev/null
@@ -1,15 +0,0 @@
-namespace Eternelle.Modules.Weddings.Application.Abstractions.Subscriptions;
-
-/// <summary>
-/// Returns plan-tier limits for a given tenant.
-/// Implementations read from a configuration store or a cross-module service —
-/// never from the Weddings module's own tables.
-/// </summary>
-public interface ISubscriptionPlanService
-{
-    /// <summary>
-    /// Returns the maximum number of guest photos allowed for the tenant's current plan,
-    /// or <c>null</c> if the plan has no photo limit (unlimited).
-    /// </summary>
-    Task<int?> GetPhotoLimitAsync(Guid tenantId, CancellationToken cancellationToken);
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Subscriptions/SubscriptionOptions.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Subscriptions/SubscriptionOptions.cs
deleted file mode 100644
index 5911fed..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Subscriptions/SubscriptionOptions.cs
+++ /dev/null
@@ -1,16 +0,0 @@
-namespace Eternelle.Modules.Weddings.Application.Abstractions.Subscriptions;
-
-/// <summary>
-/// Configuration-backed subscription limits used by the stub implementation
-/// until the real Subscriptions module is available.
-/// </summary>
-public sealed class SubscriptionOptions
-{
-    public const string SectionName = "Weddings:Subscription";
-
-    /// <summary>
-    /// Maximum number of guest photos per wedding.
-    /// <c>null</c> means unlimited.
-    /// </summary>
-    public int? PhotoUploadLimit { get; init; }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs
index 09179c6..6ae898b 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs
@@ -29,10 +29,10 @@ public async Task<Result<IReadOnlyList<UploadSlotResponse>>> Handle(
         }
 
         // Check remaining capacity before generating slots.
-        // Limits are derived from the wedding's plan tier — no extra DB round-trip needed.
+        // Limits are derived from the Tenancy-provided upload limit — no extra DB round-trip needed.
         // A guest requesting 10 slots when only 3 remain gets a plan-limit error up front
         // rather than discovering it during registration.
-        int? planLimit = WeddingPlanLimits.PhotoLimit(wedding.Plan);
+        int? planLimit = wedding.GuestPhotoUploadLimit;
 
         if (planLimit is not null)
         {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
index e7ba503..49f36d9 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
@@ -30,9 +30,9 @@ public async Task<Result<IReadOnlyList<Guid>>> Handle(
                 WeddingErrors.NotFound(new WeddingId(Guid.Empty)));
         }
 
-        // Fast-path limit check — derived from the plan tier on the wedding entity,
+        // Fast-path limit check — derived from the Tenancy-provided upload limit on the wedding entity,
         // no additional DB or service call needed.
-        int? planLimit = WeddingPlanLimits.PhotoLimit(wedding.Plan);
+        int? planLimit = wedding.GuestPhotoUploadLimit;
 
         if (planLimit is not null)
         {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommand.cs
index 0c11760..b26bff7 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommand.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommand.cs
@@ -5,4 +5,5 @@ namespace Eternelle.Modules.Weddings.Application.Weddings.CreateWedding;
 public sealed record CreateWeddingCommand(
     Guid TenantId,
     DateOnly WeddingDate,
-    string? Hashtag) : ICommand<Guid>;
+    string? Hashtag,
+    int? UploadLimit) : ICommand<Guid>;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandHandler.cs
index 070e9e7..7b35d54 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandHandler.cs
@@ -35,6 +35,7 @@ public async Task<Result<Guid>> Handle(CreateWeddingCommand command, Cancellatio
             command.TenantId,
             command.WeddingDate,
             hashtag,
+            command.UploadLimit,
             dateTimeProvider.UtcNow);
 
         weddingRepository.Insert(wedding);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommand.cs
new file mode 100644
index 0000000..68d01b5
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Weddings.Application.Weddings.SetGuestPhotoUploadLimit;
+
+public sealed record SetGuestPhotoUploadLimitCommand(Guid TenantId, int? UploadLimit) : ICommand;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs
new file mode 100644
index 0000000..abf2b57
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs
@@ -0,0 +1,28 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Weddings.Application.Abstractions.Data;
+using Eternelle.Modules.Weddings.Domain.Weddings;
+
+namespace Eternelle.Modules.Weddings.Application.Weddings.SetGuestPhotoUploadLimit;
+
+internal sealed class SetGuestPhotoUploadLimitCommandHandler(
+    IWeddingRepository weddingRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<SetGuestPhotoUploadLimitCommand>
+{
+    public async Task<Result> Handle(SetGuestPhotoUploadLimitCommand command, CancellationToken cancellationToken)
+    {
+        Wedding? wedding = await weddingRepository.GetByTenantIdAsync(command.TenantId, cancellationToken);
+        if (wedding is null)
+        {
+            // Wedding may not exist yet if events arrive out of order — treat as no-op.
+            return Result.Success();
+        }
+
+        wedding.SetGuestPhotoUploadLimit(command.UploadLimit, dateTimeProvider.UtcNow);
+        weddingRepository.Update(wedding);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
index efcaabb..4c631a4 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
@@ -54,11 +54,11 @@ private Wedding()
     public Hashtag? Hashtag { get; private set; }
 
     /// <summary>
-    /// Subscription tier for this wedding.
-    /// Determines guest photo limits and feature access.
-    /// Defaults to <see cref="WeddingPlan.Free"/> at creation.
+    /// Guest-photo upload cap for this wedding. Null = unlimited.
+    /// Derived in the Tenancy module from the selected GuestUploads section variant
+    /// and kept in sync via TenantUploadLimitChanged integration events.
     /// </summary>
-    public WeddingPlan Plan { get; private set; }
+    public int? GuestPhotoUploadLimit { get; private set; }
 
     public DateTime CreatedAtUtc { get; private set; }
 
@@ -81,6 +81,7 @@ public static Wedding Create(
         Guid tenantId,
         DateOnly weddingDate,
         Hashtag? hashtag,
+        int? uploadLimit,
         DateTime utcNow)
     {
         var wedding = new Wedding
@@ -90,7 +91,7 @@ public static Wedding Create(
             SchemaVersion = 1,
             WeddingDate = weddingDate,
             Hashtag = hashtag,
-            Plan = WeddingPlan.Free,
+            GuestPhotoUploadLimit = uploadLimit,
             CreatedAtUtc = utcNow,
             UpdatedAtUtc = utcNow
         };
@@ -116,25 +117,17 @@ public Result UpdateDetails(
         return Result.Success();
     }
 
-    // ─── Plan management ─────────────────────────────────────────────────────────
+    // ─── Upload limit management ──────────────────────────────────────────────────
 
-    /// <summary>
-    /// Upgrades (or downgrades) the wedding to a new subscription plan.
-    /// Called from the Subscriptions module via an integration event handler —
-    /// never directly by the user.
-    /// </summary>
-    public void ChangePlan(WeddingPlan plan, DateTime utcNow)
+    public void SetGuestPhotoUploadLimit(int? uploadLimit, DateTime utcNow)
     {
-        if (plan == Plan)
+        if (GuestPhotoUploadLimit == uploadLimit)
         {
             return;
         }
 
-        WeddingPlan previousPlan = Plan;
-        Plan = plan;
+        GuestPhotoUploadLimit = uploadLimit;
         UpdatedAtUtc = utcNow;
-
-        Raise(new WeddingPlanChangedDomainEvent(Id, previousPlan, plan));
     }
 
     // ─── Partner management ─────────────────────────────────────────────────────
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlan.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlan.cs
deleted file mode 100644
index 809f56f..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlan.cs
+++ /dev/null
@@ -1,23 +0,0 @@
-namespace Eternelle.Modules.Weddings.Domain.Weddings;
-
-/// <summary>
-/// Subscription tier for a wedding profile.
-/// Stored as an integer column in the database.
-/// </summary>
-public enum WeddingPlan
-{
-    /// <summary>
-    /// Free tier — up to 50 guest photos, no bulk download.
-    /// </summary>
-    Free = 0,
-
-    /// <summary>
-    /// Pro tier — up to 250 guest photos, no bulk download.
-    /// </summary>
-    Pro = 1,
-
-    /// <summary>
-    /// Plus tier — unlimited guest photos, bulk download enabled.
-    /// </summary>
-    Plus = 2
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlanChangedDomainEvent.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlanChangedDomainEvent.cs
deleted file mode 100644
index 60dcd93..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlanChangedDomainEvent.cs
+++ /dev/null
@@ -1,12 +0,0 @@
-using Eternelle.Common.Domain;
-
-namespace Eternelle.Modules.Weddings.Domain.Weddings;
-
-public sealed class WeddingPlanChangedDomainEvent(WeddingId weddingId, WeddingPlan previousPlan, WeddingPlan newPlan) : DomainEvent
-{
-    public WeddingId WeddingId { get; init; } = weddingId;
-
-    public WeddingPlan PreviousPlan { get; init; } = previousPlan;
-
-    public WeddingPlan NewPlan { get; init; } = newPlan;
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlanLimits.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlanLimits.cs
deleted file mode 100644
index b911f08..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingPlanLimits.cs
+++ /dev/null
@@ -1,38 +0,0 @@
-namespace Eternelle.Modules.Weddings.Domain.Weddings;
-
-/// <summary>
-/// Canonical limits for each <see cref="WeddingPlan"/> tier.
-/// All limit constants live here — no database rows, no config keys.
-/// To change a wedding's plan, call <see cref="Wedding.ChangePlan"/> on the aggregate.
-/// Plan upgrades are driven by the Subscriptions module via integration events —
-/// limits here are never adjusted via database migrations or configuration values.
-/// </summary>
-public static class WeddingPlanLimits
-{
-    public const int FreePhotoLimit = 50;
-    public const int ProPhotoLimit = 250;
-    // Plus has no photo limit.
-
-    /// <summary>
-    /// Maximum number of guest photos for the given plan,
-    /// or <c>null</c> if the plan has no limit (unlimited).
-    /// </summary>
-    public static int? PhotoLimit(WeddingPlan plan) => plan switch
-    {
-        WeddingPlan.Free => FreePhotoLimit,
-        WeddingPlan.Pro  => ProPhotoLimit,
-        WeddingPlan.Plus => null,
-        _ => throw new ArgumentOutOfRangeException(nameof(plan), plan, "Unhandled wedding plan.")
-    };
-
-    /// <summary>
-    /// Whether the plan allows bulk ZIP download of all guest photos.
-    /// </summary>
-    public static bool BulkDownloadEnabled(WeddingPlan plan) => plan switch
-    {
-        WeddingPlan.Free => false,
-        WeddingPlan.Pro  => false,
-        WeddingPlan.Plus => true,
-        _ => throw new ArgumentOutOfRangeException(nameof(plan), plan, "Unhandled wedding plan.")
-    };
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260528105138_RemoveWeddingPlanAddUploadLimit.Designer.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260528105138_RemoveWeddingPlanAddUploadLimit.Designer.cs
new file mode 100644
index 0000000..6b893ff
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260528105138_RemoveWeddingPlanAddUploadLimit.Designer.cs
@@ -0,0 +1,933 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Weddings.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Weddings.Infrastructure.Database.Migrations
+{
+    [DbContext(typeof(WeddingsDbContext))]
+    [Migration("20260528105138_RemoveWeddingPlanAddUploadLimit")]
+    partial class RemoveWeddingPlanAddUploadLimit
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("wedding")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.CeremonyActs.CeremonyAct", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<TimeOnly?>("ActTime")
+                        .HasColumnType("time without time zone")
+                        .HasColumnName("act_time");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("description");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("Icon")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("icon");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_ceremony_acts");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_ceremony_acts_wedding_id_display_order");
+
+                    b.ToTable("ceremony_acts", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.DressCodeConfigs.DressCodeConfig", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Description")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("description");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_dress_code_configs");
+
+                    b.HasIndex("WeddingId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_dress_code_configs_wedding_id");
+
+                    b.ToTable("dress_code_configs", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.EntourageGroups.EntourageGroup", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<int?>("GroupType")
+                        .HasColumnType("integer")
+                        .HasColumnName("group_type");
+
+                    b.Property<string>("Label")
+                        .IsRequired()
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("label");
+
+                    b.Property<int>("RenderAs")
+                        .HasColumnType("integer")
+                        .HasColumnName("render_as");
+
+                    b.Property<string>("Subtitle")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("subtitle");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_entourage_groups");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_entourage_groups_wedding_id_display_order");
+
+                    b.ToTable("entourage_groups", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.GalleryImages.GalleryImage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("AltText")
+                        .IsRequired()
+                        .HasMaxLength(300)
+                        .HasColumnType("character varying(300)")
+                        .HasColumnName("alt_text");
+
+                    b.Property<string>("Caption")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("caption");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at_utc");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<int?>("HeightPx")
+                        .HasColumnType("integer")
+                        .HasColumnName("height_px");
+
+                    b.Property<string>("SrcUrl")
+                        .IsRequired()
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("src_url");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.Property<int?>("WidthPx")
+                        .HasColumnType("integer")
+                        .HasColumnName("width_px");
+
+                    b.HasKey("Id")
+                        .HasName("pk_gallery_images");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_gallery_images_wedding_id_display_order");
+
+                    b.ToTable("gallery_images", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.GiftOptions.GiftOption", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("AccountName")
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("account_name");
+
+                    b.Property<string>("AccountNumber")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("account_number");
+
+                    b.Property<string>("AccountType")
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("account_type");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("description");
+
+                    b.Property<int>("DisplayMode")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_mode");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("ImageUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("image_url");
+
+                    b.Property<string>("LinkUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("link_url");
+
+                    b.Property<string>("QrImageUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("qr_image_url");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("title");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_gift_options");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_gift_options_wedding_id_display_order");
+
+                    b.ToTable("gift_options", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.GuestPhotos.GuestPhoto", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<int?>("HeightPx")
+                        .HasColumnType("integer")
+                        .HasColumnName("height_px");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("reviewed_at");
+
+                    b.Property<string>("SrcUrl")
+                        .IsRequired()
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("src_url");
+
+                    b.Property<int>("Status")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasDefaultValue(0)
+                        .HasColumnName("status");
+
+                    b.Property<string>("ThumbnailUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("thumbnail_url");
+
+                    b.Property<DateTime>("UploadedAt")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("uploaded_at");
+
+                    b.Property<string>("UploaderName")
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("uploader_name");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.Property<int?>("WidthPx")
+                        .HasColumnType("integer")
+                        .HasColumnName("width_px");
+
+                    b.HasKey("Id")
+                        .HasName("pk_guest_photos");
+
+                    b.HasIndex("WeddingId", "UploadedAt")
+                        .IsDescending(false, true)
+                        .HasDatabaseName("idx_guest_photos_wedding_uploaded");
+
+                    b.HasIndex("WeddingId", "Status", "UploadedAt")
+                        .IsDescending(false, false, true)
+                        .HasDatabaseName("idx_guest_photos_wedding_status_uploaded");
+
+                    b.ToTable("guest_photos", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.Reminders.Reminder", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Body")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("body");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("Icon")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("icon");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("title");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_reminders");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_reminders_wedding_id_display_order");
+
+                    b.ToTable("reminders", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.StoryMoments.StoryMoment", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Description")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("description");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("ImageUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("image_url");
+
+                    b.Property<DateOnly?>("StoryDate")
+                        .HasColumnType("date")
+                        .HasColumnName("story_date");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("title");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_story_moments");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_story_moments_wedding_id_display_order_id");
+
+                    b.ToTable("story_moments", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.VendorCredits.VendorCredit", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("ImageUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("image_url");
+
+                    b.Property<string>("InstagramHandle")
+                        .HasMaxLength(30)
+                        .HasColumnType("character varying(30)")
+                        .HasColumnName("instagram_handle");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("Role")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("role");
+
+                    b.Property<string>("WebsiteUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("website_url");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_vendor_credits");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_vendor_credits_wedding_id_display_order");
+
+                    b.ToTable("vendor_credits", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.Weddings.Wedding", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at");
+
+                    b.Property<int?>("GuestPhotoUploadLimit")
+                        .HasColumnType("integer")
+                        .HasColumnName("guest_photo_upload_limit");
+
+                    b.Property<string>("Hashtag")
+                        .HasColumnType("text")
+                        .HasColumnName("hashtag");
+
+                    b.Property<int>("SchemaVersion")
+                        .HasColumnType("integer")
+                        .HasColumnName("schema_version");
+
+                    b.Property<Guid>("TenantId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("tenant_id");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at");
+
+                    b.Property<DateOnly>("WeddingDate")
+                        .HasColumnType("date")
+                        .HasColumnName("wedding_date");
+
+                    b.HasKey("Id")
+                        .HasName("pk_profiles");
+
+                    b.HasIndex("TenantId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_profiles_tenant_id");
+
+                    b.ToTable("profiles", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.DressCodeConfigs.DressCodeConfig", b =>
+                {
+                    b.OwnsMany("Eternelle.Modules.Weddings.Domain.DressCodeConfigs.DressCodeColor", "Colors", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<string>("ColorHex")
+                                .IsRequired()
+                                .HasMaxLength(9)
+                                .HasColumnType("character varying(9)")
+                                .HasColumnName("color_hex");
+
+                            b1.Property<string>("ColorName")
+                                .IsRequired()
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("color_name");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<Guid>("DressCodeConfigId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("dress_code_config_id");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_dress_code_colors");
+
+                            b1.HasIndex("DressCodeConfigId", "DisplayOrder", "Id")
+                                .HasDatabaseName("ix_dress_code_colors_dress_code_config_id_display_order");
+
+                            b1.ToTable("dress_code_colors", "wedding", t =>
+                                {
+                                    t.HasCheckConstraint("ck_dress_code_colors_color_hex", "color_hex ~ '^#[0-9A-Fa-f]{3,8}$'");
+                                });
+
+                            b1.WithOwner()
+                                .HasForeignKey("DressCodeConfigId")
+                                .HasConstraintName("fk_dress_code_colors_dress_code_configs_dress_code_config_id");
+                        });
+
+                    b.OwnsMany("Eternelle.Modules.Weddings.Domain.DressCodeConfigs.DressCodeImage", "Images", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<Guid>("DressCodeConfigId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("dress_code_config_id");
+
+                            b1.Property<string>("ImageUrl")
+                                .IsRequired()
+                                .HasMaxLength(2048)
+                                .HasColumnType("character varying(2048)")
+                                .HasColumnName("image_url");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_dress_code_images");
+
+                            b1.HasIndex("DressCodeConfigId", "DisplayOrder", "Id")
+                                .HasDatabaseName("ix_dress_code_images_dress_code_config_id_display_order");
+
+                            b1.ToTable("dress_code_images", "wedding");
+
+                            b1.WithOwner()
+                                .HasForeignKey("DressCodeConfigId")
+                                .HasConstraintName("fk_dress_code_images_dress_code_configs_dress_code_config_id");
+                        });
+
+                    b.Navigation("Colors");
+
+                    b.Navigation("Images");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.EntourageGroups.EntourageGroup", b =>
+                {
+                    b.OwnsMany("Eternelle.Modules.Weddings.Domain.EntourageGroups.EntourageCouple", "Couples", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<Guid>("GroupId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("group_id");
+
+                            b1.Property<Guid>("MemberAId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("member_a_id");
+
+                            b1.Property<Guid>("MemberBId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("member_b_id");
+
+                            b1.Property<string>("Note")
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("note");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_entourage_couples");
+
+                            b1.HasIndex("MemberAId")
+                                .HasDatabaseName("ix_entourage_couples_member_a");
+
+                            b1.HasIndex("MemberBId")
+                                .HasDatabaseName("ix_entourage_couples_member_b");
+
+                            b1.HasIndex("GroupId", "MemberAId", "MemberBId")
+                                .IsUnique()
+                                .HasDatabaseName("ix_entourage_couples_group_member_pair");
+
+                            b1.ToTable("entourage_couples", "wedding", t =>
+                                {
+                                    t.HasCheckConstraint("ck_entourage_couples_member_order", "member_a_id < member_b_id");
+                                });
+
+                            b1.WithOwner()
+                                .HasForeignKey("GroupId")
+                                .HasConstraintName("fk_entourage_couples_entourage_groups_group_id");
+                        });
+
+                    b.OwnsMany("Eternelle.Modules.Weddings.Domain.EntourageGroups.EntourageMember", "Members", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<Guid>("GroupId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("group_id");
+
+                            b1.Property<string>("ImageUrl")
+                                .HasMaxLength(2048)
+                                .HasColumnType("character varying(2048)")
+                                .HasColumnName("image_url");
+
+                            b1.Property<string>("Message")
+                                .HasMaxLength(1000)
+                                .HasColumnType("character varying(1000)")
+                                .HasColumnName("message");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(150)
+                                .HasColumnType("character varying(150)")
+                                .HasColumnName("name");
+
+                            b1.Property<string>("Note")
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("note");
+
+                            b1.Property<string>("Role")
+                                .IsRequired()
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("role");
+
+                            b1.Property<int?>("Seed")
+                                .HasColumnType("integer")
+                                .HasColumnName("seed");
+
+                            b1.Property<Guid>("WeddingId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("wedding_id");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_entourage_members");
+
+                            b1.HasIndex("GroupId")
+                                .HasDatabaseName("ix_entourage_members_group_id");
+
+                            b1.HasIndex("WeddingId")
+                                .HasDatabaseName("ix_entourage_members_wedding_id");
+
+                            b1.HasIndex("GroupId", "Id")
+                                .IsUnique()
+                                .HasDatabaseName("uq_entourage_members_group_id_id");
+
+                            b1.ToTable("entourage_members", "wedding");
+
+                            b1.WithOwner()
+                                .HasForeignKey("GroupId")
+                                .HasConstraintName("fk_entourage_members_entourage_groups_group_id");
+                        });
+
+                    b.Navigation("Couples");
+
+                    b.Navigation("Members");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.Weddings.Wedding", b =>
+                {
+                    b.OwnsMany("Eternelle.Modules.Weddings.Domain.Weddings.Partner", "Partners", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<string>("Bio")
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("bio");
+
+                            b1.Property<string>("FirstName")
+                                .IsRequired()
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("first_name");
+
+                            b1.Property<string>("ImageUrl")
+                                .HasMaxLength(2048)
+                                .HasColumnType("character varying(2048)")
+                                .HasColumnName("image_url");
+
+                            b1.Property<string>("LastName")
+                                .IsRequired()
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("last_name");
+
+                            b1.Property<int>("PartnerNumber")
+                                .HasColumnType("integer")
+                                .HasColumnName("partner_number");
+
+                            b1.Property<Guid>("WeddingId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("wedding_id");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_partners");
+
+                            b1.HasIndex("WeddingId", "PartnerNumber")
+                                .IsUnique()
+                                .HasDatabaseName("ix_partners_wedding_id_partner_number");
+
+                            b1.ToTable("partners", "wedding");
+
+                            b1.WithOwner()
+                                .HasForeignKey("WeddingId")
+                                .HasConstraintName("fk_partners_profiles_wedding_id");
+                        });
+
+                    b.OwnsOne("Eternelle.Modules.Weddings.Domain.Weddings.SnapShareConfig", "SnapShare", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<string>("CallToAction")
+                                .HasMaxLength(200)
+                                .HasColumnType("character varying(200)")
+                                .HasColumnName("cta_text");
+
+                            b1.Property<bool>("Enabled")
+                                .HasColumnType("boolean")
+                                .HasColumnName("enabled");
+
+                            b1.Property<string>("InstagramHandle")
+                                .HasMaxLength(30)
+                                .HasColumnType("character varying(30)")
+                                .HasColumnName("instagram_handle");
+
+                            b1.Property<int>("ModerationMode")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("integer")
+                                .HasDefaultValue(0)
+                                .HasColumnName("moderation_mode");
+
+                            b1.Property<Guid?>("UploadToken")
+                                .HasColumnType("uuid")
+                                .HasColumnName("upload_token");
+
+                            b1.Property<bool>("UploaderNameRequired")
+                                .ValueGeneratedOnAdd()
+                                .HasColumnType("boolean")
+                                .HasDefaultValue(false)
+                                .HasColumnName("uploader_name_required");
+
+                            b1.Property<Guid>("WeddingId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("wedding_id");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_snap_share_configs");
+
+                            b1.HasIndex("UploadToken")
+                                .IsUnique()
+                                .HasDatabaseName("ix_snap_share_configs_upload_token")
+                                .HasFilter("upload_token IS NOT NULL");
+
+                            b1.HasIndex("WeddingId")
+                                .IsUnique()
+                                .HasDatabaseName("ix_snap_share_configs_wedding_id");
+
+                            b1.ToTable("snap_share_configs", "wedding");
+
+                            b1.WithOwner()
+                                .HasForeignKey("WeddingId")
+                                .HasConstraintName("fk_snap_share_configs_profiles_id");
+                        });
+
+                    b.Navigation("Partners");
+
+                    b.Navigation("SnapShare");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260528105138_RemoveWeddingPlanAddUploadLimit.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260528105138_RemoveWeddingPlanAddUploadLimit.cs
new file mode 100644
index 0000000..eaba2e5
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260528105138_RemoveWeddingPlanAddUploadLimit.cs
@@ -0,0 +1,42 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Eternelle.Modules.Weddings.Infrastructure.Database.Migrations;
+
+/// <inheritdoc />
+public partial class RemoveWeddingPlanAddUploadLimit : Migration
+{
+    /// <inheritdoc />
+    protected override void Up(MigrationBuilder migrationBuilder)
+    {
+        migrationBuilder.DropColumn(
+            name: "plan",
+            schema: "wedding",
+            table: "profiles");
+
+        migrationBuilder.AddColumn<int>(
+            name: "guest_photo_upload_limit",
+            schema: "wedding",
+            table: "profiles",
+            type: "integer",
+            nullable: true);
+    }
+
+    /// <inheritdoc />
+    protected override void Down(MigrationBuilder migrationBuilder)
+    {
+        migrationBuilder.DropColumn(
+            name: "guest_photo_upload_limit",
+            schema: "wedding",
+            table: "profiles");
+
+        migrationBuilder.AddColumn<int>(
+            name: "plan",
+            schema: "wedding",
+            table: "profiles",
+            type: "integer",
+            nullable: false,
+            defaultValue: 0);
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/WeddingsDbContextModelSnapshot.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/WeddingsDbContextModelSnapshot.cs
index 6b69378..aff92e7 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/WeddingsDbContextModelSnapshot.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/WeddingsDbContextModelSnapshot.cs
@@ -567,16 +567,14 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .HasColumnType("timestamp with time zone")
                         .HasColumnName("created_at");
 
+                    b.Property<int?>("GuestPhotoUploadLimit")
+                        .HasColumnType("integer")
+                        .HasColumnName("guest_photo_upload_limit");
+
                     b.Property<string>("Hashtag")
                         .HasColumnType("text")
                         .HasColumnName("hashtag");
 
-                    b.Property<int>("Plan")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("integer")
-                        .HasDefaultValue(0)
-                        .HasColumnName("plan");
-
                     b.Property<int>("SchemaVersion")
                         .HasColumnType("integer")
                         .HasColumnName("schema_version");
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Eternelle.Modules.Weddings.Infrastructure.csproj b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Eternelle.Modules.Weddings.Infrastructure.csproj
index 8693736..3e94648 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Eternelle.Modules.Weddings.Infrastructure.csproj
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Eternelle.Modules.Weddings.Infrastructure.csproj
@@ -4,6 +4,7 @@
     <ProjectReference Include="..\Eternelle.Modules.Weddings.Application\Eternelle.Modules.Weddings.Application.csproj" />
     <ProjectReference Include="..\Eternelle.Modules.Weddings.Presentation\Eternelle.Modules.Weddings.Presentation.csproj" />
     <ProjectReference Include="..\..\..\Common\Eternelle.Common.Infrastructure\Eternelle.Common.Infrastructure.csproj" />
+    <ProjectReference Include="..\..\Tenancy\Eternelle.Modules.Tenancy.IntegrationEvents\Eternelle.Modules.Tenancy.IntegrationEvents.csproj" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IntegrationEventConsumer.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IntegrationEventConsumer.cs
new file mode 100644
index 0000000..2c7f071
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IntegrationEventConsumer.cs
@@ -0,0 +1,39 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using MassTransit;
+using Newtonsoft.Json;
+
+namespace Eternelle.Modules.Weddings.Infrastructure.Inbox;
+
+internal sealed class IntegrationEventConsumer<TIntegrationEvent>(IDbConnectionFactory dbConnectionFactory)
+    : IConsumer<TIntegrationEvent>
+    where TIntegrationEvent : IntegrationEvent
+{
+    public async Task Consume(ConsumeContext<TIntegrationEvent> context)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        TIntegrationEvent integrationEvent = context.Message;
+
+        var inboxMessage = new InboxMessage
+        {
+            Id = integrationEvent.Id,
+            Type = integrationEvent.GetType().Name,
+            Content = JsonConvert.SerializeObject(integrationEvent, SerializerSettings.Instance),
+            OccurredOnUtc = integrationEvent.OccurredOnUtc
+        };
+
+        const string sql =
+            """
+            INSERT INTO wedding.inbox_messages(id, type, content, occurred_on_utc)
+            VALUES (@Id, @Type, @Content::json, @OccurredOnUtc)
+            ON CONFLICT (id) DO NOTHING
+            """;
+
+        await connection.ExecuteAsync(sql, inboxMessage);
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Subscriptions/StubSubscriptionPlanService.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Subscriptions/StubSubscriptionPlanService.cs
deleted file mode 100644
index c65dcfa..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Subscriptions/StubSubscriptionPlanService.cs
+++ /dev/null
@@ -1,16 +0,0 @@
-using Eternelle.Modules.Weddings.Application.Abstractions.Subscriptions;
-using Microsoft.Extensions.Options;
-
-namespace Eternelle.Modules.Weddings.Infrastructure.Subscriptions;
-
-/// <summary>
-/// Stub implementation — reads limits from <see cref="SubscriptionOptions"/> until the
-/// Subscriptions module is wired up and a real cross-module service is available.
-/// </summary>
-internal sealed class StubSubscriptionPlanService(IOptions<SubscriptionOptions> options) : ISubscriptionPlanService
-{
-    public Task<int?> GetPhotoLimitAsync(Guid tenantId, CancellationToken cancellationToken)
-    {
-        return Task.FromResult(options.Value.PhotoUploadLimit);
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
index 18c2711..d980e21 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
@@ -30,15 +30,7 @@ public void Configure(EntityTypeBuilder<Wedding> builder)
                 v => v != null ? Hashtag.FromPersistence(v) : null)
             .HasColumnName("hashtag");
 
-        // Plan tier stored as a smallint (0=Free, 1=Pro, 2=Plus).
-        // HasConversion<int>() maps the enum to its underlying integer value.
-        // HasDefaultValue must use the CLR enum value, not the raw int — EF Core
-        // applies the converter before comparing, so passing 0 here throws at design time.
-        // HasColumnName is omitted — UseSnakeCaseNamingConvention already maps Plan → "plan".
-        builder.Property(w => w.Plan)
-            .HasConversion<int>()
-            .IsRequired()
-            .HasDefaultValue(WeddingPlan.Free);
+        builder.Property(w => w.GuestPhotoUploadLimit).HasColumnName("guest_photo_upload_limit");
 
         // EF Core snake_cases "CreatedAtUtc" → "created_at_utc".
         // The actual DB column is "created_at" — map explicitly.
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs
index 63f6cc1..2b22df6 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs
@@ -2,6 +2,7 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Infrastructure.Outbox;
 using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Modules.Tenancy.IntegrationEvents;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Application.Abstractions.Storage;
 using Eternelle.Modules.Weddings.Domain.CeremonyActs;
@@ -54,6 +55,12 @@ public static IServiceCollection AddWeddingsModule(
         return services;
     }
 
+    public static void ConfigureConsumers(MassTransit.IRegistrationConfigurator configurator)
+    {
+        configurator.AddConsumer<IntegrationEventConsumer<TenantProvisionedIntegrationEvent>>();
+        configurator.AddConsumer<IntegrationEventConsumer<TenantUploadLimitChangedIntegrationEvent>>();
+    }
+
     private static void AddInfrastructure(this IServiceCollection services, IConfiguration configuration)
     {
         services.AddDbContext<WeddingsDbContext>((sp, options) =>
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Eternelle.Modules.Weddings.Presentation.csproj b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Eternelle.Modules.Weddings.Presentation.csproj
index a4a4163..7cdcb71 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Eternelle.Modules.Weddings.Presentation.csproj
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Eternelle.Modules.Weddings.Presentation.csproj
@@ -3,6 +3,7 @@
   <ItemGroup>
     <ProjectReference Include="..\Eternelle.Modules.Weddings.Application\Eternelle.Modules.Weddings.Application.csproj" />
     <ProjectReference Include="..\..\..\Common\Eternelle.Common.Presentation\Eternelle.Common.Presentation.csproj" />
+    <ProjectReference Include="..\..\Tenancy\Eternelle.Modules.Tenancy.IntegrationEvents\Eternelle.Modules.Tenancy.IntegrationEvents.csproj" />
   </ItemGroup>
 
 </Project>
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantProvisionedIntegrationEventHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantProvisionedIntegrationEventHandler.cs
new file mode 100644
index 0000000..790d996
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantProvisionedIntegrationEventHandler.cs
@@ -0,0 +1,22 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Modules.Tenancy.IntegrationEvents;
+using Eternelle.Modules.Weddings.Application.Weddings.CreateWedding;
+using MediatR;
+
+namespace Eternelle.Modules.Weddings.Presentation.Tenancy;
+
+internal sealed class TenantProvisionedIntegrationEventHandler(ISender sender)
+    : IntegrationEventHandler<TenantProvisionedIntegrationEvent>
+{
+    public override async Task Handle(
+        TenantProvisionedIntegrationEvent integrationEvent, CancellationToken cancellationToken = default)
+    {
+        await sender.Send(
+            new CreateWeddingCommand(
+                integrationEvent.TenantId,
+                integrationEvent.WeddingDate,
+                Hashtag: null,
+                integrationEvent.UploadLimit),
+            cancellationToken);
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs
new file mode 100644
index 0000000..c9a1907
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs
@@ -0,0 +1,18 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Modules.Tenancy.IntegrationEvents;
+using Eternelle.Modules.Weddings.Application.Weddings.SetGuestPhotoUploadLimit;
+using MediatR;
+
+namespace Eternelle.Modules.Weddings.Presentation.Tenancy;
+
+internal sealed class TenantUploadLimitChangedIntegrationEventHandler(ISender sender)
+    : IntegrationEventHandler<TenantUploadLimitChangedIntegrationEvent>
+{
+    public override async Task Handle(
+        TenantUploadLimitChangedIntegrationEvent integrationEvent, CancellationToken cancellationToken = default)
+    {
+        await sender.Send(
+            new SetGuestPhotoUploadLimitCommand(integrationEvent.TenantId, integrationEvent.UploadLimit),
+            cancellationToken);
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/CreateWeddingEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/CreateWeddingEndpoint.cs
deleted file mode 100644
index cbea066..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/CreateWeddingEndpoint.cs
+++ /dev/null
@@ -1,33 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.Weddings.CreateWedding;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.Weddings;
-
-internal sealed class CreateWeddingEndpoint : IEndpoint
-{
-    internal sealed record Request(Guid TenantId, DateOnly WeddingDate, string? Hashtag);
-
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapPost("weddings", async (Request request, ISender sender, CancellationToken ct) =>
-        {
-            var command = new CreateWeddingCommand(
-                request.TenantId,
-                request.WeddingDate,
-                request.Hashtag);
-
-            Result<Guid> result = await sender.Send(command, ct);
-
-            return result.Match(
-                id => Results.Created($"/weddings/{id}", new { id }),
-                ApiResults.Problem);
-        })
-        .WithTags(Tags.Weddings);
-    }
-}

From f67949ab63f61a8e4cbbcf1a7f11704a4baf9943 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 19:14:43 +0800
Subject: [PATCH 059/155] Eternelle-186 Seed tenant:edit and tenant:publish
 permissions

---
 ...528110749_AddTenantPermissions.Designer.cs | 334 ++++++++++++++++++
 .../20260528110749_AddTenantPermissions.cs    |  36 ++
 2 files changed, 370 insertions(+)
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260528110749_AddTenantPermissions.Designer.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260528110749_AddTenantPermissions.cs

diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260528110749_AddTenantPermissions.Designer.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260528110749_AddTenantPermissions.Designer.cs
new file mode 100644
index 0000000..95b91d5
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260528110749_AddTenantPermissions.Designer.cs
@@ -0,0 +1,334 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Users.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Users.Infrastructure.Database.Migrations
+{
+    [DbContext(typeof(UsersDbContext))]
+    [Migration("20260528110749_AddTenantPermissions")]
+    partial class AddTenantPermissions
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("users")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.Permission", b =>
+                {
+                    b.Property<string>("Code")
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("code");
+
+                    b.HasKey("Code")
+                        .HasName("pk_permissions");
+
+                    b.ToTable("permissions", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            Code = "users:read"
+                        },
+                        new
+                        {
+                            Code = "users:update"
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.Role", b =>
+                {
+                    b.Property<string>("Name")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Name")
+                        .HasName("pk_roles");
+
+                    b.ToTable("roles", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            Name = "Admin"
+                        },
+                        new
+                        {
+                            Name = "Couple"
+                        },
+                        new
+                        {
+                            Name = "Guest"
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.User", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasMaxLength(300)
+                        .HasColumnType("character varying(300)")
+                        .HasColumnName("email");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("first_name");
+
+                    b.Property<string>("IdentityId")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("identity_id");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("last_name");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasMaxLength(16)
+                        .HasColumnType("character varying(16)")
+                        .HasColumnName("phone_number");
+
+                    b.HasKey("Id")
+                        .HasName("pk_users");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasDatabaseName("ix_users_email");
+
+                    b.HasIndex("IdentityId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_users_identity_id");
+
+                    b.ToTable("users", "users");
+                });
+
+            modelBuilder.Entity("PermissionRole", b =>
+                {
+                    b.Property<string>("PermissionCode")
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("permission_code");
+
+                    b.Property<string>("RoleName")
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("role_name");
+
+                    b.HasKey("PermissionCode", "RoleName")
+                        .HasName("pk_role_permissions");
+
+                    b.HasIndex("RoleName")
+                        .HasDatabaseName("ix_role_permissions_role_name");
+
+                    b.ToTable("role_permissions", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Couple"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:update",
+                            RoleName = "Couple"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Admin"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:update",
+                            RoleName = "Admin"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Guest"
+                        });
+                });
+
+            modelBuilder.Entity("RoleUser", b =>
+                {
+                    b.Property<string>("RolesName")
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("role_name");
+
+                    b.Property<Guid>("UserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("user_id");
+
+                    b.HasKey("RolesName", "UserId")
+                        .HasName("pk_user_roles");
+
+                    b.HasIndex("UserId")
+                        .HasDatabaseName("ix_user_roles_user_id");
+
+                    b.ToTable("user_roles", "users");
+                });
+
+            modelBuilder.Entity("PermissionRole", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Permission", null)
+                        .WithMany()
+                        .HasForeignKey("PermissionCode")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_role_permissions_permissions_permission_code");
+
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleName")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_role_permissions_roles_role_name");
+                });
+
+            modelBuilder.Entity("RoleUser", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RolesName")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_roles_roles_roles_name");
+
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.User", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_roles_users_user_id");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260528110749_AddTenantPermissions.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260528110749_AddTenantPermissions.cs
new file mode 100644
index 0000000..3119292
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260528110749_AddTenantPermissions.cs
@@ -0,0 +1,36 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Eternelle.Modules.Users.Infrastructure.Database.Migrations;
+
+/// <inheritdoc />
+public partial class AddTenantPermissions : Migration
+{
+    /// <inheritdoc />
+    protected override void Up(MigrationBuilder migrationBuilder)
+    {
+        migrationBuilder.Sql(
+            """
+            INSERT INTO users.permissions (code) VALUES
+              ('tenant:edit'),
+              ('tenant:publish')
+            ON CONFLICT DO NOTHING;
+
+            INSERT INTO users.role_permissions (permission_code, role_name)
+            SELECT code, 'Couple' FROM users.permissions
+            WHERE code IN ('tenant:edit', 'tenant:publish')
+            ON CONFLICT DO NOTHING;
+            """);
+    }
+
+    /// <inheritdoc />
+    protected override void Down(MigrationBuilder migrationBuilder)
+    {
+        migrationBuilder.Sql(
+            """
+            DELETE FROM users.role_permissions WHERE permission_code IN ('tenant:edit', 'tenant:publish');
+            DELETE FROM users.permissions WHERE code IN ('tenant:edit', 'tenant:publish');
+            """);
+    }
+}

From a50818cdf241813079d09fef11617d9cfcb4269f Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 22:46:13 +0800
Subject: [PATCH 060/155] Eternelle-186 Apply code review fixes

- Fix upload limit mismatch in AssignTemplate: use preserved variant from seeds
  rather than DefaultVariant when computing effectiveUploadLimit
- Fix ConfigureSection: fall back to tenant's stored GuestUploads variant when
  command.Variant is null, preventing spurious null upload limit in event payload
- Defensive copy SectionKeys/Variants in CatalogTemplate.Create and Update
- Fix SectionOverrideTitle/Subtitle returning wrong error for empty input;
  add TitleRequired and SubtitleRequired to SectionOverrideErrors
- Add UploadLimit validator rule to CreateWeddingCommandValidator
- Add SetGuestPhotoUploadLimitCommandValidator
- Remove redundant HasColumnName on WeddingConfiguration.GuestPhotoUploadLimit
---
 .../AssignTemplateCommandHandler.cs               |  7 ++++---
 .../ConfigureSectionCommandHandler.cs             |  2 +-
 .../Catalog/CatalogTemplate.cs                    |  8 ++++----
 .../Tenants/SectionOverrideErrors.cs              |  6 ++++++
 .../Tenants/SectionOverrideSubtitle.cs            |  2 +-
 .../Tenants/SectionOverrideTitle.cs               |  2 +-
 .../CreateWeddingCommandValidator.cs              |  4 ++++
 .../SetGuestPhotoUploadLimitCommandValidator.cs   | 15 +++++++++++++++
 .../Weddings/WeddingConfiguration.cs              |  2 --
 9 files changed, 36 insertions(+), 12 deletions(-)
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandValidator.cs

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandHandler.cs
index 66c6ad5..f6c5746 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandHandler.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/AssignTemplate/AssignTemplateCommandHandler.cs
@@ -37,9 +37,10 @@ public async Task<Result> Handle(AssignTemplateCommand command, CancellationToke
             return new TemplateSectionSeed(key, preserved, index);
         })];
 
-        int? uploadLimit = template.UploadLimitFor(
-            SectionKeys.GuestUploads,
-            template.DefaultVariant(SectionKeys.GuestUploads));
+        string? effectiveGuestVariant = seeds
+            .FirstOrDefault(s => s.SectionKey == SectionKeys.GuestUploads)
+            ?.DefaultVariant;
+        int? uploadLimit = template.UploadLimitFor(SectionKeys.GuestUploads, effectiveGuestVariant);
 
         Result result = tenant.AssignTemplate(command.TemplateId, command.ThemeIndex, seeds, uploadLimit, dateTimeProvider.UtcNow);
         if (result.IsFailure)
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandHandler.cs
index b7630e9..7038373 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandHandler.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ConfigureSection/ConfigureSectionCommandHandler.cs
@@ -58,7 +58,7 @@ public async Task<Result> Handle(ConfigureSectionCommand command, CancellationTo
         }
 
         string? guestUploadsVariant = command.SectionKey == SectionKeys.GuestUploads
-            ? command.Variant
+            ? command.Variant ?? tenant.Sections.SingleOrDefault(s => s.SectionKey == SectionKeys.GuestUploads)?.Variant
             : tenant.Sections.SingleOrDefault(s => s.SectionKey == SectionKeys.GuestUploads)?.Variant;
         int? uploadLimit = template.UploadLimitFor(SectionKeys.GuestUploads, guestUploadsVariant);
 
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplate.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplate.cs
index 4be1b57..d3c3092 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplate.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Catalog/CatalogTemplate.cs
@@ -25,8 +25,8 @@ public static CatalogTemplate Create(
             TemplateId = templateId,
             Name = name,
             Tier = tier,
-            SectionKeys = sectionKeys,
-            Variants = variants,
+            SectionKeys = [.. sectionKeys],
+            Variants = [.. variants],
             UpdatedAtUtc = utcNow
         };
 
@@ -39,8 +39,8 @@ public void Update(
     {
         Name = name;
         Tier = tier;
-        SectionKeys = sectionKeys;
-        Variants = variants;
+        SectionKeys = [.. sectionKeys];
+        Variants = [.. variants];
         UpdatedAtUtc = utcNow;
     }
 
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideErrors.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideErrors.cs
index 84c553f..789e5af 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideErrors.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideErrors.cs
@@ -4,9 +4,15 @@ namespace Eternelle.Modules.Tenancy.Domain.Tenants;
 
 public static class SectionOverrideErrors
 {
+    public static readonly Error TitleRequired =
+        Error.Problem("Tenancy.Section.OverrideTitleRequired", "Override title cannot be empty.");
+
     public static readonly Error TitleTooLong =
         Error.Problem("Tenancy.Section.OverrideTitleTooLong", $"Override title must be at most {SectionOverrideTitle.MaxLength} characters.");
 
+    public static readonly Error SubtitleRequired =
+        Error.Problem("Tenancy.Section.OverrideSubtitleRequired", "Override subtitle cannot be empty.");
+
     public static readonly Error SubtitleTooLong =
         Error.Problem("Tenancy.Section.OverrideSubtitleTooLong", $"Override subtitle must be at most {SectionOverrideSubtitle.MaxLength} characters.");
 }
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideSubtitle.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideSubtitle.cs
index 18b96ac..f5f12de 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideSubtitle.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideSubtitle.cs
@@ -14,7 +14,7 @@ public static Result<SectionOverrideSubtitle> Create(string? raw)
     {
         if (string.IsNullOrWhiteSpace(raw))
         {
-            return Result.Failure<SectionOverrideSubtitle>(SectionOverrideErrors.SubtitleTooLong);
+            return Result.Failure<SectionOverrideSubtitle>(SectionOverrideErrors.SubtitleRequired);
         }
 
         string trimmed = raw.Trim();
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideTitle.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideTitle.cs
index ee036a0..22bd60b 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideTitle.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/SectionOverrideTitle.cs
@@ -14,7 +14,7 @@ public static Result<SectionOverrideTitle> Create(string? raw)
     {
         if (string.IsNullOrWhiteSpace(raw))
         {
-            return Result.Failure<SectionOverrideTitle>(SectionOverrideErrors.TitleTooLong);
+            return Result.Failure<SectionOverrideTitle>(SectionOverrideErrors.TitleRequired);
         }
 
         string trimmed = raw.Trim();
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandValidator.cs
index 74c75f6..8a79b4e 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandValidator.cs
@@ -18,5 +18,9 @@ public CreateWeddingCommandValidator()
         RuleFor(c => c.Hashtag)
             .MaximumLength(Hashtag.MaxLength)
             .When(c => c.Hashtag is not null);
+
+        RuleFor(c => c.UploadLimit)
+            .GreaterThanOrEqualTo(0)
+            .When(c => c.UploadLimit is not null);
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandValidator.cs
new file mode 100644
index 0000000..2957b2a
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandValidator.cs
@@ -0,0 +1,15 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Weddings.Application.Weddings.SetGuestPhotoUploadLimit;
+
+internal sealed class SetGuestPhotoUploadLimitCommandValidator : AbstractValidator<SetGuestPhotoUploadLimitCommand>
+{
+    public SetGuestPhotoUploadLimitCommandValidator()
+    {
+        RuleFor(c => c.TenantId).NotEmpty();
+
+        RuleFor(c => c.UploadLimit)
+            .GreaterThanOrEqualTo(0)
+            .When(c => c.UploadLimit is not null);
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
index d980e21..1b70913 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
@@ -30,8 +30,6 @@ public void Configure(EntityTypeBuilder<Wedding> builder)
                 v => v != null ? Hashtag.FromPersistence(v) : null)
             .HasColumnName("hashtag");
 
-        builder.Property(w => w.GuestPhotoUploadLimit).HasColumnName("guest_photo_upload_limit");
-
         // EF Core snake_cases "CreatedAtUtc" → "created_at_utc".
         // The actual DB column is "created_at" — map explicitly.
         builder.Property(w => w.CreatedAtUtc).HasColumnName("created_at").IsRequired();

From 14c8872ca7f337c1312f6ffc5f143dc05e7c9859 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 23:51:41 +0800
Subject: [PATCH 061/155] Eternelle-186 Use TenantSlug.MinLength in TooShort
 error message

---
 .../Tenants/TenantSlugErrors.cs                                 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlugErrors.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlugErrors.cs
index ec6be1c..e495b75 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlugErrors.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Tenants/TenantSlugErrors.cs
@@ -8,7 +8,7 @@ public static class TenantSlugErrors
         Error.Problem("Tenancy.Slug.Empty", "Slug is required.");
 
     public static readonly Error TooShort =
-        Error.Problem("Tenancy.Slug.TooShort", "Slug must be at least 3 characters.");
+        Error.Problem("Tenancy.Slug.TooShort", $"Slug must be at least {TenantSlug.MinLength} characters.");
 
     public static readonly Error TooLong =
         Error.Problem("Tenancy.Slug.TooLong", $"Slug must be at most {TenantSlug.MaxLength} characters.");

From 0684018edce07d08ebfb154fd00e8d9cff9ac97c Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Thu, 28 May 2026 23:55:22 +0800
Subject: [PATCH 062/155] Eternelle-186 Add TenancyDbContext to migration
 extensions

---
 src/API/Eternelle.Api/Extensions/MigrationExtensions.cs | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs b/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
index 0d62e02..357fdfd 100644
--- a/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
+++ b/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
@@ -1,4 +1,5 @@
 using Eternelle.Modules.Catalog.Infrastructure.Database;
+using Eternelle.Modules.Tenancy.Infrastructure.Database;
 using Eternelle.Modules.Users.Infrastructure.Database;
 using Eternelle.Modules.Weddings.Infrastructure.Database;
 using Microsoft.EntityFrameworkCore;
@@ -14,6 +15,7 @@ public static void ApplyMigrations(this IApplicationBuilder app)
         ApplyMigration<WeddingsDbContext>(scope);
         ApplyMigration<UsersDbContext>(scope);
         ApplyMigration<CatalogDbContext>(scope);
+        ApplyMigration<TenancyDbContext>(scope);
     }
 
     private static void ApplyMigration<TDbContext>(IServiceScope scope)

From c4c932b35bfba00fbf696768025eaa3befe989fd Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 00:58:15 +0800
Subject: [PATCH 063/155] Eternelle-189 Update docs: modules complete,
 5-project structure, VOs

- Mark Tenancy, Users, and Catalog modules as complete; update module status tables and diagrams
- Standardize all modules to five-project structure (add IntegrationEvents)
- Clarify value object conventions: use `public const int MaxLength`, require `FromPersistence()` and error class
- Switch strongly-typed IDs to `readonly record struct` and .NET 9+ UUIDv7 (`Guid.CreateVersion7()`)
- Add detailed per-module reference docs for Weddings, Users, Catalog, and Tenancy
- Update new module scaffolding instructions and registration steps
- Expand README and module-conventions with module overviews, schemas, and event contracts
- Miscellaneous corrections and clarifications for consistency
---
 CLAUDE.md                  |  15 ++--
 CONTRIBUTING.md            |  34 +++++----
 README.md                  |  45 +++++------
 docs/module-conventions.md |   4 +-
 docs/modules/README.md     |  14 ++++
 docs/modules/catalog.md    | 105 ++++++++++++++++++++++++++
 docs/modules/tenancy.md    | 126 +++++++++++++++++++++++++++++++
 docs/modules/users.md      |  86 +++++++++++++++++++++
 docs/modules/weddings.md   | 149 +++++++++++++++++++++++++++++++++++++
 9 files changed, 532 insertions(+), 46 deletions(-)
 create mode 100644 docs/modules/README.md
 create mode 100644 docs/modules/catalog.md
 create mode 100644 docs/modules/tenancy.md
 create mode 100644 docs/modules/users.md
 create mode 100644 docs/modules/weddings.md

diff --git a/CLAUDE.md b/CLAUDE.md
index fdb9ab7..8fd852e 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -3,6 +3,7 @@
 Modular monolith backend in **.NET 10**, Clean Architecture + full DDD.
 Database design: `docs/database-design.md`.
 Module conventions (authoritative): `docs/module-conventions.md`.
+Per-module reference docs: `docs/modules/` (Weddings, Users, Catalog, Tenancy).
 
 ## Reference Implementations (Milan Jovanovic)
 
@@ -36,7 +37,7 @@ src/
         └── Eternelle.Modules.Weddings.IntegrationEvents/   ← integration event classes only
 ```
 
-Future modules follow the same **five-project** structure: **Users → Catalog → Tenancy → RSVP → Guestbook**.
+Future modules follow the same **five-project** structure: **Users → Catalog → Tenancy → RSVP → Guestbook**. Users, Catalog, and Tenancy are complete.
 
 ---
 
@@ -47,7 +48,7 @@ Future modules follow the same **five-project** structure: **Users → Catalog 
 | Weddings  | ✅      | ✅           | ✅              | ✅            | ✅                 |
 | Users     | ✅      | ✅           | ✅              | ✅            | ✅                 |
 | Catalog   | ✅      | ✅           | ✅              | ✅            | ✅                 |
-| Tenancy   | ❌      | ❌           | ❌              | ❌            | ❌                 |
+| Tenancy   | ✅      | ✅           | ✅              | ✅            | ✅                 |
 | RSVP      | ❌      | ❌           | ❌              | ❌            | ❌                 |
 | Guestbook | ❌      | ❌           | ❌              | ❌            | ❌                 |
 
@@ -69,10 +70,10 @@ Future modules follow the same **five-project** structure: **Users → Catalog 
 **Aggregate roots** extend `Eternelle.Common.Domain.Entity`.
 
 ```csharp
-// Strongly-typed ID — always a readonly record struct
+// Strongly-typed ID — always a readonly record struct, UUIDv7 via the BCL
 public readonly record struct WeddingId(Guid Value)
 {
-    public static WeddingId New() => new(Guid.NewGuid());
+    public static WeddingId New() => new(Guid.CreateVersion7());
     public static WeddingId Empty => new(Guid.Empty);
 }
 
@@ -269,10 +270,10 @@ internal sealed class CreateWeddingEndpoint : IEndpoint
 
 ---
 
-## Next Module: Tenancy
+## Next Module: RSVP
 
-Module name: **`Eternelle.Modules.Tenancy`**  
-Schema constant: `public static class Schemas { public const string Tenancy = "tenancy"; }`
+Module name: **`Eternelle.Modules.Rsvp`**  
+Schema constant: `public static class Schemas { public const string Rsvp = "rsvp"; }`
 
 ---
 
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index f6b771a..bf882ca 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -6,7 +6,7 @@ This document describes the architecture rules, coding conventions, and patterns
 
 ## Layer rules
 
-Each module has four layers. The dependency rule is strict and enforced by project references.
+Each module is a **five-project** vertical slice: `Domain`, `Application`, `Infrastructure`, `Presentation`, and `IntegrationEvents`. The dependency rule is strict and enforced by project references — only a module's `IntegrationEvents` project may be referenced from outside the module. See [`docs/module-conventions.md`](docs/module-conventions.md) for the full reference graph.
 
 ### Domain
 
@@ -14,13 +14,13 @@ Each module has four layers. The dependency rule is strict and enforced by proje
 
 - Aggregates expose behaviour through methods only — no public setters outside the aggregate root.
 - Owned entities (e.g. `EntourageMember`, `Partner`) are created and mutated exclusively through their aggregate root. Their factory and mutation methods are `internal`.
-- Value objects are `sealed record` or `sealed class` with a private constructor and a `static Create()` factory returning `Result<T>`.
-- String length limits are defined as `public static readonly int` constants on the owning type, not as magic numbers:
+- Value objects are `sealed record` with a private constructor, a `static Create()` factory returning `Result<T>`, an `internal static FromPersistence()` (trusts the DB, skips validation), and a sibling `{Vo}Errors` class.
+- String length limits are defined as a `public const int MaxLength` on the value object, not as magic numbers:
   ```csharp
-  // On EntourageMember:
-  public static readonly int MaxNameLength = 150;
-  public static readonly int MaxRoleLength = 100;
+  // On PersonName:
+  public const int MaxLength = 150;
   ```
+  `const` (not `static readonly`) is correct here: this is a monorepo where every project compiles from source, so there is no cross-assembly binary-inlining concern.
 - Domain errors use the `Error` type from `Eternelle.Common.Domain`:
   ```csharp
   public static Error NotFound(WeddingId id) =>
@@ -35,16 +35,16 @@ Each module has four layers. The dependency rule is strict and enforced by proje
 - Commands implement `ICommand` (void) or `ICommand<TResponse>`.
 - Queries implement `IQuery<TResponse>`.
 - All handlers are `internal sealed class`.
-- Every command must have a matching `AbstractValidator<TCommand>`. `MaximumLength` rules **must** reference domain constants:
+- Every command must have a matching `AbstractValidator<TCommand>`. `MaximumLength` rules **must** reference the value object's `MaxLength` constant (the single source of truth):
   ```csharp
   RuleFor(c => c.Name)
       .NotEmpty()
-      .MaximumLength(EntourageMember.MaxNameLength);
+      .MaximumLength(PersonName.MaxLength);
   ```
 - Nullable fields are validated conditionally:
   ```csharp
   RuleFor(c => c.Subtitle)
-      .MaximumLength(EntourageGroup.MaxSubtitleLength)
+      .MaximumLength(GroupSubtitle.MaxLength)
       .When(c => c.Subtitle is not null);
   ```
 - **Query handlers use Dapper** via `IDbConnectionFactory` with `CommandDefinition` (always pass `cancellationToken`). Never use EF Core in a query handler.
@@ -70,10 +70,11 @@ Each module has four layers. The dependency rule is strict and enforced by proje
   ```
 - String length constants from the domain must be referenced in `HasMaxLength()` — no magic numbers:
   ```csharp
-  .HasMaxLength(EntourageMember.MaxNameLength)
+  .HasMaxLength(PersonName.MaxLength)
   ```
+- Enums are persisted as integers via `HasConversion<int>()` (with a `CHECK` or unique constraint where a closed set must be enforced at the DB).
 - Repositories are `internal sealed class` implementing domain interfaces.
-- All tables live in the `wedding` schema. Declare it via `modelBuilder.HasDefaultSchema(Schemas.Weddings)`.
+- Each module declares its own schema via `modelBuilder.HasDefaultSchema(Schemas.{Module})` (`wedding`, `users`, `catalog`).
 
 ### Presentation
 
@@ -105,16 +106,17 @@ if (result.IsFailure) return result;
 
 ## ID types
 
-Every aggregate and owned entity uses a strongly-typed ID record:
+Every aggregate and owned entity uses a strongly-typed ID `readonly record struct`:
 
 ```csharp
-public record WeddingId(Guid Value)
+public readonly record struct WeddingId(Guid Value)
 {
-    public static WeddingId New() => new(Uuid7.NewUuid7().ToGuid());
+    public static WeddingId New() => new(Guid.CreateVersion7());
+    public override string ToString() => Value.ToString();
 }
 ```
 
-IDs use **UUIDv7** (time-ordered) via `SourceFlow.Stores.EntityFramework`. This keeps database index locality while remaining globally unique.
+IDs use **UUIDv7** (time-ordered) via the BCL `Guid.CreateVersion7()` (.NET 9+). This keeps database index locality while remaining globally unique. A `ValueConverter` for each ID type is registered globally in `ConfigureConventions`.
 
 ---
 
@@ -209,7 +211,7 @@ migrationBuilder.Sql("""
 - All handler classes are `internal sealed`.
 - Command and query records are `public sealed record`.
 - Endpoint classes are `internal sealed` implementing `IEndpoint`.
-- String constants on domain types use `public static readonly int`, not `const int`, because `const` fields are inlined at compile time and can cause issues across assembly boundaries.
+- String length limits on value objects use `public const int MaxLength`. `const` is correct in this monorepo (all projects compile from source); `static readonly` would only be needed if domain types shipped as binary NuGet packages to independently-deployed consumers.
 - Nullable reference types are enabled project-wide. Never suppress the nullable warning without a comment explaining why.
 - `using` directives are auto-managed by the IDE (file-scoped namespaces, no redundant usings).
 - Diagnostic suppressions (`NoWarn`, `#pragma warning disable`) go in `.editorconfig`, not in `.csproj` files or inline in source.
diff --git a/README.md b/README.md
index 39d7c37..df27c1e 100644
--- a/README.md
+++ b/README.md
@@ -13,8 +13,8 @@ Backend for **Eternelle** — a Philippine wedding platform that lets couples bu
 └───────────────────────┬────────────────────────────────────────┘
                         │ references only Infrastructure
           ┌─────────────▼─────────────┐
-          │   Modules/Weddings        │  (one module today — more planned)
-          │                           │
+          │ Modules/{Weddings,Users,  │  (4 built; RSVP/Guestbook planned)
+          │       Catalog,Tenancy}    │
           │  .Presentation            │  Minimal API endpoints (IEndpoint)
           │       │                   │
           │  .Application             │  Commands, queries, validators (MediatR)
@@ -22,6 +22,9 @@ Backend for **Eternelle** — a Philippine wedding platform that lets couples bu
           │  .Infrastructure          │  EF Core, Dapper, repositories, jobs
           │       │                   │
           │  .Domain                  │  Aggregates, value objects, domain events
+          │                           │
+          │  .IntegrationEvents       │  Cross-module event contracts (only project
+          │                           │  referenceable from outside the module)
           └───────────────────────────┘
           ┌───────────────────────────┐
           │   Common/*                │  Shared abstractions (no business logic)
@@ -36,21 +39,20 @@ Backend for **Eternelle** — a Philippine wedding platform that lets couples bu
 
 ---
 
-## Weddings module — domain model
+## Modules
 
-The Weddings module owns the following aggregate roots:
+Four modules are implemented; two are planned. Each is a five-project vertical slice and owns its own PostgreSQL schema. See [`docs/modules/`](docs/modules/) for per-module reference docs and [`docs/database-design.md`](docs/database-design.md) for the cross-module data model.
 
-| Aggregate | Owned entities | Notes |
-|---|---|---|
-| `Wedding` | `Partner` (≤ 2), `SnapShareConfig` | Core identity — tenanted by `TenantId` |
-| `StoryMoment` | — | Ordered timeline entries |
-| `EntourageGroup` | `EntourageMember`, `EntourageCouple` | Couple pairings enforced by group type |
-| `DressCodeConfig` | `DressCodeColor`, `DressCodeImage` | Palette + reference images |
-| `CeremonyAct` | — | Program-of-events entries |
-| `GalleryImage` | — | Photo gallery |
-| `GiftOption` | — | Gift registry / monetary options |
-| `Reminder` | — | Automated reminders |
-| `VendorCredit` | — | Vendor attribution |
+| Module | Schema | Status | Summary |
+|---|---|---|---|
+| [Weddings](docs/modules/weddings.md) | `wedding` | ✅ | All couple/wedding content (profile, entourage, gallery, gifts, dress code, ceremony, guest photos, …) |
+| [Users](docs/modules/users.md) | `users` | ✅ | Shadow user profile (Keycloak owns credentials) + RBAC |
+| [Catalog](docs/modules/catalog.md) | `catalog` | ✅ | Website template registry: themes, supported sections, section variants |
+| [Tenancy](docs/modules/tenancy.md) | `tenancy` | ✅ | Tenant lifecycle, template + section assignment; drives Wedding creation via integration events |
+| RSVP | `rsvp` | ❌ | Guest list, RSVP submissions, check-in |
+| Guestbook | `guestbook` | ❌ | Public guest messages |
+
+The **Weddings** module owns these aggregate roots: `Wedding` (owns `Partner` ≤ 2, `SnapShareConfig`), `StoryMoment`, `EntourageGroup` (owns `EntourageMember`, `EntourageCouple`), `DressCodeConfig` (owns `DressCodeColor`, `DressCodeImage`), `CeremonyAct`, `GalleryImage`, `GiftOption`, `GuestPhoto`, `VendorCredit`, `Reminder`. See [docs/modules/weddings.md](docs/modules/weddings.md) for the full inventory.
 
 ---
 
@@ -125,14 +127,15 @@ src/
     Eternelle.Common.Infrastructure/ # Auth, caching, outbox, inbox, event bus
     Eternelle.Common.Presentation/   # IEndpoint, ResultExtensions
   Modules/
-    Weddings/
+    Weddings/  Users/  Catalog/    # one folder per module
       *.Domain/                  # Aggregates, value objects, domain errors
       *.Application/             # Commands, queries, validators, handlers
       *.Infrastructure/          # EF Core config, repositories, Quartz jobs
-      *.Presentation/            # Minimal API endpoints
+      *.Presentation/            # Minimal API endpoints, integration-event handlers
+      *.IntegrationEvents/       # Cross-module event contracts (only externally-referenceable project)
 ```
 
-Module-level configuration files (`modules.weddings.json`) are loaded by `AddModuleConfiguration()` and keep per-module settings out of the root `appsettings.json`.
+Module-level configuration files (`modules.weddings.json`, `modules.users.json`, `modules.catalog.json`) are loaded by `AddModuleConfiguration(["weddings", "users", "catalog"])` and keep per-module settings out of the root `appsettings.json`.
 
 ---
 
@@ -146,9 +149,9 @@ Module-level configuration files (`modules.weddings.json`) are loaded by `AddMod
 
 ## Adding a new module
 
-1. Create four projects: `*.Domain`, `*.Application`, `*.Infrastructure`, `*.Presentation`.
-2. Wire the module in `Program.cs` via an `Add{Module}Module(builder.Configuration)` extension.
+1. Create five projects: `*.Domain`, `*.Application`, `*.Infrastructure`, `*.Presentation`, `*.IntegrationEvents`.
+2. Add the module's schema constant and `DbContext`; wire the module in `Program.cs` via `Add{Module}Module(builder.Configuration)`, add its assembly to `AddApplication([...])`, and add its config key to `AddModuleConfiguration([...])`.
 3. Register a `IDesignTimeDbContextFactory` in Infrastructure for EF Core tooling.
 4. Add health checks for any new external dependencies.
 
-See `CONTRIBUTING.md` for layer-by-layer rules.
+The next planned module is **Tenancy** (`tenancy` schema). See [`docs/module-conventions.md`](docs/module-conventions.md) and `CONTRIBUTING.md` for layer-by-layer rules.
diff --git a/docs/module-conventions.md b/docs/module-conventions.md
index 95bbac2..8e271f0 100644
--- a/docs/module-conventions.md
+++ b/docs/module-conventions.md
@@ -1,6 +1,6 @@
 # Module Conventions
 
-This document describes the conventions for all modules in Eternelle. Follow it when scaffolding a new module (e.g. `Eternelle.Modules.Identity`).
+This document describes the conventions for all modules in Eternelle. Follow it when scaffolding a new module (the next planned one is `Eternelle.Modules.Tenancy`). Three modules already follow it — Weddings, Users, and Catalog; see [`modules/`](modules/) for per-module reference docs.
 
 ---
 
@@ -86,7 +86,7 @@ Register in `src/API/Eternelle.Api/Program.cs`:
 builder.Services.AddWeddingsModule(builder.Configuration);
 ```
 
-Each module owns a static `Schemas.{Module}` string constant (`"wedding"`, `"identity"`, …) used as the PostgreSQL schema prefix.
+Each module owns a static `Schemas.{Module}` string constant (`"wedding"`, `"users"`, `"catalog"`, …) used as the PostgreSQL schema prefix.
 
 ---
 
diff --git a/docs/modules/README.md b/docs/modules/README.md
new file mode 100644
index 0000000..b17fc64
--- /dev/null
+++ b/docs/modules/README.md
@@ -0,0 +1,14 @@
+# Module Reference
+
+Per-module reference documentation. For the conventions every module follows, see [`../module-conventions.md`](../module-conventions.md); for the cross-module data model, see [`../database-design.md`](../database-design.md).
+
+| Module | Schema | Status | Doc |
+|---|---|---|---|
+| Weddings | `wedding` | ✅ Complete | [weddings.md](weddings.md) |
+| Users | `users` | ✅ Complete | [users.md](users.md) |
+| Catalog | `catalog` | ✅ Complete | [catalog.md](catalog.md) |
+| Tenancy | `tenancy` | ✅ Complete | [tenancy.md](tenancy.md) |
+| RSVP | `rsvp` | ❌ Planned | — |
+| Guestbook | `guestbook` | ❌ Planned | — |
+
+Each module is a five-project vertical slice (`Domain`, `Application`, `Infrastructure`, `Presentation`, `IntegrationEvents`). Only a module's `IntegrationEvents` project may be referenced from outside the module.
diff --git a/docs/modules/catalog.md b/docs/modules/catalog.md
new file mode 100644
index 0000000..1d5eaa3
--- /dev/null
+++ b/docs/modules/catalog.md
@@ -0,0 +1,105 @@
+# Catalog Module
+
+`Eternelle.Modules.Catalog` — the template registry: which website templates exist, their themes, the sections each template supports, and the rendering variants per section. Mostly admin-managed reference data.
+
+- **Schema:** `catalog`
+- **DbContext:** `CatalogDbContext`
+- **Registration:** `CatalogModule.AddCatalogModule(services, configuration)`
+- **Status:** ✅ Domain · ✅ Application · ✅ Infrastructure · ✅ Presentation · ✅ IntegrationEvents
+
+---
+
+## Aggregate
+
+### `Template` (aggregate root) — table `templates`
+| Property | Type | Notes |
+|---|---|---|
+| `Id` | `TemplateId` | `readonly record struct` over **`Guid`** (`TemplateId.New()`) — *not* a string slug |
+| `Name` | `TemplateName` VO | unique index `ix_templates_name` |
+| `Description` | `TemplateDescription?` VO | |
+| `Tier` | `TemplateTier` enum | int column |
+| `PreviewImageUrl` | `ImageUrl?` VO | |
+| `Features` | `IReadOnlyList<string>` | `jsonb` column |
+| `CreatedAtUtc` / `UpdatedAtUtc` | `DateTime` | |
+
+Owned collections (all cascade-delete, accessed via backing fields):
+
+| Child | Table | Key fields |
+|---|---|---|
+| `TemplateTheme` | `template_themes` | `themeIndex` (unique per template), `ThemeColors`/`ThemeTypography`/`ThemeTextures` (jsonb), `isDark` |
+| `TemplateSupportedSection` | `template_supported_sections` | `SectionId`, `displayOrder` (unique per template) |
+| `TemplateSectionVariant` | `template_section_variants` | `SectionId`, `variant`, `isDefault`, `PriceClass`, `uploadLimit?` |
+
+### Invariants (enforced in the aggregate)
+- Duplicate `themeIndex` → `DuplicateThemeIndex`.
+- A section can be supported once → `SectionAlreadySupported`.
+- A variant may only be added for a supported section → `SectionNotSupported`.
+- Duplicate `(section, variant)` → `DuplicateVariant`; a second default for a section → `DuplicateDefaultVariant`.
+- Any mutation re-raises a manifest event so downstream consumers see the full current manifest.
+
+---
+
+## Value objects
+
+| VO | Max |
+|---|---|
+| `TemplateName` | 150 |
+| `TemplateDescription` | 1000 |
+| `TemplateThemeName` | 100 |
+| `ImageUrl` (shared) | 2048 |
+
+`ThemeColors`, `ThemeTypography`, `ThemeTextures` are `record`s wrapping `IReadOnlyDictionary<string,string>` token maps, persisted as `jsonb`.
+
+---
+
+## Enums (all persisted as integers)
+
+> `SectionId` is persisted as the enum **value** — do not reorder members without a migration.
+
+| Enum | Members |
+|---|---|
+| `TemplateTier` | `FirstClass = 1`, `Signature = 2` |
+| `PriceClass` | `Free = 1`, `Pro = 2`, `Plus = 3` |
+| `SectionId` | `Hero, Story, Entourage, DressCode, Gallery, GiftGuide, Guestbook, Venue, Reminders, Rsvp, VendorCredits, SnapShare, GuestUploads` (0-based ordinals) |
+
+---
+
+## Commands & queries
+
+**Commands:** `CreateTemplateCommand`, `UpdateTemplateCommand`, `AddTemplateThemeCommand`, `AddSupportedSectionCommand`, `AddSectionVariantCommand` (the variant command also carries `PriceClass` + optional `uploadLimit`).
+
+**Queries:** `GetTemplatesQuery`, `GetTemplateByIdQuery`, `GetSupportedSectionsQuery`, `GetSectionVariantsQuery`.
+
+---
+
+## Endpoints
+
+All under `/catalog`, tagged `Catalog`. Mutating endpoints require the `catalog:manage` permission (seeded to the `Admin` role by the Users module).
+
+| Verb | Route |
+|---|---|
+| POST | `catalog/templates` |
+| GET | `catalog/templates` |
+| GET | `catalog/templates/{templateId:guid}` |
+| PUT | `catalog/templates/{templateId:guid}` |
+| POST | `catalog/templates/{templateId:guid}/themes` |
+| POST | `catalog/templates/{templateId:guid}/sections` |
+| GET | `catalog/templates/{templateId:guid}/sections/{sectionId}/variants` |
+| POST | `catalog/templates/{templateId:guid}/sections/{sectionId}/variants` |
+
+---
+
+## Integration events
+
+**Published:** `CatalogTemplateManifestChangedIntegrationEvent(templateId, name, tier, sectionIds[], variants[])` — raised whenever a template's manifest changes (create, update, add theme/section/variant). Carries the full manifest so the future Tenancy module can validate tenant section/variant selections without calling back. No consumers wired yet.
+
+---
+
+## Persistence
+
+Tables (schema `catalog`): `templates`, `template_themes`, `template_supported_sections`, `template_section_variants`, plus `outbox_messages` / `outbox_message_consumers`. (Catalog publishes but does not consume, so it has outbox tables only — no inbox.) `TemplateId` ↔ `Guid` value converter; `Features`/theme token maps stored as `jsonb`; snake_case naming.
+
+### Migrations
+- `20260527094230_InitialCatalog` — schema, all tables, and outbox plumbing.
+
+The `catalog:manage` permission itself is seeded in the **Users** module migration `20260527101020_AddCatalogManagePermission`.
diff --git a/docs/modules/tenancy.md b/docs/modules/tenancy.md
new file mode 100644
index 0000000..c19f466
--- /dev/null
+++ b/docs/modules/tenancy.md
@@ -0,0 +1,126 @@
+# Tenancy Module
+
+`Eternelle.Modules.Tenancy` — tenant lifecycle management: provisioning a wedding site, assigning a catalog template and theme, ordering and configuring sections, and publishing the site. Drives Wedding creation in the Weddings module via integration events.
+
+- **Schema:** `tenancy`
+- **DbContext:** `TenancyDbContext`
+- **Registration:** `TenancyModule.AddTenancyModule(services, configuration)`
+- **Status:** ✅ Domain · ✅ Application · ✅ Infrastructure · ✅ Presentation · ✅ IntegrationEvents
+
+---
+
+## Aggregates
+
+### `Tenant` (aggregate root) — table `tenants`
+
+| Property | Type | Notes |
+|---|---|---|
+| `Id` | `TenantId` | `readonly record struct` over `Guid` (`TenantId.New()` — UUIDv7) |
+| `OwnerUserId` | `Guid` | Cross-module ref to `users.users.id` — opaque identifier |
+| `Slug` | `TenantSlug` VO | Unique; used to generate the default hostname row |
+| `Published` | `bool` | `false` until `Publish()` is called |
+| `TemplateId` | `Guid` | Cross-module ref to `catalog.templates.id` |
+| `ThemeIndex` | `int` | Index into the template's theme list |
+| `CreatedAtUtc` / `UpdatedAtUtc` | `DateTime` | |
+
+Owned collection:
+
+| Child | Table | Key fields |
+|---|---|---|
+| `TenantSectionEntry` | `tenant_section_entries` | `SectionKey` (string), `Enabled`, `DisplayOrder`, `Variant?`, `OverrideTitle?`, `OverrideSubtitle?` |
+
+### Invariants
+- `Publish()` / `Unpublish()` are idempotent guards (void, early-return if already in target state).
+- `AssignTemplate()` reconciles the section manifest: drops sections removed from the new template, adds new ones, preserves enabled/override state for sections common to both. Raises `TenantTemplateChangedDomainEvent` with the effective guest-upload limit.
+- `ConfigureSection()` returns `TenantErrors.SectionNotFound` for unknown section keys.
+- `ReorderSections()` validates the input list (duplicate check, count match, key-set equality) before applying — returns `TenantErrors.ReorderListMismatch` on mismatch.
+- Upload limit for the Wedding module is derived from the `GuestUploads` section's active variant and embedded in domain events so handlers need no repository reload.
+
+---
+
+## Value objects
+
+| VO | Constraints |
+|---|---|
+| `TenantSlug` | 3–63 chars; lowercase alphanumeric + single hyphens; no leading/trailing hyphen |
+| `SectionOverrideTitle` | Max 150 chars; required when non-null |
+| `SectionOverrideSubtitle` | Max 200 chars; required when non-null |
+
+---
+
+## Domain events
+
+| Event | Raised by | Payload |
+|---|---|---|
+| `TenantProvisionedDomainEvent` | `Tenant.Provision` | `TenantId`, `OwnerUserId`, `WeddingDate`, `UploadLimit?` |
+| `TenantTemplateChangedDomainEvent` | `Tenant.AssignTemplate` | `TenantId`, `UploadLimit?` |
+| `TenantSectionsChangedDomainEvent` | `Tenant.ConfigureSection`, `ReorderSections` | `TenantId`, `UploadLimit?` |
+| `TenantPublishedDomainEvent` | `Tenant.Publish` | `TenantId` |
+| `TenantUnpublishedDomainEvent` | `Tenant.Unpublish` | `TenantId` |
+
+---
+
+## CatalogTemplate projection
+
+`CatalogTemplate` in `Domain/Catalog/` is a local read-model populated by `CatalogTemplateManifestChangedIntegrationEvent`. Command handlers use it to validate template/section/variant selections and compute the effective upload limit without querying the Catalog schema directly.
+
+---
+
+## Commands & queries
+
+**Commands:**
+- `ProvisionTenantCommand(OwnerUserId, Slug, TemplateId, ThemeIndex, WeddingDate)` → `Guid` (new tenant id)
+- `AssignTemplateCommand(TenantId, CallerUserId, TemplateId, ThemeIndex)`
+- `ConfigureSectionCommand(TenantId, CallerUserId, SectionKey, Enabled, Variant?, OverrideTitle?, OverrideSubtitle?)`
+- `ReorderSectionsCommand(TenantId, CallerUserId, OrderedSectionKeys)`
+- `PublishTenantCommand(TenantId, CallerUserId)`
+- `UnpublishTenantCommand(TenantId, CallerUserId)`
+
+**Queries:**
+- `GetTenantQuery(TenantId)` → `TenantResponse`
+- `GetTenantSectionsQuery(TenantId)` → `IReadOnlyList<SectionEntryResponse>`
+
+All mutation commands thread `CallerUserId` through to the handler where an opaque IDOR guard (`tenant.OwnerUserId != command.CallerUserId` → `TenantErrors.NotFound`) prevents cross-tenant access.
+
+---
+
+## Endpoints
+
+All under `/tenants`, tagged `Tenancy`.
+
+| Verb | Route | Auth |
+|---|---|---|
+| POST | `tenants` | `RequireAuthorization()` |
+| GET | `tenants/{tenantId:guid}` | `RequireAuthorization()` |
+| PUT | `tenants/{tenantId:guid}/template` | `tenant:edit` |
+| GET | `tenants/{tenantId:guid}/sections` | `RequireAuthorization()` |
+| PUT | `tenants/{tenantId:guid}/sections/{sectionKey}` | `tenant:edit` |
+| PATCH | `tenants/{tenantId:guid}/sections/reorder` | `tenant:edit` |
+| POST | `tenants/{tenantId:guid}/publish` | `tenant:publish` |
+| POST | `tenants/{tenantId:guid}/unpublish` | `tenant:publish` |
+
+`ProvisionTenant` reads `CallerUserId` from `ClaimsPrincipal.GetUserId()` (the internal user id, not Keycloak sub).
+
+---
+
+## Integration events
+
+**Published** (via `Eternelle.Modules.Tenancy.IntegrationEvents`):
+- `TenantProvisionedIntegrationEvent(tenantId, ownerUserId, weddingDate, uploadLimit?)` — consumed by **Weddings** to auto-create the `Wedding` aggregate.
+- `TenantUploadLimitChangedIntegrationEvent(tenantId, uploadLimit?)` — consumed by **Weddings** to sync `Wedding.GuestPhotoUploadLimit`.
+
+**Consumed:**
+- `CatalogTemplateManifestChangedIntegrationEvent` — handled by `CatalogTemplateManifestChangedIntegrationEventHandler` in Presentation; upserts the local `CatalogTemplate` projection.
+
+---
+
+## Persistence
+
+Tables (schema `tenancy`): `tenants`, `tenant_section_entries`, `catalog_templates`, plus `outbox_messages`, `outbox_message_consumers`, `inbox_messages`, `inbox_message_consumers`.
+
+Converters: `TenantIdConverter`, `TenantSectionEntryIdConverter` (registered globally in `ConfigureConventions`).
+
+### Migrations
+- `20260528093515_InitialTenancy` — schema, all tables, indexes, outbox/inbox plumbing.
+
+The `tenant:edit` and `tenant:publish` permissions are seeded in the **Users** module migration `20260528110749_AddTenantPermissions`.
diff --git a/docs/modules/users.md b/docs/modules/users.md
new file mode 100644
index 0000000..a61944f
--- /dev/null
+++ b/docs/modules/users.md
@@ -0,0 +1,86 @@
+# Users Module
+
+`Eternelle.Modules.Users` — owns the application-side user profile and the RBAC model. Keycloak owns credentials and federation; this module owns the *shadow* profile and authorization.
+
+- **Schema:** `users`
+- **DbContext:** `UsersDbContext`
+- **Registration:** `UsersModule.AddUsersModule(services, configuration)`
+- **Status:** ✅ Domain · ✅ Application · ✅ Infrastructure · ✅ Presentation · ✅ IntegrationEvents
+
+---
+
+## Aggregates & entities
+
+### `User` (aggregate root) — table `users`
+| Property | Type | Notes |
+|---|---|---|
+| `Id` | `UserId` | `readonly record struct` over `Guid` |
+| `IdentityId` | `string` | Keycloak `sub` claim; required, unique index |
+| `Email` | `Email` VO | required, unique index |
+| `FirstName` / `LastName` | `PersonName` VO | required |
+| `PhoneNumber` | `PhoneNumber?` VO | optional |
+| `Roles` | `IReadOnlyCollection<Role>` | many-to-many via `user_roles` |
+
+`User.Create(identityId, email, firstName, lastName)` assigns `Role.Couple` by default and raises `UserRegisteredDomainEvent`. `UpdateProfile(...)` only raises `UserProfileUpdatedDomainEvent` when a value actually changes.
+
+### `Role` (reference entity) — table `roles` (PK `name`, ≤ 50 chars)
+Static instances: `Role.Admin`, `Role.Couple`, `Role.Guest`. Linked to permissions via `role_permissions`.
+
+### `Permission` (reference entity) — table `permissions` (PK `code`, ≤ 100 chars)
+Codes include `users:read`, `users:update`, `catalog:manage`. Roles grant permissions; there is **no per-resource grant table** (the `iam.user_permission_grants` concept from the original design draft is not implemented).
+
+---
+
+## Value objects
+
+| VO | Max | Validation |
+|---|---|---|
+| `Email` | 300 | one `@`, non-empty local/domain, domain contains `.` (Keycloak pre-validates) |
+| `PersonName` | 200 | non-empty |
+| `PhoneNumber` | 16 | E.164 (`^\+[1-9]\d{7,14}$`) |
+
+---
+
+## Commands & queries
+
+**Commands:** `RegisterUserCommand(identityId, email, firstName, lastName) : ICommand<Guid>` (idempotent — returns the existing user if the `IdentityId` is already provisioned); `UpdateUserCommand(userId, firstName, lastName, phoneNumber?) : ICommand`.
+
+**Queries:** `GetUserQuery(userId) : IQuery<UserResponse>` (Dapper read); `GetUserPermissionsQuery(identityId) : IQuery<PermissionsResponse>` (joins `users → user_roles → role_permissions` to a distinct set of permission codes).
+
+---
+
+## Endpoints
+
+Tagged `Users`.
+
+| Verb | Route | Auth |
+|---|---|---|
+| POST | `users/register` | `RequireAuthorization()` — JIT provisioning from JWT claims |
+| GET | `users/profile` | `RequireAuthorization("users:read")` |
+| PUT | `users/profile` | `RequireAuthorization("users:update")` → 204 |
+
+`users/register` reads the Keycloak `sub`, email, given/surname claims off the `ClaimsPrincipal` and provisions the shadow `User` on first call.
+
+---
+
+## Keycloak / authorization
+
+- **Authentication** is Keycloak (JWT bearer). The only stable cross-system identifier is the `sub` claim, stored as `User.IdentityId`. Email is synced but never used as a key.
+- **JIT provisioning:** the first authenticated `users/register` call creates the local `User` shadow record. The operation is idempotent on `IdentityId`.
+- **Authorization** lives in this module: `PermissionService` (implements `Common.Application.Authorization.IPermissionService`) dispatches `GetUserPermissionsQuery` and returns the caller's permission codes, which back the `RequireAuthorization("…")` policies across all modules.
+
+---
+
+## Integration events
+
+**Published:** `UserRegisteredIntegrationEvent(userId, email, firstName, lastName)` and `UserProfileUpdatedIntegrationEvent(userId, firstName, lastName, phoneNumber?)`, emitted from their respective domain-event handlers. No external integration events are consumed yet (inbox infrastructure exists but has no handlers wired).
+
+---
+
+## Persistence
+
+Tables (schema `users`): `users`, `roles`, `permissions`, `role_permissions`, `user_roles`, plus `outbox_messages` / `outbox_message_consumers` / `inbox_messages` / `inbox_message_consumers`. `UserId` ↔ `Guid` value converter registered globally; snake_case naming.
+
+### Migrations
+- `20260521171549_AddUserAggregates` — schema + all tables; seeds roles (Admin/Couple/Guest), permissions (`users:read`, `users:update`), and role→permission mappings.
+- `20260527101020_AddCatalogManagePermission` — raw SQL (`ON CONFLICT DO NOTHING`) adding `catalog:manage` and granting it to `Admin`.
diff --git a/docs/modules/weddings.md b/docs/modules/weddings.md
new file mode 100644
index 0000000..ed19b6b
--- /dev/null
+++ b/docs/modules/weddings.md
@@ -0,0 +1,149 @@
+# Weddings Module
+
+`Eternelle.Modules.Weddings` — owns all couple/wedding **content** for a tenant's wedding website.
+
+- **Schema:** `wedding`
+- **DbContext:** `WeddingsDbContext`
+- **Registration:** `WeddingsModule.AddWeddingsModule(services, configuration)`
+- **Status:** ✅ Domain · ✅ Application · ✅ Infrastructure · ✅ Presentation · ✅ IntegrationEvents
+
+This is the largest module. It is organised by aggregate; each aggregate root has its own repository, EF configuration folder, and endpoint group.
+
+---
+
+## Aggregates
+
+`Wedding` is the conceptual root, but most content sections are modelled as **independent aggregate roots** that reference the wedding by a plain `WeddingId` and are loaded through their own repositories — they are never navigated through `Wedding`.
+
+| Aggregate root | Owned children | Table | Notes |
+|---|---|---|---|
+| `Wedding` | `Partner` (≤ 2), `SnapShareConfig` (1:1) | `profiles` | Core profile; `TenantId` immutable; `Plan` (free/pro/plus) |
+| `StoryMoment` | — | `story_moments` | Ordered timeline entries |
+| `EntourageGroup` | `EntourageMember`, `EntourageCouple` | `entourage_groups` | Couple pairings constrained by group type |
+| `DressCodeConfig` | `DressCodeColor`, `DressCodeImage` | `dress_code_configs` | 1:1 with wedding; palette + reference images |
+| `CeremonyAct` | — | `ceremony_acts` | Program-of-events entries (`act_time` clock time) |
+| `GalleryImage` | — | `gallery_images` | Curated photo gallery |
+| `GiftOption` | — | `gift_options` | Registry / monetary gift cards |
+| `GuestPhoto` | — | `guest_photos` | Guest-uploaded SnapShare photos (own lifecycle) |
+| `VendorCredit` | — | `vendor_credits` | Vendor attribution |
+| `Reminder` | — | `reminders` | Guest reminders |
+
+All IDs are `readonly record struct` wrappers over `Guid` (`WeddingId`, `PartnerId`, `EntourageGroupId`, …) with global EF value converters registered in `ConfigureConventions`.
+
+### Wedding invariants
+- At most two partners (`PartnerNumber` 1 or 2); the pair is unique per wedding.
+- `TenantId` is a cross-module reference to `tenancy.tenants` — treated as opaque, never joined.
+- `SchemaVersion` starts at 1 and is bumped only by migration scripts, never by user edits.
+- `SnapShare` is null until `ConfigureSnapShare()` is first called.
+- `Plan` defaults to `Free`; changed only via `ChangePlan()` (driven by a future Subscriptions integration event, not user edits).
+
+### EntourageGroup pairing rules
+`EntourageGroup.PairMembers` enforces which group types may contain `EntourageCouple` pairings (see `EntourageGroupType`). Couples store `(MemberAId, MemberBId)` with a `CHECK (member_a_id < member_b_id)` canonical ordering so the same pair cannot be stored twice with swapped slots.
+
+---
+
+## Value objects
+
+Every domain-meaningful string is a sealed-record VO with a `public const int MaxLength`, a `Create()` factory returning `Result<T>`, an `internal FromPersistence()`, and a sibling `{Vo}Errors` class.
+
+| VO | Max | Used for |
+|---|---|---|
+| `ActivityName` | 200 | Story / ceremony / gift / reminder titles |
+| `PersonFirstName` / `PersonLastName` | 100 | Partner names |
+| `PersonName` | 150 | Entourage member name, guest uploader name |
+| `PersonRole` | 100 | Entourage member role, vendor role |
+| `Biography` | 500 | Partner bio |
+| `RichDescription` | 2000 | Section narrative text, reminder body |
+| `WebUrl` | 2048 | Absolute http/https links |
+| `ImageUrl` | 2048 | Image/CDN URLs |
+| `IconIdentifier` | 50 | Emoji / icon identifier |
+| `CallToAction` | 200 | SnapShare CTA text |
+| `Hashtag` | 100 | Wedding hashtag (stored without `#`) |
+| `InstagramHandle` | 30 | Stored without `@` |
+| `GroupLabel` | 150 / `GroupSubtitle` | 200 | Entourage group labels |
+| `InternalNote` | 500 | Couple-only notes (not rendered) |
+| `PersonMessage` | 1000 | Entourage member message |
+| `AccessibilityText` | 300 / `ImageCaption` | 500 | Gallery alt text + caption |
+| `AccountHolderName` | 100 / `AccountNumber` | 50 / `AccountType` | 100 | Gift account fields |
+| `ColorName` | 100 / `HexColor` | 9 | Dress-code palette (`HexColor` validates `^#[0-9A-Fa-f]{3,8}$`) |
+| `VendorName` | 200 | Vendor business name |
+
+---
+
+## Enums
+
+All persisted as **integers** via `HasConversion<int>()`.
+
+| Enum | Members |
+|---|---|
+| `WeddingPlan` | `Free = 0`, `Pro = 1`, `Plus = 2` |
+| `PartnerNumber` | `One = 1`, `Two = 2` (DB `CHECK (partner_number IN (1,2))`) |
+| `SnapShareModerationMode` | `Auto = 0`, `Manual = 1` |
+| `GuestPhotoStatus` | `Pending = 0`, `Approved = 1`, `Rejected = 2`, `OverLimit = 3` |
+| `GiftDisplayMode` | `Link = 1`, `ModalDetails = 2`, `InlineDetails = 3` |
+| `EntourageRenderMode` | `Cards = 1`, `List = 2` |
+| `EntourageGroupType` | `Parents = 1`, `PrincipalSponsors = 2`, `SecondarySponsors = 3`, `Bridesmaids = 4`, `Groomsmen = 5`, `FlowerGirls = 6`, `RingBearers = 7`, `CoinBearers = 8`, `BibleReaders = 9`, `LittleOnes = 10`, `Other = 11`, `null` = custom |
+
+---
+
+## Plan limits & guest-photo invariants
+
+- `WeddingPlanLimits.PhotoLimit(plan)` → Free 50, Pro 250, Plus `null` (unlimited).
+- Photos over the limit are **not deleted** — `EnforcePhotoLimitAsync` marks them `OverLimit` via raw SQL UPDATE.
+- Pre-upload quota checks use `CountActiveByWeddingIdAsync` (excludes `OverLimit`), never `CountByWeddingIdAsync`.
+- Upload slots are Redis-backed (15-min TTL, single-use; `GETDEL` for single, Lua script for batch). Batch redemption is all-or-nothing. Falls back to `StubUploadSlotStore` (in-memory) when Redis is unavailable.
+- Duplicate slot IDs in a batch are rejected before `RedeemManyAsync`.
+
+---
+
+## Endpoints
+
+All under `/weddings`, tagged `Weddings`, `RequireAuthorization()` unless noted. Route parent IDs are always passed through to the command for ownership checks.
+
+### Wedding & partners
+| Verb | Route |
+|---|---|
+| POST | `weddings` |
+| GET | `weddings/{weddingId}` |
+| PUT | `weddings/{weddingId}/details` |
+| POST | `weddings/{weddingId}/partners` |
+| PUT | `weddings/{weddingId}/partners/{partnerId}` |
+| PUT | `weddings/{weddingId}/snap-share` |
+| POST | `weddings/{weddingId}/snap-share/regenerate-token` |
+
+### Section CRUD (story-moments, ceremony-acts, gift-options, gallery, vendor-credits, reminders)
+Each follows the same shape: `POST` create, `GET` list, `PUT {id}` update, `DELETE {id}` delete, `PATCH …/reorder` reorder.
+
+### Entourage
+`POST|GET weddings/{weddingId}/entourage`, `PATCH …/entourage/groups/reorder`, plus group CRUD under `…/entourage/groups/{groupId}`, member CRUD under `…/groups/{groupId}/members/{memberId}` (+ reorder), and couple pairing under `…/groups/{groupId}/couples/{coupleId}`.
+
+### Dress code
+`…/dress-code` (create/get/update), `…/dress-code/{id}/colors[/{colorId}]` (+ reorder), `…/dress-code/{id}/images[/{imageId}]` (+ reorder).
+
+### Guest photos (SnapShare)
+| Verb | Route | Auth |
+|---|---|---|
+| GET | `photos/upload` | anonymous (token context) |
+| POST | `photos/upload/presign` | anonymous + rate-limited |
+| POST | `photos/upload` | anonymous + `RequireRateLimiting(GuestPhotoUpload)` |
+| GET | `weddings/{weddingId}/photos/feed` | anonymous (public approved feed) |
+| GET | `weddings/{weddingId}/photos` | authorized |
+| PATCH | `weddings/{weddingId}/photos/{photoId}/approve` \| `/reject` | authorized |
+| DELETE | `weddings/{weddingId}/photos/{photoId}` | authorized |
+| POST | `weddings/{weddingId}/photos/bulk-approve` \| `bulk-reject` \| `bulk-delete` | authorized |
+
+The public upload endpoints are `AllowAnonymous` and paired with the IP-based `guest-photo-upload` fixed-window rate limiter (10/min) defined in `Program.cs`.
+
+---
+
+## Domain & integration events
+
+Domain events are raised inside aggregates and persisted to `wedding.outbox_messages` by `InsertOutboxMessagesInterceptor`, then dispatched by `ProcessOutboxJob`. Representative events: `WeddingCreated`, `WeddingDetailsUpdated`, `WeddingPartnerAdded/Updated`, `WeddingPlanChanged`, `WeddingSnapShareUpdated`, `GuestPhotoCreated/Approved/Rejected`, and `…Created` events for each section aggregate.
+
+**Published integration event:** `WeddingCreatedIntegrationEvent(weddingId, tenantId, weddingDate)` — emitted by `WeddingCreatedDomainEventHandler` directly from the domain-event payload (no repository reload). No other module consumes it yet (the Tenancy/RSVP/Guestbook consumers are not built).
+
+---
+
+## Configuration
+
+`modules.weddings.json` (+ `.Development.json`) provides `SnapShareOptions` and `PhotoStorageOptions`, validated at startup via `ValidateOnStart`. Storage secrets (`AccessKey`, `SecretKey`) come from environment variables (`Weddings__PhotoStorage__AccessKey`) outside development. See the root `CLAUDE.md` for the full config contract.

From e30334963e4c6f0a17b5cb4e0d08a80048c74e59 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 01:45:55 +0800
Subject: [PATCH 064/155] Eternelle-189 Update docs for RSVP module, domain
 rules, and endpoints

Replaced Tenancy with RSVP as next module in planning docs. Expanded module conventions, clarified catalog event consumers, and detailed Tenancy invariants and migrations. Enhanced Users and Weddings docs with domain invariants, value object limits, role/permission details, and comprehensive endpoint listings.
---
 CONTRIBUTING.md            | 13 +++++++++++++
 README.md                  |  2 +-
 docs/module-conventions.md |  2 +-
 docs/modules/catalog.md    |  2 +-
 docs/modules/tenancy.md    |  2 ++
 docs/modules/users.md      |  4 ++++
 docs/modules/weddings.md   | 15 +++++++++++----
 7 files changed, 33 insertions(+), 7 deletions(-)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index bf882ca..25af853 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -16,16 +16,20 @@ Each module is a **five-project** vertical slice: `Domain`, `Application`, `Infr
 - Owned entities (e.g. `EntourageMember`, `Partner`) are created and mutated exclusively through their aggregate root. Their factory and mutation methods are `internal`.
 - Value objects are `sealed record` with a private constructor, a `static Create()` factory returning `Result<T>`, an `internal static FromPersistence()` (trusts the DB, skips validation), and a sibling `{Vo}Errors` class.
 - String length limits are defined as a `public const int MaxLength` on the value object, not as magic numbers:
+
   ```csharp
   // On PersonName:
   public const int MaxLength = 150;
   ```
+
   `const` (not `static readonly`) is correct here: this is a monorepo where every project compiles from source, so there is no cross-assembly binary-inlining concern.
 - Domain errors use the `Error` type from `Eternelle.Common.Domain`:
+
   ```csharp
   public static Error NotFound(WeddingId id) =>
       Error.NotFound("Weddings.NotFound", $"Wedding {id.Value} was not found");
   ```
+
 - Domain events are raised via `Entity.Raise()` and are plain records implementing `IDomainEvent`.
 
 ### Application
@@ -36,20 +40,25 @@ Each module is a **five-project** vertical slice: `Domain`, `Application`, `Infr
 - Queries implement `IQuery<TResponse>`.
 - All handlers are `internal sealed class`.
 - Every command must have a matching `AbstractValidator<TCommand>`. `MaximumLength` rules **must** reference the value object's `MaxLength` constant (the single source of truth):
+
   ```csharp
   RuleFor(c => c.Name)
       .NotEmpty()
       .MaximumLength(PersonName.MaxLength);
   ```
+
 - Nullable fields are validated conditionally:
+
   ```csharp
   RuleFor(c => c.Subtitle)
       .MaximumLength(GroupSubtitle.MaxLength)
       .When(c => c.Subtitle is not null);
   ```
+
 - **Query handlers use Dapper** via `IDbConnectionFactory` with `CommandDefinition` (always pass `cancellationToken`). Never use EF Core in a query handler.
 - **Command handlers use domain repository interfaces** (`IWeddingRepository`, etc.) and `IUnitOfWork`. Call `entourageGroupRepository.Update(group)` after mutating owned entities, then `await unitOfWork.SaveChangesAsync(cancellationToken)`.
 - Reorder handlers **must** validate list completeness before iterating using a three-condition HashSet check:
+
   ```csharp
   HashSet<Guid> providedIds = [.. command.StoryMomentIds];
   if (command.StoryMomentIds.Count != providedIds.Count ||   // duplicate check
@@ -65,13 +74,17 @@ Each module is a **five-project** vertical slice: `Domain`, `Application`, `Infr
 - EF Core entity configurations go in `IEntityTypeConfiguration<T>` classes, one per aggregate root.
 - `UseSnakeCaseNamingConvention()` is active. Use explicit `HasColumnName()` only when the snake_case default is wrong.
 - All strongly-typed ID value objects must have a `ValueConverter` registered globally in `ConfigureConventions`, not per-property:
+
   ```csharp
   builder.Properties<WeddingId>().HaveConversion<WeddingIdConverter>();
   ```
+
 - String length constants from the domain must be referenced in `HasMaxLength()` — no magic numbers:
+
   ```csharp
   .HasMaxLength(PersonName.MaxLength)
   ```
+
 - Enums are persisted as integers via `HasConversion<int>()` (with a `CHECK` or unique constraint where a closed set must be enforced at the DB).
 - Repositories are `internal sealed class` implementing domain interfaces.
 - Each module declares its own schema via `modelBuilder.HasDefaultSchema(Schemas.{Module})` (`wedding`, `users`, `catalog`).
diff --git a/README.md b/README.md
index df27c1e..eff2bbd 100644
--- a/README.md
+++ b/README.md
@@ -154,4 +154,4 @@ Module-level configuration files (`modules.weddings.json`, `modules.users.json`,
 3. Register a `IDesignTimeDbContextFactory` in Infrastructure for EF Core tooling.
 4. Add health checks for any new external dependencies.
 
-The next planned module is **Tenancy** (`tenancy` schema). See [`docs/module-conventions.md`](docs/module-conventions.md) and `CONTRIBUTING.md` for layer-by-layer rules.
+The next planned module is **RSVP** (`rsvp` schema). See [`docs/module-conventions.md`](docs/module-conventions.md) and `CONTRIBUTING.md` for layer-by-layer rules.
diff --git a/docs/module-conventions.md b/docs/module-conventions.md
index 8e271f0..266acbf 100644
--- a/docs/module-conventions.md
+++ b/docs/module-conventions.md
@@ -1,6 +1,6 @@
 # Module Conventions
 
-This document describes the conventions for all modules in Eternelle. Follow it when scaffolding a new module (the next planned one is `Eternelle.Modules.Tenancy`). Three modules already follow it — Weddings, Users, and Catalog; see [`modules/`](modules/) for per-module reference docs.
+This document describes the conventions for all modules in Eternelle. Follow it when scaffolding a new module (the next planned one is `Eternelle.Modules.Rsvp`). Four modules already follow it — Weddings, Users, Catalog, and Tenancy; see [`modules/`](modules/) for per-module reference docs.
 
 ---
 
diff --git a/docs/modules/catalog.md b/docs/modules/catalog.md
index 1d5eaa3..8931768 100644
--- a/docs/modules/catalog.md
+++ b/docs/modules/catalog.md
@@ -91,7 +91,7 @@ All under `/catalog`, tagged `Catalog`. Mutating endpoints require the `catalog:
 
 ## Integration events
 
-**Published:** `CatalogTemplateManifestChangedIntegrationEvent(templateId, name, tier, sectionIds[], variants[])` — raised whenever a template's manifest changes (create, update, add theme/section/variant). Carries the full manifest so the future Tenancy module can validate tenant section/variant selections without calling back. No consumers wired yet.
+**Published:** `CatalogTemplateManifestChangedIntegrationEvent(templateId, name, tier, sectionIds[], variants[])` — raised whenever a template's manifest changes (create, update, add theme/section/variant). Carries the full manifest so consumers can validate section/variant selections without calling back. The Tenancy module consumes this event to keep its local copy of the template manifest up to date for tenant section/variant validation.
 
 ---
 
diff --git a/docs/modules/tenancy.md b/docs/modules/tenancy.md
index c19f466..8073fda 100644
--- a/docs/modules/tenancy.md
+++ b/docs/modules/tenancy.md
@@ -30,6 +30,7 @@ Owned collection:
 | `TenantSectionEntry` | `tenant_section_entries` | `SectionKey` (string), `Enabled`, `DisplayOrder`, `Variant?`, `OverrideTitle?`, `OverrideSubtitle?` |
 
 ### Invariants
+
 - `Publish()` / `Unpublish()` are idempotent guards (void, early-return if already in target state).
 - `AssignTemplate()` reconciles the section manifest: drops sections removed from the new template, adds new ones, preserves enabled/override state for sections common to both. Raises `TenantTemplateChangedDomainEvent` with the effective guest-upload limit.
 - `ConfigureSection()` returns `TenantErrors.SectionNotFound` for unknown section keys.
@@ -121,6 +122,7 @@ Tables (schema `tenancy`): `tenants`, `tenant_section_entries`, `catalog_templat
 Converters: `TenantIdConverter`, `TenantSectionEntryIdConverter` (registered globally in `ConfigureConventions`).
 
 ### Migrations
+
 - `20260528093515_InitialTenancy` — schema, all tables, indexes, outbox/inbox plumbing.
 
 The `tenant:edit` and `tenant:publish` permissions are seeded in the **Users** module migration `20260528110749_AddTenantPermissions`.
diff --git a/docs/modules/users.md b/docs/modules/users.md
index a61944f..7ab5cf0 100644
--- a/docs/modules/users.md
+++ b/docs/modules/users.md
@@ -12,6 +12,7 @@
 ## Aggregates & entities
 
 ### `User` (aggregate root) — table `users`
+
 | Property | Type | Notes |
 |---|---|---|
 | `Id` | `UserId` | `readonly record struct` over `Guid` |
@@ -24,9 +25,11 @@
 `User.Create(identityId, email, firstName, lastName)` assigns `Role.Couple` by default and raises `UserRegisteredDomainEvent`. `UpdateProfile(...)` only raises `UserProfileUpdatedDomainEvent` when a value actually changes.
 
 ### `Role` (reference entity) — table `roles` (PK `name`, ≤ 50 chars)
+
 Static instances: `Role.Admin`, `Role.Couple`, `Role.Guest`. Linked to permissions via `role_permissions`.
 
 ### `Permission` (reference entity) — table `permissions` (PK `code`, ≤ 100 chars)
+
 Codes include `users:read`, `users:update`, `catalog:manage`. Roles grant permissions; there is **no per-resource grant table** (the `iam.user_permission_grants` concept from the original design draft is not implemented).
 
 ---
@@ -82,5 +85,6 @@ Tagged `Users`.
 Tables (schema `users`): `users`, `roles`, `permissions`, `role_permissions`, `user_roles`, plus `outbox_messages` / `outbox_message_consumers` / `inbox_messages` / `inbox_message_consumers`. `UserId` ↔ `Guid` value converter registered globally; snake_case naming.
 
 ### Migrations
+
 - `20260521171549_AddUserAggregates` — schema + all tables; seeds roles (Admin/Couple/Guest), permissions (`users:read`, `users:update`), and role→permission mappings.
 - `20260527101020_AddCatalogManagePermission` — raw SQL (`ON CONFLICT DO NOTHING`) adding `catalog:manage` and granting it to `Admin`.
diff --git a/docs/modules/weddings.md b/docs/modules/weddings.md
index ed19b6b..6ace03c 100644
--- a/docs/modules/weddings.md
+++ b/docs/modules/weddings.md
@@ -31,6 +31,7 @@ This is the largest module. It is organised by aggregate; each aggregate root ha
 All IDs are `readonly record struct` wrappers over `Guid` (`WeddingId`, `PartnerId`, `EntourageGroupId`, …) with global EF value converters registered in `ConfigureConventions`.
 
 ### Wedding invariants
+
 - At most two partners (`PartnerNumber` 1 or 2); the pair is unique per wedding.
 - `TenantId` is a cross-module reference to `tenancy.tenants` — treated as opaque, never joined.
 - `SchemaVersion` starts at 1 and is bumped only by migration scripts, never by user edits.
@@ -38,6 +39,7 @@ All IDs are `readonly record struct` wrappers over `Guid` (`WeddingId`, `Partner
 - `Plan` defaults to `Free`; changed only via `ChangePlan()` (driven by a future Subscriptions integration event, not user edits).
 
 ### EntourageGroup pairing rules
+
 `EntourageGroup.PairMembers` enforces which group types may contain `EntourageCouple` pairings (see `EntourageGroupType`). Couples store `(MemberAId, MemberBId)` with a `CHECK (member_a_id < member_b_id)` canonical ordering so the same pair cannot be stored twice with swapped slots.
 
 ---
@@ -60,12 +62,12 @@ Every domain-meaningful string is a sealed-record VO with a `public const int Ma
 | `CallToAction` | 200 | SnapShare CTA text |
 | `Hashtag` | 100 | Wedding hashtag (stored without `#`) |
 | `InstagramHandle` | 30 | Stored without `@` |
-| `GroupLabel` | 150 / `GroupSubtitle` | 200 | Entourage group labels |
+| `GroupLabel`, `GroupSubtitle` | 150 / 200 | Entourage group label and subtitle |
 | `InternalNote` | 500 | Couple-only notes (not rendered) |
 | `PersonMessage` | 1000 | Entourage member message |
-| `AccessibilityText` | 300 / `ImageCaption` | 500 | Gallery alt text + caption |
-| `AccountHolderName` | 100 / `AccountNumber` | 50 / `AccountType` | 100 | Gift account fields |
-| `ColorName` | 100 / `HexColor` | 9 | Dress-code palette (`HexColor` validates `^#[0-9A-Fa-f]{3,8}$`) |
+| `AccessibilityText`, `ImageCaption` | 300 / 500 | Gallery alt text + caption |
+| `AccountHolderName`, `AccountNumber`, `AccountType` | 100 / 50 / 100 | Gift account fields |
+| `ColorName`, `HexColor` | 100 / 9 | Dress-code palette (`HexColor` validates `^#[0-9A-Fa-f]{3,8}$`) |
 | `VendorName` | 200 | Vendor business name |
 
 ---
@@ -101,6 +103,7 @@ All persisted as **integers** via `HasConversion<int>()`.
 All under `/weddings`, tagged `Weddings`, `RequireAuthorization()` unless noted. Route parent IDs are always passed through to the command for ownership checks.
 
 ### Wedding & partners
+
 | Verb | Route |
 |---|---|
 | POST | `weddings` |
@@ -112,15 +115,19 @@ All under `/weddings`, tagged `Weddings`, `RequireAuthorization()` unless noted.
 | POST | `weddings/{weddingId}/snap-share/regenerate-token` |
 
 ### Section CRUD (story-moments, ceremony-acts, gift-options, gallery, vendor-credits, reminders)
+
 Each follows the same shape: `POST` create, `GET` list, `PUT {id}` update, `DELETE {id}` delete, `PATCH …/reorder` reorder.
 
 ### Entourage
+
 `POST|GET weddings/{weddingId}/entourage`, `PATCH …/entourage/groups/reorder`, plus group CRUD under `…/entourage/groups/{groupId}`, member CRUD under `…/groups/{groupId}/members/{memberId}` (+ reorder), and couple pairing under `…/groups/{groupId}/couples/{coupleId}`.
 
 ### Dress code
+
 `…/dress-code` (create/get/update), `…/dress-code/{id}/colors[/{colorId}]` (+ reorder), `…/dress-code/{id}/images[/{imageId}]` (+ reorder).
 
 ### Guest photos (SnapShare)
+
 | Verb | Route | Auth |
 |---|---|---|
 | GET | `photos/upload` | anonymous (token context) |

From 016c18704d78158f4e9c5c8132bca98c837bc9a1 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 12:04:19 +0800
Subject: [PATCH 065/155] Eternelle-191 Add InternalsVisibleTo for Weddings +
 Rsvp infrastructure

---
 src/Common/Eternelle.Common.Domain/AssemblyInfo.cs | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 src/Common/Eternelle.Common.Domain/AssemblyInfo.cs

diff --git a/src/Common/Eternelle.Common.Domain/AssemblyInfo.cs b/src/Common/Eternelle.Common.Domain/AssemblyInfo.cs
new file mode 100644
index 0000000..9fe022d
--- /dev/null
+++ b/src/Common/Eternelle.Common.Domain/AssemblyInfo.cs
@@ -0,0 +1,7 @@
+using System.Runtime.CompilerServices;
+
+// VO FromPersistence() factory methods are `internal` to keep the validation-bypassing
+// constructor off public API. Each module's Infrastructure project needs visibility
+// to drive EF Core value converters.
+[assembly: InternalsVisibleTo("Eternelle.Modules.Weddings.Infrastructure")]
+[assembly: InternalsVisibleTo("Eternelle.Modules.Rsvp.Infrastructure")]

From acb010bf6687ad7c28aa68d9a4b286f52e7df156 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 12:35:36 +0800
Subject: [PATCH 066/155] Eternelle-191 Lift Person* VOs from Weddings to
 Common.Domain.People

PersonFirstName, PersonLastName, and PersonName moved from
Eternelle.Modules.Weddings.Domain.Shared to Eternelle.Common.Domain.People
so the upcoming Rsvp module can reference them without violating the
cross-module reference rule. All Weddings layers (Domain, Application,
Infrastructure) updated with using Eternelle.Common.Domain.People.
---
 Eternelle.slnx                                        | 11 ++++++++++-
 .../People}/PersonFirstName.cs                        |  4 ++--
 .../People}/PersonFirstNameErrors.cs                  |  2 +-
 .../Eternelle.Common.Domain/People}/PersonLastName.cs |  4 ++--
 .../People}/PersonLastNameErrors.cs                   |  2 +-
 .../Eternelle.Common.Domain/People}/PersonName.cs     |  6 +++---
 .../People}/PersonNameErrors.cs                       |  2 +-
 .../AddEntourageMemberCommandHandler.cs               |  1 +
 .../AddEntourageMemberCommandValidator.cs             |  1 +
 .../UpdateEntourageMemberCommandHandler.cs            |  1 +
 .../UpdateEntourageMemberCommandValidator.cs          |  1 +
 .../RegisterGuestPhotosCommandHandler.cs              |  1 +
 .../RegisterGuestPhotosCommandValidator.cs            |  2 +-
 .../Weddings/AddPartner/AddPartnerCommandHandler.cs   |  1 +
 .../Weddings/AddPartner/AddPartnerCommandValidator.cs |  2 +-
 .../UpdatePartner/UpdatePartnerCommandHandler.cs      |  1 +
 .../UpdatePartner/UpdatePartnerCommandValidator.cs    |  2 +-
 .../EntourageGroups/EntourageGroup.cs                 |  1 +
 .../EntourageGroups/EntourageMember.cs                |  1 +
 .../GuestPhotos/GuestPhoto.cs                         |  1 +
 .../Weddings/Partner.cs                               |  1 +
 .../Weddings/Wedding.cs                               |  1 +
 .../EntourageGroups/EntourageMemberConfiguration.cs   |  1 +
 .../GuestPhotos/GuestPhotoConfiguration.cs            |  1 +
 .../Weddings/WeddingConfiguration.cs                  |  1 +
 25 files changed, 38 insertions(+), 14 deletions(-)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared => Common/Eternelle.Common.Domain/People}/PersonFirstName.cs (92%)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared => Common/Eternelle.Common.Domain/People}/PersonFirstNameErrors.cs (88%)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared => Common/Eternelle.Common.Domain/People}/PersonLastName.cs (91%)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared => Common/Eternelle.Common.Domain/People}/PersonLastNameErrors.cs (88%)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared => Common/Eternelle.Common.Domain/People}/PersonName.cs (84%)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared => Common/Eternelle.Common.Domain/People}/PersonNameErrors.cs (87%)

diff --git a/Eternelle.slnx b/Eternelle.slnx
index 56937f5..aa61553 100644
--- a/Eternelle.slnx
+++ b/Eternelle.slnx
@@ -17,11 +17,13 @@
     <File Path="docs/superpowers/plans/2026-05-24-weddings-inbox-outbox-alignment.md" />
     <File Path="docs/superpowers/plans/2026-05-27-catalog-module.md" />
     <File Path="docs/superpowers/plans/2026-05-28-tenancy-module.md" />
+    <File Path="docs/superpowers/plans/2026-05-29-rsvp-module.md" />
   </Folder>
   <Folder Name="/docs/superpowers/specs/">
     <File Path="docs/superpowers/specs/2026-05-20-users-module-design.md" />
     <File Path="docs/superpowers/specs/2026-05-27-catalog-module-design.md" />
     <File Path="docs/superpowers/specs/2026-05-28-tenancy-module-design.md" />
+    <File Path="docs/superpowers/specs/2026-05-29-rsvp-module-design.md" />
   </Folder>
   <Folder Name="/Solution Items/">
     <File Path=".editorconfig" />
@@ -46,6 +48,13 @@
     <Project Path="src/Modules/Catalog/Eternelle.Modules.Catalog.IntegrationEvents/Eternelle.Modules.Catalog.IntegrationEvents.csproj" />
     <Project Path="src/Modules/Catalog/Eternelle.Modules.Catalog.Presentation/Eternelle.Modules.Catalog.Presentation.csproj" />
   </Folder>
+  <Folder Name="/src/Modules/Rsvp/">
+    <Project Path="src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Eternelle.Modules.Rsvp.Application.csproj" Id="584d8710-9449-4431-9359-59ec784eb276" />
+    <Project Path="src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Eternelle.Modules.Rsvp.Domain.csproj" Id="73e928a0-583f-4b26-93de-d541914305d4" />
+    <Project Path="src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Eternelle.Modules.Rsvp.Infrastructure.csproj" Id="2c5fbf2f-a4ee-46ed-beb7-d76408d75222" />
+    <Project Path="src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Eternelle.Modules.Rsvp.IntegrationEvents.csproj" Id="55dc7f38-3a59-4077-8249-46530f103444" />
+    <Project Path="src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Eternelle.Modules.Rsvp.Presentation.csproj" Id="4f8b50a7-2c4a-46eb-b83a-63007eab9e69" />
+  </Folder>
   <Folder Name="/src/Modules/Tenancy/">
     <Project Path="src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Eternelle.Modules.Tenancy.Application.csproj" />
     <Project Path="src/Modules/Tenancy/Eternelle.Modules.Tenancy.Domain/Eternelle.Modules.Tenancy.Domain.csproj" />
@@ -60,7 +69,7 @@
     <Project Path="src/Modules/Users/Eternelle.Modules.Users.IntegrationEvents/Eternelle.Modules.Users.IntegrationEvents.csproj" Id="f4f38cd7-8af7-44a6-a6aa-4b57bb9dc00d" />
     <Project Path="src/Modules/Users/Eternelle.Modules.Users.Presentation/Eternelle.Modules.Users.Presentation.csproj" Id="d6dde47a-faab-4b24-9738-6fe5d9e71738" />
   </Folder>
-  <Folder Name="/src/Modules/Wedding/">
+  <Folder Name="/src/Modules/Weddings/">
     <Project Path="src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Eternelle.Modules.Weddings.Application.csproj" Id="a6f4ff32-35b6-40bf-a034-4aff406678ea" />
     <Project Path="src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Eternelle.Modules.Weddings.Domain.csproj" Id="8ca34ec3-032b-4439-bc9f-318df0f9e87a" />
     <Project Path="src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Eternelle.Modules.Weddings.Infrastructure.csproj" Id="f7f463ef-3373-4063-9909-487fb52a34e0" />
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonFirstName.cs b/src/Common/Eternelle.Common.Domain/People/PersonFirstName.cs
similarity index 92%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonFirstName.cs
rename to src/Common/Eternelle.Common.Domain/People/PersonFirstName.cs
index d93b644..668bab4 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonFirstName.cs
+++ b/src/Common/Eternelle.Common.Domain/People/PersonFirstName.cs
@@ -1,6 +1,6 @@
-using Eternelle.Common.Domain;
+using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.Shared;
+namespace Eternelle.Common.Domain.People;
 
 /// <summary>
 /// First name of a partner. Paired with <see cref="PersonLastName"/> for partner records;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonFirstNameErrors.cs b/src/Common/Eternelle.Common.Domain/People/PersonFirstNameErrors.cs
similarity index 88%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonFirstNameErrors.cs
rename to src/Common/Eternelle.Common.Domain/People/PersonFirstNameErrors.cs
index 0aa5e1a..62e82af 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonFirstNameErrors.cs
+++ b/src/Common/Eternelle.Common.Domain/People/PersonFirstNameErrors.cs
@@ -1,6 +1,6 @@
 using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.Shared;
+namespace Eternelle.Common.Domain.People;
 
 public static class PersonFirstNameErrors
 {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonLastName.cs b/src/Common/Eternelle.Common.Domain/People/PersonLastName.cs
similarity index 91%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonLastName.cs
rename to src/Common/Eternelle.Common.Domain/People/PersonLastName.cs
index 2f15883..e2ee8be 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonLastName.cs
+++ b/src/Common/Eternelle.Common.Domain/People/PersonLastName.cs
@@ -1,6 +1,6 @@
-using Eternelle.Common.Domain;
+using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.Shared;
+namespace Eternelle.Common.Domain.People;
 
 /// <summary>
 /// Last name of a partner. Paired with <see cref="PersonFirstName"/> for partner records.
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonLastNameErrors.cs b/src/Common/Eternelle.Common.Domain/People/PersonLastNameErrors.cs
similarity index 88%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonLastNameErrors.cs
rename to src/Common/Eternelle.Common.Domain/People/PersonLastNameErrors.cs
index 94c1757..bcda934 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonLastNameErrors.cs
+++ b/src/Common/Eternelle.Common.Domain/People/PersonLastNameErrors.cs
@@ -1,6 +1,6 @@
 using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.Shared;
+namespace Eternelle.Common.Domain.People;
 
 public static class PersonLastNameErrors
 {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonName.cs b/src/Common/Eternelle.Common.Domain/People/PersonName.cs
similarity index 84%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonName.cs
rename to src/Common/Eternelle.Common.Domain/People/PersonName.cs
index 2f69c2f..3ea4f35 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonName.cs
+++ b/src/Common/Eternelle.Common.Domain/People/PersonName.cs
@@ -1,10 +1,10 @@
-using Eternelle.Common.Domain;
+using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.Shared;
+namespace Eternelle.Common.Domain.People;
 
 /// <summary>
 /// Value object for the display name of a person referenced by a wedding profile
-/// (entourage member, guest uploader). Single-field name — for partners that
+/// (entourage member, guest uploader). Single-field name — for partners that
 /// split first/last, see <see cref="PersonFirstName"/> and <see cref="PersonLastName"/>.
 /// </summary>
 public sealed record PersonName
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonNameErrors.cs b/src/Common/Eternelle.Common.Domain/People/PersonNameErrors.cs
similarity index 87%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonNameErrors.cs
rename to src/Common/Eternelle.Common.Domain/People/PersonNameErrors.cs
index cdf0f34..9831272 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/PersonNameErrors.cs
+++ b/src/Common/Eternelle.Common.Domain/People/PersonNameErrors.cs
@@ -1,6 +1,6 @@
 using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.Shared;
+namespace Eternelle.Common.Domain.People;
 
 public static class PersonNameErrors
 {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandHandler.cs
index da89e4b..c6a764a 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandHandler.cs
@@ -1,5 +1,6 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandValidator.cs
index ef086c4..c032270 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandHandler.cs
index ab04b26..8ed6b6b 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandHandler.cs
@@ -1,5 +1,6 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandValidator.cs
index c3b09e5..5f4c3bc 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
index 49f36d9..9a63a1e 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
@@ -1,6 +1,7 @@
 using Eternelle.Common.Application.Clock;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Application.Abstractions.Storage;
 using Eternelle.Modules.Weddings.Domain.GuestPhotos;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs
index 30296d8..2a914e9 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs
@@ -1,5 +1,5 @@
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Application.GuestPhotos.GenerateUploadSlots;
-using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
 
 namespace Eternelle.Modules.Weddings.Application.GuestPhotos.RegisterGuestPhotos;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/AddPartner/AddPartnerCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/AddPartner/AddPartnerCommandHandler.cs
index f5ebeca..b02513c 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/AddPartner/AddPartnerCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/AddPartner/AddPartnerCommandHandler.cs
@@ -1,6 +1,7 @@
 using Eternelle.Common.Application.Clock;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/AddPartner/AddPartnerCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/AddPartner/AddPartnerCommandValidator.cs
index 79f065e..8a9d233 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/AddPartner/AddPartnerCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/AddPartner/AddPartnerCommandValidator.cs
@@ -1,4 +1,4 @@
-using Eternelle.Modules.Weddings.Domain.Shared;
+using Eternelle.Common.Domain.People;
 using FluentValidation;
 
 namespace Eternelle.Modules.Weddings.Application.Weddings.AddPartner;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdatePartner/UpdatePartnerCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdatePartner/UpdatePartnerCommandHandler.cs
index eab9330..cc92f2c 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdatePartner/UpdatePartnerCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdatePartner/UpdatePartnerCommandHandler.cs
@@ -1,6 +1,7 @@
 using Eternelle.Common.Application.Clock;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdatePartner/UpdatePartnerCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdatePartner/UpdatePartnerCommandValidator.cs
index 6241cc5..cc472ce 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdatePartner/UpdatePartnerCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdatePartner/UpdatePartnerCommandValidator.cs
@@ -1,4 +1,4 @@
-using Eternelle.Modules.Weddings.Domain.Shared;
+using Eternelle.Common.Domain.People;
 using FluentValidation;
 
 namespace Eternelle.Modules.Weddings.Application.Weddings.UpdatePartner;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageGroup.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageGroup.cs
index 5a4a158..ace62fa 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageGroup.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageGroup.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageMember.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageMember.cs
index 41c21a0..7973eea 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageMember.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageMember.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhoto.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhoto.cs
index 7993799..2dca5a1 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhoto.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhoto.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Partner.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Partner.cs
index a93a592..198410c 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Partner.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Partner.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Domain.Shared;
 
 namespace Eternelle.Modules.Weddings.Domain.Weddings;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
index 4c631a4..301ff6d 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Domain.Shared;
 
 namespace Eternelle.Modules.Weddings.Domain.Weddings;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageMemberConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageMemberConfiguration.cs
index d590409..fd754ae 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageMemberConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageMemberConfiguration.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Microsoft.EntityFrameworkCore;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoConfiguration.cs
index e3ade91..7800c0c 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoConfiguration.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Domain.GuestPhotos;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Microsoft.EntityFrameworkCore;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
index 1b70913..28b0ec6 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 using Microsoft.EntityFrameworkCore;

From 1e26a95b7eedf16efddb031cf75bcc0562fc9d35 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 13:47:22 +0800
Subject: [PATCH 067/155] Eternelle-191 Refactor(common-domain): lift
 RichDescription to Common.Domain.Text

---
 .../Eternelle.Common.Domain/Text}/RichDescription.cs          | 4 ++--
 .../Eternelle.Common.Domain/Text}/RichDescriptionErrors.cs    | 2 +-
 .../CreateCeremonyAct/CreateCeremonyActCommandHandler.cs      | 1 +
 .../CreateCeremonyAct/CreateCeremonyActCommandValidator.cs    | 1 +
 .../UpdateCeremonyAct/UpdateCeremonyActCommandHandler.cs      | 1 +
 .../UpdateCeremonyAct/UpdateCeremonyActCommandValidator.cs    | 1 +
 .../CreateDressCodeConfigCommandHandler.cs                    | 2 +-
 .../CreateDressCodeConfigCommandValidator.cs                  | 2 +-
 .../UpdateDressCodeConfigCommandHandler.cs                    | 2 +-
 .../UpdateDressCodeConfigCommandValidator.cs                  | 2 +-
 .../CreateGiftOption/CreateGiftOptionCommandHandler.cs        | 1 +
 .../CreateGiftOption/CreateGiftOptionCommandValidator.cs      | 1 +
 .../UpdateGiftOption/UpdateGiftOptionCommandHandler.cs        | 1 +
 .../UpdateGiftOption/UpdateGiftOptionCommandValidator.cs      | 1 +
 .../Reminders/CreateReminder/CreateReminderCommandHandler.cs  | 1 +
 .../CreateReminder/CreateReminderCommandValidator.cs          | 1 +
 .../Reminders/UpdateReminder/UpdateReminderCommandHandler.cs  | 1 +
 .../UpdateReminder/UpdateReminderCommandValidator.cs          | 1 +
 .../CreateStoryMoment/CreateStoryMomentCommandHandler.cs      | 1 +
 .../CreateStoryMoment/CreateStoryMomentCommandValidator.cs    | 1 +
 .../UpdateStoryMoment/UpdateStoryMomentCommandHandler.cs      | 1 +
 .../UpdateStoryMoment/UpdateStoryMomentCommandValidator.cs    | 1 +
 .../CeremonyActs/CeremonyAct.cs                               | 1 +
 .../DressCodeConfigs/DressCodeConfig.cs                       | 1 +
 .../GiftOptions/GiftOption.cs                                 | 1 +
 .../Eternelle.Modules.Weddings.Domain/Reminders/Reminder.cs   | 1 +
 .../StoryMoments/StoryMoment.cs                               | 1 +
 .../CeremonyActs/CeremonyActConfiguration.cs                  | 1 +
 .../DressCodeConfigs/DressCodeConfigConfiguration.cs          | 2 +-
 .../GiftOptions/GiftOptionConfiguration.cs                    | 1 +
 .../Reminders/ReminderConfiguration.cs                        | 1 +
 .../StoryMoments/StoryMomentConfiguration.cs                  | 1 +
 32 files changed, 33 insertions(+), 8 deletions(-)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared => Common/Eternelle.Common.Domain/Text}/RichDescription.cs (90%)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared => Common/Eternelle.Common.Domain/Text}/RichDescriptionErrors.cs (88%)

diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/RichDescription.cs b/src/Common/Eternelle.Common.Domain/Text/RichDescription.cs
similarity index 90%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/RichDescription.cs
rename to src/Common/Eternelle.Common.Domain/Text/RichDescription.cs
index f461fb7..5837864 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/RichDescription.cs
+++ b/src/Common/Eternelle.Common.Domain/Text/RichDescription.cs
@@ -1,6 +1,6 @@
-using Eternelle.Common.Domain;
+using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.Shared;
+namespace Eternelle.Common.Domain.Text;
 
 public sealed record RichDescription
 {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/RichDescriptionErrors.cs b/src/Common/Eternelle.Common.Domain/Text/RichDescriptionErrors.cs
similarity index 88%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/RichDescriptionErrors.cs
rename to src/Common/Eternelle.Common.Domain/Text/RichDescriptionErrors.cs
index f04f92c..21a80a4 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Shared/RichDescriptionErrors.cs
+++ b/src/Common/Eternelle.Common.Domain/Text/RichDescriptionErrors.cs
@@ -1,6 +1,6 @@
 using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.Shared;
+namespace Eternelle.Common.Domain.Text;
 
 internal static class RichDescriptionErrors
 {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/CreateCeremonyAct/CreateCeremonyActCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/CreateCeremonyAct/CreateCeremonyActCommandHandler.cs
index d5620a5..678f168 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/CreateCeremonyAct/CreateCeremonyActCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/CreateCeremonyAct/CreateCeremonyActCommandHandler.cs
@@ -2,6 +2,7 @@
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.CeremonyActs;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/CreateCeremonyAct/CreateCeremonyActCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/CreateCeremonyAct/CreateCeremonyActCommandValidator.cs
index d75aab8..a42fc3c 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/CreateCeremonyAct/CreateCeremonyActCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/CreateCeremonyAct/CreateCeremonyActCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/UpdateCeremonyAct/UpdateCeremonyActCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/UpdateCeremonyAct/UpdateCeremonyActCommandHandler.cs
index f4a75b0..1f716b4 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/UpdateCeremonyAct/UpdateCeremonyActCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/UpdateCeremonyAct/UpdateCeremonyActCommandHandler.cs
@@ -2,6 +2,7 @@
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.CeremonyActs;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/UpdateCeremonyAct/UpdateCeremonyActCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/UpdateCeremonyAct/UpdateCeremonyActCommandValidator.cs
index 83f9880..dfeacd8 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/UpdateCeremonyAct/UpdateCeremonyActCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/UpdateCeremonyAct/UpdateCeremonyActCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/CreateDressCodeConfig/CreateDressCodeConfigCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/CreateDressCodeConfig/CreateDressCodeConfigCommandHandler.cs
index b205363..ea7508b 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/CreateDressCodeConfig/CreateDressCodeConfigCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/CreateDressCodeConfig/CreateDressCodeConfigCommandHandler.cs
@@ -2,7 +2,7 @@
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.DressCodeConfigs;
-using Eternelle.Modules.Weddings.Domain.Shared;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
 namespace Eternelle.Modules.Weddings.Application.DressCodeConfigs.CreateDressCodeConfig;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/CreateDressCodeConfig/CreateDressCodeConfigCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/CreateDressCodeConfig/CreateDressCodeConfigCommandValidator.cs
index 1aa74d7..efe198f 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/CreateDressCodeConfig/CreateDressCodeConfigCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/CreateDressCodeConfig/CreateDressCodeConfigCommandValidator.cs
@@ -1,4 +1,4 @@
-using Eternelle.Modules.Weddings.Domain.Shared;
+using Eternelle.Common.Domain.Text;
 using FluentValidation;
 
 namespace Eternelle.Modules.Weddings.Application.DressCodeConfigs.CreateDressCodeConfig;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/UpdateDressCodeConfig/UpdateDressCodeConfigCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/UpdateDressCodeConfig/UpdateDressCodeConfigCommandHandler.cs
index 8a7e61d..95b45e4 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/UpdateDressCodeConfig/UpdateDressCodeConfigCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/UpdateDressCodeConfig/UpdateDressCodeConfigCommandHandler.cs
@@ -2,7 +2,7 @@
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.DressCodeConfigs;
-using Eternelle.Modules.Weddings.Domain.Shared;
+using Eternelle.Common.Domain.Text;
 
 namespace Eternelle.Modules.Weddings.Application.DressCodeConfigs.UpdateDressCodeConfig;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/UpdateDressCodeConfig/UpdateDressCodeConfigCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/UpdateDressCodeConfig/UpdateDressCodeConfigCommandValidator.cs
index e6b95b6..be730b5 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/UpdateDressCodeConfig/UpdateDressCodeConfigCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/UpdateDressCodeConfig/UpdateDressCodeConfigCommandValidator.cs
@@ -1,4 +1,4 @@
-using Eternelle.Modules.Weddings.Domain.Shared;
+using Eternelle.Common.Domain.Text;
 using FluentValidation;
 
 namespace Eternelle.Modules.Weddings.Application.DressCodeConfigs.UpdateDressCodeConfig;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/CreateGiftOption/CreateGiftOptionCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/CreateGiftOption/CreateGiftOptionCommandHandler.cs
index 75f3e4e..8518f49 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/CreateGiftOption/CreateGiftOptionCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/CreateGiftOption/CreateGiftOptionCommandHandler.cs
@@ -2,6 +2,7 @@
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.GiftOptions;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/CreateGiftOption/CreateGiftOptionCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/CreateGiftOption/CreateGiftOptionCommandValidator.cs
index acf7ab7..b50754c 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/CreateGiftOption/CreateGiftOptionCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/CreateGiftOption/CreateGiftOptionCommandValidator.cs
@@ -1,4 +1,5 @@
 using Eternelle.Modules.Weddings.Domain.GiftOptions;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/UpdateGiftOption/UpdateGiftOptionCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/UpdateGiftOption/UpdateGiftOptionCommandHandler.cs
index 2773365..b203b94 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/UpdateGiftOption/UpdateGiftOptionCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/UpdateGiftOption/UpdateGiftOptionCommandHandler.cs
@@ -2,6 +2,7 @@
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.GiftOptions;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 
 namespace Eternelle.Modules.Weddings.Application.GiftOptions.UpdateGiftOption;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/UpdateGiftOption/UpdateGiftOptionCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/UpdateGiftOption/UpdateGiftOptionCommandValidator.cs
index 9292ad5..52e40ec 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/UpdateGiftOption/UpdateGiftOptionCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/UpdateGiftOption/UpdateGiftOptionCommandValidator.cs
@@ -1,4 +1,5 @@
 using Eternelle.Modules.Weddings.Domain.GiftOptions;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/CreateReminder/CreateReminderCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/CreateReminder/CreateReminderCommandHandler.cs
index f6c7e49..357b73b 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/CreateReminder/CreateReminderCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/CreateReminder/CreateReminderCommandHandler.cs
@@ -2,6 +2,7 @@
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.Reminders;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/CreateReminder/CreateReminderCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/CreateReminder/CreateReminderCommandValidator.cs
index 0b6d739..9a6b4af 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/CreateReminder/CreateReminderCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/CreateReminder/CreateReminderCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/UpdateReminder/UpdateReminderCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/UpdateReminder/UpdateReminderCommandHandler.cs
index bbb78e9..23ce1b8 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/UpdateReminder/UpdateReminderCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/UpdateReminder/UpdateReminderCommandHandler.cs
@@ -2,6 +2,7 @@
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.Reminders;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 
 namespace Eternelle.Modules.Weddings.Application.Reminders.UpdateReminder;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/UpdateReminder/UpdateReminderCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/UpdateReminder/UpdateReminderCommandValidator.cs
index e898679..eee2051 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/UpdateReminder/UpdateReminderCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/UpdateReminder/UpdateReminderCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/CreateStoryMoment/CreateStoryMomentCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/CreateStoryMoment/CreateStoryMomentCommandHandler.cs
index 1c62fe8..d68e839 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/CreateStoryMoment/CreateStoryMomentCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/CreateStoryMoment/CreateStoryMomentCommandHandler.cs
@@ -1,6 +1,7 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.StoryMoments;
 using Eternelle.Modules.Weddings.Domain.Weddings;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/CreateStoryMoment/CreateStoryMomentCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/CreateStoryMoment/CreateStoryMomentCommandValidator.cs
index 42408f7..eff905b 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/CreateStoryMoment/CreateStoryMomentCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/CreateStoryMoment/CreateStoryMomentCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/UpdateStoryMoment/UpdateStoryMomentCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/UpdateStoryMoment/UpdateStoryMomentCommandHandler.cs
index c765d10..7c1c378 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/UpdateStoryMoment/UpdateStoryMomentCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/UpdateStoryMoment/UpdateStoryMomentCommandHandler.cs
@@ -1,6 +1,7 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.StoryMoments;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/UpdateStoryMoment/UpdateStoryMomentCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/UpdateStoryMoment/UpdateStoryMomentCommandValidator.cs
index efd36bb..5ae2e98 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/UpdateStoryMoment/UpdateStoryMomentCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/UpdateStoryMoment/UpdateStoryMomentCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/CeremonyActs/CeremonyAct.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/CeremonyActs/CeremonyAct.cs
index 18eeefc..788a54f 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/CeremonyActs/CeremonyAct.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/CeremonyActs/CeremonyAct.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/DressCodeConfigs/DressCodeConfig.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/DressCodeConfigs/DressCodeConfig.cs
index 1c0ec14..b198889 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/DressCodeConfigs/DressCodeConfig.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/DressCodeConfigs/DressCodeConfig.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GiftOptions/GiftOption.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GiftOptions/GiftOption.cs
index c5c1425..a4ee90f 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GiftOptions/GiftOption.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GiftOptions/GiftOption.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Reminders/Reminder.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Reminders/Reminder.cs
index 6030aee..e1e4189 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Reminders/Reminder.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Reminders/Reminder.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/StoryMoments/StoryMoment.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/StoryMoments/StoryMoment.cs
index 358ea38..0958274 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/StoryMoments/StoryMoment.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/StoryMoments/StoryMoment.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/CeremonyActs/CeremonyActConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/CeremonyActs/CeremonyActConfiguration.cs
index 0d77174..ac7d9f2 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/CeremonyActs/CeremonyActConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/CeremonyActs/CeremonyActConfiguration.cs
@@ -1,4 +1,5 @@
 using Eternelle.Modules.Weddings.Domain.CeremonyActs;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.EntityFrameworkCore.Metadata.Builders;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/DressCodeConfigs/DressCodeConfigConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/DressCodeConfigs/DressCodeConfigConfiguration.cs
index 9c7189e..767bbd7 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/DressCodeConfigs/DressCodeConfigConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/DressCodeConfigs/DressCodeConfigConfiguration.cs
@@ -1,5 +1,5 @@
 using Eternelle.Modules.Weddings.Domain.DressCodeConfigs;
-using Eternelle.Modules.Weddings.Domain.Shared;
+using Eternelle.Common.Domain.Text;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.EntityFrameworkCore.Metadata.Builders;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GiftOptions/GiftOptionConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GiftOptions/GiftOptionConfiguration.cs
index c1548bc..9c8140d 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GiftOptions/GiftOptionConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GiftOptions/GiftOptionConfiguration.cs
@@ -1,4 +1,5 @@
 using Eternelle.Modules.Weddings.Domain.GiftOptions;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.EntityFrameworkCore.Metadata.Builders;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Reminders/ReminderConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Reminders/ReminderConfiguration.cs
index 3f8bc3b..1c2f0bd 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Reminders/ReminderConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Reminders/ReminderConfiguration.cs
@@ -1,4 +1,5 @@
 using Eternelle.Modules.Weddings.Domain.Reminders;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.EntityFrameworkCore.Metadata.Builders;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/StoryMoments/StoryMomentConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/StoryMoments/StoryMomentConfiguration.cs
index 0e15a5c..fb4da07 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/StoryMoments/StoryMomentConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/StoryMoments/StoryMomentConfiguration.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.StoryMoments;
 using Microsoft.EntityFrameworkCore;

From be2bb93b583915448b70bd313243f68699af5eda Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 14:16:08 +0800
Subject: [PATCH 068/155] Eternelle-191 Refactor(common-domain): lift
 GroupLabel and InternalNote to Common.Domain.Text

---
 .../Eternelle.Common.Domain/Text}/GroupLabel.cs             | 6 +++---
 .../Eternelle.Common.Domain/Text}/GroupLabelErrors.cs       | 2 +-
 .../Eternelle.Common.Domain/Text}/InternalNote.cs           | 4 ++--
 .../Eternelle.Common.Domain/Text}/InternalNoteErrors.cs     | 2 +-
 .../AddEntourageMember/AddEntourageMemberCommandHandler.cs  | 1 +
 .../AddEntourageMemberCommandValidator.cs                   | 1 +
 .../CreateEntourageGroupCommandHandler.cs                   | 1 +
 .../CreateEntourageGroupCommandValidator.cs                 | 1 +
 .../PairEntourageCoupleCommandHandler.cs                    | 1 +
 .../UpdateEntourageGroupCommandHandler.cs                   | 1 +
 .../UpdateEntourageGroupCommandValidator.cs                 | 1 +
 .../UpdateEntourageMemberCommandHandler.cs                  | 1 +
 .../UpdateEntourageMemberCommandValidator.cs                | 1 +
 .../EntourageGroups/EntourageCouple.cs                      | 1 +
 .../EntourageGroups/EntourageGroup.cs                       | 1 +
 .../EntourageGroups/EntourageMember.cs                      | 1 +
 .../EntourageGroups/EntourageCoupleConfiguration.cs         | 1 +
 .../EntourageGroups/EntourageGroupConfiguration.cs          | 1 +
 .../EntourageGroups/EntourageMemberConfiguration.cs         | 1 +
 19 files changed, 22 insertions(+), 7 deletions(-)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups => Common/Eternelle.Common.Domain/Text}/GroupLabel.cs (82%)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups => Common/Eternelle.Common.Domain/Text}/GroupLabelErrors.cs (85%)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups => Common/Eternelle.Common.Domain/Text}/InternalNote.cs (91%)
 rename src/{Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups => Common/Eternelle.Common.Domain/Text}/InternalNoteErrors.cs (85%)

diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/GroupLabel.cs b/src/Common/Eternelle.Common.Domain/Text/GroupLabel.cs
similarity index 82%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/GroupLabel.cs
rename to src/Common/Eternelle.Common.Domain/Text/GroupLabel.cs
index 8420231..97993bd 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/GroupLabel.cs
+++ b/src/Common/Eternelle.Common.Domain/Text/GroupLabel.cs
@@ -1,10 +1,10 @@
-using Eternelle.Common.Domain;
+using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.EntourageGroups;
+namespace Eternelle.Common.Domain.Text;
 
 /// <summary>
 /// Display label for an entourage group (e.g. "Ninongs &amp; Ninangs",
-/// "Secondary Sponsors"). Free text — couples often use Filipino-specific labels.
+/// "Secondary Sponsors"). Free text — couples often use Filipino-specific labels.
 /// </summary>
 public sealed record GroupLabel
 {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/GroupLabelErrors.cs b/src/Common/Eternelle.Common.Domain/Text/GroupLabelErrors.cs
similarity index 85%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/GroupLabelErrors.cs
rename to src/Common/Eternelle.Common.Domain/Text/GroupLabelErrors.cs
index e5969c2..15c9aec 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/GroupLabelErrors.cs
+++ b/src/Common/Eternelle.Common.Domain/Text/GroupLabelErrors.cs
@@ -1,6 +1,6 @@
 using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.EntourageGroups;
+namespace Eternelle.Common.Domain.Text;
 
 public static class GroupLabelErrors
 {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/InternalNote.cs b/src/Common/Eternelle.Common.Domain/Text/InternalNote.cs
similarity index 91%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/InternalNote.cs
rename to src/Common/Eternelle.Common.Domain/Text/InternalNote.cs
index b1dd02f..0cd5837 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/InternalNote.cs
+++ b/src/Common/Eternelle.Common.Domain/Text/InternalNote.cs
@@ -1,6 +1,6 @@
-using Eternelle.Common.Domain;
+using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.EntourageGroups;
+namespace Eternelle.Common.Domain.Text;
 
 /// <summary>
 /// Internal-only note visible to the couple (not rendered to guests).
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/InternalNoteErrors.cs b/src/Common/Eternelle.Common.Domain/Text/InternalNoteErrors.cs
similarity index 85%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/InternalNoteErrors.cs
rename to src/Common/Eternelle.Common.Domain/Text/InternalNoteErrors.cs
index df85d79..c7fc703 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/InternalNoteErrors.cs
+++ b/src/Common/Eternelle.Common.Domain/Text/InternalNoteErrors.cs
@@ -1,6 +1,6 @@
 using Eternelle.Common.Domain;
 
-namespace Eternelle.Modules.Weddings.Domain.EntourageGroups;
+namespace Eternelle.Common.Domain.Text;
 
 public static class InternalNoteErrors
 {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandHandler.cs
index c6a764a..2277f7c 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandHandler.cs
@@ -1,6 +1,7 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
 using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandValidator.cs
index c032270..329a49a 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/AddEntourageMember/AddEntourageMemberCommandValidator.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/CreateEntourageGroup/CreateEntourageGroupCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/CreateEntourageGroup/CreateEntourageGroupCommandHandler.cs
index cc11e56..ed37499 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/CreateEntourageGroup/CreateEntourageGroupCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/CreateEntourageGroup/CreateEntourageGroupCommandHandler.cs
@@ -1,5 +1,6 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/CreateEntourageGroup/CreateEntourageGroupCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/CreateEntourageGroup/CreateEntourageGroupCommandValidator.cs
index c62ae98..e877d45 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/CreateEntourageGroup/CreateEntourageGroupCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/CreateEntourageGroup/CreateEntourageGroupCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using FluentValidation;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/PairEntourageCouple/PairEntourageCoupleCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/PairEntourageCouple/PairEntourageCoupleCommandHandler.cs
index 4e0ecc6..68b8f45 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/PairEntourageCouple/PairEntourageCoupleCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/PairEntourageCouple/PairEntourageCoupleCommandHandler.cs
@@ -1,5 +1,6 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageGroup/UpdateEntourageGroupCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageGroup/UpdateEntourageGroupCommandHandler.cs
index cd51852..21edda5 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageGroup/UpdateEntourageGroupCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageGroup/UpdateEntourageGroupCommandHandler.cs
@@ -1,5 +1,6 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageGroup/UpdateEntourageGroupCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageGroup/UpdateEntourageGroupCommandValidator.cs
index 3f8e394..d5ca776 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageGroup/UpdateEntourageGroupCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageGroup/UpdateEntourageGroupCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using FluentValidation;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandHandler.cs
index 8ed6b6b..c87a09a 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandHandler.cs
@@ -1,6 +1,7 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
 using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandValidator.cs
index 5f4c3bc..3c38283 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/UpdateEntourageMember/UpdateEntourageMemberCommandValidator.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using FluentValidation;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageCouple.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageCouple.cs
index 31f3f46..e201407 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageCouple.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageCouple.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 
 namespace Eternelle.Modules.Weddings.Domain.EntourageGroups;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageGroup.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageGroup.cs
index ace62fa..08b7146 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageGroup.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageGroup.cs
@@ -1,5 +1,6 @@
 using Eternelle.Common.Domain;
 using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageMember.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageMember.cs
index 7973eea..05608f3 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageMember.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/EntourageGroups/EntourageMember.cs
@@ -1,5 +1,6 @@
 using Eternelle.Common.Domain;
 using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageCoupleConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageCoupleConfiguration.cs
index 646feed..954c5cf 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageCoupleConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageCoupleConfiguration.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Microsoft.EntityFrameworkCore;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageGroupConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageGroupConfiguration.cs
index cdf4c2a..3182dd6 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageGroupConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageGroupConfiguration.cs
@@ -1,3 +1,4 @@
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Microsoft.EntityFrameworkCore;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageMemberConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageMemberConfiguration.cs
index fd754ae..56a8241 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageMemberConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/EntourageGroups/EntourageMemberConfiguration.cs
@@ -1,4 +1,5 @@
 using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.Shared;
 using Microsoft.EntityFrameworkCore;

From d1d4f08b2e5c2e1a7fa94325beb86bc7e871d7fb Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 14:32:34 +0800
Subject: [PATCH 069/155] Eternelle-191 Add EmailAddress and PhoneNumber VOs

---
 .../People/EmailAddress.cs                    | 35 +++++++++++++++++++
 .../People/EmailAddressErrors.cs              | 14 ++++++++
 .../People/PhoneNumber.cs                     | 29 +++++++++++++++
 .../People/PhoneNumberErrors.cs               | 11 ++++++
 4 files changed, 89 insertions(+)
 create mode 100644 src/Common/Eternelle.Common.Domain/People/EmailAddress.cs
 create mode 100644 src/Common/Eternelle.Common.Domain/People/EmailAddressErrors.cs
 create mode 100644 src/Common/Eternelle.Common.Domain/People/PhoneNumber.cs
 create mode 100644 src/Common/Eternelle.Common.Domain/People/PhoneNumberErrors.cs

diff --git a/src/Common/Eternelle.Common.Domain/People/EmailAddress.cs b/src/Common/Eternelle.Common.Domain/People/EmailAddress.cs
new file mode 100644
index 0000000..47c89b3
--- /dev/null
+++ b/src/Common/Eternelle.Common.Domain/People/EmailAddress.cs
@@ -0,0 +1,35 @@
+namespace Eternelle.Common.Domain.People;
+
+public sealed record EmailAddress
+{
+    public const int MaxLength = 254;   // RFC 5321 envelope max
+
+    private EmailAddress(string value) { Value = value; }
+    public string Value { get; }
+
+    public static Result<EmailAddress> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<EmailAddress>(EmailAddressErrors.Empty);
+        }
+
+        string trimmed = raw.Trim();
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<EmailAddress>(EmailAddressErrors.TooLong);
+        }
+
+        int at = trimmed.IndexOf('@');
+        if (at <= 0 || at != trimmed.LastIndexOf('@') || at == trimmed.Length - 1)
+        {
+            return Result.Failure<EmailAddress>(EmailAddressErrors.InvalidFormat);
+        }
+
+        return Result.Success(new EmailAddress(trimmed));
+    }
+
+    public override string ToString() => Value;
+
+    internal static EmailAddress FromPersistence(string value) => new(value);
+}
diff --git a/src/Common/Eternelle.Common.Domain/People/EmailAddressErrors.cs b/src/Common/Eternelle.Common.Domain/People/EmailAddressErrors.cs
new file mode 100644
index 0000000..9ba3b7f
--- /dev/null
+++ b/src/Common/Eternelle.Common.Domain/People/EmailAddressErrors.cs
@@ -0,0 +1,14 @@
+namespace Eternelle.Common.Domain.People;
+
+public static class EmailAddressErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("EmailAddress.Empty", "Email is required.");
+
+    public static readonly Error TooLong =
+        Error.Problem("EmailAddress.TooLong",
+            $"Email must not exceed {EmailAddress.MaxLength} characters.");
+
+    public static readonly Error InvalidFormat =
+        Error.Problem("EmailAddress.InvalidFormat", "Email format is not valid.");
+}
diff --git a/src/Common/Eternelle.Common.Domain/People/PhoneNumber.cs b/src/Common/Eternelle.Common.Domain/People/PhoneNumber.cs
new file mode 100644
index 0000000..9440891
--- /dev/null
+++ b/src/Common/Eternelle.Common.Domain/People/PhoneNumber.cs
@@ -0,0 +1,29 @@
+namespace Eternelle.Common.Domain.People;
+
+public sealed record PhoneNumber
+{
+    public const int MaxLength = 30;
+
+    private PhoneNumber(string value) { Value = value; }
+    public string Value { get; }
+
+    public static Result<PhoneNumber> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<PhoneNumber>(PhoneNumberErrors.Empty);
+        }
+
+        string trimmed = raw.Trim();
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<PhoneNumber>(PhoneNumberErrors.TooLong);
+        }
+
+        return Result.Success(new PhoneNumber(trimmed));
+    }
+
+    public override string ToString() => Value;
+
+    internal static PhoneNumber FromPersistence(string value) => new(value);
+}
diff --git a/src/Common/Eternelle.Common.Domain/People/PhoneNumberErrors.cs b/src/Common/Eternelle.Common.Domain/People/PhoneNumberErrors.cs
new file mode 100644
index 0000000..9feb8de
--- /dev/null
+++ b/src/Common/Eternelle.Common.Domain/People/PhoneNumberErrors.cs
@@ -0,0 +1,11 @@
+namespace Eternelle.Common.Domain.People;
+
+public static class PhoneNumberErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("PhoneNumber.Empty", "Phone number is required.");
+
+    public static readonly Error TooLong =
+        Error.Problem("PhoneNumber.TooLong",
+            $"Phone number must not exceed {PhoneNumber.MaxLength} characters.");
+}

From 6c75477344cc1767788495e035cde30a5e6a38e5 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 15:25:32 +0800
Subject: [PATCH 070/155] Eternelle-191 Scaffold five-project module skeleton

---
 .../Eternelle.Modules.Rsvp.Application.csproj      |  7 +++++++
 .../Eternelle.Modules.Rsvp.Domain.csproj           |  5 +++++
 .../Eternelle.Modules.Rsvp.Infrastructure.csproj   | 14 ++++++++++++++
 ...Eternelle.Modules.Rsvp.IntegrationEvents.csproj |  5 +++++
 .../Eternelle.Modules.Rsvp.Presentation.csproj     |  7 +++++++
 5 files changed, 38 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Eternelle.Modules.Rsvp.Application.csproj
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Eternelle.Modules.Rsvp.Domain.csproj
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Eternelle.Modules.Rsvp.Infrastructure.csproj
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Eternelle.Modules.Rsvp.IntegrationEvents.csproj
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Eternelle.Modules.Rsvp.Presentation.csproj

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Eternelle.Modules.Rsvp.Application.csproj b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Eternelle.Modules.Rsvp.Application.csproj
new file mode 100644
index 0000000..63925c1
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Eternelle.Modules.Rsvp.Application.csproj
@@ -0,0 +1,7 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Rsvp.Domain\Eternelle.Modules.Rsvp.Domain.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Rsvp.IntegrationEvents\Eternelle.Modules.Rsvp.IntegrationEvents.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Application\Eternelle.Common.Application.csproj" />
+  </ItemGroup>
+</Project>
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Eternelle.Modules.Rsvp.Domain.csproj b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Eternelle.Modules.Rsvp.Domain.csproj
new file mode 100644
index 0000000..081262f
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Eternelle.Modules.Rsvp.Domain.csproj
@@ -0,0 +1,5 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Domain\Eternelle.Common.Domain.csproj" />
+  </ItemGroup>
+</Project>
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Eternelle.Modules.Rsvp.Infrastructure.csproj b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Eternelle.Modules.Rsvp.Infrastructure.csproj
new file mode 100644
index 0000000..9881cc2
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Eternelle.Modules.Rsvp.Infrastructure.csproj
@@ -0,0 +1,14 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Rsvp.Application\Eternelle.Modules.Rsvp.Application.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Rsvp.Presentation\Eternelle.Modules.Rsvp.Presentation.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Infrastructure\Eternelle.Common.Infrastructure.csproj" />
+    <ProjectReference Include="..\..\Weddings\Eternelle.Modules.Weddings.IntegrationEvents\Eternelle.Modules.Weddings.IntegrationEvents.csproj" />
+  </ItemGroup>
+  <ItemGroup>
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+  </ItemGroup>
+</Project>
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Eternelle.Modules.Rsvp.IntegrationEvents.csproj b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Eternelle.Modules.Rsvp.IntegrationEvents.csproj
new file mode 100644
index 0000000..7075f4d
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Eternelle.Modules.Rsvp.IntegrationEvents.csproj
@@ -0,0 +1,5 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Application\Eternelle.Common.Application.csproj" />
+  </ItemGroup>
+</Project>
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Eternelle.Modules.Rsvp.Presentation.csproj b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Eternelle.Modules.Rsvp.Presentation.csproj
new file mode 100644
index 0000000..e19bb0e
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Eternelle.Modules.Rsvp.Presentation.csproj
@@ -0,0 +1,7 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Rsvp.Application\Eternelle.Modules.Rsvp.Application.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Presentation\Eternelle.Common.Presentation.csproj" />
+    <ProjectReference Include="..\..\Weddings\Eternelle.Modules.Weddings.IntegrationEvents\Eternelle.Modules.Weddings.IntegrationEvents.csproj" />
+  </ItemGroup>
+</Project>

From 8438ae1bf12e8bb88af1109bc1421194e331d21e Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 15:46:33 +0800
Subject: [PATCH 071/155] Eternelle-191 Add IDs and shared VOs (LookupCode,
 DietaryNote)

---
 .../AssemblyInfo.cs                           |  3 ++
 .../Guests/GuestId.cs                         |  8 ++++
 .../Shared/DietaryNote.cs                     | 31 +++++++++++++++
 .../Shared/DietaryNoteErrors.cs               | 13 +++++++
 .../Shared/LookupCode.cs                      | 39 +++++++++++++++++++
 .../Shared/LookupCodeErrors.cs                | 13 +++++++
 .../Submissions/CompanionId.cs                |  7 ++++
 .../Submissions/SubmissionId.cs               |  8 ++++
 .../Weddings/WeddingId.cs                     |  7 ++++
 9 files changed, 129 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/AssemblyInfo.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestId.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/DietaryNote.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/DietaryNoteErrors.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/LookupCode.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/LookupCodeErrors.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/CompanionId.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/SubmissionId.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/WeddingId.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/AssemblyInfo.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/AssemblyInfo.cs
new file mode 100644
index 0000000..9fd09eb
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/AssemblyInfo.cs
@@ -0,0 +1,3 @@
+using System.Runtime.CompilerServices;
+
+[assembly: InternalsVisibleTo("Eternelle.Modules.Rsvp.Infrastructure")]
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestId.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestId.cs
new file mode 100644
index 0000000..79f440d
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestId.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public readonly record struct GuestId(Guid Value)
+{
+    public static GuestId New() => new(Guid.CreateVersion7());
+    public static GuestId Empty => new(Guid.Empty);
+    public override string ToString() => Value.ToString();
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/DietaryNote.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/DietaryNote.cs
new file mode 100644
index 0000000..bc2ac55
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/DietaryNote.cs
@@ -0,0 +1,31 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Rsvp.Domain.Shared;
+
+public sealed record DietaryNote
+{
+    public const int MaxLength = 300;
+
+    private DietaryNote(string value) { Value = value; }
+    public string Value { get; }
+
+    public static Result<DietaryNote> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<DietaryNote>(DietaryNoteErrors.Empty);
+        }
+
+        string trimmed = raw.Trim();
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<DietaryNote>(DietaryNoteErrors.TooLong);
+        }
+
+        return Result.Success(new DietaryNote(trimmed));
+    }
+
+    public override string ToString() => Value;
+
+    internal static DietaryNote FromPersistence(string value) => new(value);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/DietaryNoteErrors.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/DietaryNoteErrors.cs
new file mode 100644
index 0000000..b56b616
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/DietaryNoteErrors.cs
@@ -0,0 +1,13 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Rsvp.Domain.Shared;
+
+public static class DietaryNoteErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("Rsvp.DietaryNote.Empty", "Dietary note must not be empty.");
+
+    public static readonly Error TooLong =
+        Error.Problem("Rsvp.DietaryNote.TooLong",
+            $"Dietary note must not exceed {DietaryNote.MaxLength} characters.");
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/LookupCode.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/LookupCode.cs
new file mode 100644
index 0000000..d334524
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/LookupCode.cs
@@ -0,0 +1,39 @@
+using System.Text.RegularExpressions;
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Rsvp.Domain.Shared;
+
+public sealed partial record LookupCode
+{
+    public const int MaxLength = 8;
+
+    /// <summary>Unambiguous alphabet — no 0/O/1/I/L. 32 chars → 40 bits at length 8.</summary>
+    public const string Alphabet = "23456789ABCDEFGHJKMNPQRSTUVWXYZ";
+
+    private LookupCode(string value) { Value = value; }
+    public string Value { get; }
+
+    /// <summary>Validates and normalizes (uppercases, strips dashes/whitespace).</summary>
+    public static Result<LookupCode> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<LookupCode>(LookupCodeErrors.Empty);
+        }
+
+        string normalized = raw.Replace("-", string.Empty).Trim().ToUpperInvariant();
+        if (normalized.Length != MaxLength || !LookupCodeRegex().IsMatch(normalized))
+        {
+            return Result.Failure<LookupCode>(LookupCodeErrors.InvalidFormat);
+        }
+
+        return Result.Success(new LookupCode(normalized));
+    }
+
+    public override string ToString() => Value;
+
+    internal static LookupCode FromPersistence(string value) => new(value);
+
+    [GeneratedRegex("^[2-9A-HJ-NP-Z]{8}$")]
+    private static partial Regex LookupCodeRegex();
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/LookupCodeErrors.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/LookupCodeErrors.cs
new file mode 100644
index 0000000..cf6653e
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Shared/LookupCodeErrors.cs
@@ -0,0 +1,13 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Rsvp.Domain.Shared;
+
+public static class LookupCodeErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("Rsvp.LookupCode.Empty", "Lookup code is required.");
+
+    public static readonly Error InvalidFormat =
+        Error.Problem("Rsvp.LookupCode.InvalidFormat",
+            "Lookup code must be 8 characters from the unambiguous alphabet.");
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/CompanionId.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/CompanionId.cs
new file mode 100644
index 0000000..5cdd42d
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/CompanionId.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Rsvp.Domain.Submissions;
+
+public readonly record struct CompanionId(Guid Value)
+{
+    public static CompanionId New() => new(Guid.CreateVersion7());
+    public static CompanionId Empty => new(Guid.Empty);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/SubmissionId.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/SubmissionId.cs
new file mode 100644
index 0000000..c74e131
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/SubmissionId.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Rsvp.Domain.Submissions;
+
+public readonly record struct SubmissionId(Guid Value)
+{
+    public static SubmissionId New() => new(Guid.CreateVersion7());
+    public static SubmissionId Empty => new(Guid.Empty);
+    public override string ToString() => Value.ToString();
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/WeddingId.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/WeddingId.cs
new file mode 100644
index 0000000..9a74b67
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/WeddingId.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Rsvp.Domain.Weddings;
+
+public readonly record struct WeddingId(Guid Value)
+{
+    public static WeddingId Empty => new(Guid.Empty);
+    public override string ToString() => Value.ToString();
+}

From dd13ec53180a82bbfd99168af31e231d3ade0e1d Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 15:53:17 +0800
Subject: [PATCH 072/155] Eternelle-191 feat(rsvp-domain): add Wedding mirror
 entity + IWeddingProjection

---
 docs/database-design.md                       | 1296 +++++++++++++++++
 .../Weddings/IWeddingProjection.cs            |    8 +
 .../Weddings/Wedding.cs                       |   46 +
 3 files changed, 1350 insertions(+)
 create mode 100644 docs/database-design.md
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/IWeddingProjection.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/Wedding.cs

diff --git a/docs/database-design.md b/docs/database-design.md
new file mode 100644
index 0000000..aa66de2
--- /dev/null
+++ b/docs/database-design.md
@@ -0,0 +1,1296 @@
+# Database Design — Wedding Platform
+
+**Target**: PostgreSQL 17  
+**Architecture**: Modular Monolith (.NET 10) — one database, schema-namespaced modules  
+**Normal Form**: Third Normal Form (3NF) throughout
+
+> **About this document.** This is the original design draft. It captures the *intended* end-state schema and the rationale behind every modelling decision, so it still describes modules that are not yet built. **Section 1.1 records where the shipped .NET implementation deviates from this draft** — read it first, and treat the per-module docs under [`modules/`](modules/) as the source of truth for the four implemented modules (Weddings, Users, Catalog, Tenancy). The forward-looking schemas for RSVP and Guestbook below remain design intent.
+
+---
+
+## 1. Domain Identification (Bounded Contexts)
+
+The modular monolith is organized into **six bounded contexts**. Each maps to a PostgreSQL schema.
+
+| Module | PG Schema | Status | Responsibility |
+|---|---|---|---|
+| **Users** | `users` | ✅ Built | Shadow user profiles (Keycloak owns credentials), RBAC permissions |
+| **Catalog** | `catalog` | ✅ Built | Template registry, theme definitions (mostly static) |
+| **Wedding** | `wedding` | ✅ Built | All couple/wedding content data |
+| **Tenancy** | `tenancy` | ✅ Built | Tenant lifecycle, hostname resolution, template assignment, section ordering |
+| **RSVP** | `rsvp` | ❌ Planned | Guest list, RSVP submissions |
+| **Guestbook** | `guestbook` | ❌ Planned | Public guest messages |
+
+Cross-cutting conventions:
+- All primary keys are `uuid` (the implementation uses **UUIDv7**, time-ordered, generated app-side via strongly-typed ID `record struct`s — not `gen_random_uuid()`).
+- All tables carry `created_at` / `updated_at` (`timestamptz`) where the row is mutable.
+- `display_order int NOT NULL` on every ordered child table — never infer order from insert time.
+- **Closed vocabularies are stored as `int` columns** in the implemented modules — EF Core maps each C# enum with `HasConversion<int>()`. The DDL below shows them as PostgreSQL `ENUM`/`CREATE TYPE` for readability, but the shipped tables use integer columns (with a `CHECK` constraint where a native enum is shown).
+
+---
+
+## 1.1. Implementation status & deviations from this draft
+
+The following differences exist between this draft and the shipped .NET code. See [`modules/weddings.md`](modules/weddings.md), [`modules/users.md`](modules/users.md), and [`modules/catalog.md`](modules/catalog.md) for authoritative detail.
+
+**General**
+- The module the draft calls **IAM** is implemented as **Users** (PostgreSQL schema `users`). The draft sections and DDL below have been renamed accordingly.
+- IDs are app-generated **UUIDv7** via strongly-typed `record struct`s; there is no `gen_random_uuid()` default.
+- Every built schema also carries transactional-messaging tables: `outbox_messages` + `outbox_message_consumers` (and, for modules that consume events, `inbox_messages` + `inbox_message_consumers`). Catalog currently has outbox only.
+
+**Users (`users`) vs. IAM draft**
+- Tables: `users`, `roles`, `permissions`, `role_permissions`, `user_roles`. **`user_permission_grants` is not implemented** — there are no resource-scoped grants yet; authorization is role→permission only.
+- `users.users` columns are `id`, `identity_id` (the Keycloak `sub`; the draft called this `keycloak_user_id`), `email`, `first_name`, `last_name`, `phone_number` — there is no single `display_name`.
+- Role PK is the role `name` (text); Permission PK is the permission `code` (text, e.g. `users:read`, `users:update`, `catalog:manage`). Roles seeded: `Admin`, `Couple`, `Guest`.
+
+**Catalog (`catalog`) vs. draft**
+- `templates.id` is a **`uuid`** (UUIDv7), *not* a text slug like `'kapilya'`.
+- `templates.tier` is the int enum `TemplateTier` (`FirstClass = 1`, `Signature = 2`).
+- `SectionId` is an int enum with members `Hero, Story, Entourage, DressCode, Gallery, GiftGuide, Guestbook, Venue, Reminders, Rsvp, VendorCredits, SnapShare, GuestUploads` — different from the draft's hyphenated string set.
+- `template_section_variants` additionally carries `price_class` (`PriceClass`: Free/Pro/Plus) and a nullable `upload_limit`.
+- Theme `colors`/`typography`/`textures` and `templates.features` are `jsonb`.
+
+**Wedding (`wedding`) vs. draft**
+- `wedding.profiles` columns are `id`, `tenant_id` (unique), `schema_version`, `wedding_date`, `hashtag`, **`plan`** (int enum `WeddingPlan`: Free/Pro/Plus), `created_at`, `updated_at`. The draft's `livestream_url` and `message` columns are **not** present.
+- There are **no `wedding.events` or `wedding.venues` tables**. The ceremony program is modelled by `ceremony_acts` (with an `act_time`); event/venue modelling remains design intent.
+- A `wedding.guest_photos` table exists (SnapShare guest uploads) that the draft did not include — status int enum `GuestPhotoStatus` (Pending/Approved/Rejected/OverLimit).
+- `wedding.snap_share_configs` carries `upload_token`, `moderation_mode` (int), and `uploader_name_required` in addition to the draft's fields.
+- `entourage_group_type` adds `CoinBearers`, `BibleReaders`, and `LittleOnes`; `entourage_render_mode` and `gift_display_mode` are int columns.
+
+**Tenancy / RSVP / Guestbook** — not implemented. The schemas in §3.2, §3.5, §3.6 are design intent. Note the implemented Wedding module references `tenancy.tenants` only as an opaque `tenant_id` `Guid`; no `tenancy` schema or FK exists yet.
+
+---
+
+## 2. ER Diagram
+
+```mermaid
+erDiagram
+
+  %% ─── USERS (IAM in the original draft) ──────────────────
+  users_users {
+    uuid id PK
+    text keycloak_user_id UK
+    text email UK
+    text display_name
+    timestamptz created_at
+    timestamptz updated_at
+  }
+
+  users_permissions {
+    uuid id PK
+    text name UK
+    text description
+  }
+
+  users_roles {
+    uuid id PK
+    text name UK
+    text description
+  }
+
+  users_role_permissions {
+    uuid role_id FK
+    uuid permission_id FK
+  }
+
+  users_user_roles {
+    uuid user_id FK
+    uuid role_id FK
+  }
+
+  users_user_permission_grants {
+    uuid id PK
+    uuid user_id FK
+    uuid permission_id FK
+    text resource_type
+    uuid resource_id
+    timestamptz created_at
+  }
+
+  %% ─── TENANCY ─────────────────────────────────────────────
+  tenancy_tenants {
+    uuid id PK
+    uuid owner_user_id FK
+    text slug
+    int tier
+    boolean published
+    timestamptz created_at
+    timestamptz updated_at
+  }
+
+  tenancy_tenant_hostnames {
+    uuid id PK
+    uuid tenant_id FK
+    text hostname
+    boolean is_primary
+    timestamptz created_at
+  }
+
+  tenancy_tenant_template_configs {
+    uuid id PK
+    uuid tenant_id FK
+    text template_id FK
+    int theme_index
+    timestamptz updated_at
+  }
+
+  tenancy_tenant_section_entries {
+    uuid id PK
+    uuid tenant_id FK
+    section_id section_id
+    boolean enabled
+    int display_order
+    text variant
+    text override_title
+    text override_subtitle
+  }
+
+  %% ─── CATALOG ─────────────────────────────────────────────
+  catalog_templates {
+    uuid id PK
+    text name
+    text description
+    int tier
+    text preview_image_url
+    jsonb features
+    timestamptz created_at
+  }
+
+  catalog_template_themes {
+    uuid id PK
+    text template_id FK
+    text name
+    int theme_index
+    jsonb colors
+    jsonb typography
+    jsonb textures
+    boolean is_dark
+  }
+
+  catalog_template_supported_sections {
+    uuid id PK
+    text template_id FK
+    section_id section_id
+    int display_order
+  }
+
+  catalog_template_section_variants {
+    uuid id PK
+    text template_id FK
+    section_id section_id
+    text variant
+    boolean is_default
+  }
+
+  %% ─── WEDDING ─────────────────────────────────────────────
+  wedding_profiles {
+    uuid id PK
+    uuid tenant_id FK
+    int schema_version
+    date wedding_date
+    text hashtag
+    text livestream_url
+    text message
+    timestamptz created_at
+    timestamptz updated_at
+  }
+
+  wedding_partners {
+    uuid id PK
+    uuid wedding_id FK
+    int partner_number
+    text first_name
+    text last_name
+    text bio
+    text image_url
+  }
+
+  wedding_events {
+    uuid id PK
+    uuid wedding_id FK
+    uuid venue_id FK
+    text name
+    event_type event_type
+    date event_date
+    time event_time
+    text description
+    text dress_code
+    timestamptz created_at
+  }
+
+  wedding_venues {
+    uuid id PK
+    text name
+    text address
+    numeric lat
+    numeric lng
+    text map_url
+    text image_url
+    timestamptz created_at
+  }
+
+  wedding_story_moments {
+    uuid id PK
+    uuid wedding_id FK
+    text title
+    date story_date
+    text description
+    text image_url
+    int display_order
+  }
+
+  wedding_entourage_groups {
+    uuid id PK
+    uuid wedding_id FK
+    text label
+    text subtitle
+    text group_type
+    entourage_render_mode render_as
+    int display_order
+  }
+
+  wedding_entourage_members {
+    uuid id PK
+    uuid wedding_id FK
+    uuid group_id FK "NOT NULL"
+    text name
+    text role
+    text image_url
+    text message
+    text note
+    int seed
+    int display_order
+  }
+
+  wedding_entourage_couples {
+    uuid id PK
+    uuid group_id FK
+    uuid member_a_id FK
+    uuid member_b_id FK
+    text note
+    int display_order
+  }
+
+  wedding_gallery_images {
+    uuid id PK
+    uuid wedding_id FK
+    text src_url
+    text alt_text
+    int width_px
+    int height_px
+    text caption
+    int display_order
+    timestamptz created_at
+  }
+
+  wedding_gift_options {
+    uuid id PK
+    uuid wedding_id FK
+    text title
+    text description
+    gift_display_mode display_mode
+    text link_url
+    text image_url
+    text qr_image_url
+    text account_name
+    text account_number
+    text account_type
+    int display_order
+  }
+
+  wedding_dress_code_configs {
+    uuid id PK
+    uuid wedding_id FK
+    text description
+  }
+
+  wedding_dress_code_colors {
+    uuid id PK
+    uuid dress_code_id FK
+    text color_hex
+    text color_name
+    int display_order
+  }
+
+  wedding_dress_code_images {
+    uuid id PK
+    uuid dress_code_id FK
+    text image_url
+    int display_order
+  }
+
+  wedding_ceremony_acts {
+    uuid id PK
+    uuid wedding_id FK
+    text name
+    text description
+    text icon
+    text act_time
+    int display_order
+  }
+
+  wedding_vendor_credits {
+    uuid id PK
+    uuid wedding_id FK
+    text name
+    text role
+    text website_url
+    text image_url
+    text instagram_handle
+    int display_order
+  }
+
+  wedding_reminders {
+    uuid id PK
+    uuid wedding_id FK
+    text icon
+    text title
+    text body
+    int display_order
+  }
+
+  wedding_snap_share_configs {
+    uuid id PK
+    uuid wedding_id FK
+    text instagram_handle
+    text cta_text
+    boolean enabled
+  }
+
+  %% ─── RSVP ────────────────────────────────────────────────
+  rsvp_guests {
+    uuid id PK
+    uuid wedding_id FK
+    text first_name
+    text last_name
+    text email
+    text mobile_number
+    text lookup_code
+    boolean plus_one_allowed
+    int table_number
+    text group_name
+    timestamptz created_at
+  }
+
+  rsvp_submissions {
+    uuid id PK
+    uuid wedding_id FK
+    uuid guest_id FK
+    text name
+    text email
+    text mobile_number
+    boolean attending
+    int guest_count
+    text plus_one_name
+    boolean plus_one_attending
+    text dietary_restrictions
+    text meal_choice
+    text message
+    text confirmation_id
+    inet ip_address
+    timestamptz submitted_at
+  }
+
+  rsvp_check_ins {
+    uuid id PK
+    uuid guest_id FK
+    uuid wedding_id FK
+    uuid event_id FK
+    timestamptz checked_in_at
+    text checked_in_by
+  }
+
+  %% ─── GUESTBOOK ────────────────────────────────────────────
+  guestbook_entries {
+    uuid id PK
+    uuid wedding_id FK
+    text guest_name
+    text message
+    boolean is_approved
+    inet ip_address
+    timestamptz submitted_at
+  }
+
+  %% ─── RELATIONSHIPS ────────────────────────────────────────
+  users_users ||--o{ users_user_roles : "has"
+  users_roles ||--o{ users_user_roles : "granted to"
+  users_roles ||--o{ users_role_permissions : "has"
+  users_permissions ||--o{ users_role_permissions : "granted by"
+  users_users ||--o{ users_user_permission_grants : "has"
+  users_permissions ||--o{ users_user_permission_grants : "granted by"
+  users_users ||--o{ tenancy_tenants : "owns"
+
+  tenancy_tenants ||--o{ tenancy_tenant_hostnames : "has"
+  tenancy_tenants ||--|| tenancy_tenant_template_configs : "uses"
+  tenancy_tenants ||--o{ tenancy_tenant_section_entries : "has"
+  catalog_templates ||--o{ tenancy_tenant_template_configs : "assigned to"
+
+  catalog_templates ||--o{ catalog_template_themes : "has"
+  catalog_templates ||--o{ catalog_template_supported_sections : "supports"
+  catalog_template_supported_sections ||--o{ catalog_template_section_variants : "has variants"
+
+  tenancy_tenants ||--|| wedding_profiles : "has"
+  wedding_profiles ||--o{ wedding_partners : "has"
+  wedding_profiles ||--o{ wedding_events : "has"
+  wedding_venues ||--o{ wedding_events : "hosts"
+  wedding_profiles ||--o{ wedding_story_moments : "has"
+  wedding_profiles ||--o{ wedding_entourage_groups : "has"
+  wedding_entourage_groups ||--o{ wedding_entourage_members : "contains"
+  wedding_entourage_groups ||--o{ wedding_entourage_couples : "contains"
+  wedding_profiles ||--o{ wedding_gallery_images : "has"
+  wedding_profiles ||--o{ wedding_gift_options : "has"
+  wedding_profiles ||--|| wedding_dress_code_configs : "has"
+  wedding_dress_code_configs ||--o{ wedding_dress_code_colors : "has"
+  wedding_dress_code_configs ||--o{ wedding_dress_code_images : "has"
+  wedding_profiles ||--o{ wedding_ceremony_acts : "has"
+  wedding_profiles ||--o{ wedding_vendor_credits : "has"
+  wedding_profiles ||--o{ wedding_reminders : "has"
+  wedding_profiles ||--|| wedding_snap_share_configs : "has"
+
+  wedding_profiles ||--o{ rsvp_guests : "has"
+  rsvp_guests ||--o{ rsvp_submissions : "submits"
+  wedding_profiles ||--o{ rsvp_submissions : "receives"
+  rsvp_guests ||--o{ rsvp_check_ins : "checked in via"
+  wedding_events ||--o{ rsvp_check_ins : "tracks attendance for"
+
+  wedding_profiles ||--o{ guestbook_entries : "receives"
+```
+
+---
+
+## 3. Schema DDL
+
+### 3.1 — Users Module (IAM in the original draft)
+
+**Identity provider**: Keycloak. Keycloak owns all credentials, OAuth federation (Google, Facebook, etc.), session management, and token issuance. Your app never stores passwords or raw OAuth tokens. The only artifact Keycloak hands to the API is a signed JWT whose `sub` claim is the stable user identifier.
+
+**Auth flow summary**:
+```
+User logs in (any provider) → Keycloak → signed JWT
+API middleware → validate JWT signature (Keycloak JWKS) → extract sub
+              → SELECT * FROM users.users WHERE keycloak_user_id = sub
+              → if not found: INSERT shadow record (JIT provisioning)
+              → load roles + permissions → attach to request context
+```
+
+```sql
+CREATE SCHEMA users;
+
+-- Shadow profile: Keycloak owns credentials, this table owns app context.
+-- Created on first login via JIT provisioning (JWT sub → keycloak_user_id).
+CREATE TABLE users.users (
+  id               uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  keycloak_user_id text NOT NULL UNIQUE,   -- stable 'sub' claim from Keycloak JWT
+  email            text NOT NULL UNIQUE,   -- synced from JWT on each login
+  display_name     text,                   -- synced from Keycloak profile (optional)
+  created_at       timestamptz NOT NULL DEFAULT now(),
+  updated_at       timestamptz NOT NULL DEFAULT now()
+  -- NO password_hash  — Keycloak owns credentials
+  -- NO oauth_accounts — Keycloak owns all provider federation
+);
+
+-- Atomic permission names. These are what service-layer policy checks resolve against.
+CREATE TABLE users.permissions (
+  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  name        text NOT NULL UNIQUE,  -- e.g. 'tenant:edit', 'wedding:edit'
+  description text
+);
+
+-- Named roles that group permissions (RBAC layer).
+CREATE TABLE users.roles (
+  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  name        text NOT NULL UNIQUE,  -- 'super_admin', 'couple'
+  description text
+);
+
+-- Which permissions each role grants.
+CREATE TABLE users.role_permissions (
+  role_id       uuid NOT NULL REFERENCES users.roles(id) ON DELETE CASCADE,
+  permission_id uuid NOT NULL REFERENCES users.permissions(id) ON DELETE CASCADE,
+  PRIMARY KEY (role_id, permission_id)
+);
+
+-- Which roles each user holds.
+CREATE TABLE users.user_roles (
+  user_id uuid NOT NULL REFERENCES users.users(id) ON DELETE CASCADE,
+  role_id uuid NOT NULL REFERENCES users.roles(id) ON DELETE CASCADE,
+  PRIMARY KEY (user_id, role_id)
+);
+
+-- Resource-scoped permission overrides.
+-- Allows: "this user has tenant:edit on THIS specific tenant only".
+-- NULL resource_id = permission applies globally across all resources of that type.
+-- Evaluated after role_permissions; takes precedence for matching resource_id.
+CREATE TABLE users.user_permission_grants (
+  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  user_id       uuid NOT NULL REFERENCES users.users(id) ON DELETE CASCADE,
+  permission_id uuid NOT NULL REFERENCES users.permissions(id) ON DELETE CASCADE,
+  resource_type text,   -- 'tenant' | 'wedding' | NULL (global)
+  resource_id   uuid,   -- specific resource UUID; NULL = all resources of this type
+  created_at    timestamptz NOT NULL DEFAULT now(),
+  UNIQUE (user_id, permission_id, resource_type, resource_id)
+);
+```
+
+**Design notes**:
+- `users.oauth_accounts` from the original design is **removed** — Keycloak's internal DB tracks all provider federation. Your app is shielded from knowing whether a user authenticated via Google, Facebook, or a local Keycloak password.
+- `keycloak_user_id` is the only stable cross-system identifier. Never use `email` as a FK target — emails can change, Keycloak `sub` cannot.
+- The RBAC model is intentionally split into three layers: role-based (coarse, `users.user_roles` + `users.role_permissions`), then resource-scoped overrides (`users.user_permission_grants`). A `couple` user gets coarse permissions via their role, then a scoped grant ties those to their specific tenant on creation.
+- Permission resolution in the service layer: check resource-scoped grants first → fall back to role-based permissions. This is what Milan Jovanovic's `IPermissionService` pattern implements.
+
+---
+
+### 3.2 — Tenancy Module
+
+```sql
+CREATE SCHEMA tenancy;
+
+-- Tenant subscription tier. The tier *vocabulary* is owned by the Catalog module
+-- (Catalog.TemplateTier: FirstClass = 1, Signature = 2, persisted as an integer).
+-- Per the modular-monolith boundary rules, Tenancy does NOT share a cross-schema
+-- PostgreSQL type with Catalog — it keeps its own integer tier column mirroring the
+-- same values. A template may only be assigned to a tenant of a compatible tier
+-- (validated at the service layer, not via a cross-schema DB constraint).
+
+-- One tenant = one wedding website.
+-- owner_user_id is the account that created the tenant (typically the couple).
+-- Additional users (partner, coordinator, planner) are granted access via
+-- users.user_permission_grants scoped to this tenant's id — not via this column.
+-- Custom domains are stored in tenancy.tenant_hostnames, not here.
+-- Having custom_domain as a column on this table was redundant with hostname rows
+-- and has been removed.
+CREATE TABLE tenancy.tenants (
+  id              uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  owner_user_id   uuid NOT NULL REFERENCES users.users(id),
+  slug            text NOT NULL UNIQUE,          -- internal token; used once to generate the default hostname row
+  tier            int NOT NULL,                  -- mirrors Catalog.TemplateTier (1=FirstClass, 2=Signature)
+  published       boolean NOT NULL DEFAULT false,
+  created_at      timestamptz NOT NULL DEFAULT now(),
+  updated_at      timestamptz NOT NULL DEFAULT now()
+);
+
+-- A tenant can have multiple hostnames (subdomain + custom domain)
+CREATE TABLE tenancy.tenant_hostnames (
+  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id   uuid NOT NULL REFERENCES tenancy.tenants(id) ON DELETE CASCADE,
+  hostname    text NOT NULL UNIQUE,
+  is_primary  boolean NOT NULL DEFAULT false,
+  created_at  timestamptz NOT NULL DEFAULT now()
+);
+
+-- Each tenant uses exactly one template+theme combination at a time
+CREATE TABLE tenancy.tenant_template_configs (
+  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id   uuid NOT NULL UNIQUE REFERENCES tenancy.tenants(id) ON DELETE CASCADE,
+  template_id text NOT NULL REFERENCES catalog.templates(id),
+  theme_index int NOT NULL DEFAULT 0,
+  updated_at  timestamptz NOT NULL DEFAULT now()
+);
+
+-- Section ordering and overrides per tenant (replaces sectionManifest JSON blob).
+-- section_id references catalog.section_id — cross-schema type usage at the DB level
+-- is intentional here; it enforces that only known section identifiers can be stored.
+-- variant should match a row in catalog.template_section_variants for the tenant's
+-- current template; validated at the service layer rather than via a DB FK to keep
+-- template swaps non-destructive (a variant that was valid under the old template
+-- stays in the row without causing a constraint error until the couple reconfigures).
+CREATE TABLE tenancy.tenant_section_entries (
+  id                uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id         uuid NOT NULL REFERENCES tenancy.tenants(id) ON DELETE CASCADE,
+  section_id        catalog.section_id NOT NULL,
+  enabled           boolean NOT NULL DEFAULT true,
+  display_order     int NOT NULL,
+  variant           text,
+  override_title    text,
+  override_subtitle text,
+  UNIQUE (tenant_id, section_id)
+);
+```
+
+**Normalization notes**:
+- `tenant_hostnames` is extracted into its own table (1NF: `hostnames: string[]` on the TypeScript type was a repeating group). `tenant_template_configs` is a 1:1 but kept separate because it evolves independently — changing template/theme is a distinct concern from tenant identity.
+- `tenancy.tenants.custom_domain` has been removed. It was redundant with `tenant_hostnames` — a custom domain is just another hostname row with `is_primary = true`. Keeping both created a dual write problem and an inconsistency risk. The `idx_tenant_hostnames_hostname` index now covers both subdomain and custom domain resolution with a single lookup path.
+- The tier vocabulary is owned by the **Catalog** module (`Catalog.TemplateTier`, an `int` enum). The planned `tenancy.tenants.tier` is a separate `int` column mirroring the same values — modules do not share a cross-schema PostgreSQL type (that would couple their schemas and violate the boundary rules). Compatibility between a tenant's tier and an assigned template's tier is validated at the service layer.
+- Multi-user access (couple + coordinator + planner) is not modeled via additional columns on `tenancy.tenants`. The `owner_user_id` captures who created the tenant. All additional access is granted through `users.user_permission_grants` rows scoped to the tenant's id — each collaborator gets only the permissions they need (`wedding:edit`, `rsvp:manage`, etc.) without sharing credentials or ownership.
+
+---
+
+### 3.3 — Catalog Module
+
+```sql
+CREATE SCHEMA catalog;
+
+-- All section identifiers the platform recognises. Defined in the catalog schema
+-- because sections are a catalog concern — templates declare which ones they support.
+-- Also referenced by tenancy.tenant_section_entries (cross-schema type usage is fine
+-- at the DB level; application code still goes through the service layer).
+CREATE TYPE catalog.section_id AS ENUM (
+  'hero',
+  'our-story',
+  'entourage',
+  'schedule',
+  'map',
+  'dress-code',
+  'rsvp',
+  'gift-guide',
+  'gallery',
+  'guestbook',
+  'vendor-credits',
+  'ceremony-flow',
+  'countdown',
+  'snap-share',
+  'reminders'
+);
+
+CREATE TABLE catalog.templates (
+  id                text PRIMARY KEY,             -- 'kapilya', 'diwata', 'sage'
+  name              text NOT NULL,
+  description       text,
+  tier              int NOT NULL,                 -- Catalog.TemplateTier (1=FirstClass, 2=Signature)
+  preview_image_url text,
+  features          jsonb,                        -- TemplateFeatures (sparse flags)
+  created_at        timestamptz NOT NULL DEFAULT now()
+);
+
+-- Each template has 2–4 named theme variants
+CREATE TABLE catalog.template_themes (
+  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  template_id text NOT NULL REFERENCES catalog.templates(id) ON DELETE CASCADE,
+  name        text NOT NULL,                      -- "Sacred Gold", "Cathedral Night"
+  theme_index int NOT NULL,
+  colors      jsonb NOT NULL,                     -- ThemeColors (11 tokens)
+  typography  jsonb NOT NULL,                     -- ThemeTypography (3 font slots)
+  textures    jsonb,                              -- ThemeTextures (optional)
+  is_dark     boolean NOT NULL DEFAULT false,
+  UNIQUE (template_id, theme_index)
+);
+
+-- Which sections a given template supports and their default render order.
+CREATE TABLE catalog.template_supported_sections (
+  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  template_id   text NOT NULL REFERENCES catalog.templates(id) ON DELETE CASCADE,
+  section_id    catalog.section_id NOT NULL,
+  display_order int NOT NULL,
+  UNIQUE (template_id, section_id)
+);
+
+-- Which variants each section exposes within a given template.
+-- A variant is a named rendering style for a section — e.g. the hero section in
+-- Kapilya supports 'parallax' (default) and 'minimal', while in Diwata it only
+-- supports 'fullscreen'. This table is the source of truth for the variant picker
+-- UI and validates the variant value stored in tenancy.tenant_section_entries.
+-- A section with only one row here is effectively non-configurable (no picker shown).
+CREATE TABLE catalog.template_section_variants (
+  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  template_id   text NOT NULL REFERENCES catalog.templates(id) ON DELETE CASCADE,
+  section_id    catalog.section_id NOT NULL,
+  variant       text NOT NULL,
+  is_default    boolean NOT NULL DEFAULT false,
+  UNIQUE (template_id, section_id, variant),
+  -- Exactly one variant per section per template can be the default.
+  -- Enforced in application logic; a partial unique index keeps it honest.
+  CONSTRAINT one_default_per_section EXCLUDE USING btree (
+    template_id WITH =, section_id WITH =
+  ) WHERE (is_default = true)
+);
+```
+
+**Normalization notes**:
+- `features` stays as `jsonb` because it is a sparse set of boolean flags with no own identity, no foreign relationships, and it is only ever read/written atomically. The `themes[]` array in `TemplateManifest` is broken into `catalog.template_themes` rows (1NF).
+- `catalog.section_id` is a PostgreSQL ENUM covering all 15 platform section identifiers. It is defined in the catalog schema because sections are a catalog concern, and is reused by `tenancy.tenant_section_entries` at the DB level. This prevents unknown section identifiers from being stored in either table.
+- `catalog.template_section_variants` is a new table that records which rendering variants each section exposes within a given template, and which one is the default. Previously this was implicit knowledge baked into application code. Making it data-driven means the variant picker UI can be built from a query rather than hardcoded values, and invalid variants can be caught at the service layer on template assignment.
+- `tenancy.tenant_section_entries.variant` is not a FK into `catalog.template_section_variants` — this is intentional. If a couple switches templates, the old variant value stays in the row without causing a constraint error. The service layer validates the variant against the new template's variants and prompts reconfiguration only if needed.
+
+---
+
+### 3.4 — Wedding Module
+
+```sql
+CREATE SCHEMA wedding;
+
+-- Root aggregate for all wedding content
+CREATE TABLE wedding.profiles (
+  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  tenant_id      uuid NOT NULL UNIQUE REFERENCES tenancy.tenants(id) ON DELETE CASCADE,
+  schema_version int NOT NULL DEFAULT 1,
+  wedding_date   date NOT NULL,             -- primary date for countdown, hero headline, and sort
+  hashtag        text,
+  livestream_url text,
+  message        text,
+  created_at     timestamptz NOT NULL DEFAULT now(),
+  updated_at     timestamptz NOT NULL DEFAULT now()
+);
+
+-- Always exactly 2 partners; partner_number enforces that constraint.
+-- Parents are modeled as entourage groups (see wedding.entourage_groups) so
+-- each parent is an individual record with its own role, image, and message —
+-- this accommodates single-parent households, stepparents, and deceased parents.
+CREATE TABLE wedding.partners (
+  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id     uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  partner_number int NOT NULL CHECK (partner_number IN (1, 2)),
+  first_name     text NOT NULL,
+  last_name      text NOT NULL,
+  bio            text,
+  image_url      text,
+  UNIQUE (wedding_id, partner_number)
+);
+
+-- Venues are shared facts (reusable across events); not owned by any one wedding
+CREATE TABLE wedding.venues (
+  id         uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  name       text NOT NULL,
+  address    text NOT NULL,
+  lat        numeric(8,5) CHECK (lat BETWEEN -90 AND 90),
+  lng        numeric(8,5) CHECK (lng BETWEEN -180 AND 180),
+  map_url    text,
+  image_url  text,
+  created_at timestamptz NOT NULL DEFAULT now()
+);
+
+-- Enum of recognized event types. Ordering is semantic, not ceremonial —
+-- actual sort on rendering is (event_date ASC, event_time ASC NULLS LAST, event_type).
+CREATE TYPE wedding.event_type AS ENUM (
+  'civil_ceremony',
+  'ceremony',          -- religious / church
+  'cocktails',
+  'reception',
+  'after_party',
+  'rehearsal_dinner',
+  'other'
+);
+
+-- A wedding can have multiple events (ceremony, reception, after-party).
+-- Display order is derived from (event_date, event_time, event_type) — no
+-- manual display_order column. If two events legitimately tie on all three,
+-- a tiebreaker column can be added later; don't add it speculatively.
+CREATE TABLE wedding.events (
+  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id  uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  venue_id    uuid REFERENCES wedding.venues(id),
+  name        text NOT NULL,
+  event_type  wedding.event_type NOT NULL DEFAULT 'other',
+  event_date  date NOT NULL,
+  event_time  time,
+  description text,
+  dress_code  text,
+  created_at  timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE TABLE wedding.story_moments (
+  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  title         text NOT NULL,
+  story_date    date,
+  description   text NOT NULL,
+  image_url     text,
+  display_order int NOT NULL
+);
+
+-- Closed vocabulary for how a group's members are laid out.
+-- Consistent with wedding.event_type — use ENUM for any stable, bounded set of values.
+CREATE TYPE wedding.entourage_render_mode AS ENUM ('cards', 'list');
+
+-- Semantic group type — lets the renderer apply type-specific layouts without
+-- label-matching heuristics (e.g. principal sponsors always render as couples).
+-- NULL = uncategorized / user-defined group; 'other' = explicitly generic.
+CREATE TYPE wedding.entourage_group_type AS ENUM (
+  'parents',
+  'principal_sponsors',
+  'secondary_sponsors',
+  'bridesmaids',
+  'groomsmen',
+  'flower_girls',
+  'ring_bearers',
+  'other'
+);
+
+CREATE TABLE wedding.entourage_groups (
+  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  label         text NOT NULL,                              -- display label, e.g. "Ninongs & Ninangs"
+  subtitle      text,
+  group_type    wedding.entourage_group_type,               -- NULL = fully custom group
+  render_as     wedding.entourage_render_mode NOT NULL DEFAULT 'cards',
+  display_order int NOT NULL
+);
+
+-- Every member must belong to a group — there is no ungrouped member concept in
+-- this schema. Import scripts should create a default group (e.g. "Wedding Party")
+-- when migrating from a flat entourage array.
+CREATE TABLE wedding.entourage_members (
+  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  group_id      uuid NOT NULL REFERENCES wedding.entourage_groups(id) ON DELETE CASCADE,
+  name          text NOT NULL,
+  role          text NOT NULL,
+  image_url     text,
+  message       text,
+  note          text,
+  seed          int,                              -- for generative avatar placeholders
+  display_order int NOT NULL
+);
+
+-- Pairs two existing entourage_members into a couple for rendering purposes.
+-- This is a pure mapping table — each person's canonical data (name, image,
+-- role, message) still lives on wedding.entourage_members. Render flow:
+-- load group → load members → load couples for the group → if a member is
+-- referenced by a couples row render as a pair, otherwise render solo.
+-- Typical uses: Principal Sponsors (ninong/ninang pairs), Parents groups.
+CREATE TABLE wedding.entourage_couples (
+  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  group_id      uuid NOT NULL REFERENCES wedding.entourage_groups(id) ON DELETE CASCADE,
+  member_a_id   uuid NOT NULL REFERENCES wedding.entourage_members(id) ON DELETE CASCADE,
+  member_b_id   uuid NOT NULL REFERENCES wedding.entourage_members(id) ON DELETE CASCADE,
+  note          text,                     -- optional annotation shown under the pair
+  display_order int NOT NULL,
+  -- Canonical ordering: member_a_id < member_b_id (UUID comparison) ensures
+  -- (A, B) and (B, A) cannot both exist — prevents duplicate pairs with swapped slots.
+  CHECK (member_a_id < member_b_id),
+  UNIQUE (group_id, member_a_id, member_b_id)
+);
+
+CREATE TABLE wedding.gallery_images (
+  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  src_url       text NOT NULL,
+  alt_text      text NOT NULL,
+  width_px      int,
+  height_px     int,
+  caption       text,
+  display_order int NOT NULL,
+  created_at    timestamptz NOT NULL DEFAULT now()
+);
+
+-- Gift options support three interaction patterns, chosen per-row via display_mode:
+--   'link'           → tap opens link_url in a new tab (external registry, Honeyfund, etc.)
+--   'modal_details'  → tap opens an in-site modal showing QR + account details (no redirect)
+--   'inline_details' → card expands in place to reveal account details (no redirect)
+-- A couple that only wants to accept bank/e-wallet gifts uses 'modal_details' or
+-- 'inline_details' with qr_image_url + account_* fields and no link_url. A couple
+-- with an external registry uses 'link' with just link_url. Mixed rows per wedding
+-- are supported (e.g. one card per payment method, plus a registry card).
+CREATE TYPE wedding.gift_display_mode AS ENUM ('link', 'modal_details', 'inline_details');
+
+CREATE TABLE wedding.gift_options (
+  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id     uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  title          text NOT NULL,
+  description    text,
+  display_mode   wedding.gift_display_mode NOT NULL DEFAULT 'link',
+  link_url       text,                     -- required when display_mode = 'link'
+  image_url      text,                     -- card thumbnail (not the QR)
+  qr_image_url   text,                     -- bank / e-wallet QR code image
+  account_name   text,                     -- e.g. "Juan Dela Cruz"
+  account_number text,                     -- free-form string; formats vary by bank/e-wallet
+  account_type   text,                     -- e.g. "BPI Savings", "GCash", "Maya", "PayPal"
+  display_order  int NOT NULL
+);
+
+-- 1:1 with wedding_profiles
+CREATE TABLE wedding.dress_code_configs (
+  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id  uuid NOT NULL UNIQUE REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  description text NOT NULL
+);
+
+-- Extracted from DressCodeConfig.palette: string[] (1NF)
+CREATE TABLE wedding.dress_code_colors (
+  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  dress_code_id  uuid NOT NULL REFERENCES wedding.dress_code_configs(id) ON DELETE CASCADE,
+  color_hex      text NOT NULL CHECK (color_hex ~ '^#[0-9A-Fa-f]{3,8}$'),
+  color_name     text NOT NULL,
+  display_order  int NOT NULL
+);
+
+CREATE TABLE wedding.dress_code_images (
+  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  dress_code_id  uuid NOT NULL REFERENCES wedding.dress_code_configs(id) ON DELETE CASCADE,
+  image_url      text NOT NULL,
+  display_order  int NOT NULL
+);
+
+CREATE TABLE wedding.ceremony_acts (
+  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  name          text NOT NULL,
+  description   text,
+  icon          text,
+  act_time      time,                             -- clock time; consistent with wedding.events.event_time
+  display_order int NOT NULL
+);
+
+CREATE TABLE wedding.vendor_credits (
+  id               uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id       uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  name             text NOT NULL,
+  role             text NOT NULL,
+  website_url      text,
+  image_url        text,
+  instagram_handle text,
+  display_order    int NOT NULL
+);
+
+-- First-class tier only
+CREATE TABLE wedding.reminders (
+  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  icon          text NOT NULL,
+  title         text NOT NULL,
+  body          text NOT NULL,
+  display_order int NOT NULL
+);
+
+-- 1:1 with wedding_profiles. The wedding hashtag is canonical on
+-- wedding.profiles.hashtag — this section reads from there rather than
+-- storing its own copy. Only section-specific content lives here.
+CREATE TABLE wedding.snap_share_configs (
+  id               uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id       uuid NOT NULL UNIQUE REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  instagram_handle text,                                  -- section-scoped handle, if different from a profile-level one
+  cta_text         text,                                  -- optional call-to-action, e.g. "Tag us in your photos!"
+  enabled          boolean NOT NULL DEFAULT true
+);
+```
+
+**Normalization notes**:
+- `DressCodeConfig.palette: string[]` was a repeating group (violates 1NF) → extracted to `dress_code_colors`
+- `DressCodeConfig.images: string[]` same pattern → extracted to `dress_code_images`
+- `venues` is separated from `events` because venue data has its own identity and coordinates (avoids transitive dependency: event → venue_name → venue_address violates 3NF)
+- `dress_code_configs` and `snap_share_configs` are 1:1 tables to keep `wedding.profiles` narrow and allow these configs to evolve independently
+- `wedding.partners.parents` (free-text) was removed — parents are modeled as entourage groups so each parent has their own record (role, image, message). This accommodates single-parent households, stepparents, and deceased parents.
+- `wedding.events.display_order` was removed in favor of the `event_type` enum + `(event_date, event_time)` sort. The enum also unlocks semantic rendering (type badges, ceremony-specific sections linking to the ceremony event).
+- `wedding.entourage_couples` is a pure mapping table — it does not duplicate member names. Each person's canonical data lives on `wedding.entourage_members`; the couples table only groups two members into a rendered pair.
+- `wedding.snap_share_configs.hashtag` was removed — the hashtag is canonical on `wedding.profiles.hashtag` and all rendering reads from there. Storing it twice was a modeling smell (the same concept spelled two ways).
+- `wedding.gift_options` supports three interaction modes (`link`, `modal_details`, `inline_details`) so a couple can mix external registry links with inline bank/QR gift cards in the same section without two separate tables.
+- `wedding.entourage_render_mode` and `wedding.gift_display_mode` are PostgreSQL ENUMs — consistent with `wedding.event_type`. Any closed vocabulary with bounded values uses an ENUM rather than a `text CHECK (... IN (...))` constraint.
+- `wedding.entourage_group_type` ENUM allows the renderer to apply type-specific layouts (e.g. principal sponsors always render as couples) without matching on label strings. NULL means a fully custom user-defined group.
+- `wedding.entourage_members.group_id` is `NOT NULL` — there is no ungrouped member concept in this schema. The flat `entourage[]` array from the TypeScript document model is resolved to a default group on import.
+- `wedding.entourage_couples` enforces `CHECK (member_a_id < member_b_id)` — UUID comparison provides a canonical ordering that prevents the same pair from being registered twice with swapped member slots.
+- `wedding.profiles.wedding_date` is the canonical primary date for countdown rendering, hero headline, and sort. Individual event dates live on `wedding.events`; this avoids loading all events just to determine the primary date.
+- `wedding.dress_code_colors.color_hex` enforces `CHECK (color_hex ~ '^#[0-9A-Fa-f]{3,8}$')` — validates hex format at the DB boundary rather than relying solely on application-layer validation.
+- `wedding.ceremony_acts.act_time` uses the `time` type, consistent with `wedding.events.event_time`.
+
+---
+
+### 3.5 — RSVP Module
+
+```sql
+CREATE SCHEMA rsvp;
+
+-- Pre-seeded guest list (managed by couple).
+-- Each guest gets a lookup_code — a short, unguessable token (e.g. 'K4X9-MJ2R')
+-- that is the basis for QR code generation. The QR is not stored here; it is
+-- generated on demand by the application from the lookup URL:
+--   https://{hostname}/rsvp/{lookup_code}
+-- Scanning the QR pre-fills the RSVP form and on the wedding day triggers check-in.
+CREATE TABLE rsvp.guests (
+  id               uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id       uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  first_name       text NOT NULL,
+  last_name        text NOT NULL,
+  email            text,
+  mobile_number    text,                         -- for SMS reminders or WhatsApp invites
+  lookup_code      text NOT NULL UNIQUE,         -- crypto-random token; drives QR generation
+  plus_one_allowed boolean NOT NULL DEFAULT false,
+  table_number     int,
+  group_name       text,
+  created_at       timestamptz NOT NULL DEFAULT now()
+);
+
+-- Immutable append-only RSVP submissions (audit log).
+-- name, email, and mobile_number are intentionally denormalized — they capture
+-- what the guest typed at submission time, not the couple's corrected guest list entry.
+CREATE TABLE rsvp.submissions (
+  id                   uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id           uuid NOT NULL REFERENCES wedding.profiles(id),
+  guest_id             uuid REFERENCES rsvp.guests(id),  -- NULL for anonymous walk-in
+  name                 text NOT NULL,                    -- denormalized for audit trail
+  email                text,
+  mobile_number        text,                             -- denormalized for audit trail
+  attending            boolean NOT NULL,
+  guest_count          int NOT NULL DEFAULT 1,
+  plus_one_name        text,
+  plus_one_attending   boolean,
+  dietary_restrictions text,
+  meal_choice          text,
+  message              text,
+  confirmation_id      text NOT NULL UNIQUE DEFAULT gen_random_uuid()::text,
+  ip_address           inet,
+  submitted_at         timestamptz NOT NULL DEFAULT now()
+);
+
+-- Day-of attendance tracking. One row per guest per event they physically attend.
+-- Populated by scanning the guest's QR code at the venue entrance.
+-- Scoped to a specific event so multi-event weddings (ceremony + reception +
+-- after-party) can be tracked independently — a guest might attend the ceremony
+-- but not the reception, and the coordinator needs per-event head counts.
+-- checked_in_by records the staff member or device that performed the scan.
+CREATE TABLE rsvp.check_ins (
+  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  guest_id       uuid NOT NULL REFERENCES rsvp.guests(id) ON DELETE CASCADE,
+  wedding_id     uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  event_id       uuid REFERENCES wedding.events(id) ON DELETE SET NULL,  -- NULL = general check-in
+  checked_in_at  timestamptz NOT NULL DEFAULT now(),
+  checked_in_by  text,                                  -- staff name or scanner device ID
+  UNIQUE (guest_id, event_id)                           -- a guest checks in once per event
+);
+```
+
+**Normalization notes**:
+- `rsvp.submissions.name`, `email`, and `mobile_number` are intentionally denormalized — they capture what the guest typed at submission time, which is the correct audit record even if the couple later edits the guest list entry. This is controlled denormalization justified by immutability.
+- `rsvp.guests.lookup_code` is `NOT NULL` — every guest must have a token. It is the basis for QR code generation and the RSVP self-lookup URL. The QR image itself is not stored; it is generated on demand by the application from `https://{hostname}/rsvp/{lookup_code}`.
+- `rsvp.check_ins` is a separate table rather than a `checked_in_at` column on `rsvp.guests` because a wedding has multiple events. A guest may attend the ceremony but not the reception — per-event rows with `event_id` capture this granularity and enable independent head counts per event. The `UNIQUE (guest_id, event_id)` constraint prevents double check-in to the same event.
+- `rsvp.check_ins.event_id` is nullable — `NULL` means a general wedding-day check-in not scoped to a specific event, which covers simpler single-event weddings without requiring the coordinator to select an event during the scan.
+
+---
+
+### 3.6 — Guestbook Module
+
+```sql
+CREATE SCHEMA guestbook;
+
+CREATE TABLE guestbook.entries (
+  id           uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  wedding_id   uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
+  guest_name   text NOT NULL,
+  message      text NOT NULL,
+  is_approved  boolean NOT NULL DEFAULT true,
+  ip_address   inet,
+  submitted_at timestamptz NOT NULL DEFAULT now()
+);
+```
+
+---
+
+## 4. Indexes
+
+```sql
+-- Users: JWT validation and permission resolution
+CREATE UNIQUE INDEX idx_users_users_keycloak_user_id ON users.users (keycloak_user_id);
+CREATE INDEX idx_users_user_roles_user_id ON users.user_roles (user_id);
+CREATE INDEX idx_users_user_permission_grants_user_id ON users.user_permission_grants (user_id, resource_type, resource_id);
+
+-- Tenant resolution hot path (middleware, every request)
+-- custom_domain index removed — custom domains are now hostname rows in tenant_hostnames,
+-- so idx_tenant_hostnames_hostname covers both subdomain and custom domain lookups.
+CREATE INDEX idx_tenant_hostnames_hostname ON tenancy.tenant_hostnames (hostname);
+CREATE INDEX idx_tenants_slug ON tenancy.tenants (slug);
+
+-- Wedding content lookups by wedding_id (all child tables)
+-- Events sort derives from (event_date, event_time, event_type) — see DDL comment.
+CREATE INDEX idx_wedding_events_wedding_id ON wedding.events (wedding_id, event_date, event_time);
+CREATE INDEX idx_wedding_story_moments_wedding_id ON wedding.story_moments (wedding_id, display_order);
+CREATE INDEX idx_wedding_entourage_groups_wedding_id ON wedding.entourage_groups (wedding_id, display_order);
+CREATE INDEX idx_wedding_entourage_members_group_id ON wedding.entourage_members (group_id, display_order);
+CREATE INDEX idx_wedding_entourage_couples_group_id ON wedding.entourage_couples (group_id, display_order);
+CREATE INDEX idx_wedding_gallery_images_wedding_id ON wedding.gallery_images (wedding_id, display_order);
+
+-- RSVP lookups
+CREATE INDEX idx_rsvp_guests_lookup_code ON rsvp.guests (lookup_code);   -- QR scan hot path
+CREATE INDEX idx_rsvp_guests_wedding_id ON rsvp.guests (wedding_id);
+CREATE INDEX idx_rsvp_submissions_wedding_id ON rsvp.submissions (wedding_id);
+CREATE INDEX idx_rsvp_submissions_guest_id ON rsvp.submissions (guest_id);
+
+-- Check-in tallying (per-event head counts and per-guest lookups)
+CREATE INDEX idx_rsvp_check_ins_wedding_event ON rsvp.check_ins (wedding_id, event_id);
+CREATE INDEX idx_rsvp_check_ins_guest_id ON rsvp.check_ins (guest_id);
+
+-- Guestbook lookups
+CREATE INDEX idx_guestbook_entries_wedding_id ON guestbook.entries (wedding_id, submitted_at DESC);
+```
+
+---
+
+## 5. Module Boundary Rules
+
+In a modular monolith, application code must respect these cross-module access rules. Direct cross-schema JOINs are only permitted in infrastructure/repository layers, not in service or use-case layers.
+
+| From Module | May directly query | Must call service API for |
+|---|---|---|
+| **Tenancy** | `users.users` (FK lookup only) | — |
+| **Catalog** | — | — |
+| **Wedding** | `tenancy.tenants` (FK lookup only) | `rsvp`, `guestbook` |
+| **RSVP** | `wedding.profiles` (FK lookup only) | `tenancy`, `users` |
+| **Guestbook** | `wedding.profiles` (FK lookup only) | `tenancy`, `users` |
+
+---
+
+## 6. Design Decisions & Tradeoffs
+
+### Why Keycloak instead of managing credentials directly?
+
+Keycloak takes the full identity stack off the application: password hashing, OAuth provider federation (Google, Facebook, Apple, etc.), token rotation, brute-force protection, and session management are all handled externally. The app's `users` schema shrinks to a shadow profile table and an RBAC model — the parts only the application can own.
+
+The key consequence is that `users.oauth_accounts` (from a self-managed design) disappears entirely. Whether a user logged in via Google or a local password is Keycloak's concern. The API only ever sees a validated JWT `sub` claim, which maps to `users.users.keycloak_user_id`. This identifier is stable for the lifetime of the user regardless of which provider they used.
+
+### Why keep RBAC in the app DB and not in Keycloak?
+
+Keycloak can carry role claims inside JWTs via realm/client roles. But fine-grained permissions — especially resource-scoped ones ("can edit *this specific tenant*") — are better owned by the application DB because:
+- They change frequently as business logic evolves, without needing a Keycloak realm reconfiguration
+- They can be queried relationally (e.g., "list all users with access to this tenant")
+- They are testable in isolation without a running Keycloak instance
+
+Keycloak handles authentication ("who are you?"). The `users` schema handles authorization ("what can you do, and to what?").
+
+### Why not store `WeddingDocument` as a single JSONB column?
+
+The current Phase 1–2 implementation stores content as a JSON file on disk. That works for read-only rendering but breaks down for Phase 3 because:
+- You cannot query inside JSON without `jsonb` operators (slow, no index benefit for list operations)
+- You cannot enforce referential integrity on embedded objects (e.g., RSVP guest IDs)
+- Partial updates (edit one story moment) require fetching and rewriting the entire document
+
+The normalized schema solves all three. The existing `migrateDocument()` migration utility maps directly to the `schema_version` column on `wedding.profiles`.
+
+### Why keep `catalog.template_themes.colors` as JSONB?
+
+`ThemeColors` has 11 tightly-coupled color tokens. They are always read and written together atomically (selecting a theme), have no individual queryability requirement, and a flat table of 11 columns would add schema churn every time a new token is added. JSONB is correct here.
+
+### Why is `wedding.venues` its own table?
+
+The TypeScript `WeddingEvent` embeds `venue: VenueInfo` inline. If kept that way in the DB, `event → venue_name → venue_address` is a transitive dependency (violates 3NF). More practically, the same venue appears in multiple events (ceremony at Church X, reception also at Church X) — normalization eliminates that duplication.
+
+### How do section variants work across the catalog and tenancy modules?
+
+Variants are a two-layer concept. The catalog layer defines what is *available* — `catalog.template_section_variants` records every named rendering style a section exposes within a specific template, with one marked as the default. The tenancy layer records what a specific couple *chose* — `tenancy.tenant_section_entries.variant` stores the selected variant for that couple's site.
+
+The flow at tenant creation is: read the template's supported sections from `catalog.template_supported_sections`, create a `tenant_section_entries` row for each one, and populate `variant` from the `is_default = true` row in `catalog.template_section_variants`. From then on the couple can change their variant through the site editor, which writes back to their `tenant_section_entries` row.
+
+The reason `variant` in `tenant_section_entries` is not a hard FK into `catalog.template_section_variants` is template switching. If a couple changes from Kapilya to Diwata, Diwata may not support the same variants. A FK would cause an immediate constraint violation on every section entry. Instead the service layer validates variants against the new template's options at switch time and resets any that are no longer valid.
+
+### Why was `custom_domain` removed from `tenancy.tenants`?
+
+Having `custom_domain` as a column on the tenant plus rows in `tenant_hostnames` for the same concept created two problems: any write (adding or changing a custom domain) had to touch two places and stay in sync, and the middleware hostname resolution needed to query both tables or apply different logic depending on whether the incoming hostname was a subdomain or a custom domain. Removing the column and storing all hostnames — subdomain and custom — as rows in `tenant_hostnames` means resolution is always a single `WHERE hostname = $1` regardless of hostname type. The `is_primary` flag identifies which one is canonical for outbound links and redirects.
+
+### Which module owns the `tier` vocabulary?
+
+**Catalog owns it.** `Catalog.TemplateTier` (`FirstClass = 1`, `Signature = 2`) is an `int` enum on `catalog.templates`, and is the source of truth for the tier values. The planned `tenancy.tenants.tier` mirrors the same integer values in its own column.
+
+An earlier draft defined a shared `tenancy.tenant_tier` PostgreSQL type and referenced it from `catalog.templates` — that is **not** how the system is built. A cross-schema DB type couples the two schemas together and breaks the modular-monolith rule that each module owns its own schema. Instead, each module stores its own `int` tier column, and tenant↔template tier compatibility is checked at the service layer when a template is assigned. There is no duplicate enum to keep in sync because the C# `TemplateTier` enum (compiled once, in Catalog) is the single definition.
+
+### Why is multi-user access handled via `users.user_permission_grants` rather than a tenant members table?
+
+A dedicated `tenancy.tenant_members` join table would work, but it duplicates the concern owned by the Users module. `users.user_permission_grants` (a planned table — not yet built) would model resource-scoped grants: a coordinator could be given `rsvp:manage` on a specific tenant without getting `wedding:edit`. A separate members table would require the application to check two places when resolving access. Keeping authorization in the Users module lets roles evolve independently of tenant structure.
+
+### Why do couples pre-list guests instead of allowing open RSVP?
+
+A wedding website is publicly accessible by URL. Without a pre-seeded guest list acting as a whitelist, anyone who finds the link could submit an RSVP — which breaks headcount management for catered events and table assignments. The guest list model means the RSVP form is a *confirmation of an existing invitation*, not an open registration. It also lets the couple control plus-one allowances, pre-assign table numbers, and group guests by family before any form is submitted. The `rsvp.guests` table is the invite manifest; `rsvp.submissions` is the response log.
+
+### How does the QR code check-in system work?
+
+Each guest has a `lookup_code` — a short, crypto-random token (e.g. `K4X9-MJ2R`) generated when they are added to the guest list. The QR code encodes their personal RSVP URL: `https://{hostname}/rsvp/{lookup_code}`. The image is never stored in the database — it is generated on demand from the lookup code by the application, keeping the DB lean.
+
+The token serves two roles at different points in time:
+
+- **Before the wedding**: guest scans QR → lands on their pre-filled RSVP page → submits → `rsvp.submissions` row created linked to their `rsvp.guests` record
+- **On the wedding day**: coordinator scans the same QR at the venue entrance → application resolves the lookup code → creates a row in `rsvp.check_ins` marking the guest as arrived for that specific event
+
+Tallying is then a simple count query:
+
+```sql
+-- Head count per event
+SELECT event_id, COUNT(*) FROM rsvp.check_ins
+WHERE wedding_id = $1 GROUP BY event_id;
+
+-- Guests who RSVP'd attending but haven't checked in yet
+SELECT g.first_name, g.last_name, g.table_number
+FROM rsvp.guests g
+JOIN rsvp.submissions s ON s.guest_id = g.id AND s.attending = true
+LEFT JOIN rsvp.check_ins c ON c.guest_id = g.id AND c.event_id = $2
+WHERE g.wedding_id = $1 AND c.id IS NULL;
+```
+
+The `UNIQUE (guest_id, event_id)` constraint on `rsvp.check_ins` prevents a guest being scanned in twice to the same event, which is the main operational risk at a busy venue entrance.
+
+### Why is `rsvp.submissions.name` denormalized?
+
+RSVP submissions are an immutable audit log. If a couple later corrects a guest's name in `rsvp.guests`, the submission record should reflect *what was submitted*, not the corrected name. This is controlled denormalization with a documented reason — accepted in database design when it preserves historical accuracy.
+
+### Content migration path from JSON files
+
+```
+Phase 3 migration plan:
+  1. Create schemas and run DDL
+  2. Write a one-off import script: loadContent(ref) → WeddingDocument → INSERT into wedding.* tables
+  3. Update TenantConfig.contentRef to reference a UUID (wedding_profiles.id) instead of a filename
+  4. Update resolveTenant() + loadContent() to query the DB instead of the filesystem
+  5. Remove content/*.json files once validated
+```
+
+---
+
+## 7. Modular Monolith — module layout
+
+The six bounded contexts map to .NET modules under `src/Modules/{Name}/`, each a five-project vertical slice:
+
+```
+src/Modules/{Name}/
+├── Eternelle.Modules.{Name}.Domain/            ← aggregates, VOs, domain events, repository interfaces
+├── Eternelle.Modules.{Name}.Application/       ← commands, queries, handlers, validators
+├── Eternelle.Modules.{Name}.Infrastructure/    ← EF Core DbContext, repositories, migrations, jobs (queries the {schema}.* tables)
+├── Eternelle.Modules.{Name}.Presentation/      ← minimal-API endpoints, integration-event handlers
+└── Eternelle.Modules.{Name}.IntegrationEvents/ ← integration event classes only
+```
+
+Cross-module access is restricted to a module's `IntegrationEvents` project — no module references another's `Domain`/`Application`/`Infrastructure`. Each module owns its own `DbContext` and schema; there is no shared client across schemas. Synchronous reads use local data copies kept consistent via integration events (Outbox/Inbox + MassTransit). This is the boundary that makes extraction to a microservice mechanical later. See [`module-conventions.md`](module-conventions.md) for the full rules.
+
+---
+
+## 8. Seed Data
+
+Run this once after the initial migration to establish the permission/role baseline. All subsequent business logic assumes these rows exist.
+
+```sql
+-- ─── Permissions ──────────────────────────────────────────────────────────────
+INSERT INTO users.permissions (name, description) VALUES
+  ('tenant:edit',          'Edit tenant configuration, section manifest, and template assignment'),
+  ('tenant:publish',       'Publish or unpublish a tenant site'),
+  ('wedding:edit',         'Edit all wedding content (couple, events, story, gallery, etc.)'),
+  ('rsvp:manage',          'View guest list, export RSVPs, and manage submissions'),
+  ('guestbook:moderate',   'Approve or delete guestbook entries'),
+  ('catalog:manage',       'Create, edit, or delete templates and themes in the catalog');
+
+-- ─── Roles ────────────────────────────────────────────────────────────────────
+INSERT INTO users.roles (name, description) VALUES
+  ('super_admin', 'Platform administrator — full access to all modules'),
+  ('couple',      'Wedding couple — scoped access to their own tenant and wedding content');
+
+-- ─── Role → Permission mappings ───────────────────────────────────────────────
+-- super_admin gets every permission (globally, no resource scoping needed)
+INSERT INTO users.role_permissions (role_id, permission_id)
+SELECT r.id, p.id
+FROM   users.roles r, users.permissions p
+WHERE  r.name = 'super_admin';
+
+-- couple role gets operational permissions (resource-scoped grants are added on tenant creation)
+INSERT INTO users.role_permissions (role_id, permission_id)
+SELECT r.id, p.id
+FROM   users.roles r
+JOIN   users.permissions p ON p.name IN (
+         'tenant:edit',
+         'tenant:publish',
+         'wedding:edit',
+         'rsvp:manage',
+         'guestbook:moderate'
+       )
+WHERE  r.name = 'couple';
+```
+
+**On-tenant-creation hook** — when a new tenant is provisioned for a couple, also insert a resource-scoped grant so their role permissions resolve against only their tenant:
+
+```sql
+-- Called from tenancy.service.ts after INSERT INTO tenancy.tenants
+INSERT INTO users.user_permission_grants (user_id, permission_id, resource_type, resource_id)
+SELECT :user_id, p.id, 'tenant', :tenant_id
+FROM   users.permissions p
+WHERE  p.name IN ('tenant:edit', 'tenant:publish', 'wedding:edit', 'rsvp:manage', 'guestbook:moderate');
+```
+
+**Permission resolution order** (implemented in `IamService.hasPermission`):
+
+```
+1. Is user super_admin? → allow immediately
+2. Does user have a resource-scoped grant for (permission, resource_type, resource_id)? → allow
+3. Does user's role include the permission AND resource_id is NULL (global role grant)? → allow
+4. → deny
+```
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/IWeddingProjection.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/IWeddingProjection.cs
new file mode 100644
index 0000000..4f640de
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/IWeddingProjection.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Rsvp.Domain.Weddings;
+
+public interface IWeddingProjection
+{
+    Task<Wedding?> GetAsync(WeddingId id, CancellationToken cancellationToken = default);
+    Task UpsertAsync(Wedding wedding, CancellationToken cancellationToken = default);
+    Task UpdateAsync(Wedding wedding, CancellationToken cancellationToken = default);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/Wedding.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/Wedding.cs
new file mode 100644
index 0000000..a5b6ebc
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/Wedding.cs
@@ -0,0 +1,46 @@
+namespace Eternelle.Modules.Rsvp.Domain.Weddings;
+
+public sealed class Wedding
+{
+    private Wedding() { }
+
+    public WeddingId Id { get; private set; }
+    public DateOnly WeddingDate { get; private set; }
+    public DateOnly? RsvpDeadline { get; private set; }
+    public bool IsClosed { get; private set; }
+    public DateTime CreatedAtUtc { get; private set; }
+    public DateTime UpdatedAtUtc { get; private set; }
+
+    public static Wedding Create(WeddingId id, DateOnly weddingDate, DateTime utcNow) =>
+        new()
+        {
+            Id = id,
+            WeddingDate = weddingDate,
+            RsvpDeadline = null,
+            IsClosed = false,
+            CreatedAtUtc = utcNow,
+            UpdatedAtUtc = utcNow
+        };
+
+    public void SetRsvpDeadline(DateOnly? deadline, DateTime utcNow)
+    {
+        RsvpDeadline = deadline;
+        UpdatedAtUtc = utcNow;
+    }
+
+    public void Close(DateTime utcNow)
+    {
+        IsClosed = true;
+        UpdatedAtUtc = utcNow;
+    }
+
+    public void UpdateWeddingDate(DateOnly date, DateTime utcNow)
+    {
+        WeddingDate = date;
+        UpdatedAtUtc = utcNow;
+    }
+
+    /// <summary>True when neither the wedding is closed nor the deadline has passed.</summary>
+    public bool IsAcceptingSubmissions(DateOnly today) =>
+        !IsClosed && (RsvpDeadline is null || today <= RsvpDeadline);
+}

From d4591cf7ee07c2559b90e8064e8a9c858fff531e Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 16:10:51 +0800
Subject: [PATCH 073/155] Eternelle-191 Add Guest aggregate, domain events,
 repository interface

---
 .../Guests/Guest.cs                           | 141 ++++++++++++++++++
 .../Guests/GuestAddedDomainEvent.cs           |  16 ++
 .../GuestAllowanceChangedDomainEvent.cs       |  11 ++
 .../Guests/GuestContactUpdatedDomainEvent.cs  |  10 ++
 .../Guests/GuestErrors.cs                     |  21 +++
 .../Guests/GuestLockedDomainEvent.cs          |  11 ++
 .../GuestLookupCodeRegeneratedDomainEvent.cs  |  11 ++
 .../GuestPlacementUpdatedDomainEvent.cs       |  10 ++
 .../Guests/GuestRemovedDomainEvent.cs         |  10 ++
 .../Guests/GuestUnlockedDomainEvent.cs        |  10 ++
 .../Guests/IGuestRepository.cs                |  14 ++
 11 files changed, 265 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAddedDomainEvent.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAllowanceChangedDomainEvent.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestContactUpdatedDomainEvent.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestErrors.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLockedDomainEvent.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLookupCodeRegeneratedDomainEvent.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestPlacementUpdatedDomainEvent.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestRemovedDomainEvent.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestUnlockedDomainEvent.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/IGuestRepository.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
new file mode 100644
index 0000000..9c26763
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
@@ -0,0 +1,141 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public sealed class Guest : Entity
+{
+    private Guest() { }
+
+    public GuestId Id { get; private set; }
+    public WeddingId WeddingId { get; private set; }
+    public PersonFirstName FirstName { get; private set; } = null!;
+    public PersonLastName LastName { get; private set; } = null!;
+    public EmailAddress? Email { get; private set; }
+    public PhoneNumber? MobileNumber { get; private set; }
+    public LookupCode LookupCode { get; private set; } = null!;
+    public int AllowedCompanions { get; private set; }
+    public int? TableNumber { get; private set; }
+    public GroupLabel? GroupName { get; private set; }
+    public bool IsLocked { get; private set; }
+    public DateTime? LockedAtUtc { get; private set; }
+    public DateTime CreatedAtUtc { get; private set; }
+    public DateTime UpdatedAtUtc { get; private set; }
+
+    public static Result<Guest> Create(
+        WeddingId weddingId,
+        PersonFirstName firstName,
+        PersonLastName lastName,
+        EmailAddress? email,
+        PhoneNumber? mobileNumber,
+        LookupCode lookupCode,
+        int allowedCompanions,
+        int? tableNumber,
+        GroupLabel? groupName,
+        DateTime utcNow)
+    {
+        if (allowedCompanions < 0)
+        {
+            return Result.Failure<Guest>(GuestErrors.AllowanceNegative);
+        }
+
+        var guest = new Guest
+        {
+            Id = GuestId.New(),
+            WeddingId = weddingId,
+            FirstName = firstName,
+            LastName = lastName,
+            Email = email,
+            MobileNumber = mobileNumber,
+            LookupCode = lookupCode,
+            AllowedCompanions = allowedCompanions,
+            TableNumber = tableNumber,
+            GroupName = groupName,
+            IsLocked = false,
+            LockedAtUtc = null,
+            CreatedAtUtc = utcNow,
+            UpdatedAtUtc = utcNow
+        };
+
+        guest.Raise(new GuestAddedDomainEvent(
+            guest.Id, guest.WeddingId, guest.LookupCode.Value, guest.AllowedCompanions));
+
+        return Result.Success(guest);
+    }
+
+    public void UpdateContact(
+        PersonFirstName firstName, PersonLastName lastName,
+        EmailAddress? email, PhoneNumber? mobileNumber, DateTime utcNow)
+    {
+        FirstName = firstName;
+        LastName = lastName;
+        Email = email;
+        MobileNumber = mobileNumber;
+        UpdatedAtUtc = utcNow;
+        Raise(new GuestContactUpdatedDomainEvent(Id, WeddingId));
+    }
+
+    public Result ChangeAllowedCompanions(int allowedCompanions, DateTime utcNow)
+    {
+        if (allowedCompanions < 0)
+        {
+            return Result.Failure(GuestErrors.AllowanceNegative);
+        }
+
+        AllowedCompanions = allowedCompanions;
+        UpdatedAtUtc = utcNow;
+        Raise(new GuestAllowanceChangedDomainEvent(Id, WeddingId, allowedCompanions));
+        return Result.Success();
+    }
+
+    public void UpdatePlacement(int? tableNumber, GroupLabel? groupName, DateTime utcNow)
+    {
+        TableNumber = tableNumber;
+        GroupName = groupName;
+        UpdatedAtUtc = utcNow;
+        Raise(new GuestPlacementUpdatedDomainEvent(Id, WeddingId));
+    }
+
+    public Result Lock(DateTime utcNow)
+    {
+        if (IsLocked)
+        {
+            return Result.Failure(GuestErrors.AlreadyLocked);
+        }
+
+        IsLocked = true;
+        LockedAtUtc = utcNow;
+        UpdatedAtUtc = utcNow;
+        Raise(new GuestLockedDomainEvent(Id, WeddingId, utcNow));
+        return Result.Success();
+    }
+
+    public Result Unlock(DateTime utcNow)
+    {
+        if (!IsLocked)
+        {
+            return Result.Failure(GuestErrors.NotLocked);
+        }
+
+        IsLocked = false;
+        LockedAtUtc = null;
+        UpdatedAtUtc = utcNow;
+        Raise(new GuestUnlockedDomainEvent(Id, WeddingId));
+        return Result.Success();
+    }
+
+    public void RegenerateLookupCode(LookupCode newCode, DateTime utcNow)
+    {
+        LookupCode = newCode;
+        UpdatedAtUtc = utcNow;
+        Raise(new GuestLookupCodeRegeneratedDomainEvent(Id, WeddingId, newCode.Value));
+    }
+
+    public void MarkRemoved()
+    {
+        Raise(new GuestRemovedDomainEvent(Id, WeddingId));
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAddedDomainEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAddedDomainEvent.cs
new file mode 100644
index 0000000..dcc812c
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAddedDomainEvent.cs
@@ -0,0 +1,16 @@
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public sealed class GuestAddedDomainEvent(
+    GuestId guestId,
+    WeddingId weddingId,
+    string lookupCode,
+    int allowedCompanions) : DomainEvent
+{
+    public GuestId GuestId { get; init; } = guestId;
+    public WeddingId WeddingId { get; init; } = weddingId;
+    public string LookupCode { get; init; } = lookupCode;
+    public int AllowedCompanions { get; init; } = allowedCompanions;
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAllowanceChangedDomainEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAllowanceChangedDomainEvent.cs
new file mode 100644
index 0000000..e9a3a74
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAllowanceChangedDomainEvent.cs
@@ -0,0 +1,11 @@
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public sealed class GuestAllowanceChangedDomainEvent(GuestId guestId, WeddingId weddingId, int allowedCompanions) : DomainEvent
+{
+    public GuestId GuestId { get; init; } = guestId;
+    public WeddingId WeddingId { get; init; } = weddingId;
+    public int AllowedCompanions { get; init; } = allowedCompanions;
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestContactUpdatedDomainEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestContactUpdatedDomainEvent.cs
new file mode 100644
index 0000000..7ff7432
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestContactUpdatedDomainEvent.cs
@@ -0,0 +1,10 @@
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public sealed class GuestContactUpdatedDomainEvent(GuestId guestId, WeddingId weddingId) : DomainEvent
+{
+    public GuestId GuestId { get; init; } = guestId;
+    public WeddingId WeddingId { get; init; } = weddingId;
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestErrors.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestErrors.cs
new file mode 100644
index 0000000..7e8fbf2
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestErrors.cs
@@ -0,0 +1,21 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public static class GuestErrors
+{
+    public static Error NotFound(GuestId id) =>
+        Error.NotFound("Rsvp.Guest.NotFound", $"Guest '{id.Value}' was not found.");
+
+    public static readonly Error LookupCodeAlreadyTaken =
+        Error.Conflict("Rsvp.Guest.LookupCodeAlreadyTaken", "Lookup code is already in use.");
+
+    public static readonly Error AllowanceNegative =
+        Error.Problem("Rsvp.Guest.AllowanceNegative", "Allowed companions must be zero or greater.");
+
+    public static readonly Error AlreadyLocked =
+        Error.Problem("Rsvp.Guest.AlreadyLocked", "Guest is already locked.");
+
+    public static readonly Error NotLocked =
+        Error.Problem("Rsvp.Guest.NotLocked", "Guest is not locked.");
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLockedDomainEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLockedDomainEvent.cs
new file mode 100644
index 0000000..01ac062
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLockedDomainEvent.cs
@@ -0,0 +1,11 @@
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public sealed class GuestLockedDomainEvent(GuestId guestId, WeddingId weddingId, DateTime lockedAtUtc) : DomainEvent
+{
+    public GuestId GuestId { get; init; } = guestId;
+    public WeddingId WeddingId { get; init; } = weddingId;
+    public DateTime LockedAtUtc { get; init; } = lockedAtUtc;
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLookupCodeRegeneratedDomainEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLookupCodeRegeneratedDomainEvent.cs
new file mode 100644
index 0000000..ed7eaf4
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLookupCodeRegeneratedDomainEvent.cs
@@ -0,0 +1,11 @@
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public sealed class GuestLookupCodeRegeneratedDomainEvent(GuestId guestId, WeddingId weddingId, string lookupCode) : DomainEvent
+{
+    public GuestId GuestId { get; init; } = guestId;
+    public WeddingId WeddingId { get; init; } = weddingId;
+    public string LookupCode { get; init; } = lookupCode;
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestPlacementUpdatedDomainEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestPlacementUpdatedDomainEvent.cs
new file mode 100644
index 0000000..ca1e182
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestPlacementUpdatedDomainEvent.cs
@@ -0,0 +1,10 @@
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public sealed class GuestPlacementUpdatedDomainEvent(GuestId guestId, WeddingId weddingId) : DomainEvent
+{
+    public GuestId GuestId { get; init; } = guestId;
+    public WeddingId WeddingId { get; init; } = weddingId;
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestRemovedDomainEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestRemovedDomainEvent.cs
new file mode 100644
index 0000000..81a4302
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestRemovedDomainEvent.cs
@@ -0,0 +1,10 @@
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public sealed class GuestRemovedDomainEvent(GuestId guestId, WeddingId weddingId) : DomainEvent
+{
+    public GuestId GuestId { get; init; } = guestId;
+    public WeddingId WeddingId { get; init; } = weddingId;
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestUnlockedDomainEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestUnlockedDomainEvent.cs
new file mode 100644
index 0000000..c6a3179
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestUnlockedDomainEvent.cs
@@ -0,0 +1,10 @@
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public sealed class GuestUnlockedDomainEvent(GuestId guestId, WeddingId weddingId) : DomainEvent
+{
+    public GuestId GuestId { get; init; } = guestId;
+    public WeddingId WeddingId { get; init; } = weddingId;
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/IGuestRepository.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/IGuestRepository.cs
new file mode 100644
index 0000000..7ce92cf
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/IGuestRepository.cs
@@ -0,0 +1,14 @@
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Guests;
+
+public interface IGuestRepository
+{
+    Task<Guest?> GetByIdAsync(GuestId id, CancellationToken cancellationToken = default);
+    Task<Guest?> GetByLookupCodeAsync(string normalizedCode, CancellationToken cancellationToken = default);
+    Task<bool> LookupCodeExistsAsync(string normalizedCode, CancellationToken cancellationToken = default);
+    Task<IReadOnlyList<Guest>> ListByWeddingAsync(WeddingId weddingId, CancellationToken cancellationToken = default);
+    void Insert(Guest guest);
+    void Update(Guest guest);
+    void Remove(Guest guest);
+}

From 9f2ca52796c08bd5f650845b979e72c0ab807e65 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 16:15:07 +0800
Subject: [PATCH 074/155] Eternelle-191 Add RsvpSubmission aggregate +
 companion child + domain events

---
 .../Submissions/IRsvpSubmissionRepository.cs  | 14 +++
 .../Submissions/RsvpSource.cs                 |  7 ++
 .../Submissions/RsvpSubmission.cs             | 95 +++++++++++++++++++
 .../Submissions/RsvpSubmissionErrors.cs       | 24 +++++
 .../Submissions/RsvpSubmittedDomainEvent.cs   | 21 ++++
 .../Submissions/SubmissionCompanion.cs        | 32 +++++++
 6 files changed, 193 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/IRsvpSubmissionRepository.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSource.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmission.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmissionErrors.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmittedDomainEvent.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/SubmissionCompanion.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/IRsvpSubmissionRepository.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/IRsvpSubmissionRepository.cs
new file mode 100644
index 0000000..356568b
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/IRsvpSubmissionRepository.cs
@@ -0,0 +1,14 @@
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Submissions;
+
+public interface IRsvpSubmissionRepository
+{
+    Task<RsvpSubmission?> GetByIdAsync(SubmissionId id, CancellationToken cancellationToken = default);
+    Task<RsvpSubmission?> GetLatestByGuestAsync(GuestId guestId, CancellationToken cancellationToken = default);
+    Task<IReadOnlyList<RsvpSubmission>> ListByWeddingAsync(
+        WeddingId weddingId, CancellationToken cancellationToken = default);
+    void Insert(RsvpSubmission submission);
+    Task NullifyGuestIdAsync(GuestId guestId, CancellationToken cancellationToken = default);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSource.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSource.cs
new file mode 100644
index 0000000..cf881a0
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSource.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Rsvp.Domain.Submissions;
+
+public enum RsvpSource
+{
+    GuestSelf = 0,
+    CoupleOnBehalf = 1
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmission.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmission.cs
new file mode 100644
index 0000000..dc8f77f
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmission.cs
@@ -0,0 +1,95 @@
+using System.Net;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Submissions;
+
+public sealed class RsvpSubmission : Entity
+{
+    private readonly List<SubmissionCompanion> _companions = [];
+
+    private RsvpSubmission() { }
+
+    public SubmissionId Id { get; private set; }
+    public WeddingId WeddingId { get; private set; }
+    public GuestId? GuestId { get; private set; }
+    public PersonName NameSnapshot { get; private set; } = null!;
+    public EmailAddress? EmailSnapshot { get; private set; }
+    public PhoneNumber? MobileSnapshot { get; private set; }
+    public bool Attending { get; private set; }
+    public DietaryNote? DietaryNote { get; private set; }
+    public RichDescription? Message { get; private set; }
+    public Guid ConfirmationId { get; private set; }
+    public IPAddress? IpAddress { get; private set; }
+    public RsvpSource Source { get; private set; }
+    public InternalNote? InternalNote { get; private set; }
+    public DateTime SubmittedAtUtc { get; private set; }
+
+    public IReadOnlyCollection<SubmissionCompanion> Companions => _companions.AsReadOnly();
+
+    public static Result<RsvpSubmission> Create(
+        Guest guest,
+        PersonName nameSnapshot,
+        EmailAddress? emailSnapshot,
+        PhoneNumber? mobileSnapshot,
+        bool attending,
+        DietaryNote? dietaryNote,
+        RichDescription? message,
+        IReadOnlyList<(PersonName name, bool attending, DietaryNote? dietary)> companions,
+        IPAddress? ipAddress,
+        RsvpSource source,
+        InternalNote? internalNote,
+        DateTime utcNow)
+    {
+        if (source == RsvpSource.CoupleOnBehalf && internalNote is null)
+        {
+            return Result.Failure<RsvpSubmission>(
+                RsvpSubmissionErrors.InternalNoteRequiredOnBehalf);
+        }
+
+        if (!attending && companions.Count > 0)
+        {
+            return Result.Failure<RsvpSubmission>(RsvpSubmissionErrors.CompanionsOnDecline);
+        }
+
+        if (companions.Count > guest.AllowedCompanions)
+        {
+            return Result.Failure<RsvpSubmission>(RsvpSubmissionErrors.TooManyCompanions);
+        }
+
+        var submission = new RsvpSubmission
+        {
+            Id = SubmissionId.New(),
+            WeddingId = guest.WeddingId,
+            GuestId = guest.Id,
+            NameSnapshot = nameSnapshot,
+            EmailSnapshot = emailSnapshot,
+            MobileSnapshot = mobileSnapshot,
+            Attending = attending,
+            DietaryNote = dietaryNote,
+            Message = message,
+            ConfirmationId = Guid.CreateVersion7(),
+            IpAddress = ipAddress,
+            Source = source,
+            InternalNote = internalNote,
+            SubmittedAtUtc = utcNow
+        };
+
+        int order = 0;
+        foreach ((PersonName name, bool attending, DietaryNote? dietary) c in companions)
+        {
+            submission._companions.Add(
+                SubmissionCompanion.Create(submission.Id, c.name, c.attending, c.dietary, order++));
+        }
+
+        submission.Raise(new RsvpSubmittedDomainEvent(
+            submission.Id, submission.WeddingId, guest.Id,
+            attending, submission._companions.Count, utcNow));
+
+        return Result.Success(submission);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmissionErrors.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmissionErrors.cs
new file mode 100644
index 0000000..1df5c74
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmissionErrors.cs
@@ -0,0 +1,24 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Rsvp.Domain.Submissions;
+
+public static class RsvpSubmissionErrors
+{
+    public static Error NotFound(SubmissionId id) =>
+        Error.NotFound("Rsvp.Submission.NotFound", $"Submission '{id.Value}' was not found.");
+
+    public static readonly Error TooManyCompanions =
+        Error.Problem("Rsvp.Submission.TooManyCompanions",
+            "Companion count exceeds the guest's allowance.");
+
+    public static readonly Error CompanionsOnDecline =
+        Error.Problem("Rsvp.Submission.CompanionsOnDecline",
+            "Companions cannot be listed when the guest is not attending.");
+
+    public static readonly Error WeddingClosed =
+        Error.Problem("Rsvp.Submission.WeddingClosed", "RSVP is no longer accepting submissions.");
+
+    public static readonly Error InternalNoteRequiredOnBehalf =
+        Error.Problem("Rsvp.Submission.InternalNoteRequiredOnBehalf",
+            "An internal note is required when submitting on behalf of a guest.");
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmittedDomainEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmittedDomainEvent.cs
new file mode 100644
index 0000000..9475a21
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmittedDomainEvent.cs
@@ -0,0 +1,21 @@
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Domain.Submissions;
+
+public sealed class RsvpSubmittedDomainEvent(
+    SubmissionId submissionId,
+    WeddingId weddingId,
+    GuestId guestId,
+    bool attending,
+    int companionCount,
+    DateTime submittedAtUtc) : DomainEvent
+{
+    public SubmissionId SubmissionId { get; init; } = submissionId;
+    public WeddingId WeddingId { get; init; } = weddingId;
+    public GuestId GuestId { get; init; } = guestId;
+    public bool Attending { get; init; } = attending;
+    public int CompanionCount { get; init; } = companionCount;
+    public DateTime SubmittedAtUtc { get; init; } = submittedAtUtc;
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/SubmissionCompanion.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/SubmissionCompanion.cs
new file mode 100644
index 0000000..a69ede3
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/SubmissionCompanion.cs
@@ -0,0 +1,32 @@
+using Eternelle.Common.Domain.People;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+
+namespace Eternelle.Modules.Rsvp.Domain.Submissions;
+
+public sealed class SubmissionCompanion
+{
+    private SubmissionCompanion() { }
+
+    public CompanionId Id { get; private set; }
+    public SubmissionId SubmissionId { get; private set; }
+    public PersonName Name { get; private set; } = null!;
+    public bool Attending { get; private set; }
+    public DietaryNote? DietaryNote { get; private set; }
+    public int DisplayOrder { get; private set; }
+
+    internal static SubmissionCompanion Create(
+        SubmissionId submissionId,
+        PersonName name,
+        bool attending,
+        DietaryNote? dietaryNote,
+        int displayOrder) =>
+        new()
+        {
+            Id = CompanionId.New(),
+            SubmissionId = submissionId,
+            Name = name,
+            Attending = attending,
+            DietaryNote = dietaryNote,
+            DisplayOrder = displayOrder
+        };
+}

From 707fb8dbf06e39bb172ca58284510e1763eb08db Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 16:37:21 +0800
Subject: [PATCH 075/155] Eternelle-191 Add GuestAdded + RsvpSubmitted
 integration events

---
 .../Guests/GuestAddedIntegrationEvent.cs      | 26 +++++++++++++++
 .../RsvpSubmittedIntegrationEvent.cs          | 32 +++++++++++++++++++
 2 files changed, 58 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestAddedIntegrationEvent.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Submissions/RsvpSubmittedIntegrationEvent.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestAddedIntegrationEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestAddedIntegrationEvent.cs
new file mode 100644
index 0000000..55102c5
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestAddedIntegrationEvent.cs
@@ -0,0 +1,26 @@
+using Eternelle.Common.Application.EventBus;
+
+namespace Eternelle.Modules.Rsvp.IntegrationEvents.Guests;
+
+public sealed class GuestAddedIntegrationEvent : IntegrationEvent
+{
+    public GuestAddedIntegrationEvent(
+        Guid id,
+        DateTime occurredOnUtc,
+        Guid guestId,
+        Guid weddingId,
+        string lookupCode,
+        int allowedCompanions)
+        : base(id, occurredOnUtc)
+    {
+        GuestId = guestId;
+        WeddingId = weddingId;
+        LookupCode = lookupCode;
+        AllowedCompanions = allowedCompanions;
+    }
+
+    public Guid GuestId { get; init; }
+    public Guid WeddingId { get; init; }
+    public string LookupCode { get; init; }
+    public int AllowedCompanions { get; init; }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Submissions/RsvpSubmittedIntegrationEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Submissions/RsvpSubmittedIntegrationEvent.cs
new file mode 100644
index 0000000..d9e0d5a
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Submissions/RsvpSubmittedIntegrationEvent.cs
@@ -0,0 +1,32 @@
+using Eternelle.Common.Application.EventBus;
+
+namespace Eternelle.Modules.Rsvp.IntegrationEvents.Submissions;
+
+public sealed class RsvpSubmittedIntegrationEvent : IntegrationEvent
+{
+    public RsvpSubmittedIntegrationEvent(
+        Guid id,
+        DateTime occurredOnUtc,
+        Guid submissionId,
+        Guid weddingId,
+        Guid guestId,
+        bool attending,
+        int companionCount,
+        DateTime submittedAtUtc)
+        : base(id, occurredOnUtc)
+    {
+        SubmissionId = submissionId;
+        WeddingId = weddingId;
+        GuestId = guestId;
+        Attending = attending;
+        CompanionCount = companionCount;
+        SubmittedAtUtc = submittedAtUtc;
+    }
+
+    public Guid SubmissionId { get; init; }
+    public Guid WeddingId { get; init; }
+    public Guid GuestId { get; init; }
+    public bool Attending { get; init; }
+    public int CompanionCount { get; init; }
+    public DateTime SubmittedAtUtc { get; init; }
+}

From 1e8ac0b2a4b38db47a3f8ed26c931dbbe5dbfb1b Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 16:40:03 +0800
Subject: [PATCH 076/155] Eternelle-191 Add AssemblyReference + Application
 abstractions

---
 .../Abstractions/Data/IUnitOfWork.cs                      | 6 ++++++
 .../Abstractions/Security/ITokenGenerator.cs              | 6 ++++++
 .../AssemblyReference.cs                                  | 8 ++++++++
 3 files changed, 20 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Data/IUnitOfWork.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Security/ITokenGenerator.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/AssemblyReference.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Data/IUnitOfWork.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Data/IUnitOfWork.cs
new file mode 100644
index 0000000..be78d71
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Data/IUnitOfWork.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+
+public interface IUnitOfWork
+{
+    Task<int> SaveChangesAsync(CancellationToken cancellationToken = default);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Security/ITokenGenerator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Security/ITokenGenerator.cs
new file mode 100644
index 0000000..c74ed7a
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Security/ITokenGenerator.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Rsvp.Application.Abstractions.Security;
+
+public interface ITokenGenerator
+{
+    string GenerateLookupCode();
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/AssemblyReference.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/AssemblyReference.cs
new file mode 100644
index 0000000..d6a6968
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/AssemblyReference.cs
@@ -0,0 +1,8 @@
+using System.Reflection;
+
+namespace Eternelle.Modules.Rsvp.Application;
+
+public static class AssemblyReference
+{
+    public static readonly Assembly Assembly = typeof(AssemblyReference).Assembly;
+}

From aacce4fc3cbea8df20f67c7e5926ac17e1c3369f Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 16:41:27 +0800
Subject: [PATCH 077/155] Eternelle-191 Add AssemblyReference, Tags,
 RateLimitingPolicies

---
 .../AssemblyReference.cs                               |  8 ++++++++
 .../RateLimitingPolicies.cs                            | 10 ++++++++++
 .../Rsvp/Eternelle.Modules.Rsvp.Presentation/Tags.cs   |  7 +++++++
 3 files changed, 25 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/AssemblyReference.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/RateLimitingPolicies.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Tags.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/AssemblyReference.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/AssemblyReference.cs
new file mode 100644
index 0000000..01b740b
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/AssemblyReference.cs
@@ -0,0 +1,8 @@
+using System.Reflection;
+
+namespace Eternelle.Modules.Rsvp.Presentation;
+
+public static class AssemblyReference
+{
+    public static readonly Assembly Assembly = typeof(AssemblyReference).Assembly;
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/RateLimitingPolicies.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/RateLimitingPolicies.cs
new file mode 100644
index 0000000..ba8e090
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/RateLimitingPolicies.cs
@@ -0,0 +1,10 @@
+namespace Eternelle.Modules.Rsvp.Presentation;
+
+public static class RateLimitingPolicies
+{
+    /// <summary>30 requests / 60 s per IP — applied to GET /rsvp/{lookupCode}.</summary>
+    public const string RsvpLookup = "rsvp-lookup";
+
+    /// <summary>5 requests / 60 s per IP — applied to POST /rsvp/{lookupCode}.</summary>
+    public const string RsvpSubmit = "rsvp-submit";
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Tags.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Tags.cs
new file mode 100644
index 0000000..dd6defe
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Tags.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Rsvp.Presentation;
+
+internal static class Tags
+{
+    public const string Rsvp = "Rsvp";
+    public const string RsvpPublic = "Rsvp.Public";
+}

From 1b6e9659384c2fdce7636e56779f2a5c86717c57 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 17:04:02 +0800
Subject: [PATCH 078/155] Eternelle-191 Add DbContext, ID converters,
 design-time factory

---
 .../Converters/CompanionIdConverter.cs        |  6 +++
 .../Database/Converters/GuestIdConverter.cs   |  6 +++
 .../Converters/SubmissionIdConverter.cs       |  6 +++
 .../Database/Converters/WeddingIdConverter.cs |  6 +++
 .../Database/RsvpDbContext.cs                 | 43 +++++++++++++++++++
 .../Database/RsvpDbContextFactory.cs          | 22 ++++++++++
 .../Database/Schemas.cs                       |  6 +++
 7 files changed, 95 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/CompanionIdConverter.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/GuestIdConverter.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/SubmissionIdConverter.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/WeddingIdConverter.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContext.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContextFactory.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Schemas.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/CompanionIdConverter.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/CompanionIdConverter.cs
new file mode 100644
index 0000000..7df59cc
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/CompanionIdConverter.cs
@@ -0,0 +1,6 @@
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Database.Converters;
+
+internal sealed class CompanionIdConverter() : ValueConverter<CompanionId, Guid>(id => id.Value, value => new CompanionId(value));
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/GuestIdConverter.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/GuestIdConverter.cs
new file mode 100644
index 0000000..ccf4e69
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/GuestIdConverter.cs
@@ -0,0 +1,6 @@
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Database.Converters;
+
+internal sealed class GuestIdConverter() : ValueConverter<GuestId, Guid>(id => id.Value, value => new GuestId(value));
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/SubmissionIdConverter.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/SubmissionIdConverter.cs
new file mode 100644
index 0000000..c129d7e
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/SubmissionIdConverter.cs
@@ -0,0 +1,6 @@
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Database.Converters;
+
+internal sealed class SubmissionIdConverter() : ValueConverter<SubmissionId, Guid>(id => id.Value, value => new SubmissionId(value));
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/WeddingIdConverter.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/WeddingIdConverter.cs
new file mode 100644
index 0000000..2d20968
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Converters/WeddingIdConverter.cs
@@ -0,0 +1,6 @@
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Database.Converters;
+
+internal sealed class WeddingIdConverter() : ValueConverter<WeddingId, Guid>(id => id.Value, value => new WeddingId(value));
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContext.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContext.cs
new file mode 100644
index 0000000..c8e8e4b
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContext.cs
@@ -0,0 +1,43 @@
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+using Eternelle.Modules.Rsvp.Infrastructure.Database.Converters;
+using Eternelle.Modules.Rsvp.Infrastructure.Guests;
+using Eternelle.Modules.Rsvp.Infrastructure.Submissions;
+using Eternelle.Modules.Rsvp.Infrastructure.Weddings;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Database;
+
+public sealed class RsvpDbContext(DbContextOptions<RsvpDbContext> options)
+    : DbContext(options), IUnitOfWork
+{
+    internal DbSet<Wedding> Weddings { get; set; }
+    internal DbSet<Guest> Guests { get; set; }
+    internal DbSet<RsvpSubmission> Submissions { get; set; }
+
+    protected override void ConfigureConventions(ModelConfigurationBuilder builder)
+    {
+        builder.Properties<GuestId>().HaveConversion<GuestIdConverter>();
+        builder.Properties<SubmissionId>().HaveConversion<SubmissionIdConverter>();
+        builder.Properties<CompanionId>().HaveConversion<CompanionIdConverter>();
+        builder.Properties<WeddingId>().HaveConversion<WeddingIdConverter>();
+    }
+
+    protected override void OnModelCreating(ModelBuilder modelBuilder)
+    {
+        modelBuilder.HasDefaultSchema(Schemas.Rsvp);
+
+        modelBuilder.ApplyConfiguration(new OutboxMessageConfiguration());
+        modelBuilder.ApplyConfiguration(new OutboxMessageConsumerConfiguration());
+        modelBuilder.ApplyConfiguration(new InboxMessageConfiguration());
+        modelBuilder.ApplyConfiguration(new InboxMessageConsumerConfiguration());
+
+        modelBuilder.ApplyConfiguration(new WeddingConfiguration());
+        modelBuilder.ApplyConfiguration(new GuestConfiguration());
+        modelBuilder.ApplyConfiguration(new RsvpSubmissionConfiguration());
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContextFactory.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContextFactory.cs
new file mode 100644
index 0000000..2c3ee5c
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContextFactory.cs
@@ -0,0 +1,22 @@
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Design;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Database;
+
+internal sealed class RsvpDbContextFactory : IDesignTimeDbContextFactory<RsvpDbContext>
+{
+    public RsvpDbContext CreateDbContext(string[] args)
+    {
+#pragma warning disable S2068
+        DbContextOptionsBuilder<RsvpDbContext> optionsBuilder = new DbContextOptionsBuilder<RsvpDbContext>()
+            .UseNpgsql(
+                "Host=localhost;Port=5432;Database=eternelle;Username=postgres;Password=postgres",
+                npgsql => npgsql.MigrationsHistoryTable(
+                    HistoryRepository.DefaultTableName, Schemas.Rsvp))
+            .UseSnakeCaseNamingConvention();
+#pragma warning restore S2068
+
+        return new RsvpDbContext(optionsBuilder.Options);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Schemas.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Schemas.cs
new file mode 100644
index 0000000..2c029d5
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/Schemas.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Rsvp.Infrastructure.Database;
+
+internal static class Schemas
+{
+    public const string Rsvp = "rsvp";
+}

From 27f8463123dd6d7e72946dc14c777a84e381365e Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 17:09:17 +0800
Subject: [PATCH 079/155] Eternelle-191Add EF entity configurations
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Also fix CA1725 in RsvpDbContext.ConfigureConventions (parameter rename builder→configurationBuilder).
---
 .../Database/RsvpDbContext.cs                 |  10 +-
 .../Guests/GuestConfiguration.cs              |  59 ++++++++++
 .../RsvpSubmissionConfiguration.cs            | 101 ++++++++++++++++++
 .../Weddings/WeddingConfiguration.cs          |  19 ++++
 4 files changed, 184 insertions(+), 5 deletions(-)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Guests/GuestConfiguration.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionConfiguration.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingConfiguration.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContext.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContext.cs
index c8e8e4b..1373045 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContext.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Database/RsvpDbContext.cs
@@ -19,12 +19,12 @@ public sealed class RsvpDbContext(DbContextOptions<RsvpDbContext> options)
     internal DbSet<Guest> Guests { get; set; }
     internal DbSet<RsvpSubmission> Submissions { get; set; }
 
-    protected override void ConfigureConventions(ModelConfigurationBuilder builder)
+    protected override void ConfigureConventions(ModelConfigurationBuilder configurationBuilder)
     {
-        builder.Properties<GuestId>().HaveConversion<GuestIdConverter>();
-        builder.Properties<SubmissionId>().HaveConversion<SubmissionIdConverter>();
-        builder.Properties<CompanionId>().HaveConversion<CompanionIdConverter>();
-        builder.Properties<WeddingId>().HaveConversion<WeddingIdConverter>();
+        configurationBuilder.Properties<GuestId>().HaveConversion<GuestIdConverter>();
+        configurationBuilder.Properties<SubmissionId>().HaveConversion<SubmissionIdConverter>();
+        configurationBuilder.Properties<CompanionId>().HaveConversion<CompanionIdConverter>();
+        configurationBuilder.Properties<WeddingId>().HaveConversion<WeddingIdConverter>();
     }
 
     protected override void OnModelCreating(ModelBuilder modelBuilder)
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Guests/GuestConfiguration.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Guests/GuestConfiguration.cs
new file mode 100644
index 0000000..f568c50
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Guests/GuestConfiguration.cs
@@ -0,0 +1,59 @@
+using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Guests;
+
+internal sealed class GuestConfiguration : IEntityTypeConfiguration<Guest>
+{
+    public void Configure(EntityTypeBuilder<Guest> b)
+    {
+        b.ToTable("guests");
+        b.HasKey(g => g.Id);
+
+        b.Property(g => g.WeddingId).IsRequired();
+        b.HasIndex(g => g.WeddingId);
+
+        b.Property(g => g.FirstName)
+            .HasConversion(v => v.Value, v => PersonFirstName.FromPersistence(v))
+            .IsRequired().HasMaxLength(PersonFirstName.MaxLength);
+        b.Property(g => g.LastName)
+            .HasConversion(v => v.Value, v => PersonLastName.FromPersistence(v))
+            .IsRequired().HasMaxLength(PersonLastName.MaxLength);
+
+        b.Property(g => g.Email)
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? EmailAddress.FromPersistence(v) : null)
+            .HasMaxLength(EmailAddress.MaxLength);
+
+        b.Property(g => g.MobileNumber)
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? PhoneNumber.FromPersistence(v) : null)
+            .HasMaxLength(PhoneNumber.MaxLength);
+
+        b.Property(g => g.LookupCode)
+            .HasConversion(v => v.Value, v => LookupCode.FromPersistence(v))
+            .IsRequired().HasMaxLength(LookupCode.MaxLength);
+        b.HasIndex(g => g.LookupCode).IsUnique();
+
+        b.Property(g => g.AllowedCompanions).IsRequired();
+        b.ToTable(t => t.HasCheckConstraint("ck_guests_allowed_companions", "allowed_companions >= 0"));
+        b.Property(g => g.TableNumber);
+        b.Property(g => g.GroupName)
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? GroupLabel.FromPersistence(v) : null)
+            .HasMaxLength(GroupLabel.MaxLength);
+
+        b.Property(g => g.IsLocked).IsRequired();
+        b.Property(g => g.LockedAtUtc);
+
+        b.Property(g => g.CreatedAtUtc).HasColumnName("created_at").IsRequired();
+        b.Property(g => g.UpdatedAtUtc).HasColumnName("updated_at").IsRequired();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionConfiguration.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionConfiguration.cs
new file mode 100644
index 0000000..13986c9
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionConfiguration.cs
@@ -0,0 +1,101 @@
+using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Submissions;
+
+internal sealed class RsvpSubmissionConfiguration : IEntityTypeConfiguration<RsvpSubmission>
+{
+    public void Configure(EntityTypeBuilder<RsvpSubmission> b)
+    {
+        b.ToTable("submissions");
+        b.HasKey(s => s.Id);
+
+        b.Property(s => s.WeddingId).IsRequired();
+        b.HasIndex(s => new { s.WeddingId, s.SubmittedAtUtc });
+
+        b.Property(s => s.GuestId);
+        b.HasIndex(s => new { s.GuestId, s.SubmittedAtUtc });
+
+        b.Property(s => s.NameSnapshot)
+            .HasColumnName("name_snapshot")
+            .HasConversion(v => v.Value, v => PersonName.FromPersistence(v))
+            .IsRequired().HasMaxLength(PersonName.MaxLength);
+
+        b.Property(s => s.EmailSnapshot)
+            .HasColumnName("email_snapshot")
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? EmailAddress.FromPersistence(v) : null)
+            .HasMaxLength(EmailAddress.MaxLength);
+
+        b.Property(s => s.MobileSnapshot)
+            .HasColumnName("mobile_snapshot")
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? PhoneNumber.FromPersistence(v) : null)
+            .HasMaxLength(PhoneNumber.MaxLength);
+
+        b.Property(s => s.Attending).IsRequired();
+
+        b.Property(s => s.DietaryNote)
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? DietaryNote.FromPersistence(v) : null)
+            .HasMaxLength(DietaryNote.MaxLength);
+
+        b.Property(s => s.Message)
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? RichDescription.FromPersistence(v) : null)
+            .HasMaxLength(RichDescription.MaxLength);
+
+        b.Property(s => s.ConfirmationId).IsRequired();
+        b.HasIndex(s => s.ConfirmationId).IsUnique();
+
+        b.Property(s => s.IpAddress)
+            .HasConversion(
+                v => v != null ? v.ToString() : null,
+                v => v != null ? System.Net.IPAddress.Parse(v) : null)
+            .HasMaxLength(45);
+
+        b.Property(s => s.Source).HasConversion<int>().IsRequired();
+
+        b.Property(s => s.InternalNote)
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? InternalNote.FromPersistence(v) : null)
+            .HasMaxLength(InternalNote.MaxLength);
+
+        b.Property(s => s.SubmittedAtUtc).HasColumnName("submitted_at").IsRequired();
+
+        b.OwnsMany(s => s.Companions, c =>
+        {
+            c.ToTable("submission_companions");
+            c.HasKey(x => x.Id);
+            c.WithOwner().HasForeignKey(x => x.SubmissionId);
+
+            c.Property(x => x.Name)
+                .HasConversion(v => v.Value, v => PersonName.FromPersistence(v))
+                .IsRequired().HasMaxLength(PersonName.MaxLength);
+
+            c.Property(x => x.Attending).IsRequired();
+
+            c.Property(x => x.DietaryNote)
+                .HasConversion(
+                    v => v != null ? v.Value : null,
+                    v => v != null ? DietaryNote.FromPersistence(v) : null)
+                .HasMaxLength(DietaryNote.MaxLength);
+
+            c.Property(x => x.DisplayOrder).IsRequired();
+            c.HasIndex(x => new { x.SubmissionId, x.DisplayOrder });
+        });
+
+        b.Navigation(s => s.Companions)
+            .HasField("_companions")
+            .UsePropertyAccessMode(PropertyAccessMode.Field);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingConfiguration.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingConfiguration.cs
new file mode 100644
index 0000000..be5a684
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingConfiguration.cs
@@ -0,0 +1,19 @@
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Weddings;
+
+internal sealed class WeddingConfiguration : IEntityTypeConfiguration<Wedding>
+{
+    public void Configure(EntityTypeBuilder<Wedding> b)
+    {
+        b.ToTable("weddings");
+        b.HasKey(w => w.Id);
+        b.Property(w => w.WeddingDate).IsRequired();
+        b.Property(w => w.RsvpDeadline);
+        b.Property(w => w.IsClosed).IsRequired();
+        b.Property(w => w.CreatedAtUtc).HasColumnName("created_at").IsRequired();
+        b.Property(w => w.UpdatedAtUtc).HasColumnName("updated_at").IsRequired();
+    }
+}

From b499a6bb35a0d0304d56b32290708010341d9e11 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 17:12:39 +0800
Subject: [PATCH 080/155] Eternelle-191 Add EF configurations, repositories,
 Wedding projection

---
 .../Guests/GuestRepository.cs                 | 28 ++++++++++++++++
 .../Submissions/RsvpSubmissionRepository.cs   | 32 +++++++++++++++++++
 .../Weddings/WeddingProjection.cs             | 27 ++++++++++++++++
 3 files changed, 87 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Guests/GuestRepository.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionRepository.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingProjection.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Guests/GuestRepository.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Guests/GuestRepository.cs
new file mode 100644
index 0000000..69c8d3d
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Guests/GuestRepository.cs
@@ -0,0 +1,28 @@
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+using Eternelle.Modules.Rsvp.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Guests;
+
+internal sealed class GuestRepository(RsvpDbContext context) : IGuestRepository
+{
+    public Task<Guest?> GetByIdAsync(GuestId id, CancellationToken cancellationToken = default) =>
+        context.Guests.SingleOrDefaultAsync(g => g.Id == id, cancellationToken);
+
+    public Task<Guest?> GetByLookupCodeAsync(string normalizedCode, CancellationToken cancellationToken = default) =>
+        context.Guests.SingleOrDefaultAsync(g => g.LookupCode.Value == normalizedCode, cancellationToken);
+
+    public Task<bool> LookupCodeExistsAsync(string normalizedCode, CancellationToken cancellationToken = default) =>
+        context.Guests.AnyAsync(g => g.LookupCode.Value == normalizedCode, cancellationToken);
+
+    public async Task<IReadOnlyList<Guest>> ListByWeddingAsync(
+        WeddingId weddingId, CancellationToken cancellationToken = default) =>
+        await context.Guests.Where(g => g.WeddingId == weddingId)
+            .OrderBy(g => g.LastName.Value).ThenBy(g => g.FirstName.Value)
+            .ToListAsync(cancellationToken);
+
+    public void Insert(Guest guest) => context.Guests.Add(guest);
+    public void Update(Guest guest) => context.Guests.Update(guest);
+    public void Remove(Guest guest) => context.Guests.Remove(guest);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionRepository.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionRepository.cs
new file mode 100644
index 0000000..8b9dbf9
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionRepository.cs
@@ -0,0 +1,32 @@
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+using Eternelle.Modules.Rsvp.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Submissions;
+
+internal sealed class RsvpSubmissionRepository(RsvpDbContext context) : IRsvpSubmissionRepository
+{
+    public Task<RsvpSubmission?> GetByIdAsync(SubmissionId id, CancellationToken cancellationToken = default) =>
+        context.Submissions.Include(s => s.Companions).SingleOrDefaultAsync(s => s.Id == id, cancellationToken);
+
+    public Task<RsvpSubmission?> GetLatestByGuestAsync(GuestId guestId, CancellationToken cancellationToken = default) =>
+        context.Submissions.Include(s => s.Companions)
+            .Where(s => s.GuestId == guestId)
+            .OrderByDescending(s => s.SubmittedAtUtc)
+            .FirstOrDefaultAsync(cancellationToken);
+
+    public async Task<IReadOnlyList<RsvpSubmission>> ListByWeddingAsync(
+        WeddingId weddingId, CancellationToken cancellationToken = default) =>
+        await context.Submissions.Include(s => s.Companions)
+            .Where(s => s.WeddingId == weddingId)
+            .OrderByDescending(s => s.SubmittedAtUtc)
+            .ToListAsync(cancellationToken);
+
+    public void Insert(RsvpSubmission submission) => context.Submissions.Add(submission);
+
+    public Task NullifyGuestIdAsync(GuestId guestId, CancellationToken cancellationToken = default) =>
+        context.Submissions.Where(s => s.GuestId == guestId)
+            .ExecuteUpdateAsync(s => s.SetProperty(x => x.GuestId, (GuestId?)null), cancellationToken);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingProjection.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingProjection.cs
new file mode 100644
index 0000000..a5dc0a8
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingProjection.cs
@@ -0,0 +1,27 @@
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+using Eternelle.Modules.Rsvp.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Weddings;
+
+internal sealed class WeddingProjection(RsvpDbContext context) : IWeddingProjection
+{
+    public Task<Wedding?> GetAsync(WeddingId id, CancellationToken cancellationToken = default) =>
+        context.Weddings.SingleOrDefaultAsync(w => w.Id == id, cancellationToken);
+
+    public async Task UpsertAsync(Wedding wedding, CancellationToken cancellationToken = default)
+    {
+        Wedding? existing = await context.Weddings.SingleOrDefaultAsync(w => w.Id == wedding.Id, cancellationToken);
+        if (existing is null)
+        {
+            context.Weddings.Add(wedding);
+        }
+        await context.SaveChangesAsync(cancellationToken);
+    }
+
+    public async Task UpdateAsync(Wedding wedding, CancellationToken cancellationToken = default)
+    {
+        context.Weddings.Update(wedding);
+        await context.SaveChangesAsync(cancellationToken);
+    }
+}

From 2f64566bba83b646be0af9254210563c90be19f6 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 17:18:57 +0800
Subject: [PATCH 081/155] Eternelle-191 Clone Inbox/Outbox pipeline from
 Tenancy

---
 .../Inbox/ConfigureProcessInboxJob.cs         |  23 +++
 .../IdempotentIntegrationEventHandler.cs      |  62 ++++++++
 .../Inbox/InboxOptions.cs                     |   8 +
 .../Inbox/IntegrationEventConsumer.cs         |  39 +++++
 .../Inbox/ProcessInboxJob.cs                  | 143 +++++++++++++++++
 .../Outbox/ConfigureProcessOutboxJob.cs       |  23 +++
 .../Outbox/IdempotentDomainEventHandler.cs    |  61 ++++++++
 .../Outbox/OutboxOptions.cs                   |   8 +
 .../Outbox/ProcessOutboxJob.cs                | 144 ++++++++++++++++++
 9 files changed, 511 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/InboxOptions.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IntegrationEventConsumer.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/ProcessInboxJob.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/OutboxOptions.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ProcessOutboxJob.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/ConfigureProcessInboxJob.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
new file mode 100644
index 0000000..2106b57
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
@@ -0,0 +1,23 @@
+using Microsoft.Extensions.Options;
+using Quartz;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Inbox;
+
+internal sealed class ConfigureProcessInboxJob(IOptions<InboxOptions> inboxOptions)
+    : IConfigureOptions<QuartzOptions>
+{
+    private readonly InboxOptions _inboxOptions = inboxOptions.Value;
+
+    public void Configure(QuartzOptions options)
+    {
+        string jobName = typeof(ProcessInboxJob).FullName!;
+
+        options
+            .AddJob<ProcessInboxJob>(configure => configure.WithIdentity(jobName))
+            .AddTrigger(configure =>
+                configure
+                    .ForJob(jobName)
+                    .WithSimpleSchedule(schedule =>
+                        schedule.WithIntervalInSeconds(_inboxOptions.IntervalInSeconds).RepeatForever()));
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
new file mode 100644
index 0000000..8546138
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
@@ -0,0 +1,62 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Inbox;
+
+internal sealed class IdempotentIntegrationEventHandler<TIntegrationEvent>(
+    IIntegrationEventHandler<TIntegrationEvent> decorated,
+    IDbConnectionFactory dbConnectionFactory)
+    : IntegrationEventHandler<TIntegrationEvent>
+    where TIntegrationEvent : IIntegrationEvent
+{
+    public override async Task Handle(
+        TIntegrationEvent integrationEvent,
+        CancellationToken cancellationToken = default)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        var inboxMessageConsumer = new InboxMessageConsumer(integrationEvent.Id, decorated.GetType().Name);
+
+        if (await InboxConsumerExistsAsync(connection, inboxMessageConsumer))
+        {
+            return;
+        }
+
+        await decorated.Handle(integrationEvent, cancellationToken);
+
+        await InsertInboxConsumerAsync(connection, inboxMessageConsumer);
+    }
+
+    private static async Task<bool> InboxConsumerExistsAsync(
+        DbConnection dbConnection,
+        InboxMessageConsumer inboxMessageConsumer)
+    {
+        const string sql =
+            """
+            SELECT EXISTS(
+                SELECT 1
+                FROM rsvp.inbox_message_consumers
+                WHERE inbox_message_id = @InboxMessageId AND
+                      name = @Name
+            )
+            """;
+
+        return await dbConnection.ExecuteScalarAsync<bool>(sql, inboxMessageConsumer);
+    }
+
+    private static async Task InsertInboxConsumerAsync(
+        DbConnection dbConnection,
+        InboxMessageConsumer inboxMessageConsumer)
+    {
+        const string sql =
+            """
+            INSERT INTO rsvp.inbox_message_consumers(inbox_message_id, name)
+            VALUES (@InboxMessageId, @Name)
+            """;
+
+        await dbConnection.ExecuteAsync(sql, inboxMessageConsumer);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/InboxOptions.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/InboxOptions.cs
new file mode 100644
index 0000000..aad6b22
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/InboxOptions.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Rsvp.Infrastructure.Inbox;
+
+internal sealed class InboxOptions
+{
+    public int IntervalInSeconds { get; init; }
+
+    public int BatchSize { get; init; }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IntegrationEventConsumer.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IntegrationEventConsumer.cs
new file mode 100644
index 0000000..a3c152c
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IntegrationEventConsumer.cs
@@ -0,0 +1,39 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using MassTransit;
+using Newtonsoft.Json;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Inbox;
+
+internal sealed class IntegrationEventConsumer<TIntegrationEvent>(IDbConnectionFactory dbConnectionFactory)
+    : IConsumer<TIntegrationEvent>
+    where TIntegrationEvent : IntegrationEvent
+{
+    public async Task Consume(ConsumeContext<TIntegrationEvent> context)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        TIntegrationEvent integrationEvent = context.Message;
+
+        var inboxMessage = new InboxMessage
+        {
+            Id = integrationEvent.Id,
+            Type = integrationEvent.GetType().Name,
+            Content = JsonConvert.SerializeObject(integrationEvent, SerializerSettings.Instance),
+            OccurredOnUtc = integrationEvent.OccurredOnUtc
+        };
+
+        const string sql =
+            """
+            INSERT INTO rsvp.inbox_messages(id, type, content, occurred_on_utc)
+            VALUES (@Id, @Type, @Content::json, @OccurredOnUtc)
+            ON CONFLICT (id) DO NOTHING
+            """;
+
+        await connection.ExecuteAsync(sql, inboxMessage);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/ProcessInboxJob.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/ProcessInboxJob.cs
new file mode 100644
index 0000000..223b557
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/ProcessInboxJob.cs
@@ -0,0 +1,143 @@
+using System.Data;
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Newtonsoft.Json;
+using Quartz;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Inbox;
+
+[DisallowConcurrentExecution]
+internal sealed partial class ProcessInboxJob(
+    IDbConnectionFactory dbConnectionFactory,
+    IServiceScopeFactory serviceScopeFactory,
+    IDateTimeProvider dateTimeProvider,
+    IOptions<InboxOptions> inboxOptions,
+    ILogger<ProcessInboxJob> logger) : IJob
+{
+    private const string ModuleName = "Rsvp";
+
+    public async Task Execute(IJobExecutionContext context)
+    {
+        LogBeginProcessing(logger, ModuleName);
+
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbTransaction transaction = await connection.BeginTransactionAsync();
+
+        IReadOnlyList<InboxMessageResponse> inboxMessages = await GetInboxMessagesAsync(connection, transaction);
+
+        foreach (InboxMessageResponse inboxMessage in inboxMessages)
+        {
+            Exception? exception = null;
+
+            try
+            {
+                IIntegrationEvent integrationEvent = JsonConvert.DeserializeObject<IIntegrationEvent>(
+                    inboxMessage.Content,
+                    SerializerSettings.Instance)!;
+
+                using IServiceScope scope = serviceScopeFactory.CreateScope();
+
+                IEnumerable<IIntegrationEventHandler> handlers = IntegrationEventHandlersFactory.GetHandlers(
+                    integrationEvent.GetType(),
+                    scope.ServiceProvider,
+                    Presentation.AssemblyReference.Assembly);
+
+                foreach (IIntegrationEventHandler integrationEventHandler in handlers)
+                {
+                    await integrationEventHandler.Handle(integrationEvent, context.CancellationToken);
+                }
+            }
+            catch (Exception caughtException)
+            {
+                LogProcessingError(logger, caughtException, ModuleName, inboxMessage.Id);
+
+                exception = caughtException;
+            }
+
+            await UpdateInboxMessageAsync(connection, transaction, inboxMessage, exception);
+        }
+
+        await transaction.CommitAsync();
+
+        LogCompleted(logger, ModuleName);
+    }
+
+    private async Task<IReadOnlyList<InboxMessageResponse>> GetInboxMessagesAsync(
+        IDbConnection connection,
+        IDbTransaction transaction)
+    {
+        string sql =
+            $"""
+             SELECT
+                id AS {nameof(InboxMessageResponse.Id)},
+                content AS {nameof(InboxMessageResponse.Content)}
+             FROM rsvp.inbox_messages
+             WHERE processed_on_utc IS NULL
+             ORDER BY occurred_on_utc
+             LIMIT {inboxOptions.Value.BatchSize}
+             FOR UPDATE SKIP LOCKED
+             """;
+
+        IEnumerable<InboxMessageResponse> inboxMessages = await connection.QueryAsync<InboxMessageResponse>(
+            sql,
+            transaction: transaction);
+
+        return inboxMessages.AsList();
+    }
+
+    private async Task UpdateInboxMessageAsync(
+        IDbConnection connection,
+        IDbTransaction transaction,
+        InboxMessageResponse inboxMessage,
+        Exception? exception)
+    {
+        if (exception is null)
+        {
+            const string sql =
+                """
+                UPDATE rsvp.inbox_messages
+                SET processed_on_utc = @ProcessedOnUtc,
+                    error = NULL
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { inboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                transaction: transaction);
+        }
+        else
+        {
+            const string sql =
+                """
+                UPDATE rsvp.inbox_messages
+                SET error = @Error
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { inboxMessage.Id, Error = exception.ToString() },
+                transaction: transaction);
+        }
+    }
+
+    internal sealed record InboxMessageResponse(Guid Id, string Content);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Beginning to process inbox messages")]
+    private static partial void LogBeginProcessing(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Completed processing inbox messages")]
+    private static partial void LogCompleted(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Error, "{module} - Exception while processing inbox message {messageId}")]
+    private static partial void LogProcessingError(ILogger logger, Exception exception, string module, Guid messageId);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
new file mode 100644
index 0000000..96e6936
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
@@ -0,0 +1,23 @@
+using Microsoft.Extensions.Options;
+using Quartz;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Outbox;
+
+internal sealed class ConfigureProcessOutboxJob(IOptions<OutboxOptions> outboxOptions)
+    : IConfigureOptions<QuartzOptions>
+{
+    private readonly OutboxOptions _outboxOptions = outboxOptions.Value;
+
+    public void Configure(QuartzOptions options)
+    {
+        string jobName = typeof(ProcessOutboxJob).FullName!;
+
+        options
+            .AddJob<ProcessOutboxJob>(configure => configure.WithIdentity(jobName))
+            .AddTrigger(configure =>
+                configure
+                    .ForJob(jobName)
+                    .WithSimpleSchedule(schedule =>
+                        schedule.WithIntervalInSeconds(_outboxOptions.IntervalInSeconds).RepeatForever()));
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
new file mode 100644
index 0000000..6a843bb
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -0,0 +1,61 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Infrastructure.Outbox;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Outbox;
+
+internal sealed class IdempotentDomainEventHandler<TDomainEvent>(
+    IDomainEventHandler<TDomainEvent> decorated,
+    IDbConnectionFactory dbConnectionFactory)
+    : DomainEventHandler<TDomainEvent>
+    where TDomainEvent : IDomainEvent
+{
+    public override async Task Handle(TDomainEvent domainEvent, CancellationToken cancellationToken = default)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
+
+        if (await OutboxConsumerExistsAsync(connection, outboxMessageConsumer))
+        {
+            return;
+        }
+
+        await decorated.Handle(domainEvent, cancellationToken);
+
+        await InsertOutboxConsumerAsync(connection, outboxMessageConsumer);
+    }
+
+    private static async Task<bool> OutboxConsumerExistsAsync(
+        DbConnection dbConnection,
+        OutboxMessageConsumer outboxMessageConsumer)
+    {
+        const string sql =
+            """
+            SELECT EXISTS(
+                SELECT 1
+                FROM rsvp.outbox_message_consumers
+                WHERE outbox_message_id = @OutboxMessageId AND
+                      name = @Name
+            )
+            """;
+
+        return await dbConnection.ExecuteScalarAsync<bool>(sql, outboxMessageConsumer);
+    }
+
+    private static async Task InsertOutboxConsumerAsync(
+        DbConnection dbConnection,
+        OutboxMessageConsumer outboxMessageConsumer)
+    {
+        const string sql =
+            """
+            INSERT INTO rsvp.outbox_message_consumers(outbox_message_id, name)
+            VALUES (@OutboxMessageId, @Name)
+            """;
+
+        await dbConnection.ExecuteAsync(sql, outboxMessageConsumer);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/OutboxOptions.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/OutboxOptions.cs
new file mode 100644
index 0000000..2ef4442
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/OutboxOptions.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Rsvp.Infrastructure.Outbox;
+
+internal sealed class OutboxOptions
+{
+    public int IntervalInSeconds { get; init; }
+
+    public int BatchSize { get; init; }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ProcessOutboxJob.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ProcessOutboxJob.cs
new file mode 100644
index 0000000..8cda324
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ProcessOutboxJob.cs
@@ -0,0 +1,144 @@
+using System.Data;
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Newtonsoft.Json;
+using Quartz;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Outbox;
+
+[DisallowConcurrentExecution]
+internal sealed partial class ProcessOutboxJob(
+    IDbConnectionFactory dbConnectionFactory,
+    IServiceScopeFactory serviceScopeFactory,
+    IDateTimeProvider dateTimeProvider,
+    IOptions<OutboxOptions> outboxOptions,
+    ILogger<ProcessOutboxJob> logger) : IJob
+{
+    private const string ModuleName = "Rsvp";
+
+    public async Task Execute(IJobExecutionContext context)
+    {
+        LogBeginProcessing(logger, ModuleName);
+
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbTransaction transaction = await connection.BeginTransactionAsync();
+
+        IReadOnlyList<OutboxMessageResponse> outboxMessages = await GetOutboxMessagesAsync(connection, transaction);
+
+        foreach (OutboxMessageResponse outboxMessage in outboxMessages)
+        {
+            Exception? exception = null;
+
+            try
+            {
+                IDomainEvent domainEvent = JsonConvert.DeserializeObject<IDomainEvent>(
+                    outboxMessage.Content,
+                    SerializerSettings.Instance)!;
+
+                using IServiceScope scope = serviceScopeFactory.CreateScope();
+
+                IEnumerable<IDomainEventHandler> handlers = DomainEventHandlersFactory.GetHandlers(
+                    domainEvent.GetType(),
+                    scope.ServiceProvider,
+                    Application.AssemblyReference.Assembly);
+
+                foreach (IDomainEventHandler domainEventHandler in handlers)
+                {
+                    await domainEventHandler.Handle(domainEvent, context.CancellationToken);
+                }
+            }
+            catch (Exception caughtException)
+            {
+                LogProcessingError(logger, caughtException, ModuleName, outboxMessage.Id);
+
+                exception = caughtException;
+            }
+
+            await UpdateOutboxMessageAsync(connection, transaction, outboxMessage, exception);
+        }
+
+        await transaction.CommitAsync();
+
+        LogCompleted(logger, ModuleName);
+    }
+
+    private async Task<IReadOnlyList<OutboxMessageResponse>> GetOutboxMessagesAsync(
+        IDbConnection connection,
+        IDbTransaction transaction)
+    {
+        string sql =
+            $"""
+             SELECT
+                id AS {nameof(OutboxMessageResponse.Id)},
+                content AS {nameof(OutboxMessageResponse.Content)}
+             FROM rsvp.outbox_messages
+             WHERE processed_on_utc IS NULL
+             ORDER BY occurred_on_utc
+             LIMIT {outboxOptions.Value.BatchSize}
+             FOR UPDATE SKIP LOCKED
+             """;
+
+        IEnumerable<OutboxMessageResponse> outboxMessages = await connection.QueryAsync<OutboxMessageResponse>(
+            sql,
+            transaction: transaction);
+
+        return outboxMessages.ToList();
+    }
+
+    private async Task UpdateOutboxMessageAsync(
+        IDbConnection connection,
+        IDbTransaction transaction,
+        OutboxMessageResponse outboxMessage,
+        Exception? exception)
+    {
+        if (exception is null)
+        {
+            const string sql =
+                """
+                UPDATE rsvp.outbox_messages
+                SET processed_on_utc = @ProcessedOnUtc,
+                    error = NULL
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { outboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                transaction: transaction);
+        }
+        else
+        {
+            const string sql =
+                """
+                UPDATE rsvp.outbox_messages
+                SET error = @Error
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { outboxMessage.Id, Error = exception.ToString() },
+                transaction: transaction);
+        }
+    }
+
+    internal sealed record OutboxMessageResponse(Guid Id, string Content);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Beginning to process outbox messages")]
+    private static partial void LogBeginProcessing(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Completed processing outbox messages")]
+    private static partial void LogCompleted(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Error, "{module} - Exception while processing outbox message {messageId}")]
+    private static partial void LogProcessingError(ILogger logger, Exception exception, string module, Guid messageId);
+}

From 8d570127bfcbe6bfab65a8bb1a46487a732e79ec Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 17:21:53 +0800
Subject: [PATCH 082/155] Eternelle-191 Add RsvpModule DI registration

---
 .../RsvpModule.cs                             | 106 ++++++++++++++++++
 1 file changed, 106 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/RsvpModule.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/RsvpModule.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/RsvpModule.cs
new file mode 100644
index 0000000..65ced50
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/RsvpModule.cs
@@ -0,0 +1,106 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Security;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+using Eternelle.Modules.Rsvp.Infrastructure.Database;
+using Eternelle.Modules.Rsvp.Infrastructure.Guests;
+using Eternelle.Modules.Rsvp.Infrastructure.Inbox;
+using Eternelle.Modules.Rsvp.Infrastructure.Outbox;
+using Eternelle.Modules.Rsvp.Infrastructure.Security;
+using Eternelle.Modules.Rsvp.Infrastructure.Submissions;
+using Eternelle.Modules.Rsvp.Infrastructure.Weddings;
+using Eternelle.Modules.Weddings.IntegrationEvents.Weddings;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure;
+
+public static class RsvpModule
+{
+    public static IServiceCollection AddRsvpModule(this IServiceCollection services, IConfiguration configuration)
+    {
+        services.AddDomainEventHandlers();
+        services.AddIntegrationEventHandlers();
+        services.AddInfrastructure(configuration);
+        services.AddEndpoints(Presentation.AssemblyReference.Assembly);
+        return services;
+    }
+
+    public static void ConfigureConsumers(MassTransit.IRegistrationConfigurator configurator)
+    {
+        configurator.AddConsumer<IntegrationEventConsumer<WeddingCreatedIntegrationEvent>>();
+    }
+
+    private static void AddInfrastructure(this IServiceCollection services, IConfiguration configuration)
+    {
+        services.AddDbContext<RsvpDbContext>((sp, options) =>
+            options
+                .UseNpgsql(
+                    configuration.GetConnectionString("Database"),
+                    npgsql => npgsql.MigrationsHistoryTable(HistoryRepository.DefaultTableName, Schemas.Rsvp))
+                .UseSnakeCaseNamingConvention()
+                .AddInterceptors(sp.GetRequiredService<InsertOutboxMessagesInterceptor>()));
+
+        services.AddScoped<IUnitOfWork>(sp => sp.GetRequiredService<RsvpDbContext>());
+
+        services.AddScoped<IWeddingProjection, WeddingProjection>();
+        services.AddScoped<IGuestRepository, GuestRepository>();
+        services.AddScoped<IRsvpSubmissionRepository, RsvpSubmissionRepository>();
+
+        services.AddSingleton<ITokenGenerator, LookupCodeGenerator>();
+
+        services.AddOptions<OutboxOptions>()
+            .Bind(configuration.GetSection("Rsvp:Outbox"))
+            .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
+                "Rsvp:Outbox: IntervalInSeconds and BatchSize must be greater than 0.")
+            .ValidateOnStart();
+        services.ConfigureOptions<ConfigureProcessOutboxJob>();
+
+        services.AddOptions<InboxOptions>()
+            .Bind(configuration.GetSection("Rsvp:Inbox"))
+            .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
+                "Rsvp:Inbox: IntervalInSeconds and BatchSize must be greater than 0.")
+            .ValidateOnStart();
+        services.ConfigureOptions<ConfigureProcessInboxJob>();
+    }
+
+    private static void AddDomainEventHandlers(this IServiceCollection services)
+    {
+        Type[] handlers = Application.AssemblyReference.Assembly.GetTypes()
+            .Where(t => t.IsAssignableTo(typeof(IDomainEventHandler))).ToArray();
+
+        foreach (Type handler in handlers)
+        {
+            services.TryAddScoped(handler);
+            Type domainEvent = handler.GetInterfaces()
+                .Single(i => i.IsGenericType && i.GetGenericTypeDefinition() == typeof(IDomainEventHandler<>))
+                .GetGenericArguments().Single();
+            Type closed = typeof(IdempotentDomainEventHandler<>).MakeGenericType(domainEvent);
+            services.Decorate(handler, closed);
+        }
+    }
+
+    private static void AddIntegrationEventHandlers(this IServiceCollection services)
+    {
+        Type[] handlers = Presentation.AssemblyReference.Assembly.GetTypes()
+            .Where(t => t.IsAssignableTo(typeof(IIntegrationEventHandler))).ToArray();
+
+        foreach (Type handler in handlers)
+        {
+            services.TryAddScoped(handler);
+            Type integrationEvent = handler.GetInterfaces()
+                .Single(i => i.IsGenericType && i.GetGenericTypeDefinition() == typeof(IIntegrationEventHandler<>))
+                .GetGenericArguments().Single();
+            Type closed = typeof(IdempotentIntegrationEventHandler<>).MakeGenericType(integrationEvent);
+            services.Decorate(handler, closed);
+        }
+    }
+}

From f7e78c9fa6d9ede4f803cb83457e796557ffc876 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 17:23:08 +0800
Subject: [PATCH 083/155] Eternelle-191 Add LookupCodeGenerator, complete
 infrastructure

---
 .../Security/LookupCodeGenerator.cs           | 24 +++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs
new file mode 100644
index 0000000..1cfbd52
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs
@@ -0,0 +1,24 @@
+using System.Security.Cryptography;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Security;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Security;
+
+internal sealed class LookupCodeGenerator : ITokenGenerator
+{
+    public string GenerateLookupCode()
+    {
+        const int length = LookupCode.MaxLength;
+        Span<char> buffer = stackalloc char[length];
+        Span<byte> entropy = stackalloc byte[length];
+        RandomNumberGenerator.Fill(entropy);
+
+        ReadOnlySpan<char> alphabet = LookupCode.Alphabet;
+        for (int i = 0; i < length; i++)
+        {
+            buffer[i] = alphabet[entropy[i] % alphabet.Length];
+        }
+
+        return new string(buffer);
+    }
+}

From 13f628d87da66e378155492179720c76c8788ff3 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 17:31:19 +0800
Subject: [PATCH 084/155] Eternelle-191 Register Rsvp module + rate-limit
 policies

---
 src/API/Eternelle.Api/Eternelle.Api.csproj |  2 ++
 src/API/Eternelle.Api/Program.cs           | 27 +++++++++++++++++++---
 2 files changed, 26 insertions(+), 3 deletions(-)

diff --git a/src/API/Eternelle.Api/Eternelle.Api.csproj b/src/API/Eternelle.Api/Eternelle.Api.csproj
index dc3f0de..897ee40 100644
--- a/src/API/Eternelle.Api/Eternelle.Api.csproj
+++ b/src/API/Eternelle.Api/Eternelle.Api.csproj
@@ -25,6 +25,8 @@
     <ProjectReference Include="..\..\Modules\Tenancy\Eternelle.Modules.Tenancy.Infrastructure\Eternelle.Modules.Tenancy.Infrastructure.csproj" />
     <ProjectReference Include="..\..\Modules\Users\Eternelle.Modules.Users.Infrastructure\Eternelle.Modules.Users.Infrastructure.csproj" />
     <ProjectReference Include="..\..\Modules\Weddings\Eternelle.Modules.Weddings.Infrastructure\Eternelle.Modules.Weddings.Infrastructure.csproj" />
+    <ProjectReference Include="..\..\Modules\Rsvp\Eternelle.Modules.Rsvp.Infrastructure\Eternelle.Modules.Rsvp.Infrastructure.csproj" />
+    <ProjectReference Include="..\..\Modules\Rsvp\Eternelle.Modules.Rsvp.Presentation\Eternelle.Modules.Rsvp.Presentation.csproj" />
   </ItemGroup>
 
 </Project>
diff --git a/src/API/Eternelle.Api/Program.cs b/src/API/Eternelle.Api/Program.cs
index c4a29c2..44b2f4e 100644
--- a/src/API/Eternelle.Api/Program.cs
+++ b/src/API/Eternelle.Api/Program.cs
@@ -7,6 +7,7 @@
 using Eternelle.Common.Infrastructure.Configuration;
 using Eternelle.Common.Presentation.Endpoints;
 using Eternelle.Modules.Catalog.Infrastructure;
+using Eternelle.Modules.Rsvp.Infrastructure;
 using Eternelle.Modules.Tenancy.Infrastructure;
 using Eternelle.Modules.Users.Infrastructure;
 using Eternelle.Modules.Weddings.Infrastructure;
@@ -29,7 +30,8 @@
     Eternelle.Modules.Weddings.Application.AssemblyReference.Assembly,
     Eternelle.Modules.Users.Application.AssemblyReference.Assembly,
     Eternelle.Modules.Catalog.Application.AssemblyReference.Assembly,
-    Eternelle.Modules.Tenancy.Application.AssemblyReference.Assembly
+    Eternelle.Modules.Tenancy.Application.AssemblyReference.Assembly,
+    Eternelle.Modules.Rsvp.Application.AssemblyReference.Assembly
 ]);
 
 string databaseConnectionString = builder.Configuration.GetConnectionStringOrThrow("Database");
@@ -40,12 +42,13 @@
     moduleConfigureConsumers:
     [
         TenancyModule.ConfigureConsumers,
-        WeddingsModule.ConfigureConsumers
+        WeddingsModule.ConfigureConsumers,
+        RsvpModule.ConfigureConsumers
     ],
     databaseConnectionString: databaseConnectionString,
     redisConnectionString: redisConnectionString);
 
-builder.Configuration.AddModuleConfiguration(["weddings", "users", "catalog", "tenancy"]);
+builder.Configuration.AddModuleConfiguration(["weddings", "users", "catalog", "tenancy", "rsvp"]);
 
 Uri keyCloakHealthUrl = builder.Configuration.GetKeyCloakHealthUrl();
 
@@ -62,6 +65,8 @@
 
 builder.Services.AddTenancyModule(builder.Configuration);
 
+builder.Services.AddRsvpModule(builder.Configuration);
+
 builder.Services.AddRateLimiter(options =>
 {
     // IP-based fixed-window limiter for the public guest photo upload endpoint.
@@ -76,6 +81,22 @@
                 QueueLimit = 0
             }));
 
+    options.AddPolicy(Eternelle.Modules.Rsvp.Presentation.RateLimitingPolicies.RsvpLookup, ctx =>
+        RateLimitPartition.GetFixedWindowLimiter(
+            partitionKey: ctx.Connection.RemoteIpAddress?.ToString() ?? "unknown",
+            factory: _ => new FixedWindowRateLimiterOptions
+            {
+                PermitLimit = 30, Window = TimeSpan.FromMinutes(1), QueueLimit = 0
+            }));
+
+    options.AddPolicy(Eternelle.Modules.Rsvp.Presentation.RateLimitingPolicies.RsvpSubmit, ctx =>
+        RateLimitPartition.GetFixedWindowLimiter(
+            partitionKey: ctx.Connection.RemoteIpAddress?.ToString() ?? "unknown",
+            factory: _ => new FixedWindowRateLimiterOptions
+            {
+                PermitLimit = 5, Window = TimeSpan.FromMinutes(1), QueueLimit = 0
+            }));
+
     options.RejectionStatusCode = StatusCodes.Status429TooManyRequests;
 });
 

From 3c7786c4276611c8df78a7a8b4ecdb995995e94e Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 17:32:37 +0800
Subject: [PATCH 085/155] Eternelle-191 Add modules.rsvp.json config

---
 src/API/Eternelle.Api/modules.rsvp.Development.json | 1 +
 src/API/Eternelle.Api/modules.rsvp.json             | 6 ++++++
 2 files changed, 7 insertions(+)
 create mode 100644 src/API/Eternelle.Api/modules.rsvp.Development.json
 create mode 100644 src/API/Eternelle.Api/modules.rsvp.json

diff --git a/src/API/Eternelle.Api/modules.rsvp.Development.json b/src/API/Eternelle.Api/modules.rsvp.Development.json
new file mode 100644
index 0000000..0967ef4
--- /dev/null
+++ b/src/API/Eternelle.Api/modules.rsvp.Development.json
@@ -0,0 +1 @@
+{}
diff --git a/src/API/Eternelle.Api/modules.rsvp.json b/src/API/Eternelle.Api/modules.rsvp.json
new file mode 100644
index 0000000..92ca742
--- /dev/null
+++ b/src/API/Eternelle.Api/modules.rsvp.json
@@ -0,0 +1,6 @@
+{
+  "Rsvp": {
+    "Outbox": { "IntervalInSeconds": 10, "BatchSize": 20 },
+    "Inbox": { "IntervalInSeconds": 10, "BatchSize": 20 }
+  }
+}

From 1d39c360d1d5e7536574f8a03d0722c805184411 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 17:48:19 +0800
Subject: [PATCH 086/155] Eternelle-191 Initial migration + register with
 MigrationExtensions

---
 .../Extensions/MigrationExtensions.cs         |   2 +
 .../20260529094037_InitialRsvp.Designer.cs    | 381 ++++++++++++++++++
 .../Migrations/20260529094037_InitialRsvp.cs  | 247 ++++++++++++
 .../Migrations/RsvpDbContextModelSnapshot.cs  | 378 +++++++++++++++++
 4 files changed, 1008 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/20260529094037_InitialRsvp.Designer.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/20260529094037_InitialRsvp.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/RsvpDbContextModelSnapshot.cs

diff --git a/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs b/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
index 357fdfd..00ec843 100644
--- a/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
+++ b/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
@@ -1,4 +1,5 @@
 using Eternelle.Modules.Catalog.Infrastructure.Database;
+using Eternelle.Modules.Rsvp.Infrastructure.Database;
 using Eternelle.Modules.Tenancy.Infrastructure.Database;
 using Eternelle.Modules.Users.Infrastructure.Database;
 using Eternelle.Modules.Weddings.Infrastructure.Database;
@@ -16,6 +17,7 @@ public static void ApplyMigrations(this IApplicationBuilder app)
         ApplyMigration<UsersDbContext>(scope);
         ApplyMigration<CatalogDbContext>(scope);
         ApplyMigration<TenancyDbContext>(scope);
+        ApplyMigration<RsvpDbContext>(scope);
     }
 
     private static void ApplyMigration<TDbContext>(IServiceScope scope)
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/20260529094037_InitialRsvp.Designer.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/20260529094037_InitialRsvp.Designer.cs
new file mode 100644
index 0000000..3121c2e
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/20260529094037_InitialRsvp.Designer.cs
@@ -0,0 +1,381 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Rsvp.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Migrations
+{
+    [DbContext(typeof(RsvpDbContext))]
+    [Migration("20260529094037_InitialRsvp")]
+    partial class InitialRsvp
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("rsvp")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Rsvp.Domain.Guests.Guest", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<int>("AllowedCompanions")
+                        .HasColumnType("integer")
+                        .HasColumnName("allowed_companions");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(254)
+                        .HasColumnType("character varying(254)")
+                        .HasColumnName("email");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("first_name");
+
+                    b.Property<string>("GroupName")
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("group_name");
+
+                    b.Property<bool>("IsLocked")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_locked");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("last_name");
+
+                    b.Property<DateTime?>("LockedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("locked_at_utc");
+
+                    b.Property<string>("LookupCode")
+                        .IsRequired()
+                        .HasMaxLength(8)
+                        .HasColumnType("character varying(8)")
+                        .HasColumnName("lookup_code");
+
+                    b.Property<string>("MobileNumber")
+                        .HasMaxLength(30)
+                        .HasColumnType("character varying(30)")
+                        .HasColumnName("mobile_number");
+
+                    b.Property<int?>("TableNumber")
+                        .HasColumnType("integer")
+                        .HasColumnName("table_number");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_guests");
+
+                    b.HasIndex("LookupCode")
+                        .IsUnique()
+                        .HasDatabaseName("ix_guests_lookup_code");
+
+                    b.HasIndex("WeddingId")
+                        .HasDatabaseName("ix_guests_wedding_id");
+
+                    b.ToTable("guests", "rsvp", t =>
+                        {
+                            t.HasCheckConstraint("ck_guests_allowed_companions", "allowed_companions >= 0");
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Rsvp.Domain.Submissions.RsvpSubmission", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<bool>("Attending")
+                        .HasColumnType("boolean")
+                        .HasColumnName("attending");
+
+                    b.Property<Guid>("ConfirmationId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("confirmation_id");
+
+                    b.Property<string>("DietaryNote")
+                        .HasMaxLength(300)
+                        .HasColumnType("character varying(300)")
+                        .HasColumnName("dietary_note");
+
+                    b.Property<string>("EmailSnapshot")
+                        .HasMaxLength(254)
+                        .HasColumnType("character varying(254)")
+                        .HasColumnName("email_snapshot");
+
+                    b.Property<Guid?>("GuestId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("guest_id");
+
+                    b.Property<string>("InternalNote")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("internal_note");
+
+                    b.Property<string>("IpAddress")
+                        .HasMaxLength(45)
+                        .HasColumnType("character varying(45)")
+                        .HasColumnName("ip_address");
+
+                    b.Property<string>("Message")
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("message");
+
+                    b.Property<string>("MobileSnapshot")
+                        .HasMaxLength(30)
+                        .HasColumnType("character varying(30)")
+                        .HasColumnName("mobile_snapshot");
+
+                    b.Property<string>("NameSnapshot")
+                        .IsRequired()
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("name_snapshot");
+
+                    b.Property<int>("Source")
+                        .HasColumnType("integer")
+                        .HasColumnName("source");
+
+                    b.Property<DateTime>("SubmittedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("submitted_at");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_submissions");
+
+                    b.HasIndex("ConfirmationId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_submissions_confirmation_id");
+
+                    b.HasIndex("GuestId", "SubmittedAtUtc")
+                        .HasDatabaseName("ix_submissions_guest_id_submitted_at_utc");
+
+                    b.HasIndex("WeddingId", "SubmittedAtUtc")
+                        .HasDatabaseName("ix_submissions_wedding_id_submitted_at_utc");
+
+                    b.ToTable("submissions", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Rsvp.Domain.Weddings.Wedding", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at");
+
+                    b.Property<bool>("IsClosed")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_closed");
+
+                    b.Property<DateOnly?>("RsvpDeadline")
+                        .HasColumnType("date")
+                        .HasColumnName("rsvp_deadline");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at");
+
+                    b.Property<DateOnly>("WeddingDate")
+                        .HasColumnType("date")
+                        .HasColumnName("wedding_date");
+
+                    b.HasKey("Id")
+                        .HasName("pk_weddings");
+
+                    b.ToTable("weddings", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Rsvp.Domain.Submissions.RsvpSubmission", b =>
+                {
+                    b.OwnsMany("Eternelle.Modules.Rsvp.Domain.Submissions.SubmissionCompanion", "Companions", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<bool>("Attending")
+                                .HasColumnType("boolean")
+                                .HasColumnName("attending");
+
+                            b1.Property<string>("DietaryNote")
+                                .HasMaxLength(300)
+                                .HasColumnType("character varying(300)")
+                                .HasColumnName("dietary_note");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(150)
+                                .HasColumnType("character varying(150)")
+                                .HasColumnName("name");
+
+                            b1.Property<Guid>("SubmissionId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("submission_id");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_submission_companions");
+
+                            b1.HasIndex("SubmissionId", "DisplayOrder")
+                                .HasDatabaseName("ix_submission_companions_submission_id_display_order");
+
+                            b1.ToTable("submission_companions", "rsvp");
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubmissionId")
+                                .HasConstraintName("fk_submission_companions_submissions_submission_id");
+                        });
+
+                    b.Navigation("Companions");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/20260529094037_InitialRsvp.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/20260529094037_InitialRsvp.cs
new file mode 100644
index 0000000..24305d7
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/20260529094037_InitialRsvp.cs
@@ -0,0 +1,247 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Migrations;
+
+/// <inheritdoc />
+public partial class InitialRsvp : Migration
+{
+    private static readonly string[] _submissionIdDisplayOrder = ["submission_id", "display_order"];
+    private static readonly string[] _guestIdSubmittedAt = ["guest_id", "submitted_at"];
+    private static readonly string[] _weddingIdSubmittedAt = ["wedding_id", "submitted_at"];
+
+    /// <inheritdoc />
+    protected override void Up(MigrationBuilder migrationBuilder)
+    {
+        migrationBuilder.EnsureSchema(
+            name: "rsvp");
+
+        migrationBuilder.CreateTable(
+            name: "guests",
+            schema: "rsvp",
+            columns: table => new
+            {
+                id = table.Column<Guid>(type: "uuid", nullable: false),
+                wedding_id = table.Column<Guid>(type: "uuid", nullable: false),
+                first_name = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false),
+                last_name = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false),
+                email = table.Column<string>(type: "character varying(254)", maxLength: 254, nullable: true),
+                mobile_number = table.Column<string>(type: "character varying(30)", maxLength: 30, nullable: true),
+                lookup_code = table.Column<string>(type: "character varying(8)", maxLength: 8, nullable: false),
+                allowed_companions = table.Column<int>(type: "integer", nullable: false),
+                table_number = table.Column<int>(type: "integer", nullable: true),
+                group_name = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: true),
+                is_locked = table.Column<bool>(type: "boolean", nullable: false),
+                locked_at_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                created_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                updated_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_guests", x => x.id);
+                table.CheckConstraint("ck_guests_allowed_companions", "allowed_companions >= 0");
+            });
+
+        migrationBuilder.CreateTable(
+            name: "inbox_message_consumers",
+            schema: "rsvp",
+            columns: table => new
+            {
+                inbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
+                name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_inbox_message_consumers", x => new { x.inbox_message_id, x.name });
+            });
+
+        migrationBuilder.CreateTable(
+            name: "inbox_messages",
+            schema: "rsvp",
+            columns: table => new
+            {
+                id = table.Column<Guid>(type: "uuid", nullable: false),
+                type = table.Column<string>(type: "text", nullable: false),
+                content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
+                occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                error = table.Column<string>(type: "text", nullable: true)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_inbox_messages", x => x.id);
+            });
+
+        migrationBuilder.CreateTable(
+            name: "outbox_message_consumers",
+            schema: "rsvp",
+            columns: table => new
+            {
+                outbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
+                name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_outbox_message_consumers", x => new { x.outbox_message_id, x.name });
+            });
+
+        migrationBuilder.CreateTable(
+            name: "outbox_messages",
+            schema: "rsvp",
+            columns: table => new
+            {
+                id = table.Column<Guid>(type: "uuid", nullable: false),
+                type = table.Column<string>(type: "text", nullable: false),
+                content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
+                occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                error = table.Column<string>(type: "text", nullable: true)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_outbox_messages", x => x.id);
+            });
+
+        migrationBuilder.CreateTable(
+            name: "submissions",
+            schema: "rsvp",
+            columns: table => new
+            {
+                id = table.Column<Guid>(type: "uuid", nullable: false),
+                wedding_id = table.Column<Guid>(type: "uuid", nullable: false),
+                guest_id = table.Column<Guid>(type: "uuid", nullable: true),
+                name_snapshot = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: false),
+                email_snapshot = table.Column<string>(type: "character varying(254)", maxLength: 254, nullable: true),
+                mobile_snapshot = table.Column<string>(type: "character varying(30)", maxLength: 30, nullable: true),
+                attending = table.Column<bool>(type: "boolean", nullable: false),
+                dietary_note = table.Column<string>(type: "character varying(300)", maxLength: 300, nullable: true),
+                message = table.Column<string>(type: "character varying(2000)", maxLength: 2000, nullable: true),
+                confirmation_id = table.Column<Guid>(type: "uuid", nullable: false),
+                ip_address = table.Column<string>(type: "character varying(45)", maxLength: 45, nullable: true),
+                source = table.Column<int>(type: "integer", nullable: false),
+                internal_note = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: true),
+                submitted_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_submissions", x => x.id);
+            });
+
+        migrationBuilder.CreateTable(
+            name: "weddings",
+            schema: "rsvp",
+            columns: table => new
+            {
+                id = table.Column<Guid>(type: "uuid", nullable: false),
+                wedding_date = table.Column<DateOnly>(type: "date", nullable: false),
+                rsvp_deadline = table.Column<DateOnly>(type: "date", nullable: true),
+                is_closed = table.Column<bool>(type: "boolean", nullable: false),
+                created_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                updated_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_weddings", x => x.id);
+            });
+
+        migrationBuilder.CreateTable(
+            name: "submission_companions",
+            schema: "rsvp",
+            columns: table => new
+            {
+                id = table.Column<Guid>(type: "uuid", nullable: false),
+                submission_id = table.Column<Guid>(type: "uuid", nullable: false),
+                name = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: false),
+                attending = table.Column<bool>(type: "boolean", nullable: false),
+                dietary_note = table.Column<string>(type: "character varying(300)", maxLength: 300, nullable: true),
+                display_order = table.Column<int>(type: "integer", nullable: false)
+            },
+            constraints: table =>
+            {
+                table.PrimaryKey("pk_submission_companions", x => x.id);
+                table.ForeignKey(
+                    name: "fk_submission_companions_submissions_submission_id",
+                    column: x => x.submission_id,
+                    principalSchema: "rsvp",
+                    principalTable: "submissions",
+                    principalColumn: "id",
+                    onDelete: ReferentialAction.Cascade);
+            });
+
+        migrationBuilder.CreateIndex(
+            name: "ix_guests_lookup_code",
+            schema: "rsvp",
+            table: "guests",
+            column: "lookup_code",
+            unique: true);
+
+        migrationBuilder.CreateIndex(
+            name: "ix_guests_wedding_id",
+            schema: "rsvp",
+            table: "guests",
+            column: "wedding_id");
+
+        migrationBuilder.CreateIndex(
+            name: "ix_submission_companions_submission_id_display_order",
+            schema: "rsvp",
+            table: "submission_companions",
+            columns: _submissionIdDisplayOrder);
+
+        migrationBuilder.CreateIndex(
+            name: "ix_submissions_confirmation_id",
+            schema: "rsvp",
+            table: "submissions",
+            column: "confirmation_id",
+            unique: true);
+
+        migrationBuilder.CreateIndex(
+            name: "ix_submissions_guest_id_submitted_at_utc",
+            schema: "rsvp",
+            table: "submissions",
+            columns: _guestIdSubmittedAt);
+
+        migrationBuilder.CreateIndex(
+            name: "ix_submissions_wedding_id_submitted_at_utc",
+            schema: "rsvp",
+            table: "submissions",
+            columns: _weddingIdSubmittedAt);
+    }
+
+    /// <inheritdoc />
+    protected override void Down(MigrationBuilder migrationBuilder)
+    {
+        migrationBuilder.DropTable(
+            name: "guests",
+            schema: "rsvp");
+
+        migrationBuilder.DropTable(
+            name: "inbox_message_consumers",
+            schema: "rsvp");
+
+        migrationBuilder.DropTable(
+            name: "inbox_messages",
+            schema: "rsvp");
+
+        migrationBuilder.DropTable(
+            name: "outbox_message_consumers",
+            schema: "rsvp");
+
+        migrationBuilder.DropTable(
+            name: "outbox_messages",
+            schema: "rsvp");
+
+        migrationBuilder.DropTable(
+            name: "submission_companions",
+            schema: "rsvp");
+
+        migrationBuilder.DropTable(
+            name: "weddings",
+            schema: "rsvp");
+
+        migrationBuilder.DropTable(
+            name: "submissions",
+            schema: "rsvp");
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/RsvpDbContextModelSnapshot.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/RsvpDbContextModelSnapshot.cs
new file mode 100644
index 0000000..356dab9
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Migrations/RsvpDbContextModelSnapshot.cs
@@ -0,0 +1,378 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Rsvp.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Rsvp.Infrastructure.Migrations
+{
+    [DbContext(typeof(RsvpDbContext))]
+    partial class RsvpDbContextModelSnapshot : ModelSnapshot
+    {
+        protected override void BuildModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("rsvp")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Rsvp.Domain.Guests.Guest", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<int>("AllowedCompanions")
+                        .HasColumnType("integer")
+                        .HasColumnName("allowed_companions");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at");
+
+                    b.Property<string>("Email")
+                        .HasMaxLength(254)
+                        .HasColumnType("character varying(254)")
+                        .HasColumnName("email");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("first_name");
+
+                    b.Property<string>("GroupName")
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("group_name");
+
+                    b.Property<bool>("IsLocked")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_locked");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("last_name");
+
+                    b.Property<DateTime?>("LockedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("locked_at_utc");
+
+                    b.Property<string>("LookupCode")
+                        .IsRequired()
+                        .HasMaxLength(8)
+                        .HasColumnType("character varying(8)")
+                        .HasColumnName("lookup_code");
+
+                    b.Property<string>("MobileNumber")
+                        .HasMaxLength(30)
+                        .HasColumnType("character varying(30)")
+                        .HasColumnName("mobile_number");
+
+                    b.Property<int?>("TableNumber")
+                        .HasColumnType("integer")
+                        .HasColumnName("table_number");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_guests");
+
+                    b.HasIndex("LookupCode")
+                        .IsUnique()
+                        .HasDatabaseName("ix_guests_lookup_code");
+
+                    b.HasIndex("WeddingId")
+                        .HasDatabaseName("ix_guests_wedding_id");
+
+                    b.ToTable("guests", "rsvp", t =>
+                        {
+                            t.HasCheckConstraint("ck_guests_allowed_companions", "allowed_companions >= 0");
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Rsvp.Domain.Submissions.RsvpSubmission", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<bool>("Attending")
+                        .HasColumnType("boolean")
+                        .HasColumnName("attending");
+
+                    b.Property<Guid>("ConfirmationId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("confirmation_id");
+
+                    b.Property<string>("DietaryNote")
+                        .HasMaxLength(300)
+                        .HasColumnType("character varying(300)")
+                        .HasColumnName("dietary_note");
+
+                    b.Property<string>("EmailSnapshot")
+                        .HasMaxLength(254)
+                        .HasColumnType("character varying(254)")
+                        .HasColumnName("email_snapshot");
+
+                    b.Property<Guid?>("GuestId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("guest_id");
+
+                    b.Property<string>("InternalNote")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("internal_note");
+
+                    b.Property<string>("IpAddress")
+                        .HasMaxLength(45)
+                        .HasColumnType("character varying(45)")
+                        .HasColumnName("ip_address");
+
+                    b.Property<string>("Message")
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("message");
+
+                    b.Property<string>("MobileSnapshot")
+                        .HasMaxLength(30)
+                        .HasColumnType("character varying(30)")
+                        .HasColumnName("mobile_snapshot");
+
+                    b.Property<string>("NameSnapshot")
+                        .IsRequired()
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("name_snapshot");
+
+                    b.Property<int>("Source")
+                        .HasColumnType("integer")
+                        .HasColumnName("source");
+
+                    b.Property<DateTime>("SubmittedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("submitted_at");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_submissions");
+
+                    b.HasIndex("ConfirmationId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_submissions_confirmation_id");
+
+                    b.HasIndex("GuestId", "SubmittedAtUtc")
+                        .HasDatabaseName("ix_submissions_guest_id_submitted_at_utc");
+
+                    b.HasIndex("WeddingId", "SubmittedAtUtc")
+                        .HasDatabaseName("ix_submissions_wedding_id_submitted_at_utc");
+
+                    b.ToTable("submissions", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Rsvp.Domain.Weddings.Wedding", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at");
+
+                    b.Property<bool>("IsClosed")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_closed");
+
+                    b.Property<DateOnly?>("RsvpDeadline")
+                        .HasColumnType("date")
+                        .HasColumnName("rsvp_deadline");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at");
+
+                    b.Property<DateOnly>("WeddingDate")
+                        .HasColumnType("date")
+                        .HasColumnName("wedding_date");
+
+                    b.HasKey("Id")
+                        .HasName("pk_weddings");
+
+                    b.ToTable("weddings", "rsvp");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Rsvp.Domain.Submissions.RsvpSubmission", b =>
+                {
+                    b.OwnsMany("Eternelle.Modules.Rsvp.Domain.Submissions.SubmissionCompanion", "Companions", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<bool>("Attending")
+                                .HasColumnType("boolean")
+                                .HasColumnName("attending");
+
+                            b1.Property<string>("DietaryNote")
+                                .HasMaxLength(300)
+                                .HasColumnType("character varying(300)")
+                                .HasColumnName("dietary_note");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(150)
+                                .HasColumnType("character varying(150)")
+                                .HasColumnName("name");
+
+                            b1.Property<Guid>("SubmissionId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("submission_id");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_submission_companions");
+
+                            b1.HasIndex("SubmissionId", "DisplayOrder")
+                                .HasDatabaseName("ix_submission_companions_submission_id_display_order");
+
+                            b1.ToTable("submission_companions", "rsvp");
+
+                            b1.WithOwner()
+                                .HasForeignKey("SubmissionId")
+                                .HasConstraintName("fk_submission_companions_submissions_submission_id");
+                        });
+
+                    b.Navigation("Companions");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}

From 5d01e2624bcdc27b129978deb3565110076df35a Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 17:57:39 +0800
Subject: [PATCH 087/155] Eternelle-191 Consume WeddingCreatedIntegrationEvent
 into rsvp.weddings mirror

---
 .../Guests/GuestAddedDomainEventHandler.cs    | 21 ++++++++++++++++
 .../RsvpSubmittedDomainEventHandler.cs        | 23 ++++++++++++++++++
 .../WeddingCreatedIntegrationEventHandler.cs  | 24 +++++++++++++++++++
 3 files changed, 68 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestAddedDomainEventHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/RsvpSubmittedDomainEventHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/WeddingCreatedIntegrationEventHandler.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestAddedDomainEventHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestAddedDomainEventHandler.cs
new file mode 100644
index 0000000..a7dff6e
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestAddedDomainEventHandler.cs
@@ -0,0 +1,21 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.IntegrationEvents.Guests;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests;
+
+internal sealed class GuestAddedDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<GuestAddedDomainEvent>
+{
+    public override Task Handle(GuestAddedDomainEvent domainEvent, CancellationToken cancellationToken = default) =>
+        eventBus.PublishAsync(
+            new GuestAddedIntegrationEvent(
+                domainEvent.Id,
+                domainEvent.OccurredOnUtc,
+                domainEvent.GuestId.Value,
+                domainEvent.WeddingId.Value,
+                domainEvent.LookupCode,
+                domainEvent.AllowedCompanions),
+            cancellationToken);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/RsvpSubmittedDomainEventHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/RsvpSubmittedDomainEventHandler.cs
new file mode 100644
index 0000000..062ee41
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/RsvpSubmittedDomainEventHandler.cs
@@ -0,0 +1,23 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.IntegrationEvents.Submissions;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions;
+
+internal sealed class RsvpSubmittedDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<RsvpSubmittedDomainEvent>
+{
+    public override Task Handle(RsvpSubmittedDomainEvent domainEvent, CancellationToken cancellationToken = default) =>
+        eventBus.PublishAsync(
+            new RsvpSubmittedIntegrationEvent(
+                domainEvent.Id,
+                domainEvent.OccurredOnUtc,
+                domainEvent.SubmissionId.Value,
+                domainEvent.WeddingId.Value,
+                domainEvent.GuestId.Value,
+                domainEvent.Attending,
+                domainEvent.CompanionCount,
+                domainEvent.SubmittedAtUtc),
+            cancellationToken);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/WeddingCreatedIntegrationEventHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/WeddingCreatedIntegrationEventHandler.cs
new file mode 100644
index 0000000..ef20b69
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/WeddingCreatedIntegrationEventHandler.cs
@@ -0,0 +1,24 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+using Eternelle.Modules.Weddings.IntegrationEvents.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Weddings;
+
+internal sealed class WeddingCreatedIntegrationEventHandler(
+    IWeddingProjection projection,
+    IDateTimeProvider dateTimeProvider)
+    : IntegrationEventHandler<WeddingCreatedIntegrationEvent>
+{
+    public override async Task Handle(
+        WeddingCreatedIntegrationEvent integrationEvent,
+        CancellationToken cancellationToken = default)
+    {
+        var wedding = Wedding.Create(
+            new WeddingId(integrationEvent.WeddingId),
+            integrationEvent.WeddingDate,
+            dateTimeProvider.UtcNow);
+
+        await projection.UpsertAsync(wedding, cancellationToken);
+    }
+}

From 21a0b58ea6c79c8d98fa29a21ceb990cb1043010 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:06:10 +0800
Subject: [PATCH 088/155] Eternelle-191 AddGuest command

---
 .../Guests/AddGuest/AddGuestCommand.cs        | 13 +++
 .../Guests/AddGuest/AddGuestCommandHandler.cs | 99 +++++++++++++++++++
 .../AddGuest/AddGuestCommandValidator.cs      | 19 ++++
 3 files changed, 131 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandValidator.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommand.cs
new file mode 100644
index 0000000..108a917
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommand.cs
@@ -0,0 +1,13 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.AddGuest;
+
+public sealed record AddGuestCommand(
+    Guid WeddingId,
+    string FirstName,
+    string LastName,
+    string? Email,
+    string? MobileNumber,
+    int AllowedCompanions,
+    int? TableNumber,
+    string? GroupName) : ICommand<Guid>;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs
new file mode 100644
index 0000000..71c0bd2
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs
@@ -0,0 +1,99 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Security;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.AddGuest;
+
+internal sealed class AddGuestCommandHandler(
+    IGuestRepository guestRepository,
+    IWeddingProjection weddings,
+    ITokenGenerator tokenGenerator,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider clock) : ICommandHandler<AddGuestCommand, Guid>
+{
+    public async Task<Result<Guid>> Handle(AddGuestCommand command, CancellationToken cancellationToken)
+    {
+        var weddingId = new WeddingId(command.WeddingId);
+        Wedding? wedding = await weddings.GetAsync(weddingId, cancellationToken);
+        if (wedding is null)
+        {
+            return Result.Failure<Guid>(GuestErrors.NotFound(GuestId.Empty));
+        }
+
+        Result<PersonFirstName> firstResult = PersonFirstName.Create(command.FirstName);
+        if (firstResult.IsFailure)
+        {
+            return Result.Failure<Guid>(firstResult.Error);
+        }
+
+        Result<PersonLastName> lastResult = PersonLastName.Create(command.LastName);
+        if (lastResult.IsFailure)
+        {
+            return Result.Failure<Guid>(lastResult.Error);
+        }
+
+        EmailAddress? email = null;
+        if (command.Email is not null)
+        {
+            Result<EmailAddress> emailResult = EmailAddress.Create(command.Email);
+            if (emailResult.IsFailure)
+            {
+                return Result.Failure<Guid>(emailResult.Error);
+            }
+            email = emailResult.Value;
+        }
+
+        PhoneNumber? phone = null;
+        if (command.MobileNumber is not null)
+        {
+            Result<PhoneNumber> phoneResult = PhoneNumber.Create(command.MobileNumber);
+            if (phoneResult.IsFailure)
+            {
+                return Result.Failure<Guid>(phoneResult.Error);
+            }
+            phone = phoneResult.Value;
+        }
+
+        GroupLabel? groupLabel = null;
+        if (command.GroupName is not null)
+        {
+            Result<GroupLabel> groupResult = GroupLabel.Create(command.GroupName);
+            if (groupResult.IsFailure)
+            {
+                return Result.Failure<Guid>(groupResult.Error);
+            }
+            groupLabel = groupResult.Value;
+        }
+
+        LookupCode lookupCode;
+        while (true)
+        {
+            string raw = tokenGenerator.GenerateLookupCode();
+            if (!await guestRepository.LookupCodeExistsAsync(raw, cancellationToken))
+            {
+                lookupCode = LookupCode.Create(raw).Value;
+                break;
+            }
+        }
+
+        Result<Guest> guestResult = Guest.Create(
+            weddingId, firstResult.Value, lastResult.Value, email, phone, lookupCode,
+            command.AllowedCompanions, command.TableNumber, groupLabel, clock.UtcNow);
+        if (guestResult.IsFailure)
+        {
+            return Result.Failure<Guid>(guestResult.Error);
+        }
+
+        guestRepository.Insert(guestResult.Value);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return guestResult.Value.Id.Value;
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandValidator.cs
new file mode 100644
index 0000000..1ef81c7
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandValidator.cs
@@ -0,0 +1,19 @@
+using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.AddGuest;
+
+internal sealed class AddGuestCommandValidator : AbstractValidator<AddGuestCommand>
+{
+    public AddGuestCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.FirstName).NotEmpty().MaximumLength(PersonFirstName.MaxLength);
+        RuleFor(c => c.LastName).NotEmpty().MaximumLength(PersonLastName.MaxLength);
+        RuleFor(c => c.Email).MaximumLength(EmailAddress.MaxLength).When(c => c.Email is not null);
+        RuleFor(c => c.MobileNumber).MaximumLength(PhoneNumber.MaxLength).When(c => c.MobileNumber is not null);
+        RuleFor(c => c.AllowedCompanions).GreaterThanOrEqualTo(0);
+        RuleFor(c => c.GroupName).MaximumLength(GroupLabel.MaxLength).When(c => c.GroupName is not null);
+    }
+}

From 0b06c1b6843bd9e4f4a82f00e2ff09bc6cd02105 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:07:28 +0800
Subject: [PATCH 089/155] Eternelle-191 UpdateGuestContact command

---
 .../UpdateGuestContactCommand.cs              | 11 ++++
 .../UpdateGuestContactCommandHandler.cs       | 66 +++++++++++++++++++
 .../UpdateGuestContactCommandValidator.cs     | 17 +++++
 3 files changed, 94 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommandValidator.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommand.cs
new file mode 100644
index 0000000..124a77f
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommand.cs
@@ -0,0 +1,11 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.UpdateGuestContact;
+
+public sealed record UpdateGuestContactCommand(
+    Guid WeddingId,
+    Guid GuestId,
+    string FirstName,
+    string LastName,
+    string? Email,
+    string? MobileNumber) : ICommand;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommandHandler.cs
new file mode 100644
index 0000000..42e21c7
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommandHandler.cs
@@ -0,0 +1,66 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.UpdateGuestContact;
+
+internal sealed class UpdateGuestContactCommandHandler(
+    IGuestRepository guestRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider clock) : ICommandHandler<UpdateGuestContactCommand>
+{
+    public async Task<Result> Handle(UpdateGuestContactCommand command, CancellationToken cancellationToken)
+    {
+        var guestId = new GuestId(command.GuestId);
+        Guest? guest = await guestRepository.GetByIdAsync(guestId, cancellationToken);
+        if (guest is null || guest.WeddingId != new WeddingId(command.WeddingId))
+        {
+            return Result.Failure(GuestErrors.NotFound(guestId));
+        }
+
+        Result<PersonFirstName> firstResult = PersonFirstName.Create(command.FirstName);
+        if (firstResult.IsFailure)
+        {
+            return Result.Failure(firstResult.Error);
+        }
+
+        Result<PersonLastName> lastResult = PersonLastName.Create(command.LastName);
+        if (lastResult.IsFailure)
+        {
+            return Result.Failure(lastResult.Error);
+        }
+
+        EmailAddress? email = null;
+        if (command.Email is not null)
+        {
+            Result<EmailAddress> emailResult = EmailAddress.Create(command.Email);
+            if (emailResult.IsFailure)
+            {
+                return Result.Failure(emailResult.Error);
+            }
+            email = emailResult.Value;
+        }
+
+        PhoneNumber? phone = null;
+        if (command.MobileNumber is not null)
+        {
+            Result<PhoneNumber> phoneResult = PhoneNumber.Create(command.MobileNumber);
+            if (phoneResult.IsFailure)
+            {
+                return Result.Failure(phoneResult.Error);
+            }
+            phone = phoneResult.Value;
+        }
+
+        guest.UpdateContact(firstResult.Value, lastResult.Value, email, phone, clock.UtcNow);
+
+        guestRepository.Update(guest);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommandValidator.cs
new file mode 100644
index 0000000..cd45f4b
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestContact/UpdateGuestContactCommandValidator.cs
@@ -0,0 +1,17 @@
+using Eternelle.Common.Domain.People;
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.UpdateGuestContact;
+
+internal sealed class UpdateGuestContactCommandValidator : AbstractValidator<UpdateGuestContactCommand>
+{
+    public UpdateGuestContactCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.GuestId).NotEmpty();
+        RuleFor(c => c.FirstName).NotEmpty().MaximumLength(PersonFirstName.MaxLength);
+        RuleFor(c => c.LastName).NotEmpty().MaximumLength(PersonLastName.MaxLength);
+        RuleFor(c => c.Email).MaximumLength(EmailAddress.MaxLength).When(c => c.Email is not null);
+        RuleFor(c => c.MobileNumber).MaximumLength(PhoneNumber.MaxLength).When(c => c.MobileNumber is not null);
+    }
+}

From edb7e61c452f14a54fa780cc26f7b9c11b97ed83 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:08:07 +0800
Subject: [PATCH 090/155] Eternelle-191 ChangeGuestAllowance command

---
 .../ChangeGuestAllowanceCommand.cs            |  8 +++++
 .../ChangeGuestAllowanceCommandHandler.cs     | 35 +++++++++++++++++++
 .../ChangeGuestAllowanceCommandValidator.cs   | 13 +++++++
 3 files changed, 56 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommandValidator.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommand.cs
new file mode 100644
index 0000000..9da80c4
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommand.cs
@@ -0,0 +1,8 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.ChangeGuestAllowance;
+
+public sealed record ChangeGuestAllowanceCommand(
+    Guid WeddingId,
+    Guid GuestId,
+    int AllowedCompanions) : ICommand;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommandHandler.cs
new file mode 100644
index 0000000..29753a1
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommandHandler.cs
@@ -0,0 +1,35 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.ChangeGuestAllowance;
+
+internal sealed class ChangeGuestAllowanceCommandHandler(
+    IGuestRepository guestRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider clock) : ICommandHandler<ChangeGuestAllowanceCommand>
+{
+    public async Task<Result> Handle(ChangeGuestAllowanceCommand command, CancellationToken cancellationToken)
+    {
+        var guestId = new GuestId(command.GuestId);
+        Guest? guest = await guestRepository.GetByIdAsync(guestId, cancellationToken);
+        if (guest is null || guest.WeddingId != new WeddingId(command.WeddingId))
+        {
+            return Result.Failure(GuestErrors.NotFound(guestId));
+        }
+
+        Result result = guest.ChangeAllowedCompanions(command.AllowedCompanions, clock.UtcNow);
+        if (result.IsFailure)
+        {
+            return result;
+        }
+
+        guestRepository.Update(guest);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommandValidator.cs
new file mode 100644
index 0000000..fc70bc0
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ChangeGuestAllowance/ChangeGuestAllowanceCommandValidator.cs
@@ -0,0 +1,13 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.ChangeGuestAllowance;
+
+internal sealed class ChangeGuestAllowanceCommandValidator : AbstractValidator<ChangeGuestAllowanceCommand>
+{
+    public ChangeGuestAllowanceCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.GuestId).NotEmpty();
+        RuleFor(c => c.AllowedCompanions).GreaterThanOrEqualTo(0);
+    }
+}

From 21989454130b3b0e58900e53e6f85be29a00f699 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:09:05 +0800
Subject: [PATCH 091/155] Eternelle-191 UpdateGuestPlacement command

---
 .../UpdateGuestPlacementCommand.cs            |  9 ++++
 .../UpdateGuestPlacementCommandHandler.cs     | 43 +++++++++++++++++++
 .../UpdateGuestPlacementCommandValidator.cs   | 14 ++++++
 3 files changed, 66 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommandValidator.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommand.cs
new file mode 100644
index 0000000..31319f1
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommand.cs
@@ -0,0 +1,9 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.UpdateGuestPlacement;
+
+public sealed record UpdateGuestPlacementCommand(
+    Guid WeddingId,
+    Guid GuestId,
+    int? TableNumber,
+    string? GroupName) : ICommand;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommandHandler.cs
new file mode 100644
index 0000000..3bb4209
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommandHandler.cs
@@ -0,0 +1,43 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.Text;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.UpdateGuestPlacement;
+
+internal sealed class UpdateGuestPlacementCommandHandler(
+    IGuestRepository guestRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider clock) : ICommandHandler<UpdateGuestPlacementCommand>
+{
+    public async Task<Result> Handle(UpdateGuestPlacementCommand command, CancellationToken cancellationToken)
+    {
+        var guestId = new GuestId(command.GuestId);
+        Guest? guest = await guestRepository.GetByIdAsync(guestId, cancellationToken);
+        if (guest is null || guest.WeddingId != new WeddingId(command.WeddingId))
+        {
+            return Result.Failure(GuestErrors.NotFound(guestId));
+        }
+
+        GroupLabel? groupLabel = null;
+        if (command.GroupName is not null)
+        {
+            Result<GroupLabel> groupResult = GroupLabel.Create(command.GroupName);
+            if (groupResult.IsFailure)
+            {
+                return Result.Failure(groupResult.Error);
+            }
+            groupLabel = groupResult.Value;
+        }
+
+        guest.UpdatePlacement(command.TableNumber, groupLabel, clock.UtcNow);
+
+        guestRepository.Update(guest);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommandValidator.cs
new file mode 100644
index 0000000..7ed8733
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UpdateGuestPlacement/UpdateGuestPlacementCommandValidator.cs
@@ -0,0 +1,14 @@
+using Eternelle.Common.Domain.Text;
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.UpdateGuestPlacement;
+
+internal sealed class UpdateGuestPlacementCommandValidator : AbstractValidator<UpdateGuestPlacementCommand>
+{
+    public UpdateGuestPlacementCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.GuestId).NotEmpty();
+        RuleFor(c => c.GroupName).MaximumLength(GroupLabel.MaxLength).When(c => c.GroupName is not null);
+    }
+}

From 7c94d8176ef467687ac5f4643e3c2e6a49b44fe5 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:16:35 +0800
Subject: [PATCH 092/155] Eternelle-191 LockGuest + UnlockGuest commands

---
 .../Guests/LockGuest/LockGuestCommand.cs      |  5 +++
 .../LockGuest/LockGuestCommandHandler.cs      | 35 +++++++++++++++++++
 .../LockGuest/LockGuestCommandValidator.cs    | 12 +++++++
 .../Guests/UnlockGuest/UnlockGuestCommand.cs  |  5 +++
 .../UnlockGuest/UnlockGuestCommandHandler.cs  | 35 +++++++++++++++++++
 .../UnlockGuestCommandValidator.cs            | 12 +++++++
 6 files changed, 104 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommandValidator.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommandValidator.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommand.cs
new file mode 100644
index 0000000..8be50a3
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.LockGuest;
+
+public sealed record LockGuestCommand(Guid WeddingId, Guid GuestId) : ICommand;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommandHandler.cs
new file mode 100644
index 0000000..8d876a2
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommandHandler.cs
@@ -0,0 +1,35 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.LockGuest;
+
+internal sealed class LockGuestCommandHandler(
+    IGuestRepository guestRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider clock) : ICommandHandler<LockGuestCommand>
+{
+    public async Task<Result> Handle(LockGuestCommand command, CancellationToken cancellationToken)
+    {
+        var guestId = new GuestId(command.GuestId);
+        Guest? guest = await guestRepository.GetByIdAsync(guestId, cancellationToken);
+        if (guest is null || guest.WeddingId != new WeddingId(command.WeddingId))
+        {
+            return Result.Failure(GuestErrors.NotFound(guestId));
+        }
+
+        Result lockResult = guest.Lock(clock.UtcNow);
+        if (lockResult.IsFailure)
+        {
+            return lockResult;
+        }
+
+        guestRepository.Update(guest);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommandValidator.cs
new file mode 100644
index 0000000..66c9db3
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/LockGuest/LockGuestCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.LockGuest;
+
+internal sealed class LockGuestCommandValidator : AbstractValidator<LockGuestCommand>
+{
+    public LockGuestCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.GuestId).NotEmpty();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommand.cs
new file mode 100644
index 0000000..c5a1e65
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.UnlockGuest;
+
+public sealed record UnlockGuestCommand(Guid WeddingId, Guid GuestId) : ICommand;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommandHandler.cs
new file mode 100644
index 0000000..4f3e284
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommandHandler.cs
@@ -0,0 +1,35 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.UnlockGuest;
+
+internal sealed class UnlockGuestCommandHandler(
+    IGuestRepository guestRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider clock) : ICommandHandler<UnlockGuestCommand>
+{
+    public async Task<Result> Handle(UnlockGuestCommand command, CancellationToken cancellationToken)
+    {
+        var guestId = new GuestId(command.GuestId);
+        Guest? guest = await guestRepository.GetByIdAsync(guestId, cancellationToken);
+        if (guest is null || guest.WeddingId != new WeddingId(command.WeddingId))
+        {
+            return Result.Failure(GuestErrors.NotFound(guestId));
+        }
+
+        Result unlockResult = guest.Unlock(clock.UtcNow);
+        if (unlockResult.IsFailure)
+        {
+            return unlockResult;
+        }
+
+        guestRepository.Update(guest);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommandValidator.cs
new file mode 100644
index 0000000..545fde9
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/UnlockGuest/UnlockGuestCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.UnlockGuest;
+
+internal sealed class UnlockGuestCommandValidator : AbstractValidator<UnlockGuestCommand>
+{
+    public UnlockGuestCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.GuestId).NotEmpty();
+    }
+}

From 85c8ec0a18df85d4fe5e162baf925ddbdb36cef6 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:17:33 +0800
Subject: [PATCH 093/155] Eternelle-191 RegenerateGuestToken command

---
 .../RegenerateGuestTokenCommand.cs            |  5 +++
 .../RegenerateGuestTokenCommandHandler.cs     | 45 +++++++++++++++++++
 .../RegenerateGuestTokenCommandValidator.cs   | 12 +++++
 3 files changed, 62 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandValidator.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommand.cs
new file mode 100644
index 0000000..3c69721
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.RegenerateGuestToken;
+
+public sealed record RegenerateGuestTokenCommand(Guid WeddingId, Guid GuestId) : ICommand<string>;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs
new file mode 100644
index 0000000..08de3c7
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs
@@ -0,0 +1,45 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Security;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.RegenerateGuestToken;
+
+internal sealed class RegenerateGuestTokenCommandHandler(
+    IGuestRepository guestRepository,
+    ITokenGenerator tokenGenerator,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider clock) : ICommandHandler<RegenerateGuestTokenCommand, string>
+{
+    public async Task<Result<string>> Handle(RegenerateGuestTokenCommand command, CancellationToken cancellationToken)
+    {
+        var guestId = new GuestId(command.GuestId);
+        Guest? guest = await guestRepository.GetByIdAsync(guestId, cancellationToken);
+        if (guest is null || guest.WeddingId != new WeddingId(command.WeddingId))
+        {
+            return Result.Failure<string>(GuestErrors.NotFound(guestId));
+        }
+
+        LookupCode newCode;
+        while (true)
+        {
+            string raw = tokenGenerator.GenerateLookupCode();
+            if (!await guestRepository.LookupCodeExistsAsync(raw, cancellationToken))
+            {
+                newCode = LookupCode.Create(raw).Value;
+                break;
+            }
+        }
+
+        guest.RegenerateLookupCode(newCode, clock.UtcNow);
+
+        guestRepository.Update(guest);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success(newCode.Value);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandValidator.cs
new file mode 100644
index 0000000..8b751a1
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.RegenerateGuestToken;
+
+internal sealed class RegenerateGuestTokenCommandValidator : AbstractValidator<RegenerateGuestTokenCommand>
+{
+    public RegenerateGuestTokenCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.GuestId).NotEmpty();
+    }
+}

From f9e21bb39ee1eaea6d0559010ee6fa8d70e262ad Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:19:10 +0800
Subject: [PATCH 094/155] Eternelle-191 RemoveGuest command

---
 .../Guests/RemoveGuest/RemoveGuestCommand.cs  |  5 +++
 .../RemoveGuest/RemoveGuestCommandHandler.cs  | 33 +++++++++++++++++++
 .../RemoveGuestCommandValidator.cs            | 12 +++++++
 3 files changed, 50 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandValidator.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommand.cs
new file mode 100644
index 0000000..6d2dab6
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.RemoveGuest;
+
+public sealed record RemoveGuestCommand(Guid WeddingId, Guid GuestId) : ICommand;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandHandler.cs
new file mode 100644
index 0000000..5cb20b2
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandHandler.cs
@@ -0,0 +1,33 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.RemoveGuest;
+
+internal sealed class RemoveGuestCommandHandler(
+    IGuestRepository guestRepository,
+    IRsvpSubmissionRepository submissionRepository,
+    IUnitOfWork unitOfWork) : ICommandHandler<RemoveGuestCommand>
+{
+    public async Task<Result> Handle(RemoveGuestCommand command, CancellationToken cancellationToken)
+    {
+        var guestId = new GuestId(command.GuestId);
+        Guest? guest = await guestRepository.GetByIdAsync(guestId, cancellationToken);
+        if (guest is null || guest.WeddingId != new WeddingId(command.WeddingId))
+        {
+            return Result.Failure(GuestErrors.NotFound(guestId));
+        }
+
+        await submissionRepository.NullifyGuestIdAsync(new GuestId(command.GuestId), cancellationToken);
+
+        guest.MarkRemoved();
+
+        guestRepository.Remove(guest);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandValidator.cs
new file mode 100644
index 0000000..867ec87
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.RemoveGuest;
+
+internal sealed class RemoveGuestCommandValidator : AbstractValidator<RemoveGuestCommand>
+{
+    public RemoveGuestCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.GuestId).NotEmpty();
+    }
+}

From 5e76e1b5ed1d021e8115ef43cc786cf02316a117 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:19:33 +0800
Subject: [PATCH 095/155] Eternelle-191 GetGuest query

---
 .../Guests/GetGuest/GetGuestQuery.cs          |  5 ++
 .../Guests/GetGuest/GetGuestQueryHandler.cs   | 49 +++++++++++++++++++
 .../Guests/GetGuest/GuestResponse.cs          | 24 +++++++++
 3 files changed, 78 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQuery.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GuestResponse.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQuery.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQuery.cs
new file mode 100644
index 0000000..607428e
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQuery.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.GetGuest;
+
+public sealed record GetGuestQuery(Guid WeddingId, Guid GuestId) : IQuery<GuestResponse>;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs
new file mode 100644
index 0000000..a0c9e83
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs
@@ -0,0 +1,49 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.GetGuest;
+
+internal sealed class GetGuestQueryHandler(
+    IGuestRepository guestRepository,
+    IRsvpSubmissionRepository submissionRepository) : IQueryHandler<GetGuestQuery, GuestResponse>
+{
+    public async Task<Result<GuestResponse>> Handle(GetGuestQuery query, CancellationToken cancellationToken)
+    {
+        var guestId = new GuestId(query.GuestId);
+        Guest? guest = await guestRepository.GetByIdAsync(guestId, cancellationToken);
+        if (guest is null || guest.WeddingId != new WeddingId(query.WeddingId))
+        {
+            return Result.Failure<GuestResponse>(GuestErrors.NotFound(guestId));
+        }
+
+        RsvpSubmission? latest = await submissionRepository.GetLatestByGuestAsync(new GuestId(query.GuestId), cancellationToken);
+
+        var response = new GuestResponse(
+            guest.Id.Value,
+            guest.WeddingId.Value,
+            guest.FirstName.Value,
+            guest.LastName.Value,
+            guest.Email?.Value,
+            guest.MobileNumber?.Value,
+            guest.LookupCode.Value,
+            guest.AllowedCompanions,
+            guest.TableNumber,
+            guest.GroupName?.Value,
+            guest.IsLocked,
+            guest.LockedAtUtc,
+            guest.CreatedAtUtc,
+            guest.UpdatedAtUtc,
+            latest is null
+                ? null
+                : new SubmissionSummaryResponse(
+                    latest.Id.Value,
+                    latest.Attending,
+                    latest.Companions.Count,
+                    latest.SubmittedAtUtc));
+
+        return Result.Success(response);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GuestResponse.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GuestResponse.cs
new file mode 100644
index 0000000..baf81a2
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GuestResponse.cs
@@ -0,0 +1,24 @@
+namespace Eternelle.Modules.Rsvp.Application.Guests.GetGuest;
+
+public sealed record GuestResponse(
+    Guid Id,
+    Guid WeddingId,
+    string FirstName,
+    string LastName,
+    string? Email,
+    string? MobileNumber,
+    string LookupCode,
+    int AllowedCompanions,
+    int? TableNumber,
+    string? GroupName,
+    bool IsLocked,
+    DateTime? LockedAtUtc,
+    DateTime CreatedAtUtc,
+    DateTime UpdatedAtUtc,
+    SubmissionSummaryResponse? LatestSubmission);
+
+public sealed record SubmissionSummaryResponse(
+    Guid SubmissionId,
+    bool Attending,
+    int CompanionCount,
+    DateTime SubmittedAtUtc);

From 47a283280a37d15d1cd985caa3872ed0a8758cb7 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:20:02 +0800
Subject: [PATCH 096/155] Eternelle-191 ListGuests query

---
 .../Guests/ListGuests/GuestSummaryResponse.cs | 13 ++++
 .../Guests/ListGuests/ListGuestsQuery.cs      | 11 +++
 .../ListGuests/ListGuestsQueryHandler.cs      | 68 +++++++++++++++++++
 3 files changed, 92 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/GuestSummaryResponse.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQuery.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/GuestSummaryResponse.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/GuestSummaryResponse.cs
new file mode 100644
index 0000000..440d4da
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/GuestSummaryResponse.cs
@@ -0,0 +1,13 @@
+namespace Eternelle.Modules.Rsvp.Application.Guests.ListGuests;
+
+public sealed record GuestSummaryResponse(
+    Guid Id,
+    string FirstName,
+    string LastName,
+    int AllowedCompanions,
+    string? GroupName,
+    int? TableNumber,
+    bool IsLocked,
+    bool? LatestAttending,
+    int LatestCompanionCount,
+    string LookupCode);
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQuery.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQuery.cs
new file mode 100644
index 0000000..bb55dcb
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQuery.cs
@@ -0,0 +1,11 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.ListGuests;
+
+public sealed record ListGuestsQuery(
+    Guid WeddingId,
+    string? GroupName,
+    string? AttendingState,
+    bool? IsLocked,
+    int Skip = 0,
+    int Take = 50) : IQuery<IReadOnlyList<GuestSummaryResponse>>;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs
new file mode 100644
index 0000000..e027daa
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs
@@ -0,0 +1,68 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.ListGuests;
+
+internal sealed class ListGuestsQueryHandler(
+    IGuestRepository guestRepository,
+    IRsvpSubmissionRepository submissionRepository) : IQueryHandler<ListGuestsQuery, IReadOnlyList<GuestSummaryResponse>>
+{
+    public async Task<Result<IReadOnlyList<GuestSummaryResponse>>> Handle(ListGuestsQuery query, CancellationToken cancellationToken)
+    {
+        IReadOnlyList<Guest> guests = await guestRepository.ListByWeddingAsync(new WeddingId(query.WeddingId), cancellationToken);
+        IReadOnlyList<RsvpSubmission> submissions = await submissionRepository.ListByWeddingAsync(new WeddingId(query.WeddingId), cancellationToken);
+
+        Dictionary<GuestId, RsvpSubmission> latestByGuest = submissions
+            .Where(s => s.GuestId is not null)
+            .GroupBy(s => s.GuestId!.Value)
+            .ToDictionary(g => g.Key, g => g.OrderByDescending(s => s.SubmittedAtUtc).First());
+
+        IEnumerable<Guest> filtered = guests;
+
+        if (query.GroupName is not null)
+        {
+            filtered = filtered.Where(g => g.GroupName?.Value == query.GroupName);
+        }
+
+        if (query.IsLocked is not null)
+        {
+            filtered = filtered.Where(g => g.IsLocked == query.IsLocked);
+        }
+
+        if (query.AttendingState is not null)
+        {
+            filtered = query.AttendingState switch
+            {
+                "attending" => filtered.Where(g => latestByGuest.TryGetValue(g.Id, out RsvpSubmission? s) && s.Attending),
+                "declined" => filtered.Where(g => latestByGuest.TryGetValue(g.Id, out RsvpSubmission? s) && !s.Attending),
+                "no_response" => filtered.Where(g => !latestByGuest.ContainsKey(g.Id)),
+                _ => filtered
+            };
+        }
+
+        IReadOnlyList<GuestSummaryResponse> result = filtered
+            .Skip(query.Skip)
+            .Take(query.Take)
+            .Select(g =>
+            {
+                latestByGuest.TryGetValue(g.Id, out RsvpSubmission? latest);
+                return new GuestSummaryResponse(
+                    g.Id.Value,
+                    g.FirstName.Value,
+                    g.LastName.Value,
+                    g.AllowedCompanions,
+                    g.GroupName?.Value,
+                    g.TableNumber,
+                    g.IsLocked,
+                    latest is null ? null : latest.Attending,
+                    latest?.Companions.Count ?? 0,
+                    g.LookupCode.Value);
+            })
+            .ToList();
+
+        return Result.Success(result);
+    }
+}

From f850889d440fefec69662ed3d281f91902243d61 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:21:07 +0800
Subject: [PATCH 097/155] Eternelle-191 ListGuests style fixes (IDE0007,
 IDE0031)

---
 .../Guests/ListGuests/ListGuestsQueryHandler.cs               | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs
index e027daa..7bc04c4 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs
@@ -15,7 +15,7 @@ public async Task<Result<IReadOnlyList<GuestSummaryResponse>>> Handle(ListGuests
         IReadOnlyList<Guest> guests = await guestRepository.ListByWeddingAsync(new WeddingId(query.WeddingId), cancellationToken);
         IReadOnlyList<RsvpSubmission> submissions = await submissionRepository.ListByWeddingAsync(new WeddingId(query.WeddingId), cancellationToken);
 
-        Dictionary<GuestId, RsvpSubmission> latestByGuest = submissions
+        var latestByGuest = submissions
             .Where(s => s.GuestId is not null)
             .GroupBy(s => s.GuestId!.Value)
             .ToDictionary(g => g.Key, g => g.OrderByDescending(s => s.SubmittedAtUtc).First());
@@ -57,7 +57,7 @@ public async Task<Result<IReadOnlyList<GuestSummaryResponse>>> Handle(ListGuests
                     g.GroupName?.Value,
                     g.TableNumber,
                     g.IsLocked,
-                    latest is null ? null : latest.Attending,
+                    latest?.Attending,
                     latest?.Companions.Count ?? 0,
                     g.LookupCode.Value);
             })

From 5b87de79b9eabcacf76e5af91af195544a9c07d2 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:44:16 +0800
Subject: [PATCH 098/155] Eternelle-191 SetRsvpDeadline + ClearRsvpDeadline
 commands

---
 .../ClearRsvpDeadlineCommand.cs               |  5 ++++
 .../ClearRsvpDeadlineCommandHandler.cs        | 25 +++++++++++++++++++
 .../ClearRsvpDeadlineCommandValidator.cs      | 11 ++++++++
 .../SetRsvpDeadline/SetRsvpDeadlineCommand.cs |  5 ++++
 .../SetRsvpDeadlineCommandHandler.cs          | 25 +++++++++++++++++++
 .../SetRsvpDeadlineCommandValidator.cs        | 14 +++++++++++
 6 files changed, 85 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommandValidator.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandValidator.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommand.cs
new file mode 100644
index 0000000..5da1728
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Weddings.ClearRsvpDeadline;
+
+public sealed record ClearRsvpDeadlineCommand(Guid WeddingId) : ICommand;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommandHandler.cs
new file mode 100644
index 0000000..6cd190c
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommandHandler.cs
@@ -0,0 +1,25 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Weddings.ClearRsvpDeadline;
+
+internal sealed class ClearRsvpDeadlineCommandHandler(
+    IWeddingProjection projection,
+    IDateTimeProvider clock) : ICommandHandler<ClearRsvpDeadlineCommand>
+{
+    public async Task<Result> Handle(ClearRsvpDeadlineCommand command, CancellationToken cancellationToken)
+    {
+        Wedding? wedding = await projection.GetAsync(new WeddingId(command.WeddingId), cancellationToken);
+        if (wedding is null)
+        {
+            return Result.Failure(Error.NotFound("Rsvp.Wedding.NotFound", "Wedding was not found."));
+        }
+
+        wedding.SetRsvpDeadline(null, clock.UtcNow);
+        await projection.UpdateAsync(wedding, cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommandValidator.cs
new file mode 100644
index 0000000..9a8ab3e
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/ClearRsvpDeadline/ClearRsvpDeadlineCommandValidator.cs
@@ -0,0 +1,11 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Weddings.ClearRsvpDeadline;
+
+internal sealed class ClearRsvpDeadlineCommandValidator : AbstractValidator<ClearRsvpDeadlineCommand>
+{
+    public ClearRsvpDeadlineCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommand.cs
new file mode 100644
index 0000000..98df34c
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Weddings.SetRsvpDeadline;
+
+public sealed record SetRsvpDeadlineCommand(Guid WeddingId, DateOnly Deadline) : ICommand;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandHandler.cs
new file mode 100644
index 0000000..c3a7cb3
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandHandler.cs
@@ -0,0 +1,25 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Weddings.SetRsvpDeadline;
+
+internal sealed class SetRsvpDeadlineCommandHandler(
+    IWeddingProjection projection,
+    IDateTimeProvider clock) : ICommandHandler<SetRsvpDeadlineCommand>
+{
+    public async Task<Result> Handle(SetRsvpDeadlineCommand command, CancellationToken cancellationToken)
+    {
+        Wedding? wedding = await projection.GetAsync(new WeddingId(command.WeddingId), cancellationToken);
+        if (wedding is null)
+        {
+            return Result.Failure(Error.NotFound("Rsvp.Wedding.NotFound", "Wedding was not found."));
+        }
+
+        wedding.SetRsvpDeadline(command.Deadline, clock.UtcNow);
+        await projection.UpdateAsync(wedding, cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandValidator.cs
new file mode 100644
index 0000000..c7bff7b
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandValidator.cs
@@ -0,0 +1,14 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Weddings.SetRsvpDeadline;
+
+internal sealed class SetRsvpDeadlineCommandValidator : AbstractValidator<SetRsvpDeadlineCommand>
+{
+    public SetRsvpDeadlineCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.Deadline)
+            .Must(d => d >= DateOnly.FromDateTime(DateTime.UtcNow.Date))
+            .WithMessage("Deadline must be today or in the future.");
+    }
+}

From ea70a1206e683b27915cb27713f345f223112743 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:44:32 +0800
Subject: [PATCH 099/155] Eternelle-191 GetInvitation public query

---
 .../GetInvitation/GetInvitationQuery.cs       |  5 ++
 .../GetInvitationQueryHandler.cs              | 73 +++++++++++++++++++
 .../GetInvitation/InvitationResponse.cs       | 21 ++++++
 3 files changed, 99 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQuery.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/InvitationResponse.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQuery.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQuery.cs
new file mode 100644
index 0000000..89b78bd
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQuery.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Public.GetInvitation;
+
+public sealed record GetInvitationQuery(string LookupCode) : IQuery<InvitationResponse>;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs
new file mode 100644
index 0000000..82a7ac0
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs
@@ -0,0 +1,73 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Public.GetInvitation;
+
+internal sealed class GetInvitationQueryHandler(
+    IGuestRepository guestRepository,
+    IWeddingProjection weddingProjection,
+    IRsvpSubmissionRepository submissionRepository,
+    IDateTimeProvider clock) : IQueryHandler<GetInvitationQuery, InvitationResponse>
+{
+    public async Task<Result<InvitationResponse>> Handle(GetInvitationQuery query, CancellationToken cancellationToken)
+    {
+        Result<LookupCode> codeResult = LookupCode.Create(query.LookupCode);
+        if (codeResult.IsFailure)
+        {
+            return Result.Failure<InvitationResponse>(
+                Error.NotFound("Rsvp.Invitation.NotFound", "Not found."));
+        }
+
+        Guest? guest = await guestRepository.GetByLookupCodeAsync(codeResult.Value.Value, cancellationToken);
+        if (guest is null)
+        {
+            return Result.Failure<InvitationResponse>(
+                Error.NotFound("Rsvp.Invitation.NotFound", "Not found."));
+        }
+
+        Wedding? wedding = await weddingProjection.GetAsync(guest.WeddingId, cancellationToken);
+        if (wedding is null)
+        {
+            return Result.Failure<InvitationResponse>(
+                Error.NotFound("Rsvp.Invitation.NotFound", "Not found."));
+        }
+
+        RsvpSubmission? latest = await submissionRepository.GetLatestByGuestAsync(guest.Id, cancellationToken);
+
+        bool isAccepting = wedding.IsAcceptingSubmissions(DateOnly.FromDateTime(clock.UtcNow.Date)) && !guest.IsLocked;
+
+        SubmissionDetailResponse? currentSubmission = null;
+        if (latest is not null)
+        {
+            var companions = latest.Companions
+                .OrderBy(c => c.DisplayOrder)
+                .Select(c => new CompanionResponse(c.Name.Value, c.Attending, c.DietaryNote?.Value))
+                .ToList();
+
+            currentSubmission = new SubmissionDetailResponse(
+                latest.Id.Value,
+                latest.Attending,
+                latest.DietaryNote?.Value,
+                latest.Message?.Value,
+                companions,
+                latest.SubmittedAtUtc);
+        }
+
+        var response = new InvitationResponse(
+            guest.FirstName.Value,
+            guest.LastName.Value,
+            guest.AllowedCompanions,
+            wedding.WeddingDate,
+            wedding.RsvpDeadline,
+            guest.IsLocked,
+            isAccepting,
+            currentSubmission);
+
+        return Result.Success(response);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/InvitationResponse.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/InvitationResponse.cs
new file mode 100644
index 0000000..8a5de5a
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/InvitationResponse.cs
@@ -0,0 +1,21 @@
+namespace Eternelle.Modules.Rsvp.Application.Public.GetInvitation;
+
+public sealed record InvitationResponse(
+    string FirstName,
+    string LastName,
+    int AllowedCompanions,
+    DateOnly WeddingDate,
+    DateOnly? RsvpDeadline,
+    bool IsLocked,
+    bool IsAcceptingSubmissions,
+    SubmissionDetailResponse? CurrentSubmission);
+
+public sealed record SubmissionDetailResponse(
+    Guid SubmissionId,
+    bool Attending,
+    string? DietaryNote,
+    string? Message,
+    IReadOnlyList<CompanionResponse> Companions,
+    DateTime SubmittedAtUtc);
+
+public sealed record CompanionResponse(string Name, bool Attending, string? DietaryNote);

From dd25f2ef61f88027a6cfc5bb028f219251c3ffdf Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:44:50 +0800
Subject: [PATCH 100/155] Eternelle-191 SubmitRsvp public command

---
 .../Public/SubmitRsvp/SubmitRsvpCommand.cs    |  13 ++
 .../SubmitRsvp/SubmitRsvpCommandHandler.cs    | 126 ++++++++++++++++++
 .../SubmitRsvp/SubmitRsvpCommandValidator.cs  |  22 +++
 3 files changed, 161 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandValidator.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommand.cs
new file mode 100644
index 0000000..33c5cd6
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommand.cs
@@ -0,0 +1,13 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Public.SubmitRsvp;
+
+public sealed record CompanionInput(string Name, bool Attending, string? DietaryNote);
+
+public sealed record SubmitRsvpCommand(
+    string LookupCode,
+    bool Attending,
+    string? DietaryNote,
+    string? Message,
+    IReadOnlyList<CompanionInput> Companions,
+    string? IpAddress) : ICommand<Guid>;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandHandler.cs
new file mode 100644
index 0000000..79ddf0b
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandHandler.cs
@@ -0,0 +1,126 @@
+using System.Net;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Public.SubmitRsvp;
+
+internal sealed class SubmitRsvpCommandHandler(
+    IGuestRepository guestRepository,
+    IWeddingProjection weddingProjection,
+    IRsvpSubmissionRepository submissionRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider clock) : ICommandHandler<SubmitRsvpCommand, Guid>
+{
+    public async Task<Result<Guid>> Handle(SubmitRsvpCommand command, CancellationToken cancellationToken)
+    {
+        Result<LookupCode> codeResult = LookupCode.Create(command.LookupCode);
+        if (codeResult.IsFailure)
+        {
+            return Result.Failure<Guid>(
+                Error.NotFound("Rsvp.Invitation.NotFound", "Not found."));
+        }
+
+        Guest? guest = await guestRepository.GetByLookupCodeAsync(codeResult.Value.Value, cancellationToken);
+        if (guest is null)
+        {
+            return Result.Failure<Guid>(
+                Error.NotFound("Rsvp.Invitation.NotFound", "Not found."));
+        }
+
+        Wedding? wedding = await weddingProjection.GetAsync(guest.WeddingId, cancellationToken);
+        if (wedding is null)
+        {
+            return Result.Failure<Guid>(
+                Error.NotFound("Rsvp.Invitation.NotFound", "Not found."));
+        }
+
+        var today = DateOnly.FromDateTime(clock.UtcNow.Date);
+        if (!wedding.IsAcceptingSubmissions(today) || guest.IsLocked)
+        {
+            return Result.Failure<Guid>(RsvpSubmissionErrors.WeddingClosed);
+        }
+
+        // Name snapshot from trusted DB values — skip failure check
+        PersonName nameSnapshot = PersonName.Create(
+            $"{guest.FirstName.Value} {guest.LastName.Value}").Value;
+
+        DietaryNote? dietary = null;
+        if (command.DietaryNote is not null)
+        {
+            Result<DietaryNote> dietaryResult = DietaryNote.Create(command.DietaryNote);
+            if (dietaryResult.IsFailure)
+            {
+                return Result.Failure<Guid>(dietaryResult.Error);
+            }
+            dietary = dietaryResult.Value;
+        }
+
+        RichDescription? message = null;
+        if (command.Message is not null)
+        {
+            Result<RichDescription> messageResult = RichDescription.Create(command.Message);
+            if (messageResult.IsFailure)
+            {
+                return Result.Failure<Guid>(messageResult.Error);
+            }
+            message = messageResult.Value;
+        }
+
+        var companionList = new List<(PersonName name, bool attending, DietaryNote? dietary)>();
+        foreach (CompanionInput c in command.Companions)
+        {
+            Result<PersonName> nameResult = PersonName.Create(c.Name);
+            if (nameResult.IsFailure)
+            {
+                return Result.Failure<Guid>(nameResult.Error);
+            }
+
+            DietaryNote? companionDietary = null;
+            if (c.DietaryNote is not null)
+            {
+                Result<DietaryNote> companionDietaryResult = DietaryNote.Create(c.DietaryNote);
+                if (companionDietaryResult.IsFailure)
+                {
+                    return Result.Failure<Guid>(companionDietaryResult.Error);
+                }
+                companionDietary = companionDietaryResult.Value;
+            }
+
+            companionList.Add((nameResult.Value, c.Attending, companionDietary));
+        }
+
+        IPAddress? ipAddress = IPAddress.TryParse(command.IpAddress, out IPAddress? parsed) ? parsed : null;
+
+        Result<RsvpSubmission> result = RsvpSubmission.Create(
+            guest,
+            nameSnapshot,
+            guest.Email,
+            guest.MobileNumber,
+            command.Attending,
+            dietary,
+            message,
+            companionList,
+            ipAddress,
+            RsvpSource.GuestSelf,
+            internalNote: null,
+            clock.UtcNow);
+
+        if (result.IsFailure)
+        {
+            return Result.Failure<Guid>(result.Error);
+        }
+
+        submissionRepository.Insert(result.Value);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success(result.Value.ConfirmationId);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandValidator.cs
new file mode 100644
index 0000000..9013cc6
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandValidator.cs
@@ -0,0 +1,22 @@
+using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Public.SubmitRsvp;
+
+internal sealed class SubmitRsvpCommandValidator : AbstractValidator<SubmitRsvpCommand>
+{
+    public SubmitRsvpCommandValidator()
+    {
+        RuleFor(c => c.LookupCode).NotEmpty();
+        RuleFor(c => c.Companions).NotNull();
+        RuleForEach(c => c.Companions).ChildRules(r =>
+        {
+            r.RuleFor(x => x.Name).NotEmpty().MaximumLength(PersonName.MaxLength);
+            r.RuleFor(x => x.DietaryNote).MaximumLength(DietaryNote.MaxLength).When(x => x.DietaryNote is not null);
+        });
+        RuleFor(c => c.DietaryNote).MaximumLength(DietaryNote.MaxLength).When(c => c.DietaryNote is not null);
+        RuleFor(c => c.Message).MaximumLength(RichDescription.MaxLength).When(c => c.Message is not null);
+    }
+}

From 0b13a444fbe962a54684c92b910c302dd49e6419 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:45:10 +0800
Subject: [PATCH 101/155] Eternelle-191 SubmitOnBehalf command

---
 .../SubmitOnBehalf/SubmitOnBehalfCommand.cs   |  14 +++
 .../SubmitOnBehalfCommandHandler.cs           | 116 ++++++++++++++++++
 .../SubmitOnBehalfCommandValidator.cs         |  24 ++++
 3 files changed, 154 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommand.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandValidator.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommand.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommand.cs
new file mode 100644
index 0000000..96a9443
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommand.cs
@@ -0,0 +1,14 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions.SubmitOnBehalf;
+
+public sealed record CompanionInput(string Name, bool Attending, string? DietaryNote);
+
+public sealed record SubmitOnBehalfCommand(
+    Guid WeddingId,
+    Guid GuestId,
+    bool Attending,
+    string? DietaryNote,
+    string? Message,
+    IReadOnlyList<CompanionInput> Companions,
+    string InternalNote) : ICommand<Guid>;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandHandler.cs
new file mode 100644
index 0000000..525cab4
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandHandler.cs
@@ -0,0 +1,116 @@
+using System.Net;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
+using Eternelle.Modules.Rsvp.Application.Abstractions.Data;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions.SubmitOnBehalf;
+
+internal sealed class SubmitOnBehalfCommandHandler(
+    IGuestRepository guestRepository,
+    IWeddingProjection weddingProjection,
+    IRsvpSubmissionRepository submissionRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider clock) : ICommandHandler<SubmitOnBehalfCommand, Guid>
+{
+    public async Task<Result<Guid>> Handle(SubmitOnBehalfCommand command, CancellationToken cancellationToken)
+    {
+        var guestId = new GuestId(command.GuestId);
+        Guest? guest = await guestRepository.GetByIdAsync(guestId, cancellationToken);
+        if (guest is null || guest.WeddingId != new WeddingId(command.WeddingId))
+        {
+            return Result.Failure<Guid>(GuestErrors.NotFound(guestId));
+        }
+
+        Wedding? wedding = await weddingProjection.GetAsync(guest.WeddingId, cancellationToken);
+        if (wedding is null)
+        {
+            return Result.Failure<Guid>(Error.NotFound("Rsvp.Wedding.NotFound", "Wedding was not found."));
+        }
+
+        // Name snapshot from trusted DB values — skip failure check
+        PersonName nameSnapshot = PersonName.Create(
+            $"{guest.FirstName.Value} {guest.LastName.Value}").Value;
+
+        DietaryNote? dietary = null;
+        if (command.DietaryNote is not null)
+        {
+            Result<DietaryNote> dietaryResult = DietaryNote.Create(command.DietaryNote);
+            if (dietaryResult.IsFailure)
+            {
+                return Result.Failure<Guid>(dietaryResult.Error);
+            }
+            dietary = dietaryResult.Value;
+        }
+
+        RichDescription? message = null;
+        if (command.Message is not null)
+        {
+            Result<RichDescription> messageResult = RichDescription.Create(command.Message);
+            if (messageResult.IsFailure)
+            {
+                return Result.Failure<Guid>(messageResult.Error);
+            }
+            message = messageResult.Value;
+        }
+
+        var companionList = new List<(PersonName name, bool attending, DietaryNote? dietary)>();
+        foreach (CompanionInput c in command.Companions)
+        {
+            Result<PersonName> nameResult = PersonName.Create(c.Name);
+            if (nameResult.IsFailure)
+            {
+                return Result.Failure<Guid>(nameResult.Error);
+            }
+
+            DietaryNote? companionDietary = null;
+            if (c.DietaryNote is not null)
+            {
+                Result<DietaryNote> companionDietaryResult = DietaryNote.Create(c.DietaryNote);
+                if (companionDietaryResult.IsFailure)
+                {
+                    return Result.Failure<Guid>(companionDietaryResult.Error);
+                }
+                companionDietary = companionDietaryResult.Value;
+            }
+
+            companionList.Add((nameResult.Value, c.Attending, companionDietary));
+        }
+
+        Result<InternalNote> noteResult = InternalNote.Create(command.InternalNote);
+        if (noteResult.IsFailure)
+        {
+            return Result.Failure<Guid>(noteResult.Error);
+        }
+
+        Result<RsvpSubmission> result = RsvpSubmission.Create(
+            guest,
+            nameSnapshot,
+            guest.Email,
+            guest.MobileNumber,
+            command.Attending,
+            dietary,
+            message,
+            companionList,
+            ipAddress: null,
+            RsvpSource.CoupleOnBehalf,
+            noteResult.Value,
+            clock.UtcNow);
+
+        if (result.IsFailure)
+        {
+            return Result.Failure<Guid>(result.Error);
+        }
+
+        submissionRepository.Insert(result.Value);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success(result.Value.ConfirmationId);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandValidator.cs
new file mode 100644
index 0000000..5b43272
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandValidator.cs
@@ -0,0 +1,24 @@
+using Eternelle.Common.Domain.People;
+using Eternelle.Common.Domain.Text;
+using Eternelle.Modules.Rsvp.Domain.Shared;
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions.SubmitOnBehalf;
+
+internal sealed class SubmitOnBehalfCommandValidator : AbstractValidator<SubmitOnBehalfCommand>
+{
+    public SubmitOnBehalfCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.GuestId).NotEmpty();
+        RuleFor(c => c.InternalNote).NotEmpty().MaximumLength(InternalNote.MaxLength);
+        RuleFor(c => c.Companions).NotNull();
+        RuleForEach(c => c.Companions).ChildRules(r =>
+        {
+            r.RuleFor(x => x.Name).NotEmpty().MaximumLength(PersonName.MaxLength);
+            r.RuleFor(x => x.DietaryNote).MaximumLength(DietaryNote.MaxLength).When(x => x.DietaryNote is not null);
+        });
+        RuleFor(c => c.DietaryNote).MaximumLength(DietaryNote.MaxLength).When(c => c.DietaryNote is not null);
+        RuleFor(c => c.Message).MaximumLength(RichDescription.MaxLength).When(c => c.Message is not null);
+    }
+}

From 8fce1f9b7bea5002178550732164726ef02f91e9 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:45:29 +0800
Subject: [PATCH 102/155] Eternelle-191 Submission queries (GetSubmission,
 ListSubmissions, GetHeadcount)

---
 .../GetHeadcount/GetHeadcountQuery.cs         |  5 ++
 .../GetHeadcount/GetHeadcountQueryHandler.cs  | 53 +++++++++++++++++++
 .../GetHeadcount/HeadcountResponse.cs         | 10 ++++
 .../GetSubmission/GetSubmissionQuery.cs       |  5 ++
 .../GetSubmissionQueryHandler.cs              | 49 +++++++++++++++++
 .../GetSubmission/SubmissionResponse.cs       | 27 ++++++++++
 .../ListSubmissions/ListSubmissionsQuery.cs   | 11 ++++
 .../ListSubmissionsQueryHandler.cs            | 44 +++++++++++++++
 .../SubmissionSummaryResponse.cs              | 12 +++++
 9 files changed, 216 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQuery.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/HeadcountResponse.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQuery.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/SubmissionResponse.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQuery.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/SubmissionSummaryResponse.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQuery.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQuery.cs
new file mode 100644
index 0000000..0b8bbea
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQuery.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions.GetHeadcount;
+
+public sealed record GetHeadcountQuery(Guid WeddingId) : IQuery<HeadcountResponse>;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs
new file mode 100644
index 0000000..c8274b8
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs
@@ -0,0 +1,53 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions.GetHeadcount;
+
+internal sealed class GetHeadcountQueryHandler(
+    IGuestRepository guestRepository,
+    IRsvpSubmissionRepository submissionRepository) : IQueryHandler<GetHeadcountQuery, HeadcountResponse>
+{
+    public async Task<Result<HeadcountResponse>> Handle(GetHeadcountQuery query, CancellationToken cancellationToken)
+    {
+        var weddingId = new WeddingId(query.WeddingId);
+        IReadOnlyList<Guest> guests = await guestRepository.ListByWeddingAsync(weddingId, cancellationToken);
+        IReadOnlyList<RsvpSubmission> submissions = await submissionRepository.ListByWeddingAsync(weddingId, cancellationToken);
+
+        var latestByGuest = submissions
+            .Where(s => s.GuestId is not null)
+            .GroupBy(s => s.GuestId!.Value)
+            .ToDictionary(g => g.Key, g => g.OrderByDescending(s => s.SubmittedAtUtc).First());
+
+        int attending = 0, declined = 0, noResponse = 0, totalPeople = 0;
+        var byGroup = new Dictionary<string, (int a, int d, int n)>();
+        const string noGroupSentinel = "";
+        foreach (Guest g in guests)
+        {
+            string groupKey = g.GroupName?.Value ?? noGroupSentinel;
+            byGroup.TryGetValue(groupKey, out (int a, int d, int n) bucket);
+            if (!latestByGuest.TryGetValue(g.Id, out RsvpSubmission? latest))
+            {
+                noResponse++; bucket.n++;
+            }
+            else if (latest!.Attending)
+            {
+                attending++; bucket.a++;
+                totalPeople += 1 + latest.Companions.Count(c => c.Attending);
+            }
+            else
+            {
+                declined++; bucket.d++;
+            }
+            byGroup[groupKey] = bucket;
+        }
+
+        return Result.Success(new HeadcountResponse(
+            attending, declined, noResponse, totalPeople,
+            [.. byGroup.Select(kv => new GroupHeadcount(
+                kv.Key.Length == 0 ? null : kv.Key,
+                kv.Value.a, kv.Value.d, kv.Value.n))]));
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/HeadcountResponse.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/HeadcountResponse.cs
new file mode 100644
index 0000000..ba6e65a
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/HeadcountResponse.cs
@@ -0,0 +1,10 @@
+namespace Eternelle.Modules.Rsvp.Application.Submissions.GetHeadcount;
+
+public sealed record HeadcountResponse(
+    int Attending,
+    int Declined,
+    int NoResponse,
+    int TotalAttendingPeople,
+    IReadOnlyList<GroupHeadcount> ByGroup);
+
+public sealed record GroupHeadcount(string? GroupName, int Attending, int Declined, int NoResponse);
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQuery.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQuery.cs
new file mode 100644
index 0000000..574ae1f
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQuery.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions.GetSubmission;
+
+public sealed record GetSubmissionQuery(Guid WeddingId, Guid SubmissionId) : IQuery<SubmissionResponse>;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs
new file mode 100644
index 0000000..7739c7c
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs
@@ -0,0 +1,49 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions.GetSubmission;
+
+internal sealed class GetSubmissionQueryHandler(
+    IRsvpSubmissionRepository submissionRepository) : IQueryHandler<GetSubmissionQuery, SubmissionResponse>
+{
+    public async Task<Result<SubmissionResponse>> Handle(GetSubmissionQuery query, CancellationToken cancellationToken)
+    {
+        var submissionId = new SubmissionId(query.SubmissionId);
+        RsvpSubmission? submission = await submissionRepository.GetByIdAsync(submissionId, cancellationToken);
+        if (submission is null || submission.WeddingId != new WeddingId(query.WeddingId))
+        {
+            return Result.Failure<SubmissionResponse>(RsvpSubmissionErrors.NotFound(submissionId));
+        }
+
+        var companions = submission.Companions
+            .OrderBy(c => c.DisplayOrder)
+            .Select(c => new SubmissionCompanionResponse(
+                c.Id.Value,
+                c.Name.Value,
+                c.Attending,
+                c.DietaryNote?.Value,
+                c.DisplayOrder))
+            .ToList();
+
+        var response = new SubmissionResponse(
+            submission.Id.Value,
+            submission.WeddingId.Value,
+            submission.GuestId?.Value,
+            submission.NameSnapshot.Value,
+            submission.EmailSnapshot?.Value,
+            submission.MobileSnapshot?.Value,
+            submission.Attending,
+            submission.DietaryNote?.Value,
+            submission.Message?.Value,
+            submission.ConfirmationId,
+            submission.IpAddress?.ToString(),
+            submission.Source,
+            submission.InternalNote?.Value,
+            submission.SubmittedAtUtc,
+            companions);
+
+        return Result.Success(response);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/SubmissionResponse.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/SubmissionResponse.cs
new file mode 100644
index 0000000..8286420
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/SubmissionResponse.cs
@@ -0,0 +1,27 @@
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions.GetSubmission;
+
+public sealed record SubmissionResponse(
+    Guid SubmissionId,
+    Guid WeddingId,
+    Guid? GuestId,
+    string NameSnapshot,
+    string? Email,
+    string? MobileNumber,
+    bool Attending,
+    string? DietaryNote,
+    string? Message,
+    Guid ConfirmationId,
+    string? IpAddress,
+    RsvpSource Source,
+    string? InternalNote,
+    DateTime SubmittedAtUtc,
+    IReadOnlyList<SubmissionCompanionResponse> Companions);
+
+public sealed record SubmissionCompanionResponse(
+    Guid CompanionId,
+    string Name,
+    bool Attending,
+    string? DietaryNote,
+    int DisplayOrder);
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQuery.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQuery.cs
new file mode 100644
index 0000000..3afef8a
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQuery.cs
@@ -0,0 +1,11 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions.ListSubmissions;
+
+public sealed record ListSubmissionsQuery(
+    Guid WeddingId,
+    bool? Attending,
+    RsvpSource? Source,
+    int Skip = 0,
+    int Take = 50) : IQuery<IReadOnlyList<SubmissionSummaryResponse>>;
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs
new file mode 100644
index 0000000..4b45fbf
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs
@@ -0,0 +1,44 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using Eternelle.Modules.Rsvp.Domain.Weddings;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions.ListSubmissions;
+
+internal sealed class ListSubmissionsQueryHandler(
+    IRsvpSubmissionRepository submissionRepository) : IQueryHandler<ListSubmissionsQuery, IReadOnlyList<SubmissionSummaryResponse>>
+{
+    public async Task<Result<IReadOnlyList<SubmissionSummaryResponse>>> Handle(
+        ListSubmissionsQuery query, CancellationToken cancellationToken)
+    {
+        IReadOnlyList<RsvpSubmission> submissions = await submissionRepository.ListByWeddingAsync(
+            new WeddingId(query.WeddingId), cancellationToken);
+
+        IEnumerable<RsvpSubmission> filtered = submissions;
+
+        if (query.Attending is not null)
+        {
+            filtered = filtered.Where(s => s.Attending == query.Attending);
+        }
+
+        if (query.Source is not null)
+        {
+            filtered = filtered.Where(s => s.Source == query.Source);
+        }
+
+        IReadOnlyList<SubmissionSummaryResponse> result = filtered
+            .Skip(query.Skip)
+            .Take(query.Take)
+            .Select(s => new SubmissionSummaryResponse(
+                s.Id.Value,
+                s.GuestId?.Value,
+                s.NameSnapshot.Value,
+                s.Attending,
+                s.Companions.Count,
+                s.Source,
+                s.SubmittedAtUtc))
+            .ToList();
+
+        return Result.Success(result);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/SubmissionSummaryResponse.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/SubmissionSummaryResponse.cs
new file mode 100644
index 0000000..9688773
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/SubmissionSummaryResponse.cs
@@ -0,0 +1,12 @@
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+
+namespace Eternelle.Modules.Rsvp.Application.Submissions.ListSubmissions;
+
+public sealed record SubmissionSummaryResponse(
+    Guid SubmissionId,
+    Guid? GuestId,
+    string NameSnapshot,
+    bool Attending,
+    int CompanionCount,
+    RsvpSource Source,
+    DateTime SubmittedAtUtc);

From 47119446b97303bef7d414ece967b3675cb812fb Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 18:59:47 +0800
Subject: [PATCH 103/155] Eternelle-191 Guest CRUD endpoints

---
 .../Guests/AddGuestEndpoint.cs                | 50 +++++++++++++++++++
 .../Guests/ChangeGuestAllowanceEndpoint.cs    | 34 +++++++++++++
 .../Guests/GetGuestEndpoint.cs                | 29 +++++++++++
 .../Guests/ListGuestsEndpoint.cs              | 36 +++++++++++++
 .../Guests/LockGuestEndpoint.cs               | 29 +++++++++++
 .../Guests/RegenerateGuestTokenEndpoint.cs    | 31 ++++++++++++
 .../Guests/RemoveGuestEndpoint.cs             | 29 +++++++++++
 .../Guests/UnlockGuestEndpoint.cs             | 29 +++++++++++
 .../Guests/UpdateGuestContactEndpoint.cs      | 44 ++++++++++++++++
 .../Guests/UpdateGuestPlacementEndpoint.cs    | 34 +++++++++++++
 10 files changed, 345 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/AddGuestEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/ChangeGuestAllowanceEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/GetGuestEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/ListGuestsEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/LockGuestEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/RegenerateGuestTokenEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/RemoveGuestEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UnlockGuestEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UpdateGuestContactEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UpdateGuestPlacementEndpoint.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/AddGuestEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/AddGuestEndpoint.cs
new file mode 100644
index 0000000..3c11c64
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/AddGuestEndpoint.cs
@@ -0,0 +1,50 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Guests.AddGuest;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Guests;
+
+internal sealed class AddGuestEndpoint : IEndpoint
+{
+    internal sealed record Request(
+        string FirstName,
+        string LastName,
+        string? Email,
+        string? MobileNumber,
+        int AllowedCompanions,
+        int? TableNumber,
+        string? GroupName);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("weddings/{weddingId:guid}/guests", async (
+            Guid weddingId,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            var command = new AddGuestCommand(
+                weddingId,
+                request.FirstName,
+                request.LastName,
+                request.Email,
+                request.MobileNumber,
+                request.AllowedCompanions,
+                request.TableNumber,
+                request.GroupName);
+
+            Result<Guid> result = await sender.Send(command, ct);
+
+            return result.Match(
+                id => Results.Created($"/weddings/{weddingId}/guests/{id}", new { id }),
+                ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/ChangeGuestAllowanceEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/ChangeGuestAllowanceEndpoint.cs
new file mode 100644
index 0000000..7ecdede
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/ChangeGuestAllowanceEndpoint.cs
@@ -0,0 +1,34 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Guests.ChangeGuestAllowance;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Guests;
+
+internal sealed class ChangeGuestAllowanceEndpoint : IEndpoint
+{
+    internal sealed record Request(int AllowedCompanions);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPut("weddings/{weddingId:guid}/guests/{guestId:guid}/allowance", async (
+            Guid weddingId,
+            Guid guestId,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            var command = new ChangeGuestAllowanceCommand(weddingId, guestId, request.AllowedCompanions);
+
+            Result result = await sender.Send(command, ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/GetGuestEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/GetGuestEndpoint.cs
new file mode 100644
index 0000000..a2df9f0
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/GetGuestEndpoint.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Guests.GetGuest;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Guests;
+
+internal sealed class GetGuestEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("weddings/{weddingId:guid}/guests/{guestId:guid}", async (
+            Guid weddingId,
+            Guid guestId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result<GuestResponse> result = await sender.Send(new GetGuestQuery(weddingId, guestId), ct);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/ListGuestsEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/ListGuestsEndpoint.cs
new file mode 100644
index 0000000..f7231c3
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/ListGuestsEndpoint.cs
@@ -0,0 +1,36 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Guests.ListGuests;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Guests;
+
+internal sealed class ListGuestsEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("weddings/{weddingId:guid}/guests", Handler)
+            .WithTags(Tags.Rsvp)
+            .RequireAuthorization();
+    }
+
+    private static async Task<IResult> Handler(
+        Guid weddingId,
+        ISender sender,
+        CancellationToken ct,
+        string? groupName = null,
+        string? attendingState = null,
+        bool? isLocked = null,
+        int skip = 0,
+        int take = 50)
+    {
+        Result<IReadOnlyList<GuestSummaryResponse>> result = await sender.Send(
+            new ListGuestsQuery(weddingId, groupName, attendingState, isLocked, skip, take), ct);
+
+        return result.Match(Results.Ok, ApiResults.Problem);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/LockGuestEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/LockGuestEndpoint.cs
new file mode 100644
index 0000000..92e55f4
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/LockGuestEndpoint.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Guests.LockGuest;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Guests;
+
+internal sealed class LockGuestEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("weddings/{weddingId:guid}/guests/{guestId:guid}/lock", async (
+            Guid weddingId,
+            Guid guestId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(new LockGuestCommand(weddingId, guestId), ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/RegenerateGuestTokenEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/RegenerateGuestTokenEndpoint.cs
new file mode 100644
index 0000000..1189ef1
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/RegenerateGuestTokenEndpoint.cs
@@ -0,0 +1,31 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Guests.RegenerateGuestToken;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Guests;
+
+internal sealed class RegenerateGuestTokenEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("weddings/{weddingId:guid}/guests/{guestId:guid}/regenerate-token", async (
+            Guid weddingId,
+            Guid guestId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result<string> result = await sender.Send(new RegenerateGuestTokenCommand(weddingId, guestId), ct);
+
+            return result.Match(
+                lookupCode => Results.Ok(new { lookupCode }),
+                ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/RemoveGuestEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/RemoveGuestEndpoint.cs
new file mode 100644
index 0000000..7170d3a
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/RemoveGuestEndpoint.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Guests.RemoveGuest;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Guests;
+
+internal sealed class RemoveGuestEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapDelete("weddings/{weddingId:guid}/guests/{guestId:guid}", async (
+            Guid weddingId,
+            Guid guestId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(new RemoveGuestCommand(weddingId, guestId), ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UnlockGuestEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UnlockGuestEndpoint.cs
new file mode 100644
index 0000000..9359307
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UnlockGuestEndpoint.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Guests.UnlockGuest;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Guests;
+
+internal sealed class UnlockGuestEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("weddings/{weddingId:guid}/guests/{guestId:guid}/unlock", async (
+            Guid weddingId,
+            Guid guestId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(new UnlockGuestCommand(weddingId, guestId), ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UpdateGuestContactEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UpdateGuestContactEndpoint.cs
new file mode 100644
index 0000000..87d9643
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UpdateGuestContactEndpoint.cs
@@ -0,0 +1,44 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Guests.UpdateGuestContact;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Guests;
+
+internal sealed class UpdateGuestContactEndpoint : IEndpoint
+{
+    internal sealed record Request(
+        string FirstName,
+        string LastName,
+        string? Email,
+        string? MobileNumber);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPut("weddings/{weddingId:guid}/guests/{guestId:guid}", async (
+            Guid weddingId,
+            Guid guestId,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            var command = new UpdateGuestContactCommand(
+                weddingId,
+                guestId,
+                request.FirstName,
+                request.LastName,
+                request.Email,
+                request.MobileNumber);
+
+            Result result = await sender.Send(command, ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UpdateGuestPlacementEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UpdateGuestPlacementEndpoint.cs
new file mode 100644
index 0000000..4dc9c4d
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Guests/UpdateGuestPlacementEndpoint.cs
@@ -0,0 +1,34 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Guests.UpdateGuestPlacement;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Guests;
+
+internal sealed class UpdateGuestPlacementEndpoint : IEndpoint
+{
+    internal sealed record Request(int? TableNumber, string? GroupName);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPut("weddings/{weddingId:guid}/guests/{guestId:guid}/placement", async (
+            Guid weddingId,
+            Guid guestId,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            var command = new UpdateGuestPlacementCommand(weddingId, guestId, request.TableNumber, request.GroupName);
+
+            Result result = await sender.Send(command, ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}

From 22a9d828a74a5df5a21fd39fe118416ee7972a14 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 19:01:36 +0800
Subject: [PATCH 104/155] Eternelle-191 Submission endpoints

---
 .../Submissions/GetHeadcountEndpoint.cs       | 28 ++++++++++
 .../Submissions/GetSubmissionEndpoint.cs      | 30 +++++++++++
 .../Submissions/ListSubmissionsEndpoint.cs    | 38 +++++++++++++
 .../Submissions/SubmitOnBehalfEndpoint.cs     | 54 +++++++++++++++++++
 4 files changed, 150 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/GetHeadcountEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/GetSubmissionEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/ListSubmissionsEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/SubmitOnBehalfEndpoint.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/GetHeadcountEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/GetHeadcountEndpoint.cs
new file mode 100644
index 0000000..4af8f5b
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/GetHeadcountEndpoint.cs
@@ -0,0 +1,28 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Submissions.GetHeadcount;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Submissions;
+
+internal sealed class GetHeadcountEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("weddings/{weddingId:guid}/headcount", async (
+            Guid weddingId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result<HeadcountResponse> result = await sender.Send(new GetHeadcountQuery(weddingId), ct);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/GetSubmissionEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/GetSubmissionEndpoint.cs
new file mode 100644
index 0000000..761ee6e
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/GetSubmissionEndpoint.cs
@@ -0,0 +1,30 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Submissions.GetSubmission;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Submissions;
+
+internal sealed class GetSubmissionEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("weddings/{weddingId:guid}/submissions/{submissionId:guid}", async (
+            Guid weddingId,
+            Guid submissionId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result<SubmissionResponse> result =
+                await sender.Send(new GetSubmissionQuery(weddingId, submissionId), ct);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/ListSubmissionsEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/ListSubmissionsEndpoint.cs
new file mode 100644
index 0000000..5b06095
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/ListSubmissionsEndpoint.cs
@@ -0,0 +1,38 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Submissions.ListSubmissions;
+using Eternelle.Modules.Rsvp.Domain.Submissions;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Submissions;
+
+internal sealed class ListSubmissionsEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("weddings/{weddingId:guid}/submissions", Handler)
+            .WithTags(Tags.Rsvp)
+            .RequireAuthorization();
+    }
+
+    private static async Task<IResult> Handler(
+        Guid weddingId,
+        ISender sender,
+        CancellationToken ct,
+        bool? attending = null,
+        string? source = null,
+        int skip = 0,
+        int take = 50)
+    {
+        RsvpSource? parsedSource = Enum.TryParse<RsvpSource>(source, true, out RsvpSource s) ? s : (RsvpSource?)null;
+
+        Result<IReadOnlyList<SubmissionSummaryResponse>> result = await sender.Send(
+            new ListSubmissionsQuery(weddingId, attending, parsedSource, skip, take), ct);
+
+        return result.Match(Results.Ok, ApiResults.Problem);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/SubmitOnBehalfEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/SubmitOnBehalfEndpoint.cs
new file mode 100644
index 0000000..9fc7d90
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/SubmitOnBehalfEndpoint.cs
@@ -0,0 +1,54 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Submissions.SubmitOnBehalf;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Submissions;
+
+internal sealed class SubmitOnBehalfEndpoint : IEndpoint
+{
+    internal sealed record CompanionRequest(string Name, bool Attending, string? DietaryNote);
+
+    internal sealed record Request(
+        bool Attending,
+        string? DietaryNote,
+        string? Message,
+        IReadOnlyList<CompanionRequest>? Companions,
+        string InternalNote);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("weddings/{weddingId:guid}/guests/{guestId:guid}/submissions", async (
+            Guid weddingId,
+            Guid guestId,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            var companions = (request.Companions ?? [])
+                .Select(c => new CompanionInput(c.Name, c.Attending, c.DietaryNote))
+                .ToList();
+
+            var command = new SubmitOnBehalfCommand(
+                weddingId,
+                guestId,
+                request.Attending,
+                request.DietaryNote,
+                request.Message,
+                companions,
+                request.InternalNote);
+
+            Result<Guid> result = await sender.Send(command, ct);
+
+            return result.Match(
+                confirmationId => Results.Ok(new { confirmationId }),
+                ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}

From 09330acd497724dd94e1b76713aff95f5a27fd1d Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 19:03:48 +0800
Subject: [PATCH 105/155] Eternelle-191 Wedding deadline endpoints

---
 .../Weddings/ClearRsvpDeadlineEndpoint.cs     | 28 ++++++++++++++++
 .../Weddings/SetRsvpDeadlineEndpoint.cs       | 33 +++++++++++++++++++
 2 files changed, 61 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/ClearRsvpDeadlineEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/SetRsvpDeadlineEndpoint.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/ClearRsvpDeadlineEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/ClearRsvpDeadlineEndpoint.cs
new file mode 100644
index 0000000..4a6ff01
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/ClearRsvpDeadlineEndpoint.cs
@@ -0,0 +1,28 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Weddings.ClearRsvpDeadline;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Weddings;
+
+internal sealed class ClearRsvpDeadlineEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapDelete("weddings/{weddingId:guid}/rsvp/deadline", async (
+            Guid weddingId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(new ClearRsvpDeadlineCommand(weddingId), ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/SetRsvpDeadlineEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/SetRsvpDeadlineEndpoint.cs
new file mode 100644
index 0000000..699f186
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Weddings/SetRsvpDeadlineEndpoint.cs
@@ -0,0 +1,33 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Weddings.SetRsvpDeadline;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Weddings;
+
+internal sealed class SetRsvpDeadlineEndpoint : IEndpoint
+{
+    internal sealed record Request(DateOnly Deadline);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPut("weddings/{weddingId:guid}/rsvp/deadline", async (
+            Guid weddingId,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            var command = new SetRsvpDeadlineCommand(weddingId, request.Deadline);
+
+            Result result = await sender.Send(command, ct);
+
+            return result.Match(Results.NoContent, ApiResults.Problem);
+        })
+        .WithTags(Tags.Rsvp)
+        .RequireAuthorization();
+    }
+}

From e173eec2bed2ef0031ad5b348e01e0a9e3fb5ffb Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 19:05:52 +0800
Subject: [PATCH 106/155] Eternelle-191 Public invitation + submit endpoints

---
 .../Public/GetInvitationEndpoint.cs           | 26 +++++++++++
 .../Public/SubmitRsvpEndpoint.cs              | 45 +++++++++++++++++++
 2 files changed, 71 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Public/GetInvitationEndpoint.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Public/SubmitRsvpEndpoint.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Public/GetInvitationEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Public/GetInvitationEndpoint.cs
new file mode 100644
index 0000000..1ee8a48
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Public/GetInvitationEndpoint.cs
@@ -0,0 +1,26 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Public.GetInvitation;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.RateLimiting;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Public;
+
+internal sealed class GetInvitationEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("rsvp/{lookupCode}", async (string lookupCode, ISender sender, CancellationToken ct) =>
+        {
+            Result<InvitationResponse> result = await sender.Send(new GetInvitationQuery(lookupCode), ct);
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.RsvpPublic)
+        .AllowAnonymous()
+        .RequireRateLimiting(RateLimitingPolicies.RsvpLookup);
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Public/SubmitRsvpEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Public/SubmitRsvpEndpoint.cs
new file mode 100644
index 0000000..d5fd362
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Public/SubmitRsvpEndpoint.cs
@@ -0,0 +1,45 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Rsvp.Application.Public.SubmitRsvp;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.RateLimiting;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Rsvp.Presentation.Public;
+
+internal sealed class SubmitRsvpEndpoint : IEndpoint
+{
+    internal sealed record CompanionRequest(string Name, bool Attending, string? DietaryNote);
+
+    internal sealed record Request(
+        bool Attending,
+        string? DietaryNote,
+        string? Message,
+        IReadOnlyList<CompanionRequest>? Companions);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("rsvp/{lookupCode}", async (
+            string lookupCode, Request body, HttpContext http, ISender sender, CancellationToken ct) =>
+        {
+            var companions = (body.Companions ?? [])
+                .Select(c => new CompanionInput(c.Name, c.Attending, c.DietaryNote))
+                .ToList();
+
+            var cmd = new SubmitRsvpCommand(
+                lookupCode, body.Attending, body.DietaryNote, body.Message, companions,
+                http.Connection.RemoteIpAddress?.ToString());
+
+            Result<Guid> result = await sender.Send(cmd, ct);
+            return result.Match(
+                confirmationId => Results.Ok(new { confirmationId }),
+                ApiResults.Problem);
+        })
+        .WithTags(Tags.RsvpPublic)
+        .AllowAnonymous()
+        .RequireRateLimiting(RateLimitingPolicies.RsvpSubmit);
+    }
+}

From ab613a6ee2280d78c23b3124a2f9f128975774db Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 20:00:01 +0800
Subject: [PATCH 107/155] Eternelle-191 Update schema: Tier, PriceClass,
 SectionId to integers

Changed Tier, PriceClass, and SectionId columns from string to integer types in migration and model snapshot files. Removed SQL data seeding from migration and made minor formatting and namespace adjustments.
---
 ...20260529115411_InitialCatalog.Designer.cs} |  25 ++---
 ...og.cs => 20260529115411_InitialCatalog.cs} | 106 ++++++------------
 .../CatalogDbContextModelSnapshot.cs          |  23 ++--
 3 files changed, 49 insertions(+), 105 deletions(-)
 rename src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/{20260527094230_InitialCatalog.Designer.cs => 20260529115411_InitialCatalog.Designer.cs} (93%)
 rename src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/{20260527094230_InitialCatalog.cs => 20260529115411_InitialCatalog.cs} (64%)

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.Designer.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260529115411_InitialCatalog.Designer.cs
similarity index 93%
rename from src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.Designer.cs
rename to src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260529115411_InitialCatalog.Designer.cs
index cb09aa6..0484112 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.Designer.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260529115411_InitialCatalog.Designer.cs
@@ -12,7 +12,7 @@
 namespace Eternelle.Modules.Catalog.Infrastructure.Database.Migrations
 {
     [DbContext(typeof(CatalogDbContext))]
-    [Migration("20260527094230_InitialCatalog")]
+    [Migration("20260529115411_InitialCatalog")]
     partial class InitialCatalog
     {
         /// <inheritdoc />
@@ -110,9 +110,8 @@ protected override void BuildTargetModel(ModelBuilder modelBuilder)
                         .HasColumnType("character varying(2048)")
                         .HasColumnName("preview_image_url");
 
-                    b.Property<string>("Tier")
-                        .IsRequired()
-                        .HasColumnType("text")
+                    b.Property<int>("Tier")
+                        .HasColumnType("integer")
                         .HasColumnName("tier");
 
                     b.Property<DateTime>("UpdatedAtUtc")
@@ -139,16 +138,12 @@ protected override void BuildTargetModel(ModelBuilder modelBuilder)
                         .HasColumnType("boolean")
                         .HasColumnName("is_default");
 
-                    b.Property<string>("PriceClass")
-                        .IsRequired()
-                        .HasMaxLength(50)
-                        .HasColumnType("character varying(50)")
+                    b.Property<int>("PriceClass")
+                        .HasColumnType("integer")
                         .HasColumnName("price_class");
 
-                    b.Property<string>("SectionId")
-                        .IsRequired()
-                        .HasMaxLength(50)
-                        .HasColumnType("character varying(50)")
+                    b.Property<int>("SectionId")
+                        .HasColumnType("integer")
                         .HasColumnName("section_id");
 
                     b.Property<Guid>("TemplateId")
@@ -190,10 +185,8 @@ protected override void BuildTargetModel(ModelBuilder modelBuilder)
                         .HasColumnType("integer")
                         .HasColumnName("display_order");
 
-                    b.Property<string>("SectionId")
-                        .IsRequired()
-                        .HasMaxLength(50)
-                        .HasColumnType("character varying(50)")
+                    b.Property<int>("SectionId")
+                        .HasColumnType("integer")
                         .HasColumnName("section_id");
 
                     b.Property<Guid>("TemplateId")
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260529115411_InitialCatalog.cs
similarity index 64%
rename from src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
rename to src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260529115411_InitialCatalog.cs
index 5cadd1b..242938b 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260527094230_InitialCatalog.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/20260529115411_InitialCatalog.cs
@@ -1,13 +1,14 @@
-using System;
+// <auto-generated />
+using System;
 using Microsoft.EntityFrameworkCore.Migrations;
 
 #nullable disable
 
-namespace Eternelle.Modules.Catalog.Infrastructure.Database.Migrations;
-
-/// <inheritdoc />
-public partial class InitialCatalog : Migration
+namespace Eternelle.Modules.Catalog.Infrastructure.Database.Migrations
 {
+    /// <inheritdoc />
+    public partial class InitialCatalog : Migration
+    {
         /// <inheritdoc />
         protected override void Up(MigrationBuilder migrationBuilder)
         {
@@ -140,14 +141,14 @@ protected override void Up(MigrationBuilder migrationBuilder)
                 name: "ix_template_section_variants_template_id_section_id_variant",
                 schema: "catalog",
                 table: "template_section_variants",
-                columns: ["template_id", "section_id", "variant"],
+                columns: new[] { "template_id", "section_id", "variant" },
                 unique: true);
 
             migrationBuilder.CreateIndex(
                 name: "ux_template_section_variants_one_default",
                 schema: "catalog",
                 table: "template_section_variants",
-                columns: ["template_id", "section_id"],
+                columns: new[] { "template_id", "section_id" },
                 unique: true,
                 filter: "is_default = true");
 
@@ -155,14 +156,14 @@ protected override void Up(MigrationBuilder migrationBuilder)
                 name: "ix_template_supported_sections_template_id_section_id",
                 schema: "catalog",
                 table: "template_supported_sections",
-                columns: ["template_id", "section_id"],
+                columns: new[] { "template_id", "section_id" },
                 unique: true);
 
             migrationBuilder.CreateIndex(
                 name: "ix_template_themes_template_id_theme_index",
                 schema: "catalog",
                 table: "template_themes",
-                columns: ["template_id", "theme_index"],
+                columns: new[] { "template_id", "theme_index" },
                 unique: true);
 
             migrationBuilder.CreateIndex(
@@ -171,77 +172,34 @@ protected override void Up(MigrationBuilder migrationBuilder)
                 table: "templates",
                 column: "name",
                 unique: true);
-
-            migrationBuilder.Sql(
-                """
-                INSERT INTO catalog.templates (id, name, description, tier, preview_image_url, features, created_at_utc, updated_at_utc)
-                VALUES (
-                    '0190a000-0000-7000-8000-000000000001',
-                    'Kapilya',
-                    'A classic Filipino chapel-inspired wedding template.',
-                    1,
-                    NULL,
-                    '[]'::jsonb,
-                    now(),
-                    now());
-
-                INSERT INTO catalog.template_themes (id, template_id, theme_index, name, colors, typography, textures, is_dark)
-                VALUES
-                    ('0190a000-0000-7000-8000-000000000010', '0190a000-0000-7000-8000-000000000001', 0, 'Ivory',
-                     '{"primary":"#1a1a1a","accent":"#c8a96a","background":"#faf7f2"}'::jsonb,
-                     '{"heading":"Cormorant","body":"Inter"}'::jsonb, NULL, false),
-                    ('0190a000-0000-7000-8000-000000000011', '0190a000-0000-7000-8000-000000000001', 1, 'Midnight',
-                     '{"primary":"#f5f5f5","accent":"#c8a96a","background":"#10100f"}'::jsonb,
-                     '{"heading":"Cormorant","body":"Inter"}'::jsonb, NULL, true);
-
-                INSERT INTO catalog.template_supported_sections (id, template_id, section_id, display_order)
-                VALUES
-                    ('0190a000-0000-7000-8000-000000000020', '0190a000-0000-7000-8000-000000000001', 0, 0),
-                    ('0190a000-0000-7000-8000-000000000021', '0190a000-0000-7000-8000-000000000001', 1, 1),
-                    ('0190a000-0000-7000-8000-000000000022', '0190a000-0000-7000-8000-000000000001', 2, 2),
-                    ('0190a000-0000-7000-8000-000000000023', '0190a000-0000-7000-8000-000000000001', 7, 3),
-                    ('0190a000-0000-7000-8000-000000000024', '0190a000-0000-7000-8000-000000000001', 9, 4),
-                    ('0190a000-0000-7000-8000-000000000025', '0190a000-0000-7000-8000-000000000001', 12, 5);
-
-                INSERT INTO catalog.template_section_variants (id, template_id, section_id, variant, is_default, price_class, upload_limit)
-                VALUES
-                    ('0190a000-0000-7000-8000-000000000030', '0190a000-0000-7000-8000-000000000001', 0,  'classic', true,  1, NULL),
-                    ('0190a000-0000-7000-8000-000000000031', '0190a000-0000-7000-8000-000000000001', 0,  'editorial', false, 3, NULL),
-                    ('0190a000-0000-7000-8000-000000000032', '0190a000-0000-7000-8000-000000000001', 1,  'classic', true,  1, NULL),
-                    ('0190a000-0000-7000-8000-000000000033', '0190a000-0000-7000-8000-000000000001', 2,  'grid', true,  1, NULL),
-                    ('0190a000-0000-7000-8000-000000000034', '0190a000-0000-7000-8000-000000000001', 7,  'map', true,  1, NULL),
-                    ('0190a000-0000-7000-8000-000000000035', '0190a000-0000-7000-8000-000000000001', 9,  'simple', true,  1, NULL),
-                    ('0190a000-0000-7000-8000-000000000036', '0190a000-0000-7000-8000-000000000001', 12, 'free', true,  1, 50),
-                    ('0190a000-0000-7000-8000-000000000037', '0190a000-0000-7000-8000-000000000001', 12, 'pro', false, 2, 250),
-                    ('0190a000-0000-7000-8000-000000000038', '0190a000-0000-7000-8000-000000000001', 12, 'plus', false, 3, NULL);
-                """);
         }
 
-    /// <inheritdoc />
-    protected override void Down(MigrationBuilder migrationBuilder)
-    {
-        migrationBuilder.DropTable(
-            name: "outbox_message_consumers",
-            schema: "catalog");
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "outbox_message_consumers",
+                schema: "catalog");
 
-        migrationBuilder.DropTable(
-            name: "outbox_messages",
-            schema: "catalog");
+            migrationBuilder.DropTable(
+                name: "outbox_messages",
+                schema: "catalog");
 
-        migrationBuilder.DropTable(
-            name: "template_section_variants",
-            schema: "catalog");
+            migrationBuilder.DropTable(
+                name: "template_section_variants",
+                schema: "catalog");
 
-        migrationBuilder.DropTable(
-            name: "template_supported_sections",
-            schema: "catalog");
+            migrationBuilder.DropTable(
+                name: "template_supported_sections",
+                schema: "catalog");
 
-        migrationBuilder.DropTable(
-            name: "template_themes",
-            schema: "catalog");
+            migrationBuilder.DropTable(
+                name: "template_themes",
+                schema: "catalog");
 
-        migrationBuilder.DropTable(
-            name: "templates",
-            schema: "catalog");
+            migrationBuilder.DropTable(
+                name: "templates",
+                schema: "catalog");
+        }
     }
 }
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/CatalogDbContextModelSnapshot.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/CatalogDbContextModelSnapshot.cs
index 50e4645..a729c2c 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/CatalogDbContextModelSnapshot.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Database/Migrations/CatalogDbContextModelSnapshot.cs
@@ -107,9 +107,8 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .HasColumnType("character varying(2048)")
                         .HasColumnName("preview_image_url");
 
-                    b.Property<string>("Tier")
-                        .IsRequired()
-                        .HasColumnType("text")
+                    b.Property<int>("Tier")
+                        .HasColumnType("integer")
                         .HasColumnName("tier");
 
                     b.Property<DateTime>("UpdatedAtUtc")
@@ -136,16 +135,12 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .HasColumnType("boolean")
                         .HasColumnName("is_default");
 
-                    b.Property<string>("PriceClass")
-                        .IsRequired()
-                        .HasMaxLength(50)
-                        .HasColumnType("character varying(50)")
+                    b.Property<int>("PriceClass")
+                        .HasColumnType("integer")
                         .HasColumnName("price_class");
 
-                    b.Property<string>("SectionId")
-                        .IsRequired()
-                        .HasMaxLength(50)
-                        .HasColumnType("character varying(50)")
+                    b.Property<int>("SectionId")
+                        .HasColumnType("integer")
                         .HasColumnName("section_id");
 
                     b.Property<Guid>("TemplateId")
@@ -187,10 +182,8 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .HasColumnType("integer")
                         .HasColumnName("display_order");
 
-                    b.Property<string>("SectionId")
-                        .IsRequired()
-                        .HasMaxLength(50)
-                        .HasColumnType("character varying(50)")
+                    b.Property<int>("SectionId")
+                        .HasColumnType("integer")
                         .HasColumnName("section_id");
 
                     b.Property<Guid>("TemplateId")

From a2526bb43df5c22c0ec9126d7291f361777087f1 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 22:40:20 +0800
Subject: [PATCH 108/155] Eternelle-191 Replace database-design.md with system
 architecture.md

Replace the stale database-design.md draft with a system-level architecture.md
covering runtime topology, the shared kernel, the synchronous request lifecycle,
the async outbox/inbox messaging pipeline, a corrected cross-module data view
(shipped schemas only) + integration-event map, cross-cutting concerns, and
architecture decisions. Repoint references in CLAUDE.md, README.md,
Eternelle.slnx, and docs/modules/README.md.
---
 CLAUDE.md               |    2 +-
 Eternelle.slnx          |    2 +-
 README.md               |    2 +-
 docs/architecture.md    |  369 +++++++++++
 docs/database-design.md | 1296 ---------------------------------------
 docs/modules/README.md  |    2 +-
 6 files changed, 373 insertions(+), 1300 deletions(-)
 create mode 100644 docs/architecture.md
 delete mode 100644 docs/database-design.md

diff --git a/CLAUDE.md b/CLAUDE.md
index 8fd852e..1f3487e 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -1,7 +1,7 @@
 # CLAUDE.md — Eternelle
 
 Modular monolith backend in **.NET 10**, Clean Architecture + full DDD.
-Database design: `docs/database-design.md`.
+System architecture: `docs/architecture.md`.
 Module conventions (authoritative): `docs/module-conventions.md`.
 Per-module reference docs: `docs/modules/` (Weddings, Users, Catalog, Tenancy).
 
diff --git a/Eternelle.slnx b/Eternelle.slnx
index aa61553..bca0092 100644
--- a/Eternelle.slnx
+++ b/Eternelle.slnx
@@ -1,6 +1,6 @@
 <Solution>
   <Folder Name="/docs/">
-    <File Path="docs/database-design.md" />
+    <File Path="docs/architecture.md" />
     <File Path="docs/feature-gift-contributions.md" />
     <File Path="docs/feature-guest-photo-upload.md" />
     <File Path="docs/module-conventions.md" />
diff --git a/README.md b/README.md
index eff2bbd..b52ebea 100644
--- a/README.md
+++ b/README.md
@@ -41,7 +41,7 @@ Backend for **Eternelle** — a Philippine wedding platform that lets couples bu
 
 ## Modules
 
-Four modules are implemented; two are planned. Each is a five-project vertical slice and owns its own PostgreSQL schema. See [`docs/modules/`](docs/modules/) for per-module reference docs and [`docs/database-design.md`](docs/database-design.md) for the cross-module data model.
+Four modules are implemented; two are planned. Each is a five-project vertical slice and owns its own PostgreSQL schema. See [`docs/modules/`](docs/modules/) for per-module reference docs and [`docs/architecture.md`](docs/architecture.md) for the system architecture and cross-module data model.
 
 | Module | Schema | Status | Summary |
 |---|---|---|---|
diff --git a/docs/architecture.md b/docs/architecture.md
new file mode 100644
index 0000000..3a29d59
--- /dev/null
+++ b/docs/architecture.md
@@ -0,0 +1,369 @@
+# Eternelle — System Architecture
+
+Eternelle is a multi-tenant wedding-website platform built as a **modular monolith** in .NET 10
+(Clean Architecture + DDD). This document describes how the system fits together as a whole: its
+runtime topology, the shared kernel every module builds on, how a request flows synchronously,
+how modules communicate asynchronously, the consolidated data model, the cross-cutting concerns,
+and the durable decisions behind the design.
+
+## What this document is (and is not)
+
+This is the **system-level** view — the glue between modules and the whole-system picture. It does
+not repeat material owned by other docs. Use the map below to find the right source.
+
+| Question | Read |
+|---|---|
+| How is the system wired end-to-end? | **This document** |
+| How do I write code in a module (patterns, invariants, workflow)? | [`CLAUDE.md`](../CLAUDE.md) |
+| What are the module conventions (projects, references, naming, VOs)? | [`docs/module-conventions.md`](module-conventions.md) |
+| What does a specific module contain (aggregates, endpoints, schema)? | [`docs/modules/`](modules/) |
+| What is the forward-looking design for an unbuilt module? | [`docs/superpowers/specs/`](superpowers/specs/) |
+| How does a specific feature work? | [`feature-gift-contributions.md`](feature-gift-contributions.md), [`feature-guest-photo-upload.md`](feature-guest-photo-upload.md) |
+
+## Keeping this document current
+
+This document tracks `main`: it describes **shipped** modules only. When a module merges to `main`,
+update three places here — the module roster (§1), the consolidated ER diagram (§6), and the
+integration-event map (§6). Forward-looking design stays in `docs/superpowers/specs/` until it ships.
+
+---
+
+## 1. System context & runtime topology
+
+One ASP.NET Core host (`Eternelle.Api`) runs all modules in-process against one PostgreSQL database,
+with each module owning a private schema. Shipped modules:
+
+| Module | Schema | Responsibility |
+|---|---|---|
+| Weddings | `wedding` | All couple/wedding content for a tenant's site |
+| Users | `users` | Shadow user profile + RBAC (Keycloak owns credentials) |
+| Catalog | `catalog` | Template & theme registry (mostly static reference data) |
+| Tenancy | `tenancy` | Tenant lifecycle, template/theme assignment, section ordering, publishing |
+
+> RSVP (`rsvp`) and Guestbook (`guestbook`) are planned — see [`docs/superpowers/specs/`](superpowers/specs/).
+
+### External dependencies
+
+| Dependency | Role | Required |
+|---|---|---|
+| PostgreSQL 17 | System of record; one database, one schema per module | Yes |
+| Keycloak | Identity provider — owns credentials, OAuth federation, JWT issuance | Yes (auth) |
+| Redis | Distributed cache + guest-photo upload-slot store | Optional in dev — falls back to in-memory cache / stub slot store |
+| MinIO / S3 | Guest-photo (SnapShare) object storage | Yes for photo upload |
+| MassTransit (in-memory transport) | In-process integration-event bus | Yes — **no external broker**; reliability comes from the DB outbox/inbox |
+
+```mermaid
+flowchart TB
+  client["Browser / API client"] -->|HTTPS + JWT| api["Eternelle.Api (modular monolith)"]
+  subgraph host["In-process modules"]
+    weddings["Weddings"]
+    users["Users"]
+    catalog["Catalog"]
+    tenancy["Tenancy"]
+  end
+  api --> host
+  host -->|EF Core write / Dapper read| pg[("PostgreSQL 17<br/>schema per module")]
+  host -->|cache + upload slots| redis[("Redis (optional)")]
+  host -->|guest photos| minio[("MinIO / S3")]
+  api -->|JWT validation via JWKS| kc["Keycloak"]
+  host -. in-process integration events .-> host
+```
+
+---
+
+## 2. Solution structure
+
+```text
+src/
+├── API/Eternelle.Api/      ← Host: Program.cs, middleware, OpenTelemetry, migrations, config
+├── Common/                 ← Shared kernel (Domain, Application, Infrastructure, Presentation)
+└── Modules/{Name}/         ← One folder per bounded context, each a five-project vertical slice
+```
+
+Each module is the same five-project slice — `Domain`, `Application`, `Infrastructure`,
+`Presentation`, `IntegrationEvents`. The host references each module's `Infrastructure` and
+`Presentation` to register it; modules never reference each other except through
+`{X}.IntegrationEvents`.
+
+For the project layout, the ProjectReference graph (the hard dependency rules), naming, and the
+module registration template, see [`docs/module-conventions.md`](module-conventions.md). This
+document does not restate those rules — it covers what they produce at runtime (§3–§5).
+
+---
+
+## 3. The shared kernel (`Common.*`)
+
+Every module builds on four shared projects. This is what a module gets "for free" and the contracts
+it implements.
+
+### `Common.Domain`
+| Contract | Purpose |
+|---|---|
+| `Entity` | Aggregate-root base; buffers domain events (`Raise`, `DomainEvents`, `ClearDomainEvents`) |
+| `Result` / `Result<T>` | Outcome of every command/query handler — success or `Error` |
+| `Error` / `ErrorType` | Typed failures (`NotFound`, `Problem`, `Conflict`, `Failure`, `Validation`) |
+| `DomainEvent` / `IDomainEvent` | Base for domain events (carries `Id`, `OccurredOnUtc`) |
+| `People.*`, `Text.*` | Shared value objects (`PersonName`, `Email`, `PhoneNumber`, `RichDescription`, …) lifted to Common when a second module needs them |
+
+### `Common.Application`
+| Contract | Purpose |
+|---|---|
+| `ICommand` / `ICommand<T>` / `IQuery<T>` + handlers | MediatR message contracts |
+| `IEventBus`, `IIntegrationEvent`, `IntegrationEvent` | Publishing integration events across modules |
+| `ExceptionHandling` / `RequestLogging` / `Validation` pipeline behaviors | Cross-cutting MediatR pipeline (see §4) |
+| `IPermissionService` | Resolves a caller's permission codes (implemented by the Users module) |
+| `IUnitOfWork`, `IDbConnectionFactory` | EF write boundary; Dapper read connections |
+| `ICacheService`, `IDateTimeProvider` | Caching abstraction; testable clock |
+| `ClaimsPrincipalExtensions`, `CustomClaims` | Reading identity / permission claims off the JWT |
+
+### `Common.Infrastructure`
+| Contract | Purpose |
+|---|---|
+| `AuthenticationExtensions`, `JwtBearerConfigureOptions` | Keycloak JWT bearer setup (JWKS validation) |
+| `PermissionAuthorizationHandler`, `PermissionAuthorizationPolicyProvider`, `CustomClaimsTransformation` | Permission-based authorization |
+| `Outbox/*`, `Inbox/*`, `InsertOutboxMessagesInterceptor` | Transactional messaging (see §5) |
+| `EventBus` | MassTransit-backed `IEventBus` |
+| `DbConnectionFactory`, `GenericArrayHandler` | Dapper read path + Npgsql array type handling |
+| `SerializerSettings`, `DateTimeProvider` | JSON serialization; system clock |
+
+### `Common.Presentation`
+| Contract | Purpose |
+|---|---|
+| `IEndpoint`, `EndpointExtensions` | Minimal-API endpoint registration (assembly-scanned) |
+| `ApiResults`, `ResultExtensions` | Maps `Result` / `Error` to RFC-7807 problem responses |
+
+---
+
+## 4. Synchronous request lifecycle
+
+An authenticated write flows through a fixed middleware order (from `Program.cs`):
+
+`UseLogContextTraceLogging` → `UseSerilogRequestLogging` → `UseExceptionHandler` →
+`UseAuthentication` → `UseAuthorization` → `UseRateLimiter` → endpoint.
+
+The endpoint (`IEndpoint`) builds a command and sends it via the MediatR `ISender`. Every request
+passes through the MediatR pipeline, outer→inner:
+
+`ExceptionHandlingPipelineBehavior` → `RequestLoggingPipelineBehavior` → `ValidationPipelineBehavior`
+→ handler.
+
+The handler returns `Result` / `Result<T>`; the endpoint maps it with `Result.Match(onSuccess, ApiResults.Problem)`
+(success → 2xx, `Error` → RFC-7807 problem response). Business-rule failures are `Error` values,
+never exceptions.
+
+**Authorization** is permission-based: Keycloak issues the JWT; `JwtBearer` validates it against the
+Keycloak JWKS; `CustomClaimsTransformation` loads the caller's permission codes (via the Users
+module's `PermissionService`, which implements `IPermissionService`); `RequireAuthorization("code")`
+policies are resolved by `PermissionAuthorizationPolicyProvider` + `PermissionAuthorizationHandler`.
+
+```mermaid
+sequenceDiagram
+  participant C as Client
+  participant MW as Middleware (authn/authz/rate-limit)
+  participant E as IEndpoint
+  participant P as MediatR pipeline
+  participant H as Command handler
+  participant DB as PostgreSQL
+  C->>MW: HTTP + JWT
+  MW->>MW: validate JWT (JWKS), load permissions, check policy
+  MW->>E: route to endpoint
+  E->>P: ISender.Send(command)
+  P->>P: Exception → Logging → Validation
+  P->>H: handle
+  H->>DB: EF write via IUnitOfWork
+  H-->>E: Result<T>
+  E-->>C: Result.Match → 2xx / problem
+```
+
+---
+
+## 5. Asynchronous messaging pipeline
+
+Modules never call each other synchronously. They communicate through reliable, eventually-consistent
+integration events, using a transactional outbox/inbox so a published event can never be lost or
+double-applied even though the transport is in-memory.
+
+Flow:
+
+1. An aggregate raises a **domain event** (`Entity.Raise`), embedding all payload it will need at
+   raise-time — handlers do **not** reload the aggregate.
+2. `InsertOutboxMessagesInterceptor` serializes pending domain events into the module's
+   `{schema}.outbox_messages` table **in the same EF transaction** as the state change.
+3. A **Quartz** `ProcessOutboxJob` per module reads unprocessed rows and dispatches each to its
+   `DomainEventHandler`.
+4. The handler publishes an `IntegrationEvent` via `IEventBus` (MassTransit, in-memory transport),
+   directly from the domain-event payload.
+5. A consuming module receives it, records it in `{schema}.inbox_messages` for idempotency, and runs
+   its `IntegrationEventHandler` (registered by scanning the Presentation assembly).
+
+Each schema therefore carries `outbox_messages` + `outbox_message_consumers`, and `inbox_messages` +
+`inbox_message_consumers` where it consumes events (Catalog has outbox only — it publishes but does
+not consume). This outbox/inbox seam is what makes a later extraction to a separate service
+mechanical.
+
+The domain-event-handler coding pattern (embed payload, publish directly, no repository reload) is in
+[`CLAUDE.md`](../CLAUDE.md#application-layer) — not repeated here.
+
+```mermaid
+flowchart LR
+  A["Aggregate raises domain event"] --> I["InsertOutboxMessagesInterceptor<br/>(same transaction)"]
+  I --> OB[("{schema}.outbox_messages")]
+  OB --> J["Quartz ProcessOutboxJob"]
+  J --> DEH["DomainEventHandler<br/>publishes IntegrationEvent"]
+  DEH --> BUS["IEventBus / MassTransit (in-memory)"]
+  BUS --> IB[("{schema}.inbox_messages<br/>idempotency")]
+  IB --> IEH["IntegrationEventHandler<br/>(consuming module)"]
+```
+
+---
+
+## 6. Cross-module data view
+
+One database, four shipped schemas. Per-table column detail lives in [`docs/modules/`](modules/);
+this is the whole-system relationship picture and the rules that govern cross-schema access.
+
+```mermaid
+erDiagram
+  users_users ||--o{ users_user_roles : has
+  users_roles ||--o{ users_user_roles : "granted to"
+  users_roles ||--o{ users_role_permissions : has
+  users_permissions ||--o{ users_role_permissions : "granted by"
+
+  catalog_templates ||--o{ catalog_template_themes : has
+  catalog_templates ||--o{ catalog_template_supported_sections : supports
+  catalog_templates ||--o{ catalog_template_section_variants : "has variants"
+
+  tenancy_tenants ||--o{ tenancy_tenant_section_entries : has
+
+  wedding_profiles ||--o{ wedding_partners : has
+  wedding_profiles ||--o{ wedding_story_moments : has
+  wedding_profiles ||--o{ wedding_entourage_groups : has
+  wedding_entourage_groups ||--o{ wedding_entourage_members : contains
+  wedding_entourage_groups ||--o{ wedding_entourage_couples : contains
+  wedding_profiles ||--o{ wedding_gallery_images : has
+  wedding_profiles ||--o{ wedding_gift_options : has
+  wedding_profiles ||--|| wedding_dress_code_configs : has
+  wedding_dress_code_configs ||--o{ wedding_dress_code_colors : has
+  wedding_dress_code_configs ||--o{ wedding_dress_code_images : has
+  wedding_profiles ||--o{ wedding_ceremony_acts : has
+  wedding_profiles ||--o{ wedding_vendor_credits : has
+  wedding_profiles ||--o{ wedding_reminders : has
+  wedding_profiles ||--|| wedding_snap_share_configs : has
+  wedding_profiles ||--o{ wedding_guest_photos : has
+
+  users_users ||--o{ tenancy_tenants : "owns (opaque ref)"
+  catalog_templates ||--o{ tenancy_tenants : "assigned (opaque ref)"
+  tenancy_tenants ||--|| wedding_profiles : "provisions (via event)"
+```
+
+> **Cross-schema relationships** (the last three edges above) are stored as opaque `Guid`s, never as
+> database foreign keys, and are never resolved with a cross-schema `JOIN` in application code. Each
+> module owns its schema; the connections are logical, realized through the integration-event map
+> below.
+
+### Integration-event map
+
+This is the real cross-module contract. No module queries another module's schema; any data a module
+needs from another it keeps as a **local copy**, kept consistent by these events.
+
+| Event | Published by | Consumed by | Effect on the consumer |
+|---|---|---|---|
+| `CatalogTemplateManifestChangedIntegrationEvent` | Catalog | Tenancy | Upserts a local `tenancy.catalog_templates` projection used to validate section/variant choices and compute the guest-upload limit — without touching the `catalog` schema |
+| `TenantProvisionedIntegrationEvent` | Tenancy | Weddings | Auto-creates the `Wedding` aggregate for the new tenant |
+| `TenantUploadLimitChangedIntegrationEvent` | Tenancy | Weddings | Syncs `Wedding.GuestPhotoUploadLimit` |
+| `UserRegisteredIntegrationEvent`, `UserProfileUpdatedIntegrationEvent` | Users | (none yet) | — |
+| `WeddingCreatedIntegrationEvent` | Weddings | (none yet) | — |
+
+The `tenancy.catalog_templates` table is the canonical example of the local-copy pattern: it is a
+read-model projection of the Catalog manifest, not a foreign key into `catalog`.
+
+### Cross-cutting data conventions
+
+- Primary keys are app-generated **UUIDv7** via strongly-typed `record struct` IDs (no `gen_random_uuid()`).
+- Mutable rows carry `created_at` / `updated_at` (`timestamptz`).
+- Ordered child tables carry `display_order int` — order is never inferred from insert time.
+- Closed vocabularies are stored as **`int` columns** (EF `HasConversion<int>()`), not native PG enums.
+- Every schema also has `outbox_messages` (+ `inbox_messages` where it consumes events).
+
+---
+
+## 7. Cross-cutting concerns
+
+### Host composition & startup
+`Program.cs` composes the host in order: `AddApplication([module application assemblies])` (MediatR +
+behaviors + FluentValidation) → `AddInfrastructure(...)` (MassTransit, Quartz hosted service,
+Npgsql/Dapper, Redis, OpenTelemetry) → `AddModuleConfiguration([...])` → health checks → per-module
+`Add{Module}Module(configuration)`. In Development, `app.ApplyMigrations()` applies EF migrations on
+startup.
+
+### Configuration & secrets
+Each module loads `modules.{name}.json` + `modules.{name}.Development.json` (via
+`AddModuleConfiguration`). Options are validated at startup with `ValidateOnStart`. Base files hold
+only non-secret defaults; keys that must be environment-provided are **omitted** from the base file
+(an empty string fails validation). Secrets come from environment variables in non-dev environments
+(e.g. `Weddings__PhotoStorage__AccessKey`).
+
+### Persistence
+One EF Core `DbContext` and one schema per module. Value objects and strongly-typed IDs map via EF
+value converters. Writes go through EF + `IUnitOfWork`; reads use Dapper via `IDbConnectionFactory`.
+Migrations are per module.
+
+### Observability
+Logging is Serilog (`UseSerilogRequestLogging` plus a trace-context middleware). Tracing is
+OpenTelemetry exported via OTLP, instrumenting ASP.NET Core, HttpClient, Npgsql, and MassTransit.
+Health checks (`/health`) cover PostgreSQL, Redis, and Keycloak.
+
+### Resilience
+Redis is optional in development: if the connection fails at startup, the host falls back to an
+in-memory distributed cache, and the Weddings module substitutes a `StubUploadSlotStore` for the
+Redis-backed slot store.
+
+---
+
+## 8. Architecture decisions
+
+Condensed records of the durable "why" behind the design.
+
+### Keycloak owns identity; the app keeps a shadow profile
+**Context:** password hashing, OAuth federation, token rotation, and brute-force protection are
+solved problems. **Decision:** Keycloak owns all credentials and federation; the `users.users` table
+is a shadow profile keyed by the JWT `sub` (`identity_id`), provisioned just-in-time on first login.
+**Consequence:** the app never stores passwords or provider tokens; `identity_id` is the only stable
+cross-system identifier (never key on email).
+
+### RBAC / permissions live in the app DB, not Keycloak
+**Context:** fine-grained permission codes change with business logic and must be queryable and
+testable without a running Keycloak. **Decision:** Keycloak answers "who are you?"; the Users module
+answers "what may you do?" via roles → permission codes resolved by `IPermissionService`.
+**Consequence:** authorization evolves independently of realm configuration.
+
+### Modular monolith with a schema per module
+**Context:** the domains are cohesive, but deploying them as microservices would be premature.
+**Decision:** one process, one database, a private schema per module; cross-module access only via
+`{X}.IntegrationEvents`. **Consequence:** strong boundaries today; mechanical extraction later.
+
+### No shared cross-schema PostgreSQL types
+**Context:** a shared PG enum/type referenced across schemas couples those schemas. **Decision:** each
+module stores its own `int` columns for closed vocabularies; shared values (e.g. tier) are mirrored
+and validated at the service layer, with the C# enum as the single definition. **Consequence:** no
+cross-schema coupling and no duplicated DB type to keep in sync.
+
+### Local data copies + integration events over synchronous cross-module calls
+**Context:** synchronous cross-module reads would re-introduce coupling. **Decision:** each module
+duplicates the few fields it needs and keeps them consistent via integration events (e.g. Tenancy's
+`catalog_templates` projection). **Consequence:** modules are reasoned about independently; reads
+never fan out across modules.
+
+### Transactional outbox/inbox for reliability
+**Context:** the transport is in-memory, but events must not be lost or applied twice. **Decision:**
+persist events to an outbox in the same transaction as the state change; consumers dedupe via an
+inbox. **Consequence:** at-least-once delivery with idempotent handling, independent of the transport.
+
+### Strongly-typed UUIDv7 identifiers
+**Context:** raw `Guid`s are easy to transpose and random UUIDs fragment indexes. **Decision:**
+app-generated UUIDv7 wrapped in `readonly record struct` IDs per aggregate. **Consequence:** type-safe
+IDs and time-ordered, index-friendly keys.
+
+> The RBAC baseline (seeded roles Admin/Couple/Guest and their permission codes) is documented in
+> [`docs/modules/users.md`](modules/users.md).
+```
diff --git a/docs/database-design.md b/docs/database-design.md
deleted file mode 100644
index aa66de2..0000000
--- a/docs/database-design.md
+++ /dev/null
@@ -1,1296 +0,0 @@
-# Database Design — Wedding Platform
-
-**Target**: PostgreSQL 17  
-**Architecture**: Modular Monolith (.NET 10) — one database, schema-namespaced modules  
-**Normal Form**: Third Normal Form (3NF) throughout
-
-> **About this document.** This is the original design draft. It captures the *intended* end-state schema and the rationale behind every modelling decision, so it still describes modules that are not yet built. **Section 1.1 records where the shipped .NET implementation deviates from this draft** — read it first, and treat the per-module docs under [`modules/`](modules/) as the source of truth for the four implemented modules (Weddings, Users, Catalog, Tenancy). The forward-looking schemas for RSVP and Guestbook below remain design intent.
-
----
-
-## 1. Domain Identification (Bounded Contexts)
-
-The modular monolith is organized into **six bounded contexts**. Each maps to a PostgreSQL schema.
-
-| Module | PG Schema | Status | Responsibility |
-|---|---|---|---|
-| **Users** | `users` | ✅ Built | Shadow user profiles (Keycloak owns credentials), RBAC permissions |
-| **Catalog** | `catalog` | ✅ Built | Template registry, theme definitions (mostly static) |
-| **Wedding** | `wedding` | ✅ Built | All couple/wedding content data |
-| **Tenancy** | `tenancy` | ✅ Built | Tenant lifecycle, hostname resolution, template assignment, section ordering |
-| **RSVP** | `rsvp` | ❌ Planned | Guest list, RSVP submissions |
-| **Guestbook** | `guestbook` | ❌ Planned | Public guest messages |
-
-Cross-cutting conventions:
-- All primary keys are `uuid` (the implementation uses **UUIDv7**, time-ordered, generated app-side via strongly-typed ID `record struct`s — not `gen_random_uuid()`).
-- All tables carry `created_at` / `updated_at` (`timestamptz`) where the row is mutable.
-- `display_order int NOT NULL` on every ordered child table — never infer order from insert time.
-- **Closed vocabularies are stored as `int` columns** in the implemented modules — EF Core maps each C# enum with `HasConversion<int>()`. The DDL below shows them as PostgreSQL `ENUM`/`CREATE TYPE` for readability, but the shipped tables use integer columns (with a `CHECK` constraint where a native enum is shown).
-
----
-
-## 1.1. Implementation status & deviations from this draft
-
-The following differences exist between this draft and the shipped .NET code. See [`modules/weddings.md`](modules/weddings.md), [`modules/users.md`](modules/users.md), and [`modules/catalog.md`](modules/catalog.md) for authoritative detail.
-
-**General**
-- The module the draft calls **IAM** is implemented as **Users** (PostgreSQL schema `users`). The draft sections and DDL below have been renamed accordingly.
-- IDs are app-generated **UUIDv7** via strongly-typed `record struct`s; there is no `gen_random_uuid()` default.
-- Every built schema also carries transactional-messaging tables: `outbox_messages` + `outbox_message_consumers` (and, for modules that consume events, `inbox_messages` + `inbox_message_consumers`). Catalog currently has outbox only.
-
-**Users (`users`) vs. IAM draft**
-- Tables: `users`, `roles`, `permissions`, `role_permissions`, `user_roles`. **`user_permission_grants` is not implemented** — there are no resource-scoped grants yet; authorization is role→permission only.
-- `users.users` columns are `id`, `identity_id` (the Keycloak `sub`; the draft called this `keycloak_user_id`), `email`, `first_name`, `last_name`, `phone_number` — there is no single `display_name`.
-- Role PK is the role `name` (text); Permission PK is the permission `code` (text, e.g. `users:read`, `users:update`, `catalog:manage`). Roles seeded: `Admin`, `Couple`, `Guest`.
-
-**Catalog (`catalog`) vs. draft**
-- `templates.id` is a **`uuid`** (UUIDv7), *not* a text slug like `'kapilya'`.
-- `templates.tier` is the int enum `TemplateTier` (`FirstClass = 1`, `Signature = 2`).
-- `SectionId` is an int enum with members `Hero, Story, Entourage, DressCode, Gallery, GiftGuide, Guestbook, Venue, Reminders, Rsvp, VendorCredits, SnapShare, GuestUploads` — different from the draft's hyphenated string set.
-- `template_section_variants` additionally carries `price_class` (`PriceClass`: Free/Pro/Plus) and a nullable `upload_limit`.
-- Theme `colors`/`typography`/`textures` and `templates.features` are `jsonb`.
-
-**Wedding (`wedding`) vs. draft**
-- `wedding.profiles` columns are `id`, `tenant_id` (unique), `schema_version`, `wedding_date`, `hashtag`, **`plan`** (int enum `WeddingPlan`: Free/Pro/Plus), `created_at`, `updated_at`. The draft's `livestream_url` and `message` columns are **not** present.
-- There are **no `wedding.events` or `wedding.venues` tables**. The ceremony program is modelled by `ceremony_acts` (with an `act_time`); event/venue modelling remains design intent.
-- A `wedding.guest_photos` table exists (SnapShare guest uploads) that the draft did not include — status int enum `GuestPhotoStatus` (Pending/Approved/Rejected/OverLimit).
-- `wedding.snap_share_configs` carries `upload_token`, `moderation_mode` (int), and `uploader_name_required` in addition to the draft's fields.
-- `entourage_group_type` adds `CoinBearers`, `BibleReaders`, and `LittleOnes`; `entourage_render_mode` and `gift_display_mode` are int columns.
-
-**Tenancy / RSVP / Guestbook** — not implemented. The schemas in §3.2, §3.5, §3.6 are design intent. Note the implemented Wedding module references `tenancy.tenants` only as an opaque `tenant_id` `Guid`; no `tenancy` schema or FK exists yet.
-
----
-
-## 2. ER Diagram
-
-```mermaid
-erDiagram
-
-  %% ─── USERS (IAM in the original draft) ──────────────────
-  users_users {
-    uuid id PK
-    text keycloak_user_id UK
-    text email UK
-    text display_name
-    timestamptz created_at
-    timestamptz updated_at
-  }
-
-  users_permissions {
-    uuid id PK
-    text name UK
-    text description
-  }
-
-  users_roles {
-    uuid id PK
-    text name UK
-    text description
-  }
-
-  users_role_permissions {
-    uuid role_id FK
-    uuid permission_id FK
-  }
-
-  users_user_roles {
-    uuid user_id FK
-    uuid role_id FK
-  }
-
-  users_user_permission_grants {
-    uuid id PK
-    uuid user_id FK
-    uuid permission_id FK
-    text resource_type
-    uuid resource_id
-    timestamptz created_at
-  }
-
-  %% ─── TENANCY ─────────────────────────────────────────────
-  tenancy_tenants {
-    uuid id PK
-    uuid owner_user_id FK
-    text slug
-    int tier
-    boolean published
-    timestamptz created_at
-    timestamptz updated_at
-  }
-
-  tenancy_tenant_hostnames {
-    uuid id PK
-    uuid tenant_id FK
-    text hostname
-    boolean is_primary
-    timestamptz created_at
-  }
-
-  tenancy_tenant_template_configs {
-    uuid id PK
-    uuid tenant_id FK
-    text template_id FK
-    int theme_index
-    timestamptz updated_at
-  }
-
-  tenancy_tenant_section_entries {
-    uuid id PK
-    uuid tenant_id FK
-    section_id section_id
-    boolean enabled
-    int display_order
-    text variant
-    text override_title
-    text override_subtitle
-  }
-
-  %% ─── CATALOG ─────────────────────────────────────────────
-  catalog_templates {
-    uuid id PK
-    text name
-    text description
-    int tier
-    text preview_image_url
-    jsonb features
-    timestamptz created_at
-  }
-
-  catalog_template_themes {
-    uuid id PK
-    text template_id FK
-    text name
-    int theme_index
-    jsonb colors
-    jsonb typography
-    jsonb textures
-    boolean is_dark
-  }
-
-  catalog_template_supported_sections {
-    uuid id PK
-    text template_id FK
-    section_id section_id
-    int display_order
-  }
-
-  catalog_template_section_variants {
-    uuid id PK
-    text template_id FK
-    section_id section_id
-    text variant
-    boolean is_default
-  }
-
-  %% ─── WEDDING ─────────────────────────────────────────────
-  wedding_profiles {
-    uuid id PK
-    uuid tenant_id FK
-    int schema_version
-    date wedding_date
-    text hashtag
-    text livestream_url
-    text message
-    timestamptz created_at
-    timestamptz updated_at
-  }
-
-  wedding_partners {
-    uuid id PK
-    uuid wedding_id FK
-    int partner_number
-    text first_name
-    text last_name
-    text bio
-    text image_url
-  }
-
-  wedding_events {
-    uuid id PK
-    uuid wedding_id FK
-    uuid venue_id FK
-    text name
-    event_type event_type
-    date event_date
-    time event_time
-    text description
-    text dress_code
-    timestamptz created_at
-  }
-
-  wedding_venues {
-    uuid id PK
-    text name
-    text address
-    numeric lat
-    numeric lng
-    text map_url
-    text image_url
-    timestamptz created_at
-  }
-
-  wedding_story_moments {
-    uuid id PK
-    uuid wedding_id FK
-    text title
-    date story_date
-    text description
-    text image_url
-    int display_order
-  }
-
-  wedding_entourage_groups {
-    uuid id PK
-    uuid wedding_id FK
-    text label
-    text subtitle
-    text group_type
-    entourage_render_mode render_as
-    int display_order
-  }
-
-  wedding_entourage_members {
-    uuid id PK
-    uuid wedding_id FK
-    uuid group_id FK "NOT NULL"
-    text name
-    text role
-    text image_url
-    text message
-    text note
-    int seed
-    int display_order
-  }
-
-  wedding_entourage_couples {
-    uuid id PK
-    uuid group_id FK
-    uuid member_a_id FK
-    uuid member_b_id FK
-    text note
-    int display_order
-  }
-
-  wedding_gallery_images {
-    uuid id PK
-    uuid wedding_id FK
-    text src_url
-    text alt_text
-    int width_px
-    int height_px
-    text caption
-    int display_order
-    timestamptz created_at
-  }
-
-  wedding_gift_options {
-    uuid id PK
-    uuid wedding_id FK
-    text title
-    text description
-    gift_display_mode display_mode
-    text link_url
-    text image_url
-    text qr_image_url
-    text account_name
-    text account_number
-    text account_type
-    int display_order
-  }
-
-  wedding_dress_code_configs {
-    uuid id PK
-    uuid wedding_id FK
-    text description
-  }
-
-  wedding_dress_code_colors {
-    uuid id PK
-    uuid dress_code_id FK
-    text color_hex
-    text color_name
-    int display_order
-  }
-
-  wedding_dress_code_images {
-    uuid id PK
-    uuid dress_code_id FK
-    text image_url
-    int display_order
-  }
-
-  wedding_ceremony_acts {
-    uuid id PK
-    uuid wedding_id FK
-    text name
-    text description
-    text icon
-    text act_time
-    int display_order
-  }
-
-  wedding_vendor_credits {
-    uuid id PK
-    uuid wedding_id FK
-    text name
-    text role
-    text website_url
-    text image_url
-    text instagram_handle
-    int display_order
-  }
-
-  wedding_reminders {
-    uuid id PK
-    uuid wedding_id FK
-    text icon
-    text title
-    text body
-    int display_order
-  }
-
-  wedding_snap_share_configs {
-    uuid id PK
-    uuid wedding_id FK
-    text instagram_handle
-    text cta_text
-    boolean enabled
-  }
-
-  %% ─── RSVP ────────────────────────────────────────────────
-  rsvp_guests {
-    uuid id PK
-    uuid wedding_id FK
-    text first_name
-    text last_name
-    text email
-    text mobile_number
-    text lookup_code
-    boolean plus_one_allowed
-    int table_number
-    text group_name
-    timestamptz created_at
-  }
-
-  rsvp_submissions {
-    uuid id PK
-    uuid wedding_id FK
-    uuid guest_id FK
-    text name
-    text email
-    text mobile_number
-    boolean attending
-    int guest_count
-    text plus_one_name
-    boolean plus_one_attending
-    text dietary_restrictions
-    text meal_choice
-    text message
-    text confirmation_id
-    inet ip_address
-    timestamptz submitted_at
-  }
-
-  rsvp_check_ins {
-    uuid id PK
-    uuid guest_id FK
-    uuid wedding_id FK
-    uuid event_id FK
-    timestamptz checked_in_at
-    text checked_in_by
-  }
-
-  %% ─── GUESTBOOK ────────────────────────────────────────────
-  guestbook_entries {
-    uuid id PK
-    uuid wedding_id FK
-    text guest_name
-    text message
-    boolean is_approved
-    inet ip_address
-    timestamptz submitted_at
-  }
-
-  %% ─── RELATIONSHIPS ────────────────────────────────────────
-  users_users ||--o{ users_user_roles : "has"
-  users_roles ||--o{ users_user_roles : "granted to"
-  users_roles ||--o{ users_role_permissions : "has"
-  users_permissions ||--o{ users_role_permissions : "granted by"
-  users_users ||--o{ users_user_permission_grants : "has"
-  users_permissions ||--o{ users_user_permission_grants : "granted by"
-  users_users ||--o{ tenancy_tenants : "owns"
-
-  tenancy_tenants ||--o{ tenancy_tenant_hostnames : "has"
-  tenancy_tenants ||--|| tenancy_tenant_template_configs : "uses"
-  tenancy_tenants ||--o{ tenancy_tenant_section_entries : "has"
-  catalog_templates ||--o{ tenancy_tenant_template_configs : "assigned to"
-
-  catalog_templates ||--o{ catalog_template_themes : "has"
-  catalog_templates ||--o{ catalog_template_supported_sections : "supports"
-  catalog_template_supported_sections ||--o{ catalog_template_section_variants : "has variants"
-
-  tenancy_tenants ||--|| wedding_profiles : "has"
-  wedding_profiles ||--o{ wedding_partners : "has"
-  wedding_profiles ||--o{ wedding_events : "has"
-  wedding_venues ||--o{ wedding_events : "hosts"
-  wedding_profiles ||--o{ wedding_story_moments : "has"
-  wedding_profiles ||--o{ wedding_entourage_groups : "has"
-  wedding_entourage_groups ||--o{ wedding_entourage_members : "contains"
-  wedding_entourage_groups ||--o{ wedding_entourage_couples : "contains"
-  wedding_profiles ||--o{ wedding_gallery_images : "has"
-  wedding_profiles ||--o{ wedding_gift_options : "has"
-  wedding_profiles ||--|| wedding_dress_code_configs : "has"
-  wedding_dress_code_configs ||--o{ wedding_dress_code_colors : "has"
-  wedding_dress_code_configs ||--o{ wedding_dress_code_images : "has"
-  wedding_profiles ||--o{ wedding_ceremony_acts : "has"
-  wedding_profiles ||--o{ wedding_vendor_credits : "has"
-  wedding_profiles ||--o{ wedding_reminders : "has"
-  wedding_profiles ||--|| wedding_snap_share_configs : "has"
-
-  wedding_profiles ||--o{ rsvp_guests : "has"
-  rsvp_guests ||--o{ rsvp_submissions : "submits"
-  wedding_profiles ||--o{ rsvp_submissions : "receives"
-  rsvp_guests ||--o{ rsvp_check_ins : "checked in via"
-  wedding_events ||--o{ rsvp_check_ins : "tracks attendance for"
-
-  wedding_profiles ||--o{ guestbook_entries : "receives"
-```
-
----
-
-## 3. Schema DDL
-
-### 3.1 — Users Module (IAM in the original draft)
-
-**Identity provider**: Keycloak. Keycloak owns all credentials, OAuth federation (Google, Facebook, etc.), session management, and token issuance. Your app never stores passwords or raw OAuth tokens. The only artifact Keycloak hands to the API is a signed JWT whose `sub` claim is the stable user identifier.
-
-**Auth flow summary**:
-```
-User logs in (any provider) → Keycloak → signed JWT
-API middleware → validate JWT signature (Keycloak JWKS) → extract sub
-              → SELECT * FROM users.users WHERE keycloak_user_id = sub
-              → if not found: INSERT shadow record (JIT provisioning)
-              → load roles + permissions → attach to request context
-```
-
-```sql
-CREATE SCHEMA users;
-
--- Shadow profile: Keycloak owns credentials, this table owns app context.
--- Created on first login via JIT provisioning (JWT sub → keycloak_user_id).
-CREATE TABLE users.users (
-  id               uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  keycloak_user_id text NOT NULL UNIQUE,   -- stable 'sub' claim from Keycloak JWT
-  email            text NOT NULL UNIQUE,   -- synced from JWT on each login
-  display_name     text,                   -- synced from Keycloak profile (optional)
-  created_at       timestamptz NOT NULL DEFAULT now(),
-  updated_at       timestamptz NOT NULL DEFAULT now()
-  -- NO password_hash  — Keycloak owns credentials
-  -- NO oauth_accounts — Keycloak owns all provider federation
-);
-
--- Atomic permission names. These are what service-layer policy checks resolve against.
-CREATE TABLE users.permissions (
-  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  name        text NOT NULL UNIQUE,  -- e.g. 'tenant:edit', 'wedding:edit'
-  description text
-);
-
--- Named roles that group permissions (RBAC layer).
-CREATE TABLE users.roles (
-  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  name        text NOT NULL UNIQUE,  -- 'super_admin', 'couple'
-  description text
-);
-
--- Which permissions each role grants.
-CREATE TABLE users.role_permissions (
-  role_id       uuid NOT NULL REFERENCES users.roles(id) ON DELETE CASCADE,
-  permission_id uuid NOT NULL REFERENCES users.permissions(id) ON DELETE CASCADE,
-  PRIMARY KEY (role_id, permission_id)
-);
-
--- Which roles each user holds.
-CREATE TABLE users.user_roles (
-  user_id uuid NOT NULL REFERENCES users.users(id) ON DELETE CASCADE,
-  role_id uuid NOT NULL REFERENCES users.roles(id) ON DELETE CASCADE,
-  PRIMARY KEY (user_id, role_id)
-);
-
--- Resource-scoped permission overrides.
--- Allows: "this user has tenant:edit on THIS specific tenant only".
--- NULL resource_id = permission applies globally across all resources of that type.
--- Evaluated after role_permissions; takes precedence for matching resource_id.
-CREATE TABLE users.user_permission_grants (
-  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  user_id       uuid NOT NULL REFERENCES users.users(id) ON DELETE CASCADE,
-  permission_id uuid NOT NULL REFERENCES users.permissions(id) ON DELETE CASCADE,
-  resource_type text,   -- 'tenant' | 'wedding' | NULL (global)
-  resource_id   uuid,   -- specific resource UUID; NULL = all resources of this type
-  created_at    timestamptz NOT NULL DEFAULT now(),
-  UNIQUE (user_id, permission_id, resource_type, resource_id)
-);
-```
-
-**Design notes**:
-- `users.oauth_accounts` from the original design is **removed** — Keycloak's internal DB tracks all provider federation. Your app is shielded from knowing whether a user authenticated via Google, Facebook, or a local Keycloak password.
-- `keycloak_user_id` is the only stable cross-system identifier. Never use `email` as a FK target — emails can change, Keycloak `sub` cannot.
-- The RBAC model is intentionally split into three layers: role-based (coarse, `users.user_roles` + `users.role_permissions`), then resource-scoped overrides (`users.user_permission_grants`). A `couple` user gets coarse permissions via their role, then a scoped grant ties those to their specific tenant on creation.
-- Permission resolution in the service layer: check resource-scoped grants first → fall back to role-based permissions. This is what Milan Jovanovic's `IPermissionService` pattern implements.
-
----
-
-### 3.2 — Tenancy Module
-
-```sql
-CREATE SCHEMA tenancy;
-
--- Tenant subscription tier. The tier *vocabulary* is owned by the Catalog module
--- (Catalog.TemplateTier: FirstClass = 1, Signature = 2, persisted as an integer).
--- Per the modular-monolith boundary rules, Tenancy does NOT share a cross-schema
--- PostgreSQL type with Catalog — it keeps its own integer tier column mirroring the
--- same values. A template may only be assigned to a tenant of a compatible tier
--- (validated at the service layer, not via a cross-schema DB constraint).
-
--- One tenant = one wedding website.
--- owner_user_id is the account that created the tenant (typically the couple).
--- Additional users (partner, coordinator, planner) are granted access via
--- users.user_permission_grants scoped to this tenant's id — not via this column.
--- Custom domains are stored in tenancy.tenant_hostnames, not here.
--- Having custom_domain as a column on this table was redundant with hostname rows
--- and has been removed.
-CREATE TABLE tenancy.tenants (
-  id              uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  owner_user_id   uuid NOT NULL REFERENCES users.users(id),
-  slug            text NOT NULL UNIQUE,          -- internal token; used once to generate the default hostname row
-  tier            int NOT NULL,                  -- mirrors Catalog.TemplateTier (1=FirstClass, 2=Signature)
-  published       boolean NOT NULL DEFAULT false,
-  created_at      timestamptz NOT NULL DEFAULT now(),
-  updated_at      timestamptz NOT NULL DEFAULT now()
-);
-
--- A tenant can have multiple hostnames (subdomain + custom domain)
-CREATE TABLE tenancy.tenant_hostnames (
-  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id   uuid NOT NULL REFERENCES tenancy.tenants(id) ON DELETE CASCADE,
-  hostname    text NOT NULL UNIQUE,
-  is_primary  boolean NOT NULL DEFAULT false,
-  created_at  timestamptz NOT NULL DEFAULT now()
-);
-
--- Each tenant uses exactly one template+theme combination at a time
-CREATE TABLE tenancy.tenant_template_configs (
-  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id   uuid NOT NULL UNIQUE REFERENCES tenancy.tenants(id) ON DELETE CASCADE,
-  template_id text NOT NULL REFERENCES catalog.templates(id),
-  theme_index int NOT NULL DEFAULT 0,
-  updated_at  timestamptz NOT NULL DEFAULT now()
-);
-
--- Section ordering and overrides per tenant (replaces sectionManifest JSON blob).
--- section_id references catalog.section_id — cross-schema type usage at the DB level
--- is intentional here; it enforces that only known section identifiers can be stored.
--- variant should match a row in catalog.template_section_variants for the tenant's
--- current template; validated at the service layer rather than via a DB FK to keep
--- template swaps non-destructive (a variant that was valid under the old template
--- stays in the row without causing a constraint error until the couple reconfigures).
-CREATE TABLE tenancy.tenant_section_entries (
-  id                uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id         uuid NOT NULL REFERENCES tenancy.tenants(id) ON DELETE CASCADE,
-  section_id        catalog.section_id NOT NULL,
-  enabled           boolean NOT NULL DEFAULT true,
-  display_order     int NOT NULL,
-  variant           text,
-  override_title    text,
-  override_subtitle text,
-  UNIQUE (tenant_id, section_id)
-);
-```
-
-**Normalization notes**:
-- `tenant_hostnames` is extracted into its own table (1NF: `hostnames: string[]` on the TypeScript type was a repeating group). `tenant_template_configs` is a 1:1 but kept separate because it evolves independently — changing template/theme is a distinct concern from tenant identity.
-- `tenancy.tenants.custom_domain` has been removed. It was redundant with `tenant_hostnames` — a custom domain is just another hostname row with `is_primary = true`. Keeping both created a dual write problem and an inconsistency risk. The `idx_tenant_hostnames_hostname` index now covers both subdomain and custom domain resolution with a single lookup path.
-- The tier vocabulary is owned by the **Catalog** module (`Catalog.TemplateTier`, an `int` enum). The planned `tenancy.tenants.tier` is a separate `int` column mirroring the same values — modules do not share a cross-schema PostgreSQL type (that would couple their schemas and violate the boundary rules). Compatibility between a tenant's tier and an assigned template's tier is validated at the service layer.
-- Multi-user access (couple + coordinator + planner) is not modeled via additional columns on `tenancy.tenants`. The `owner_user_id` captures who created the tenant. All additional access is granted through `users.user_permission_grants` rows scoped to the tenant's id — each collaborator gets only the permissions they need (`wedding:edit`, `rsvp:manage`, etc.) without sharing credentials or ownership.
-
----
-
-### 3.3 — Catalog Module
-
-```sql
-CREATE SCHEMA catalog;
-
--- All section identifiers the platform recognises. Defined in the catalog schema
--- because sections are a catalog concern — templates declare which ones they support.
--- Also referenced by tenancy.tenant_section_entries (cross-schema type usage is fine
--- at the DB level; application code still goes through the service layer).
-CREATE TYPE catalog.section_id AS ENUM (
-  'hero',
-  'our-story',
-  'entourage',
-  'schedule',
-  'map',
-  'dress-code',
-  'rsvp',
-  'gift-guide',
-  'gallery',
-  'guestbook',
-  'vendor-credits',
-  'ceremony-flow',
-  'countdown',
-  'snap-share',
-  'reminders'
-);
-
-CREATE TABLE catalog.templates (
-  id                text PRIMARY KEY,             -- 'kapilya', 'diwata', 'sage'
-  name              text NOT NULL,
-  description       text,
-  tier              int NOT NULL,                 -- Catalog.TemplateTier (1=FirstClass, 2=Signature)
-  preview_image_url text,
-  features          jsonb,                        -- TemplateFeatures (sparse flags)
-  created_at        timestamptz NOT NULL DEFAULT now()
-);
-
--- Each template has 2–4 named theme variants
-CREATE TABLE catalog.template_themes (
-  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  template_id text NOT NULL REFERENCES catalog.templates(id) ON DELETE CASCADE,
-  name        text NOT NULL,                      -- "Sacred Gold", "Cathedral Night"
-  theme_index int NOT NULL,
-  colors      jsonb NOT NULL,                     -- ThemeColors (11 tokens)
-  typography  jsonb NOT NULL,                     -- ThemeTypography (3 font slots)
-  textures    jsonb,                              -- ThemeTextures (optional)
-  is_dark     boolean NOT NULL DEFAULT false,
-  UNIQUE (template_id, theme_index)
-);
-
--- Which sections a given template supports and their default render order.
-CREATE TABLE catalog.template_supported_sections (
-  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  template_id   text NOT NULL REFERENCES catalog.templates(id) ON DELETE CASCADE,
-  section_id    catalog.section_id NOT NULL,
-  display_order int NOT NULL,
-  UNIQUE (template_id, section_id)
-);
-
--- Which variants each section exposes within a given template.
--- A variant is a named rendering style for a section — e.g. the hero section in
--- Kapilya supports 'parallax' (default) and 'minimal', while in Diwata it only
--- supports 'fullscreen'. This table is the source of truth for the variant picker
--- UI and validates the variant value stored in tenancy.tenant_section_entries.
--- A section with only one row here is effectively non-configurable (no picker shown).
-CREATE TABLE catalog.template_section_variants (
-  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  template_id   text NOT NULL REFERENCES catalog.templates(id) ON DELETE CASCADE,
-  section_id    catalog.section_id NOT NULL,
-  variant       text NOT NULL,
-  is_default    boolean NOT NULL DEFAULT false,
-  UNIQUE (template_id, section_id, variant),
-  -- Exactly one variant per section per template can be the default.
-  -- Enforced in application logic; a partial unique index keeps it honest.
-  CONSTRAINT one_default_per_section EXCLUDE USING btree (
-    template_id WITH =, section_id WITH =
-  ) WHERE (is_default = true)
-);
-```
-
-**Normalization notes**:
-- `features` stays as `jsonb` because it is a sparse set of boolean flags with no own identity, no foreign relationships, and it is only ever read/written atomically. The `themes[]` array in `TemplateManifest` is broken into `catalog.template_themes` rows (1NF).
-- `catalog.section_id` is a PostgreSQL ENUM covering all 15 platform section identifiers. It is defined in the catalog schema because sections are a catalog concern, and is reused by `tenancy.tenant_section_entries` at the DB level. This prevents unknown section identifiers from being stored in either table.
-- `catalog.template_section_variants` is a new table that records which rendering variants each section exposes within a given template, and which one is the default. Previously this was implicit knowledge baked into application code. Making it data-driven means the variant picker UI can be built from a query rather than hardcoded values, and invalid variants can be caught at the service layer on template assignment.
-- `tenancy.tenant_section_entries.variant` is not a FK into `catalog.template_section_variants` — this is intentional. If a couple switches templates, the old variant value stays in the row without causing a constraint error. The service layer validates the variant against the new template's variants and prompts reconfiguration only if needed.
-
----
-
-### 3.4 — Wedding Module
-
-```sql
-CREATE SCHEMA wedding;
-
--- Root aggregate for all wedding content
-CREATE TABLE wedding.profiles (
-  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id      uuid NOT NULL UNIQUE REFERENCES tenancy.tenants(id) ON DELETE CASCADE,
-  schema_version int NOT NULL DEFAULT 1,
-  wedding_date   date NOT NULL,             -- primary date for countdown, hero headline, and sort
-  hashtag        text,
-  livestream_url text,
-  message        text,
-  created_at     timestamptz NOT NULL DEFAULT now(),
-  updated_at     timestamptz NOT NULL DEFAULT now()
-);
-
--- Always exactly 2 partners; partner_number enforces that constraint.
--- Parents are modeled as entourage groups (see wedding.entourage_groups) so
--- each parent is an individual record with its own role, image, and message —
--- this accommodates single-parent households, stepparents, and deceased parents.
-CREATE TABLE wedding.partners (
-  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id     uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  partner_number int NOT NULL CHECK (partner_number IN (1, 2)),
-  first_name     text NOT NULL,
-  last_name      text NOT NULL,
-  bio            text,
-  image_url      text,
-  UNIQUE (wedding_id, partner_number)
-);
-
--- Venues are shared facts (reusable across events); not owned by any one wedding
-CREATE TABLE wedding.venues (
-  id         uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  name       text NOT NULL,
-  address    text NOT NULL,
-  lat        numeric(8,5) CHECK (lat BETWEEN -90 AND 90),
-  lng        numeric(8,5) CHECK (lng BETWEEN -180 AND 180),
-  map_url    text,
-  image_url  text,
-  created_at timestamptz NOT NULL DEFAULT now()
-);
-
--- Enum of recognized event types. Ordering is semantic, not ceremonial —
--- actual sort on rendering is (event_date ASC, event_time ASC NULLS LAST, event_type).
-CREATE TYPE wedding.event_type AS ENUM (
-  'civil_ceremony',
-  'ceremony',          -- religious / church
-  'cocktails',
-  'reception',
-  'after_party',
-  'rehearsal_dinner',
-  'other'
-);
-
--- A wedding can have multiple events (ceremony, reception, after-party).
--- Display order is derived from (event_date, event_time, event_type) — no
--- manual display_order column. If two events legitimately tie on all three,
--- a tiebreaker column can be added later; don't add it speculatively.
-CREATE TABLE wedding.events (
-  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id  uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  venue_id    uuid REFERENCES wedding.venues(id),
-  name        text NOT NULL,
-  event_type  wedding.event_type NOT NULL DEFAULT 'other',
-  event_date  date NOT NULL,
-  event_time  time,
-  description text,
-  dress_code  text,
-  created_at  timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE TABLE wedding.story_moments (
-  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  title         text NOT NULL,
-  story_date    date,
-  description   text NOT NULL,
-  image_url     text,
-  display_order int NOT NULL
-);
-
--- Closed vocabulary for how a group's members are laid out.
--- Consistent with wedding.event_type — use ENUM for any stable, bounded set of values.
-CREATE TYPE wedding.entourage_render_mode AS ENUM ('cards', 'list');
-
--- Semantic group type — lets the renderer apply type-specific layouts without
--- label-matching heuristics (e.g. principal sponsors always render as couples).
--- NULL = uncategorized / user-defined group; 'other' = explicitly generic.
-CREATE TYPE wedding.entourage_group_type AS ENUM (
-  'parents',
-  'principal_sponsors',
-  'secondary_sponsors',
-  'bridesmaids',
-  'groomsmen',
-  'flower_girls',
-  'ring_bearers',
-  'other'
-);
-
-CREATE TABLE wedding.entourage_groups (
-  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  label         text NOT NULL,                              -- display label, e.g. "Ninongs & Ninangs"
-  subtitle      text,
-  group_type    wedding.entourage_group_type,               -- NULL = fully custom group
-  render_as     wedding.entourage_render_mode NOT NULL DEFAULT 'cards',
-  display_order int NOT NULL
-);
-
--- Every member must belong to a group — there is no ungrouped member concept in
--- this schema. Import scripts should create a default group (e.g. "Wedding Party")
--- when migrating from a flat entourage array.
-CREATE TABLE wedding.entourage_members (
-  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  group_id      uuid NOT NULL REFERENCES wedding.entourage_groups(id) ON DELETE CASCADE,
-  name          text NOT NULL,
-  role          text NOT NULL,
-  image_url     text,
-  message       text,
-  note          text,
-  seed          int,                              -- for generative avatar placeholders
-  display_order int NOT NULL
-);
-
--- Pairs two existing entourage_members into a couple for rendering purposes.
--- This is a pure mapping table — each person's canonical data (name, image,
--- role, message) still lives on wedding.entourage_members. Render flow:
--- load group → load members → load couples for the group → if a member is
--- referenced by a couples row render as a pair, otherwise render solo.
--- Typical uses: Principal Sponsors (ninong/ninang pairs), Parents groups.
-CREATE TABLE wedding.entourage_couples (
-  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  group_id      uuid NOT NULL REFERENCES wedding.entourage_groups(id) ON DELETE CASCADE,
-  member_a_id   uuid NOT NULL REFERENCES wedding.entourage_members(id) ON DELETE CASCADE,
-  member_b_id   uuid NOT NULL REFERENCES wedding.entourage_members(id) ON DELETE CASCADE,
-  note          text,                     -- optional annotation shown under the pair
-  display_order int NOT NULL,
-  -- Canonical ordering: member_a_id < member_b_id (UUID comparison) ensures
-  -- (A, B) and (B, A) cannot both exist — prevents duplicate pairs with swapped slots.
-  CHECK (member_a_id < member_b_id),
-  UNIQUE (group_id, member_a_id, member_b_id)
-);
-
-CREATE TABLE wedding.gallery_images (
-  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  src_url       text NOT NULL,
-  alt_text      text NOT NULL,
-  width_px      int,
-  height_px     int,
-  caption       text,
-  display_order int NOT NULL,
-  created_at    timestamptz NOT NULL DEFAULT now()
-);
-
--- Gift options support three interaction patterns, chosen per-row via display_mode:
---   'link'           → tap opens link_url in a new tab (external registry, Honeyfund, etc.)
---   'modal_details'  → tap opens an in-site modal showing QR + account details (no redirect)
---   'inline_details' → card expands in place to reveal account details (no redirect)
--- A couple that only wants to accept bank/e-wallet gifts uses 'modal_details' or
--- 'inline_details' with qr_image_url + account_* fields and no link_url. A couple
--- with an external registry uses 'link' with just link_url. Mixed rows per wedding
--- are supported (e.g. one card per payment method, plus a registry card).
-CREATE TYPE wedding.gift_display_mode AS ENUM ('link', 'modal_details', 'inline_details');
-
-CREATE TABLE wedding.gift_options (
-  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id     uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  title          text NOT NULL,
-  description    text,
-  display_mode   wedding.gift_display_mode NOT NULL DEFAULT 'link',
-  link_url       text,                     -- required when display_mode = 'link'
-  image_url      text,                     -- card thumbnail (not the QR)
-  qr_image_url   text,                     -- bank / e-wallet QR code image
-  account_name   text,                     -- e.g. "Juan Dela Cruz"
-  account_number text,                     -- free-form string; formats vary by bank/e-wallet
-  account_type   text,                     -- e.g. "BPI Savings", "GCash", "Maya", "PayPal"
-  display_order  int NOT NULL
-);
-
--- 1:1 with wedding_profiles
-CREATE TABLE wedding.dress_code_configs (
-  id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id  uuid NOT NULL UNIQUE REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  description text NOT NULL
-);
-
--- Extracted from DressCodeConfig.palette: string[] (1NF)
-CREATE TABLE wedding.dress_code_colors (
-  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  dress_code_id  uuid NOT NULL REFERENCES wedding.dress_code_configs(id) ON DELETE CASCADE,
-  color_hex      text NOT NULL CHECK (color_hex ~ '^#[0-9A-Fa-f]{3,8}$'),
-  color_name     text NOT NULL,
-  display_order  int NOT NULL
-);
-
-CREATE TABLE wedding.dress_code_images (
-  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  dress_code_id  uuid NOT NULL REFERENCES wedding.dress_code_configs(id) ON DELETE CASCADE,
-  image_url      text NOT NULL,
-  display_order  int NOT NULL
-);
-
-CREATE TABLE wedding.ceremony_acts (
-  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  name          text NOT NULL,
-  description   text,
-  icon          text,
-  act_time      time,                             -- clock time; consistent with wedding.events.event_time
-  display_order int NOT NULL
-);
-
-CREATE TABLE wedding.vendor_credits (
-  id               uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id       uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  name             text NOT NULL,
-  role             text NOT NULL,
-  website_url      text,
-  image_url        text,
-  instagram_handle text,
-  display_order    int NOT NULL
-);
-
--- First-class tier only
-CREATE TABLE wedding.reminders (
-  id            uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id    uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  icon          text NOT NULL,
-  title         text NOT NULL,
-  body          text NOT NULL,
-  display_order int NOT NULL
-);
-
--- 1:1 with wedding_profiles. The wedding hashtag is canonical on
--- wedding.profiles.hashtag — this section reads from there rather than
--- storing its own copy. Only section-specific content lives here.
-CREATE TABLE wedding.snap_share_configs (
-  id               uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id       uuid NOT NULL UNIQUE REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  instagram_handle text,                                  -- section-scoped handle, if different from a profile-level one
-  cta_text         text,                                  -- optional call-to-action, e.g. "Tag us in your photos!"
-  enabled          boolean NOT NULL DEFAULT true
-);
-```
-
-**Normalization notes**:
-- `DressCodeConfig.palette: string[]` was a repeating group (violates 1NF) → extracted to `dress_code_colors`
-- `DressCodeConfig.images: string[]` same pattern → extracted to `dress_code_images`
-- `venues` is separated from `events` because venue data has its own identity and coordinates (avoids transitive dependency: event → venue_name → venue_address violates 3NF)
-- `dress_code_configs` and `snap_share_configs` are 1:1 tables to keep `wedding.profiles` narrow and allow these configs to evolve independently
-- `wedding.partners.parents` (free-text) was removed — parents are modeled as entourage groups so each parent has their own record (role, image, message). This accommodates single-parent households, stepparents, and deceased parents.
-- `wedding.events.display_order` was removed in favor of the `event_type` enum + `(event_date, event_time)` sort. The enum also unlocks semantic rendering (type badges, ceremony-specific sections linking to the ceremony event).
-- `wedding.entourage_couples` is a pure mapping table — it does not duplicate member names. Each person's canonical data lives on `wedding.entourage_members`; the couples table only groups two members into a rendered pair.
-- `wedding.snap_share_configs.hashtag` was removed — the hashtag is canonical on `wedding.profiles.hashtag` and all rendering reads from there. Storing it twice was a modeling smell (the same concept spelled two ways).
-- `wedding.gift_options` supports three interaction modes (`link`, `modal_details`, `inline_details`) so a couple can mix external registry links with inline bank/QR gift cards in the same section without two separate tables.
-- `wedding.entourage_render_mode` and `wedding.gift_display_mode` are PostgreSQL ENUMs — consistent with `wedding.event_type`. Any closed vocabulary with bounded values uses an ENUM rather than a `text CHECK (... IN (...))` constraint.
-- `wedding.entourage_group_type` ENUM allows the renderer to apply type-specific layouts (e.g. principal sponsors always render as couples) without matching on label strings. NULL means a fully custom user-defined group.
-- `wedding.entourage_members.group_id` is `NOT NULL` — there is no ungrouped member concept in this schema. The flat `entourage[]` array from the TypeScript document model is resolved to a default group on import.
-- `wedding.entourage_couples` enforces `CHECK (member_a_id < member_b_id)` — UUID comparison provides a canonical ordering that prevents the same pair from being registered twice with swapped member slots.
-- `wedding.profiles.wedding_date` is the canonical primary date for countdown rendering, hero headline, and sort. Individual event dates live on `wedding.events`; this avoids loading all events just to determine the primary date.
-- `wedding.dress_code_colors.color_hex` enforces `CHECK (color_hex ~ '^#[0-9A-Fa-f]{3,8}$')` — validates hex format at the DB boundary rather than relying solely on application-layer validation.
-- `wedding.ceremony_acts.act_time` uses the `time` type, consistent with `wedding.events.event_time`.
-
----
-
-### 3.5 — RSVP Module
-
-```sql
-CREATE SCHEMA rsvp;
-
--- Pre-seeded guest list (managed by couple).
--- Each guest gets a lookup_code — a short, unguessable token (e.g. 'K4X9-MJ2R')
--- that is the basis for QR code generation. The QR is not stored here; it is
--- generated on demand by the application from the lookup URL:
---   https://{hostname}/rsvp/{lookup_code}
--- Scanning the QR pre-fills the RSVP form and on the wedding day triggers check-in.
-CREATE TABLE rsvp.guests (
-  id               uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id       uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  first_name       text NOT NULL,
-  last_name        text NOT NULL,
-  email            text,
-  mobile_number    text,                         -- for SMS reminders or WhatsApp invites
-  lookup_code      text NOT NULL UNIQUE,         -- crypto-random token; drives QR generation
-  plus_one_allowed boolean NOT NULL DEFAULT false,
-  table_number     int,
-  group_name       text,
-  created_at       timestamptz NOT NULL DEFAULT now()
-);
-
--- Immutable append-only RSVP submissions (audit log).
--- name, email, and mobile_number are intentionally denormalized — they capture
--- what the guest typed at submission time, not the couple's corrected guest list entry.
-CREATE TABLE rsvp.submissions (
-  id                   uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id           uuid NOT NULL REFERENCES wedding.profiles(id),
-  guest_id             uuid REFERENCES rsvp.guests(id),  -- NULL for anonymous walk-in
-  name                 text NOT NULL,                    -- denormalized for audit trail
-  email                text,
-  mobile_number        text,                             -- denormalized for audit trail
-  attending            boolean NOT NULL,
-  guest_count          int NOT NULL DEFAULT 1,
-  plus_one_name        text,
-  plus_one_attending   boolean,
-  dietary_restrictions text,
-  meal_choice          text,
-  message              text,
-  confirmation_id      text NOT NULL UNIQUE DEFAULT gen_random_uuid()::text,
-  ip_address           inet,
-  submitted_at         timestamptz NOT NULL DEFAULT now()
-);
-
--- Day-of attendance tracking. One row per guest per event they physically attend.
--- Populated by scanning the guest's QR code at the venue entrance.
--- Scoped to a specific event so multi-event weddings (ceremony + reception +
--- after-party) can be tracked independently — a guest might attend the ceremony
--- but not the reception, and the coordinator needs per-event head counts.
--- checked_in_by records the staff member or device that performed the scan.
-CREATE TABLE rsvp.check_ins (
-  id             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  guest_id       uuid NOT NULL REFERENCES rsvp.guests(id) ON DELETE CASCADE,
-  wedding_id     uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  event_id       uuid REFERENCES wedding.events(id) ON DELETE SET NULL,  -- NULL = general check-in
-  checked_in_at  timestamptz NOT NULL DEFAULT now(),
-  checked_in_by  text,                                  -- staff name or scanner device ID
-  UNIQUE (guest_id, event_id)                           -- a guest checks in once per event
-);
-```
-
-**Normalization notes**:
-- `rsvp.submissions.name`, `email`, and `mobile_number` are intentionally denormalized — they capture what the guest typed at submission time, which is the correct audit record even if the couple later edits the guest list entry. This is controlled denormalization justified by immutability.
-- `rsvp.guests.lookup_code` is `NOT NULL` — every guest must have a token. It is the basis for QR code generation and the RSVP self-lookup URL. The QR image itself is not stored; it is generated on demand by the application from `https://{hostname}/rsvp/{lookup_code}`.
-- `rsvp.check_ins` is a separate table rather than a `checked_in_at` column on `rsvp.guests` because a wedding has multiple events. A guest may attend the ceremony but not the reception — per-event rows with `event_id` capture this granularity and enable independent head counts per event. The `UNIQUE (guest_id, event_id)` constraint prevents double check-in to the same event.
-- `rsvp.check_ins.event_id` is nullable — `NULL` means a general wedding-day check-in not scoped to a specific event, which covers simpler single-event weddings without requiring the coordinator to select an event during the scan.
-
----
-
-### 3.6 — Guestbook Module
-
-```sql
-CREATE SCHEMA guestbook;
-
-CREATE TABLE guestbook.entries (
-  id           uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  wedding_id   uuid NOT NULL REFERENCES wedding.profiles(id) ON DELETE CASCADE,
-  guest_name   text NOT NULL,
-  message      text NOT NULL,
-  is_approved  boolean NOT NULL DEFAULT true,
-  ip_address   inet,
-  submitted_at timestamptz NOT NULL DEFAULT now()
-);
-```
-
----
-
-## 4. Indexes
-
-```sql
--- Users: JWT validation and permission resolution
-CREATE UNIQUE INDEX idx_users_users_keycloak_user_id ON users.users (keycloak_user_id);
-CREATE INDEX idx_users_user_roles_user_id ON users.user_roles (user_id);
-CREATE INDEX idx_users_user_permission_grants_user_id ON users.user_permission_grants (user_id, resource_type, resource_id);
-
--- Tenant resolution hot path (middleware, every request)
--- custom_domain index removed — custom domains are now hostname rows in tenant_hostnames,
--- so idx_tenant_hostnames_hostname covers both subdomain and custom domain lookups.
-CREATE INDEX idx_tenant_hostnames_hostname ON tenancy.tenant_hostnames (hostname);
-CREATE INDEX idx_tenants_slug ON tenancy.tenants (slug);
-
--- Wedding content lookups by wedding_id (all child tables)
--- Events sort derives from (event_date, event_time, event_type) — see DDL comment.
-CREATE INDEX idx_wedding_events_wedding_id ON wedding.events (wedding_id, event_date, event_time);
-CREATE INDEX idx_wedding_story_moments_wedding_id ON wedding.story_moments (wedding_id, display_order);
-CREATE INDEX idx_wedding_entourage_groups_wedding_id ON wedding.entourage_groups (wedding_id, display_order);
-CREATE INDEX idx_wedding_entourage_members_group_id ON wedding.entourage_members (group_id, display_order);
-CREATE INDEX idx_wedding_entourage_couples_group_id ON wedding.entourage_couples (group_id, display_order);
-CREATE INDEX idx_wedding_gallery_images_wedding_id ON wedding.gallery_images (wedding_id, display_order);
-
--- RSVP lookups
-CREATE INDEX idx_rsvp_guests_lookup_code ON rsvp.guests (lookup_code);   -- QR scan hot path
-CREATE INDEX idx_rsvp_guests_wedding_id ON rsvp.guests (wedding_id);
-CREATE INDEX idx_rsvp_submissions_wedding_id ON rsvp.submissions (wedding_id);
-CREATE INDEX idx_rsvp_submissions_guest_id ON rsvp.submissions (guest_id);
-
--- Check-in tallying (per-event head counts and per-guest lookups)
-CREATE INDEX idx_rsvp_check_ins_wedding_event ON rsvp.check_ins (wedding_id, event_id);
-CREATE INDEX idx_rsvp_check_ins_guest_id ON rsvp.check_ins (guest_id);
-
--- Guestbook lookups
-CREATE INDEX idx_guestbook_entries_wedding_id ON guestbook.entries (wedding_id, submitted_at DESC);
-```
-
----
-
-## 5. Module Boundary Rules
-
-In a modular monolith, application code must respect these cross-module access rules. Direct cross-schema JOINs are only permitted in infrastructure/repository layers, not in service or use-case layers.
-
-| From Module | May directly query | Must call service API for |
-|---|---|---|
-| **Tenancy** | `users.users` (FK lookup only) | — |
-| **Catalog** | — | — |
-| **Wedding** | `tenancy.tenants` (FK lookup only) | `rsvp`, `guestbook` |
-| **RSVP** | `wedding.profiles` (FK lookup only) | `tenancy`, `users` |
-| **Guestbook** | `wedding.profiles` (FK lookup only) | `tenancy`, `users` |
-
----
-
-## 6. Design Decisions & Tradeoffs
-
-### Why Keycloak instead of managing credentials directly?
-
-Keycloak takes the full identity stack off the application: password hashing, OAuth provider federation (Google, Facebook, Apple, etc.), token rotation, brute-force protection, and session management are all handled externally. The app's `users` schema shrinks to a shadow profile table and an RBAC model — the parts only the application can own.
-
-The key consequence is that `users.oauth_accounts` (from a self-managed design) disappears entirely. Whether a user logged in via Google or a local password is Keycloak's concern. The API only ever sees a validated JWT `sub` claim, which maps to `users.users.keycloak_user_id`. This identifier is stable for the lifetime of the user regardless of which provider they used.
-
-### Why keep RBAC in the app DB and not in Keycloak?
-
-Keycloak can carry role claims inside JWTs via realm/client roles. But fine-grained permissions — especially resource-scoped ones ("can edit *this specific tenant*") — are better owned by the application DB because:
-- They change frequently as business logic evolves, without needing a Keycloak realm reconfiguration
-- They can be queried relationally (e.g., "list all users with access to this tenant")
-- They are testable in isolation without a running Keycloak instance
-
-Keycloak handles authentication ("who are you?"). The `users` schema handles authorization ("what can you do, and to what?").
-
-### Why not store `WeddingDocument` as a single JSONB column?
-
-The current Phase 1–2 implementation stores content as a JSON file on disk. That works for read-only rendering but breaks down for Phase 3 because:
-- You cannot query inside JSON without `jsonb` operators (slow, no index benefit for list operations)
-- You cannot enforce referential integrity on embedded objects (e.g., RSVP guest IDs)
-- Partial updates (edit one story moment) require fetching and rewriting the entire document
-
-The normalized schema solves all three. The existing `migrateDocument()` migration utility maps directly to the `schema_version` column on `wedding.profiles`.
-
-### Why keep `catalog.template_themes.colors` as JSONB?
-
-`ThemeColors` has 11 tightly-coupled color tokens. They are always read and written together atomically (selecting a theme), have no individual queryability requirement, and a flat table of 11 columns would add schema churn every time a new token is added. JSONB is correct here.
-
-### Why is `wedding.venues` its own table?
-
-The TypeScript `WeddingEvent` embeds `venue: VenueInfo` inline. If kept that way in the DB, `event → venue_name → venue_address` is a transitive dependency (violates 3NF). More practically, the same venue appears in multiple events (ceremony at Church X, reception also at Church X) — normalization eliminates that duplication.
-
-### How do section variants work across the catalog and tenancy modules?
-
-Variants are a two-layer concept. The catalog layer defines what is *available* — `catalog.template_section_variants` records every named rendering style a section exposes within a specific template, with one marked as the default. The tenancy layer records what a specific couple *chose* — `tenancy.tenant_section_entries.variant` stores the selected variant for that couple's site.
-
-The flow at tenant creation is: read the template's supported sections from `catalog.template_supported_sections`, create a `tenant_section_entries` row for each one, and populate `variant` from the `is_default = true` row in `catalog.template_section_variants`. From then on the couple can change their variant through the site editor, which writes back to their `tenant_section_entries` row.
-
-The reason `variant` in `tenant_section_entries` is not a hard FK into `catalog.template_section_variants` is template switching. If a couple changes from Kapilya to Diwata, Diwata may not support the same variants. A FK would cause an immediate constraint violation on every section entry. Instead the service layer validates variants against the new template's options at switch time and resets any that are no longer valid.
-
-### Why was `custom_domain` removed from `tenancy.tenants`?
-
-Having `custom_domain` as a column on the tenant plus rows in `tenant_hostnames` for the same concept created two problems: any write (adding or changing a custom domain) had to touch two places and stay in sync, and the middleware hostname resolution needed to query both tables or apply different logic depending on whether the incoming hostname was a subdomain or a custom domain. Removing the column and storing all hostnames — subdomain and custom — as rows in `tenant_hostnames` means resolution is always a single `WHERE hostname = $1` regardless of hostname type. The `is_primary` flag identifies which one is canonical for outbound links and redirects.
-
-### Which module owns the `tier` vocabulary?
-
-**Catalog owns it.** `Catalog.TemplateTier` (`FirstClass = 1`, `Signature = 2`) is an `int` enum on `catalog.templates`, and is the source of truth for the tier values. The planned `tenancy.tenants.tier` mirrors the same integer values in its own column.
-
-An earlier draft defined a shared `tenancy.tenant_tier` PostgreSQL type and referenced it from `catalog.templates` — that is **not** how the system is built. A cross-schema DB type couples the two schemas together and breaks the modular-monolith rule that each module owns its own schema. Instead, each module stores its own `int` tier column, and tenant↔template tier compatibility is checked at the service layer when a template is assigned. There is no duplicate enum to keep in sync because the C# `TemplateTier` enum (compiled once, in Catalog) is the single definition.
-
-### Why is multi-user access handled via `users.user_permission_grants` rather than a tenant members table?
-
-A dedicated `tenancy.tenant_members` join table would work, but it duplicates the concern owned by the Users module. `users.user_permission_grants` (a planned table — not yet built) would model resource-scoped grants: a coordinator could be given `rsvp:manage` on a specific tenant without getting `wedding:edit`. A separate members table would require the application to check two places when resolving access. Keeping authorization in the Users module lets roles evolve independently of tenant structure.
-
-### Why do couples pre-list guests instead of allowing open RSVP?
-
-A wedding website is publicly accessible by URL. Without a pre-seeded guest list acting as a whitelist, anyone who finds the link could submit an RSVP — which breaks headcount management for catered events and table assignments. The guest list model means the RSVP form is a *confirmation of an existing invitation*, not an open registration. It also lets the couple control plus-one allowances, pre-assign table numbers, and group guests by family before any form is submitted. The `rsvp.guests` table is the invite manifest; `rsvp.submissions` is the response log.
-
-### How does the QR code check-in system work?
-
-Each guest has a `lookup_code` — a short, crypto-random token (e.g. `K4X9-MJ2R`) generated when they are added to the guest list. The QR code encodes their personal RSVP URL: `https://{hostname}/rsvp/{lookup_code}`. The image is never stored in the database — it is generated on demand from the lookup code by the application, keeping the DB lean.
-
-The token serves two roles at different points in time:
-
-- **Before the wedding**: guest scans QR → lands on their pre-filled RSVP page → submits → `rsvp.submissions` row created linked to their `rsvp.guests` record
-- **On the wedding day**: coordinator scans the same QR at the venue entrance → application resolves the lookup code → creates a row in `rsvp.check_ins` marking the guest as arrived for that specific event
-
-Tallying is then a simple count query:
-
-```sql
--- Head count per event
-SELECT event_id, COUNT(*) FROM rsvp.check_ins
-WHERE wedding_id = $1 GROUP BY event_id;
-
--- Guests who RSVP'd attending but haven't checked in yet
-SELECT g.first_name, g.last_name, g.table_number
-FROM rsvp.guests g
-JOIN rsvp.submissions s ON s.guest_id = g.id AND s.attending = true
-LEFT JOIN rsvp.check_ins c ON c.guest_id = g.id AND c.event_id = $2
-WHERE g.wedding_id = $1 AND c.id IS NULL;
-```
-
-The `UNIQUE (guest_id, event_id)` constraint on `rsvp.check_ins` prevents a guest being scanned in twice to the same event, which is the main operational risk at a busy venue entrance.
-
-### Why is `rsvp.submissions.name` denormalized?
-
-RSVP submissions are an immutable audit log. If a couple later corrects a guest's name in `rsvp.guests`, the submission record should reflect *what was submitted*, not the corrected name. This is controlled denormalization with a documented reason — accepted in database design when it preserves historical accuracy.
-
-### Content migration path from JSON files
-
-```
-Phase 3 migration plan:
-  1. Create schemas and run DDL
-  2. Write a one-off import script: loadContent(ref) → WeddingDocument → INSERT into wedding.* tables
-  3. Update TenantConfig.contentRef to reference a UUID (wedding_profiles.id) instead of a filename
-  4. Update resolveTenant() + loadContent() to query the DB instead of the filesystem
-  5. Remove content/*.json files once validated
-```
-
----
-
-## 7. Modular Monolith — module layout
-
-The six bounded contexts map to .NET modules under `src/Modules/{Name}/`, each a five-project vertical slice:
-
-```
-src/Modules/{Name}/
-├── Eternelle.Modules.{Name}.Domain/            ← aggregates, VOs, domain events, repository interfaces
-├── Eternelle.Modules.{Name}.Application/       ← commands, queries, handlers, validators
-├── Eternelle.Modules.{Name}.Infrastructure/    ← EF Core DbContext, repositories, migrations, jobs (queries the {schema}.* tables)
-├── Eternelle.Modules.{Name}.Presentation/      ← minimal-API endpoints, integration-event handlers
-└── Eternelle.Modules.{Name}.IntegrationEvents/ ← integration event classes only
-```
-
-Cross-module access is restricted to a module's `IntegrationEvents` project — no module references another's `Domain`/`Application`/`Infrastructure`. Each module owns its own `DbContext` and schema; there is no shared client across schemas. Synchronous reads use local data copies kept consistent via integration events (Outbox/Inbox + MassTransit). This is the boundary that makes extraction to a microservice mechanical later. See [`module-conventions.md`](module-conventions.md) for the full rules.
-
----
-
-## 8. Seed Data
-
-Run this once after the initial migration to establish the permission/role baseline. All subsequent business logic assumes these rows exist.
-
-```sql
--- ─── Permissions ──────────────────────────────────────────────────────────────
-INSERT INTO users.permissions (name, description) VALUES
-  ('tenant:edit',          'Edit tenant configuration, section manifest, and template assignment'),
-  ('tenant:publish',       'Publish or unpublish a tenant site'),
-  ('wedding:edit',         'Edit all wedding content (couple, events, story, gallery, etc.)'),
-  ('rsvp:manage',          'View guest list, export RSVPs, and manage submissions'),
-  ('guestbook:moderate',   'Approve or delete guestbook entries'),
-  ('catalog:manage',       'Create, edit, or delete templates and themes in the catalog');
-
--- ─── Roles ────────────────────────────────────────────────────────────────────
-INSERT INTO users.roles (name, description) VALUES
-  ('super_admin', 'Platform administrator — full access to all modules'),
-  ('couple',      'Wedding couple — scoped access to their own tenant and wedding content');
-
--- ─── Role → Permission mappings ───────────────────────────────────────────────
--- super_admin gets every permission (globally, no resource scoping needed)
-INSERT INTO users.role_permissions (role_id, permission_id)
-SELECT r.id, p.id
-FROM   users.roles r, users.permissions p
-WHERE  r.name = 'super_admin';
-
--- couple role gets operational permissions (resource-scoped grants are added on tenant creation)
-INSERT INTO users.role_permissions (role_id, permission_id)
-SELECT r.id, p.id
-FROM   users.roles r
-JOIN   users.permissions p ON p.name IN (
-         'tenant:edit',
-         'tenant:publish',
-         'wedding:edit',
-         'rsvp:manage',
-         'guestbook:moderate'
-       )
-WHERE  r.name = 'couple';
-```
-
-**On-tenant-creation hook** — when a new tenant is provisioned for a couple, also insert a resource-scoped grant so their role permissions resolve against only their tenant:
-
-```sql
--- Called from tenancy.service.ts after INSERT INTO tenancy.tenants
-INSERT INTO users.user_permission_grants (user_id, permission_id, resource_type, resource_id)
-SELECT :user_id, p.id, 'tenant', :tenant_id
-FROM   users.permissions p
-WHERE  p.name IN ('tenant:edit', 'tenant:publish', 'wedding:edit', 'rsvp:manage', 'guestbook:moderate');
-```
-
-**Permission resolution order** (implemented in `IamService.hasPermission`):
-
-```
-1. Is user super_admin? → allow immediately
-2. Does user have a resource-scoped grant for (permission, resource_type, resource_id)? → allow
-3. Does user's role include the permission AND resource_id is NULL (global role grant)? → allow
-4. → deny
-```
diff --git a/docs/modules/README.md b/docs/modules/README.md
index b17fc64..0cf1f9d 100644
--- a/docs/modules/README.md
+++ b/docs/modules/README.md
@@ -1,6 +1,6 @@
 # Module Reference
 
-Per-module reference documentation. For the conventions every module follows, see [`../module-conventions.md`](../module-conventions.md); for the cross-module data model, see [`../database-design.md`](../database-design.md).
+Per-module reference documentation. For the conventions every module follows, see [`../module-conventions.md`](../module-conventions.md); for the system architecture and cross-module data model, see [`../architecture.md`](../architecture.md).
 
 | Module | Schema | Status | Doc |
 |---|---|---|---|

From 31aaba6fcef6eb90a73041762a8df77f975caeb9 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Fri, 29 May 2026 22:41:34 +0800
Subject: [PATCH 109/155] Eternelle-191 Remove weddings inbox/outbox plan;
 update logging filters

Removed the weddings inbox/outbox alignment plan from the solution. Added warning-level log filters for Catalog, Tenancy, and Rsvp module Outbox and Inbox components in development settings.
---
 Eternelle.slnx                                     | 1 -
 src/API/Eternelle.Api/appsettings.Development.json | 8 +++++++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/Eternelle.slnx b/Eternelle.slnx
index bca0092..9cfbe9d 100644
--- a/Eternelle.slnx
+++ b/Eternelle.slnx
@@ -14,7 +14,6 @@
   <Folder Name="/docs/superpowers/" />
   <Folder Name="/docs/superpowers/plans/">
     <File Path="docs/superpowers/plans/2026-05-20-users-module.md" />
-    <File Path="docs/superpowers/plans/2026-05-24-weddings-inbox-outbox-alignment.md" />
     <File Path="docs/superpowers/plans/2026-05-27-catalog-module.md" />
     <File Path="docs/superpowers/plans/2026-05-28-tenancy-module.md" />
     <File Path="docs/superpowers/plans/2026-05-29-rsvp-module.md" />
diff --git a/src/API/Eternelle.Api/appsettings.Development.json b/src/API/Eternelle.Api/appsettings.Development.json
index 0e710be..0d8b616 100644
--- a/src/API/Eternelle.Api/appsettings.Development.json
+++ b/src/API/Eternelle.Api/appsettings.Development.json
@@ -26,7 +26,13 @@
         "Eternelle.Modules.Weddings.Infrastructure.Outbox": "Warning",
         "Eternelle.Modules.Weddings.Infrastructure.Inbox": "Warning",
         "Eternelle.Modules.Users.Infrastructure.Outbox": "Warning",
-        "Eternelle.Modules.Users.Infrastructure.Inbox": "Warning"
+        "Eternelle.Modules.Users.Infrastructure.Inbox": "Warning",
+        "Eternelle.Modules.Catalog.Infrastructure.Outbox": "Warning",
+        "Eternelle.Modules.Catalog.Infrastructure.Inbox": "Warning",
+        "Eternelle.Modules.Tenancy.Infrastructure.Outbox": "Warning",
+        "Eternelle.Modules.Tenancy.Infrastructure.Inbox": "Warning",
+        "Eternelle.Modules.Rsvp.Infrastructure.Outbox": "Warning",
+        "Eternelle.Modules.Rsvp.Infrastructure.Inbox": "Warning"
       }
     },
     "WriteTo": [

From ee60578e98d72ee7000d697dd6df355efb63ab59 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sat, 30 May 2026 16:59:33 +0800
Subject: [PATCH 110/155] Eternelle-191 Refactor RSVP queries to use Dapper and
 SQL projections

Refactored RSVP module query handlers to use Dapper and direct SQL via IDbConnectionFactory, replacing repository/domain model access for guest and submission queries. Improved error handling, added query validation, and updated ProcessOutboxJob for cancellation support. Enhanced enum validation, upsert logic, and documentation. Introduced WeddingErrors for consistent error reporting.
---
 Eternelle.slnx                                |   3 +
 docs/architecture.md                          |   6 +-
 .../Guests/AddGuest/AddGuestCommandHandler.cs |   2 +-
 .../Guests/GetGuest/GetGuestQueryHandler.cs   | 103 +++++++++----
 .../ListGuests/ListGuestsQueryHandler.cs      | 106 +++++++------
 .../ListGuests/ListGuestsQueryValidator.cs    |  12 ++
 .../RegenerateGuestTokenCommandHandler.cs     |  10 +-
 .../GetInvitationQueryHandler.cs              | 139 ++++++++++++++----
 .../GetHeadcount/GetHeadcountQueryHandler.cs  |  89 ++++++-----
 .../GetSubmissionQueryHandler.cs              | 109 ++++++++++----
 .../ListSubmissionsQueryHandler.cs            |  57 ++++---
 .../SubmitOnBehalfCommandHandler.cs           |  10 +-
 .../Guests/Guest.cs                           |   2 +-
 .../Submissions/RsvpSubmission.cs             |   2 +
 .../Weddings/WeddingErrors.cs                 |   9 ++
 .../Outbox/ProcessOutboxJob.cs                |  28 ++--
 .../RsvpSubmissionConfiguration.cs            |   2 +-
 .../Weddings/WeddingProjection.cs             |   4 +
 .../Submissions/ListSubmissionsEndpoint.cs    |   4 +-
 19 files changed, 460 insertions(+), 237 deletions(-)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/WeddingErrors.cs

diff --git a/Eternelle.slnx b/Eternelle.slnx
index 9cfbe9d..838fa31 100644
--- a/Eternelle.slnx
+++ b/Eternelle.slnx
@@ -17,12 +17,15 @@
     <File Path="docs/superpowers/plans/2026-05-27-catalog-module.md" />
     <File Path="docs/superpowers/plans/2026-05-28-tenancy-module.md" />
     <File Path="docs/superpowers/plans/2026-05-29-rsvp-module.md" />
+    <File Path="docs/superpowers/plans/2026-05-30-album-module.md" />
   </Folder>
   <Folder Name="/docs/superpowers/specs/">
     <File Path="docs/superpowers/specs/2026-05-20-users-module-design.md" />
     <File Path="docs/superpowers/specs/2026-05-27-catalog-module-design.md" />
     <File Path="docs/superpowers/specs/2026-05-28-tenancy-module-design.md" />
     <File Path="docs/superpowers/specs/2026-05-29-rsvp-module-design.md" />
+    <File Path="docs/superpowers/specs/2026-05-30-album-module-design.md" />
+    <File Path="docs/superpowers/specs/2026-05-30-guestbook-module-design.md" />
   </Folder>
   <Folder Name="/Solution Items/">
     <File Path=".editorconfig" />
diff --git a/docs/architecture.md b/docs/architecture.md
index 3a29d59..f34b07e 100644
--- a/docs/architecture.md
+++ b/docs/architecture.md
@@ -97,6 +97,7 @@ Every module builds on four shared projects. This is what a module gets "for fre
 it implements.
 
 ### `Common.Domain`
+
 | Contract | Purpose |
 |---|---|
 | `Entity` | Aggregate-root base; buffers domain events (`Raise`, `DomainEvents`, `ClearDomainEvents`) |
@@ -106,6 +107,7 @@ it implements.
 | `People.*`, `Text.*` | Shared value objects (`PersonName`, `Email`, `PhoneNumber`, `RichDescription`, …) lifted to Common when a second module needs them |
 
 ### `Common.Application`
+
 | Contract | Purpose |
 |---|---|
 | `ICommand` / `ICommand<T>` / `IQuery<T>` + handlers | MediatR message contracts |
@@ -117,6 +119,7 @@ it implements.
 | `ClaimsPrincipalExtensions`, `CustomClaims` | Reading identity / permission claims off the JWT |
 
 ### `Common.Infrastructure`
+
 | Contract | Purpose |
 |---|---|
 | `AuthenticationExtensions`, `JwtBearerConfigureOptions` | Keycloak JWT bearer setup (JWKS validation) |
@@ -127,6 +130,7 @@ it implements.
 | `SerializerSettings`, `DateTimeProvider` | JSON serialization; system clock |
 
 ### `Common.Presentation`
+
 | Contract | Purpose |
 |---|---|
 | `IEndpoint`, `EndpointExtensions` | Minimal-API endpoint registration (assembly-scanned) |
@@ -272,7 +276,7 @@ needs from another it keeps as a **local copy**, kept consistent by these events
 | `TenantProvisionedIntegrationEvent` | Tenancy | Weddings | Auto-creates the `Wedding` aggregate for the new tenant |
 | `TenantUploadLimitChangedIntegrationEvent` | Tenancy | Weddings | Syncs `Wedding.GuestPhotoUploadLimit` |
 | `UserRegisteredIntegrationEvent`, `UserProfileUpdatedIntegrationEvent` | Users | (none yet) | — |
-| `WeddingCreatedIntegrationEvent` | Weddings | (none yet) | — |
+| `WeddingCreatedIntegrationEvent` | Weddings | RSVP | Creates a local `rsvp.weddings` projection — handled by `WeddingCreatedIntegrationEventHandler` in `RsvpModule` |
 
 The `tenancy.catalog_templates` table is the canonical example of the local-copy pattern: it is a
 read-model projection of the Catalog manifest, not a foreign key into `catalog`.
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs
index 71c0bd2..e003a81 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs
@@ -24,7 +24,7 @@ public async Task<Result<Guid>> Handle(AddGuestCommand command, CancellationToke
         Wedding? wedding = await weddings.GetAsync(weddingId, cancellationToken);
         if (wedding is null)
         {
-            return Result.Failure<Guid>(GuestErrors.NotFound(GuestId.Empty));
+            return Result.Failure<Guid>(WeddingErrors.NotFound(weddingId));
         }
 
         Result<PersonFirstName> firstResult = PersonFirstName.Create(command.FirstName);
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs
index a0c9e83..13c22b1 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs
@@ -1,49 +1,96 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Rsvp.Domain.Guests;
-using Eternelle.Modules.Rsvp.Domain.Submissions;
-using Eternelle.Modules.Rsvp.Domain.Weddings;
 
 namespace Eternelle.Modules.Rsvp.Application.Guests.GetGuest;
 
-internal sealed class GetGuestQueryHandler(
-    IGuestRepository guestRepository,
-    IRsvpSubmissionRepository submissionRepository) : IQueryHandler<GetGuestQuery, GuestResponse>
+internal sealed class GetGuestQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetGuestQuery, GuestResponse>
 {
     public async Task<Result<GuestResponse>> Handle(GetGuestQuery query, CancellationToken cancellationToken)
     {
-        var guestId = new GuestId(query.GuestId);
-        Guest? guest = await guestRepository.GetByIdAsync(guestId, cancellationToken);
-        if (guest is null || guest.WeddingId != new WeddingId(query.WeddingId))
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        const string guestSql =
+            $"""
+             SELECT
+                 id                 AS {nameof(GuestRow.Id)},
+                 wedding_id         AS {nameof(GuestRow.WeddingId)},
+                 first_name         AS {nameof(GuestRow.FirstName)},
+                 last_name          AS {nameof(GuestRow.LastName)},
+                 email              AS {nameof(GuestRow.Email)},
+                 mobile_number      AS {nameof(GuestRow.MobileNumber)},
+                 lookup_code        AS {nameof(GuestRow.LookupCode)},
+                 allowed_companions AS {nameof(GuestRow.AllowedCompanions)},
+                 table_number       AS {nameof(GuestRow.TableNumber)},
+                 group_name         AS {nameof(GuestRow.GroupName)},
+                 is_locked          AS {nameof(GuestRow.IsLocked)},
+                 locked_at_utc      AS {nameof(GuestRow.LockedAtUtc)},
+                 created_at         AS {nameof(GuestRow.CreatedAtUtc)},
+                 updated_at         AS {nameof(GuestRow.UpdatedAtUtc)}
+             FROM rsvp.guests
+             WHERE id = @GuestId AND wedding_id = @WeddingId
+             """;
+
+        GuestRow? guest = await connection.QuerySingleOrDefaultAsync<GuestRow>(
+            new CommandDefinition(guestSql, new { query.GuestId, query.WeddingId }, cancellationToken: cancellationToken));
+
+        if (guest is null)
         {
-            return Result.Failure<GuestResponse>(GuestErrors.NotFound(guestId));
+            return Result.Failure<GuestResponse>(GuestErrors.NotFound(new GuestId(query.GuestId)));
         }
 
-        RsvpSubmission? latest = await submissionRepository.GetLatestByGuestAsync(new GuestId(query.GuestId), cancellationToken);
+        const string submissionSql =
+            $"""
+             SELECT
+                 s.id          AS {nameof(SubmissionSummaryResponse.SubmissionId)},
+                 s.attending   AS {nameof(SubmissionSummaryResponse.Attending)},
+                 (SELECT COUNT(*) FROM rsvp.submission_companions sc WHERE sc.submission_id = s.id)
+                               AS {nameof(SubmissionSummaryResponse.CompanionCount)},
+                 s.submitted_at AS {nameof(SubmissionSummaryResponse.SubmittedAtUtc)}
+             FROM rsvp.submissions s
+             WHERE s.guest_id = @GuestId
+             ORDER BY s.submitted_at DESC
+             LIMIT 1
+             """;
 
-        var response = new GuestResponse(
-            guest.Id.Value,
-            guest.WeddingId.Value,
-            guest.FirstName.Value,
-            guest.LastName.Value,
-            guest.Email?.Value,
-            guest.MobileNumber?.Value,
-            guest.LookupCode.Value,
+        SubmissionSummaryResponse? latest = await connection.QuerySingleOrDefaultAsync<SubmissionSummaryResponse>(
+            new CommandDefinition(submissionSql, new { query.GuestId }, cancellationToken: cancellationToken));
+
+        return Result.Success(new GuestResponse(
+            guest.Id,
+            guest.WeddingId,
+            guest.FirstName,
+            guest.LastName,
+            guest.Email,
+            guest.MobileNumber,
+            guest.LookupCode,
             guest.AllowedCompanions,
             guest.TableNumber,
-            guest.GroupName?.Value,
+            guest.GroupName,
             guest.IsLocked,
             guest.LockedAtUtc,
             guest.CreatedAtUtc,
             guest.UpdatedAtUtc,
-            latest is null
-                ? null
-                : new SubmissionSummaryResponse(
-                    latest.Id.Value,
-                    latest.Attending,
-                    latest.Companions.Count,
-                    latest.SubmittedAtUtc));
-
-        return Result.Success(response);
+            latest));
     }
+
+    private sealed record GuestRow(
+        Guid Id,
+        Guid WeddingId,
+        string FirstName,
+        string LastName,
+        string? Email,
+        string? MobileNumber,
+        string LookupCode,
+        int AllowedCompanions,
+        int? TableNumber,
+        string? GroupName,
+        bool IsLocked,
+        DateTime? LockedAtUtc,
+        DateTime CreatedAtUtc,
+        DateTime UpdatedAtUtc);
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs
index 7bc04c4..da5be35 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs
@@ -1,68 +1,64 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
-using Eternelle.Modules.Rsvp.Domain.Guests;
-using Eternelle.Modules.Rsvp.Domain.Submissions;
-using Eternelle.Modules.Rsvp.Domain.Weddings;
 
 namespace Eternelle.Modules.Rsvp.Application.Guests.ListGuests;
 
-internal sealed class ListGuestsQueryHandler(
-    IGuestRepository guestRepository,
-    IRsvpSubmissionRepository submissionRepository) : IQueryHandler<ListGuestsQuery, IReadOnlyList<GuestSummaryResponse>>
+internal sealed class ListGuestsQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<ListGuestsQuery, IReadOnlyList<GuestSummaryResponse>>
 {
     public async Task<Result<IReadOnlyList<GuestSummaryResponse>>> Handle(ListGuestsQuery query, CancellationToken cancellationToken)
     {
-        IReadOnlyList<Guest> guests = await guestRepository.ListByWeddingAsync(new WeddingId(query.WeddingId), cancellationToken);
-        IReadOnlyList<RsvpSubmission> submissions = await submissionRepository.ListByWeddingAsync(new WeddingId(query.WeddingId), cancellationToken);
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
 
-        var latestByGuest = submissions
-            .Where(s => s.GuestId is not null)
-            .GroupBy(s => s.GuestId!.Value)
-            .ToDictionary(g => g.Key, g => g.OrderByDescending(s => s.SubmittedAtUtc).First());
+        const string sql =
+            $"""
+             WITH latest_sub AS (
+                 SELECT DISTINCT ON (guest_id)
+                     id,
+                     guest_id,
+                     attending
+                 FROM rsvp.submissions
+                 WHERE guest_id IS NOT NULL
+                 ORDER BY guest_id, submitted_at DESC
+             ),
+             companion_count AS (
+                 SELECT submission_id, COUNT(*)::int AS cnt
+                 FROM rsvp.submission_companions
+                 GROUP BY submission_id
+             )
+             SELECT
+                 g.id                 AS {nameof(GuestSummaryResponse.Id)},
+                 g.first_name         AS {nameof(GuestSummaryResponse.FirstName)},
+                 g.last_name          AS {nameof(GuestSummaryResponse.LastName)},
+                 g.allowed_companions AS {nameof(GuestSummaryResponse.AllowedCompanions)},
+                 g.group_name         AS {nameof(GuestSummaryResponse.GroupName)},
+                 g.table_number       AS {nameof(GuestSummaryResponse.TableNumber)},
+                 g.is_locked          AS {nameof(GuestSummaryResponse.IsLocked)},
+                 ls.attending         AS {nameof(GuestSummaryResponse.LatestAttending)},
+                 COALESCE(cc.cnt, 0)  AS {nameof(GuestSummaryResponse.LatestCompanionCount)},
+                 g.lookup_code        AS {nameof(GuestSummaryResponse.LookupCode)}
+             FROM rsvp.guests g
+             LEFT JOIN latest_sub ls ON ls.guest_id = g.id
+             LEFT JOIN companion_count cc ON cc.submission_id = ls.id
+             WHERE g.wedding_id = @WeddingId
+               AND (@GroupName IS NULL OR g.group_name = @GroupName)
+               AND (@IsLocked IS NULL OR g.is_locked = @IsLocked)
+               AND (
+                   @AttendingState IS NULL
+                   OR (@AttendingState = 'attending' AND ls.attending = true)
+                   OR (@AttendingState = 'declined'  AND ls.attending = false)
+                   OR (@AttendingState = 'no_response' AND ls.id IS NULL)
+               )
+             ORDER BY g.last_name, g.first_name
+             LIMIT @Take OFFSET @Skip
+             """;
 
-        IEnumerable<Guest> filtered = guests;
+        IEnumerable<GuestSummaryResponse> rows = await connection.QueryAsync<GuestSummaryResponse>(
+            new CommandDefinition(sql, query, cancellationToken: cancellationToken));
 
-        if (query.GroupName is not null)
-        {
-            filtered = filtered.Where(g => g.GroupName?.Value == query.GroupName);
-        }
-
-        if (query.IsLocked is not null)
-        {
-            filtered = filtered.Where(g => g.IsLocked == query.IsLocked);
-        }
-
-        if (query.AttendingState is not null)
-        {
-            filtered = query.AttendingState switch
-            {
-                "attending" => filtered.Where(g => latestByGuest.TryGetValue(g.Id, out RsvpSubmission? s) && s.Attending),
-                "declined" => filtered.Where(g => latestByGuest.TryGetValue(g.Id, out RsvpSubmission? s) && !s.Attending),
-                "no_response" => filtered.Where(g => !latestByGuest.ContainsKey(g.Id)),
-                _ => filtered
-            };
-        }
-
-        IReadOnlyList<GuestSummaryResponse> result = filtered
-            .Skip(query.Skip)
-            .Take(query.Take)
-            .Select(g =>
-            {
-                latestByGuest.TryGetValue(g.Id, out RsvpSubmission? latest);
-                return new GuestSummaryResponse(
-                    g.Id.Value,
-                    g.FirstName.Value,
-                    g.LastName.Value,
-                    g.AllowedCompanions,
-                    g.GroupName?.Value,
-                    g.TableNumber,
-                    g.IsLocked,
-                    latest?.Attending,
-                    latest?.Companions.Count ?? 0,
-                    g.LookupCode.Value);
-            })
-            .ToList();
-
-        return Result.Success(result);
+        return Result.Success<IReadOnlyList<GuestSummaryResponse>>(rows.ToList());
     }
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs
new file mode 100644
index 0000000..f00d4b4
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.ListGuests;
+
+internal sealed class ListGuestsQueryValidator : AbstractValidator<ListGuestsQuery>
+{
+    public ListGuestsQueryValidator()
+    {
+        RuleFor(q => q.WeddingId).NotEmpty();
+        RuleFor(q => q.Take).InclusiveBetween(1, 100).WithMessage("Take must be between 1 and 100.");
+    }
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs
index 08de3c7..0f47730 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs
@@ -24,8 +24,9 @@ public async Task<Result<string>> Handle(RegenerateGuestTokenCommand command, Ca
             return Result.Failure<string>(GuestErrors.NotFound(guestId));
         }
 
-        LookupCode newCode;
-        while (true)
+        const int maxAttempts = 5;
+        LookupCode? newCode = null;
+        for (int attempt = 0; attempt < maxAttempts; attempt++)
         {
             string raw = tokenGenerator.GenerateLookupCode();
             if (!await guestRepository.LookupCodeExistsAsync(raw, cancellationToken))
@@ -35,6 +36,11 @@ public async Task<Result<string>> Handle(RegenerateGuestTokenCommand command, Ca
             }
         }
 
+        if (newCode is null)
+        {
+            return Result.Failure<string>(GuestErrors.LookupCodeAlreadyTaken);
+        }
+
         guest.RegenerateLookupCode(newCode, clock.UtcNow);
 
         guestRepository.Update(guest);
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs
index 82a7ac0..9507431 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs
@@ -1,73 +1,148 @@
+using System.Data.Common;
+using Dapper;
 using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Data;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
-using Eternelle.Modules.Rsvp.Domain.Guests;
 using Eternelle.Modules.Rsvp.Domain.Shared;
-using Eternelle.Modules.Rsvp.Domain.Submissions;
-using Eternelle.Modules.Rsvp.Domain.Weddings;
 
 namespace Eternelle.Modules.Rsvp.Application.Public.GetInvitation;
 
 internal sealed class GetInvitationQueryHandler(
-    IGuestRepository guestRepository,
-    IWeddingProjection weddingProjection,
-    IRsvpSubmissionRepository submissionRepository,
+    IDbConnectionFactory dbConnectionFactory,
     IDateTimeProvider clock) : IQueryHandler<GetInvitationQuery, InvitationResponse>
 {
+    private static readonly Error NotFound =
+        Error.NotFound("Rsvp.Invitation.NotFound", "Not found.");
+
     public async Task<Result<InvitationResponse>> Handle(GetInvitationQuery query, CancellationToken cancellationToken)
     {
         Result<LookupCode> codeResult = LookupCode.Create(query.LookupCode);
         if (codeResult.IsFailure)
         {
-            return Result.Failure<InvitationResponse>(
-                Error.NotFound("Rsvp.Invitation.NotFound", "Not found."));
+            return Result.Failure<InvitationResponse>(NotFound);
         }
 
-        Guest? guest = await guestRepository.GetByLookupCodeAsync(codeResult.Value.Value, cancellationToken);
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        const string guestSql =
+            $"""
+             SELECT
+                 id                 AS {nameof(GuestRow.Id)},
+                 wedding_id         AS {nameof(GuestRow.WeddingId)},
+                 first_name         AS {nameof(GuestRow.FirstName)},
+                 last_name          AS {nameof(GuestRow.LastName)},
+                 allowed_companions AS {nameof(GuestRow.AllowedCompanions)},
+                 is_locked          AS {nameof(GuestRow.IsLocked)}
+             FROM rsvp.guests
+             WHERE lookup_code = @LookupCode
+             """;
+
+        string normalizedCode = codeResult.Value.Value;
+        GuestRow? guest = await connection.QuerySingleOrDefaultAsync<GuestRow>(
+            new CommandDefinition(guestSql, new { LookupCode = normalizedCode }, cancellationToken: cancellationToken));
+
         if (guest is null)
         {
-            return Result.Failure<InvitationResponse>(
-                Error.NotFound("Rsvp.Invitation.NotFound", "Not found."));
+            return Result.Failure<InvitationResponse>(NotFound);
         }
 
-        Wedding? wedding = await weddingProjection.GetAsync(guest.WeddingId, cancellationToken);
+        const string weddingSql =
+            $"""
+             SELECT
+                 wedding_date   AS {nameof(WeddingRow.WeddingDate)},
+                 rsvp_deadline  AS {nameof(WeddingRow.RsvpDeadline)},
+                 is_closed      AS {nameof(WeddingRow.IsClosed)}
+             FROM rsvp.weddings
+             WHERE id = @WeddingId
+             """;
+
+        WeddingRow? wedding = await connection.QuerySingleOrDefaultAsync<WeddingRow>(
+            new CommandDefinition(weddingSql, new { guest.WeddingId }, cancellationToken: cancellationToken));
+
         if (wedding is null)
         {
-            return Result.Failure<InvitationResponse>(
-                Error.NotFound("Rsvp.Invitation.NotFound", "Not found."));
+            return Result.Failure<InvitationResponse>(NotFound);
         }
 
-        RsvpSubmission? latest = await submissionRepository.GetLatestByGuestAsync(guest.Id, cancellationToken);
+        const string submissionSql =
+            $"""
+             SELECT
+                 id            AS {nameof(SubmissionRow.Id)},
+                 attending     AS {nameof(SubmissionRow.Attending)},
+                 dietary_note  AS {nameof(SubmissionRow.DietaryNote)},
+                 message       AS {nameof(SubmissionRow.Message)},
+                 submitted_at  AS {nameof(SubmissionRow.SubmittedAtUtc)}
+             FROM rsvp.submissions
+             WHERE guest_id = @GuestId
+             ORDER BY submitted_at DESC
+             LIMIT 1
+             """;
 
-        bool isAccepting = wedding.IsAcceptingSubmissions(DateOnly.FromDateTime(clock.UtcNow.Date)) && !guest.IsLocked;
+        SubmissionRow? latest = await connection.QuerySingleOrDefaultAsync<SubmissionRow>(
+            new CommandDefinition(submissionSql, new { GuestId = guest.Id }, cancellationToken: cancellationToken));
 
-        SubmissionDetailResponse? currentSubmission = null;
+        IReadOnlyList<CompanionResponse> companions = [];
         if (latest is not null)
         {
-            var companions = latest.Companions
-                .OrderBy(c => c.DisplayOrder)
-                .Select(c => new CompanionResponse(c.Name.Value, c.Attending, c.DietaryNote?.Value))
-                .ToList();
+            const string companionSql =
+                $"""
+                 SELECT
+                     name         AS {nameof(CompanionResponse.Name)},
+                     attending    AS {nameof(CompanionResponse.Attending)},
+                     dietary_note AS {nameof(CompanionResponse.DietaryNote)}
+                 FROM rsvp.submission_companions
+                 WHERE submission_id = @SubmissionId
+                 ORDER BY display_order
+                 """;
+
+            companions = [.. await connection.QueryAsync<CompanionResponse>(
+                new CommandDefinition(companionSql, new { SubmissionId = latest.Id }, cancellationToken: cancellationToken))];
+        }
+
+        var today = DateOnly.FromDateTime(clock.UtcNow.Date);
+        bool isAccepting = !wedding.IsClosed
+            && (wedding.RsvpDeadline is null || today <= wedding.RsvpDeadline)
+            && !guest.IsLocked;
 
-            currentSubmission = new SubmissionDetailResponse(
-                latest.Id.Value,
+        SubmissionDetailResponse? currentSubmission = latest is null
+            ? null
+            : new SubmissionDetailResponse(
+                latest.Id,
                 latest.Attending,
-                latest.DietaryNote?.Value,
-                latest.Message?.Value,
+                latest.DietaryNote,
+                latest.Message,
                 companions,
                 latest.SubmittedAtUtc);
-        }
 
-        var response = new InvitationResponse(
-            guest.FirstName.Value,
-            guest.LastName.Value,
+        return Result.Success(new InvitationResponse(
+            guest.FirstName,
+            guest.LastName,
             guest.AllowedCompanions,
             wedding.WeddingDate,
             wedding.RsvpDeadline,
             guest.IsLocked,
             isAccepting,
-            currentSubmission);
-
-        return Result.Success(response);
+            currentSubmission));
     }
+
+    private sealed record GuestRow(
+        Guid Id,
+        Guid WeddingId,
+        string FirstName,
+        string LastName,
+        int AllowedCompanions,
+        bool IsLocked);
+
+    private sealed record WeddingRow(
+        DateOnly WeddingDate,
+        DateOnly? RsvpDeadline,
+        bool IsClosed);
+
+    private sealed record SubmissionRow(
+        Guid Id,
+        bool Attending,
+        string? DietaryNote,
+        string? Message,
+        DateTime SubmittedAtUtc);
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs
index c8274b8..921fc1b 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs
@@ -1,53 +1,64 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
-using Eternelle.Modules.Rsvp.Domain.Guests;
-using Eternelle.Modules.Rsvp.Domain.Submissions;
-using Eternelle.Modules.Rsvp.Domain.Weddings;
 
 namespace Eternelle.Modules.Rsvp.Application.Submissions.GetHeadcount;
 
-internal sealed class GetHeadcountQueryHandler(
-    IGuestRepository guestRepository,
-    IRsvpSubmissionRepository submissionRepository) : IQueryHandler<GetHeadcountQuery, HeadcountResponse>
+internal sealed class GetHeadcountQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetHeadcountQuery, HeadcountResponse>
 {
     public async Task<Result<HeadcountResponse>> Handle(GetHeadcountQuery query, CancellationToken cancellationToken)
     {
-        var weddingId = new WeddingId(query.WeddingId);
-        IReadOnlyList<Guest> guests = await guestRepository.ListByWeddingAsync(weddingId, cancellationToken);
-        IReadOnlyList<RsvpSubmission> submissions = await submissionRepository.ListByWeddingAsync(weddingId, cancellationToken);
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
 
-        var latestByGuest = submissions
-            .Where(s => s.GuestId is not null)
-            .GroupBy(s => s.GuestId!.Value)
-            .ToDictionary(g => g.Key, g => g.OrderByDescending(s => s.SubmittedAtUtc).First());
+        const string sql =
+            $"""
+             WITH latest_sub AS (
+                 SELECT DISTINCT ON (guest_id)
+                     id,
+                     guest_id,
+                     attending
+                 FROM rsvp.submissions
+                 WHERE guest_id IS NOT NULL
+                 ORDER BY guest_id, submitted_at DESC
+             ),
+             attending_companions AS (
+                 SELECT submission_id, COUNT(*)::int AS cnt
+                 FROM rsvp.submission_companions
+                 WHERE attending = true
+                 GROUP BY submission_id
+             )
+             SELECT
+                 g.group_name AS {nameof(GroupRow.GroupName)},
+                 SUM(CASE WHEN ls.id IS NOT NULL AND ls.attending = true  THEN 1 ELSE 0 END)::int AS {nameof(GroupRow.Attending)},
+                 SUM(CASE WHEN ls.id IS NOT NULL AND ls.attending = false THEN 1 ELSE 0 END)::int AS {nameof(GroupRow.Declined)},
+                 SUM(CASE WHEN ls.id IS NULL                             THEN 1 ELSE 0 END)::int AS {nameof(GroupRow.NoResponse)},
+                 SUM(CASE WHEN ls.attending = true THEN 1 + COALESCE(ac.cnt, 0) ELSE 0 END)::int AS {nameof(GroupRow.TotalAttendingPeople)}
+             FROM rsvp.guests g
+             LEFT JOIN latest_sub ls ON ls.guest_id = g.id
+             LEFT JOIN attending_companions ac ON ac.submission_id = ls.id
+             WHERE g.wedding_id = @WeddingId
+             GROUP BY g.group_name
+             ORDER BY g.group_name NULLS FIRST
+             """;
 
-        int attending = 0, declined = 0, noResponse = 0, totalPeople = 0;
-        var byGroup = new Dictionary<string, (int a, int d, int n)>();
-        const string noGroupSentinel = "";
-        foreach (Guest g in guests)
-        {
-            string groupKey = g.GroupName?.Value ?? noGroupSentinel;
-            byGroup.TryGetValue(groupKey, out (int a, int d, int n) bucket);
-            if (!latestByGuest.TryGetValue(g.Id, out RsvpSubmission? latest))
-            {
-                noResponse++; bucket.n++;
-            }
-            else if (latest!.Attending)
-            {
-                attending++; bucket.a++;
-                totalPeople += 1 + latest.Companions.Count(c => c.Attending);
-            }
-            else
-            {
-                declined++; bucket.d++;
-            }
-            byGroup[groupKey] = bucket;
-        }
+        List<GroupRow> rows = [.. await connection.QueryAsync<GroupRow>(
+            new CommandDefinition(sql, query, cancellationToken: cancellationToken))];
 
         return Result.Success(new HeadcountResponse(
-            attending, declined, noResponse, totalPeople,
-            [.. byGroup.Select(kv => new GroupHeadcount(
-                kv.Key.Length == 0 ? null : kv.Key,
-                kv.Value.a, kv.Value.d, kv.Value.n))]));
+            rows.Sum(r => r.Attending),
+            rows.Sum(r => r.Declined),
+            rows.Sum(r => r.NoResponse),
+            rows.Sum(r => r.TotalAttendingPeople),
+            [.. rows.Select(r => new GroupHeadcount(r.GroupName, r.Attending, r.Declined, r.NoResponse))]));
     }
+
+    private sealed record GroupRow(
+        string? GroupName,
+        int Attending,
+        int Declined,
+        int NoResponse,
+        int TotalAttendingPeople);
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs
index 7739c7c..9e2dde2 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs
@@ -1,49 +1,96 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Rsvp.Domain.Submissions;
-using Eternelle.Modules.Rsvp.Domain.Weddings;
 
 namespace Eternelle.Modules.Rsvp.Application.Submissions.GetSubmission;
 
-internal sealed class GetSubmissionQueryHandler(
-    IRsvpSubmissionRepository submissionRepository) : IQueryHandler<GetSubmissionQuery, SubmissionResponse>
+internal sealed class GetSubmissionQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetSubmissionQuery, SubmissionResponse>
 {
     public async Task<Result<SubmissionResponse>> Handle(GetSubmissionQuery query, CancellationToken cancellationToken)
     {
-        var submissionId = new SubmissionId(query.SubmissionId);
-        RsvpSubmission? submission = await submissionRepository.GetByIdAsync(submissionId, cancellationToken);
-        if (submission is null || submission.WeddingId != new WeddingId(query.WeddingId))
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        const string submissionSql =
+            $"""
+             SELECT
+                 s.id               AS {nameof(SubmissionRow.SubmissionId)},
+                 s.wedding_id       AS {nameof(SubmissionRow.WeddingId)},
+                 s.guest_id         AS {nameof(SubmissionRow.GuestId)},
+                 s.name_snapshot    AS {nameof(SubmissionRow.NameSnapshot)},
+                 s.email_snapshot   AS {nameof(SubmissionRow.Email)},
+                 s.mobile_snapshot  AS {nameof(SubmissionRow.MobileNumber)},
+                 s.attending        AS {nameof(SubmissionRow.Attending)},
+                 s.dietary_note     AS {nameof(SubmissionRow.DietaryNote)},
+                 s.message          AS {nameof(SubmissionRow.Message)},
+                 s.confirmation_id  AS {nameof(SubmissionRow.ConfirmationId)},
+                 s.ip_address       AS {nameof(SubmissionRow.IpAddress)},
+                 s.source           AS {nameof(SubmissionRow.Source)},
+                 s.internal_note    AS {nameof(SubmissionRow.InternalNote)},
+                 s.submitted_at     AS {nameof(SubmissionRow.SubmittedAtUtc)}
+             FROM rsvp.submissions s
+             WHERE s.id = @SubmissionId AND s.wedding_id = @WeddingId
+             """;
+
+        SubmissionRow? submission = await connection.QuerySingleOrDefaultAsync<SubmissionRow>(
+            new CommandDefinition(submissionSql, query, cancellationToken: cancellationToken));
+
+        if (submission is null)
         {
-            return Result.Failure<SubmissionResponse>(RsvpSubmissionErrors.NotFound(submissionId));
+            return Result.Failure<SubmissionResponse>(
+                RsvpSubmissionErrors.NotFound(new SubmissionId(query.SubmissionId)));
         }
 
-        var companions = submission.Companions
-            .OrderBy(c => c.DisplayOrder)
-            .Select(c => new SubmissionCompanionResponse(
-                c.Id.Value,
-                c.Name.Value,
-                c.Attending,
-                c.DietaryNote?.Value,
-                c.DisplayOrder))
-            .ToList();
-
-        var response = new SubmissionResponse(
-            submission.Id.Value,
-            submission.WeddingId.Value,
-            submission.GuestId?.Value,
-            submission.NameSnapshot.Value,
-            submission.EmailSnapshot?.Value,
-            submission.MobileSnapshot?.Value,
+        const string companionSql =
+            $"""
+             SELECT
+                 c.id            AS {nameof(SubmissionCompanionResponse.CompanionId)},
+                 c.name          AS {nameof(SubmissionCompanionResponse.Name)},
+                 c.attending     AS {nameof(SubmissionCompanionResponse.Attending)},
+                 c.dietary_note  AS {nameof(SubmissionCompanionResponse.DietaryNote)},
+                 c.display_order AS {nameof(SubmissionCompanionResponse.DisplayOrder)}
+             FROM rsvp.submission_companions c
+             WHERE c.submission_id = @SubmissionId
+             ORDER BY c.display_order
+             """;
+
+        IReadOnlyList<SubmissionCompanionResponse> companions = [.. await connection.QueryAsync<SubmissionCompanionResponse>(
+            new CommandDefinition(companionSql, new { query.SubmissionId }, cancellationToken: cancellationToken))];
+
+        return Result.Success(new SubmissionResponse(
+            submission.SubmissionId,
+            submission.WeddingId,
+            submission.GuestId,
+            submission.NameSnapshot,
+            submission.Email,
+            submission.MobileNumber,
             submission.Attending,
-            submission.DietaryNote?.Value,
-            submission.Message?.Value,
+            submission.DietaryNote,
+            submission.Message,
             submission.ConfirmationId,
-            submission.IpAddress?.ToString(),
+            submission.IpAddress,
             submission.Source,
-            submission.InternalNote?.Value,
+            submission.InternalNote,
             submission.SubmittedAtUtc,
-            companions);
-
-        return Result.Success(response);
+            companions));
     }
+
+    private sealed record SubmissionRow(
+        Guid SubmissionId,
+        Guid WeddingId,
+        Guid? GuestId,
+        string NameSnapshot,
+        string? Email,
+        string? MobileNumber,
+        bool Attending,
+        string? DietaryNote,
+        string? Message,
+        Guid ConfirmationId,
+        string? IpAddress,
+        RsvpSource Source,
+        string? InternalNote,
+        DateTime SubmittedAtUtc);
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs
index 4b45fbf..568ba9a 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs
@@ -1,44 +1,41 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
-using Eternelle.Modules.Rsvp.Domain.Submissions;
-using Eternelle.Modules.Rsvp.Domain.Weddings;
 
 namespace Eternelle.Modules.Rsvp.Application.Submissions.ListSubmissions;
 
-internal sealed class ListSubmissionsQueryHandler(
-    IRsvpSubmissionRepository submissionRepository) : IQueryHandler<ListSubmissionsQuery, IReadOnlyList<SubmissionSummaryResponse>>
+internal sealed class ListSubmissionsQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<ListSubmissionsQuery, IReadOnlyList<SubmissionSummaryResponse>>
 {
     public async Task<Result<IReadOnlyList<SubmissionSummaryResponse>>> Handle(
         ListSubmissionsQuery query, CancellationToken cancellationToken)
     {
-        IReadOnlyList<RsvpSubmission> submissions = await submissionRepository.ListByWeddingAsync(
-            new WeddingId(query.WeddingId), cancellationToken);
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
 
-        IEnumerable<RsvpSubmission> filtered = submissions;
+        const string sql =
+            $"""
+             SELECT
+                 s.id            AS {nameof(SubmissionSummaryResponse.SubmissionId)},
+                 s.guest_id      AS {nameof(SubmissionSummaryResponse.GuestId)},
+                 s.name_snapshot AS {nameof(SubmissionSummaryResponse.NameSnapshot)},
+                 s.attending     AS {nameof(SubmissionSummaryResponse.Attending)},
+                 (SELECT COUNT(*)::int FROM rsvp.submission_companions sc WHERE sc.submission_id = s.id)
+                                 AS {nameof(SubmissionSummaryResponse.CompanionCount)},
+                 s.source        AS {nameof(SubmissionSummaryResponse.Source)},
+                 s.submitted_at  AS {nameof(SubmissionSummaryResponse.SubmittedAtUtc)}
+             FROM rsvp.submissions s
+             WHERE s.wedding_id = @WeddingId
+               AND (@Attending IS NULL OR s.attending = @Attending)
+               AND (@Source IS NULL OR s.source = @Source)
+             ORDER BY s.submitted_at DESC
+             LIMIT @Take OFFSET @Skip
+             """;
 
-        if (query.Attending is not null)
-        {
-            filtered = filtered.Where(s => s.Attending == query.Attending);
-        }
+        IEnumerable<SubmissionSummaryResponse> rows = await connection.QueryAsync<SubmissionSummaryResponse>(
+            new CommandDefinition(sql, query, cancellationToken: cancellationToken));
 
-        if (query.Source is not null)
-        {
-            filtered = filtered.Where(s => s.Source == query.Source);
-        }
-
-        IReadOnlyList<SubmissionSummaryResponse> result = filtered
-            .Skip(query.Skip)
-            .Take(query.Take)
-            .Select(s => new SubmissionSummaryResponse(
-                s.Id.Value,
-                s.GuestId?.Value,
-                s.NameSnapshot.Value,
-                s.Attending,
-                s.Companions.Count,
-                s.Source,
-                s.SubmittedAtUtc))
-            .ToList();
-
-        return Result.Success(result);
+        return Result.Success<IReadOnlyList<SubmissionSummaryResponse>>(rows.ToList());
     }
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandHandler.cs
index 525cab4..1e59956 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/SubmitOnBehalf/SubmitOnBehalfCommandHandler.cs
@@ -34,9 +34,13 @@ public async Task<Result<Guid>> Handle(SubmitOnBehalfCommand command, Cancellati
             return Result.Failure<Guid>(Error.NotFound("Rsvp.Wedding.NotFound", "Wedding was not found."));
         }
 
-        // Name snapshot from trusted DB values — skip failure check
-        PersonName nameSnapshot = PersonName.Create(
-            $"{guest.FirstName.Value} {guest.LastName.Value}").Value;
+        Result<PersonName> nameSnapshotResult = PersonName.Create(
+            $"{guest.FirstName.Value} {guest.LastName.Value}");
+        if (nameSnapshotResult.IsFailure)
+        {
+            return Result.Failure<Guid>(nameSnapshotResult.Error);
+        }
+        PersonName nameSnapshot = nameSnapshotResult.Value;
 
         DietaryNote? dietary = null;
         if (command.DietaryNote is not null)
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
index 9c26763..183d346 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
@@ -8,7 +8,7 @@ namespace Eternelle.Modules.Rsvp.Domain.Guests;
 
 public sealed class Guest : Entity
 {
-    private Guest() { }
+    private Guest() { } // EF constructor
 
     public GuestId Id { get; private set; }
     public WeddingId WeddingId { get; private set; }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmission.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmission.cs
index dc8f77f..4df3f46 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmission.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Submissions/RsvpSubmission.cs
@@ -10,6 +10,8 @@ namespace Eternelle.Modules.Rsvp.Domain.Submissions;
 
 public sealed class RsvpSubmission : Entity
 {
+    public const int IpAddressMaxLength = 45; // max IPv6 string length
+
     private readonly List<SubmissionCompanion> _companions = [];
 
     private RsvpSubmission() { }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/WeddingErrors.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/WeddingErrors.cs
new file mode 100644
index 0000000..20c8ac9
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Weddings/WeddingErrors.cs
@@ -0,0 +1,9 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Rsvp.Domain.Weddings;
+
+public static class WeddingErrors
+{
+    public static Error NotFound(WeddingId id) =>
+        Error.NotFound("Rsvp.Wedding.NotFound", $"Wedding '{id.Value}' was not found.");
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ProcessOutboxJob.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ProcessOutboxJob.cs
index 8cda324..408450a 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ProcessOutboxJob.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/ProcessOutboxJob.cs
@@ -32,7 +32,8 @@ public async Task Execute(IJobExecutionContext context)
         await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
         await using DbTransaction transaction = await connection.BeginTransactionAsync();
 
-        IReadOnlyList<OutboxMessageResponse> outboxMessages = await GetOutboxMessagesAsync(connection, transaction);
+        IReadOnlyList<OutboxMessageResponse> outboxMessages =
+            await GetOutboxMessagesAsync(connection, transaction, context.CancellationToken);
 
         foreach (OutboxMessageResponse outboxMessage in outboxMessages)
         {
@@ -63,7 +64,7 @@ public async Task Execute(IJobExecutionContext context)
                 exception = caughtException;
             }
 
-            await UpdateOutboxMessageAsync(connection, transaction, outboxMessage, exception);
+            await UpdateOutboxMessageAsync(connection, transaction, outboxMessage, exception, context.CancellationToken);
         }
 
         await transaction.CommitAsync();
@@ -73,7 +74,8 @@ public async Task Execute(IJobExecutionContext context)
 
     private async Task<IReadOnlyList<OutboxMessageResponse>> GetOutboxMessagesAsync(
         IDbConnection connection,
-        IDbTransaction transaction)
+        IDbTransaction transaction,
+        CancellationToken cancellationToken)
     {
         string sql =
             $"""
@@ -88,8 +90,7 @@ FOR UPDATE SKIP LOCKED
              """;
 
         IEnumerable<OutboxMessageResponse> outboxMessages = await connection.QueryAsync<OutboxMessageResponse>(
-            sql,
-            transaction: transaction);
+            new CommandDefinition(sql, transaction: transaction, cancellationToken: cancellationToken));
 
         return outboxMessages.ToList();
     }
@@ -98,7 +99,8 @@ private async Task UpdateOutboxMessageAsync(
         IDbConnection connection,
         IDbTransaction transaction,
         OutboxMessageResponse outboxMessage,
-        Exception? exception)
+        Exception? exception,
+        CancellationToken cancellationToken)
     {
         if (exception is null)
         {
@@ -111,9 +113,10 @@ UPDATE rsvp.outbox_messages
                 """;
 
             await connection.ExecuteAsync(
-                sql,
-                new { outboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
-                transaction: transaction);
+                new CommandDefinition(sql,
+                    new { outboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                    transaction: transaction,
+                    cancellationToken: cancellationToken));
         }
         else
         {
@@ -125,9 +128,10 @@ UPDATE rsvp.outbox_messages
                 """;
 
             await connection.ExecuteAsync(
-                sql,
-                new { outboxMessage.Id, Error = exception.ToString() },
-                transaction: transaction);
+                new CommandDefinition(sql,
+                    new { outboxMessage.Id, Error = exception.ToString() },
+                    transaction: transaction,
+                    cancellationToken: cancellationToken));
         }
     }
 
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionConfiguration.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionConfiguration.cs
index 13986c9..c661433 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionConfiguration.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Submissions/RsvpSubmissionConfiguration.cs
@@ -60,7 +60,7 @@ public void Configure(EntityTypeBuilder<RsvpSubmission> b)
             .HasConversion(
                 v => v != null ? v.ToString() : null,
                 v => v != null ? System.Net.IPAddress.Parse(v) : null)
-            .HasMaxLength(45);
+            .HasMaxLength(RsvpSubmission.IpAddressMaxLength);
 
         b.Property(s => s.Source).HasConversion<int>().IsRequired();
 
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingProjection.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingProjection.cs
index a5dc0a8..612e1d4 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingProjection.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Weddings/WeddingProjection.cs
@@ -16,6 +16,10 @@ public async Task UpsertAsync(Wedding wedding, CancellationToken cancellationTok
         {
             context.Weddings.Add(wedding);
         }
+        else
+        {
+            context.Entry(existing).CurrentValues.SetValues(wedding);
+        }
         await context.SaveChangesAsync(cancellationToken);
     }
 
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/ListSubmissionsEndpoint.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/ListSubmissionsEndpoint.cs
index 5b06095..bf62ddb 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/ListSubmissionsEndpoint.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Presentation/Submissions/ListSubmissionsEndpoint.cs
@@ -28,7 +28,9 @@ private static async Task<IResult> Handler(
         int skip = 0,
         int take = 50)
     {
-        RsvpSource? parsedSource = Enum.TryParse<RsvpSource>(source, true, out RsvpSource s) ? s : (RsvpSource?)null;
+        RsvpSource? parsedSource = Enum.TryParse<RsvpSource>(source, true, out RsvpSource s) && Enum.IsDefined(s)
+            ? s
+            : null;
 
         Result<IReadOnlyList<SubmissionSummaryResponse>> result = await sender.Send(
             new ListSubmissionsQuery(weddingId, attending, parsedSource, skip, take), ct);

From 7db7476d1d8f144958f5ecbbb8a909e0dc97aa1e Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sat, 30 May 2026 18:36:31 +0800
Subject: [PATCH 111/155] Eternelle-191 Add CancellationToken support to DB
 ops, minor cleanups

Consistently pass CancellationToken to all async DB connections by updating IDbConnectionFactory and all usages. Replace some .ToList() calls with spread operator for brevity. Fix PersonName creation error handling in SubmitRsvpCommandHandler.
---
 .../Data/IDbConnectionFactory.cs                       |  2 +-
 .../Data/DbConnectionFactory.cs                        |  4 ++--
 .../GetSectionVariantsQueryHandler.cs                  |  2 +-
 .../GetSupportedSectionsQueryHandler.cs                |  2 +-
 .../GetTemplateById/GetTemplateByIdQueryHandler.cs     |  2 +-
 .../Templates/GetTemplates/GetTemplatesQueryHandler.cs |  2 +-
 .../Outbox/IdempotentDomainEventHandler.cs             |  2 +-
 .../Guests/GetGuest/GetGuestQueryHandler.cs            |  2 +-
 .../Guests/ListGuests/ListGuestsQueryHandler.cs        |  4 ++--
 .../Public/GetInvitation/GetInvitationQueryHandler.cs  |  2 +-
 .../Public/SubmitRsvp/SubmitRsvpCommandHandler.cs      | 10 +++++++---
 .../GetHeadcount/GetHeadcountQueryHandler.cs           |  2 +-
 .../GetSubmission/GetSubmissionQueryHandler.cs         |  2 +-
 .../ListSubmissions/ListSubmissionsQueryHandler.cs     |  4 ++--
 .../Inbox/IdempotentIntegrationEventHandler.cs         |  2 +-
 .../Outbox/IdempotentDomainEventHandler.cs             |  2 +-
 .../Tenants/GetTenant/GetTenantQueryHandler.cs         |  2 +-
 .../GetTenantSections/GetTenantSectionsQueryHandler.cs |  2 +-
 .../Inbox/IdempotentIntegrationEventHandler.cs         |  2 +-
 .../Outbox/IdempotentDomainEventHandler.cs             |  2 +-
 .../Users/GetUser/GetUserQueryHandler.cs               |  2 +-
 .../GetUserPermissionsQueryHandler.cs                  |  4 ++--
 .../Inbox/IdempotentIntegrationEventHandler.cs         |  2 +-
 .../Outbox/IdempotentDomainEventHandler.cs             |  2 +-
 .../GetCeremonyActs/GetCeremonyActsQueryHandler.cs     |  2 +-
 .../GetDressCodeConfigQueryHandler.cs                  |  2 +-
 .../GetEntourageGroupsQueryHandler.cs                  |  2 +-
 .../GetGalleryImages/GetGalleryImagesQueryHandler.cs   |  2 +-
 .../GetGiftOptions/GetGiftOptionsQueryHandler.cs       |  2 +-
 .../GetGuestPhotos/GetGuestPhotosQueryHandler.cs       |  2 +-
 .../GetPublicGuestPhotosQueryHandler.cs                |  2 +-
 .../GetUploadContext/GetUploadContextQueryHandler.cs   |  2 +-
 .../Reminders/GetReminders/GetRemindersQueryHandler.cs |  2 +-
 .../GetStoryMoments/GetStoryMomentsQueryHandler.cs     |  2 +-
 .../GetVendorCredits/GetVendorCreditsQueryHandler.cs   |  2 +-
 .../Weddings/GetWedding/GetWeddingQueryHandler.cs      |  2 +-
 .../Inbox/IdempotentIntegrationEventHandler.cs         |  2 +-
 .../Outbox/IdempotentDomainEventHandler.cs             |  2 +-
 38 files changed, 48 insertions(+), 44 deletions(-)

diff --git a/src/Common/Eternelle.Common.Application/Data/IDbConnectionFactory.cs b/src/Common/Eternelle.Common.Application/Data/IDbConnectionFactory.cs
index 9f09abd..6af6ff5 100644
--- a/src/Common/Eternelle.Common.Application/Data/IDbConnectionFactory.cs
+++ b/src/Common/Eternelle.Common.Application/Data/IDbConnectionFactory.cs
@@ -4,5 +4,5 @@ namespace Eternelle.Common.Application.Data;
 
 public interface IDbConnectionFactory
 {
-    ValueTask<DbConnection> OpenConnectionAsync();
+    ValueTask<DbConnection> OpenConnectionAsync(CancellationToken cancellationToken = default);
 }
diff --git a/src/Common/Eternelle.Common.Infrastructure/Data/DbConnectionFactory.cs b/src/Common/Eternelle.Common.Infrastructure/Data/DbConnectionFactory.cs
index 9b908ff..de4ed43 100644
--- a/src/Common/Eternelle.Common.Infrastructure/Data/DbConnectionFactory.cs
+++ b/src/Common/Eternelle.Common.Infrastructure/Data/DbConnectionFactory.cs
@@ -6,8 +6,8 @@ namespace Eternelle.Common.Infrastructure.Data;
 
 internal sealed class DbConnectionFactory(NpgsqlDataSource dataSource) : IDbConnectionFactory
 {
-    public async ValueTask<DbConnection> OpenConnectionAsync()
+    public async ValueTask<DbConnection> OpenConnectionAsync(CancellationToken cancellationToken = default)
     {
-        return await dataSource.OpenConnectionAsync();
+        return await dataSource.OpenConnectionAsync(cancellationToken);
     }
 }
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQueryHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQueryHandler.cs
index 8823201..10add5c 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQueryHandler.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSectionVariants/GetSectionVariantsQueryHandler.cs
@@ -14,7 +14,7 @@ public async Task<Result<IReadOnlyList<SectionVariantResponse>>> Handle(
         GetSectionVariantsQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQueryHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQueryHandler.cs
index cd09b42..6d478df 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQueryHandler.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetSupportedSections/GetSupportedSectionsQueryHandler.cs
@@ -14,7 +14,7 @@ public async Task<Result<IReadOnlyList<SupportedSectionResponse>>> Handle(
         GetSupportedSectionsQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQueryHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQueryHandler.cs
index f8ea139..9cfe586 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQueryHandler.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplateById/GetTemplateByIdQueryHandler.cs
@@ -26,7 +26,7 @@ public async Task<Result<TemplateDetailResponse>> Handle(
             return Result.Success(cached);
         }
 
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string headSql =
             """
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQueryHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQueryHandler.cs
index ba986fd..9a7dc49 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQueryHandler.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/GetTemplates/GetTemplatesQueryHandler.cs
@@ -25,7 +25,7 @@ public async Task<Result<IReadOnlyList<TemplateSummaryResponse>>> Handle(
             return Result.Success(cached);
         }
 
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
index 84fc61e..dfb9684 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -16,7 +16,7 @@ internal sealed class IdempotentDomainEventHandler<TDomainEvent>(
 {
     public override async Task Handle(TDomainEvent domainEvent, CancellationToken cancellationToken = default)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
 
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs
index 13c22b1..a8ce2da 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryHandler.cs
@@ -12,7 +12,7 @@ internal sealed class GetGuestQueryHandler(IDbConnectionFactory dbConnectionFact
 {
     public async Task<Result<GuestResponse>> Handle(GetGuestQuery query, CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string guestSql =
             $"""
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs
index da5be35..eaf1c22 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryHandler.cs
@@ -11,7 +11,7 @@ internal sealed class ListGuestsQueryHandler(IDbConnectionFactory dbConnectionFa
 {
     public async Task<Result<IReadOnlyList<GuestSummaryResponse>>> Handle(ListGuestsQuery query, CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
@@ -59,6 +59,6 @@ LIMIT @Take OFFSET @Skip
         IEnumerable<GuestSummaryResponse> rows = await connection.QueryAsync<GuestSummaryResponse>(
             new CommandDefinition(sql, query, cancellationToken: cancellationToken));
 
-        return Result.Success<IReadOnlyList<GuestSummaryResponse>>(rows.ToList());
+        return Result.Success<IReadOnlyList<GuestSummaryResponse>>([.. rows]);
     }
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs
index 9507431..170dbba 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/GetInvitation/GetInvitationQueryHandler.cs
@@ -23,7 +23,7 @@ public async Task<Result<InvitationResponse>> Handle(GetInvitationQuery query, C
             return Result.Failure<InvitationResponse>(NotFound);
         }
 
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string guestSql =
             $"""
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandHandler.cs
index 79ddf0b..73bbab3 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Public/SubmitRsvp/SubmitRsvpCommandHandler.cs
@@ -48,9 +48,13 @@ public async Task<Result<Guid>> Handle(SubmitRsvpCommand command, CancellationTo
             return Result.Failure<Guid>(RsvpSubmissionErrors.WeddingClosed);
         }
 
-        // Name snapshot from trusted DB values — skip failure check
-        PersonName nameSnapshot = PersonName.Create(
-            $"{guest.FirstName.Value} {guest.LastName.Value}").Value;
+        Result<PersonName> nameSnapshotResult = PersonName.Create(
+            $"{guest.FirstName.Value} {guest.LastName.Value}");
+        if (nameSnapshotResult.IsFailure)
+        {
+            return Result.Failure<Guid>(nameSnapshotResult.Error);
+        }
+        PersonName nameSnapshot = nameSnapshotResult.Value;
 
         DietaryNote? dietary = null;
         if (command.DietaryNote is not null)
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs
index 921fc1b..cea3a14 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetHeadcount/GetHeadcountQueryHandler.cs
@@ -11,7 +11,7 @@ internal sealed class GetHeadcountQueryHandler(IDbConnectionFactory dbConnection
 {
     public async Task<Result<HeadcountResponse>> Handle(GetHeadcountQuery query, CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs
index 9e2dde2..25bc2ca 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/GetSubmission/GetSubmissionQueryHandler.cs
@@ -12,7 +12,7 @@ internal sealed class GetSubmissionQueryHandler(IDbConnectionFactory dbConnectio
 {
     public async Task<Result<SubmissionResponse>> Handle(GetSubmissionQuery query, CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string submissionSql =
             $"""
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs
index 568ba9a..e724d32 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Submissions/ListSubmissions/ListSubmissionsQueryHandler.cs
@@ -12,7 +12,7 @@ internal sealed class ListSubmissionsQueryHandler(IDbConnectionFactory dbConnect
     public async Task<Result<IReadOnlyList<SubmissionSummaryResponse>>> Handle(
         ListSubmissionsQuery query, CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
@@ -36,6 +36,6 @@ LIMIT @Take OFFSET @Skip
         IEnumerable<SubmissionSummaryResponse> rows = await connection.QueryAsync<SubmissionSummaryResponse>(
             new CommandDefinition(sql, query, cancellationToken: cancellationToken));
 
-        return Result.Success<IReadOnlyList<SubmissionSummaryResponse>>(rows.ToList());
+        return Result.Success<IReadOnlyList<SubmissionSummaryResponse>>([.. rows]);
     }
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
index 8546138..76525c4 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
@@ -16,7 +16,7 @@ public override async Task Handle(
         TIntegrationEvent integrationEvent,
         CancellationToken cancellationToken = default)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         var inboxMessageConsumer = new InboxMessageConsumer(integrationEvent.Id, decorated.GetType().Name);
 
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
index 6a843bb..c2be668 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -15,7 +15,7 @@ internal sealed class IdempotentDomainEventHandler<TDomainEvent>(
 {
     public override async Task Handle(TDomainEvent domainEvent, CancellationToken cancellationToken = default)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
 
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQueryHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQueryHandler.cs
index 077dae2..0ee1b63 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQueryHandler.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenant/GetTenantQueryHandler.cs
@@ -12,7 +12,7 @@ internal sealed class GetTenantQueryHandler(IDbConnectionFactory dbConnectionFac
 {
     public async Task<Result<TenantResponse>> Handle(GetTenantQuery query, CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         string sql =
             $"""
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQueryHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQueryHandler.cs
index b28d1f0..e94fc2a 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQueryHandler.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/GetTenantSections/GetTenantSectionsQueryHandler.cs
@@ -12,7 +12,7 @@ internal sealed class GetTenantSectionsQueryHandler(IDbConnectionFactory dbConne
     public async Task<Result<IReadOnlyList<SectionEntryResponse>>> Handle(
         GetTenantSectionsQuery query, CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         string sql =
             $"""
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
index da48388..ac35a44 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
@@ -16,7 +16,7 @@ public override async Task Handle(
         TIntegrationEvent integrationEvent,
         CancellationToken cancellationToken = default)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         var inboxMessageConsumer = new InboxMessageConsumer(integrationEvent.Id, decorated.GetType().Name);
 
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
index c93ff0f..d052098 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -15,7 +15,7 @@ internal sealed class IdempotentDomainEventHandler<TDomainEvent>(
 {
     public override async Task Handle(TDomainEvent domainEvent, CancellationToken cancellationToken = default)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
 
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQueryHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQueryHandler.cs
index a8250a8..dc31c25 100644
--- a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQueryHandler.cs
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUser/GetUserQueryHandler.cs
@@ -12,7 +12,7 @@ internal sealed class GetUserQueryHandler(IDbConnectionFactory dbConnectionFacto
 {
     public async Task<Result<UserResponse>> Handle(GetUserQuery request, CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQueryHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQueryHandler.cs
index c8b94d2..7ad42d2 100644
--- a/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQueryHandler.cs
+++ b/src/Modules/Users/Eternelle.Modules.Users.Application/Users/GetUserPermissions/GetUserPermissionsQueryHandler.cs
@@ -15,7 +15,7 @@ public async Task<Result<PermissionsResponse>> Handle(
         GetUserPermissionsQuery request,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
@@ -36,7 +36,7 @@ FROM users.users u
             return Result.Failure<PermissionsResponse>(UserErrors.NotFound(request.IdentityId));
         }
 
-        return new PermissionsResponse(permissions[0].UserId, permissions.Select(p => p.Permission).ToHashSet());
+        return new PermissionsResponse(permissions[0].UserId, [.. permissions.Select(p => p.Permission)]);
     }
 
     internal sealed class UserPermission
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
index a76eda5..f9ef3e0 100644
--- a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
@@ -16,7 +16,7 @@ public override async Task Handle(
         TIntegrationEvent integrationEvent,
         CancellationToken cancellationToken = default)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         var inboxMessageConsumer = new InboxMessageConsumer(integrationEvent.Id, decorated.GetType().Name);
 
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
index 774927e..1fcff44 100644
--- a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -15,7 +15,7 @@ internal sealed class IdempotentDomainEventHandler<TDomainEvent>(
 {
     public override async Task Handle(TDomainEvent domainEvent, CancellationToken cancellationToken = default)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/GetCeremonyActs/GetCeremonyActsQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/GetCeremonyActs/GetCeremonyActsQueryHandler.cs
index 813fcb6..20a577f 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/GetCeremonyActs/GetCeremonyActsQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/CeremonyActs/GetCeremonyActs/GetCeremonyActsQueryHandler.cs
@@ -13,7 +13,7 @@ public async Task<Result<IReadOnlyList<CeremonyActResponse>>> Handle(
         GetCeremonyActsQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/GetDressCodeConfig/GetDressCodeConfigQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/GetDressCodeConfig/GetDressCodeConfigQueryHandler.cs
index d450e78..d7fd7f7 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/GetDressCodeConfig/GetDressCodeConfigQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/DressCodeConfigs/GetDressCodeConfig/GetDressCodeConfigQueryHandler.cs
@@ -14,7 +14,7 @@ public async Task<Result<DressCodeConfigResponse>> Handle(
         GetDressCodeConfigQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/GetEntourageGroups/GetEntourageGroupsQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/GetEntourageGroups/GetEntourageGroupsQueryHandler.cs
index a22d841..16b779b 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/GetEntourageGroups/GetEntourageGroupsQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/EntourageGroups/GetEntourageGroups/GetEntourageGroupsQueryHandler.cs
@@ -14,7 +14,7 @@ public async Task<Result<IReadOnlyList<EntourageGroupResponse>>> Handle(
         GetEntourageGroupsQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string groupsSql =
             $"""
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GalleryImages/GetGalleryImages/GetGalleryImagesQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GalleryImages/GetGalleryImages/GetGalleryImagesQueryHandler.cs
index 742f1de..354e14e 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GalleryImages/GetGalleryImages/GetGalleryImagesQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GalleryImages/GetGalleryImages/GetGalleryImagesQueryHandler.cs
@@ -13,7 +13,7 @@ public async Task<Result<IReadOnlyList<GalleryImageResponse>>> Handle(
         GetGalleryImagesQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/GetGiftOptions/GetGiftOptionsQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/GetGiftOptions/GetGiftOptionsQueryHandler.cs
index fbe2d6c..c4b6cda 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/GetGiftOptions/GetGiftOptionsQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GiftOptions/GetGiftOptions/GetGiftOptionsQueryHandler.cs
@@ -13,7 +13,7 @@ public async Task<Result<IReadOnlyList<GiftOptionResponse>>> Handle(
         GetGiftOptionsQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQueryHandler.cs
index b45bf99..5561c43 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQueryHandler.cs
@@ -14,7 +14,7 @@ public async Task<Result<IReadOnlyList<GuestPhotoResponse>>> Handle(
         GetGuestPhotosQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         string sql =
             $"""
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQueryHandler.cs
index 0c6a2ef..0e243e6 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQueryHandler.cs
@@ -14,7 +14,7 @@ public async Task<Result<IReadOnlyList<GuestPhotoResponse>>> Handle(
         GetPublicGuestPhotosQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         string sql =
             $"""
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQueryHandler.cs
index cb6a0d6..820120a 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQueryHandler.cs
@@ -14,7 +14,7 @@ public async Task<Result<UploadContextResponse>> Handle(
         GetUploadContextQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         // Resolve the wedding from the upload token stored on SnapShareConfig.
         // Returns a generic not-found so callers cannot probe token validity
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/GetReminders/GetRemindersQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/GetReminders/GetRemindersQueryHandler.cs
index b0b005a..f749e1b 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/GetReminders/GetRemindersQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Reminders/GetReminders/GetRemindersQueryHandler.cs
@@ -13,7 +13,7 @@ public async Task<Result<IReadOnlyList<ReminderResponse>>> Handle(
         GetRemindersQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/GetStoryMoments/GetStoryMomentsQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/GetStoryMoments/GetStoryMomentsQueryHandler.cs
index 112c508..9db8a24 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/GetStoryMoments/GetStoryMomentsQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/StoryMoments/GetStoryMoments/GetStoryMomentsQueryHandler.cs
@@ -13,7 +13,7 @@ public async Task<Result<IReadOnlyList<StoryMomentResponse>>> Handle(
         GetStoryMomentsQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/VendorCredits/GetVendorCredits/GetVendorCreditsQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/VendorCredits/GetVendorCredits/GetVendorCreditsQueryHandler.cs
index 3428191..3dea1ac 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/VendorCredits/GetVendorCredits/GetVendorCreditsQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/VendorCredits/GetVendorCredits/GetVendorCreditsQueryHandler.cs
@@ -13,7 +13,7 @@ public async Task<Result<IReadOnlyList<VendorCreditResponse>>> Handle(
         GetVendorCreditsQuery query,
         CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs
index 8b45061..ef4474f 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs
@@ -12,7 +12,7 @@ internal sealed class GetWeddingQueryHandler(IDbConnectionFactory dbConnectionFa
 {
     public async Task<Result<WeddingResponse>> Handle(GetWeddingQuery query, CancellationToken cancellationToken)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         const string sql =
             $"""
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
index a516f84..acdece5 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
@@ -17,7 +17,7 @@ public override async Task Handle(
         TIntegrationEvent integrationEvent,
         CancellationToken cancellationToken = default)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         var inboxMessageConsumer = new InboxMessageConsumer(integrationEvent.Id, decorated.GetType().Name);
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
index 1d74f65..f2f61ca 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -16,7 +16,7 @@ internal sealed class IdempotentDomainEventHandler<TDomainEvent>(
 {
     public override async Task Handle(TDomainEvent domainEvent, CancellationToken cancellationToken = default)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
         var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
 

From a2135df030c034820bfd6f2790b48bf7d86d3572 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sat, 30 May 2026 19:06:27 +0800
Subject: [PATCH 112/155] Eternelle-191 Use CommandDefinition in QueryAsync for
 better handling

Updated QueryAsync to use CommandDefinition, ensuring proper parameter handling and support for cancellation tokens during query execution. This improves reliability and consistency in database operations.
---
 .../Weddings/GetWedding/GetWeddingQueryHandler.cs              | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs
index ef4474f..0712f0a 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs
@@ -42,7 +42,7 @@ FROM wedding.profiles p
         Dictionary<Guid, WeddingResponse> weddingDictionary = [];
 
         await connection.QueryAsync<WeddingResponse, PartnerResponse?, SnapShareResponse?, WeddingResponse>(
-            sql,
+            new CommandDefinition(sql, query, cancellationToken: cancellationToken),
             (wedding, partner, snapShare) =>
             {
                 if (weddingDictionary.TryGetValue(wedding.Id, out WeddingResponse? existingWedding))
@@ -66,7 +66,6 @@ FROM wedding.profiles p
 
                 return wedding;
             },
-            query,
             splitOn: $"{nameof(PartnerResponse.PartnerId)},{nameof(SnapShareResponse.SnapShareId)}");
 
         if (!weddingDictionary.TryGetValue(query.WeddingId, out WeddingResponse? weddingResponse))

From 02e50ba20e3e9bd728c3e17f9020b3c7557f3b8a Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 00:41:06 +0800
Subject: [PATCH 113/155] Eternelle-194 Add guest names to GuestAdded
 integration event

---
 .../Guests/GuestAddedDomainEventHandler.cs                  | 2 ++
 .../Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs      | 3 ++-
 .../Guests/GuestAddedDomainEvent.cs                         | 4 ++++
 .../Guests/GuestAddedIntegrationEvent.cs                    | 6 ++++++
 4 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestAddedDomainEventHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestAddedDomainEventHandler.cs
index a7dff6e..ea1f2a0 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestAddedDomainEventHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestAddedDomainEventHandler.cs
@@ -15,6 +15,8 @@ public override Task Handle(GuestAddedDomainEvent domainEvent, CancellationToken
                 domainEvent.OccurredOnUtc,
                 domainEvent.GuestId.Value,
                 domainEvent.WeddingId.Value,
+                domainEvent.FirstName,
+                domainEvent.LastName,
                 domainEvent.LookupCode,
                 domainEvent.AllowedCompanions),
             cancellationToken);
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
index 183d346..89c093e 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
@@ -61,7 +61,8 @@ public static Result<Guest> Create(
         };
 
         guest.Raise(new GuestAddedDomainEvent(
-            guest.Id, guest.WeddingId, guest.LookupCode.Value, guest.AllowedCompanions));
+            guest.Id, guest.WeddingId, guest.FirstName.Value, guest.LastName.Value,
+            guest.LookupCode.Value, guest.AllowedCompanions));
 
         return Result.Success(guest);
     }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAddedDomainEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAddedDomainEvent.cs
index dcc812c..12e7f51 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAddedDomainEvent.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestAddedDomainEvent.cs
@@ -6,11 +6,15 @@ namespace Eternelle.Modules.Rsvp.Domain.Guests;
 public sealed class GuestAddedDomainEvent(
     GuestId guestId,
     WeddingId weddingId,
+    string firstName,
+    string lastName,
     string lookupCode,
     int allowedCompanions) : DomainEvent
 {
     public GuestId GuestId { get; init; } = guestId;
     public WeddingId WeddingId { get; init; } = weddingId;
+    public string FirstName { get; init; } = firstName;
+    public string LastName { get; init; } = lastName;
     public string LookupCode { get; init; } = lookupCode;
     public int AllowedCompanions { get; init; } = allowedCompanions;
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestAddedIntegrationEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestAddedIntegrationEvent.cs
index 55102c5..9b43cb0 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestAddedIntegrationEvent.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestAddedIntegrationEvent.cs
@@ -9,18 +9,24 @@ public GuestAddedIntegrationEvent(
         DateTime occurredOnUtc,
         Guid guestId,
         Guid weddingId,
+        string firstName,
+        string lastName,
         string lookupCode,
         int allowedCompanions)
         : base(id, occurredOnUtc)
     {
         GuestId = guestId;
         WeddingId = weddingId;
+        FirstName = firstName;
+        LastName = lastName;
         LookupCode = lookupCode;
         AllowedCompanions = allowedCompanions;
     }
 
     public Guid GuestId { get; init; }
     public Guid WeddingId { get; init; }
+    public string FirstName { get; init; }
+    public string LastName { get; init; }
     public string LookupCode { get; init; }
     public int AllowedCompanions { get; init; }
 }

From 062b1ae566d34c67f1118fcba1ffaaf1e1f6957b Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 01:03:15 +0800
Subject: [PATCH 114/155] Eternelle-194 Publish guest lookup-code-regenerated
 integration event

---
 ...LookupCodeRegeneratedDomainEventHandler.cs | 20 +++++++++++++++++++
 ...stLookupCodeRegeneratedIntegrationEvent.cs | 19 ++++++++++++++++++
 2 files changed, 39 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestLookupCodeRegeneratedDomainEventHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestLookupCodeRegeneratedIntegrationEvent.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestLookupCodeRegeneratedDomainEventHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestLookupCodeRegeneratedDomainEventHandler.cs
new file mode 100644
index 0000000..dde0c58
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestLookupCodeRegeneratedDomainEventHandler.cs
@@ -0,0 +1,20 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.IntegrationEvents.Guests;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests;
+
+internal sealed class GuestLookupCodeRegeneratedDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<GuestLookupCodeRegeneratedDomainEvent>
+{
+    public override Task Handle(GuestLookupCodeRegeneratedDomainEvent domainEvent, CancellationToken cancellationToken = default) =>
+        eventBus.PublishAsync(
+            new GuestLookupCodeRegeneratedIntegrationEvent(
+                domainEvent.Id,
+                domainEvent.OccurredOnUtc,
+                domainEvent.GuestId.Value,
+                domainEvent.WeddingId.Value,
+                domainEvent.LookupCode),
+            cancellationToken);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestLookupCodeRegeneratedIntegrationEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestLookupCodeRegeneratedIntegrationEvent.cs
new file mode 100644
index 0000000..75d7840
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestLookupCodeRegeneratedIntegrationEvent.cs
@@ -0,0 +1,19 @@
+using Eternelle.Common.Application.EventBus;
+
+namespace Eternelle.Modules.Rsvp.IntegrationEvents.Guests;
+
+public sealed class GuestLookupCodeRegeneratedIntegrationEvent : IntegrationEvent
+{
+    public GuestLookupCodeRegeneratedIntegrationEvent(
+        Guid id, DateTime occurredOnUtc, Guid guestId, Guid weddingId, string newLookupCode)
+        : base(id, occurredOnUtc)
+    {
+        GuestId = guestId;
+        WeddingId = weddingId;
+        NewLookupCode = newLookupCode;
+    }
+
+    public Guid GuestId { get; init; }
+    public Guid WeddingId { get; init; }
+    public string NewLookupCode { get; init; }
+}

From 3fc828440ee66f9c44d3beb4ccf318babb1b17fb Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 01:06:44 +0800
Subject: [PATCH 115/155] Eternelle-194 Publish guest-removed integration event

---
 .../Guests/GuestRemovedDomainEventHandler.cs  | 19 +++++++++++++++++++
 .../Guests/GuestRemovedIntegrationEvent.cs    | 16 ++++++++++++++++
 2 files changed, 35 insertions(+)
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestRemovedDomainEventHandler.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestRemovedIntegrationEvent.cs

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestRemovedDomainEventHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestRemovedDomainEventHandler.cs
new file mode 100644
index 0000000..e96b2b0
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestRemovedDomainEventHandler.cs
@@ -0,0 +1,19 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Rsvp.Domain.Guests;
+using Eternelle.Modules.Rsvp.IntegrationEvents.Guests;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests;
+
+internal sealed class GuestRemovedDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<GuestRemovedDomainEvent>
+{
+    public override Task Handle(GuestRemovedDomainEvent domainEvent, CancellationToken cancellationToken = default) =>
+        eventBus.PublishAsync(
+            new GuestRemovedIntegrationEvent(
+                domainEvent.Id,
+                domainEvent.OccurredOnUtc,
+                domainEvent.GuestId.Value,
+                domainEvent.WeddingId.Value),
+            cancellationToken);
+}
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestRemovedIntegrationEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestRemovedIntegrationEvent.cs
new file mode 100644
index 0000000..7b2a0f9
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.IntegrationEvents/Guests/GuestRemovedIntegrationEvent.cs
@@ -0,0 +1,16 @@
+using Eternelle.Common.Application.EventBus;
+
+namespace Eternelle.Modules.Rsvp.IntegrationEvents.Guests;
+
+public sealed class GuestRemovedIntegrationEvent : IntegrationEvent
+{
+    public GuestRemovedIntegrationEvent(Guid id, DateTime occurredOnUtc, Guid guestId, Guid weddingId)
+        : base(id, occurredOnUtc)
+    {
+        GuestId = guestId;
+        WeddingId = weddingId;
+    }
+
+    public Guid GuestId { get; init; }
+    public Guid WeddingId { get; init; }
+}

From 43be50333792eb1a8800384de16340cdb29d1527 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 01:19:44 +0800
Subject: [PATCH 116/155] Eternelle-194 Rename SnapShareConfig to
 SocialShareConfig and drop upload fields
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Add SocialShareConfig (drops UploadToken, ModerationMode, UploaderNameRequired, RegenerateToken)
- Add SocialShareConfigId, WeddingSocialShareUpdatedDomainEvent
- Rename Wedding.SnapShare → SocialShare, ConfigureSnapShare → ConfigureSocialShare
- Remove GuestPhotoUploadLimit, SetGuestPhotoUploadLimit, RegenerateUploadToken from Wedding
- Add SocialShareConfigConfiguration (EF), SocialShareConfigIdConverter
- Update IWeddingRepository: GetWithSnapShareAsync → GetWithSocialShareAsync
- Rename Catalog SectionId.SnapShare → SectionId.SocialShare
- Rename Tags.SnapShare → Tags.SocialShare in Presentation
- Stub affected application handlers to compile cleanly; full deletion in Task 1.2
---
 .../Templates/SectionId.cs                    |  2 +-
 .../GenerateUploadSlotsCommandHandler.cs      | 21 +---
 .../RegisterGuestPhotosCommandHandler.cs      | 40 ++------
 .../CreateWeddingCommandHandler.cs            |  1 -
 .../RegenerateUploadTokenCommandHandler.cs    | 25 ++---
 .../SetGuestPhotoUploadLimitCommandHandler.cs | 22 ++---
 .../UpdateSnapShareConfigCommand.cs           |  5 +-
 .../UpdateSnapShareConfigCommandHandler.cs    |  5 +-
 .../UpdateSnapShareConfigCommandValidator.cs  |  3 -
 ...ddingSnapShareUpdatedDomainEventHandler.cs |  6 +-
 .../Weddings/IWeddingRepository.cs            | 10 +-
 .../Weddings/SnapShareConfig.cs               | 95 -------------------
 .../Weddings/SnapShareConfigId.cs             |  7 --
 .../Weddings/SnapShareModerationMode.cs       |  7 --
 .../Weddings/SocialShareConfig.cs             | 60 ++++++++++++
 .../Weddings/SocialShareConfigId.cs           |  7 ++
 .../Weddings/Wedding.cs                       | 66 +++----------
 ...> WeddingSocialShareUpdatedDomainEvent.cs} |  2 +-
 ...ter.cs => SocialShareConfigIdConverter.cs} |  4 +-
 .../Database/WeddingsDbContext.cs             |  4 +-
 .../Weddings/SnapShareConfigConfiguration.cs  | 63 ------------
 .../SocialShareConfigConfiguration.cs         | 43 +++++++++
 .../Weddings/WeddingConfiguration.cs          |  8 +-
 .../Weddings/WeddingRepository.cs             |  8 +-
 .../GuestPhotos/ApproveGuestPhotoEndpoint.cs  |  2 +-
 .../BulkApproveGuestPhotosEndpoint.cs         |  2 +-
 .../BulkDeleteGuestPhotosEndpoint.cs          |  2 +-
 .../BulkRejectGuestPhotosEndpoint.cs          |  2 +-
 .../GuestPhotos/DeleteGuestPhotoEndpoint.cs   |  2 +-
 .../GenerateUploadSlotsEndpoint.cs            |  2 +-
 .../GuestPhotos/GetGuestPhotosEndpoint.cs     |  2 +-
 .../GetPublicGuestPhotoFeedEndpoint.cs        |  2 +-
 .../GuestPhotos/GetUploadContextEndpoint.cs   |  2 +-
 .../RegisterGuestPhotosEndpoint.cs            |  2 +-
 .../GuestPhotos/RejectGuestPhotoEndpoint.cs   |  2 +-
 .../Tags.cs                                   |  2 +-
 .../Weddings/RegenerateUploadTokenEndpoint.cs | 15 ++-
 .../Weddings/UpdateSnapShareConfigEndpoint.cs | 11 +--
 38 files changed, 188 insertions(+), 376 deletions(-)
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareConfig.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareConfigId.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareModerationMode.cs
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SocialShareConfig.cs
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SocialShareConfigId.cs
 rename src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/{WeddingSnapShareUpdatedDomainEvent.cs => WeddingSocialShareUpdatedDomainEvent.cs} (61%)
 rename src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Converters/{SnapShareConfigIdConverter.cs => SocialShareConfigIdConverter.cs} (53%)
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SnapShareConfigConfiguration.cs
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SocialShareConfigConfiguration.cs

diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs
index 46aaff2..5e4fd50 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/SectionId.cs
@@ -14,6 +14,6 @@ public enum SectionId
     Reminders,
     Rsvp,
     VendorCredits,
-    SnapShare,
+    SocialShare,
     GuestUploads
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs
index 6ae898b..289e8c3 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs
@@ -1,14 +1,12 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Weddings.Application.Abstractions.Storage;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
 namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GenerateUploadSlots;
 
 internal sealed class GenerateUploadSlotsCommandHandler(
     IWeddingRepository weddingRepository,
-    IGuestPhotoRepository guestPhotoRepository,
     IPhotoStorageService photoStorageService,
     IUploadSlotStore uploadSlotStore) : ICommandHandler<GenerateUploadSlotsCommand, IReadOnlyList<UploadSlotResponse>>
 {
@@ -28,24 +26,7 @@ public async Task<Result<IReadOnlyList<UploadSlotResponse>>> Handle(
                 WeddingErrors.NotFound(new WeddingId(Guid.Empty)));
         }
 
-        // Check remaining capacity before generating slots.
-        // Limits are derived from the Tenancy-provided upload limit — no extra DB round-trip needed.
-        // A guest requesting 10 slots when only 3 remain gets a plan-limit error up front
-        // rather than discovering it during registration.
-        int? planLimit = wedding.GuestPhotoUploadLimit;
-
-        if (planLimit is not null)
-        {
-            int current = await guestPhotoRepository.CountByWeddingIdAsync(
-                wedding.Id, cancellationToken);
-
-            if (current + command.Count > planLimit.Value)
-            {
-                return Result.Failure<IReadOnlyList<UploadSlotResponse>>(
-                    GuestPhotoErrors.PlanLimitReached);
-            }
-        }
-
+        // Upload limit enforcement has moved to the Album module — no limit check here.
         // Generate presigned slots from the CDN provider and persist them in the slot store.
         IReadOnlyList<PresignedUploadSlot> slots =
             await photoStorageService.GeneratePresignedSlotsAsync(command.Count, cancellationToken);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
index 9a63a1e..e5a5f78 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
@@ -31,23 +31,6 @@ public async Task<Result<IReadOnlyList<Guid>>> Handle(
                 WeddingErrors.NotFound(new WeddingId(Guid.Empty)));
         }
 
-        // Fast-path limit check — derived from the Tenancy-provided upload limit on the wedding entity,
-        // no additional DB or service call needed.
-        int? planLimit = wedding.GuestPhotoUploadLimit;
-
-        if (planLimit is not null)
-        {
-            // Count only active (non-OverLimit) photos so that previously demoted photos do not
-            // incorrectly block new uploads when active count is still within the plan cap.
-            int current = await guestPhotoRepository.CountActiveByWeddingIdAsync(
-                wedding.Id, cancellationToken);
-
-            if (current + command.Photos.Count > planLimit.Value)
-            {
-                return Result.Failure<IReadOnlyList<Guid>>(GuestPhotoErrors.PlanLimitReached);
-            }
-        }
-
         // Atomically redeem all slot IDs in a single operation. If any slot is invalid or
         // already redeemed, the entire batch is rejected and no slots are consumed —
         // preventing orphaned CDN uploads that can never be registered.
@@ -68,17 +51,14 @@ public async Task<Result<IReadOnlyList<Guid>>> Handle(
             return Result.Failure<IReadOnlyList<Guid>>(GuestPhotoErrors.InvalidUploadSlot);
         }
 
-        // SnapShare must be configured before photos can be registered via the upload token.
-        // In practice GetByUploadTokenAsync only returns weddings with an active SnapShare,
-        // but we check explicitly to preserve invariants.
-        if (wedding.SnapShare is null)
+        // SocialShare must be configured before photos can be registered via the upload token.
+        if (wedding.SocialShare is null)
         {
             return Result.Failure<IReadOnlyList<Guid>>(WeddingErrors.SnapShareNotConfigured);
         }
 
-        GuestPhotoStatus initialStatus = wedding.SnapShare.ModerationMode == SnapShareModerationMode.Auto
-            ? GuestPhotoStatus.Approved
-            : GuestPhotoStatus.Pending;
+        // Photo moderation is now always auto-approve (ModerationMode moved to Album module).
+        const GuestPhotoStatus initialStatus = GuestPhotoStatus.Approved;
 
         DateTime now = dateTimeProvider.UtcNow;
 
@@ -118,16 +98,8 @@ public async Task<Result<IReadOnlyList<Guid>>> Handle(
                 now));
         }
 
-        if (planLimit is not null)
-        {
-            await guestPhotoRepository.InsertManyAndEnforceAsync(
-                photos, wedding.Id, planLimit.Value, cancellationToken);
-        }
-        else
-        {
-            guestPhotoRepository.InsertMany(photos);
-            await unitOfWork.SaveChangesAsync(cancellationToken);
-        }
+        guestPhotoRepository.InsertMany(photos);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
 
         return Result.Success<IReadOnlyList<Guid>>(photos.Select(p => p.Id.Value).ToList());
     }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandHandler.cs
index 7b35d54..070e9e7 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandHandler.cs
@@ -35,7 +35,6 @@ public async Task<Result<Guid>> Handle(CreateWeddingCommand command, Cancellatio
             command.TenantId,
             command.WeddingDate,
             hashtag,
-            command.UploadLimit,
             dateTimeProvider.UtcNow);
 
         weddingRepository.Insert(wedding);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandHandler.cs
index fd20425..cc4454a 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandHandler.cs
@@ -1,38 +1,27 @@
-using Eternelle.Common.Application.Clock;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
 namespace Eternelle.Modules.Weddings.Application.Weddings.RegenerateUploadToken;
 
+/// <summary>
+/// Stub handler — upload token management has moved to the Album module.
+/// Returns NotFound for any request until this endpoint is removed in Task 1.2.
+/// </summary>
 internal sealed class RegenerateUploadTokenCommandHandler(
-    IWeddingRepository weddingRepository,
-    IDateTimeProvider dateTimeProvider,
-    IUnitOfWork unitOfWork) : ICommandHandler<RegenerateUploadTokenCommand, Guid>
+    IWeddingRepository weddingRepository) : ICommandHandler<RegenerateUploadTokenCommand, Guid>
 {
     public async Task<Result<Guid>> Handle(RegenerateUploadTokenCommand command, CancellationToken cancellationToken)
     {
         var weddingId = new WeddingId(command.WeddingId);
 
-        Wedding? wedding = await weddingRepository.GetWithSnapShareAsync(weddingId, cancellationToken);
+        Wedding? wedding = await weddingRepository.GetWithSocialShareAsync(weddingId, cancellationToken);
 
         if (wedding is null)
         {
             return Result.Failure<Guid>(WeddingErrors.NotFound(weddingId));
         }
 
-        Result result = wedding.RegenerateUploadToken(dateTimeProvider.UtcNow);
-
-        if (result.IsFailure)
-        {
-            return Result.Failure<Guid>(result.Error);
-        }
-
-        weddingRepository.Update(wedding);
-
-        await unitOfWork.SaveChangesAsync(cancellationToken);
-
-        return Result.Success(wedding.SnapShare!.UploadToken!.Value);
+        return Result.Failure<Guid>(WeddingErrors.NotFound(weddingId));
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs
index abf2b57..489a99f 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs
@@ -1,28 +1,20 @@
-using Eternelle.Common.Application.Clock;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
 namespace Eternelle.Modules.Weddings.Application.Weddings.SetGuestPhotoUploadLimit;
 
+/// <summary>
+/// Stub handler — guest photo upload limit tracking has moved to the Album module.
+/// Will be removed in Task 1.2.
+/// </summary>
 internal sealed class SetGuestPhotoUploadLimitCommandHandler(
-    IWeddingRepository weddingRepository,
-    IUnitOfWork unitOfWork,
-    IDateTimeProvider dateTimeProvider) : ICommandHandler<SetGuestPhotoUploadLimitCommand>
+    IWeddingRepository weddingRepository) : ICommandHandler<SetGuestPhotoUploadLimitCommand>
 {
     public async Task<Result> Handle(SetGuestPhotoUploadLimitCommand command, CancellationToken cancellationToken)
     {
-        Wedding? wedding = await weddingRepository.GetByTenantIdAsync(command.TenantId, cancellationToken);
-        if (wedding is null)
-        {
-            // Wedding may not exist yet if events arrive out of order — treat as no-op.
-            return Result.Success();
-        }
-
-        wedding.SetGuestPhotoUploadLimit(command.UploadLimit, dateTimeProvider.UtcNow);
-        weddingRepository.Update(wedding);
-        await unitOfWork.SaveChangesAsync(cancellationToken);
+        // Upload limit is now tracked in the Album module — no-op here.
+        _ = await weddingRepository.GetByTenantIdAsync(command.TenantId, cancellationToken);
         return Result.Success();
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommand.cs
index db61485..fe1be5a 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommand.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommand.cs
@@ -1,5 +1,4 @@
 using Eternelle.Common.Application.Messaging;
-using Eternelle.Modules.Weddings.Domain.Weddings;
 
 namespace Eternelle.Modules.Weddings.Application.Weddings.UpdateSnapShareConfig;
 
@@ -7,6 +6,4 @@ public sealed record UpdateSnapShareConfigCommand(
     Guid WeddingId,
     string? InstagramHandle,
     string? CtaText,
-    bool Enabled,
-    SnapShareModerationMode ModerationMode,
-    bool UploaderNameRequired) : ICommand;
+    bool Enabled) : ICommand;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandHandler.cs
index d0494dd..07728b6 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandHandler.cs
@@ -46,12 +46,10 @@ public async Task<Result> Handle(UpdateSnapShareConfigCommand command, Cancellat
             callToAction = ctaResult.Value;
         }
 
-        wedding.ConfigureSnapShare(
+        wedding.ConfigureSocialShare(
             instagramHandle,
             callToAction,
             command.Enabled,
-            command.ModerationMode,
-            command.UploaderNameRequired,
             dateTimeProvider.UtcNow);
 
         weddingRepository.Update(wedding);
@@ -61,4 +59,3 @@ public async Task<Result> Handle(UpdateSnapShareConfigCommand command, Cancellat
         return Result.Success();
     }
 }
-
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandValidator.cs
index 59b3d71..21b3ae4 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandValidator.cs
@@ -17,8 +17,5 @@ public UpdateSnapShareConfigCommandValidator()
         RuleFor(c => c.CtaText)
             .MaximumLength(CallToAction.MaxLength)
             .When(c => c.CtaText is not null);
-
-        RuleFor(c => c.ModerationMode)
-            .IsInEnum();
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/WeddingSnapShareUpdatedDomainEventHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/WeddingSnapShareUpdatedDomainEventHandler.cs
index 1b584b5..c749588 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/WeddingSnapShareUpdatedDomainEventHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/WeddingSnapShareUpdatedDomainEventHandler.cs
@@ -3,10 +3,10 @@
 
 namespace Eternelle.Modules.Weddings.Application.Weddings;
 
-internal sealed class WeddingSnapShareUpdatedDomainEventHandler
-    : DomainEventHandler<WeddingSnapShareUpdatedDomainEvent>
+internal sealed class WeddingSocialShareUpdatedDomainEventHandler
+    : DomainEventHandler<WeddingSocialShareUpdatedDomainEvent>
 {
-    public override Task Handle(WeddingSnapShareUpdatedDomainEvent domainEvent, CancellationToken cancellationToken = default)
+    public override Task Handle(WeddingSocialShareUpdatedDomainEvent domainEvent, CancellationToken cancellationToken = default)
     {
         return Task.CompletedTask;
     }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/IWeddingRepository.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/IWeddingRepository.cs
index 9b7c381..90a0e74 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/IWeddingRepository.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/IWeddingRepository.cs
@@ -11,16 +11,16 @@ public interface IWeddingRepository
     Task<Wedding?> GetWithPartnersAsync(WeddingId id, CancellationToken cancellationToken = default);
 
     /// <summary>
-    /// Loads the Wedding aggregate together with its SnapShare configuration.
-    /// Used when SnapShare mutations are needed (e.g. token rotation).
+    /// Loads the Wedding aggregate together with its SocialShare configuration.
+    /// Used when SocialShare mutations are needed.
     /// </summary>
-    Task<Wedding?> GetWithSnapShareAsync(WeddingId id, CancellationToken cancellationToken = default);
+    Task<Wedding?> GetWithSocialShareAsync(WeddingId id, CancellationToken cancellationToken = default);
 
     Task<Wedding?> GetByTenantIdAsync(Guid tenantId, CancellationToken cancellationToken = default);
 
     /// <summary>
-    /// Loads the Wedding aggregate (including SnapShare) whose SnapShare.UploadToken matches.
-    /// Returns null when no match is found — callers must not reveal token validity to the outside.
+    /// Loads the Wedding aggregate (including SocialShare) whose SocialShare matches.
+    /// Returns null when no match is found.
     /// </summary>
     Task<Wedding?> GetByUploadTokenAsync(Guid uploadToken, CancellationToken cancellationToken = default);
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareConfig.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareConfig.cs
deleted file mode 100644
index 922e292..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareConfig.cs
+++ /dev/null
@@ -1,95 +0,0 @@
-using Eternelle.Common.Domain;
-
-namespace Eternelle.Modules.Weddings.Domain.Weddings;
-
-/// <summary>
-/// Owned entity within the Wedding aggregate. Represents the snap-share section
-/// configuration — the Instagram handle to tag, the call-to-action shown to guests,
-/// and the guest photo upload settings.
-///
-/// Never instantiated outside the Wedding aggregate — use Wedding.ConfigureSnapShare().
-/// Never has its own repository — always loaded as part of the Wedding aggregate.
-/// </summary>
-public sealed class SnapShareConfig : Entity
-{
-    private SnapShareConfig()
-    {
-    }
-
-    public SnapShareConfigId Id { get; private set; }
-
-    public WeddingId WeddingId { get; private set; }
-
-    /// <summary>
-    /// The Instagram account guests are prompted to tag in their photos.
-    /// Stored without the '@' — use InstagramHandle.ToDisplayString() when rendering.
-    /// </summary>
-    public InstagramHandle? InstagramHandle { get; private set; }
-
-    /// <summary>
-    /// Optional call-to-action text shown to guests, e.g. "Tag us @carlandvina2026 in your photos!"
-    /// </summary>
-    public CallToAction? CallToAction { get; private set; }
-
-    public bool Enabled { get; private set; }
-
-    /// <summary>
-    /// Random token embedded in the guest photo upload QR code URL.
-    /// Null until the couple calls RegenerateUploadToken() for the first time.
-    /// Rotating this token invalidates all previously distributed QR codes.
-    /// </summary>
-    public Guid? UploadToken { get; private set; }
-
-    /// <summary>
-    /// Controls whether guest-uploaded photos are approved immediately (Auto)
-    /// or held for the couple to review (Manual).
-    /// Defaults to Auto — matches the DB default of 'auto'.
-    /// </summary>
-    public SnapShareModerationMode ModerationMode { get; private set; }
-
-    /// <summary>
-    /// When <c>true</c>, the upload UI requires guests to enter their name before uploading.
-    /// When <c>false</c>, the name field is shown but optional.
-    /// </summary>
-    public bool UploaderNameRequired { get; private set; }
-
-    internal static SnapShareConfig Create(
-        WeddingId weddingId,
-        InstagramHandle? instagramHandle,
-        CallToAction? callToAction,
-        bool enabled,
-        SnapShareModerationMode moderationMode,
-        bool uploaderNameRequired)
-    {
-        return new SnapShareConfig
-        {
-            Id = SnapShareConfigId.New(),
-            WeddingId = weddingId,
-            InstagramHandle = instagramHandle,
-            CallToAction = callToAction,
-            Enabled = enabled,
-            UploadToken = null,
-            ModerationMode = moderationMode,
-            UploaderNameRequired = uploaderNameRequired
-        };
-    }
-
-    internal void Update(
-        InstagramHandle? instagramHandle,
-        CallToAction? callToAction,
-        bool enabled,
-        SnapShareModerationMode moderationMode,
-        bool uploaderNameRequired)
-    {
-        InstagramHandle = instagramHandle;
-        CallToAction = callToAction;
-        Enabled = enabled;
-        ModerationMode = moderationMode;
-        UploaderNameRequired = uploaderNameRequired;
-    }
-
-    internal void RegenerateToken()
-    {
-        UploadToken = Guid.NewGuid();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareConfigId.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareConfigId.cs
deleted file mode 100644
index 718a731..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareConfigId.cs
+++ /dev/null
@@ -1,7 +0,0 @@
-namespace Eternelle.Modules.Weddings.Domain.Weddings;
-
-public readonly record struct SnapShareConfigId(Guid Value)
-{
-    public static SnapShareConfigId New() => new(Guid.CreateVersion7());
-    public override string ToString() => Value.ToString();
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareModerationMode.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareModerationMode.cs
deleted file mode 100644
index ec0be3c..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SnapShareModerationMode.cs
+++ /dev/null
@@ -1,7 +0,0 @@
-namespace Eternelle.Modules.Weddings.Domain.Weddings;
-
-public enum SnapShareModerationMode
-{
-    Auto   = 0,
-    Manual = 1
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SocialShareConfig.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SocialShareConfig.cs
new file mode 100644
index 0000000..891bacd
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SocialShareConfig.cs
@@ -0,0 +1,60 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Weddings.Domain.Weddings;
+
+/// <summary>
+/// Owned entity within the Wedding aggregate. Represents the social-share section
+/// configuration — the Instagram handle to tag and the call-to-action shown to guests.
+///
+/// Never instantiated outside the Wedding aggregate — use Wedding.ConfigureSocialShare().
+/// Never has its own repository — always loaded as part of the Wedding aggregate.
+/// </summary>
+public sealed class SocialShareConfig : Entity
+{
+    private SocialShareConfig()
+    {
+    }
+
+    public SocialShareConfigId Id { get; private set; }
+
+    public WeddingId WeddingId { get; private set; }
+
+    /// <summary>
+    /// The Instagram account guests are prompted to tag in their photos.
+    /// Stored without the '@' — use InstagramHandle.ToDisplayString() when rendering.
+    /// </summary>
+    public InstagramHandle? InstagramHandle { get; private set; }
+
+    /// <summary>
+    /// Optional call-to-action text shown to guests, e.g. "Tag us @carlandvina2026 in your photos!"
+    /// </summary>
+    public CallToAction? CallToAction { get; private set; }
+
+    public bool Enabled { get; private set; }
+
+    internal static SocialShareConfig Create(
+        WeddingId weddingId,
+        InstagramHandle? instagramHandle,
+        CallToAction? callToAction,
+        bool enabled)
+    {
+        return new SocialShareConfig
+        {
+            Id = SocialShareConfigId.New(),
+            WeddingId = weddingId,
+            InstagramHandle = instagramHandle,
+            CallToAction = callToAction,
+            Enabled = enabled
+        };
+    }
+
+    internal void Update(
+        InstagramHandle? instagramHandle,
+        CallToAction? callToAction,
+        bool enabled)
+    {
+        InstagramHandle = instagramHandle;
+        CallToAction = callToAction;
+        Enabled = enabled;
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SocialShareConfigId.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SocialShareConfigId.cs
new file mode 100644
index 0000000..7c3a4ca
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/SocialShareConfigId.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Weddings.Domain.Weddings;
+
+public readonly record struct SocialShareConfigId(Guid Value)
+{
+    public static SocialShareConfigId New() => new(Guid.CreateVersion7());
+    public override string ToString() => Value.ToString();
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
index 301ff6d..630e211 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
@@ -7,8 +7,8 @@ namespace Eternelle.Modules.Weddings.Domain.Weddings;
 /// <summary>
 /// Wedding aggregate root. Represents the wedding profile (wedding.profiles table)
 /// and directly owns:
-///   - Partners   (wedding.partners — always exactly two, partner_number 1 and 2)
-///   - SnapShare  (wedding.snap_share_configs — 1:1, no independent lifecycle)
+///   - Partners      (wedding.partners — always exactly two, partner_number 1 and 2)
+///   - SocialShare   (wedding.snap_share_configs — 1:1, no independent lifecycle)
 ///
 /// All other child aggregates — StoryMoment, EntourageGroup, GalleryImage, GiftOption,
 /// DressCodeConfig, CeremonyAct, VendorCredit, Reminder — reference this aggregate by
@@ -54,13 +54,6 @@ private Wedding()
     /// </summary>
     public Hashtag? Hashtag { get; private set; }
 
-    /// <summary>
-    /// Guest-photo upload cap for this wedding. Null = unlimited.
-    /// Derived in the Tenancy module from the selected GuestUploads section variant
-    /// and kept in sync via TenantUploadLimitChanged integration events.
-    /// </summary>
-    public int? GuestPhotoUploadLimit { get; private set; }
-
     public DateTime CreatedAtUtc { get; private set; }
 
     public DateTime UpdatedAtUtc { get; private set; }
@@ -72,9 +65,9 @@ private Wedding()
     public IReadOnlyCollection<Partner> Partners => _partners.AsReadOnly();
 
     /// <summary>
-    /// Snap-share section configuration. Null until ConfigureSnapShare() is first called.
+    /// Social-share section configuration. Null until ConfigureSocialShare() is first called.
     /// </summary>
-    public SnapShareConfig? SnapShare { get; private set; }
+    public SocialShareConfig? SocialShare { get; private set; }
 
     // ─── Factory ────────────────────────────────────────────────────────────────
 
@@ -82,7 +75,6 @@ public static Wedding Create(
         Guid tenantId,
         DateOnly weddingDate,
         Hashtag? hashtag,
-        int? uploadLimit,
         DateTime utcNow)
     {
         var wedding = new Wedding
@@ -92,9 +84,8 @@ public static Wedding Create(
             SchemaVersion = 1,
             WeddingDate = weddingDate,
             Hashtag = hashtag,
-            GuestPhotoUploadLimit = uploadLimit,
             CreatedAtUtc = utcNow,
-            UpdatedAtUtc = utcNow
+            UpdatedAtUtc = utcNow,
         };
 
         wedding.Raise(new WeddingCreatedDomainEvent(wedding.Id, tenantId, weddingDate));
@@ -118,19 +109,6 @@ public Result UpdateDetails(
         return Result.Success();
     }
 
-    // ─── Upload limit management ──────────────────────────────────────────────────
-
-    public void SetGuestPhotoUploadLimit(int? uploadLimit, DateTime utcNow)
-    {
-        if (GuestPhotoUploadLimit == uploadLimit)
-        {
-            return;
-        }
-
-        GuestPhotoUploadLimit = uploadLimit;
-        UpdatedAtUtc = utcNow;
-    }
-
     // ─── Partner management ─────────────────────────────────────────────────────
 
     /// <summary>
@@ -184,49 +162,29 @@ public Result UpdatePartner(
         return Result.Success();
     }
 
-    // ─── Snap share ──────────────────────────────────────────────────────────────
+    // ─── Social share ─────────────────────────────────────────────────────────────
 
     /// <summary>
-    /// Creates or updates the snap-share section configuration.
+    /// Creates or updates the social-share section configuration.
     /// Idempotent — safe to call on first setup and on subsequent edits.
     /// </summary>
-    public void ConfigureSnapShare(
+    public void ConfigureSocialShare(
         InstagramHandle? instagramHandle,
         CallToAction? callToAction,
         bool enabled,
-        SnapShareModerationMode moderationMode,
-        bool uploaderNameRequired,
         DateTime utcNow)
     {
-        if (SnapShare is null)
+        if (SocialShare is null)
         {
-            SnapShare = SnapShareConfig.Create(Id, instagramHandle, callToAction, enabled, moderationMode, uploaderNameRequired);
+            SocialShare = SocialShareConfig.Create(Id, instagramHandle, callToAction, enabled);
         }
         else
         {
-            SnapShare.Update(instagramHandle, callToAction, enabled, moderationMode, uploaderNameRequired);
+            SocialShare.Update(instagramHandle, callToAction, enabled);
         }
 
         UpdatedAtUtc = utcNow;
 
-        Raise(new WeddingSnapShareUpdatedDomainEvent(Id));
-    }
-
-    /// <summary>
-    /// Rotates the guest photo upload token, invalidating all previously distributed
-    /// QR codes. SnapShare must be configured first — returns a failure otherwise.
-    /// Raises no domain event (stateless rotate — no downstream consumers need to react).
-    /// </summary>
-    public Result RegenerateUploadToken(DateTime utcNow)
-    {
-        if (SnapShare is null)
-        {
-            return Result.Failure(WeddingErrors.SnapShareNotConfigured);
-        }
-
-        SnapShare.RegenerateToken();
-        UpdatedAtUtc = utcNow;
-
-        return Result.Success();
+        Raise(new WeddingSocialShareUpdatedDomainEvent(Id));
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingSnapShareUpdatedDomainEvent.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingSocialShareUpdatedDomainEvent.cs
similarity index 61%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingSnapShareUpdatedDomainEvent.cs
rename to src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingSocialShareUpdatedDomainEvent.cs
index 5d59623..d992948 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingSnapShareUpdatedDomainEvent.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/WeddingSocialShareUpdatedDomainEvent.cs
@@ -2,7 +2,7 @@
 
 namespace Eternelle.Modules.Weddings.Domain.Weddings;
 
-public sealed class WeddingSnapShareUpdatedDomainEvent(WeddingId weddingId) : DomainEvent
+public sealed class WeddingSocialShareUpdatedDomainEvent(WeddingId weddingId) : DomainEvent
 {
     public WeddingId WeddingId { get; init; } = weddingId;
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Converters/SnapShareConfigIdConverter.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Converters/SocialShareConfigIdConverter.cs
similarity index 53%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Converters/SnapShareConfigIdConverter.cs
rename to src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Converters/SocialShareConfigIdConverter.cs
index 6a044e4..c824099 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Converters/SnapShareConfigIdConverter.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Converters/SocialShareConfigIdConverter.cs
@@ -3,5 +3,5 @@
 
 namespace Eternelle.Modules.Weddings.Infrastructure.Database.Converters;
 
-internal sealed class SnapShareConfigIdConverter()
-    : ValueConverter<SnapShareConfigId, Guid>(id => id.Value, value => new SnapShareConfigId(value));
+internal sealed class SocialShareConfigIdConverter()
+    : ValueConverter<SocialShareConfigId, Guid>(id => id.Value, value => new SocialShareConfigId(value));
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/WeddingsDbContext.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/WeddingsDbContext.cs
index 4e2666c..a1c947e 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/WeddingsDbContext.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/WeddingsDbContext.cs
@@ -48,8 +48,8 @@ protected override void ConfigureConventions(ModelConfigurationBuilder configura
         configurationBuilder.Properties<PartnerId>()
             .HaveConversion<PartnerIdConverter>();
 
-        configurationBuilder.Properties<SnapShareConfigId>()
-            .HaveConversion<SnapShareConfigIdConverter>();
+        configurationBuilder.Properties<SocialShareConfigId>()
+            .HaveConversion<SocialShareConfigIdConverter>();
 
         configurationBuilder.Properties<EntourageGroupId>()
             .HaveConversion<EntourageGroupIdConverter>();
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SnapShareConfigConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SnapShareConfigConfiguration.cs
deleted file mode 100644
index 4c3252e..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SnapShareConfigConfiguration.cs
+++ /dev/null
@@ -1,63 +0,0 @@
-using Eternelle.Modules.Weddings.Domain.Weddings;
-using Microsoft.EntityFrameworkCore;
-using Microsoft.EntityFrameworkCore.Metadata.Builders;
-
-namespace Eternelle.Modules.Weddings.Infrastructure.Weddings;
-
-internal static class SnapShareConfigConfiguration
-{
-    public static void Configure(OwnedNavigationBuilder<Wedding, SnapShareConfig> snapShare)
-    {
-        snapShare.ToTable("snap_share_configs");
-
-        snapShare.HasKey(s => s.Id);
-
-        snapShare.WithOwner().HasForeignKey(s => s.WeddingId);
-
-        // InstagramHandle — value object with FromPersistence() bypass factory.
-        // Stored as plain text; Create() validation was enforced on write.
-        snapShare.Property(s => s.InstagramHandle)
-            .HasConversion(
-                h => h != null ? h.Value : null,
-                v => v != null ? InstagramHandle.FromPersistence(v) : null)
-            .HasMaxLength(InstagramHandle.MaxLength);
-
-        // Explicitly pin WeddingId to "wedding_id" to prevent EF Core from generating
-        // a shadow property collision (id1) when the owned entity also has its own Id column.
-        snapShare.Property(s => s.WeddingId)
-            .HasColumnName("wedding_id");
-
-        snapShare.Property(s => s.CallToAction)
-            .HasConversion(
-                v => v != null ? v.Value : null,
-                v => v != null ? CallToAction.FromPersistence(v) : null)
-            .HasColumnName("cta_text")
-            .HasMaxLength(CallToAction.MaxLength);
-
-        snapShare.Property(s => s.Enabled).IsRequired();
-
-        snapShare.Property(s => s.UploadToken);
-
-        // SnapShareModerationMode — stored as int. Auto = 0, Manual = 1.
-        snapShare.Property(s => s.ModerationMode)
-            .HasConversion<int>()
-            .IsRequired()
-            .HasDefaultValue(SnapShareModerationMode.Auto);
-
-        snapShare.Property(s => s.UploaderNameRequired)
-            .IsRequired()
-            .HasDefaultValue(false);
-
-        snapShare.HasIndex(s => s.WeddingId)
-            .IsUnique()
-            .HasDatabaseName("ix_snap_share_configs_wedding_id");
-
-        // Lookup by upload token on every public guest-photo upload request.
-        // Partial + unique: skips NULL rows (SnapShare not yet activated) and
-        // enforces that no two weddings share the same active token.
-        snapShare.HasIndex(s => s.UploadToken)
-            .IsUnique()
-            .HasFilter("upload_token IS NOT NULL")
-            .HasDatabaseName("ix_snap_share_configs_upload_token");
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SocialShareConfigConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SocialShareConfigConfiguration.cs
new file mode 100644
index 0000000..4a92f50
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SocialShareConfigConfiguration.cs
@@ -0,0 +1,43 @@
+using Eternelle.Modules.Weddings.Domain.Weddings;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Weddings.Infrastructure.Weddings;
+
+internal static class SocialShareConfigConfiguration
+{
+    public static void Configure(OwnedNavigationBuilder<Wedding, SocialShareConfig> socialShare)
+    {
+        socialShare.ToTable("snap_share_configs");
+
+        socialShare.HasKey(s => s.Id);
+
+        socialShare.WithOwner().HasForeignKey(s => s.WeddingId);
+
+        // InstagramHandle — value object with FromPersistence() bypass factory.
+        // Stored as plain text; Create() validation was enforced on write.
+        socialShare.Property(s => s.InstagramHandle)
+            .HasConversion(
+                h => h != null ? h.Value : null,
+                v => v != null ? InstagramHandle.FromPersistence(v) : null)
+            .HasMaxLength(InstagramHandle.MaxLength);
+
+        // Explicitly pin WeddingId to "wedding_id" to prevent EF Core from generating
+        // a shadow property collision (id1) when the owned entity also has its own Id column.
+        socialShare.Property(s => s.WeddingId)
+            .HasColumnName("wedding_id");
+
+        socialShare.Property(s => s.CallToAction)
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? CallToAction.FromPersistence(v) : null)
+            .HasColumnName("cta_text")
+            .HasMaxLength(CallToAction.MaxLength);
+
+        socialShare.Property(s => s.Enabled).IsRequired();
+
+        socialShare.HasIndex(s => s.WeddingId)
+            .IsUnique()
+            .HasDatabaseName("ix_snap_share_configs_wedding_id");
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
index 28b0ec6..a31f048 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
@@ -81,12 +81,12 @@ public void Configure(EntityTypeBuilder<Wedding> builder)
             .HasField("_partners")
             .UsePropertyAccessMode(PropertyAccessMode.Field);
 
-        // ─── SnapShare ───────────────────────────────────────────────────────────
+        // ─── SocialShare ─────────────────────────────────────────────────────────
         // Optional 1:1 owned entity in its own table (wedding.snap_share_configs).
-        // Null until ConfigureSnapShare() is called for the first time.
+        // Null until ConfigureSocialShare() is called for the first time.
 
-        builder.OwnsOne(w => w.SnapShare, SnapShareConfigConfiguration.Configure);
+        builder.OwnsOne(w => w.SocialShare, SocialShareConfigConfiguration.Configure);
 
-        builder.Navigation(w => w.SnapShare).IsRequired(false);
+        builder.Navigation(w => w.SocialShare).IsRequired(false);
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingRepository.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingRepository.cs
index c1dc860..c5b5168 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingRepository.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingRepository.cs
@@ -19,10 +19,10 @@ internal sealed class WeddingRepository(WeddingsDbContext context) : IWeddingRep
             .SingleOrDefaultAsync(w => w.Id == id, cancellationToken);
     }
 
-    public async Task<Wedding?> GetWithSnapShareAsync(WeddingId id, CancellationToken cancellationToken = default)
+    public async Task<Wedding?> GetWithSocialShareAsync(WeddingId id, CancellationToken cancellationToken = default)
     {
         return await context.Weddings
-            .Include(w => w.SnapShare)
+            .Include(w => w.SocialShare)
             .SingleOrDefaultAsync(w => w.Id == id, cancellationToken);
     }
 
@@ -35,9 +35,9 @@ internal sealed class WeddingRepository(WeddingsDbContext context) : IWeddingRep
     public async Task<Wedding?> GetByUploadTokenAsync(Guid uploadToken, CancellationToken cancellationToken = default)
     {
         return await context.Weddings
-            .Include(w => w.SnapShare)
+            .Include(w => w.SocialShare)
             .SingleOrDefaultAsync(
-                w => w.SnapShare != null && w.SnapShare.UploadToken == uploadToken,
+                w => w.SocialShare != null,
                 cancellationToken);
     }
 
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/ApproveGuestPhotoEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/ApproveGuestPhotoEndpoint.cs
index 41c6578..1aae5ca 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/ApproveGuestPhotoEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/ApproveGuestPhotoEndpoint.cs
@@ -23,7 +23,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
 
             return result.Match(() => Results.Ok(), ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .RequireAuthorization("wedding:edit");
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkApproveGuestPhotosEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkApproveGuestPhotosEndpoint.cs
index 4dca87d..40df3e9 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkApproveGuestPhotosEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkApproveGuestPhotosEndpoint.cs
@@ -27,7 +27,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
 
             return result.Match(Results.Ok, ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .RequireAuthorization("wedding:edit");
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkDeleteGuestPhotosEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkDeleteGuestPhotosEndpoint.cs
index 7048c43..ed28fa0 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkDeleteGuestPhotosEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkDeleteGuestPhotosEndpoint.cs
@@ -27,7 +27,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
 
             return result.Match(() => Results.NoContent(), ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .RequireAuthorization("wedding:edit");
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkRejectGuestPhotosEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkRejectGuestPhotosEndpoint.cs
index 4313c28..a113cf0 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkRejectGuestPhotosEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkRejectGuestPhotosEndpoint.cs
@@ -27,7 +27,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
 
             return result.Match(() => Results.Ok(), ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .RequireAuthorization("wedding:edit");
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/DeleteGuestPhotoEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/DeleteGuestPhotoEndpoint.cs
index e41c7d1..a599d7a 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/DeleteGuestPhotoEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/DeleteGuestPhotoEndpoint.cs
@@ -23,7 +23,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
 
             return result.Match(() => Results.NoContent(), ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .RequireAuthorization("wedding:edit");
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GenerateUploadSlotsEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GenerateUploadSlotsEndpoint.cs
index 7f0ee4f..0cfde84 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GenerateUploadSlotsEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GenerateUploadSlotsEndpoint.cs
@@ -32,7 +32,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
 
             return result.Match(Results.Ok, ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .AllowAnonymous();
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetGuestPhotosEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetGuestPhotosEndpoint.cs
index 121d99d..e9bb498 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetGuestPhotosEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetGuestPhotosEndpoint.cs
@@ -26,7 +26,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
 
             return result.Match(Results.Ok, ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .RequireAuthorization("wedding:edit");
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetPublicGuestPhotoFeedEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetPublicGuestPhotoFeedEndpoint.cs
index e8961c5..4563e1a 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetPublicGuestPhotoFeedEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetPublicGuestPhotoFeedEndpoint.cs
@@ -50,7 +50,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
                 },
                 ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .AllowAnonymous();
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetUploadContextEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetUploadContextEndpoint.cs
index edb8504..d228a12 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetUploadContextEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetUploadContextEndpoint.cs
@@ -23,7 +23,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
 
             return result.Match(Results.Ok, ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .AllowAnonymous();
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RegisterGuestPhotosEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RegisterGuestPhotosEndpoint.cs
index 397a70e..6e2f0c5 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RegisterGuestPhotosEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RegisterGuestPhotosEndpoint.cs
@@ -46,7 +46,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
                 photoIds => Results.Ok(new { photoIds }),
                 ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .AllowAnonymous()
         .RequireRateLimiting(RateLimitingPolicies.GuestPhotoUpload);
     }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RejectGuestPhotoEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RejectGuestPhotoEndpoint.cs
index fb8ddb8..1002d9a 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RejectGuestPhotoEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RejectGuestPhotoEndpoint.cs
@@ -23,7 +23,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
 
             return result.Match(() => Results.Ok(), ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .RequireAuthorization("wedding:edit");
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tags.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tags.cs
index 0d4712b..9f01023 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tags.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tags.cs
@@ -10,6 +10,6 @@ internal static class Tags
     internal const string DressCode = "DressCode";
     internal const string CeremonyActs = "CeremonyActs";
     internal const string VendorCredits = "VendorCredits";
-    internal const string SnapShare = "SnapShare";
+    internal const string SocialShare = "SocialShare";
     internal const string Reminders = "Reminders";
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/RegenerateUploadTokenEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/RegenerateUploadTokenEndpoint.cs
index e771c12..2309840 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/RegenerateUploadTokenEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/RegenerateUploadTokenEndpoint.cs
@@ -2,15 +2,17 @@
 using Eternelle.Common.Presentation.Endpoints;
 using Eternelle.Common.Presentation.Results;
 using Eternelle.Modules.Weddings.Application.Weddings.RegenerateUploadToken;
-using Eternelle.Modules.Weddings.Application.Weddings;
 using MediatR;
 using Microsoft.AspNetCore.Builder;
 using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Routing;
-using Microsoft.Extensions.Options;
 
 namespace Eternelle.Modules.Weddings.Presentation.Weddings;
 
+/// <summary>
+/// Stub endpoint — upload token management has moved to the Album module.
+/// Will be removed in Task 1.2.
+/// </summary>
 internal sealed class RegenerateUploadTokenEndpoint : IEndpoint
 {
     public void MapEndpoint(IEndpointRouteBuilder app)
@@ -18,20 +20,15 @@ public void MapEndpoint(IEndpointRouteBuilder app)
         app.MapPost("weddings/{weddingId}/snap-share/regenerate-token", async (
             Guid weddingId,
             ISender sender,
-            IOptions<SnapShareOptions> options,
             CancellationToken ct) =>
         {
             Result<Guid> result = await sender.Send(new RegenerateUploadTokenCommand(weddingId), ct);
 
             return result.Match(
-                token => Results.Ok(new
-                {
-                    uploadToken = token,
-                    qrUrl = $"{options.Value.UploadBaseUrl}{(options.Value.UploadBaseUrl.Contains('?') ? '&' : '?')}token={token}"
-                }),
+                _ => Results.Ok(),
                 ApiResults.Problem);
         })
-        .WithTags(Tags.SnapShare)
+        .WithTags(Tags.SocialShare)
         .RequireAuthorization("wedding:edit");
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/UpdateSnapShareConfigEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/UpdateSnapShareConfigEndpoint.cs
index c8e620c..b6927de 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/UpdateSnapShareConfigEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/UpdateSnapShareConfigEndpoint.cs
@@ -1,8 +1,7 @@
-using Eternelle.Common.Domain;
+using Eternelle.Common.Domain;
 using Eternelle.Common.Presentation.Endpoints;
 using Eternelle.Common.Presentation.Results;
 using Eternelle.Modules.Weddings.Application.Weddings.UpdateSnapShareConfig;
-using Eternelle.Modules.Weddings.Domain.Weddings;
 using MediatR;
 using Microsoft.AspNetCore.Builder;
 using Microsoft.AspNetCore.Http;
@@ -15,9 +14,7 @@ internal sealed class UpdateSnapShareConfigEndpoint : IEndpoint
     internal sealed record Request(
         string? InstagramHandle,
         string? CtaText,
-        bool Enabled,
-        int ModerationMode,
-        bool UploaderNameRequired);
+        bool Enabled);
 
     public void MapEndpoint(IEndpointRouteBuilder app)
     {
@@ -27,9 +24,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
                 weddingId,
                 request.InstagramHandle,
                 request.CtaText,
-                request.Enabled,
-                (SnapShareModerationMode)request.ModerationMode,
-                request.UploaderNameRequired);
+                request.Enabled);
 
             Result result = await sender.Send(command, ct);
 

From 4c2d4362734032c5abedec0e3f4014b894286f7d Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 01:32:19 +0800
Subject: [PATCH 117/155] Eternelle-194 Rename SnapShareResponse to
 SocialShareResponse

---
 .../GetWedding/GetWeddingQueryHandler.cs       | 18 +++++++++---------
 ...ShareResponse.cs => SocialShareResponse.cs} |  4 ++--
 .../Weddings/GetWedding/WeddingResponse.cs     |  2 +-
 3 files changed, 12 insertions(+), 12 deletions(-)
 rename src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/{SnapShareResponse.cs => SocialShareResponse.cs} (67%)

diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs
index 0712f0a..ccf5560 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/GetWeddingQueryHandler.cs
@@ -29,10 +29,10 @@ public async Task<Result<WeddingResponse>> Handle(GetWeddingQuery query, Cancell
                  pa.last_name        AS {nameof(PartnerResponse.LastName)},
                  pa.bio              AS {nameof(PartnerResponse.Bio)},
                  pa.image_url        AS {nameof(PartnerResponse.ImageUrl)},
-                 ss.id               AS {nameof(SnapShareResponse.SnapShareId)},
-                 ss.instagram_handle AS {nameof(SnapShareResponse.InstagramHandle)},
-                 ss.cta_text         AS {nameof(SnapShareResponse.CtaText)},
-                 ss.enabled          AS {nameof(SnapShareResponse.Enabled)}
+                 ss.id               AS {nameof(SocialShareResponse.SocialShareId)},
+                 ss.instagram_handle AS {nameof(SocialShareResponse.InstagramHandle)},
+                 ss.cta_text         AS {nameof(SocialShareResponse.CtaText)},
+                 ss.enabled          AS {nameof(SocialShareResponse.Enabled)}
              FROM wedding.profiles p
              LEFT JOIN wedding.partners pa ON pa.wedding_id = p.id
              LEFT JOIN wedding.snap_share_configs ss ON ss.wedding_id = p.id
@@ -41,9 +41,9 @@ FROM wedding.profiles p
 
         Dictionary<Guid, WeddingResponse> weddingDictionary = [];
 
-        await connection.QueryAsync<WeddingResponse, PartnerResponse?, SnapShareResponse?, WeddingResponse>(
+        await connection.QueryAsync<WeddingResponse, PartnerResponse?, SocialShareResponse?, WeddingResponse>(
             new CommandDefinition(sql, query, cancellationToken: cancellationToken),
-            (wedding, partner, snapShare) =>
+            (wedding, partner, socialShare) =>
             {
                 if (weddingDictionary.TryGetValue(wedding.Id, out WeddingResponse? existingWedding))
                 {
@@ -59,14 +59,14 @@ FROM wedding.profiles p
                     wedding.Partners.Add(partner);
                 }
 
-                if (snapShare is not null && wedding.SnapShare is null)
+                if (socialShare is not null && wedding.SocialShare is null)
                 {
-                    wedding.SnapShare = snapShare;
+                    wedding.SocialShare = socialShare;
                 }
 
                 return wedding;
             },
-            splitOn: $"{nameof(PartnerResponse.PartnerId)},{nameof(SnapShareResponse.SnapShareId)}");
+            splitOn: $"{nameof(PartnerResponse.PartnerId)},{nameof(SocialShareResponse.SocialShareId)}");
 
         if (!weddingDictionary.TryGetValue(query.WeddingId, out WeddingResponse? weddingResponse))
         {
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/SnapShareResponse.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/SocialShareResponse.cs
similarity index 67%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/SnapShareResponse.cs
rename to src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/SocialShareResponse.cs
index 8492856..0533b26 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/SnapShareResponse.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/SocialShareResponse.cs
@@ -1,7 +1,7 @@
 namespace Eternelle.Modules.Weddings.Application.Weddings.GetWedding;
 
-public sealed record SnapShareResponse(
-    Guid SnapShareId,
+public sealed record SocialShareResponse(
+    Guid SocialShareId,
     string? InstagramHandle,
     string? CtaText,
     bool Enabled);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/WeddingResponse.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/WeddingResponse.cs
index 85899b7..8c3b8e8 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/WeddingResponse.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/GetWedding/WeddingResponse.cs
@@ -9,5 +9,5 @@ public sealed record WeddingResponse(
     DateTime UpdatedAtUtc)
 {
     public List<PartnerResponse> Partners { get; } = [];
-    public SnapShareResponse? SnapShare { get; set; }
+    public SocialShareResponse? SocialShare { get; set; }
 }

From 6548ff8965aa12aec63c3799507c2c1da2b2b71a Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 01:43:11 +0800
Subject: [PATCH 118/155] Eternelle-194 Remove guest-photo upload subsystem
 from Weddings

---
 src/API/Eternelle.Api/Program.cs              |  13 --
 .../modules.weddings.Development.json         |  10 --
 src/API/Eternelle.Api/modules.weddings.json   |  10 --
 .../Storage/IPhotoStorageService.cs           |  17 --
 .../Abstractions/Storage/IUploadSlotStore.cs  |  28 ---
 .../Storage/PresignedUploadSlot.cs            |  12 --
 .../ApproveGuestPhotoCommand.cs               |   5 -
 .../ApproveGuestPhotoCommandHandler.cs        |  39 -----
 .../ApproveGuestPhotoCommandValidator.cs      |  15 --
 .../BulkApproveGuestPhotosCommand.cs          |   5 -
 .../BulkApproveGuestPhotosCommandHandler.cs   |  63 -------
 .../BulkApproveGuestPhotosCommandValidator.cs |  18 --
 .../BulkApproveGuestPhotosResponse.cs         |   5 -
 .../BulkDeleteGuestPhotosCommand.cs           |   5 -
 .../BulkDeleteGuestPhotosCommandHandler.cs    |  40 -----
 .../BulkDeleteGuestPhotosCommandValidator.cs  |  18 --
 .../BulkRejectGuestPhotosCommand.cs           |   5 -
 .../BulkRejectGuestPhotosCommandHandler.cs    |  61 -------
 .../BulkRejectGuestPhotosCommandValidator.cs  |  18 --
 .../DeleteGuestPhotoCommand.cs                |   5 -
 .../DeleteGuestPhotoCommandHandler.cs         |  30 ----
 .../DeleteGuestPhotoCommandValidator.cs       |  15 --
 .../GenerateUploadSlotsCommand.cs             |   9 -
 .../GenerateUploadSlotsCommandHandler.cs      |  45 -----
 .../GenerateUploadSlotsCommandValidator.cs    |  16 --
 .../GenerateUploadSlots/UploadSlotResponse.cs |   6 -
 .../GetGuestPhotos/GetGuestPhotosQuery.cs     |   8 -
 .../GetGuestPhotosQueryHandler.cs             |  49 ------
 .../GetPublicGuestPhotosQuery.cs              |   6 -
 .../GetPublicGuestPhotosQueryHandler.cs       |  43 -----
 .../GetUploadContext/GetUploadContextQuery.cs |   6 -
 .../GetUploadContextQueryHandler.cs           |  41 -----
 .../GetUploadContext/UploadContextResponse.cs |   5 -
 .../GuestPhotos/GuestPhotoResponse.cs         |  14 --
 .../RegisterGuestPhotos/PhotoRegistration.cs  |  11 --
 .../RegisterGuestPhotosCommand.cs             |   7 -
 .../RegisterGuestPhotosCommandHandler.cs      | 106 ------------
 .../RegisterGuestPhotosCommandValidator.cs    |  38 ----
 .../RejectGuestPhotoCommand.cs                |   5 -
 .../RejectGuestPhotoCommandHandler.cs         |  39 -----
 .../RejectGuestPhotoCommandValidator.cs       |  15 --
 .../CreateWedding/CreateWeddingCommand.cs     |   3 +-
 .../CreateWeddingCommandValidator.cs          |   4 -
 .../RegenerateUploadTokenCommand.cs           |   5 -
 .../RegenerateUploadTokenCommandHandler.cs    |  27 ---
 .../RegenerateUploadTokenCommandValidator.cs  |  12 --
 .../SetGuestPhotoUploadLimitCommand.cs        |   5 -
 .../SetGuestPhotoUploadLimitCommandHandler.cs |  20 ---
 ...etGuestPhotoUploadLimitCommandValidator.cs |  15 --
 .../Weddings/SnapShareOptions.cs              |   6 -
 .../GuestPhotos/GuestPhoto.cs                 | 155 -----------------
 .../GuestPhotoApprovedDomainEvent.cs          |  13 --
 .../GuestPhotoCreatedDomainEvent.cs           |  11 --
 .../GuestPhotos/GuestPhotoErrors.cs           |  26 ---
 .../GuestPhotos/GuestPhotoId.cs               |   8 -
 .../GuestPhotoRejectedDomainEvent.cs          |  13 --
 .../GuestPhotos/GuestPhotoStatus.cs           |   9 -
 .../GuestPhotos/IGuestPhotoRepository.cs      |  36 ----
 .../Converters/GuestPhotoIdConverter.cs       |   7 -
 .../Database/WeddingsDbContext.cs             |   7 -
 .../GuestPhotos/GuestPhotoConfiguration.cs    |  61 -------
 .../GuestPhotos/GuestPhotoRepository.cs       | 126 --------------
 .../Storage/PhotoStorageOptions.cs            |  27 ---
 .../Storage/RedisUploadSlotStore.cs           |  96 -----------
 .../Storage/S3PhotoStorageService.cs          | 163 ------------------
 .../Storage/StubPhotoStorageService.cs        |  30 ----
 .../Storage/StubUploadSlotStore.cs            |  62 -------
 .../WeddingsModule.cs                         |  34 ----
 .../GuestPhotos/ApproveGuestPhotoEndpoint.cs  |  29 ----
 .../BulkApproveGuestPhotosEndpoint.cs         |  33 ----
 .../BulkDeleteGuestPhotosEndpoint.cs          |  33 ----
 .../BulkRejectGuestPhotosEndpoint.cs          |  33 ----
 .../GuestPhotos/DeleteGuestPhotoEndpoint.cs   |  29 ----
 .../GenerateUploadSlotsEndpoint.cs            |  38 ----
 .../GuestPhotos/GetGuestPhotosEndpoint.cs     |  32 ----
 .../GetPublicGuestPhotoFeedEndpoint.cs        |  56 ------
 .../GuestPhotos/GetUploadContextEndpoint.cs   |  29 ----
 .../RegisterGuestPhotosEndpoint.cs            |  53 ------
 .../GuestPhotos/RejectGuestPhotoEndpoint.cs   |  29 ----
 .../RateLimitingPolicies.cs                   |  10 --
 ...enantProvisionedIntegrationEventHandler.cs |   3 +-
 ...loadLimitChangedIntegrationEventHandler.cs |  18 --
 .../Weddings/RegenerateUploadTokenEndpoint.cs |  34 ----
 83 files changed, 2 insertions(+), 2344 deletions(-)
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/IPhotoStorageService.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/IUploadSlotStore.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/PresignedUploadSlot.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommand.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommandHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommandValidator.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommand.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommandHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommandValidator.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosResponse.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommand.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommandHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommandValidator.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommand.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommandHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommandValidator.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommand.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommandHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommandValidator.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommand.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandValidator.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/UploadSlotResponse.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQuery.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQueryHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQuery.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQueryHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQuery.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQueryHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/UploadContextResponse.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GuestPhotoResponse.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/PhotoRegistration.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommand.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommand.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommandHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommandValidator.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommand.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandValidator.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommand.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandValidator.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SnapShareOptions.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhoto.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoApprovedDomainEvent.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoCreatedDomainEvent.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoErrors.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoId.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoRejectedDomainEvent.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoStatus.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/IGuestPhotoRepository.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Converters/GuestPhotoIdConverter.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoConfiguration.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoRepository.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/PhotoStorageOptions.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/RedisUploadSlotStore.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/S3PhotoStorageService.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/StubPhotoStorageService.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/StubUploadSlotStore.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/ApproveGuestPhotoEndpoint.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkApproveGuestPhotosEndpoint.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkDeleteGuestPhotosEndpoint.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkRejectGuestPhotosEndpoint.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/DeleteGuestPhotoEndpoint.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GenerateUploadSlotsEndpoint.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetGuestPhotosEndpoint.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetPublicGuestPhotoFeedEndpoint.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetUploadContextEndpoint.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RegisterGuestPhotosEndpoint.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RejectGuestPhotoEndpoint.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/RateLimitingPolicies.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs
 delete mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/RegenerateUploadTokenEndpoint.cs

diff --git a/src/API/Eternelle.Api/Program.cs b/src/API/Eternelle.Api/Program.cs
index 44b2f4e..7afe6f2 100644
--- a/src/API/Eternelle.Api/Program.cs
+++ b/src/API/Eternelle.Api/Program.cs
@@ -11,7 +11,6 @@
 using Eternelle.Modules.Tenancy.Infrastructure;
 using Eternelle.Modules.Users.Infrastructure;
 using Eternelle.Modules.Weddings.Infrastructure;
-using Eternelle.Modules.Weddings.Presentation;
 using HealthChecks.UI.Client;
 using Microsoft.AspNetCore.Diagnostics.HealthChecks;
 using Scalar.AspNetCore;
@@ -69,18 +68,6 @@
 
 builder.Services.AddRateLimiter(options =>
 {
-    // IP-based fixed-window limiter for the public guest photo upload endpoint.
-    // 10 uploads per minute per IP — protects against spam without a JWT to identify callers.
-    options.AddPolicy(RateLimitingPolicies.GuestPhotoUpload, httpContext =>
-        RateLimitPartition.GetFixedWindowLimiter(
-            partitionKey: httpContext.Connection.RemoteIpAddress?.ToString() ?? "unknown",
-            factory: _ => new FixedWindowRateLimiterOptions
-            {
-                PermitLimit = 10,
-                Window = TimeSpan.FromMinutes(1),
-                QueueLimit = 0
-            }));
-
     options.AddPolicy(Eternelle.Modules.Rsvp.Presentation.RateLimitingPolicies.RsvpLookup, ctx =>
         RateLimitPartition.GetFixedWindowLimiter(
             partitionKey: ctx.Connection.RemoteIpAddress?.ToString() ?? "unknown",
diff --git a/src/API/Eternelle.Api/modules.weddings.Development.json b/src/API/Eternelle.Api/modules.weddings.Development.json
index dac4bd7..0d71e9a 100644
--- a/src/API/Eternelle.Api/modules.weddings.Development.json
+++ b/src/API/Eternelle.Api/modules.weddings.Development.json
@@ -1,15 +1,5 @@
 {
   "Weddings": {
-    "SnapShare": {
-      "UploadBaseUrl": "http://localhost:5173/snap-share"
-    },
-    "PhotoStorage": {
-      "ServiceUrl": "http://eternelle.minio:9000",
-      "PublicUrl": "http://localhost:9000",
-      "AccessKey": "minioadmin",
-      "SecretKey": "minioadmin",
-      "BucketName": "eternelle-photos"
-    },
     "Outbox": {
       "IntervalInSeconds": 5,
       "BatchSize": 20
diff --git a/src/API/Eternelle.Api/modules.weddings.json b/src/API/Eternelle.Api/modules.weddings.json
index 095c9bc..70f5436 100644
--- a/src/API/Eternelle.Api/modules.weddings.json
+++ b/src/API/Eternelle.Api/modules.weddings.json
@@ -1,15 +1,5 @@
 {
   "Weddings": {
-    "SnapShare": {
-      "UploadBaseUrl": ""
-    },
-    "PhotoStorage": {
-      "ServiceUrl": "",
-      "PublicUrl": "",
-      "AccessKey": "",
-      "SecretKey": "",
-      "BucketName": ""
-    },
     "Outbox": {
       "IntervalInSeconds": 5,
       "BatchSize": 50
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/IPhotoStorageService.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/IPhotoStorageService.cs
deleted file mode 100644
index e3ac12e..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/IPhotoStorageService.cs
+++ /dev/null
@@ -1,17 +0,0 @@
-namespace Eternelle.Modules.Weddings.Application.Abstractions.Storage;
-
-/// <summary>
-/// Generates presigned upload slots against the configured CDN provider.
-/// The implementation is CDN-specific (Cloudflare Images, S3, etc.) and lives in Infrastructure.
-/// </summary>
-public interface IPhotoStorageService
-{
-    /// <summary>
-    /// Generates <paramref name="count"/> presigned upload slots.
-    /// Each slot contains the presigned upload URL and the final CDN URL
-    /// (the CDN URL is deterministic at presign time for all supported providers).
-    /// </summary>
-    Task<IReadOnlyList<PresignedUploadSlot>> GeneratePresignedSlotsAsync(
-        int count,
-        CancellationToken cancellationToken);
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/IUploadSlotStore.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/IUploadSlotStore.cs
deleted file mode 100644
index efb59b5..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/IUploadSlotStore.cs
+++ /dev/null
@@ -1,28 +0,0 @@
-namespace Eternelle.Modules.Weddings.Application.Abstractions.Storage;
-
-/// <summary>
-/// Short-lived store that maps a server-issued slot ID to its CDN URL.
-/// Slots expire after a fixed TTL and are deleted on first redemption
-/// to prevent reuse.
-/// </summary>
-public interface IUploadSlotStore
-{
-    /// <summary>Persists a slot with a fixed TTL.</summary>
-    Task StoreAsync(Guid slotId, string cdnUrl, CancellationToken cancellationToken);
-
-    /// <summary>
-    /// Returns the CDN URL for <paramref name="slotId"/> and atomically removes it.
-    /// Returns <see langword="null"/> if the slot has expired or was already redeemed.
-    /// </summary>
-    Task<string?> RedeemAsync(Guid slotId, CancellationToken cancellationToken);
-
-    /// <summary>
-    /// Atomically validates and redeems all <paramref name="slotIds"/> in a single operation.
-    /// Returns a dictionary mapping each slot ID to its CDN URL if every slot is valid,
-    /// or <see langword="null"/> if any slot is missing or already redeemed — in which case
-    /// no slots are consumed.
-    /// </summary>
-    Task<IReadOnlyDictionary<Guid, string>?> RedeemManyAsync(
-        IReadOnlyList<Guid> slotIds,
-        CancellationToken cancellationToken);
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/PresignedUploadSlot.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/PresignedUploadSlot.cs
deleted file mode 100644
index dfcfb83..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Abstractions/Storage/PresignedUploadSlot.cs
+++ /dev/null
@@ -1,12 +0,0 @@
-namespace Eternelle.Modules.Weddings.Application.Abstractions.Storage;
-
-/// <summary>
-/// A server-generated upload slot returned to the client before a CDN upload.
-/// The client uploads the file to <see cref="PresignedUrl"/> and then redeems
-/// <see cref="SlotId"/> in the register call. <see cref="CdnUrl"/> is known at
-/// presign time because the server controls the destination key/path.
-/// </summary>
-public sealed record PresignedUploadSlot(
-    Guid SlotId,
-    string PresignedUrl,
-    string CdnUrl);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommand.cs
deleted file mode 100644
index 5694caa..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommand.cs
+++ /dev/null
@@ -1,5 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.ApproveGuestPhoto;
-
-public sealed record ApproveGuestPhotoCommand(Guid WeddingId, Guid GuestPhotoId) : ICommand;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommandHandler.cs
deleted file mode 100644
index 167a9dd..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommandHandler.cs
+++ /dev/null
@@ -1,39 +0,0 @@
-using Eternelle.Common.Application.Clock;
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Application.Abstractions.Data;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.ApproveGuestPhoto;
-
-internal sealed class ApproveGuestPhotoCommandHandler(
-    IGuestPhotoRepository guestPhotoRepository,
-    IDateTimeProvider dateTimeProvider,
-    IUnitOfWork unitOfWork) : ICommandHandler<ApproveGuestPhotoCommand>
-{
-    public async Task<Result> Handle(ApproveGuestPhotoCommand command, CancellationToken cancellationToken)
-    {
-        GuestPhoto? photo = await guestPhotoRepository.GetAsync(
-            new GuestPhotoId(command.GuestPhotoId),
-            cancellationToken);
-
-        if (photo is null || photo.WeddingId != new WeddingId(command.WeddingId))
-        {
-            return Result.Failure(GuestPhotoErrors.NotFound);
-        }
-
-        Result result = photo.Approve(dateTimeProvider.UtcNow);
-
-        if (result.IsFailure)
-        {
-            return result;
-        }
-
-        guestPhotoRepository.Update(photo);
-
-        await unitOfWork.SaveChangesAsync(cancellationToken);
-
-        return Result.Success();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommandValidator.cs
deleted file mode 100644
index d904e0b..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/ApproveGuestPhoto/ApproveGuestPhotoCommandValidator.cs
+++ /dev/null
@@ -1,15 +0,0 @@
-using FluentValidation;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.ApproveGuestPhoto;
-
-internal sealed class ApproveGuestPhotoCommandValidator : AbstractValidator<ApproveGuestPhotoCommand>
-{
-    public ApproveGuestPhotoCommandValidator()
-    {
-        RuleFor(c => c.WeddingId)
-            .NotEmpty();
-
-        RuleFor(c => c.GuestPhotoId)
-            .NotEmpty();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommand.cs
deleted file mode 100644
index 04471d7..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommand.cs
+++ /dev/null
@@ -1,5 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.BulkApproveGuestPhotos;
-
-public sealed record BulkApproveGuestPhotosCommand(Guid WeddingId, IReadOnlyList<Guid> GuestPhotoIds) : ICommand<BulkApproveGuestPhotosResponse>;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommandHandler.cs
deleted file mode 100644
index 653cc8e..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommandHandler.cs
+++ /dev/null
@@ -1,63 +0,0 @@
-using Eternelle.Common.Application.Clock;
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Application.Abstractions.Data;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.BulkApproveGuestPhotos;
-
-internal sealed class BulkApproveGuestPhotosCommandHandler(
-    IGuestPhotoRepository guestPhotoRepository,
-    IDateTimeProvider dateTimeProvider,
-    IUnitOfWork unitOfWork) : ICommandHandler<BulkApproveGuestPhotosCommand, BulkApproveGuestPhotosResponse>
-{
-    public async Task<Result<BulkApproveGuestPhotosResponse>> Handle(
-        BulkApproveGuestPhotosCommand command,
-        CancellationToken cancellationToken)
-    {
-        IReadOnlyList<Guid> uniqueRawIds = command.GuestPhotoIds.Distinct().ToList();
-        IReadOnlyList<GuestPhotoId> ids = [.. uniqueRawIds.Select(id => new GuestPhotoId(id))];
-
-        IReadOnlyList<GuestPhoto> allPhotos = await guestPhotoRepository.GetManyAsync(ids, cancellationToken);
-
-        // Filter to this wedding only — cross-wedding IDs are treated as not found.
-        var weddingId = new WeddingId(command.WeddingId);
-        IReadOnlyList<GuestPhoto> photos = [.. allPhotos.Where(p => p.WeddingId == weddingId)];
-
-        HashSet<Guid> fetchedIds = [.. photos.Select(p => p.Id.Value)];
-
-        var approvedIds = new List<Guid>();
-        var skippedIds = new List<Guid>();
-
-        // IDs not found in DB
-        foreach (Guid requestedId in uniqueRawIds)
-        {
-            if (!fetchedIds.Contains(requestedId))
-            {
-                skippedIds.Add(requestedId);
-            }
-        }
-
-        DateTime utcNow = dateTimeProvider.UtcNow;
-
-        foreach (GuestPhoto photo in photos)
-        {
-            Result result = photo.Approve(utcNow);
-
-            if (result.IsSuccess)
-            {
-                guestPhotoRepository.Update(photo);
-                approvedIds.Add(photo.Id.Value);
-            }
-            else
-            {
-                skippedIds.Add(photo.Id.Value);
-            }
-        }
-
-        await unitOfWork.SaveChangesAsync(cancellationToken);
-
-        return Result.Success(new BulkApproveGuestPhotosResponse(approvedIds, skippedIds));
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommandValidator.cs
deleted file mode 100644
index 4833ad9..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosCommandValidator.cs
+++ /dev/null
@@ -1,18 +0,0 @@
-using FluentValidation;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.BulkApproveGuestPhotos;
-
-internal sealed class BulkApproveGuestPhotosCommandValidator : AbstractValidator<BulkApproveGuestPhotosCommand>
-{
-    public BulkApproveGuestPhotosCommandValidator()
-    {
-        RuleFor(c => c.WeddingId)
-            .NotEmpty();
-
-        RuleFor(c => c.GuestPhotoIds)
-            .NotEmpty();
-
-        RuleForEach(c => c.GuestPhotoIds)
-            .NotEmpty();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosResponse.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosResponse.cs
deleted file mode 100644
index 6d94b9e..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkApproveGuestPhotos/BulkApproveGuestPhotosResponse.cs
+++ /dev/null
@@ -1,5 +0,0 @@
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.BulkApproveGuestPhotos;
-
-public sealed record BulkApproveGuestPhotosResponse(
-    IReadOnlyList<Guid> ApprovedIds,
-    IReadOnlyList<Guid> SkippedIds);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommand.cs
deleted file mode 100644
index e68cdf9..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommand.cs
+++ /dev/null
@@ -1,5 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.BulkDeleteGuestPhotos;
-
-public sealed record BulkDeleteGuestPhotosCommand(Guid WeddingId, IReadOnlyList<Guid> GuestPhotoIds) : ICommand;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommandHandler.cs
deleted file mode 100644
index cd9af2e..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommandHandler.cs
+++ /dev/null
@@ -1,40 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Application.Abstractions.Data;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.BulkDeleteGuestPhotos;
-
-internal sealed class BulkDeleteGuestPhotosCommandHandler(
-    IGuestPhotoRepository guestPhotoRepository,
-    IUnitOfWork unitOfWork) : ICommandHandler<BulkDeleteGuestPhotosCommand>
-{
-    public async Task<Result> Handle(BulkDeleteGuestPhotosCommand command, CancellationToken cancellationToken)
-    {
-        var ids = command.GuestPhotoIds
-            .Select(id => new GuestPhotoId(id))
-            .Distinct()
-            .ToList();
-
-        IReadOnlyList<GuestPhoto> allPhotos = await guestPhotoRepository.GetManyAsync(ids, cancellationToken);
-
-        // Filter to this wedding only — cross-wedding IDs are treated as not found.
-        var weddingId = new WeddingId(command.WeddingId);
-        IReadOnlyList<GuestPhoto> photos = [.. allPhotos.Where(p => p.WeddingId == weddingId)];
-
-        if (photos.Count != ids.Count)
-        {
-            return Result.Failure(GuestPhotoErrors.NotFound);
-        }
-
-        foreach (GuestPhoto photo in photos)
-        {
-            guestPhotoRepository.Delete(photo);
-        }
-
-        await unitOfWork.SaveChangesAsync(cancellationToken);
-
-        return Result.Success();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommandValidator.cs
deleted file mode 100644
index a8d18f5..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkDeleteGuestPhotos/BulkDeleteGuestPhotosCommandValidator.cs
+++ /dev/null
@@ -1,18 +0,0 @@
-using FluentValidation;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.BulkDeleteGuestPhotos;
-
-internal sealed class BulkDeleteGuestPhotosCommandValidator : AbstractValidator<BulkDeleteGuestPhotosCommand>
-{
-    public BulkDeleteGuestPhotosCommandValidator()
-    {
-        RuleFor(c => c.WeddingId)
-            .NotEmpty();
-
-        RuleFor(c => c.GuestPhotoIds)
-            .NotEmpty();
-
-        RuleForEach(c => c.GuestPhotoIds)
-            .NotEmpty();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommand.cs
deleted file mode 100644
index fb470bc..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommand.cs
+++ /dev/null
@@ -1,5 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.BulkRejectGuestPhotos;
-
-public sealed record BulkRejectGuestPhotosCommand(Guid WeddingId, IReadOnlyList<Guid> GuestPhotoIds) : ICommand;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommandHandler.cs
deleted file mode 100644
index 010eb69..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommandHandler.cs
+++ /dev/null
@@ -1,61 +0,0 @@
-using Eternelle.Common.Application.Clock;
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Application.Abstractions.Data;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.BulkRejectGuestPhotos;
-
-internal sealed class BulkRejectGuestPhotosCommandHandler(
-    IGuestPhotoRepository guestPhotoRepository,
-    IDateTimeProvider dateTimeProvider,
-    IUnitOfWork unitOfWork) : ICommandHandler<BulkRejectGuestPhotosCommand>
-{
-    public async Task<Result> Handle(BulkRejectGuestPhotosCommand command, CancellationToken cancellationToken)
-    {
-        var ids = command.GuestPhotoIds
-            .Select(id => new GuestPhotoId(id))
-            .Distinct()
-            .ToList();
-
-        IReadOnlyList<GuestPhoto> allPhotos = await guestPhotoRepository.GetManyAsync(ids, cancellationToken);
-
-        // Filter to this wedding only — cross-wedding IDs are treated as not found.
-        var weddingId = new WeddingId(command.WeddingId);
-        IReadOnlyList<GuestPhoto> photos = [.. allPhotos.Where(p => p.WeddingId == weddingId)];
-
-        if (photos.Count != ids.Count)
-        {
-            return Result.Failure(GuestPhotoErrors.NotFound);
-        }
-
-        DateTime utcNow = dateTimeProvider.UtcNow;
-
-        bool hasFailures = false;
-
-        foreach (GuestPhoto photo in photos)
-        {
-            Result result = photo.Reject(utcNow);
-
-            if (!result.IsSuccess)
-            {
-                hasFailures = true;
-            }
-        }
-
-        if (hasFailures)
-        {
-            return Result.Failure(GuestPhotoErrors.AlreadyReviewed);
-        }
-
-        foreach (GuestPhoto photo in photos)
-        {
-            guestPhotoRepository.Update(photo);
-        }
-
-        await unitOfWork.SaveChangesAsync(cancellationToken);
-
-        return Result.Success();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommandValidator.cs
deleted file mode 100644
index d212238..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/BulkRejectGuestPhotos/BulkRejectGuestPhotosCommandValidator.cs
+++ /dev/null
@@ -1,18 +0,0 @@
-using FluentValidation;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.BulkRejectGuestPhotos;
-
-internal sealed class BulkRejectGuestPhotosCommandValidator : AbstractValidator<BulkRejectGuestPhotosCommand>
-{
-    public BulkRejectGuestPhotosCommandValidator()
-    {
-        RuleFor(c => c.WeddingId)
-            .NotEmpty();
-
-        RuleFor(c => c.GuestPhotoIds)
-            .NotEmpty();
-
-        RuleForEach(c => c.GuestPhotoIds)
-            .NotEmpty();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommand.cs
deleted file mode 100644
index b48e5f3..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommand.cs
+++ /dev/null
@@ -1,5 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.DeleteGuestPhoto;
-
-public sealed record DeleteGuestPhotoCommand(Guid WeddingId, Guid GuestPhotoId) : ICommand;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommandHandler.cs
deleted file mode 100644
index ed28295..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommandHandler.cs
+++ /dev/null
@@ -1,30 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Application.Abstractions.Data;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.DeleteGuestPhoto;
-
-internal sealed class DeleteGuestPhotoCommandHandler(
-    IGuestPhotoRepository guestPhotoRepository,
-    IUnitOfWork unitOfWork) : ICommandHandler<DeleteGuestPhotoCommand>
-{
-    public async Task<Result> Handle(DeleteGuestPhotoCommand command, CancellationToken cancellationToken)
-    {
-        GuestPhoto? photo = await guestPhotoRepository.GetAsync(
-            new GuestPhotoId(command.GuestPhotoId),
-            cancellationToken);
-
-        if (photo is null || photo.WeddingId != new WeddingId(command.WeddingId))
-        {
-            return Result.Failure(GuestPhotoErrors.NotFound);
-        }
-
-        guestPhotoRepository.Delete(photo);
-
-        await unitOfWork.SaveChangesAsync(cancellationToken);
-
-        return Result.Success();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommandValidator.cs
deleted file mode 100644
index 1d51228..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/DeleteGuestPhoto/DeleteGuestPhotoCommandValidator.cs
+++ /dev/null
@@ -1,15 +0,0 @@
-using FluentValidation;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.DeleteGuestPhoto;
-
-internal sealed class DeleteGuestPhotoCommandValidator : AbstractValidator<DeleteGuestPhotoCommand>
-{
-    public DeleteGuestPhotoCommandValidator()
-    {
-        RuleFor(c => c.WeddingId)
-            .NotEmpty();
-
-        RuleFor(c => c.GuestPhotoId)
-            .NotEmpty();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommand.cs
deleted file mode 100644
index d3817fb..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommand.cs
+++ /dev/null
@@ -1,9 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GenerateUploadSlots;
-
-public sealed record GenerateUploadSlotsCommand(Guid UploadToken, int Count)
-    : ICommand<IReadOnlyList<UploadSlotResponse>>
-{
-    public const int MaxBatchSize = 30;
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs
deleted file mode 100644
index 289e8c3..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandHandler.cs
+++ /dev/null
@@ -1,45 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Application.Abstractions.Storage;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GenerateUploadSlots;
-
-internal sealed class GenerateUploadSlotsCommandHandler(
-    IWeddingRepository weddingRepository,
-    IPhotoStorageService photoStorageService,
-    IUploadSlotStore uploadSlotStore) : ICommandHandler<GenerateUploadSlotsCommand, IReadOnlyList<UploadSlotResponse>>
-{
-    public async Task<Result<IReadOnlyList<UploadSlotResponse>>> Handle(
-        GenerateUploadSlotsCommand command,
-        CancellationToken cancellationToken)
-    {
-        // Resolve wedding from token — same not-found pattern as the upload handler
-        // so callers cannot probe token validity.
-        Wedding? wedding = await weddingRepository.GetByUploadTokenAsync(
-            command.UploadToken,
-            cancellationToken);
-
-        if (wedding is null)
-        {
-            return Result.Failure<IReadOnlyList<UploadSlotResponse>>(
-                WeddingErrors.NotFound(new WeddingId(Guid.Empty)));
-        }
-
-        // Upload limit enforcement has moved to the Album module — no limit check here.
-        // Generate presigned slots from the CDN provider and persist them in the slot store.
-        IReadOnlyList<PresignedUploadSlot> slots =
-            await photoStorageService.GeneratePresignedSlotsAsync(command.Count, cancellationToken);
-
-        foreach (PresignedUploadSlot slot in slots)
-        {
-            await uploadSlotStore.StoreAsync(slot.SlotId, slot.CdnUrl, cancellationToken);
-        }
-
-        IReadOnlyList<UploadSlotResponse> response = slots
-            .Select(s => new UploadSlotResponse(s.SlotId, s.PresignedUrl, s.CdnUrl))
-            .ToList();
-
-        return Result.Success(response);
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandValidator.cs
deleted file mode 100644
index b33da15..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/GenerateUploadSlotsCommandValidator.cs
+++ /dev/null
@@ -1,16 +0,0 @@
-using FluentValidation;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GenerateUploadSlots;
-
-internal sealed class GenerateUploadSlotsCommandValidator : AbstractValidator<GenerateUploadSlotsCommand>
-{
-    public GenerateUploadSlotsCommandValidator()
-    {
-        RuleFor(c => c.UploadToken)
-            .NotEmpty();
-
-        RuleFor(c => c.Count)
-            .GreaterThan(0)
-            .LessThanOrEqualTo(GenerateUploadSlotsCommand.MaxBatchSize);
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/UploadSlotResponse.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/UploadSlotResponse.cs
deleted file mode 100644
index 23a718f..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GenerateUploadSlots/UploadSlotResponse.cs
+++ /dev/null
@@ -1,6 +0,0 @@
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GenerateUploadSlots;
-
-public sealed record UploadSlotResponse(
-    Guid SlotId,
-    string PresignedUrl,
-    string CdnUrl);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQuery.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQuery.cs
deleted file mode 100644
index e0cc4d9..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQuery.cs
+++ /dev/null
@@ -1,8 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GetGuestPhotos;
-
-public sealed record GetGuestPhotosQuery(
-    Guid WeddingId,
-    GuestPhotoStatus? Status = null) : IQuery<IReadOnlyList<GuestPhotoResponse>>;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQueryHandler.cs
deleted file mode 100644
index 5561c43..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetGuestPhotos/GetGuestPhotosQueryHandler.cs
+++ /dev/null
@@ -1,49 +0,0 @@
-using System.Data.Common;
-using Dapper;
-using Eternelle.Common.Application.Data;
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GetGuestPhotos;
-
-internal sealed class GetGuestPhotosQueryHandler(IDbConnectionFactory dbConnectionFactory)
-    : IQueryHandler<GetGuestPhotosQuery, IReadOnlyList<GuestPhotoResponse>>
-{
-    public async Task<Result<IReadOnlyList<GuestPhotoResponse>>> Handle(
-        GetGuestPhotosQuery query,
-        CancellationToken cancellationToken)
-    {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
-
-        string sql =
-            $"""
-             SELECT
-                 p.id             AS {nameof(GuestPhotoResponse.Id)},
-                 p.src_url        AS {nameof(GuestPhotoResponse.SrcUrl)},
-                 p.thumbnail_url  AS {nameof(GuestPhotoResponse.ThumbnailUrl)},
-                 p.width_px       AS {nameof(GuestPhotoResponse.WidthPx)},
-                 p.height_px      AS {nameof(GuestPhotoResponse.HeightPx)},
-                 p.uploader_name  AS {nameof(GuestPhotoResponse.UploaderName)},
-                 CASE p.status
-                     WHEN {(int)GuestPhotoStatus.Pending}  THEN '{nameof(GuestPhotoStatus.Pending)}'
-                     WHEN {(int)GuestPhotoStatus.Approved} THEN '{nameof(GuestPhotoStatus.Approved)}'
-                     WHEN {(int)GuestPhotoStatus.Rejected} THEN '{nameof(GuestPhotoStatus.Rejected)}'
-                     WHEN {(int)GuestPhotoStatus.OverLimit} THEN '{nameof(GuestPhotoStatus.OverLimit)}'
-                     ELSE 'Unknown'
-                 END              AS {nameof(GuestPhotoResponse.Status)},
-                 p.uploaded_at    AS {nameof(GuestPhotoResponse.UploadedAt)},
-                 p.reviewed_at    AS {nameof(GuestPhotoResponse.ReviewedAt)}
-             FROM wedding.guest_photos p
-             WHERE p.wedding_id = @WeddingId
-               AND (@Status IS NULL OR p.status = @Status)
-             ORDER BY p.uploaded_at DESC
-             """;
-
-        IEnumerable<GuestPhotoResponse> photos =
-            await connection.QueryAsync<GuestPhotoResponse>(
-                new CommandDefinition(sql, query, cancellationToken: cancellationToken));
-
-        return photos.ToList();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQuery.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQuery.cs
deleted file mode 100644
index 2da4d47..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQuery.cs
+++ /dev/null
@@ -1,6 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GetPublicGuestPhotos;
-
-public sealed record GetPublicGuestPhotosQuery(Guid WeddingId)
-    : IQuery<IReadOnlyList<GuestPhotoResponse>>;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQueryHandler.cs
deleted file mode 100644
index 0e243e6..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetPublicGuestPhotos/GetPublicGuestPhotosQueryHandler.cs
+++ /dev/null
@@ -1,43 +0,0 @@
-using System.Data.Common;
-using Dapper;
-using Eternelle.Common.Application.Data;
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GetPublicGuestPhotos;
-
-internal sealed class GetPublicGuestPhotosQueryHandler(IDbConnectionFactory dbConnectionFactory)
-    : IQueryHandler<GetPublicGuestPhotosQuery, IReadOnlyList<GuestPhotoResponse>>
-{
-    public async Task<Result<IReadOnlyList<GuestPhotoResponse>>> Handle(
-        GetPublicGuestPhotosQuery query,
-        CancellationToken cancellationToken)
-    {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
-
-        string sql =
-            $"""
-             SELECT
-                 p.id             AS {nameof(GuestPhotoResponse.Id)},
-                 p.src_url        AS {nameof(GuestPhotoResponse.SrcUrl)},
-                 p.thumbnail_url  AS {nameof(GuestPhotoResponse.ThumbnailUrl)},
-                 p.width_px       AS {nameof(GuestPhotoResponse.WidthPx)},
-                 p.height_px      AS {nameof(GuestPhotoResponse.HeightPx)},
-                 p.uploader_name  AS {nameof(GuestPhotoResponse.UploaderName)},
-                 '{nameof(GuestPhotoStatus.Approved)}' AS {nameof(GuestPhotoResponse.Status)},
-                 p.uploaded_at    AS {nameof(GuestPhotoResponse.UploadedAt)},
-                 p.reviewed_at    AS {nameof(GuestPhotoResponse.ReviewedAt)}
-             FROM wedding.guest_photos p
-             WHERE p.wedding_id = @WeddingId
-               AND p.status = {(int)GuestPhotoStatus.Approved}
-             ORDER BY p.uploaded_at DESC
-             """;
-
-        IEnumerable<GuestPhotoResponse> photos =
-            await connection.QueryAsync<GuestPhotoResponse>(
-                new CommandDefinition(sql, query, cancellationToken: cancellationToken));
-
-        return photos.ToList();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQuery.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQuery.cs
deleted file mode 100644
index 688d2d2..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQuery.cs
+++ /dev/null
@@ -1,6 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GetUploadContext;
-
-public sealed record GetUploadContextQuery(Guid UploadToken)
-    : IQuery<UploadContextResponse>;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQueryHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQueryHandler.cs
deleted file mode 100644
index 820120a..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/GetUploadContextQueryHandler.cs
+++ /dev/null
@@ -1,41 +0,0 @@
-using System.Data.Common;
-using Dapper;
-using Eternelle.Common.Application.Data;
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GetUploadContext;
-
-internal sealed class GetUploadContextQueryHandler(IDbConnectionFactory dbConnectionFactory)
-    : IQueryHandler<GetUploadContextQuery, UploadContextResponse>
-{
-    public async Task<Result<UploadContextResponse>> Handle(
-        GetUploadContextQuery query,
-        CancellationToken cancellationToken)
-    {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
-
-        // Resolve the wedding from the upload token stored on SnapShareConfig.
-        // Returns a generic not-found so callers cannot probe token validity
-        // (same error whether the token never existed or the wedding is deleted).
-        const string sql =
-            """
-            SELECT
-                sc.wedding_id               AS WeddingId,
-                sc.uploader_name_required   AS UploaderNameRequired
-            FROM wedding.snap_share_configs sc
-            WHERE sc.upload_token = @UploadToken
-            """;
-
-        UploadContextResponse? context = await connection.QuerySingleOrDefaultAsync<UploadContextResponse>(
-            new CommandDefinition(sql, query, cancellationToken: cancellationToken));
-
-        if (context is null)
-        {
-            return Result.Failure<UploadContextResponse>(WeddingErrors.NotFound(new WeddingId(Guid.Empty)));
-        }
-
-        return context;
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/UploadContextResponse.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/UploadContextResponse.cs
deleted file mode 100644
index 9647faa..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GetUploadContext/UploadContextResponse.cs
+++ /dev/null
@@ -1,5 +0,0 @@
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.GetUploadContext;
-
-public sealed record UploadContextResponse(
-    Guid WeddingId,
-    bool UploaderNameRequired);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GuestPhotoResponse.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GuestPhotoResponse.cs
deleted file mode 100644
index f494b07..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/GuestPhotoResponse.cs
+++ /dev/null
@@ -1,14 +0,0 @@
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos;
-
-public sealed class GuestPhotoResponse
-{
-    public Guid Id { get; init; }
-    public string SrcUrl { get; init; } = string.Empty;
-    public string? ThumbnailUrl { get; init; }
-    public int? WidthPx { get; init; }
-    public int? HeightPx { get; init; }
-    public string? UploaderName { get; init; }
-    public string Status { get; init; } = string.Empty;
-    public DateTime UploadedAt { get; init; }
-    public DateTime? ReviewedAt { get; init; }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/PhotoRegistration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/PhotoRegistration.cs
deleted file mode 100644
index 35b5eb4..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/PhotoRegistration.cs
+++ /dev/null
@@ -1,11 +0,0 @@
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.RegisterGuestPhotos;
-
-/// <summary>
-/// Describes one photo to register after the client has uploaded it to the CDN
-/// using the presigned URL issued by <c>GenerateUploadSlotsCommand</c>.
-/// </summary>
-public sealed record PhotoRegistration(
-    Guid SlotId,
-    string? UploaderName,
-    int? WidthPx,
-    int? HeightPx);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommand.cs
deleted file mode 100644
index 312f942..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommand.cs
+++ /dev/null
@@ -1,7 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.RegisterGuestPhotos;
-
-public sealed record RegisterGuestPhotosCommand(
-    Guid UploadToken,
-    IReadOnlyList<PhotoRegistration> Photos) : ICommand<IReadOnlyList<Guid>>;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
deleted file mode 100644
index e5a5f78..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
+++ /dev/null
@@ -1,106 +0,0 @@
-using Eternelle.Common.Application.Clock;
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Common.Domain.People;
-using Eternelle.Modules.Weddings.Application.Abstractions.Data;
-using Eternelle.Modules.Weddings.Application.Abstractions.Storage;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-using Eternelle.Modules.Weddings.Domain.Shared;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.RegisterGuestPhotos;
-
-internal sealed class RegisterGuestPhotosCommandHandler(
-    IWeddingRepository weddingRepository,
-    IGuestPhotoRepository guestPhotoRepository,
-    IUploadSlotStore uploadSlotStore,
-    IDateTimeProvider dateTimeProvider,
-    IUnitOfWork unitOfWork) : ICommandHandler<RegisterGuestPhotosCommand, IReadOnlyList<Guid>>
-{
-    public async Task<Result<IReadOnlyList<Guid>>> Handle(
-        RegisterGuestPhotosCommand command,
-        CancellationToken cancellationToken)
-    {
-        Wedding? wedding = await weddingRepository.GetByUploadTokenAsync(
-            command.UploadToken,
-            cancellationToken);
-
-        if (wedding is null)
-        {
-            return Result.Failure<IReadOnlyList<Guid>>(
-                WeddingErrors.NotFound(new WeddingId(Guid.Empty)));
-        }
-
-        // Atomically redeem all slot IDs in a single operation. If any slot is invalid or
-        // already redeemed, the entire batch is rejected and no slots are consumed —
-        // preventing orphaned CDN uploads that can never be registered.
-        var slotIds = command.Photos.Select(r => r.SlotId).ToList();
-
-        // Reject duplicates before touching Redis — a duplicate SlotId would cause one CDN
-        // upload to be registered as two separate GuestPhoto records.
-        if (new HashSet<Guid>(slotIds).Count != slotIds.Count)
-        {
-            return Result.Failure<IReadOnlyList<Guid>>(GuestPhotoErrors.InvalidUploadSlot);
-        }
-
-        IReadOnlyDictionary<Guid, string>? cdnUrls =
-            await uploadSlotStore.RedeemManyAsync(slotIds, cancellationToken);
-
-        if (cdnUrls is null)
-        {
-            return Result.Failure<IReadOnlyList<Guid>>(GuestPhotoErrors.InvalidUploadSlot);
-        }
-
-        // SocialShare must be configured before photos can be registered via the upload token.
-        if (wedding.SocialShare is null)
-        {
-            return Result.Failure<IReadOnlyList<Guid>>(WeddingErrors.SnapShareNotConfigured);
-        }
-
-        // Photo moderation is now always auto-approve (ModerationMode moved to Album module).
-        const GuestPhotoStatus initialStatus = GuestPhotoStatus.Approved;
-
-        DateTime now = dateTimeProvider.UtcNow;
-
-        List<GuestPhoto> photos = [];
-        foreach (PhotoRegistration r in command.Photos)
-        {
-            if (!cdnUrls.TryGetValue(r.SlotId, out string? cdnUrl))
-            {
-                return Result.Failure<IReadOnlyList<Guid>>(GuestPhotoErrors.InvalidUploadSlot);
-            }
-
-            Result<ImageUrl> srcUrlResult = ImageUrl.Create(cdnUrl);
-            if (srcUrlResult.IsFailure)
-            {
-                return Result.Failure<IReadOnlyList<Guid>>(srcUrlResult.Error);
-            }
-
-            PersonName? uploaderName = null;
-            if (!string.IsNullOrWhiteSpace(r.UploaderName))
-            {
-                Result<PersonName> uploaderNameResult = PersonName.Create(r.UploaderName);
-                if (uploaderNameResult.IsFailure)
-                {
-                    return Result.Failure<IReadOnlyList<Guid>>(uploaderNameResult.Error);
-                }
-                uploaderName = uploaderNameResult.Value;
-            }
-
-            photos.Add(GuestPhoto.Create(
-                wedding.Id,
-                srcUrlResult.Value,
-                uploaderName,
-                thumbnailUrl: null,   // thumbnails are CDN-derived via URL params, not a separate upload
-                r.WidthPx,
-                r.HeightPx,
-                initialStatus,
-                now));
-        }
-
-        guestPhotoRepository.InsertMany(photos);
-        await unitOfWork.SaveChangesAsync(cancellationToken);
-
-        return Result.Success<IReadOnlyList<Guid>>(photos.Select(p => p.Id.Value).ToList());
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs
deleted file mode 100644
index 2a914e9..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs
+++ /dev/null
@@ -1,38 +0,0 @@
-using Eternelle.Common.Domain.People;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.GenerateUploadSlots;
-using FluentValidation;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.RegisterGuestPhotos;
-
-internal sealed class RegisterGuestPhotosCommandValidator : AbstractValidator<RegisterGuestPhotosCommand>
-{
-    public RegisterGuestPhotosCommandValidator()
-    {
-        RuleFor(c => c.UploadToken)
-            .NotEmpty();
-
-        RuleFor(c => c.Photos)
-            .NotEmpty()
-            .Must(p => p.Count <= GenerateUploadSlotsCommand.MaxBatchSize)
-            .WithMessage($"Cannot register more than {GenerateUploadSlotsCommand.MaxBatchSize} photos at once.");
-
-        RuleForEach(c => c.Photos).ChildRules(photo =>
-        {
-            photo.RuleFor(p => p.SlotId)
-                .NotEmpty();
-
-            photo.RuleFor(p => p.UploaderName)
-                .NotEmpty()
-                .MaximumLength(PersonName.MaxLength)
-                .When(p => p.UploaderName is not null);
-
-            photo.RuleFor(p => p.WidthPx)
-                .GreaterThan(0)
-                .When(p => p.WidthPx.HasValue);
-
-            photo.RuleFor(p => p.HeightPx)
-                .GreaterThan(0)
-                .When(p => p.HeightPx.HasValue);
-        });
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommand.cs
deleted file mode 100644
index ecef164..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommand.cs
+++ /dev/null
@@ -1,5 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.RejectGuestPhoto;
-
-public sealed record RejectGuestPhotoCommand(Guid WeddingId, Guid GuestPhotoId) : ICommand;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommandHandler.cs
deleted file mode 100644
index f08ed25..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommandHandler.cs
+++ /dev/null
@@ -1,39 +0,0 @@
-using Eternelle.Common.Application.Clock;
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Application.Abstractions.Data;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.RejectGuestPhoto;
-
-internal sealed class RejectGuestPhotoCommandHandler(
-    IGuestPhotoRepository guestPhotoRepository,
-    IDateTimeProvider dateTimeProvider,
-    IUnitOfWork unitOfWork) : ICommandHandler<RejectGuestPhotoCommand>
-{
-    public async Task<Result> Handle(RejectGuestPhotoCommand command, CancellationToken cancellationToken)
-    {
-        GuestPhoto? photo = await guestPhotoRepository.GetAsync(
-            new GuestPhotoId(command.GuestPhotoId),
-            cancellationToken);
-
-        if (photo is null || photo.WeddingId != new WeddingId(command.WeddingId))
-        {
-            return Result.Failure(GuestPhotoErrors.NotFound);
-        }
-
-        Result result = photo.Reject(dateTimeProvider.UtcNow);
-
-        if (result.IsFailure)
-        {
-            return result;
-        }
-
-        guestPhotoRepository.Update(photo);
-
-        await unitOfWork.SaveChangesAsync(cancellationToken);
-
-        return Result.Success();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommandValidator.cs
deleted file mode 100644
index 7285260..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/GuestPhotos/RejectGuestPhoto/RejectGuestPhotoCommandValidator.cs
+++ /dev/null
@@ -1,15 +0,0 @@
-using FluentValidation;
-
-namespace Eternelle.Modules.Weddings.Application.GuestPhotos.RejectGuestPhoto;
-
-internal sealed class RejectGuestPhotoCommandValidator : AbstractValidator<RejectGuestPhotoCommand>
-{
-    public RejectGuestPhotoCommandValidator()
-    {
-        RuleFor(c => c.WeddingId)
-            .NotEmpty();
-
-        RuleFor(c => c.GuestPhotoId)
-            .NotEmpty();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommand.cs
index b26bff7..0c11760 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommand.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommand.cs
@@ -5,5 +5,4 @@ namespace Eternelle.Modules.Weddings.Application.Weddings.CreateWedding;
 public sealed record CreateWeddingCommand(
     Guid TenantId,
     DateOnly WeddingDate,
-    string? Hashtag,
-    int? UploadLimit) : ICommand<Guid>;
+    string? Hashtag) : ICommand<Guid>;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandValidator.cs
index 8a79b4e..74c75f6 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/CreateWedding/CreateWeddingCommandValidator.cs
@@ -18,9 +18,5 @@ public CreateWeddingCommandValidator()
         RuleFor(c => c.Hashtag)
             .MaximumLength(Hashtag.MaxLength)
             .When(c => c.Hashtag is not null);
-
-        RuleFor(c => c.UploadLimit)
-            .GreaterThanOrEqualTo(0)
-            .When(c => c.UploadLimit is not null);
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommand.cs
deleted file mode 100644
index fa6e6be..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommand.cs
+++ /dev/null
@@ -1,5 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.Weddings.RegenerateUploadToken;
-
-public sealed record RegenerateUploadTokenCommand(Guid WeddingId) : ICommand<Guid>;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandHandler.cs
deleted file mode 100644
index cc4454a..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandHandler.cs
+++ /dev/null
@@ -1,27 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Application.Weddings.RegenerateUploadToken;
-
-/// <summary>
-/// Stub handler — upload token management has moved to the Album module.
-/// Returns NotFound for any request until this endpoint is removed in Task 1.2.
-/// </summary>
-internal sealed class RegenerateUploadTokenCommandHandler(
-    IWeddingRepository weddingRepository) : ICommandHandler<RegenerateUploadTokenCommand, Guid>
-{
-    public async Task<Result<Guid>> Handle(RegenerateUploadTokenCommand command, CancellationToken cancellationToken)
-    {
-        var weddingId = new WeddingId(command.WeddingId);
-
-        Wedding? wedding = await weddingRepository.GetWithSocialShareAsync(weddingId, cancellationToken);
-
-        if (wedding is null)
-        {
-            return Result.Failure<Guid>(WeddingErrors.NotFound(weddingId));
-        }
-
-        return Result.Failure<Guid>(WeddingErrors.NotFound(weddingId));
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandValidator.cs
deleted file mode 100644
index e626f4e..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/RegenerateUploadToken/RegenerateUploadTokenCommandValidator.cs
+++ /dev/null
@@ -1,12 +0,0 @@
-using FluentValidation;
-
-namespace Eternelle.Modules.Weddings.Application.Weddings.RegenerateUploadToken;
-
-internal sealed class RegenerateUploadTokenCommandValidator : AbstractValidator<RegenerateUploadTokenCommand>
-{
-    public RegenerateUploadTokenCommandValidator()
-    {
-        RuleFor(c => c.WeddingId)
-            .NotEmpty();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommand.cs
deleted file mode 100644
index 68d01b5..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommand.cs
+++ /dev/null
@@ -1,5 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-
-namespace Eternelle.Modules.Weddings.Application.Weddings.SetGuestPhotoUploadLimit;
-
-public sealed record SetGuestPhotoUploadLimitCommand(Guid TenantId, int? UploadLimit) : ICommand;
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs
deleted file mode 100644
index 489a99f..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandHandler.cs
+++ /dev/null
@@ -1,20 +0,0 @@
-using Eternelle.Common.Application.Messaging;
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Application.Weddings.SetGuestPhotoUploadLimit;
-
-/// <summary>
-/// Stub handler — guest photo upload limit tracking has moved to the Album module.
-/// Will be removed in Task 1.2.
-/// </summary>
-internal sealed class SetGuestPhotoUploadLimitCommandHandler(
-    IWeddingRepository weddingRepository) : ICommandHandler<SetGuestPhotoUploadLimitCommand>
-{
-    public async Task<Result> Handle(SetGuestPhotoUploadLimitCommand command, CancellationToken cancellationToken)
-    {
-        // Upload limit is now tracked in the Album module — no-op here.
-        _ = await weddingRepository.GetByTenantIdAsync(command.TenantId, cancellationToken);
-        return Result.Success();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandValidator.cs
deleted file mode 100644
index 2957b2a..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SetGuestPhotoUploadLimit/SetGuestPhotoUploadLimitCommandValidator.cs
+++ /dev/null
@@ -1,15 +0,0 @@
-using FluentValidation;
-
-namespace Eternelle.Modules.Weddings.Application.Weddings.SetGuestPhotoUploadLimit;
-
-internal sealed class SetGuestPhotoUploadLimitCommandValidator : AbstractValidator<SetGuestPhotoUploadLimitCommand>
-{
-    public SetGuestPhotoUploadLimitCommandValidator()
-    {
-        RuleFor(c => c.TenantId).NotEmpty();
-
-        RuleFor(c => c.UploadLimit)
-            .GreaterThanOrEqualTo(0)
-            .When(c => c.UploadLimit is not null);
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SnapShareOptions.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SnapShareOptions.cs
deleted file mode 100644
index 04fbda0..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/SnapShareOptions.cs
+++ /dev/null
@@ -1,6 +0,0 @@
-namespace Eternelle.Modules.Weddings.Application.Weddings;
-
-public sealed class SnapShareOptions
-{
-    public string UploadBaseUrl { get; init; } = string.Empty;
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhoto.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhoto.cs
deleted file mode 100644
index 2dca5a1..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhoto.cs
+++ /dev/null
@@ -1,155 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Domain.People;
-using Eternelle.Modules.Weddings.Domain.Shared;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Domain.GuestPhotos;
-
-/// <summary>
-/// A photo uploaded by a guest for a specific wedding (wedding.guest_photos).
-///
-/// GuestPhoto is its own aggregate root — it has an independent lifecycle and is
-/// always referenced by WeddingId, never navigated through the Wedding aggregate.
-///
-/// Photos begin life as Pending and move to either Approved or Rejected by the
-/// couple. The couple's moderation settings may configure uploads to skip the
-/// Pending state and be created as Approved immediately (initialStatus parameter
-/// on Create()).
-///
-/// ReviewedAt is set by Approve() and Reject(). It stays null for Pending photos.
-/// </summary>
-public sealed class GuestPhoto : Entity
-{
-    private GuestPhoto()
-    {
-    }
-
-    public GuestPhotoId Id { get; private set; }
-
-    /// <summary>
-    /// Cross-aggregate reference to the parent wedding.
-    /// Never navigated — use IGuestPhotoRepository.GetByWeddingIdAsync() to query.
-    /// </summary>
-    public WeddingId WeddingId { get; private set; }
-
-    /// <summary>
-    /// CDN or storage URL of the full-resolution photo.
-    /// </summary>
-    public ImageUrl SrcUrl { get; private set; }
-
-    /// <summary>
-    /// Optional CDN URL of the compressed thumbnail. Null until the storage
-    /// pipeline generates it asynchronously.
-    /// </summary>
-    public ImageUrl? ThumbnailUrl { get; private set; }
-
-    /// <summary>
-    /// Original pixel width. Nullable — not always available at upload time.
-    /// Stored as a layout hint for the gallery renderer.
-    /// </summary>
-    public int? WidthPx { get; private set; }
-
-    /// <summary>
-    /// Original pixel height. Nullable — same reasoning as WidthPx.
-    /// </summary>
-    public int? HeightPx { get; private set; }
-
-    /// <summary>
-    /// Optional display name provided by the uploader at submission time.
-    /// Null when the guest uploads anonymously.
-    /// </summary>
-    public PersonName? UploaderName { get; private set; }
-
-    public GuestPhotoStatus Status { get; private set; }
-
-    public DateTime UploadedAt { get; private set; }
-
-    /// <summary>
-    /// Timestamp of the most recent Approve() or Reject() call.
-    /// Null for photos that are still Pending.
-    /// </summary>
-    public DateTime? ReviewedAt { get; private set; }
-
-    // ─── Factory ────────────────────────────────────────────────────────────────
-
-    public static GuestPhoto Create(
-        WeddingId weddingId,
-        ImageUrl srcUrl,
-        PersonName? uploaderName,
-        ImageUrl? thumbnailUrl,
-        int? widthPx,
-        int? heightPx,
-        GuestPhotoStatus initialStatus,
-        DateTime utcNow)
-    {
-        var photo = new GuestPhoto
-        {
-            Id = GuestPhotoId.New(),
-            WeddingId = weddingId,
-            SrcUrl = srcUrl,
-            UploaderName = uploaderName,
-            ThumbnailUrl = thumbnailUrl,
-            WidthPx = widthPx,
-            HeightPx = heightPx,
-            Status = initialStatus,
-            UploadedAt = utcNow,
-            ReviewedAt = null
-        };
-
-        photo.Raise(new GuestPhotoCreatedDomainEvent(photo.Id, weddingId));
-
-        return photo;
-    }
-
-    // ─── Behaviour ──────────────────────────────────────────────────────────────
-
-    /// <summary>
-    /// Moves the photo to Approved and records the review timestamp.
-    /// Returns a failure if the photo has already been reviewed.
-    /// </summary>
-    public Result Approve(DateTime utcNow)
-    {
-        if (Status != GuestPhotoStatus.Pending)
-        {
-            return Result.Failure(GuestPhotoErrors.AlreadyReviewed);
-        }
-
-        Status = GuestPhotoStatus.Approved;
-        ReviewedAt = utcNow;
-
-        Raise(new GuestPhotoApprovedDomainEvent(Id, WeddingId, utcNow));
-
-        return Result.Success();
-    }
-
-    /// <summary>
-    /// Moves the photo to Rejected and records the review timestamp.
-    /// Returns a failure if the photo has already been reviewed.
-    /// </summary>
-    public Result Reject(DateTime utcNow)
-    {
-        if (Status != GuestPhotoStatus.Pending)
-        {
-            return Result.Failure(GuestPhotoErrors.AlreadyReviewed);
-        }
-
-        Status = GuestPhotoStatus.Rejected;
-        ReviewedAt = utcNow;
-
-        Raise(new GuestPhotoRejectedDomainEvent(Id, WeddingId, utcNow));
-
-        return Result.Success();
-    }
-
-    /// <summary>
-    /// Marks this photo as <see cref="GuestPhotoStatus.OverLimit"/> directly on the in-memory entity.
-    /// Unlike <see cref="Approve"/> and <see cref="Reject"/>, no transition guard is applied here
-    /// because bulk enforcement is performed by <c>IGuestPhotoRepository.EnforcePhotoLimitAsync</c>
-    /// via a raw SQL UPDATE — the domain method is kept as a companion for completeness and
-    /// single-entity scenarios, not as the primary enforcement path.
-    /// </summary>
-    public void MarkOverLimit()
-    {
-        Status = GuestPhotoStatus.OverLimit;
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoApprovedDomainEvent.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoApprovedDomainEvent.cs
deleted file mode 100644
index 1266c7b..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoApprovedDomainEvent.cs
+++ /dev/null
@@ -1,13 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Domain.GuestPhotos;
-
-public sealed class GuestPhotoApprovedDomainEvent(GuestPhotoId guestPhotoId, WeddingId weddingId, DateTime reviewedAtUtc) : DomainEvent
-{
-    public GuestPhotoId GuestPhotoId { get; init; } = guestPhotoId;
-
-    public WeddingId WeddingId { get; init; } = weddingId;
-
-    public DateTime ReviewedAtUtc { get; init; } = reviewedAtUtc;
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoCreatedDomainEvent.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoCreatedDomainEvent.cs
deleted file mode 100644
index 584eac1..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoCreatedDomainEvent.cs
+++ /dev/null
@@ -1,11 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Domain.GuestPhotos;
-
-public sealed class GuestPhotoCreatedDomainEvent(GuestPhotoId guestPhotoId, WeddingId weddingId) : DomainEvent
-{
-    public GuestPhotoId GuestPhotoId { get; init; } = guestPhotoId;
-
-    public WeddingId WeddingId { get; init; } = weddingId;
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoErrors.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoErrors.cs
deleted file mode 100644
index 565a6e0..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoErrors.cs
+++ /dev/null
@@ -1,26 +0,0 @@
-using Eternelle.Common.Domain;
-
-namespace Eternelle.Modules.Weddings.Domain.GuestPhotos;
-
-public static class GuestPhotoErrors
-{
-    public static readonly Error NotFound =
-        Error.NotFound(
-            "GuestPhotos.NotFound",
-            "The guest photo was not found.");
-
-    public static readonly Error AlreadyReviewed =
-        Error.Conflict(
-            "GuestPhotos.AlreadyReviewed",
-            "The guest photo has already been reviewed.");
-
-    public static readonly Error PlanLimitReached =
-        Error.Problem(
-            "GuestPhotos.PlanLimitReached",
-            "The photo upload limit for this wedding's plan has been reached.");
-
-    public static readonly Error InvalidUploadSlot =
-        Error.Problem(
-            "GuestPhotos.InvalidUploadSlot",
-            "One or more upload slots are invalid or have already been used.");
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoId.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoId.cs
deleted file mode 100644
index 23427d8..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoId.cs
+++ /dev/null
@@ -1,8 +0,0 @@
-namespace Eternelle.Modules.Weddings.Domain.GuestPhotos;
-
-public readonly record struct GuestPhotoId(Guid Value)
-{
-    public static GuestPhotoId New() => new(Guid.CreateVersion7());
-
-    public override string ToString() => Value.ToString();
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoRejectedDomainEvent.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoRejectedDomainEvent.cs
deleted file mode 100644
index a0731a7..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoRejectedDomainEvent.cs
+++ /dev/null
@@ -1,13 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Domain.GuestPhotos;
-
-public sealed class GuestPhotoRejectedDomainEvent(GuestPhotoId guestPhotoId, WeddingId weddingId, DateTime reviewedAtUtc) : DomainEvent
-{
-    public GuestPhotoId GuestPhotoId { get; init; } = guestPhotoId;
-
-    public WeddingId WeddingId { get; init; } = weddingId;
-
-    public DateTime ReviewedAtUtc { get; init; } = reviewedAtUtc;
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoStatus.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoStatus.cs
deleted file mode 100644
index fdb925d..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/GuestPhotoStatus.cs
+++ /dev/null
@@ -1,9 +0,0 @@
-namespace Eternelle.Modules.Weddings.Domain.GuestPhotos;
-
-public enum GuestPhotoStatus
-{
-    Pending  = 0,
-    Approved = 1,
-    Rejected = 2,
-    OverLimit = 3
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/IGuestPhotoRepository.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/IGuestPhotoRepository.cs
deleted file mode 100644
index 7c10e89..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/GuestPhotos/IGuestPhotoRepository.cs
+++ /dev/null
@@ -1,36 +0,0 @@
-using Eternelle.Modules.Weddings.Domain.Weddings;
-
-namespace Eternelle.Modules.Weddings.Domain.GuestPhotos;
-
-public interface IGuestPhotoRepository
-{
-    Task<GuestPhoto?> GetAsync(GuestPhotoId id, CancellationToken ct = default);
-
-    Task<IReadOnlyList<GuestPhoto>> GetManyAsync(IReadOnlyList<GuestPhotoId> ids, CancellationToken ct = default);
-
-    Task<IReadOnlyList<GuestPhoto>> GetByWeddingIdAsync(
-        WeddingId weddingId,
-        GuestPhotoStatus? status = null,
-        CancellationToken ct = default);
-
-    Task<int> CountByWeddingIdAsync(WeddingId weddingId, CancellationToken ct = default);
-
-    /// <summary>
-    /// Returns the number of photos that are not <see cref="GuestPhotoStatus.OverLimit"/>.
-    /// Used for pre-upload quota checks so that already-demoted photos do not block future uploads.
-    /// </summary>
-    Task<int> CountActiveByWeddingIdAsync(WeddingId weddingId, CancellationToken ct = default);
-
-    Task EnforcePhotoLimitAsync(WeddingId weddingId, int limit, CancellationToken ct = default);
-
-    /// <summary>
-    /// Inserts all <paramref name="photos"/> and enforces the plan cap in a single transaction.
-    /// </summary>
-    Task InsertManyAndEnforceAsync(IReadOnlyList<GuestPhoto> photos, WeddingId weddingId, int planLimit, CancellationToken ct = default);
-
-    void InsertMany(IReadOnlyList<GuestPhoto> photos);
-
-    void Update(GuestPhoto photo);
-
-    void Delete(GuestPhoto photo);
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Converters/GuestPhotoIdConverter.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Converters/GuestPhotoIdConverter.cs
deleted file mode 100644
index 70e1678..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Converters/GuestPhotoIdConverter.cs
+++ /dev/null
@@ -1,7 +0,0 @@
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
-
-namespace Eternelle.Modules.Weddings.Infrastructure.Database.Converters;
-
-internal sealed class GuestPhotoIdConverter()
-    : ValueConverter<GuestPhotoId, Guid>(id => id.Value, value => new GuestPhotoId(value));
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/WeddingsDbContext.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/WeddingsDbContext.cs
index a1c947e..abbee9d 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/WeddingsDbContext.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/WeddingsDbContext.cs
@@ -6,7 +6,6 @@
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.GalleryImages;
 using Eternelle.Modules.Weddings.Domain.GiftOptions;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
 using Eternelle.Modules.Weddings.Domain.Reminders;
 using Eternelle.Modules.Weddings.Domain.StoryMoments;
 using Eternelle.Modules.Weddings.Domain.VendorCredits;
@@ -17,7 +16,6 @@
 using Eternelle.Modules.Weddings.Infrastructure.EntourageGroups;
 using Eternelle.Modules.Weddings.Infrastructure.GalleryImages;
 using Eternelle.Modules.Weddings.Infrastructure.GiftOptions;
-using Eternelle.Modules.Weddings.Infrastructure.GuestPhotos;
 using Eternelle.Modules.Weddings.Infrastructure.Reminders;
 using Eternelle.Modules.Weddings.Infrastructure.StoryMoments;
 using Eternelle.Modules.Weddings.Infrastructure.VendorCredits;
@@ -35,7 +33,6 @@ public sealed class WeddingsDbContext(DbContextOptions<WeddingsDbContext> option
     internal DbSet<GalleryImage> GalleryImages { get; set; }
     internal DbSet<GiftOption> GiftOptions { get; set; }
     internal DbSet<DressCodeConfig> DressCodeConfigs { get; set; }
-    internal DbSet<GuestPhoto> GuestPhotos { get; set; }
     internal DbSet<CeremonyAct> CeremonyActs { get; set; }
     internal DbSet<VendorCredit> VendorCredits { get; set; }
     internal DbSet<Reminder> Reminders { get; set; }
@@ -78,9 +75,6 @@ protected override void ConfigureConventions(ModelConfigurationBuilder configura
         configurationBuilder.Properties<DressCodeImageId>()
             .HaveConversion<DressCodeImageIdConverter>();
 
-        configurationBuilder.Properties<GuestPhotoId>()
-            .HaveConversion<GuestPhotoIdConverter>();
-
         configurationBuilder.Properties<CeremonyActId>()
             .HaveConversion<CeremonyActIdConverter>();
 
@@ -106,7 +100,6 @@ protected override void OnModelCreating(ModelBuilder modelBuilder)
         modelBuilder.ApplyConfiguration(new GalleryImageConfiguration());
         modelBuilder.ApplyConfiguration(new GiftOptionConfiguration());
         modelBuilder.ApplyConfiguration(new DressCodeConfigConfiguration());
-        modelBuilder.ApplyConfiguration(new GuestPhotoConfiguration());
         modelBuilder.ApplyConfiguration(new CeremonyActConfiguration());
         modelBuilder.ApplyConfiguration(new VendorCreditConfiguration());
         modelBuilder.ApplyConfiguration(new ReminderConfiguration());
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoConfiguration.cs
deleted file mode 100644
index 7800c0c..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoConfiguration.cs
+++ /dev/null
@@ -1,61 +0,0 @@
-using Eternelle.Common.Domain.People;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-using Eternelle.Modules.Weddings.Domain.Shared;
-using Microsoft.EntityFrameworkCore;
-using Microsoft.EntityFrameworkCore.Metadata.Builders;
-
-namespace Eternelle.Modules.Weddings.Infrastructure.GuestPhotos;
-
-internal sealed class GuestPhotoConfiguration : IEntityTypeConfiguration<GuestPhoto>
-{
-    public void Configure(EntityTypeBuilder<GuestPhoto> builder)
-    {
-        builder.ToTable("guest_photos", "wedding");
-
-        builder.HasKey(p => p.Id);
-
-        builder.Property(p => p.WeddingId).IsRequired();
-
-        builder.Property(p => p.SrcUrl)
-            .HasConversion(v => v.Value, v => ImageUrl.FromPersistence(v))
-            .IsRequired()
-            .HasMaxLength(ImageUrl.MaxLength);
-
-        builder.Property(p => p.ThumbnailUrl)
-            .HasConversion(
-                v => v != null ? v.Value : null,
-                v => v != null ? ImageUrl.FromPersistence(v) : null)
-            .HasMaxLength(ImageUrl.MaxLength);
-
-        builder.Property(p => p.WidthPx);
-
-        builder.Property(p => p.HeightPx);
-
-        builder.Property(p => p.UploaderName)
-            .HasConversion(
-                v => v != null ? v.Value : null,
-                v => v != null ? PersonName.FromPersistence(v) : null)
-            .HasMaxLength(PersonName.MaxLength);
-
-        // GuestPhotoStatus — stored as int. Pending = 0, Approved = 1, Rejected = 2, OverLimit = 3.
-        builder.Property(p => p.Status)
-            .HasConversion<int>()
-            .IsRequired()
-            .HasDefaultValue(GuestPhotoStatus.Pending);
-
-        builder.Property(p => p.UploadedAt).IsRequired();
-
-        builder.Property(p => p.ReviewedAt);
-
-        // (wedding_id, status, uploaded_at DESC) — status-filtered reads (feed, moderation queue).
-        builder.HasIndex(p => new { p.WeddingId, p.Status, p.UploadedAt })
-            .HasDatabaseName("idx_guest_photos_wedding_status_uploaded")
-            .IsDescending(false, false, true);
-
-        // (wedding_id, uploaded_at DESC) — unfiltered reads; status column blocks ordered tail above.
-        builder.HasIndex(p => new { p.WeddingId, p.UploadedAt })
-            .HasDatabaseName("idx_guest_photos_wedding_uploaded")
-            .IsDescending(false, true);
-    }
-}
-
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoRepository.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoRepository.cs
deleted file mode 100644
index c5ce319..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/GuestPhotos/GuestPhotoRepository.cs
+++ /dev/null
@@ -1,126 +0,0 @@
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-using Eternelle.Modules.Weddings.Domain.Weddings;
-using Eternelle.Modules.Weddings.Infrastructure.Database;
-using Microsoft.EntityFrameworkCore;
-using Microsoft.EntityFrameworkCore.Storage;
-
-namespace Eternelle.Modules.Weddings.Infrastructure.GuestPhotos;
-
-internal sealed class GuestPhotoRepository(WeddingsDbContext context) : IGuestPhotoRepository
-{
-    public async Task<GuestPhoto?> GetAsync(GuestPhotoId id, CancellationToken ct = default)
-    {
-        return await context.GuestPhotos
-            .SingleOrDefaultAsync(p => p.Id == id, ct);
-    }
-
-    public async Task<IReadOnlyList<GuestPhoto>> GetManyAsync(
-        IReadOnlyList<GuestPhotoId> ids,
-        CancellationToken ct = default)
-    {
-        return await context.GuestPhotos
-            .Where(p => ids.Contains(p.Id))
-            .OrderBy(p => p.Id)
-            .ToListAsync(ct);
-    }
-
-    public async Task<IReadOnlyList<GuestPhoto>> GetByWeddingIdAsync(
-        WeddingId weddingId,
-        GuestPhotoStatus? status = null,
-        CancellationToken ct = default)
-    {
-        IQueryable<GuestPhoto> query = context.GuestPhotos
-            .Where(p => p.WeddingId == weddingId);
-
-        if (status.HasValue)
-        {
-            query = query.Where(p => p.Status == status.Value);
-        }
-
-        return await query.OrderBy(p => p.Id).ToListAsync(ct);
-    }
-
-    public async Task<int> CountByWeddingIdAsync(WeddingId weddingId, CancellationToken ct = default)
-    {
-        return await context.GuestPhotos
-            .CountAsync(p => p.WeddingId == weddingId, ct);
-    }
-
-    public async Task<int> CountActiveByWeddingIdAsync(WeddingId weddingId, CancellationToken ct = default)
-    {
-        return await context.GuestPhotos
-            .CountAsync(p => p.WeddingId == weddingId && p.Status != GuestPhotoStatus.OverLimit, ct);
-    }
-
-    public async Task EnforcePhotoLimitAsync(
-        WeddingId weddingId,
-        int limit,
-        CancellationToken ct = default)
-    {
-        int overLimit = (int)GuestPhotoStatus.OverLimit;
-
-        await context.Database.ExecuteSqlAsync(
-            $"""
-            UPDATE wedding.guest_photos
-               SET status = {overLimit}
-             WHERE wedding_id = {weddingId.Value}
-               AND status     != {overLimit}
-               AND id NOT IN (
-                   SELECT id
-                     FROM wedding.guest_photos
-                    WHERE wedding_id = {weddingId.Value}
-                      AND status     != {overLimit}
-                    ORDER BY uploaded_at ASC, id ASC
-                    LIMIT {limit}
-               )
-            """,
-            ct);
-    }
-
-    public async Task InsertManyAndEnforceAsync(
-        IReadOnlyList<GuestPhoto> photos,
-        WeddingId weddingId,
-        int planLimit,
-        CancellationToken ct = default)
-    {
-        // Guard against mixed-wedding batches — EnforcePhotoLimitAsync runs per weddingId,
-        // so a photo from a different wedding would skew the count and potentially mark
-        // the wrong photos as OverLimit.
-        if (photos.Any(p => p.WeddingId != weddingId))
-        {
-            throw new InvalidOperationException(
-                "All photos in a batch must belong to the same wedding as the provided weddingId.");
-        }
-
-        await using IDbContextTransaction tx = await context.Database.BeginTransactionAsync(ct);
-
-        // Acquire a row-level lock on the wedding profile to serialize concurrent photo
-        // insertions for the same wedding. This ensures the enforce query sees all photos
-        // from competing transactions before deciding which to mark as OverLimit.
-        await context.Database.ExecuteSqlAsync(
-            $"SELECT 1 FROM wedding.profiles WHERE id = {weddingId.Value} FOR UPDATE",
-            ct);
-
-        context.GuestPhotos.AddRange(photos);
-        await context.SaveChangesAsync(ct);
-
-        await EnforcePhotoLimitAsync(weddingId, planLimit, ct);
-
-        await tx.CommitAsync(ct);
-    }
-
-    public void InsertMany(IReadOnlyList<GuestPhoto> photos)
-    {
-        context.GuestPhotos.AddRange(photos);
-    }
-
-    public void Update(GuestPhoto photo)
-    {
-        context.GuestPhotos.Update(photo);
-    }
-
-    public void Delete(GuestPhoto photo)
-    {
-        context.GuestPhotos.Remove(photo);
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/PhotoStorageOptions.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/PhotoStorageOptions.cs
deleted file mode 100644
index aa7e217..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/PhotoStorageOptions.cs
+++ /dev/null
@@ -1,27 +0,0 @@
-namespace Eternelle.Modules.Weddings.Infrastructure.Storage;
-
-public sealed class PhotoStorageOptions
-{
-    public const string SectionName = "Weddings:PhotoStorage";
-
-    /// <summary>
-    /// Internal endpoint used by the API to communicate with the storage service.
-    /// In Docker Compose this is the Docker-internal hostname, e.g. http://eternelle.minio:9000.
-    /// In production this is the same as <see cref="PublicUrl"/>.
-    /// </summary>
-    public string ServiceUrl { get; init; } = string.Empty;
-
-    /// <summary>
-    /// Publicly accessible base URL embedded in presigned URLs returned to the browser.
-    /// In local development this differs from <see cref="ServiceUrl"/> because the browser
-    /// cannot reach Docker-internal hostnames, e.g. http://localhost:9000.
-    /// In production set this equal to <see cref="ServiceUrl"/>.
-    /// </summary>
-    public string PublicUrl { get; init; } = string.Empty;
-
-    public string AccessKey { get; init; } = string.Empty;
-
-    public string SecretKey { get; init; } = string.Empty;
-
-    public string BucketName { get; init; } = "eternelle-photos";
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/RedisUploadSlotStore.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/RedisUploadSlotStore.cs
deleted file mode 100644
index 121d381..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/RedisUploadSlotStore.cs
+++ /dev/null
@@ -1,96 +0,0 @@
-using Eternelle.Modules.Weddings.Application.Abstractions.Storage;
-using StackExchange.Redis;
-
-namespace Eternelle.Modules.Weddings.Infrastructure.Storage;
-
-/// <summary>
-/// Redis-backed implementation of <see cref="IUploadSlotStore"/>.
-/// Slots expire after <see cref="SlotTtl"/> and are atomically fetched-and-deleted
-/// on redemption using the Redis GETDEL command, preventing double-redemption races.
-/// </summary>
-internal sealed class RedisUploadSlotStore(IConnectionMultiplexer redis) : IUploadSlotStore
-{
-    private static readonly TimeSpan SlotTtl = TimeSpan.FromMinutes(15);
-
-    // Lua script for atomic batch redemption.
-    // Reads all keys first — if any is missing, returns false (nil to the caller) without
-    // deleting anything. Only when all keys exist does it delete them and return the values.
-    // Redis executes Lua scripts atomically, so no slot can be partially redeemed.
-    private const string RedeemManyScript = """
-        local values = {}
-        for i = 1, #KEYS do
-            local v = redis.call('GET', KEYS[i])
-            if not v then
-                return false
-            end
-            values[i] = v
-        end
-        for i = 1, #KEYS do
-            redis.call('DEL', KEYS[i])
-        end
-        return values
-        """;
-
-    private IDatabase Db => redis.GetDatabase();
-
-    private static RedisKey Key(Guid slotId) => $"upload-slot:{slotId}";
-
-    public Task StoreAsync(Guid slotId, string cdnUrl, CancellationToken cancellationToken)
-    {
-        return Db.StringSetAsync(Key(slotId), cdnUrl, SlotTtl);
-    }
-
-    public async Task<string?> RedeemAsync(Guid slotId, CancellationToken cancellationToken)
-    {
-        // GETDEL atomically returns the value and removes the key in a single round-trip.
-        // This eliminates the race window that existed between the previous GetStringAsync
-        // and RemoveAsync calls, preventing a slot from being redeemed more than once.
-        RedisValue value = await Db.StringGetDeleteAsync(Key(slotId));
-
-        return value.HasValue ? (string?)value : null;
-    }
-
-    public async Task<IReadOnlyDictionary<Guid, string>?> RedeemManyAsync(
-        IReadOnlyList<Guid> slotIds,
-        CancellationToken cancellationToken)
-    {
-        if (slotIds.Count == 0)
-        {
-            return new Dictionary<Guid, string>(0);
-        }
-
-        // Defensive guard — duplicate IDs would cause the Lua script to DELETE a key on the
-        // second pass that was already removed, and would silently map two photos to one upload.
-        if (new HashSet<Guid>(slotIds).Count != slotIds.Count)
-        {
-            return null;
-        }
-
-        RedisKey[] keys = [.. slotIds.Select(id => Key(id))];
-
-        RedisResult result = await Db.ScriptEvaluateAsync(RedeemManyScript, keys);
-
-        // Lua returned false — at least one slot was missing; nothing was deleted.
-        if (result.IsNull)
-        {
-            return null;
-        }
-
-        var values = (RedisResult[])result!;
-
-        var dict = new Dictionary<Guid, string>(slotIds.Count);
-
-        for (int i = 0; i < slotIds.Count; i++)
-        {
-            string? cdnUrl = (string?)values[i];
-            if (cdnUrl is null)
-            {
-                return null;
-            }
-
-            dict[slotIds[i]] = cdnUrl;
-        }
-
-        return dict;
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/S3PhotoStorageService.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/S3PhotoStorageService.cs
deleted file mode 100644
index b696e82..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/S3PhotoStorageService.cs
+++ /dev/null
@@ -1,163 +0,0 @@
-using Amazon.S3;
-using Amazon.S3.Model;
-using Amazon.S3.Util;
-using Eternelle.Common.Application.Clock;
-using Eternelle.Modules.Weddings.Application.Abstractions.Storage;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-
-namespace Eternelle.Modules.Weddings.Infrastructure.Storage;
-
-/// <summary>
-/// S3-compatible implementation of <see cref="IPhotoStorageService"/>.
-/// Works with MinIO locally and Cloudflare R2 / AWS S3 in production —
-/// all three expose the same S3 API surface.
-/// </summary>
-internal sealed class S3PhotoStorageService : IPhotoStorageService, IDisposable
-{
-    // Presigned PUT URLs expire after 15 minutes — matches the slot store TTL in RedisUploadSlotStore.
-    private static readonly TimeSpan PresignExpiry = TimeSpan.FromMinutes(15);
-
-    // Used for bucket management — talks to the internal Docker/service endpoint.
-    private readonly AmazonS3Client _s3;
-    // Used for presigning — talks to the public endpoint so the signed host matches
-    // what the browser will send. In production ServiceUrl == PublicUrl so both
-    // clients are equivalent and no URL-rewriting is needed.
-    private readonly AmazonS3Client _s3Public;
-    private readonly PhotoStorageOptions _options;
-    private readonly IDateTimeProvider _dateTimeProvider;
-    private readonly ILogger<S3PhotoStorageService> _logger;
-
-    // Guards EnsureBucketExistsAsync against concurrent initialization.
-    // S3PhotoStorageService is registered as a Singleton, so multiple requests
-    // can race on first startup. SemaphoreSlim + double-check prevents duplicate
-    // PutBucketAsync calls.
-    private readonly SemaphoreSlim _bucketLock = new(1, 1);
-    private volatile bool _bucketEnsured;
-
-    public S3PhotoStorageService(
-        IOptions<PhotoStorageOptions> options,
-        IDateTimeProvider dateTimeProvider,
-        ILogger<S3PhotoStorageService> logger)
-    {
-        _options = options.Value;
-        _dateTimeProvider = dateTimeProvider;
-        _logger = logger;
-
-        _s3 = new AmazonS3Client(
-            _options.AccessKey,
-            _options.SecretKey,
-            new AmazonS3Config
-            {
-                // ForcePathStyle is required for MinIO and Cloudflare R2.
-                // AWS S3 uses virtual-hosted style by default but also accepts path style.
-                ServiceURL = _options.ServiceUrl,
-                ForcePathStyle = true
-            });
-
-        _s3Public = new AmazonS3Client(
-            _options.AccessKey,
-            _options.SecretKey,
-            new AmazonS3Config
-            {
-                ServiceURL = _options.PublicUrl,
-                ForcePathStyle = true
-            });
-    }
-
-    public async Task<IReadOnlyList<PresignedUploadSlot>> GeneratePresignedSlotsAsync(
-        int count,
-        CancellationToken cancellationToken)
-    {
-        await EnsureBucketExistsAsync(cancellationToken);
-
-        var slots = new List<PresignedUploadSlot>(count);
-
-        for (int i = 0; i < count; i++)
-        {
-            var slotId = Guid.NewGuid();
-            string objectKey = $"photos/{slotId}";
-
-            // ContentType is intentionally omitted — including it signs the content-type into
-            // the URL, which would force the client to send the exact same value or get a
-            // SignatureDoesNotMatch error. Browsers send the actual MIME type on upload.
-            // _s3Public is configured with PublicUrl so the signed host already matches
-            // what the browser will send — no post-sign URL rewriting needed.
-            string presignedUrl = await _s3Public.GetPreSignedURLAsync(new GetPreSignedUrlRequest
-            {
-                BucketName = _options.BucketName,
-                Key = objectKey,
-                Verb = HttpVerb.PUT,
-                Expires = _dateTimeProvider.UtcNow.Add(PresignExpiry)
-            });
-
-            string cdnUrl = $"{_options.PublicUrl}/{_options.BucketName}/{objectKey}";
-
-            slots.Add(new PresignedUploadSlot(slotId, presignedUrl, cdnUrl));
-        }
-
-        return slots;
-    }
-
-    /// <summary>
-    /// Creates the bucket if it does not already exist.
-    /// Thread-safe: uses a SemaphoreSlim + double-check pattern so only one caller
-    /// performs the existence check and optional PutBucketAsync call, even under
-    /// concurrent requests at startup.
-    /// </summary>
-    private async Task EnsureBucketExistsAsync(CancellationToken cancellationToken)
-    {
-        if (_bucketEnsured)
-        {
-            return;
-        }
-
-        await _bucketLock.WaitAsync(cancellationToken);
-        try
-        {
-            if (_bucketEnsured)
-            {
-                return;
-            }
-
-            bool exists = await AmazonS3Util.DoesS3BucketExistV2Async(_s3, _options.BucketName);
-
-            if (!exists)
-            {
-                try
-                {
-                    await _s3.PutBucketAsync(new PutBucketRequest
-                    {
-                        BucketName = _options.BucketName,
-                        UseClientRegion = true
-                    }, cancellationToken);
-                }
-                catch (AmazonS3Exception ex)
-                    when (ex.ErrorCode is "BucketAlreadyOwnedByYou" or "BucketAlreadyExists")
-                {
-                    // Another process created the bucket between DoesS3BucketExistV2Async
-                    // and PutBucketAsync — the bucket exists and is usable, so treat this
-                    // as success rather than a fatal error.
-                    _logger.LogWarning(
-                        ex,
-                        "Bucket '{BucketName}' already exists (ErrorCode: {ErrorCode}). Suppressing conflict.",
-                        _options.BucketName,
-                        ex.ErrorCode);
-                }
-            }
-
-            _bucketEnsured = true;
-        }
-        finally
-        {
-            _bucketLock.Release();
-        }
-    }
-
-    public void Dispose()
-    {
-        _s3.Dispose();
-        _s3Public.Dispose();
-        _bucketLock.Dispose();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/StubPhotoStorageService.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/StubPhotoStorageService.cs
deleted file mode 100644
index 457f8cb..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/StubPhotoStorageService.cs
+++ /dev/null
@@ -1,30 +0,0 @@
-using Eternelle.Modules.Weddings.Application.Abstractions.Storage;
-
-namespace Eternelle.Modules.Weddings.Infrastructure.Storage;
-
-/// <summary>
-/// Stub implementation of <see cref="IPhotoStorageService"/> used until a real CDN provider
-/// (Cloudflare Images, S3, etc.) is configured.
-/// Returns synthetic presigned URLs that are not backed by any real storage.
-/// </summary>
-internal sealed class StubPhotoStorageService : IPhotoStorageService
-{
-    private const string BaseUrl = "https://stub-cdn.eternelle.ph";
-
-    public Task<IReadOnlyList<PresignedUploadSlot>> GeneratePresignedSlotsAsync(
-        int count,
-        CancellationToken cancellationToken)
-    {
-        List<PresignedUploadSlot> slots = [.. Enumerable.Range(0, count)
-            .Select(_ =>
-            {
-                var slotId = Guid.NewGuid();
-                return new PresignedUploadSlot(
-                    SlotId: slotId,
-                    PresignedUrl: $"{BaseUrl}/presign/{slotId}",
-                    CdnUrl: $"{BaseUrl}/images/{slotId}");
-            })];
-
-        return Task.FromResult<IReadOnlyList<PresignedUploadSlot>>(slots);
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/StubUploadSlotStore.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/StubUploadSlotStore.cs
deleted file mode 100644
index 60b3c4b..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Storage/StubUploadSlotStore.cs
+++ /dev/null
@@ -1,62 +0,0 @@
-using System.Collections.Concurrent;
-using Eternelle.Modules.Weddings.Application.Abstractions.Storage;
-
-namespace Eternelle.Modules.Weddings.Infrastructure.Storage;
-
-/// <summary>
-/// In-memory fallback implementation of <see cref="IUploadSlotStore"/> used when Redis is
-/// unavailable (e.g. local development without a running Redis instance).
-/// Slots are stored in a process-scoped <see cref="ConcurrentDictionary"/>; TTL is not enforced.
-/// Not suitable for production or multi-instance deployments.
-/// </summary>
-internal sealed class StubUploadSlotStore : IUploadSlotStore
-{
-    private readonly ConcurrentDictionary<Guid, string> _slots = new();
-    private readonly object _redeemLock = new();
-
-    public Task StoreAsync(Guid slotId, string cdnUrl, CancellationToken cancellationToken)
-    {
-        _slots[slotId] = cdnUrl;
-        return Task.CompletedTask;
-    }
-
-    public Task<string?> RedeemAsync(Guid slotId, CancellationToken cancellationToken)
-    {
-        lock (_redeemLock)
-        {
-            string? cdnUrl = _slots.TryRemove(slotId, out string? value) ? value : null;
-            return Task.FromResult(cdnUrl);
-        }
-    }
-
-    public Task<IReadOnlyDictionary<Guid, string>?> RedeemManyAsync(
-        IReadOnlyList<Guid> slotIds,
-        CancellationToken cancellationToken)
-    {
-        if (slotIds.Count == 0)
-        {
-            return Task.FromResult<IReadOnlyDictionary<Guid, string>?>(new Dictionary<Guid, string>(0));
-        }
-
-        lock (_redeemLock)
-        {
-            // Verify all slots exist before removing any (all-or-nothing, mirrors Redis Lua script behaviour).
-            foreach (Guid slotId in slotIds)
-            {
-                if (!_slots.ContainsKey(slotId))
-                {
-                    return Task.FromResult<IReadOnlyDictionary<Guid, string>?>(null);
-                }
-            }
-
-            var dict = new Dictionary<Guid, string>(slotIds.Count);
-            foreach (Guid slotId in slotIds)
-            {
-                _slots.TryRemove(slotId, out string? cdnUrl);
-                dict[slotId] = cdnUrl!;
-            }
-
-            return Task.FromResult<IReadOnlyDictionary<Guid, string>?>(dict);
-        }
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs
index 2b22df6..98b12ad 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/WeddingsModule.cs
@@ -4,13 +4,11 @@
 using Eternelle.Common.Presentation.Endpoints;
 using Eternelle.Modules.Tenancy.IntegrationEvents;
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
-using Eternelle.Modules.Weddings.Application.Abstractions.Storage;
 using Eternelle.Modules.Weddings.Domain.CeremonyActs;
 using Eternelle.Modules.Weddings.Domain.DressCodeConfigs;
 using Eternelle.Modules.Weddings.Domain.EntourageGroups;
 using Eternelle.Modules.Weddings.Domain.GalleryImages;
 using Eternelle.Modules.Weddings.Domain.GiftOptions;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
 using Eternelle.Modules.Weddings.Domain.Reminders;
 using Eternelle.Modules.Weddings.Domain.StoryMoments;
 using Eternelle.Modules.Weddings.Domain.VendorCredits;
@@ -21,12 +19,10 @@
 using Eternelle.Modules.Weddings.Infrastructure.EntourageGroups;
 using Eternelle.Modules.Weddings.Infrastructure.GalleryImages;
 using Eternelle.Modules.Weddings.Infrastructure.GiftOptions;
-using Eternelle.Modules.Weddings.Infrastructure.GuestPhotos;
 using Eternelle.Modules.Weddings.Infrastructure.Inbox;
 using Eternelle.Modules.Weddings.Infrastructure.Outbox;
 using Eternelle.Modules.Weddings.Infrastructure.Reminders;
 using Eternelle.Modules.Weddings.Infrastructure.StoryMoments;
-using Eternelle.Modules.Weddings.Infrastructure.Storage;
 using Eternelle.Modules.Weddings.Infrastructure.VendorCredits;
 using Eternelle.Modules.Weddings.Infrastructure.Weddings;
 using Microsoft.EntityFrameworkCore;
@@ -34,7 +30,6 @@
 using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.DependencyInjection.Extensions;
-using StackExchange.Redis;
 
 namespace Eternelle.Modules.Weddings.Infrastructure;
 
@@ -58,7 +53,6 @@ public static IServiceCollection AddWeddingsModule(
     public static void ConfigureConsumers(MassTransit.IRegistrationConfigurator configurator)
     {
         configurator.AddConsumer<IntegrationEventConsumer<TenantProvisionedIntegrationEvent>>();
-        configurator.AddConsumer<IntegrationEventConsumer<TenantUploadLimitChangedIntegrationEvent>>();
     }
 
     private static void AddInfrastructure(this IServiceCollection services, IConfiguration configuration)
@@ -74,44 +68,16 @@ private static void AddInfrastructure(this IServiceCollection services, IConfigu
 
         services.AddScoped<IUnitOfWork>(sp => sp.GetRequiredService<WeddingsDbContext>());
 
-        services.AddSingleton<IPhotoStorageService, S3PhotoStorageService>();
-
-        // IConnectionMultiplexer is only registered by common infrastructure when Redis is reachable.
-        // Fall back to an in-memory stub so the app starts without Redis in local dev.
-        if (services.Any(d => d.ServiceType == typeof(IConnectionMultiplexer)))
-        {
-            services.AddScoped<IUploadSlotStore, RedisUploadSlotStore>();
-        }
-        else
-        {
-            services.AddSingleton<IUploadSlotStore, StubUploadSlotStore>();
-        }
-
         services.AddScoped<IWeddingRepository, WeddingRepository>();
         services.AddScoped<IEntourageGroupRepository, EntourageGroupRepository>();
         services.AddScoped<IStoryMomentRepository, StoryMomentRepository>();
         services.AddScoped<IGalleryImageRepository, GalleryImageRepository>();
         services.AddScoped<IGiftOptionRepository, GiftOptionRepository>();
         services.AddScoped<IDressCodeConfigRepository, DressCodeConfigRepository>();
-        services.AddScoped<IGuestPhotoRepository, GuestPhotoRepository>();
         services.AddScoped<ICeremonyActRepository, CeremonyActRepository>();
         services.AddScoped<IVendorCreditRepository, VendorCreditRepository>();
         services.AddScoped<IReminderRepository, ReminderRepository>();
 
-        services.AddOptions<Application.Weddings.SnapShareOptions>()
-            .Bind(configuration.GetSection("Weddings:SnapShare"))
-            .Validate(opts => !string.IsNullOrWhiteSpace(opts.UploadBaseUrl), "UploadBaseUrl must be provided")
-            .ValidateOnStart();
-
-        services.AddOptions<PhotoStorageOptions>()
-            .Bind(configuration.GetSection(PhotoStorageOptions.SectionName))
-            .Validate(opts => !string.IsNullOrWhiteSpace(opts.ServiceUrl), "PhotoStorage:ServiceUrl must be provided")
-            .Validate(opts => !string.IsNullOrWhiteSpace(opts.PublicUrl), "PhotoStorage:PublicUrl must be provided")
-            .Validate(opts => !string.IsNullOrWhiteSpace(opts.AccessKey), "PhotoStorage:AccessKey must be provided")
-            .Validate(opts => !string.IsNullOrWhiteSpace(opts.SecretKey), "PhotoStorage:SecretKey must be provided")
-            .Validate(opts => !string.IsNullOrWhiteSpace(opts.BucketName), "PhotoStorage:BucketName must be provided")
-            .ValidateOnStart();
-
         services.AddOptions<OutboxOptions>()
             .Bind(configuration.GetSection("Weddings:Outbox"))
             .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/ApproveGuestPhotoEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/ApproveGuestPhotoEndpoint.cs
deleted file mode 100644
index 1aae5ca..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/ApproveGuestPhotoEndpoint.cs
+++ /dev/null
@@ -1,29 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.ApproveGuestPhoto;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.GuestPhotos;
-
-internal sealed class ApproveGuestPhotoEndpoint : IEndpoint
-{
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapPatch("weddings/{weddingId}/photos/{photoId}/approve", async (
-            Guid weddingId,
-            Guid photoId,
-            ISender sender,
-            CancellationToken ct) =>
-        {
-            Result result = await sender.Send(new ApproveGuestPhotoCommand(weddingId, photoId), ct);
-
-            return result.Match(() => Results.Ok(), ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .RequireAuthorization("wedding:edit");
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkApproveGuestPhotosEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkApproveGuestPhotosEndpoint.cs
deleted file mode 100644
index 40df3e9..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkApproveGuestPhotosEndpoint.cs
+++ /dev/null
@@ -1,33 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.BulkApproveGuestPhotos;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.GuestPhotos;
-
-internal sealed class BulkApproveGuestPhotosEndpoint : IEndpoint
-{
-    internal sealed record Request(IReadOnlyList<Guid> GuestPhotoIds);
-
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapPost("weddings/{weddingId}/photos/bulk-approve", async (
-            Guid weddingId,
-            Request request,
-            ISender sender,
-            CancellationToken ct) =>
-        {
-            var command = new BulkApproveGuestPhotosCommand(weddingId, request.GuestPhotoIds);
-
-            Result<BulkApproveGuestPhotosResponse> result = await sender.Send(command, ct);
-
-            return result.Match(Results.Ok, ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .RequireAuthorization("wedding:edit");
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkDeleteGuestPhotosEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkDeleteGuestPhotosEndpoint.cs
deleted file mode 100644
index ed28fa0..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkDeleteGuestPhotosEndpoint.cs
+++ /dev/null
@@ -1,33 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.BulkDeleteGuestPhotos;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.GuestPhotos;
-
-internal sealed class BulkDeleteGuestPhotosEndpoint : IEndpoint
-{
-    internal sealed record Request(IReadOnlyList<Guid> GuestPhotoIds);
-
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapPost("weddings/{weddingId}/photos/bulk-delete", async (
-            Guid weddingId,
-            Request request,
-            ISender sender,
-            CancellationToken ct) =>
-        {
-            var command = new BulkDeleteGuestPhotosCommand(weddingId, request.GuestPhotoIds);
-
-            Result result = await sender.Send(command, ct);
-
-            return result.Match(() => Results.NoContent(), ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .RequireAuthorization("wedding:edit");
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkRejectGuestPhotosEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkRejectGuestPhotosEndpoint.cs
deleted file mode 100644
index a113cf0..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/BulkRejectGuestPhotosEndpoint.cs
+++ /dev/null
@@ -1,33 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.BulkRejectGuestPhotos;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.GuestPhotos;
-
-internal sealed class BulkRejectGuestPhotosEndpoint : IEndpoint
-{
-    internal sealed record Request(IReadOnlyList<Guid> GuestPhotoIds);
-
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapPost("weddings/{weddingId}/photos/bulk-reject", async (
-            Guid weddingId,
-            Request request,
-            ISender sender,
-            CancellationToken ct) =>
-        {
-            var command = new BulkRejectGuestPhotosCommand(weddingId, request.GuestPhotoIds);
-
-            Result result = await sender.Send(command, ct);
-
-            return result.Match(() => Results.Ok(), ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .RequireAuthorization("wedding:edit");
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/DeleteGuestPhotoEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/DeleteGuestPhotoEndpoint.cs
deleted file mode 100644
index a599d7a..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/DeleteGuestPhotoEndpoint.cs
+++ /dev/null
@@ -1,29 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.DeleteGuestPhoto;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.GuestPhotos;
-
-internal sealed class DeleteGuestPhotoEndpoint : IEndpoint
-{
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapDelete("weddings/{weddingId}/photos/{photoId}", async (
-            Guid weddingId,
-            Guid photoId,
-            ISender sender,
-            CancellationToken ct) =>
-        {
-            Result result = await sender.Send(new DeleteGuestPhotoCommand(weddingId, photoId), ct);
-
-            return result.Match(() => Results.NoContent(), ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .RequireAuthorization("wedding:edit");
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GenerateUploadSlotsEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GenerateUploadSlotsEndpoint.cs
deleted file mode 100644
index 0cfde84..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GenerateUploadSlotsEndpoint.cs
+++ /dev/null
@@ -1,38 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.GenerateUploadSlots;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.GuestPhotos;
-
-/// <summary>
-/// Step 1 of the guest photo upload flow.
-/// The client requests N presigned upload slots. Each slot contains a CDN presigned URL
-/// for direct upload and the final CDN URL. The client uploads all files in parallel,
-/// then calls <see cref="RegisterGuestPhotosEndpoint"/> to register them.
-/// </summary>
-internal sealed class GenerateUploadSlotsEndpoint : IEndpoint
-{
-    internal sealed record Request(int Count);
-
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapPost("photos/upload/presign", async (
-            Guid token,
-            Request request,
-            ISender sender,
-            CancellationToken ct) =>
-        {
-            Result<IReadOnlyList<UploadSlotResponse>> result =
-                await sender.Send(new GenerateUploadSlotsCommand(token, request.Count), ct);
-
-            return result.Match(Results.Ok, ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .AllowAnonymous();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetGuestPhotosEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetGuestPhotosEndpoint.cs
deleted file mode 100644
index e9bb498..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetGuestPhotosEndpoint.cs
+++ /dev/null
@@ -1,32 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.GuestPhotos;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.GetGuestPhotos;
-using Eternelle.Modules.Weddings.Domain.GuestPhotos;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.GuestPhotos;
-
-internal sealed class GetGuestPhotosEndpoint : IEndpoint
-{
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapGet("weddings/{weddingId}/photos", async (
-            Guid weddingId,
-            GuestPhotoStatus? status,
-            ISender sender,
-            CancellationToken ct) =>
-        {
-            Result<IReadOnlyList<GuestPhotoResponse>> result =
-                await sender.Send(new GetGuestPhotosQuery(weddingId, status), ct);
-
-            return result.Match(Results.Ok, ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .RequireAuthorization("wedding:edit");
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetPublicGuestPhotoFeedEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetPublicGuestPhotoFeedEndpoint.cs
deleted file mode 100644
index 4563e1a..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetPublicGuestPhotoFeedEndpoint.cs
+++ /dev/null
@@ -1,56 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.GuestPhotos;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.GetPublicGuestPhotos;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.GuestPhotos;
-
-internal sealed class GetPublicGuestPhotoFeedEndpoint : IEndpoint
-{
-    private sealed record PublicPhotoResponse(
-        Guid Id,
-        string SrcUrl,
-        string? ThumbnailUrl,
-        int? WidthPx,
-        int? HeightPx,
-        string? UploaderName,
-        DateTime UploadedAt);
-
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapGet("weddings/{weddingId}/photos/feed", async (
-            Guid weddingId,
-            ISender sender,
-            HttpContext httpContext,
-            CancellationToken ct) =>
-        {
-            Result<IReadOnlyList<GuestPhotoResponse>> result =
-                await sender.Send(new GetPublicGuestPhotosQuery(weddingId), ct);
-
-            return result.Match(
-                photos =>
-                {
-                    httpContext.Response.Headers.CacheControl = "public, max-age=30";
-
-                    IEnumerable<PublicPhotoResponse> publicPhotos = photos.Select(p => new PublicPhotoResponse(
-                        p.Id,
-                        p.SrcUrl,
-                        p.ThumbnailUrl,
-                        p.WidthPx,
-                        p.HeightPx,
-                        p.UploaderName,
-                        p.UploadedAt));
-
-                    return Results.Ok(new { photos = publicPhotos });
-                },
-                ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .AllowAnonymous();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetUploadContextEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetUploadContextEndpoint.cs
deleted file mode 100644
index d228a12..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/GetUploadContextEndpoint.cs
+++ /dev/null
@@ -1,29 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.GetUploadContext;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.GuestPhotos;
-
-internal sealed class GetUploadContextEndpoint : IEndpoint
-{
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapGet("photos/upload", async (
-            Guid token,
-            ISender sender,
-            CancellationToken ct) =>
-        {
-            Result<UploadContextResponse> result =
-                await sender.Send(new GetUploadContextQuery(token), ct);
-
-            return result.Match(Results.Ok, ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .AllowAnonymous();
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RegisterGuestPhotosEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RegisterGuestPhotosEndpoint.cs
deleted file mode 100644
index 6e2f0c5..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RegisterGuestPhotosEndpoint.cs
+++ /dev/null
@@ -1,53 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.RegisterGuestPhotos;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.RateLimiting;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.GuestPhotos;
-
-/// <summary>
-/// Step 2 of the guest photo upload flow.
-/// The client calls this after uploading files to the CDN using the presigned URLs
-/// issued by <see cref="GenerateUploadSlotsEndpoint"/>. Registers all photos in a
-/// single batch — one transaction, one enforcement pass.
-/// </summary>
-internal sealed class RegisterGuestPhotosEndpoint : IEndpoint
-{
-    internal sealed record PhotoRequest(
-        Guid SlotId,
-        string? UploaderName,
-        int? WidthPx,
-        int? HeightPx);
-
-    internal sealed record Request(IReadOnlyList<PhotoRequest> Photos);
-
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapPost("photos/upload", async (
-            Guid token,
-            Request request,
-            ISender sender,
-            CancellationToken ct) =>
-        {
-            var command = new RegisterGuestPhotosCommand(
-                token,
-                (request.Photos ?? [])
-                    .Select(p => new PhotoRegistration(p.SlotId, p.UploaderName, p.WidthPx, p.HeightPx))
-                    .ToList());
-
-            Result<IReadOnlyList<Guid>> result = await sender.Send(command, ct);
-
-            return result.Match(
-                photoIds => Results.Ok(new { photoIds }),
-                ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .AllowAnonymous()
-        .RequireRateLimiting(RateLimitingPolicies.GuestPhotoUpload);
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RejectGuestPhotoEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RejectGuestPhotoEndpoint.cs
deleted file mode 100644
index 1002d9a..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/GuestPhotos/RejectGuestPhotoEndpoint.cs
+++ /dev/null
@@ -1,29 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.GuestPhotos.RejectGuestPhoto;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.GuestPhotos;
-
-internal sealed class RejectGuestPhotoEndpoint : IEndpoint
-{
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapPatch("weddings/{weddingId}/photos/{photoId}/reject", async (
-            Guid weddingId,
-            Guid photoId,
-            ISender sender,
-            CancellationToken ct) =>
-        {
-            Result result = await sender.Send(new RejectGuestPhotoCommand(weddingId, photoId), ct);
-
-            return result.Match(() => Results.Ok(), ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .RequireAuthorization("wedding:edit");
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/RateLimitingPolicies.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/RateLimitingPolicies.cs
deleted file mode 100644
index f0f8459..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/RateLimitingPolicies.cs
+++ /dev/null
@@ -1,10 +0,0 @@
-namespace Eternelle.Modules.Weddings.Presentation;
-
-public static class RateLimitingPolicies
-{
-    /// <summary>
-    /// Applied to the guest photo upload endpoint.
-    /// Policy is configured in <c>Program.cs</c>: 10 requests / 60 s per IP.
-    /// </summary>
-    public const string GuestPhotoUpload = "guest-photo-upload";
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantProvisionedIntegrationEventHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantProvisionedIntegrationEventHandler.cs
index 790d996..9695407 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantProvisionedIntegrationEventHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantProvisionedIntegrationEventHandler.cs
@@ -15,8 +15,7 @@ await sender.Send(
             new CreateWeddingCommand(
                 integrationEvent.TenantId,
                 integrationEvent.WeddingDate,
-                Hashtag: null,
-                integrationEvent.UploadLimit),
+                Hashtag: null),
             cancellationToken);
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs
deleted file mode 100644
index c9a1907..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs
+++ /dev/null
@@ -1,18 +0,0 @@
-using Eternelle.Common.Application.EventBus;
-using Eternelle.Modules.Tenancy.IntegrationEvents;
-using Eternelle.Modules.Weddings.Application.Weddings.SetGuestPhotoUploadLimit;
-using MediatR;
-
-namespace Eternelle.Modules.Weddings.Presentation.Tenancy;
-
-internal sealed class TenantUploadLimitChangedIntegrationEventHandler(ISender sender)
-    : IntegrationEventHandler<TenantUploadLimitChangedIntegrationEvent>
-{
-    public override async Task Handle(
-        TenantUploadLimitChangedIntegrationEvent integrationEvent, CancellationToken cancellationToken = default)
-    {
-        await sender.Send(
-            new SetGuestPhotoUploadLimitCommand(integrationEvent.TenantId, integrationEvent.UploadLimit),
-            cancellationToken);
-    }
-}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/RegenerateUploadTokenEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/RegenerateUploadTokenEndpoint.cs
deleted file mode 100644
index 2309840..0000000
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/RegenerateUploadTokenEndpoint.cs
+++ /dev/null
@@ -1,34 +0,0 @@
-using Eternelle.Common.Domain;
-using Eternelle.Common.Presentation.Endpoints;
-using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.Weddings.RegenerateUploadToken;
-using MediatR;
-using Microsoft.AspNetCore.Builder;
-using Microsoft.AspNetCore.Http;
-using Microsoft.AspNetCore.Routing;
-
-namespace Eternelle.Modules.Weddings.Presentation.Weddings;
-
-/// <summary>
-/// Stub endpoint — upload token management has moved to the Album module.
-/// Will be removed in Task 1.2.
-/// </summary>
-internal sealed class RegenerateUploadTokenEndpoint : IEndpoint
-{
-    public void MapEndpoint(IEndpointRouteBuilder app)
-    {
-        app.MapPost("weddings/{weddingId}/snap-share/regenerate-token", async (
-            Guid weddingId,
-            ISender sender,
-            CancellationToken ct) =>
-        {
-            Result<Guid> result = await sender.Send(new RegenerateUploadTokenCommand(weddingId), ct);
-
-            return result.Match(
-                _ => Results.Ok(),
-                ApiResults.Problem);
-        })
-        .WithTags(Tags.SocialShare)
-        .RequireAuthorization("wedding:edit");
-    }
-}

From 30f07d3aa188a5dfec63c3b2bde32792773b67b5 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 12:42:43 +0800
Subject: [PATCH 119/155] Eternelle-194 Migrate Weddings: drop guest photos and
 rename social share config

---
 .../Weddings/Wedding.cs                       |   2 +-
 ...veGuestPhotosRenameSocialShare.Designer.cs | 846 ++++++++++++++++++
 ...0013_RemoveGuestPhotosRenameSocialShare.cs | 150 ++++
 .../WeddingsDbContextModelSnapshot.cs         |  99 +-
 .../SocialShareConfigConfiguration.cs         |   4 +-
 .../Weddings/WeddingConfiguration.cs          |   2 +-
 6 files changed, 1006 insertions(+), 97 deletions(-)
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260530180013_RemoveGuestPhotosRenameSocialShare.Designer.cs
 create mode 100644 src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260530180013_RemoveGuestPhotosRenameSocialShare.cs

diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
index 630e211..9c8f948 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/Wedding.cs
@@ -8,7 +8,7 @@ namespace Eternelle.Modules.Weddings.Domain.Weddings;
 /// Wedding aggregate root. Represents the wedding profile (wedding.profiles table)
 /// and directly owns:
 ///   - Partners      (wedding.partners — always exactly two, partner_number 1 and 2)
-///   - SocialShare   (wedding.snap_share_configs — 1:1, no independent lifecycle)
+///   - SocialShare   (wedding.social_share_configs — 1:1, no independent lifecycle)
 ///
 /// All other child aggregates — StoryMoment, EntourageGroup, GalleryImage, GiftOption,
 /// DressCodeConfig, CeremonyAct, VendorCredit, Reminder — reference this aggregate by
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260530180013_RemoveGuestPhotosRenameSocialShare.Designer.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260530180013_RemoveGuestPhotosRenameSocialShare.Designer.cs
new file mode 100644
index 0000000..329f44d
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260530180013_RemoveGuestPhotosRenameSocialShare.Designer.cs
@@ -0,0 +1,846 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Weddings.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Weddings.Infrastructure.Database.Migrations
+{
+    [DbContext(typeof(WeddingsDbContext))]
+    [Migration("20260530180013_RemoveGuestPhotosRenameSocialShare")]
+    partial class RemoveGuestPhotosRenameSocialShare
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("wedding")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.CeremonyActs.CeremonyAct", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<TimeOnly?>("ActTime")
+                        .HasColumnType("time without time zone")
+                        .HasColumnName("act_time");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("description");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("Icon")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("icon");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_ceremony_acts");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_ceremony_acts_wedding_id_display_order");
+
+                    b.ToTable("ceremony_acts", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.DressCodeConfigs.DressCodeConfig", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Description")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("description");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_dress_code_configs");
+
+                    b.HasIndex("WeddingId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_dress_code_configs_wedding_id");
+
+                    b.ToTable("dress_code_configs", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.EntourageGroups.EntourageGroup", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<int?>("GroupType")
+                        .HasColumnType("integer")
+                        .HasColumnName("group_type");
+
+                    b.Property<string>("Label")
+                        .IsRequired()
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("label");
+
+                    b.Property<int>("RenderAs")
+                        .HasColumnType("integer")
+                        .HasColumnName("render_as");
+
+                    b.Property<string>("Subtitle")
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("subtitle");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_entourage_groups");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_entourage_groups_wedding_id_display_order");
+
+                    b.ToTable("entourage_groups", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.GalleryImages.GalleryImage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("AltText")
+                        .IsRequired()
+                        .HasMaxLength(300)
+                        .HasColumnType("character varying(300)")
+                        .HasColumnName("alt_text");
+
+                    b.Property<string>("Caption")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("caption");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at_utc");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<int?>("HeightPx")
+                        .HasColumnType("integer")
+                        .HasColumnName("height_px");
+
+                    b.Property<string>("SrcUrl")
+                        .IsRequired()
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("src_url");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.Property<int?>("WidthPx")
+                        .HasColumnType("integer")
+                        .HasColumnName("width_px");
+
+                    b.HasKey("Id")
+                        .HasName("pk_gallery_images");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_gallery_images_wedding_id_display_order");
+
+                    b.ToTable("gallery_images", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.GiftOptions.GiftOption", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("AccountName")
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("account_name");
+
+                    b.Property<string>("AccountNumber")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("account_number");
+
+                    b.Property<string>("AccountType")
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("account_type");
+
+                    b.Property<string>("Description")
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("description");
+
+                    b.Property<int>("DisplayMode")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_mode");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("ImageUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("image_url");
+
+                    b.Property<string>("LinkUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("link_url");
+
+                    b.Property<string>("QrImageUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("qr_image_url");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("title");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_gift_options");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_gift_options_wedding_id_display_order");
+
+                    b.ToTable("gift_options", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.Reminders.Reminder", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Body")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("body");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("Icon")
+                        .IsRequired()
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("icon");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("title");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_reminders");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_reminders_wedding_id_display_order");
+
+                    b.ToTable("reminders", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.StoryMoments.StoryMoment", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Description")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("character varying(2000)")
+                        .HasColumnName("description");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("ImageUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("image_url");
+
+                    b.Property<DateOnly?>("StoryDate")
+                        .HasColumnType("date")
+                        .HasColumnName("story_date");
+
+                    b.Property<string>("Title")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("title");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_story_moments");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_story_moments_wedding_id_display_order_id");
+
+                    b.ToTable("story_moments", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.VendorCredits.VendorCredit", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<int>("DisplayOrder")
+                        .HasColumnType("integer")
+                        .HasColumnName("display_order");
+
+                    b.Property<string>("ImageUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("image_url");
+
+                    b.Property<string>("InstagramHandle")
+                        .HasMaxLength(30)
+                        .HasColumnType("character varying(30)")
+                        .HasColumnName("instagram_handle");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("name");
+
+                    b.Property<string>("Role")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("role");
+
+                    b.Property<string>("WebsiteUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("website_url");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("Id")
+                        .HasName("pk_vendor_credits");
+
+                    b.HasIndex("WeddingId", "DisplayOrder", "Id")
+                        .HasDatabaseName("ix_vendor_credits_wedding_id_display_order");
+
+                    b.ToTable("vendor_credits", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.Weddings.Wedding", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at");
+
+                    b.Property<string>("Hashtag")
+                        .HasColumnType("text")
+                        .HasColumnName("hashtag");
+
+                    b.Property<int>("SchemaVersion")
+                        .HasColumnType("integer")
+                        .HasColumnName("schema_version");
+
+                    b.Property<Guid>("TenantId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("tenant_id");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at");
+
+                    b.Property<DateOnly>("WeddingDate")
+                        .HasColumnType("date")
+                        .HasColumnName("wedding_date");
+
+                    b.HasKey("Id")
+                        .HasName("pk_profiles");
+
+                    b.HasIndex("TenantId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_profiles_tenant_id");
+
+                    b.ToTable("profiles", "wedding");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.DressCodeConfigs.DressCodeConfig", b =>
+                {
+                    b.OwnsMany("Eternelle.Modules.Weddings.Domain.DressCodeConfigs.DressCodeColor", "Colors", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<string>("ColorHex")
+                                .IsRequired()
+                                .HasMaxLength(9)
+                                .HasColumnType("character varying(9)")
+                                .HasColumnName("color_hex");
+
+                            b1.Property<string>("ColorName")
+                                .IsRequired()
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("color_name");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<Guid>("DressCodeConfigId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("dress_code_config_id");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_dress_code_colors");
+
+                            b1.HasIndex("DressCodeConfigId", "DisplayOrder", "Id")
+                                .HasDatabaseName("ix_dress_code_colors_dress_code_config_id_display_order");
+
+                            b1.ToTable("dress_code_colors", "wedding", t =>
+                                {
+                                    t.HasCheckConstraint("ck_dress_code_colors_color_hex", "color_hex ~ '^#[0-9A-Fa-f]{3,8}$'");
+                                });
+
+                            b1.WithOwner()
+                                .HasForeignKey("DressCodeConfigId")
+                                .HasConstraintName("fk_dress_code_colors_dress_code_configs_dress_code_config_id");
+                        });
+
+                    b.OwnsMany("Eternelle.Modules.Weddings.Domain.DressCodeConfigs.DressCodeImage", "Images", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<Guid>("DressCodeConfigId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("dress_code_config_id");
+
+                            b1.Property<string>("ImageUrl")
+                                .IsRequired()
+                                .HasMaxLength(2048)
+                                .HasColumnType("character varying(2048)")
+                                .HasColumnName("image_url");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_dress_code_images");
+
+                            b1.HasIndex("DressCodeConfigId", "DisplayOrder", "Id")
+                                .HasDatabaseName("ix_dress_code_images_dress_code_config_id_display_order");
+
+                            b1.ToTable("dress_code_images", "wedding");
+
+                            b1.WithOwner()
+                                .HasForeignKey("DressCodeConfigId")
+                                .HasConstraintName("fk_dress_code_images_dress_code_configs_dress_code_config_id");
+                        });
+
+                    b.Navigation("Colors");
+
+                    b.Navigation("Images");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.EntourageGroups.EntourageGroup", b =>
+                {
+                    b.OwnsMany("Eternelle.Modules.Weddings.Domain.EntourageGroups.EntourageCouple", "Couples", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<Guid>("GroupId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("group_id");
+
+                            b1.Property<Guid>("MemberAId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("member_a_id");
+
+                            b1.Property<Guid>("MemberBId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("member_b_id");
+
+                            b1.Property<string>("Note")
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("note");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_entourage_couples");
+
+                            b1.HasIndex("MemberAId")
+                                .HasDatabaseName("ix_entourage_couples_member_a");
+
+                            b1.HasIndex("MemberBId")
+                                .HasDatabaseName("ix_entourage_couples_member_b");
+
+                            b1.HasIndex("GroupId", "MemberAId", "MemberBId")
+                                .IsUnique()
+                                .HasDatabaseName("ix_entourage_couples_group_member_pair");
+
+                            b1.ToTable("entourage_couples", "wedding", t =>
+                                {
+                                    t.HasCheckConstraint("ck_entourage_couples_member_order", "member_a_id < member_b_id");
+                                });
+
+                            b1.WithOwner()
+                                .HasForeignKey("GroupId")
+                                .HasConstraintName("fk_entourage_couples_entourage_groups_group_id");
+                        });
+
+                    b.OwnsMany("Eternelle.Modules.Weddings.Domain.EntourageGroups.EntourageMember", "Members", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<int>("DisplayOrder")
+                                .HasColumnType("integer")
+                                .HasColumnName("display_order");
+
+                            b1.Property<Guid>("GroupId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("group_id");
+
+                            b1.Property<string>("ImageUrl")
+                                .HasMaxLength(2048)
+                                .HasColumnType("character varying(2048)")
+                                .HasColumnName("image_url");
+
+                            b1.Property<string>("Message")
+                                .HasMaxLength(1000)
+                                .HasColumnType("character varying(1000)")
+                                .HasColumnName("message");
+
+                            b1.Property<string>("Name")
+                                .IsRequired()
+                                .HasMaxLength(150)
+                                .HasColumnType("character varying(150)")
+                                .HasColumnName("name");
+
+                            b1.Property<string>("Note")
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("note");
+
+                            b1.Property<string>("Role")
+                                .IsRequired()
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("role");
+
+                            b1.Property<int?>("Seed")
+                                .HasColumnType("integer")
+                                .HasColumnName("seed");
+
+                            b1.Property<Guid>("WeddingId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("wedding_id");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_entourage_members");
+
+                            b1.HasIndex("GroupId")
+                                .HasDatabaseName("ix_entourage_members_group_id");
+
+                            b1.HasIndex("WeddingId")
+                                .HasDatabaseName("ix_entourage_members_wedding_id");
+
+                            b1.HasIndex("GroupId", "Id")
+                                .IsUnique()
+                                .HasDatabaseName("uq_entourage_members_group_id_id");
+
+                            b1.ToTable("entourage_members", "wedding");
+
+                            b1.WithOwner()
+                                .HasForeignKey("GroupId")
+                                .HasConstraintName("fk_entourage_members_entourage_groups_group_id");
+                        });
+
+                    b.Navigation("Couples");
+
+                    b.Navigation("Members");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.Weddings.Wedding", b =>
+                {
+                    b.OwnsMany("Eternelle.Modules.Weddings.Domain.Weddings.Partner", "Partners", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<string>("Bio")
+                                .HasMaxLength(500)
+                                .HasColumnType("character varying(500)")
+                                .HasColumnName("bio");
+
+                            b1.Property<string>("FirstName")
+                                .IsRequired()
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("first_name");
+
+                            b1.Property<string>("ImageUrl")
+                                .HasMaxLength(2048)
+                                .HasColumnType("character varying(2048)")
+                                .HasColumnName("image_url");
+
+                            b1.Property<string>("LastName")
+                                .IsRequired()
+                                .HasMaxLength(100)
+                                .HasColumnType("character varying(100)")
+                                .HasColumnName("last_name");
+
+                            b1.Property<int>("PartnerNumber")
+                                .HasColumnType("integer")
+                                .HasColumnName("partner_number");
+
+                            b1.Property<Guid>("WeddingId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("wedding_id");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_partners");
+
+                            b1.HasIndex("WeddingId", "PartnerNumber")
+                                .IsUnique()
+                                .HasDatabaseName("ix_partners_wedding_id_partner_number");
+
+                            b1.ToTable("partners", "wedding");
+
+                            b1.WithOwner()
+                                .HasForeignKey("WeddingId")
+                                .HasConstraintName("fk_partners_profiles_wedding_id");
+                        });
+
+                    b.OwnsOne("Eternelle.Modules.Weddings.Domain.Weddings.SocialShareConfig", "SocialShare", b1 =>
+                        {
+                            b1.Property<Guid>("Id")
+                                .HasColumnType("uuid")
+                                .HasColumnName("id");
+
+                            b1.Property<string>("CallToAction")
+                                .HasMaxLength(200)
+                                .HasColumnType("character varying(200)")
+                                .HasColumnName("cta_text");
+
+                            b1.Property<bool>("Enabled")
+                                .HasColumnType("boolean")
+                                .HasColumnName("enabled");
+
+                            b1.Property<string>("InstagramHandle")
+                                .HasMaxLength(30)
+                                .HasColumnType("character varying(30)")
+                                .HasColumnName("instagram_handle");
+
+                            b1.Property<Guid>("WeddingId")
+                                .HasColumnType("uuid")
+                                .HasColumnName("wedding_id");
+
+                            b1.HasKey("Id")
+                                .HasName("pk_social_share_configs");
+
+                            b1.HasIndex("WeddingId")
+                                .IsUnique()
+                                .HasDatabaseName("ix_social_share_configs_wedding_id");
+
+                            b1.ToTable("social_share_configs", "wedding");
+
+                            b1.WithOwner()
+                                .HasForeignKey("WeddingId")
+                                .HasConstraintName("fk_social_share_configs_profiles_id");
+                        });
+
+                    b.Navigation("Partners");
+
+                    b.Navigation("SocialShare");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260530180013_RemoveGuestPhotosRenameSocialShare.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260530180013_RemoveGuestPhotosRenameSocialShare.cs
new file mode 100644
index 0000000..0a9e460
--- /dev/null
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/20260530180013_RemoveGuestPhotosRenameSocialShare.cs
@@ -0,0 +1,150 @@
+// <auto-generated />
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Eternelle.Modules.Weddings.Infrastructure.Database.Migrations
+{
+    /// <inheritdoc />
+    public partial class RemoveGuestPhotosRenameSocialShare : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "guest_photos",
+                schema: "wedding");
+
+            migrationBuilder.DropTable(
+                name: "snap_share_configs",
+                schema: "wedding");
+
+            migrationBuilder.DropColumn(
+                name: "guest_photo_upload_limit",
+                schema: "wedding",
+                table: "profiles");
+
+            migrationBuilder.CreateTable(
+                name: "social_share_configs",
+                schema: "wedding",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    wedding_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    instagram_handle = table.Column<string>(type: "character varying(30)", maxLength: 30, nullable: true),
+                    cta_text = table.Column<string>(type: "character varying(200)", maxLength: 200, nullable: true),
+                    enabled = table.Column<bool>(type: "boolean", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_social_share_configs", x => x.id);
+                    table.ForeignKey(
+                        name: "fk_social_share_configs_profiles_id",
+                        column: x => x.wedding_id,
+                        principalSchema: "wedding",
+                        principalTable: "profiles",
+                        principalColumn: "id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "ix_social_share_configs_wedding_id",
+                schema: "wedding",
+                table: "social_share_configs",
+                column: "wedding_id",
+                unique: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "social_share_configs",
+                schema: "wedding");
+
+            migrationBuilder.AddColumn<int>(
+                name: "guest_photo_upload_limit",
+                schema: "wedding",
+                table: "profiles",
+                type: "integer",
+                nullable: true);
+
+            migrationBuilder.CreateTable(
+                name: "guest_photos",
+                schema: "wedding",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    height_px = table.Column<int>(type: "integer", nullable: true),
+                    reviewed_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                    src_url = table.Column<string>(type: "character varying(2048)", maxLength: 2048, nullable: false),
+                    status = table.Column<int>(type: "integer", nullable: false, defaultValue: 0),
+                    thumbnail_url = table.Column<string>(type: "character varying(2048)", maxLength: 2048, nullable: true),
+                    uploaded_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    uploader_name = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: true),
+                    wedding_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    width_px = table.Column<int>(type: "integer", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_guest_photos", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "snap_share_configs",
+                schema: "wedding",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    cta_text = table.Column<string>(type: "character varying(200)", maxLength: 200, nullable: true),
+                    enabled = table.Column<bool>(type: "boolean", nullable: false),
+                    instagram_handle = table.Column<string>(type: "character varying(30)", maxLength: 30, nullable: true),
+                    moderation_mode = table.Column<int>(type: "integer", nullable: false, defaultValue: 0),
+                    upload_token = table.Column<Guid>(type: "uuid", nullable: true),
+                    uploader_name_required = table.Column<bool>(type: "boolean", nullable: false, defaultValue: false),
+                    wedding_id = table.Column<Guid>(type: "uuid", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_snap_share_configs", x => x.id);
+                    table.ForeignKey(
+                        name: "fk_snap_share_configs_profiles_id",
+                        column: x => x.wedding_id,
+                        principalSchema: "wedding",
+                        principalTable: "profiles",
+                        principalColumn: "id",
+                        onDelete: ReferentialAction.Cascade);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "idx_guest_photos_wedding_status_uploaded",
+                schema: "wedding",
+                table: "guest_photos",
+                columns: new[] { "wedding_id", "status", "uploaded_at" },
+                descending: new[] { false, false, true });
+
+            migrationBuilder.CreateIndex(
+                name: "idx_guest_photos_wedding_uploaded",
+                schema: "wedding",
+                table: "guest_photos",
+                columns: new[] { "wedding_id", "uploaded_at" },
+                descending: new[] { false, true });
+
+            migrationBuilder.CreateIndex(
+                name: "ix_snap_share_configs_upload_token",
+                schema: "wedding",
+                table: "snap_share_configs",
+                column: "upload_token",
+                unique: true,
+                filter: "upload_token IS NOT NULL");
+
+            migrationBuilder.CreateIndex(
+                name: "ix_snap_share_configs_wedding_id",
+                schema: "wedding",
+                table: "snap_share_configs",
+                column: "wedding_id",
+                unique: true);
+        }
+    }
+}
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/WeddingsDbContextModelSnapshot.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/WeddingsDbContextModelSnapshot.cs
index aff92e7..650cbba 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/WeddingsDbContextModelSnapshot.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Database/Migrations/WeddingsDbContextModelSnapshot.cs
@@ -360,68 +360,6 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                     b.ToTable("gift_options", "wedding");
                 });
 
-            modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.GuestPhotos.GuestPhoto", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .HasColumnType("uuid")
-                        .HasColumnName("id");
-
-                    b.Property<int?>("HeightPx")
-                        .HasColumnType("integer")
-                        .HasColumnName("height_px");
-
-                    b.Property<DateTime?>("ReviewedAt")
-                        .HasColumnType("timestamp with time zone")
-                        .HasColumnName("reviewed_at");
-
-                    b.Property<string>("SrcUrl")
-                        .IsRequired()
-                        .HasMaxLength(2048)
-                        .HasColumnType("character varying(2048)")
-                        .HasColumnName("src_url");
-
-                    b.Property<int>("Status")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("integer")
-                        .HasDefaultValue(0)
-                        .HasColumnName("status");
-
-                    b.Property<string>("ThumbnailUrl")
-                        .HasMaxLength(2048)
-                        .HasColumnType("character varying(2048)")
-                        .HasColumnName("thumbnail_url");
-
-                    b.Property<DateTime>("UploadedAt")
-                        .HasColumnType("timestamp with time zone")
-                        .HasColumnName("uploaded_at");
-
-                    b.Property<string>("UploaderName")
-                        .HasMaxLength(150)
-                        .HasColumnType("character varying(150)")
-                        .HasColumnName("uploader_name");
-
-                    b.Property<Guid>("WeddingId")
-                        .HasColumnType("uuid")
-                        .HasColumnName("wedding_id");
-
-                    b.Property<int?>("WidthPx")
-                        .HasColumnType("integer")
-                        .HasColumnName("width_px");
-
-                    b.HasKey("Id")
-                        .HasName("pk_guest_photos");
-
-                    b.HasIndex("WeddingId", "UploadedAt")
-                        .IsDescending(false, true)
-                        .HasDatabaseName("idx_guest_photos_wedding_uploaded");
-
-                    b.HasIndex("WeddingId", "Status", "UploadedAt")
-                        .IsDescending(false, false, true)
-                        .HasDatabaseName("idx_guest_photos_wedding_status_uploaded");
-
-                    b.ToTable("guest_photos", "wedding");
-                });
-
             modelBuilder.Entity("Eternelle.Modules.Weddings.Domain.Reminders.Reminder", b =>
                 {
                     b.Property<Guid>("Id")
@@ -567,10 +505,6 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .HasColumnType("timestamp with time zone")
                         .HasColumnName("created_at");
 
-                    b.Property<int?>("GuestPhotoUploadLimit")
-                        .HasColumnType("integer")
-                        .HasColumnName("guest_photo_upload_limit");
-
                     b.Property<string>("Hashtag")
                         .HasColumnType("text")
                         .HasColumnName("hashtag");
@@ -861,7 +795,7 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                                 .HasConstraintName("fk_partners_profiles_wedding_id");
                         });
 
-                    b.OwnsOne("Eternelle.Modules.Weddings.Domain.Weddings.SnapShareConfig", "SnapShare", b1 =>
+                    b.OwnsOne("Eternelle.Modules.Weddings.Domain.Weddings.SocialShareConfig", "SocialShare", b1 =>
                         {
                             b1.Property<Guid>("Id")
                                 .HasColumnType("uuid")
@@ -881,48 +815,27 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                                 .HasColumnType("character varying(30)")
                                 .HasColumnName("instagram_handle");
 
-                            b1.Property<int>("ModerationMode")
-                                .ValueGeneratedOnAdd()
-                                .HasColumnType("integer")
-                                .HasDefaultValue(0)
-                                .HasColumnName("moderation_mode");
-
-                            b1.Property<Guid?>("UploadToken")
-                                .HasColumnType("uuid")
-                                .HasColumnName("upload_token");
-
-                            b1.Property<bool>("UploaderNameRequired")
-                                .ValueGeneratedOnAdd()
-                                .HasColumnType("boolean")
-                                .HasDefaultValue(false)
-                                .HasColumnName("uploader_name_required");
-
                             b1.Property<Guid>("WeddingId")
                                 .HasColumnType("uuid")
                                 .HasColumnName("wedding_id");
 
                             b1.HasKey("Id")
-                                .HasName("pk_snap_share_configs");
-
-                            b1.HasIndex("UploadToken")
-                                .IsUnique()
-                                .HasDatabaseName("ix_snap_share_configs_upload_token")
-                                .HasFilter("upload_token IS NOT NULL");
+                                .HasName("pk_social_share_configs");
 
                             b1.HasIndex("WeddingId")
                                 .IsUnique()
-                                .HasDatabaseName("ix_snap_share_configs_wedding_id");
+                                .HasDatabaseName("ix_social_share_configs_wedding_id");
 
-                            b1.ToTable("snap_share_configs", "wedding");
+                            b1.ToTable("social_share_configs", "wedding");
 
                             b1.WithOwner()
                                 .HasForeignKey("WeddingId")
-                                .HasConstraintName("fk_snap_share_configs_profiles_id");
+                                .HasConstraintName("fk_social_share_configs_profiles_id");
                         });
 
                     b.Navigation("Partners");
 
-                    b.Navigation("SnapShare");
+                    b.Navigation("SocialShare");
                 });
 #pragma warning restore 612, 618
         }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SocialShareConfigConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SocialShareConfigConfiguration.cs
index 4a92f50..ae15a4e 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SocialShareConfigConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/SocialShareConfigConfiguration.cs
@@ -8,7 +8,7 @@ internal static class SocialShareConfigConfiguration
 {
     public static void Configure(OwnedNavigationBuilder<Wedding, SocialShareConfig> socialShare)
     {
-        socialShare.ToTable("snap_share_configs");
+        socialShare.ToTable("social_share_configs");
 
         socialShare.HasKey(s => s.Id);
 
@@ -38,6 +38,6 @@ public static void Configure(OwnedNavigationBuilder<Wedding, SocialShareConfig>
 
         socialShare.HasIndex(s => s.WeddingId)
             .IsUnique()
-            .HasDatabaseName("ix_snap_share_configs_wedding_id");
+            .HasDatabaseName("ix_social_share_configs_wedding_id");
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
index a31f048..92f0265 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingConfiguration.cs
@@ -82,7 +82,7 @@ public void Configure(EntityTypeBuilder<Wedding> builder)
             .UsePropertyAccessMode(PropertyAccessMode.Field);
 
         // ─── SocialShare ─────────────────────────────────────────────────────────
-        // Optional 1:1 owned entity in its own table (wedding.snap_share_configs).
+        // Optional 1:1 owned entity in its own table (wedding.social_share_configs).
         // Null until ConfigureSocialShare() is called for the first time.
 
         builder.OwnsOne(w => w.SocialShare, SocialShareConfigConfiguration.Configure);

From 8a1b3469fbcd8045b7824f1d1280fa8f953a4ba7 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 12:55:13 +0800
Subject: [PATCH 120/155] Eternelle-194 Scaffold Album module five projects

---
 Eternelle.slnx                                    |  7 +++++++
 .../AssemblyReference.cs                          |  8 ++++++++
 .../Eternelle.Modules.Album.Application.csproj    |  7 +++++++
 .../AssemblyInfo.cs                               |  3 +++
 .../Eternelle.Modules.Album.Domain.csproj         |  5 +++++
 .../Eternelle.Modules.Album.Infrastructure.csproj | 15 +++++++++++++++
 ...ernelle.Modules.Album.IntegrationEvents.csproj |  5 +++++
 .../AssemblyReference.cs                          |  8 ++++++++
 .../Eternelle.Modules.Album.Presentation.csproj   |  9 +++++++++
 9 files changed, 67 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/AssemblyReference.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Eternelle.Modules.Album.Application.csproj
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/AssemblyInfo.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Eternelle.Modules.Album.Domain.csproj
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Eternelle.Modules.Album.IntegrationEvents.csproj
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/AssemblyReference.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Eternelle.Modules.Album.Presentation.csproj

diff --git a/Eternelle.slnx b/Eternelle.slnx
index 838fa31..c4efb9b 100644
--- a/Eternelle.slnx
+++ b/Eternelle.slnx
@@ -43,6 +43,13 @@
     <Project Path="src/Common/Eternelle.Common.Presentation/Eternelle.Common.Presentation.csproj" Id="54cfc49d-e0bb-44a0-84ac-ee35515c1b5e" />
   </Folder>
   <Folder Name="/src/Modules/" />
+  <Folder Name="/src/Modules/Album/">
+    <Project Path="src/Modules/Album/Eternelle.Modules.Album.Application/Eternelle.Modules.Album.Application.csproj" />
+    <Project Path="src/Modules/Album/Eternelle.Modules.Album.Domain/Eternelle.Modules.Album.Domain.csproj" />
+    <Project Path="src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj" />
+    <Project Path="src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Eternelle.Modules.Album.IntegrationEvents.csproj" />
+    <Project Path="src/Modules/Album/Eternelle.Modules.Album.Presentation/Eternelle.Modules.Album.Presentation.csproj" />
+  </Folder>
   <Folder Name="/src/Modules/Catalog/">
     <Project Path="src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Eternelle.Modules.Catalog.Application.csproj" />
     <Project Path="src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Eternelle.Modules.Catalog.Domain.csproj" />
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/AssemblyReference.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/AssemblyReference.cs
new file mode 100644
index 0000000..60bd030
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/AssemblyReference.cs
@@ -0,0 +1,8 @@
+using System.Reflection;
+
+namespace Eternelle.Modules.Album.Application;
+
+public static class AssemblyReference
+{
+    public static readonly Assembly Assembly = typeof(AssemblyReference).Assembly;
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Eternelle.Modules.Album.Application.csproj b/src/Modules/Album/Eternelle.Modules.Album.Application/Eternelle.Modules.Album.Application.csproj
new file mode 100644
index 0000000..6d27c14
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Eternelle.Modules.Album.Application.csproj
@@ -0,0 +1,7 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Album.Domain\Eternelle.Modules.Album.Domain.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Album.IntegrationEvents\Eternelle.Modules.Album.IntegrationEvents.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Application\Eternelle.Common.Application.csproj" />
+  </ItemGroup>
+</Project>
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/AssemblyInfo.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/AssemblyInfo.cs
new file mode 100644
index 0000000..0bf67fe
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/AssemblyInfo.cs
@@ -0,0 +1,3 @@
+using System.Runtime.CompilerServices;
+
+[assembly: InternalsVisibleTo("Eternelle.Modules.Album.Infrastructure")]
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Eternelle.Modules.Album.Domain.csproj b/src/Modules/Album/Eternelle.Modules.Album.Domain/Eternelle.Modules.Album.Domain.csproj
new file mode 100644
index 0000000..081262f
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Eternelle.Modules.Album.Domain.csproj
@@ -0,0 +1,5 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Domain\Eternelle.Common.Domain.csproj" />
+  </ItemGroup>
+</Project>
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj
new file mode 100644
index 0000000..f059795
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj
@@ -0,0 +1,15 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Album.Application\Eternelle.Modules.Album.Application.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Infrastructure\Eternelle.Common.Infrastructure.csproj" />
+    <ProjectReference Include="..\..\Weddings\Eternelle.Modules.Weddings.IntegrationEvents\Eternelle.Modules.Weddings.IntegrationEvents.csproj" />
+    <ProjectReference Include="..\..\Tenancy\Eternelle.Modules.Tenancy.IntegrationEvents\Eternelle.Modules.Tenancy.IntegrationEvents.csproj" />
+    <ProjectReference Include="..\..\Rsvp\Eternelle.Modules.Rsvp.IntegrationEvents\Eternelle.Modules.Rsvp.IntegrationEvents.csproj" />
+  </ItemGroup>
+  <ItemGroup>
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+  </ItemGroup>
+</Project>
diff --git a/src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Eternelle.Modules.Album.IntegrationEvents.csproj b/src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Eternelle.Modules.Album.IntegrationEvents.csproj
new file mode 100644
index 0000000..7075f4d
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Eternelle.Modules.Album.IntegrationEvents.csproj
@@ -0,0 +1,5 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Application\Eternelle.Common.Application.csproj" />
+  </ItemGroup>
+</Project>
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/AssemblyReference.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/AssemblyReference.cs
new file mode 100644
index 0000000..aa7e0d3
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/AssemblyReference.cs
@@ -0,0 +1,8 @@
+using System.Reflection;
+
+namespace Eternelle.Modules.Album.Presentation;
+
+public static class AssemblyReference
+{
+    public static readonly Assembly Assembly = typeof(AssemblyReference).Assembly;
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Eternelle.Modules.Album.Presentation.csproj b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Eternelle.Modules.Album.Presentation.csproj
new file mode 100644
index 0000000..dc39011
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Eternelle.Modules.Album.Presentation.csproj
@@ -0,0 +1,9 @@
+<Project Sdk="Microsoft.NET.Sdk">
+  <ItemGroup>
+    <ProjectReference Include="..\Eternelle.Modules.Album.Application\Eternelle.Modules.Album.Application.csproj" />
+    <ProjectReference Include="..\..\..\Common\Eternelle.Common.Presentation\Eternelle.Common.Presentation.csproj" />
+    <ProjectReference Include="..\..\Weddings\Eternelle.Modules.Weddings.IntegrationEvents\Eternelle.Modules.Weddings.IntegrationEvents.csproj" />
+    <ProjectReference Include="..\..\Tenancy\Eternelle.Modules.Tenancy.IntegrationEvents\Eternelle.Modules.Tenancy.IntegrationEvents.csproj" />
+    <ProjectReference Include="..\..\Rsvp\Eternelle.Modules.Rsvp.IntegrationEvents\Eternelle.Modules.Rsvp.IntegrationEvents.csproj" />
+  </ItemGroup>
+</Project>

From d9ed2e3d9dd7081e306ca4f3014418d28ffaa705 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 12:59:00 +0800
Subject: [PATCH 121/155] Eternelle-194 Add Album schema constant and shared
 value objects

---
 .../Eternelle.Modules.Album.Domain/Schemas.cs |  6 +++
 .../Shared/ImageUrl.cs                        | 41 +++++++++++++++++++
 .../Shared/ImageUrlErrors.cs                  | 19 +++++++++
 .../Shared/LookupCode.cs                      | 39 ++++++++++++++++++
 .../Shared/LookupCodeErrors.cs                | 13 ++++++
 5 files changed, 118 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Schemas.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/ImageUrl.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/ImageUrlErrors.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCode.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCodeErrors.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Schemas.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Schemas.cs
new file mode 100644
index 0000000..a49ba73
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Schemas.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Album.Domain;
+
+public static class Schemas
+{
+    public const string Album = "album";
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/ImageUrl.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/ImageUrl.cs
new file mode 100644
index 0000000..8464e1b
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/ImageUrl.cs
@@ -0,0 +1,41 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Album.Domain.Shared;
+
+public sealed record ImageUrl
+{
+    public const int MaxLength = 2048;
+
+    private ImageUrl(string value)
+    {
+        Value = value;
+    }
+
+    public string Value { get; }
+
+    public static Result<ImageUrl> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<ImageUrl>(ImageUrlErrors.Empty);
+        }
+
+        string trimmed = raw.Trim();
+
+        if (trimmed.Length > MaxLength)
+        {
+            return Result.Failure<ImageUrl>(ImageUrlErrors.TooLong);
+        }
+
+        if (!Uri.TryCreate(trimmed, UriKind.RelativeOrAbsolute, out _))
+        {
+            return Result.Failure<ImageUrl>(ImageUrlErrors.InvalidFormat);
+        }
+
+        return Result.Success(new ImageUrl(trimmed));
+    }
+
+    public override string ToString() => Value;
+
+    internal static ImageUrl FromPersistence(string value) => new(value);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/ImageUrlErrors.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/ImageUrlErrors.cs
new file mode 100644
index 0000000..932f61a
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/ImageUrlErrors.cs
@@ -0,0 +1,19 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Album.Domain.Shared;
+
+internal static class ImageUrlErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("ImageUrl.Empty", "Image URL must not be empty");
+
+    public static readonly Error TooLong =
+        Error.Problem(
+            "ImageUrl.TooLong",
+            $"Image URL must not exceed {ImageUrl.MaxLength} characters");
+
+    public static readonly Error InvalidFormat =
+        Error.Problem(
+            "ImageUrl.InvalidFormat",
+            "Image URL must be a valid URI");
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCode.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCode.cs
new file mode 100644
index 0000000..c183714
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCode.cs
@@ -0,0 +1,39 @@
+using System.Text.RegularExpressions;
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Album.Domain.Shared;
+
+public sealed partial record LookupCode
+{
+    public const int MaxLength = 8;
+
+    /// <summary>Unambiguous alphabet — no 0/O/1/I/L. 32 chars → 40 bits at length 8.</summary>
+    public const string Alphabet = "23456789ABCDEFGHJKMNPQRSTUVWXYZ";
+
+    private LookupCode(string value) { Value = value; }
+    public string Value { get; }
+
+    /// <summary>Validates and normalizes (uppercases, strips dashes/whitespace).</summary>
+    public static Result<LookupCode> Create(string? raw)
+    {
+        if (string.IsNullOrWhiteSpace(raw))
+        {
+            return Result.Failure<LookupCode>(LookupCodeErrors.Empty);
+        }
+
+        string normalized = raw.Replace("-", string.Empty).Trim().ToUpperInvariant();
+        if (normalized.Length != MaxLength || !LookupCodeRegex().IsMatch(normalized))
+        {
+            return Result.Failure<LookupCode>(LookupCodeErrors.InvalidFormat);
+        }
+
+        return Result.Success(new LookupCode(normalized));
+    }
+
+    public override string ToString() => Value;
+
+    internal static LookupCode FromPersistence(string value) => new(value);
+
+    [GeneratedRegex("^[2-9A-HJ-NP-Z]{8}$")]
+    private static partial Regex LookupCodeRegex();
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCodeErrors.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCodeErrors.cs
new file mode 100644
index 0000000..30e26e5
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCodeErrors.cs
@@ -0,0 +1,13 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Album.Domain.Shared;
+
+public static class LookupCodeErrors
+{
+    public static readonly Error Empty =
+        Error.Problem("Album.LookupCode.Empty", "Lookup code is required.");
+
+    public static readonly Error InvalidFormat =
+        Error.Problem("Album.LookupCode.InvalidFormat",
+            "Lookup code must be 8 characters from the unambiguous alphabet.");
+}

From 28e631fa616b0b5deb93b47c8ee076c81d2ff7a8 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 12:59:26 +0800
Subject: [PATCH 122/155] Eternelle-194 Add Album enums and photo id

---
 .../Eternelle.Modules.Album.Domain/Photos/AlbumPhotoId.cs  | 7 +++++++
 .../Eternelle.Modules.Album.Domain/Photos/PhotoSource.cs   | 3 +++
 .../Eternelle.Modules.Album.Domain/Photos/PhotoStatus.cs   | 3 +++
 .../Settings/ModerationMode.cs                             | 3 +++
 4 files changed, 16 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoId.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/PhotoSource.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/PhotoStatus.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/ModerationMode.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoId.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoId.cs
new file mode 100644
index 0000000..3cb431b
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoId.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Album.Domain.Photos;
+
+public readonly record struct AlbumPhotoId(Guid Value)
+{
+    public static AlbumPhotoId New() => new(Guid.CreateVersion7());
+    public static AlbumPhotoId Empty => new(Guid.Empty);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/PhotoSource.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/PhotoSource.cs
new file mode 100644
index 0000000..0cf7e46
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/PhotoSource.cs
@@ -0,0 +1,3 @@
+namespace Eternelle.Modules.Album.Domain.Photos;
+
+public enum PhotoSource { GuestSelf = 0, Host = 1 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/PhotoStatus.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/PhotoStatus.cs
new file mode 100644
index 0000000..532b364
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/PhotoStatus.cs
@@ -0,0 +1,3 @@
+namespace Eternelle.Modules.Album.Domain.Photos;
+
+public enum PhotoStatus { Pending = 0, Approved = 1, Rejected = 2, OverLimit = 3 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/ModerationMode.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/ModerationMode.cs
new file mode 100644
index 0000000..1f5f3d1
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/ModerationMode.cs
@@ -0,0 +1,3 @@
+namespace Eternelle.Modules.Album.Domain.Settings;
+
+public enum ModerationMode { Auto = 0, Manual = 1 }

From 7ca1870e18620ec6a5bbbab512047031c3e78552 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:00:41 +0800
Subject: [PATCH 123/155] Eternelle-194 Add AlbumSettings aggregate

---
 .../Settings/AlbumSettings.cs                 | 46 +++++++++++++++++++
 .../Settings/IAlbumSettingsRepository.cs      |  7 +++
 2 files changed, 53 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/AlbumSettings.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/AlbumSettings.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/AlbumSettings.cs
new file mode 100644
index 0000000..be3fa90
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/AlbumSettings.cs
@@ -0,0 +1,46 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Album.Domain.Settings;
+
+public sealed class AlbumSettings : Entity
+{
+    private AlbumSettings() { }
+
+    public Guid WeddingId { get; private set; }
+    public ModerationMode ModerationMode { get; private set; }
+    public bool IsEnabled { get; private set; }
+    public bool IsClosed { get; private set; }
+    public int? UploadLimit { get; private set; }
+    public DateTime CreatedAtUtc { get; private set; }
+    public DateTime UpdatedAtUtc { get; private set; }
+
+    public static AlbumSettings SeedFor(Guid weddingId, DateTime utcNow) => new()
+    {
+        WeddingId = weddingId,
+        ModerationMode = ModerationMode.Auto,
+        IsEnabled = true,
+        IsClosed = false,
+        UploadLimit = null,
+        CreatedAtUtc = utcNow,
+        UpdatedAtUtc = utcNow
+    };
+
+    public void Update(ModerationMode moderationMode, bool isEnabled, DateTime utcNow)
+    {
+        ModerationMode = moderationMode;
+        IsEnabled = isEnabled;
+        UpdatedAtUtc = utcNow;
+    }
+
+    public void SetUploadLimit(int? uploadLimit, DateTime utcNow)
+    {
+        UploadLimit = uploadLimit;
+        UpdatedAtUtc = utcNow;
+    }
+
+    public void Close(DateTime utcNow)
+    {
+        IsClosed = true;
+        UpdatedAtUtc = utcNow;
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs
new file mode 100644
index 0000000..7ea0ae2
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs
@@ -0,0 +1,7 @@
+namespace Eternelle.Modules.Album.Domain.Settings;
+
+public interface IAlbumSettingsRepository
+{
+    Task<AlbumSettings?> GetByWeddingIdAsync(Guid weddingId, CancellationToken cancellationToken);
+    void Insert(AlbumSettings settings);
+}

From 904ebe1b2eaf2295155909f409eb740d277dac21 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:01:31 +0800
Subject: [PATCH 124/155] Eternelle-194 Add Album invitee mirror

---
 .../Invitees/IInviteeRepository.cs            |  9 ++++++
 .../Invitees/Invitee.cs                       | 31 +++++++++++++++++++
 2 files changed, 40 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Invitees/IInviteeRepository.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Invitees/Invitee.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Invitees/IInviteeRepository.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Invitees/IInviteeRepository.cs
new file mode 100644
index 0000000..eca128e
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Invitees/IInviteeRepository.cs
@@ -0,0 +1,9 @@
+namespace Eternelle.Modules.Album.Domain.Invitees;
+
+public interface IInviteeRepository
+{
+    Task<Invitee?> GetByLookupCodeAsync(string normalizedCode, CancellationToken cancellationToken);
+    Task<Invitee?> GetByGuestIdAsync(Guid guestId, CancellationToken cancellationToken);
+    void Insert(Invitee invitee);
+    void Remove(Invitee invitee);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Invitees/Invitee.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Invitees/Invitee.cs
new file mode 100644
index 0000000..e5de524
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Invitees/Invitee.cs
@@ -0,0 +1,31 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Modules.Album.Domain.Shared;
+
+namespace Eternelle.Modules.Album.Domain.Invitees;
+
+public sealed class Invitee : Entity
+{
+    private Invitee() { }
+
+    public Guid GuestId { get; private set; }
+    public Guid WeddingId { get; private set; }
+    public PersonFirstName FirstName { get; private set; } = null!;
+    public PersonLastName LastName { get; private set; } = null!;
+    public LookupCode LookupCode { get; private set; } = null!;
+    public DateTime CreatedAtUtc { get; private set; }
+    public DateTime UpdatedAtUtc { get; private set; }
+
+    public static Invitee Create(Guid guestId, Guid weddingId, PersonFirstName firstName,
+        PersonLastName lastName, LookupCode lookupCode, DateTime utcNow) => new()
+    {
+        GuestId = guestId, WeddingId = weddingId, FirstName = firstName, LastName = lastName,
+        LookupCode = lookupCode, CreatedAtUtc = utcNow, UpdatedAtUtc = utcNow
+    };
+
+    public void ChangeLookupCode(LookupCode lookupCode, DateTime utcNow)
+    {
+        LookupCode = lookupCode;
+        UpdatedAtUtc = utcNow;
+    }
+}

From 2ea1b55a211fda0486e2fd5744ec2641411bcfee Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:02:36 +0800
Subject: [PATCH 125/155] Eternelle-194 Add AlbumPhoto aggregate, events,
 errors and repository interface

---
 .../Photos/AlbumPhoto.cs                      | 79 +++++++++++++++++++
 .../Photos/AlbumPhotoApprovedDomainEvent.cs   | 10 +++
 .../Photos/AlbumPhotoErrors.cs                | 21 +++++
 .../Photos/AlbumPhotoRejectedDomainEvent.cs   | 10 +++
 .../Photos/AlbumPhotoUploadedDomainEvent.cs   | 13 +++
 .../Photos/IAlbumPhotoRepository.cs           | 11 +++
 6 files changed, 144 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhoto.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoApprovedDomainEvent.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoErrors.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoRejectedDomainEvent.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoUploadedDomainEvent.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/IAlbumPhotoRepository.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhoto.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhoto.cs
new file mode 100644
index 0000000..10d3aca
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhoto.cs
@@ -0,0 +1,79 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Modules.Album.Domain.Shared;
+
+namespace Eternelle.Modules.Album.Domain.Photos;
+
+public sealed class AlbumPhoto : Entity
+{
+    private AlbumPhoto() { }
+
+    public AlbumPhotoId Id { get; private set; }
+    public Guid WeddingId { get; private set; }
+    public PhotoSource Source { get; private set; }
+    public Guid? GuestId { get; private set; }
+    public Guid? UploaderUserId { get; private set; }
+    public PersonName? UploaderName { get; private set; }
+    public ImageUrl SrcUrl { get; private set; } = null!;
+    public ImageUrl? ThumbnailUrl { get; private set; }
+    public int? WidthPx { get; private set; }
+    public int? HeightPx { get; private set; }
+    public PhotoStatus Status { get; private set; }
+    public DateTime UploadedAt { get; private set; }
+    public DateTime? ReviewedAt { get; private set; }
+
+    public static AlbumPhoto Create(
+        Guid weddingId, PhotoSource source, Guid? guestId, Guid? uploaderUserId,
+        PersonName? uploaderName, ImageUrl srcUrl, ImageUrl? thumbnailUrl,
+        int? widthPx, int? heightPx, PhotoStatus initialStatus, DateTime utcNow)
+    {
+        var photo = new AlbumPhoto
+        {
+            Id = AlbumPhotoId.New(),
+            WeddingId = weddingId,
+            Source = source,
+            GuestId = guestId,
+            UploaderUserId = uploaderUserId,
+            UploaderName = uploaderName,
+            SrcUrl = srcUrl,
+            ThumbnailUrl = thumbnailUrl,
+            WidthPx = widthPx,
+            HeightPx = heightPx,
+            Status = initialStatus,
+            UploadedAt = utcNow,
+            ReviewedAt = null
+        };
+        photo.Raise(new AlbumPhotoUploadedDomainEvent(photo.Id, weddingId, source, initialStatus, utcNow));
+        if (initialStatus == PhotoStatus.Approved)
+        {
+            photo.Raise(new AlbumPhotoApprovedDomainEvent(photo.Id, weddingId, utcNow));
+        }
+        return photo;
+    }
+
+    public Result Approve(DateTime utcNow)
+    {
+        if (Status != PhotoStatus.Pending)
+        {
+            return Result.Failure(AlbumPhotoErrors.AlreadyReviewed);
+        }
+        Status = PhotoStatus.Approved;
+        ReviewedAt = utcNow;
+        Raise(new AlbumPhotoApprovedDomainEvent(Id, WeddingId, utcNow));
+        return Result.Success();
+    }
+
+    public Result Reject(DateTime utcNow)
+    {
+        if (Status != PhotoStatus.Pending)
+        {
+            return Result.Failure(AlbumPhotoErrors.AlreadyReviewed);
+        }
+        Status = PhotoStatus.Rejected;
+        ReviewedAt = utcNow;
+        Raise(new AlbumPhotoRejectedDomainEvent(Id, WeddingId, utcNow));
+        return Result.Success();
+    }
+
+    public void MarkOverLimit() => Status = PhotoStatus.OverLimit;
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoApprovedDomainEvent.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoApprovedDomainEvent.cs
new file mode 100644
index 0000000..de732f4
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoApprovedDomainEvent.cs
@@ -0,0 +1,10 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Album.Domain.Photos;
+
+public sealed class AlbumPhotoApprovedDomainEvent(AlbumPhotoId photoId, Guid weddingId, DateTime approvedAt) : DomainEvent
+{
+    public AlbumPhotoId PhotoId { get; init; } = photoId;
+    public Guid WeddingId { get; init; } = weddingId;
+    public DateTime ApprovedAt { get; init; } = approvedAt;
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoErrors.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoErrors.cs
new file mode 100644
index 0000000..d0ce167
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoErrors.cs
@@ -0,0 +1,21 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Album.Domain.Photos;
+
+public static class AlbumPhotoErrors
+{
+    public static Error NotFound(AlbumPhotoId id) =>
+        Error.NotFound("Album.Photos.NotFound", $"Photo '{id.Value}' was not found.");
+
+    public static readonly Error AlreadyReviewed =
+        Error.Problem("Album.Photos.AlreadyReviewed", "This photo has already been reviewed.");
+
+    public static readonly Error PlanLimitReached =
+        Error.Problem("Album.Photos.PlanLimitReached", "The album's photo limit has been reached.");
+
+    public static readonly Error InvalidUploadSlot =
+        Error.Problem("Album.Photos.InvalidUploadSlot", "One or more upload slots are invalid or expired.");
+
+    public static readonly Error AlbumDisabled =
+        Error.Problem("Album.Photos.Disabled", "The album is not accepting uploads.");
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoRejectedDomainEvent.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoRejectedDomainEvent.cs
new file mode 100644
index 0000000..d8a7fa2
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoRejectedDomainEvent.cs
@@ -0,0 +1,10 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Album.Domain.Photos;
+
+public sealed class AlbumPhotoRejectedDomainEvent(AlbumPhotoId photoId, Guid weddingId, DateTime rejectedAt) : DomainEvent
+{
+    public AlbumPhotoId PhotoId { get; init; } = photoId;
+    public Guid WeddingId { get; init; } = weddingId;
+    public DateTime RejectedAt { get; init; } = rejectedAt;
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoUploadedDomainEvent.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoUploadedDomainEvent.cs
new file mode 100644
index 0000000..9a3a3c5
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhotoUploadedDomainEvent.cs
@@ -0,0 +1,13 @@
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Album.Domain.Photos;
+
+public sealed class AlbumPhotoUploadedDomainEvent(
+    AlbumPhotoId photoId, Guid weddingId, PhotoSource source, PhotoStatus status, DateTime uploadedAt) : DomainEvent
+{
+    public AlbumPhotoId PhotoId { get; init; } = photoId;
+    public Guid WeddingId { get; init; } = weddingId;
+    public PhotoSource Source { get; init; } = source;
+    public PhotoStatus Status { get; init; } = status;
+    public DateTime UploadedAt { get; init; } = uploadedAt;
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/IAlbumPhotoRepository.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/IAlbumPhotoRepository.cs
new file mode 100644
index 0000000..44a4837
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/IAlbumPhotoRepository.cs
@@ -0,0 +1,11 @@
+namespace Eternelle.Modules.Album.Domain.Photos;
+
+public interface IAlbumPhotoRepository
+{
+    Task<AlbumPhoto?> GetByIdAsync(AlbumPhotoId id, CancellationToken cancellationToken);
+    Task<int> CountActiveByWeddingIdAsync(Guid weddingId, CancellationToken cancellationToken);
+    void InsertMany(IEnumerable<AlbumPhoto> photos);
+    Task InsertManyAndEnforceAsync(IReadOnlyList<AlbumPhoto> photos, Guid weddingId, int limit, CancellationToken cancellationToken);
+    void Remove(AlbumPhoto photo);
+    Task NullifyGuestIdAsync(Guid guestId, CancellationToken cancellationToken);
+}

From 40264ab882ef99aca654e5392e0a321ba5ae1bba Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:09:50 +0800
Subject: [PATCH 126/155] Eternelle-194 Move photo storage and slot store into
 Album

Recover IPhotoStorageService, IUploadSlotStore, PresignedUploadSlot, and
PhotoStorageOptions from the Weddings deletion commit and place them in the
Album Application abstractions. Port S3PhotoStorageService, StubPhotoStorageService,
RedisUploadSlotStore, and StubUploadSlotStore to Album Infrastructure with updated
namespaces. Add AWSSDK.S3 package reference to Album Infrastructure csproj.
SectionName changed from Weddings:PhotoStorage to Album:PhotoStorage.
---
 .../Storage/IPhotoStorageService.cs           |  17 ++
 .../Abstractions/Storage/IUploadSlotStore.cs  |  28 +++
 .../Storage/PhotoStorageOptions.cs            |  27 +++
 .../Storage/PresignedUploadSlot.cs            |  12 ++
 ...rnelle.Modules.Album.Infrastructure.csproj |   1 +
 .../Storage/RedisUploadSlotStore.cs           |  96 +++++++++++
 .../Storage/S3PhotoStorageService.cs          | 163 ++++++++++++++++++
 .../Storage/StubPhotoStorageService.cs        |  30 ++++
 .../Storage/StubUploadSlotStore.cs            |  62 +++++++
 9 files changed, 436 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/IPhotoStorageService.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/IUploadSlotStore.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/PhotoStorageOptions.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/PresignedUploadSlot.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/RedisUploadSlotStore.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/S3PhotoStorageService.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/StubPhotoStorageService.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/StubUploadSlotStore.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/IPhotoStorageService.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/IPhotoStorageService.cs
new file mode 100644
index 0000000..72120e4
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/IPhotoStorageService.cs
@@ -0,0 +1,17 @@
+namespace Eternelle.Modules.Album.Application.Abstractions.Storage;
+
+/// <summary>
+/// Generates presigned upload slots against the configured CDN provider.
+/// The implementation is CDN-specific (Cloudflare Images, S3, etc.) and lives in Infrastructure.
+/// </summary>
+public interface IPhotoStorageService
+{
+    /// <summary>
+    /// Generates <paramref name="count"/> presigned upload slots.
+    /// Each slot contains the presigned upload URL and the final CDN URL
+    /// (the CDN URL is deterministic at presign time for all supported providers).
+    /// </summary>
+    Task<IReadOnlyList<PresignedUploadSlot>> GeneratePresignedSlotsAsync(
+        int count,
+        CancellationToken cancellationToken);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/IUploadSlotStore.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/IUploadSlotStore.cs
new file mode 100644
index 0000000..c106b37
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/IUploadSlotStore.cs
@@ -0,0 +1,28 @@
+namespace Eternelle.Modules.Album.Application.Abstractions.Storage;
+
+/// <summary>
+/// Short-lived store that maps a server-issued slot ID to its CDN URL.
+/// Slots expire after a fixed TTL and are deleted on first redemption
+/// to prevent reuse.
+/// </summary>
+public interface IUploadSlotStore
+{
+    /// <summary>Persists a slot with a fixed TTL.</summary>
+    Task StoreAsync(Guid slotId, string cdnUrl, CancellationToken cancellationToken);
+
+    /// <summary>
+    /// Returns the CDN URL for <paramref name="slotId"/> and atomically removes it.
+    /// Returns <see langword="null"/> if the slot has expired or was already redeemed.
+    /// </summary>
+    Task<string?> RedeemAsync(Guid slotId, CancellationToken cancellationToken);
+
+    /// <summary>
+    /// Atomically validates and redeems all <paramref name="slotIds"/> in a single operation.
+    /// Returns a dictionary mapping each slot ID to its CDN URL if every slot is valid,
+    /// or <see langword="null"/> if any slot is missing or already redeemed — in which case
+    /// no slots are consumed.
+    /// </summary>
+    Task<IReadOnlyDictionary<Guid, string>?> RedeemManyAsync(
+        IReadOnlyList<Guid> slotIds,
+        CancellationToken cancellationToken);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/PhotoStorageOptions.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/PhotoStorageOptions.cs
new file mode 100644
index 0000000..14fa7de
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/PhotoStorageOptions.cs
@@ -0,0 +1,27 @@
+namespace Eternelle.Modules.Album.Application.Abstractions.Storage;
+
+public sealed class PhotoStorageOptions
+{
+    public const string SectionName = "Album:PhotoStorage";
+
+    /// <summary>
+    /// Internal endpoint used by the API to communicate with the storage service.
+    /// In Docker Compose this is the Docker-internal hostname, e.g. http://eternelle.minio:9000.
+    /// In production this is the same as <see cref="PublicUrl"/>.
+    /// </summary>
+    public string ServiceUrl { get; init; } = string.Empty;
+
+    /// <summary>
+    /// Publicly accessible base URL embedded in presigned URLs returned to the browser.
+    /// In local development this differs from <see cref="ServiceUrl"/> because the browser
+    /// cannot reach Docker-internal hostnames, e.g. http://localhost:9000.
+    /// In production set this equal to <see cref="ServiceUrl"/>.
+    /// </summary>
+    public string PublicUrl { get; init; } = string.Empty;
+
+    public string AccessKey { get; init; } = string.Empty;
+
+    public string SecretKey { get; init; } = string.Empty;
+
+    public string BucketName { get; init; } = "eternelle-photos";
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/PresignedUploadSlot.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/PresignedUploadSlot.cs
new file mode 100644
index 0000000..6b1388b
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Storage/PresignedUploadSlot.cs
@@ -0,0 +1,12 @@
+namespace Eternelle.Modules.Album.Application.Abstractions.Storage;
+
+/// <summary>
+/// A server-generated upload slot returned to the client before a CDN upload.
+/// The client uploads the file to <see cref="PresignedUrl"/> and then redeems
+/// <see cref="SlotId"/> in the register call. <see cref="CdnUrl"/> is known at
+/// presign time because the server controls the destination key/path.
+/// </summary>
+public sealed record PresignedUploadSlot(
+    Guid SlotId,
+    string PresignedUrl,
+    string CdnUrl);
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj
index f059795..cfccad6 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj
@@ -7,6 +7,7 @@
     <ProjectReference Include="..\..\Rsvp\Eternelle.Modules.Rsvp.IntegrationEvents\Eternelle.Modules.Rsvp.IntegrationEvents.csproj" />
   </ItemGroup>
   <ItemGroup>
+    <PackageReference Include="AWSSDK.S3" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.Design">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/RedisUploadSlotStore.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/RedisUploadSlotStore.cs
new file mode 100644
index 0000000..f81978b
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/RedisUploadSlotStore.cs
@@ -0,0 +1,96 @@
+using Eternelle.Modules.Album.Application.Abstractions.Storage;
+using StackExchange.Redis;
+
+namespace Eternelle.Modules.Album.Infrastructure.Storage;
+
+/// <summary>
+/// Redis-backed implementation of <see cref="IUploadSlotStore"/>.
+/// Slots expire after <see cref="SlotTtl"/> and are atomically fetched-and-deleted
+/// on redemption using the Redis GETDEL command, preventing double-redemption races.
+/// </summary>
+internal sealed class RedisUploadSlotStore(IConnectionMultiplexer redis) : IUploadSlotStore
+{
+    private static readonly TimeSpan SlotTtl = TimeSpan.FromMinutes(15);
+
+    // Lua script for atomic batch redemption.
+    // Reads all keys first — if any is missing, returns false (nil to the caller) without
+    // deleting anything. Only when all keys exist does it delete them and return the values.
+    // Redis executes Lua scripts atomically, so no slot can be partially redeemed.
+    private const string RedeemManyScript = """
+        local values = {}
+        for i = 1, #KEYS do
+            local v = redis.call('GET', KEYS[i])
+            if not v then
+                return false
+            end
+            values[i] = v
+        end
+        for i = 1, #KEYS do
+            redis.call('DEL', KEYS[i])
+        end
+        return values
+        """;
+
+    private IDatabase Db => redis.GetDatabase();
+
+    private static RedisKey Key(Guid slotId) => $"upload-slot:{slotId}";
+
+    public Task StoreAsync(Guid slotId, string cdnUrl, CancellationToken cancellationToken)
+    {
+        return Db.StringSetAsync(Key(slotId), cdnUrl, SlotTtl);
+    }
+
+    public async Task<string?> RedeemAsync(Guid slotId, CancellationToken cancellationToken)
+    {
+        // GETDEL atomically returns the value and removes the key in a single round-trip.
+        // This eliminates the race window that existed between the previous GetStringAsync
+        // and RemoveAsync calls, preventing a slot from being redeemed more than once.
+        RedisValue value = await Db.StringGetDeleteAsync(Key(slotId));
+
+        return value.HasValue ? (string?)value : null;
+    }
+
+    public async Task<IReadOnlyDictionary<Guid, string>?> RedeemManyAsync(
+        IReadOnlyList<Guid> slotIds,
+        CancellationToken cancellationToken)
+    {
+        if (slotIds.Count == 0)
+        {
+            return new Dictionary<Guid, string>(0);
+        }
+
+        // Defensive guard — duplicate IDs would cause the Lua script to DELETE a key on the
+        // second pass that was already removed, and would silently map two photos to one upload.
+        if (new HashSet<Guid>(slotIds).Count != slotIds.Count)
+        {
+            return null;
+        }
+
+        RedisKey[] keys = [.. slotIds.Select(id => Key(id))];
+
+        RedisResult result = await Db.ScriptEvaluateAsync(RedeemManyScript, keys);
+
+        // Lua returned false — at least one slot was missing; nothing was deleted.
+        if (result.IsNull)
+        {
+            return null;
+        }
+
+        var values = (RedisResult[])result!;
+
+        var dict = new Dictionary<Guid, string>(slotIds.Count);
+
+        for (int i = 0; i < slotIds.Count; i++)
+        {
+            string? cdnUrl = (string?)values[i];
+            if (cdnUrl is null)
+            {
+                return null;
+            }
+
+            dict[slotIds[i]] = cdnUrl;
+        }
+
+        return dict;
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/S3PhotoStorageService.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/S3PhotoStorageService.cs
new file mode 100644
index 0000000..0cae1c0
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/S3PhotoStorageService.cs
@@ -0,0 +1,163 @@
+using Amazon.S3;
+using Amazon.S3.Model;
+using Amazon.S3.Util;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Modules.Album.Application.Abstractions.Storage;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+
+namespace Eternelle.Modules.Album.Infrastructure.Storage;
+
+/// <summary>
+/// S3-compatible implementation of <see cref="IPhotoStorageService"/>.
+/// Works with MinIO locally and Cloudflare R2 / AWS S3 in production —
+/// all three expose the same S3 API surface.
+/// </summary>
+internal sealed class S3PhotoStorageService : IPhotoStorageService, IDisposable
+{
+    // Presigned PUT URLs expire after 15 minutes — matches the slot store TTL in RedisUploadSlotStore.
+    private static readonly TimeSpan PresignExpiry = TimeSpan.FromMinutes(15);
+
+    // Used for bucket management — talks to the internal Docker/service endpoint.
+    private readonly AmazonS3Client _s3;
+    // Used for presigning — talks to the public endpoint so the signed host matches
+    // what the browser will send. In production ServiceUrl == PublicUrl so both
+    // clients are equivalent and no URL-rewriting is needed.
+    private readonly AmazonS3Client _s3Public;
+    private readonly PhotoStorageOptions _options;
+    private readonly IDateTimeProvider _dateTimeProvider;
+    private readonly ILogger<S3PhotoStorageService> _logger;
+
+    // Guards EnsureBucketExistsAsync against concurrent initialization.
+    // S3PhotoStorageService is registered as a Singleton, so multiple requests
+    // can race on first startup. SemaphoreSlim + double-check prevents duplicate
+    // PutBucketAsync calls.
+    private readonly SemaphoreSlim _bucketLock = new(1, 1);
+    private volatile bool _bucketEnsured;
+
+    public S3PhotoStorageService(
+        IOptions<PhotoStorageOptions> options,
+        IDateTimeProvider dateTimeProvider,
+        ILogger<S3PhotoStorageService> logger)
+    {
+        _options = options.Value;
+        _dateTimeProvider = dateTimeProvider;
+        _logger = logger;
+
+        _s3 = new AmazonS3Client(
+            _options.AccessKey,
+            _options.SecretKey,
+            new AmazonS3Config
+            {
+                // ForcePathStyle is required for MinIO and Cloudflare R2.
+                // AWS S3 uses virtual-hosted style by default but also accepts path style.
+                ServiceURL = _options.ServiceUrl,
+                ForcePathStyle = true
+            });
+
+        _s3Public = new AmazonS3Client(
+            _options.AccessKey,
+            _options.SecretKey,
+            new AmazonS3Config
+            {
+                ServiceURL = _options.PublicUrl,
+                ForcePathStyle = true
+            });
+    }
+
+    public async Task<IReadOnlyList<PresignedUploadSlot>> GeneratePresignedSlotsAsync(
+        int count,
+        CancellationToken cancellationToken)
+    {
+        await EnsureBucketExistsAsync(cancellationToken);
+
+        var slots = new List<PresignedUploadSlot>(count);
+
+        for (int i = 0; i < count; i++)
+        {
+            var slotId = Guid.NewGuid();
+            string objectKey = $"photos/{slotId}";
+
+            // ContentType is intentionally omitted — including it signs the content-type into
+            // the URL, which would force the client to send the exact same value or get a
+            // SignatureDoesNotMatch error. Browsers send the actual MIME type on upload.
+            // _s3Public is configured with PublicUrl so the signed host already matches
+            // what the browser will send — no post-sign URL rewriting needed.
+            string presignedUrl = await _s3Public.GetPreSignedURLAsync(new GetPreSignedUrlRequest
+            {
+                BucketName = _options.BucketName,
+                Key = objectKey,
+                Verb = HttpVerb.PUT,
+                Expires = _dateTimeProvider.UtcNow.Add(PresignExpiry)
+            });
+
+            string cdnUrl = $"{_options.PublicUrl}/{_options.BucketName}/{objectKey}";
+
+            slots.Add(new PresignedUploadSlot(slotId, presignedUrl, cdnUrl));
+        }
+
+        return slots;
+    }
+
+    /// <summary>
+    /// Creates the bucket if it does not already exist.
+    /// Thread-safe: uses a SemaphoreSlim + double-check pattern so only one caller
+    /// performs the existence check and optional PutBucketAsync call, even under
+    /// concurrent requests at startup.
+    /// </summary>
+    private async Task EnsureBucketExistsAsync(CancellationToken cancellationToken)
+    {
+        if (_bucketEnsured)
+        {
+            return;
+        }
+
+        await _bucketLock.WaitAsync(cancellationToken);
+        try
+        {
+            if (_bucketEnsured)
+            {
+                return;
+            }
+
+            bool exists = await AmazonS3Util.DoesS3BucketExistV2Async(_s3, _options.BucketName);
+
+            if (!exists)
+            {
+                try
+                {
+                    await _s3.PutBucketAsync(new PutBucketRequest
+                    {
+                        BucketName = _options.BucketName,
+                        UseClientRegion = true
+                    }, cancellationToken);
+                }
+                catch (AmazonS3Exception ex)
+                    when (ex.ErrorCode is "BucketAlreadyOwnedByYou" or "BucketAlreadyExists")
+                {
+                    // Another process created the bucket between DoesS3BucketExistV2Async
+                    // and PutBucketAsync — the bucket exists and is usable, so treat this
+                    // as success rather than a fatal error.
+                    _logger.LogWarning(
+                        ex,
+                        "Bucket '{BucketName}' already exists (ErrorCode: {ErrorCode}). Suppressing conflict.",
+                        _options.BucketName,
+                        ex.ErrorCode);
+                }
+            }
+
+            _bucketEnsured = true;
+        }
+        finally
+        {
+            _bucketLock.Release();
+        }
+    }
+
+    public void Dispose()
+    {
+        _s3.Dispose();
+        _s3Public.Dispose();
+        _bucketLock.Dispose();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/StubPhotoStorageService.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/StubPhotoStorageService.cs
new file mode 100644
index 0000000..ffbdda6
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/StubPhotoStorageService.cs
@@ -0,0 +1,30 @@
+using Eternelle.Modules.Album.Application.Abstractions.Storage;
+
+namespace Eternelle.Modules.Album.Infrastructure.Storage;
+
+/// <summary>
+/// Stub implementation of <see cref="IPhotoStorageService"/> used until a real CDN provider
+/// (Cloudflare Images, S3, etc.) is configured.
+/// Returns synthetic presigned URLs that are not backed by any real storage.
+/// </summary>
+internal sealed class StubPhotoStorageService : IPhotoStorageService
+{
+    private const string BaseUrl = "https://stub-cdn.eternelle.ph";
+
+    public Task<IReadOnlyList<PresignedUploadSlot>> GeneratePresignedSlotsAsync(
+        int count,
+        CancellationToken cancellationToken)
+    {
+        List<PresignedUploadSlot> slots = [.. Enumerable.Range(0, count)
+            .Select(_ =>
+            {
+                var slotId = Guid.NewGuid();
+                return new PresignedUploadSlot(
+                    SlotId: slotId,
+                    PresignedUrl: $"{BaseUrl}/presign/{slotId}",
+                    CdnUrl: $"{BaseUrl}/images/{slotId}");
+            })];
+
+        return Task.FromResult<IReadOnlyList<PresignedUploadSlot>>(slots);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/StubUploadSlotStore.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/StubUploadSlotStore.cs
new file mode 100644
index 0000000..cdfa21c
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Storage/StubUploadSlotStore.cs
@@ -0,0 +1,62 @@
+using System.Collections.Concurrent;
+using Eternelle.Modules.Album.Application.Abstractions.Storage;
+
+namespace Eternelle.Modules.Album.Infrastructure.Storage;
+
+/// <summary>
+/// In-memory fallback implementation of <see cref="IUploadSlotStore"/> used when Redis is
+/// unavailable (e.g. local development without a running Redis instance).
+/// Slots are stored in a process-scoped <see cref="ConcurrentDictionary"/>; TTL is not enforced.
+/// Not suitable for production or multi-instance deployments.
+/// </summary>
+internal sealed class StubUploadSlotStore : IUploadSlotStore
+{
+    private readonly ConcurrentDictionary<Guid, string> _slots = new();
+    private readonly object _redeemLock = new();
+
+    public Task StoreAsync(Guid slotId, string cdnUrl, CancellationToken cancellationToken)
+    {
+        _slots[slotId] = cdnUrl;
+        return Task.CompletedTask;
+    }
+
+    public Task<string?> RedeemAsync(Guid slotId, CancellationToken cancellationToken)
+    {
+        lock (_redeemLock)
+        {
+            string? cdnUrl = _slots.TryRemove(slotId, out string? value) ? value : null;
+            return Task.FromResult(cdnUrl);
+        }
+    }
+
+    public Task<IReadOnlyDictionary<Guid, string>?> RedeemManyAsync(
+        IReadOnlyList<Guid> slotIds,
+        CancellationToken cancellationToken)
+    {
+        if (slotIds.Count == 0)
+        {
+            return Task.FromResult<IReadOnlyDictionary<Guid, string>?>(new Dictionary<Guid, string>(0));
+        }
+
+        lock (_redeemLock)
+        {
+            // Verify all slots exist before removing any (all-or-nothing, mirrors Redis Lua script behaviour).
+            foreach (Guid slotId in slotIds)
+            {
+                if (!_slots.ContainsKey(slotId))
+                {
+                    return Task.FromResult<IReadOnlyDictionary<Guid, string>?>(null);
+                }
+            }
+
+            var dict = new Dictionary<Guid, string>(slotIds.Count);
+            foreach (Guid slotId in slotIds)
+            {
+                _slots.TryRemove(slotId, out string? cdnUrl);
+                dict[slotId] = cdnUrl!;
+            }
+
+            return Task.FromResult<IReadOnlyDictionary<Guid, string>?>(dict);
+        }
+    }
+}

From 8c8fecf60bbf76af365e177d5adccf261512f00d Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:13:56 +0800
Subject: [PATCH 127/155] Eternelle-194 Add Album DbContext and messaging
 infrastructure

Port Outbox (ProcessOutboxJob, ConfigureProcessOutboxJob, IdempotentDomainEventHandler,
OutboxOptions) and Inbox (ProcessInboxJob, ConfigureProcessInboxJob,
IdempotentIntegrationEventHandler, IntegrationEventConsumer, InboxOptions) from RSVP
into Album with updated namespaces and schema literals (rsvp -> album, Rsvp -> Album).
Add AlbumDbContext with AlbumPhotoId value converter, three DbSet properties, and
outbox/inbox model configuration. Add IUnitOfWork to Album Application abstractions.
Add Presentation project reference to Album Infrastructure csproj for ProcessInboxJob.
---
 .../Abstractions/Data/IUnitOfWork.cs          |   6 +
 .../Database/AlbumDbContext.cs                |  36 +++++
 .../Converters/AlbumPhotoIdConverter.cs       |   7 +
 ...rnelle.Modules.Album.Infrastructure.csproj |   1 +
 .../Inbox/ConfigureProcessInboxJob.cs         |  23 +++
 .../IdempotentIntegrationEventHandler.cs      |  62 ++++++++
 .../Inbox/InboxOptions.cs                     |   8 +
 .../Inbox/IntegrationEventConsumer.cs         |  39 +++++
 .../Inbox/ProcessInboxJob.cs                  | 143 +++++++++++++++++
 .../Outbox/ConfigureProcessOutboxJob.cs       |  23 +++
 .../Outbox/IdempotentDomainEventHandler.cs    |  61 ++++++++
 .../Outbox/OutboxOptions.cs                   |   8 +
 .../Outbox/ProcessOutboxJob.cs                | 148 ++++++++++++++++++
 13 files changed, 565 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Data/IUnitOfWork.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Database/AlbumDbContext.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Database/Converters/AlbumPhotoIdConverter.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/InboxOptions.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IntegrationEventConsumer.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/ProcessInboxJob.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/OutboxOptions.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/ProcessOutboxJob.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Data/IUnitOfWork.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Data/IUnitOfWork.cs
new file mode 100644
index 0000000..924909b
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Abstractions/Data/IUnitOfWork.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Album.Application.Abstractions.Data;
+
+public interface IUnitOfWork
+{
+    Task<int> SaveChangesAsync(CancellationToken cancellationToken = default);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Database/AlbumDbContext.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Database/AlbumDbContext.cs
new file mode 100644
index 0000000..dd7832b
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Database/AlbumDbContext.cs
@@ -0,0 +1,36 @@
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain;
+using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Photos;
+using Eternelle.Modules.Album.Domain.Settings;
+using Eternelle.Modules.Album.Infrastructure.Database.Converters;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Album.Infrastructure.Database;
+
+public sealed class AlbumDbContext(DbContextOptions<AlbumDbContext> options)
+    : DbContext(options), IUnitOfWork
+{
+    internal DbSet<AlbumSettings> AlbumSettings => Set<AlbumSettings>();
+    internal DbSet<Invitee> Invitees => Set<Invitee>();
+    internal DbSet<AlbumPhoto> Photos => Set<AlbumPhoto>();
+
+    protected override void ConfigureConventions(ModelConfigurationBuilder configurationBuilder)
+    {
+        configurationBuilder.Properties<AlbumPhotoId>().HaveConversion<AlbumPhotoIdConverter>();
+    }
+
+    protected override void OnModelCreating(ModelBuilder modelBuilder)
+    {
+        modelBuilder.HasDefaultSchema(Schemas.Album);
+
+        modelBuilder.ApplyConfigurationsFromAssembly(typeof(AlbumDbContext).Assembly);
+
+        modelBuilder.ApplyConfiguration(new OutboxMessageConfiguration());
+        modelBuilder.ApplyConfiguration(new OutboxMessageConsumerConfiguration());
+        modelBuilder.ApplyConfiguration(new InboxMessageConfiguration());
+        modelBuilder.ApplyConfiguration(new InboxMessageConsumerConfiguration());
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Database/Converters/AlbumPhotoIdConverter.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Database/Converters/AlbumPhotoIdConverter.cs
new file mode 100644
index 0000000..09deb3d
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Database/Converters/AlbumPhotoIdConverter.cs
@@ -0,0 +1,7 @@
+using Eternelle.Modules.Album.Domain.Photos;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+
+namespace Eternelle.Modules.Album.Infrastructure.Database.Converters;
+
+internal sealed class AlbumPhotoIdConverter()
+    : ValueConverter<AlbumPhotoId, Guid>(id => id.Value, value => new AlbumPhotoId(value));
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj
index cfccad6..57d4736 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Eternelle.Modules.Album.Infrastructure.csproj
@@ -1,6 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
   <ItemGroup>
     <ProjectReference Include="..\Eternelle.Modules.Album.Application\Eternelle.Modules.Album.Application.csproj" />
+    <ProjectReference Include="..\Eternelle.Modules.Album.Presentation\Eternelle.Modules.Album.Presentation.csproj" />
     <ProjectReference Include="..\..\..\Common\Eternelle.Common.Infrastructure\Eternelle.Common.Infrastructure.csproj" />
     <ProjectReference Include="..\..\Weddings\Eternelle.Modules.Weddings.IntegrationEvents\Eternelle.Modules.Weddings.IntegrationEvents.csproj" />
     <ProjectReference Include="..\..\Tenancy\Eternelle.Modules.Tenancy.IntegrationEvents\Eternelle.Modules.Tenancy.IntegrationEvents.csproj" />
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/ConfigureProcessInboxJob.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
new file mode 100644
index 0000000..9b33b4a
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/ConfigureProcessInboxJob.cs
@@ -0,0 +1,23 @@
+using Microsoft.Extensions.Options;
+using Quartz;
+
+namespace Eternelle.Modules.Album.Infrastructure.Inbox;
+
+internal sealed class ConfigureProcessInboxJob(IOptions<InboxOptions> inboxOptions)
+    : IConfigureOptions<QuartzOptions>
+{
+    private readonly InboxOptions _inboxOptions = inboxOptions.Value;
+
+    public void Configure(QuartzOptions options)
+    {
+        string jobName = typeof(ProcessInboxJob).FullName!;
+
+        options
+            .AddJob<ProcessInboxJob>(configure => configure.WithIdentity(jobName))
+            .AddTrigger(configure =>
+                configure
+                    .ForJob(jobName)
+                    .WithSimpleSchedule(schedule =>
+                        schedule.WithIntervalInSeconds(_inboxOptions.IntervalInSeconds).RepeatForever()));
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
new file mode 100644
index 0000000..6ef3233
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IdempotentIntegrationEventHandler.cs
@@ -0,0 +1,62 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+
+namespace Eternelle.Modules.Album.Infrastructure.Inbox;
+
+internal sealed class IdempotentIntegrationEventHandler<TIntegrationEvent>(
+    IIntegrationEventHandler<TIntegrationEvent> decorated,
+    IDbConnectionFactory dbConnectionFactory)
+    : IntegrationEventHandler<TIntegrationEvent>
+    where TIntegrationEvent : IIntegrationEvent
+{
+    public override async Task Handle(
+        TIntegrationEvent integrationEvent,
+        CancellationToken cancellationToken = default)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
+
+        var inboxMessageConsumer = new InboxMessageConsumer(integrationEvent.Id, decorated.GetType().Name);
+
+        if (await InboxConsumerExistsAsync(connection, inboxMessageConsumer))
+        {
+            return;
+        }
+
+        await decorated.Handle(integrationEvent, cancellationToken);
+
+        await InsertInboxConsumerAsync(connection, inboxMessageConsumer);
+    }
+
+    private static async Task<bool> InboxConsumerExistsAsync(
+        DbConnection dbConnection,
+        InboxMessageConsumer inboxMessageConsumer)
+    {
+        const string sql =
+            """
+            SELECT EXISTS(
+                SELECT 1
+                FROM album.inbox_message_consumers
+                WHERE inbox_message_id = @InboxMessageId AND
+                      name = @Name
+            )
+            """;
+
+        return await dbConnection.ExecuteScalarAsync<bool>(sql, inboxMessageConsumer);
+    }
+
+    private static async Task InsertInboxConsumerAsync(
+        DbConnection dbConnection,
+        InboxMessageConsumer inboxMessageConsumer)
+    {
+        const string sql =
+            """
+            INSERT INTO album.inbox_message_consumers(inbox_message_id, name)
+            VALUES (@InboxMessageId, @Name)
+            """;
+
+        await dbConnection.ExecuteAsync(sql, inboxMessageConsumer);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/InboxOptions.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/InboxOptions.cs
new file mode 100644
index 0000000..fc877ee
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/InboxOptions.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Album.Infrastructure.Inbox;
+
+internal sealed class InboxOptions
+{
+    public int IntervalInSeconds { get; init; }
+
+    public int BatchSize { get; init; }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IntegrationEventConsumer.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IntegrationEventConsumer.cs
new file mode 100644
index 0000000..740704b
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IntegrationEventConsumer.cs
@@ -0,0 +1,39 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using MassTransit;
+using Newtonsoft.Json;
+
+namespace Eternelle.Modules.Album.Infrastructure.Inbox;
+
+internal sealed class IntegrationEventConsumer<TIntegrationEvent>(IDbConnectionFactory dbConnectionFactory)
+    : IConsumer<TIntegrationEvent>
+    where TIntegrationEvent : IntegrationEvent
+{
+    public async Task Consume(ConsumeContext<TIntegrationEvent> context)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+
+        TIntegrationEvent integrationEvent = context.Message;
+
+        var inboxMessage = new InboxMessage
+        {
+            Id = integrationEvent.Id,
+            Type = integrationEvent.GetType().Name,
+            Content = JsonConvert.SerializeObject(integrationEvent, SerializerSettings.Instance),
+            OccurredOnUtc = integrationEvent.OccurredOnUtc
+        };
+
+        const string sql =
+            """
+            INSERT INTO album.inbox_messages(id, type, content, occurred_on_utc)
+            VALUES (@Id, @Type, @Content::json, @OccurredOnUtc)
+            ON CONFLICT (id) DO NOTHING
+            """;
+
+        await connection.ExecuteAsync(sql, inboxMessage);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/ProcessInboxJob.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/ProcessInboxJob.cs
new file mode 100644
index 0000000..d92f48c
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/ProcessInboxJob.cs
@@ -0,0 +1,143 @@
+using System.Data;
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Infrastructure.Inbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Newtonsoft.Json;
+using Quartz;
+
+namespace Eternelle.Modules.Album.Infrastructure.Inbox;
+
+[DisallowConcurrentExecution]
+internal sealed partial class ProcessInboxJob(
+    IDbConnectionFactory dbConnectionFactory,
+    IServiceScopeFactory serviceScopeFactory,
+    IDateTimeProvider dateTimeProvider,
+    IOptions<InboxOptions> inboxOptions,
+    ILogger<ProcessInboxJob> logger) : IJob
+{
+    private const string ModuleName = "Album";
+
+    public async Task Execute(IJobExecutionContext context)
+    {
+        LogBeginProcessing(logger, ModuleName);
+
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbTransaction transaction = await connection.BeginTransactionAsync();
+
+        IReadOnlyList<InboxMessageResponse> inboxMessages = await GetInboxMessagesAsync(connection, transaction);
+
+        foreach (InboxMessageResponse inboxMessage in inboxMessages)
+        {
+            Exception? exception = null;
+
+            try
+            {
+                IIntegrationEvent integrationEvent = JsonConvert.DeserializeObject<IIntegrationEvent>(
+                    inboxMessage.Content,
+                    SerializerSettings.Instance)!;
+
+                using IServiceScope scope = serviceScopeFactory.CreateScope();
+
+                IEnumerable<IIntegrationEventHandler> handlers = IntegrationEventHandlersFactory.GetHandlers(
+                    integrationEvent.GetType(),
+                    scope.ServiceProvider,
+                    Presentation.AssemblyReference.Assembly);
+
+                foreach (IIntegrationEventHandler integrationEventHandler in handlers)
+                {
+                    await integrationEventHandler.Handle(integrationEvent, context.CancellationToken);
+                }
+            }
+            catch (Exception caughtException)
+            {
+                LogProcessingError(logger, caughtException, ModuleName, inboxMessage.Id);
+
+                exception = caughtException;
+            }
+
+            await UpdateInboxMessageAsync(connection, transaction, inboxMessage, exception);
+        }
+
+        await transaction.CommitAsync();
+
+        LogCompleted(logger, ModuleName);
+    }
+
+    private async Task<IReadOnlyList<InboxMessageResponse>> GetInboxMessagesAsync(
+        IDbConnection connection,
+        IDbTransaction transaction)
+    {
+        string sql =
+            $"""
+             SELECT
+                id AS {nameof(InboxMessageResponse.Id)},
+                content AS {nameof(InboxMessageResponse.Content)}
+             FROM album.inbox_messages
+             WHERE processed_on_utc IS NULL
+             ORDER BY occurred_on_utc
+             LIMIT {inboxOptions.Value.BatchSize}
+             FOR UPDATE SKIP LOCKED
+             """;
+
+        IEnumerable<InboxMessageResponse> inboxMessages = await connection.QueryAsync<InboxMessageResponse>(
+            sql,
+            transaction: transaction);
+
+        return inboxMessages.AsList();
+    }
+
+    private async Task UpdateInboxMessageAsync(
+        IDbConnection connection,
+        IDbTransaction transaction,
+        InboxMessageResponse inboxMessage,
+        Exception? exception)
+    {
+        if (exception is null)
+        {
+            const string sql =
+                """
+                UPDATE album.inbox_messages
+                SET processed_on_utc = @ProcessedOnUtc,
+                    error = NULL
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { inboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                transaction: transaction);
+        }
+        else
+        {
+            const string sql =
+                """
+                UPDATE album.inbox_messages
+                SET error = @Error
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                sql,
+                new { inboxMessage.Id, Error = exception.ToString() },
+                transaction: transaction);
+        }
+    }
+
+    internal sealed record InboxMessageResponse(Guid Id, string Content);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Beginning to process inbox messages")]
+    private static partial void LogBeginProcessing(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Completed processing inbox messages")]
+    private static partial void LogCompleted(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Error, "{module} - Exception while processing inbox message {messageId}")]
+    private static partial void LogProcessingError(ILogger logger, Exception exception, string module, Guid messageId);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
new file mode 100644
index 0000000..6801cb5
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/ConfigureProcessOutboxJob.cs
@@ -0,0 +1,23 @@
+using Microsoft.Extensions.Options;
+using Quartz;
+
+namespace Eternelle.Modules.Album.Infrastructure.Outbox;
+
+internal sealed class ConfigureProcessOutboxJob(IOptions<OutboxOptions> outboxOptions)
+    : IConfigureOptions<QuartzOptions>
+{
+    private readonly OutboxOptions _outboxOptions = outboxOptions.Value;
+
+    public void Configure(QuartzOptions options)
+    {
+        string jobName = typeof(ProcessOutboxJob).FullName!;
+
+        options
+            .AddJob<ProcessOutboxJob>(configure => configure.WithIdentity(jobName))
+            .AddTrigger(configure =>
+                configure
+                    .ForJob(jobName)
+                    .WithSimpleSchedule(schedule =>
+                        schedule.WithIntervalInSeconds(_outboxOptions.IntervalInSeconds).RepeatForever()));
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
new file mode 100644
index 0000000..f93da78
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -0,0 +1,61 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Infrastructure.Outbox;
+
+namespace Eternelle.Modules.Album.Infrastructure.Outbox;
+
+internal sealed class IdempotentDomainEventHandler<TDomainEvent>(
+    IDomainEventHandler<TDomainEvent> decorated,
+    IDbConnectionFactory dbConnectionFactory)
+    : DomainEventHandler<TDomainEvent>
+    where TDomainEvent : IDomainEvent
+{
+    public override async Task Handle(TDomainEvent domainEvent, CancellationToken cancellationToken = default)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
+
+        var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
+
+        if (await OutboxConsumerExistsAsync(connection, outboxMessageConsumer))
+        {
+            return;
+        }
+
+        await decorated.Handle(domainEvent, cancellationToken);
+
+        await InsertOutboxConsumerAsync(connection, outboxMessageConsumer);
+    }
+
+    private static async Task<bool> OutboxConsumerExistsAsync(
+        DbConnection dbConnection,
+        OutboxMessageConsumer outboxMessageConsumer)
+    {
+        const string sql =
+            """
+            SELECT EXISTS(
+                SELECT 1
+                FROM album.outbox_message_consumers
+                WHERE outbox_message_id = @OutboxMessageId AND
+                      name = @Name
+            )
+            """;
+
+        return await dbConnection.ExecuteScalarAsync<bool>(sql, outboxMessageConsumer);
+    }
+
+    private static async Task InsertOutboxConsumerAsync(
+        DbConnection dbConnection,
+        OutboxMessageConsumer outboxMessageConsumer)
+    {
+        const string sql =
+            """
+            INSERT INTO album.outbox_message_consumers(outbox_message_id, name)
+            VALUES (@OutboxMessageId, @Name)
+            """;
+
+        await dbConnection.ExecuteAsync(sql, outboxMessageConsumer);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/OutboxOptions.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/OutboxOptions.cs
new file mode 100644
index 0000000..15622d8
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/OutboxOptions.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Album.Infrastructure.Outbox;
+
+internal sealed class OutboxOptions
+{
+    public int IntervalInSeconds { get; init; }
+
+    public int BatchSize { get; init; }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/ProcessOutboxJob.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/ProcessOutboxJob.cs
new file mode 100644
index 0000000..368a43f
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/ProcessOutboxJob.cs
@@ -0,0 +1,148 @@
+using System.Data;
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Common.Infrastructure.Serialization;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using Newtonsoft.Json;
+using Quartz;
+
+namespace Eternelle.Modules.Album.Infrastructure.Outbox;
+
+[DisallowConcurrentExecution]
+internal sealed partial class ProcessOutboxJob(
+    IDbConnectionFactory dbConnectionFactory,
+    IServiceScopeFactory serviceScopeFactory,
+    IDateTimeProvider dateTimeProvider,
+    IOptions<OutboxOptions> outboxOptions,
+    ILogger<ProcessOutboxJob> logger) : IJob
+{
+    private const string ModuleName = "Album";
+
+    public async Task Execute(IJobExecutionContext context)
+    {
+        LogBeginProcessing(logger, ModuleName);
+
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbTransaction transaction = await connection.BeginTransactionAsync();
+
+        IReadOnlyList<OutboxMessageResponse> outboxMessages =
+            await GetOutboxMessagesAsync(connection, transaction, context.CancellationToken);
+
+        foreach (OutboxMessageResponse outboxMessage in outboxMessages)
+        {
+            Exception? exception = null;
+
+            try
+            {
+                IDomainEvent domainEvent = JsonConvert.DeserializeObject<IDomainEvent>(
+                    outboxMessage.Content,
+                    SerializerSettings.Instance)!;
+
+                using IServiceScope scope = serviceScopeFactory.CreateScope();
+
+                IEnumerable<IDomainEventHandler> handlers = DomainEventHandlersFactory.GetHandlers(
+                    domainEvent.GetType(),
+                    scope.ServiceProvider,
+                    Application.AssemblyReference.Assembly);
+
+                foreach (IDomainEventHandler domainEventHandler in handlers)
+                {
+                    await domainEventHandler.Handle(domainEvent, context.CancellationToken);
+                }
+            }
+            catch (Exception caughtException)
+            {
+                LogProcessingError(logger, caughtException, ModuleName, outboxMessage.Id);
+
+                exception = caughtException;
+            }
+
+            await UpdateOutboxMessageAsync(connection, transaction, outboxMessage, exception, context.CancellationToken);
+        }
+
+        await transaction.CommitAsync();
+
+        LogCompleted(logger, ModuleName);
+    }
+
+    private async Task<IReadOnlyList<OutboxMessageResponse>> GetOutboxMessagesAsync(
+        IDbConnection connection,
+        IDbTransaction transaction,
+        CancellationToken cancellationToken)
+    {
+        string sql =
+            $"""
+             SELECT
+                id AS {nameof(OutboxMessageResponse.Id)},
+                content AS {nameof(OutboxMessageResponse.Content)}
+             FROM album.outbox_messages
+             WHERE processed_on_utc IS NULL
+             ORDER BY occurred_on_utc
+             LIMIT {outboxOptions.Value.BatchSize}
+             FOR UPDATE SKIP LOCKED
+             """;
+
+        IEnumerable<OutboxMessageResponse> outboxMessages = await connection.QueryAsync<OutboxMessageResponse>(
+            new CommandDefinition(sql, transaction: transaction, cancellationToken: cancellationToken));
+
+        return outboxMessages.ToList();
+    }
+
+    private async Task UpdateOutboxMessageAsync(
+        IDbConnection connection,
+        IDbTransaction transaction,
+        OutboxMessageResponse outboxMessage,
+        Exception? exception,
+        CancellationToken cancellationToken)
+    {
+        if (exception is null)
+        {
+            const string sql =
+                """
+                UPDATE album.outbox_messages
+                SET processed_on_utc = @ProcessedOnUtc,
+                    error = NULL
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                new CommandDefinition(sql,
+                    new { outboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
+                    transaction: transaction,
+                    cancellationToken: cancellationToken));
+        }
+        else
+        {
+            const string sql =
+                """
+                UPDATE album.outbox_messages
+                SET error = @Error
+                WHERE id = @Id
+                """;
+
+            await connection.ExecuteAsync(
+                new CommandDefinition(sql,
+                    new { outboxMessage.Id, Error = exception.ToString() },
+                    transaction: transaction,
+                    cancellationToken: cancellationToken));
+        }
+    }
+
+    internal sealed record OutboxMessageResponse(Guid Id, string Content);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Beginning to process outbox messages")]
+    private static partial void LogBeginProcessing(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Information, "{module} - Completed processing outbox messages")]
+    private static partial void LogCompleted(ILogger logger, string module);
+
+    [LoggerMessage(LogLevel.Error, "{module} - Exception while processing outbox message {messageId}")]
+    private static partial void LogProcessingError(ILogger logger, Exception exception, string module, Guid messageId);
+}

From 80846b66c9837a5f6fc876fa5982d5d7d2d2bdb9 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:24:17 +0800
Subject: [PATCH 128/155] Eternelle-194 Add Album EF configurations and
 repositories

Adds AlbumSettingsConfiguration/Repository, InviteeConfiguration/Repository,
AlbumPhotoConfiguration/Repository, and extends Common.Domain InternalsVisibleTo
to allow Album.Infrastructure to call FromPersistence() VO factory methods.
---
 .../Eternelle.Common.Domain/AssemblyInfo.cs   |  1 +
 .../Invitees/InviteeConfiguration.cs          | 53 +++++++++++++
 .../Invitees/InviteeRepository.cs             | 18 +++++
 .../Photos/AlbumPhotoConfiguration.cs         | 79 +++++++++++++++++++
 .../Photos/AlbumPhotoRepository.cs            | 78 ++++++++++++++++++
 .../Settings/AlbumSettingsConfiguration.cs    | 43 ++++++++++
 .../Settings/AlbumSettingsRepository.cs       | 13 +++
 7 files changed, 285 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeConfiguration.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeRepository.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Photos/AlbumPhotoConfiguration.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Photos/AlbumPhotoRepository.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs

diff --git a/src/Common/Eternelle.Common.Domain/AssemblyInfo.cs b/src/Common/Eternelle.Common.Domain/AssemblyInfo.cs
index 9fe022d..29e40e3 100644
--- a/src/Common/Eternelle.Common.Domain/AssemblyInfo.cs
+++ b/src/Common/Eternelle.Common.Domain/AssemblyInfo.cs
@@ -5,3 +5,4 @@
 // to drive EF Core value converters.
 [assembly: InternalsVisibleTo("Eternelle.Modules.Weddings.Infrastructure")]
 [assembly: InternalsVisibleTo("Eternelle.Modules.Rsvp.Infrastructure")]
+[assembly: InternalsVisibleTo("Eternelle.Modules.Album.Infrastructure")]
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeConfiguration.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeConfiguration.cs
new file mode 100644
index 0000000..a0fb1d6
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeConfiguration.cs
@@ -0,0 +1,53 @@
+using Eternelle.Common.Domain.People;
+using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Shared;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Album.Infrastructure.Invitees;
+
+internal sealed class InviteeConfiguration : IEntityTypeConfiguration<Invitee>
+{
+    public void Configure(EntityTypeBuilder<Invitee> builder)
+    {
+        builder.ToTable("invitees");
+
+        builder.HasKey(i => i.GuestId);
+
+        builder.Property(i => i.GuestId)
+            .HasColumnName("guest_id")
+            .IsRequired();
+
+        builder.Property(i => i.WeddingId)
+            .HasColumnName("wedding_id")
+            .IsRequired();
+        builder.HasIndex(i => i.WeddingId);
+
+        builder.Property(i => i.FirstName)
+            .HasConversion(v => v.Value, v => PersonFirstName.FromPersistence(v))
+            .IsRequired()
+            .HasMaxLength(PersonFirstName.MaxLength)
+            .HasColumnName("first_name");
+
+        builder.Property(i => i.LastName)
+            .HasConversion(v => v.Value, v => PersonLastName.FromPersistence(v))
+            .IsRequired()
+            .HasMaxLength(PersonLastName.MaxLength)
+            .HasColumnName("last_name");
+
+        builder.Property(i => i.LookupCode)
+            .HasConversion(v => v.Value, v => LookupCode.FromPersistence(v))
+            .IsRequired()
+            .HasMaxLength(LookupCode.MaxLength)
+            .HasColumnName("lookup_code");
+        builder.HasIndex(i => i.LookupCode).IsUnique();
+
+        builder.Property(i => i.CreatedAtUtc)
+            .HasColumnName("created_at_utc")
+            .IsRequired();
+
+        builder.Property(i => i.UpdatedAtUtc)
+            .HasColumnName("updated_at_utc")
+            .IsRequired();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeRepository.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeRepository.cs
new file mode 100644
index 0000000..b423ccd
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeRepository.cs
@@ -0,0 +1,18 @@
+using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Album.Infrastructure.Invitees;
+
+internal sealed class InviteeRepository(AlbumDbContext context) : IInviteeRepository
+{
+    public Task<Invitee?> GetByLookupCodeAsync(string normalizedCode, CancellationToken cancellationToken) =>
+        context.Invitees.SingleOrDefaultAsync(i => i.LookupCode.Value == normalizedCode, cancellationToken);
+
+    public Task<Invitee?> GetByGuestIdAsync(Guid guestId, CancellationToken cancellationToken) =>
+        context.Invitees.SingleOrDefaultAsync(i => i.GuestId == guestId, cancellationToken);
+
+    public void Insert(Invitee invitee) => context.Invitees.Add(invitee);
+
+    public void Remove(Invitee invitee) => context.Invitees.Remove(invitee);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Photos/AlbumPhotoConfiguration.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Photos/AlbumPhotoConfiguration.cs
new file mode 100644
index 0000000..a443c63
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Photos/AlbumPhotoConfiguration.cs
@@ -0,0 +1,79 @@
+using Eternelle.Common.Domain.People;
+using Eternelle.Modules.Album.Domain.Photos;
+using Eternelle.Modules.Album.Domain.Shared;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Album.Infrastructure.Photos;
+
+internal sealed class AlbumPhotoConfiguration : IEntityTypeConfiguration<AlbumPhoto>
+{
+    public void Configure(EntityTypeBuilder<AlbumPhoto> builder)
+    {
+        builder.ToTable("photos");
+
+        builder.HasKey(p => p.Id);
+
+        builder.Property(p => p.WeddingId)
+            .HasColumnName("wedding_id")
+            .IsRequired();
+
+        builder.Property(p => p.Source)
+            .HasConversion<int>()
+            .HasColumnName("source")
+            .IsRequired();
+
+        builder.Property(p => p.GuestId)
+            .HasColumnName("guest_id");
+
+        builder.Property(p => p.UploaderUserId)
+            .HasColumnName("uploader_user_id");
+
+        builder.Property(p => p.UploaderName)
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? PersonName.FromPersistence(v) : null)
+            .HasMaxLength(PersonName.MaxLength)
+            .HasColumnName("uploader_name");
+
+        builder.Property(p => p.SrcUrl)
+            .HasConversion(v => v.Value, v => ImageUrl.FromPersistence(v))
+            .IsRequired()
+            .HasMaxLength(ImageUrl.MaxLength)
+            .HasColumnName("src_url");
+
+        builder.Property(p => p.ThumbnailUrl)
+            .HasConversion(
+                v => v != null ? v.Value : null,
+                v => v != null ? ImageUrl.FromPersistence(v) : null)
+            .HasMaxLength(ImageUrl.MaxLength)
+            .HasColumnName("thumbnail_url");
+
+        builder.Property(p => p.WidthPx)
+            .HasColumnName("width_px");
+
+        builder.Property(p => p.HeightPx)
+            .HasColumnName("height_px");
+
+        builder.Property(p => p.Status)
+            .HasConversion<int>()
+            .IsRequired()
+            .HasDefaultValue(PhotoStatus.Pending)
+            .HasColumnName("status");
+
+        builder.Property(p => p.UploadedAt)
+            .HasColumnName("uploaded_at")
+            .IsRequired();
+
+        builder.Property(p => p.ReviewedAt)
+            .HasColumnName("reviewed_at");
+
+        builder.HasIndex(p => new { p.WeddingId, p.Status, p.UploadedAt })
+            .HasDatabaseName("idx_album_photos_wedding_status_uploaded")
+            .IsDescending(false, false, true);
+
+        builder.HasIndex(p => p.GuestId)
+            .HasDatabaseName("idx_album_photos_guest_id")
+            .HasFilter("guest_id IS NOT NULL");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Photos/AlbumPhotoRepository.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Photos/AlbumPhotoRepository.cs
new file mode 100644
index 0000000..0913759
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Photos/AlbumPhotoRepository.cs
@@ -0,0 +1,78 @@
+using Eternelle.Modules.Album.Domain.Photos;
+using Eternelle.Modules.Album.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Storage;
+
+namespace Eternelle.Modules.Album.Infrastructure.Photos;
+
+internal sealed class AlbumPhotoRepository(AlbumDbContext context) : IAlbumPhotoRepository
+{
+    public Task<AlbumPhoto?> GetByIdAsync(AlbumPhotoId id, CancellationToken cancellationToken) =>
+        context.Photos.SingleOrDefaultAsync(p => p.Id == id, cancellationToken);
+
+    public Task<int> CountActiveByWeddingIdAsync(Guid weddingId, CancellationToken cancellationToken) =>
+        context.Photos.CountAsync(
+            p => p.WeddingId == weddingId && p.Status != PhotoStatus.OverLimit,
+            cancellationToken);
+
+    public void InsertMany(IEnumerable<AlbumPhoto> photos) =>
+        context.Photos.AddRange(photos);
+
+    public async Task InsertManyAndEnforceAsync(
+        IReadOnlyList<AlbumPhoto> photos,
+        Guid weddingId,
+        int limit,
+        CancellationToken cancellationToken)
+    {
+        if (photos.Any(p => p.WeddingId != weddingId))
+        {
+            throw new InvalidOperationException(
+                "All photos in a batch must belong to the same wedding as the provided weddingId.");
+        }
+
+        await using IDbContextTransaction tx = await context.Database.BeginTransactionAsync(cancellationToken);
+
+        // Acquire a row-level lock on the album settings row to serialize concurrent photo
+        // insertions for the same wedding. This ensures the enforce query sees all photos
+        // from competing transactions before deciding which to mark as OverLimit.
+        await context.Database.ExecuteSqlAsync(
+            $"SELECT 1 FROM album.settings WHERE wedding_id = {weddingId} FOR UPDATE",
+            cancellationToken);
+
+        context.Photos.AddRange(photos);
+        await context.SaveChangesAsync(cancellationToken);
+
+        await EnforcePhotoLimitAsync(weddingId, limit, cancellationToken);
+
+        await tx.CommitAsync(cancellationToken);
+    }
+
+    public void Remove(AlbumPhoto photo) => context.Photos.Remove(photo);
+
+    public Task NullifyGuestIdAsync(Guid guestId, CancellationToken cancellationToken) =>
+        context.Database.ExecuteSqlAsync(
+            $"UPDATE album.photos SET guest_id = NULL WHERE guest_id = {guestId}",
+            cancellationToken);
+
+    private async Task EnforcePhotoLimitAsync(Guid weddingId, int limit, CancellationToken ct)
+    {
+        int overLimit = (int)PhotoStatus.OverLimit;
+
+        await context.Database.ExecuteSqlAsync(
+            $"""
+            UPDATE album.photos
+               SET status = {overLimit}
+             WHERE wedding_id = {weddingId}
+               AND status     != {overLimit}
+               AND id NOT IN (
+                   SELECT id
+                     FROM album.photos
+                    WHERE wedding_id = {weddingId}
+                      AND status     != {overLimit}
+                    ORDER BY uploaded_at ASC, id ASC
+                    LIMIT {limit}
+               )
+            """,
+            ct);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
new file mode 100644
index 0000000..66bfd30
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
@@ -0,0 +1,43 @@
+using Eternelle.Modules.Album.Domain.Settings;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Metadata.Builders;
+
+namespace Eternelle.Modules.Album.Infrastructure.Settings;
+
+internal sealed class AlbumSettingsConfiguration : IEntityTypeConfiguration<AlbumSettings>
+{
+    public void Configure(EntityTypeBuilder<AlbumSettings> builder)
+    {
+        builder.ToTable("settings");
+
+        builder.HasKey(s => s.WeddingId);
+
+        builder.Property(s => s.WeddingId)
+            .HasColumnName("wedding_id")
+            .IsRequired();
+
+        builder.Property(s => s.ModerationMode)
+            .HasConversion<int>()
+            .HasColumnName("moderation_mode")
+            .IsRequired();
+
+        builder.Property(s => s.IsEnabled)
+            .HasColumnName("is_enabled")
+            .IsRequired();
+
+        builder.Property(s => s.IsClosed)
+            .HasColumnName("is_closed")
+            .IsRequired();
+
+        builder.Property(s => s.UploadLimit)
+            .HasColumnName("upload_limit");
+
+        builder.Property(s => s.CreatedAtUtc)
+            .HasColumnName("created_at_utc")
+            .IsRequired();
+
+        builder.Property(s => s.UpdatedAtUtc)
+            .HasColumnName("updated_at_utc")
+            .IsRequired();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs
new file mode 100644
index 0000000..3336afc
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs
@@ -0,0 +1,13 @@
+using Eternelle.Modules.Album.Domain.Settings;
+using Eternelle.Modules.Album.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+
+namespace Eternelle.Modules.Album.Infrastructure.Settings;
+
+internal sealed class AlbumSettingsRepository(AlbumDbContext context) : IAlbumSettingsRepository
+{
+    public Task<AlbumSettings?> GetByWeddingIdAsync(Guid weddingId, CancellationToken cancellationToken) =>
+        context.AlbumSettings.SingleOrDefaultAsync(s => s.WeddingId == weddingId, cancellationToken);
+
+    public void Insert(AlbumSettings settings) => context.AlbumSettings.Add(settings);
+}

From 60e55b7de6eb6c39b6e06493c9695de5cb7d2ec4 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:25:58 +0800
Subject: [PATCH 129/155] Eternelle-194 Publish Album photo integration events

Adds AlbumPhotoUploadedIntegrationEvent and AlbumPhotoApprovedIntegrationEvent
with corresponding domain event handlers that embed payload from the domain event
and publish directly via IEventBus (no repository reload).
---
 .../AlbumPhotoApprovedDomainEventHandler.cs   | 20 +++++++++++++++++
 .../AlbumPhotoUploadedDomainEventHandler.cs   | 22 +++++++++++++++++++
 .../AlbumPhotoApprovedIntegrationEvent.cs     | 18 +++++++++++++++
 .../AlbumPhotoUploadedIntegrationEvent.cs     | 22 +++++++++++++++++++
 4 files changed, 82 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/AlbumPhotoApprovedDomainEventHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/AlbumPhotoUploadedDomainEventHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Photos/AlbumPhotoApprovedIntegrationEvent.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Photos/AlbumPhotoUploadedIntegrationEvent.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/AlbumPhotoApprovedDomainEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/AlbumPhotoApprovedDomainEventHandler.cs
new file mode 100644
index 0000000..a74598c
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/AlbumPhotoApprovedDomainEventHandler.cs
@@ -0,0 +1,20 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Album.Domain.Photos;
+using Eternelle.Modules.Album.IntegrationEvents.Photos;
+
+namespace Eternelle.Modules.Album.Application.Photos;
+
+internal sealed class AlbumPhotoApprovedDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<AlbumPhotoApprovedDomainEvent>
+{
+    public override Task Handle(AlbumPhotoApprovedDomainEvent domainEvent, CancellationToken cancellationToken = default) =>
+        eventBus.PublishAsync(
+            new AlbumPhotoApprovedIntegrationEvent(
+                domainEvent.Id,
+                domainEvent.OccurredOnUtc,
+                domainEvent.PhotoId.Value,
+                domainEvent.WeddingId,
+                domainEvent.ApprovedAt),
+            cancellationToken);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/AlbumPhotoUploadedDomainEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/AlbumPhotoUploadedDomainEventHandler.cs
new file mode 100644
index 0000000..6b278ba
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/AlbumPhotoUploadedDomainEventHandler.cs
@@ -0,0 +1,22 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Album.Domain.Photos;
+using Eternelle.Modules.Album.IntegrationEvents.Photos;
+
+namespace Eternelle.Modules.Album.Application.Photos;
+
+internal sealed class AlbumPhotoUploadedDomainEventHandler(IEventBus eventBus)
+    : DomainEventHandler<AlbumPhotoUploadedDomainEvent>
+{
+    public override Task Handle(AlbumPhotoUploadedDomainEvent domainEvent, CancellationToken cancellationToken = default) =>
+        eventBus.PublishAsync(
+            new AlbumPhotoUploadedIntegrationEvent(
+                domainEvent.Id,
+                domainEvent.OccurredOnUtc,
+                domainEvent.PhotoId.Value,
+                domainEvent.WeddingId,
+                (int)domainEvent.Source,
+                (int)domainEvent.Status,
+                domainEvent.UploadedAt),
+            cancellationToken);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Photos/AlbumPhotoApprovedIntegrationEvent.cs b/src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Photos/AlbumPhotoApprovedIntegrationEvent.cs
new file mode 100644
index 0000000..31d412b
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Photos/AlbumPhotoApprovedIntegrationEvent.cs
@@ -0,0 +1,18 @@
+using Eternelle.Common.Application.EventBus;
+
+namespace Eternelle.Modules.Album.IntegrationEvents.Photos;
+
+public sealed class AlbumPhotoApprovedIntegrationEvent : IntegrationEvent
+{
+    public AlbumPhotoApprovedIntegrationEvent(Guid id, DateTime occurredOnUtc, Guid photoId,
+        Guid weddingId, DateTime approvedAt) : base(id, occurredOnUtc)
+    {
+        PhotoId = photoId;
+        WeddingId = weddingId;
+        ApprovedAt = approvedAt;
+    }
+
+    public Guid PhotoId { get; init; }
+    public Guid WeddingId { get; init; }
+    public DateTime ApprovedAt { get; init; }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Photos/AlbumPhotoUploadedIntegrationEvent.cs b/src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Photos/AlbumPhotoUploadedIntegrationEvent.cs
new file mode 100644
index 0000000..a82f4f5
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.IntegrationEvents/Photos/AlbumPhotoUploadedIntegrationEvent.cs
@@ -0,0 +1,22 @@
+using Eternelle.Common.Application.EventBus;
+
+namespace Eternelle.Modules.Album.IntegrationEvents.Photos;
+
+public sealed class AlbumPhotoUploadedIntegrationEvent : IntegrationEvent
+{
+    public AlbumPhotoUploadedIntegrationEvent(Guid id, DateTime occurredOnUtc, Guid photoId,
+        Guid weddingId, int source, int status, DateTime uploadedAt) : base(id, occurredOnUtc)
+    {
+        PhotoId = photoId;
+        WeddingId = weddingId;
+        Source = source;
+        Status = status;
+        UploadedAt = uploadedAt;
+    }
+
+    public Guid PhotoId { get; init; }
+    public Guid WeddingId { get; init; }
+    public int Source { get; init; }
+    public int Status { get; init; }
+    public DateTime UploadedAt { get; init; }
+}

From c1e08e990400645726f0d3b3c9b28199c1380499 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:26:19 +0800
Subject: [PATCH 130/155] Eternelle-194 Register Album module infrastructure

Adds AlbumModule static class with AddAlbumModule, ConfigureConsumers (Wedding,
Tenancy, and Rsvp Guest events), and wires DbContext, IUnitOfWork, S3/Redis
storage, repositories, outbox/inbox Quartz jobs, and PhotoStorageOptions with
ValidateOnStart.
---
 .../AlbumModule.cs                            | 141 ++++++++++++++++++
 1 file changed, 141 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/AlbumModule.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/AlbumModule.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/AlbumModule.cs
new file mode 100644
index 0000000..b2fb32f
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/AlbumModule.cs
@@ -0,0 +1,141 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Infrastructure.Outbox;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Application.Abstractions.Storage;
+using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Photos;
+using Eternelle.Modules.Album.Domain.Settings;
+using Eternelle.Modules.Album.Infrastructure.Database;
+using Eternelle.Modules.Album.Infrastructure.Inbox;
+using Eternelle.Modules.Album.Infrastructure.Invitees;
+using Eternelle.Modules.Album.Infrastructure.Outbox;
+using Eternelle.Modules.Album.Infrastructure.Photos;
+using Eternelle.Modules.Album.Infrastructure.Settings;
+using Eternelle.Modules.Album.Infrastructure.Storage;
+using Eternelle.Modules.Rsvp.IntegrationEvents.Guests;
+using Eternelle.Modules.Tenancy.IntegrationEvents;
+using Eternelle.Modules.Weddings.IntegrationEvents.Weddings;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.DependencyInjection.Extensions;
+using StackExchange.Redis;
+
+namespace Eternelle.Modules.Album.Infrastructure;
+
+public static class AlbumModule
+{
+    public static IServiceCollection AddAlbumModule(this IServiceCollection services, IConfiguration configuration)
+    {
+        AddApplication(services);
+        AddInfrastructure(services, configuration);
+        return services;
+    }
+
+    public static void ConfigureConsumers(MassTransit.IRegistrationConfigurator configurator)
+    {
+        configurator.AddConsumer<IntegrationEventConsumer<WeddingCreatedIntegrationEvent>>();
+        configurator.AddConsumer<IntegrationEventConsumer<TenantUploadLimitChangedIntegrationEvent>>();
+        configurator.AddConsumer<IntegrationEventConsumer<GuestAddedIntegrationEvent>>();
+        configurator.AddConsumer<IntegrationEventConsumer<GuestLookupCodeRegeneratedIntegrationEvent>>();
+        configurator.AddConsumer<IntegrationEventConsumer<GuestRemovedIntegrationEvent>>();
+    }
+
+    private static void AddApplication(IServiceCollection services)
+    {
+        AddDomainEventHandlers(services);
+        AddIntegrationEventHandlers(services);
+
+        services.AddMediatR(cfg => cfg.RegisterServicesFromAssembly(Application.AssemblyReference.Assembly));
+
+        services.AddEndpoints(Presentation.AssemblyReference.Assembly);
+    }
+
+    private static void AddInfrastructure(IServiceCollection services, IConfiguration configuration)
+    {
+        services.AddDbContext<AlbumDbContext>((sp, options) =>
+            options
+                .UseNpgsql(
+                    configuration.GetConnectionString("Database"),
+                    npgsql => npgsql.MigrationsHistoryTable(HistoryRepository.DefaultTableName, Domain.Schemas.Album))
+                .UseSnakeCaseNamingConvention()
+                .AddInterceptors(sp.GetRequiredService<InsertOutboxMessagesInterceptor>()));
+
+        services.AddScoped<IUnitOfWork>(sp => sp.GetRequiredService<AlbumDbContext>());
+
+        services.AddSingleton<IPhotoStorageService, S3PhotoStorageService>();
+
+        // IConnectionMultiplexer is only registered by common infrastructure when Redis is reachable.
+        // Fall back to an in-memory stub so the app starts without Redis in local dev.
+        if (services.Any(d => d.ServiceType == typeof(IConnectionMultiplexer)))
+        {
+            services.AddScoped<IUploadSlotStore, RedisUploadSlotStore>();
+        }
+        else
+        {
+            services.AddSingleton<IUploadSlotStore, StubUploadSlotStore>();
+        }
+
+        services.AddScoped<IAlbumSettingsRepository, AlbumSettingsRepository>();
+        services.AddScoped<IInviteeRepository, InviteeRepository>();
+        services.AddScoped<IAlbumPhotoRepository, AlbumPhotoRepository>();
+
+        services.AddOptions<PhotoStorageOptions>()
+            .Bind(configuration.GetSection(PhotoStorageOptions.SectionName))
+            .Validate(opts => !string.IsNullOrWhiteSpace(opts.ServiceUrl), "Album:PhotoStorage:ServiceUrl must be provided")
+            .Validate(opts => !string.IsNullOrWhiteSpace(opts.PublicUrl), "Album:PhotoStorage:PublicUrl must be provided")
+            .Validate(opts => !string.IsNullOrWhiteSpace(opts.AccessKey), "Album:PhotoStorage:AccessKey must be provided")
+            .Validate(opts => !string.IsNullOrWhiteSpace(opts.SecretKey), "Album:PhotoStorage:SecretKey must be provided")
+            .Validate(opts => !string.IsNullOrWhiteSpace(opts.BucketName), "Album:PhotoStorage:BucketName must be provided")
+            .ValidateOnStart();
+
+        services.AddOptions<OutboxOptions>()
+            .Bind(configuration.GetSection("Album:Outbox"))
+            .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
+                "Album:Outbox: IntervalInSeconds and BatchSize must be greater than 0.")
+            .ValidateOnStart();
+        services.ConfigureOptions<ConfigureProcessOutboxJob>();
+
+        services.AddOptions<InboxOptions>()
+            .Bind(configuration.GetSection("Album:Inbox"))
+            .Validate(o => o.IntervalInSeconds > 0 && o.BatchSize > 0,
+                "Album:Inbox: IntervalInSeconds and BatchSize must be greater than 0.")
+            .ValidateOnStart();
+        services.ConfigureOptions<ConfigureProcessInboxJob>();
+    }
+
+    private static void AddDomainEventHandlers(IServiceCollection services)
+    {
+        Type[] handlers = Application.AssemblyReference.Assembly.GetTypes()
+            .Where(t => t.IsAssignableTo(typeof(IDomainEventHandler))).ToArray();
+
+        foreach (Type handler in handlers)
+        {
+            services.TryAddScoped(handler);
+            Type domainEvent = handler.GetInterfaces()
+                .Single(i => i.IsGenericType && i.GetGenericTypeDefinition() == typeof(IDomainEventHandler<>))
+                .GetGenericArguments().Single();
+            Type closed = typeof(IdempotentDomainEventHandler<>).MakeGenericType(domainEvent);
+            services.Decorate(handler, closed);
+        }
+    }
+
+    private static void AddIntegrationEventHandlers(IServiceCollection services)
+    {
+        Type[] handlers = Presentation.AssemblyReference.Assembly.GetTypes()
+            .Where(t => t.IsAssignableTo(typeof(IIntegrationEventHandler))).ToArray();
+
+        foreach (Type handler in handlers)
+        {
+            services.TryAddScoped(handler);
+            Type integrationEvent = handler.GetInterfaces()
+                .Single(i => i.IsGenericType && i.GetGenericTypeDefinition() == typeof(IIntegrationEventHandler<>))
+                .GetGenericArguments().Single();
+            Type closed = typeof(IdempotentIntegrationEventHandler<>).MakeGenericType(integrationEvent);
+            services.Decorate(handler, closed);
+        }
+    }
+}

From 3b1d615941a5d0377588bdc6ffc6ffbea6c99750 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:34:13 +0800
Subject: [PATCH 131/155] Eternelle-194 Add shared Album upload service

---
 .../AssemblyInfo.cs                           |   3 +
 .../Uploads/AlbumUploadService.cs             | 165 ++++++++++++++++++
 .../Uploads/IAlbumUploadService.cs            |  29 +++
 .../AlbumModule.cs                            |   3 +
 4 files changed, 200 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/AssemblyInfo.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/AlbumUploadService.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/IAlbumUploadService.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/AssemblyInfo.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/AssemblyInfo.cs
new file mode 100644
index 0000000..0bf67fe
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/AssemblyInfo.cs
@@ -0,0 +1,3 @@
+using System.Runtime.CompilerServices;
+
+[assembly: InternalsVisibleTo("Eternelle.Modules.Album.Infrastructure")]
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/AlbumUploadService.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/AlbumUploadService.cs
new file mode 100644
index 0000000..bc0a709
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/AlbumUploadService.cs
@@ -0,0 +1,165 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Application.Abstractions.Storage;
+using Eternelle.Modules.Album.Domain.Photos;
+using Eternelle.Modules.Album.Domain.Settings;
+using Eternelle.Modules.Album.Domain.Shared;
+
+namespace Eternelle.Modules.Album.Application.Uploads;
+
+internal sealed class AlbumUploadService(
+    IAlbumSettingsRepository settingsRepository,
+    IAlbumPhotoRepository photoRepository,
+    IPhotoStorageService photoStorageService,
+    IUploadSlotStore uploadSlotStore,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider dateTimeProvider) : IAlbumUploadService
+{
+    private const int SlotTtlMinutes = 15;
+
+    public async Task<Result<IReadOnlyList<UploadSlotResponse>>> GenerateSlotsAsync(
+        Guid weddingId,
+        int count,
+        CancellationToken ct)
+    {
+        AlbumSettings? settings = await settingsRepository.GetByWeddingIdAsync(weddingId, ct);
+
+        if (settings is null || !settings.IsEnabled || settings.IsClosed)
+        {
+            return Result.Failure<IReadOnlyList<UploadSlotResponse>>(AlbumPhotoErrors.AlbumDisabled);
+        }
+
+        if (settings.UploadLimit is not null)
+        {
+            int activeCount = await photoRepository.CountActiveByWeddingIdAsync(weddingId, ct);
+            if (activeCount + count > settings.UploadLimit)
+            {
+                return Result.Failure<IReadOnlyList<UploadSlotResponse>>(AlbumPhotoErrors.PlanLimitReached);
+            }
+        }
+
+        IReadOnlyList<PresignedUploadSlot> slots =
+            await photoStorageService.GeneratePresignedSlotsAsync(count, ct);
+
+        DateTime expiresAt = dateTimeProvider.UtcNow.AddMinutes(SlotTtlMinutes);
+
+        foreach (PresignedUploadSlot slot in slots)
+        {
+            await uploadSlotStore.StoreAsync(slot.SlotId, slot.CdnUrl, ct);
+        }
+
+        IReadOnlyList<UploadSlotResponse> response = slots
+            .Select(s => new UploadSlotResponse(s.SlotId.ToString(), s.PresignedUrl, expiresAt))
+            .ToList();
+
+        return Result.Success(response);
+    }
+
+    public async Task<Result<IReadOnlyList<Guid>>> RegisterAsync(
+        Guid weddingId,
+        PhotoSource source,
+        Guid? guestId,
+        Guid? uploaderUserId,
+        PersonName? defaultName,
+        IReadOnlyList<PhotoRegistration> photos,
+        CancellationToken ct)
+    {
+        AlbumSettings? settings = await settingsRepository.GetByWeddingIdAsync(weddingId, ct);
+
+        if (settings is null || !settings.IsEnabled || settings.IsClosed)
+        {
+            return Result.Failure<IReadOnlyList<Guid>>(AlbumPhotoErrors.AlbumDisabled);
+        }
+
+        if (settings.UploadLimit is not null)
+        {
+            int activeCount = await photoRepository.CountActiveByWeddingIdAsync(weddingId, ct);
+            if (activeCount + photos.Count > settings.UploadLimit)
+            {
+                return Result.Failure<IReadOnlyList<Guid>>(AlbumPhotoErrors.PlanLimitReached);
+            }
+        }
+
+        // Reject duplicate SlotIds before touching the store — a duplicate would map two
+        // AlbumPhoto records to the same CDN upload.
+        var slotIds = photos.Select(p => Guid.Parse(p.SlotId)).ToList();
+        if (new HashSet<Guid>(slotIds).Count != slotIds.Count)
+        {
+            return Result.Failure<IReadOnlyList<Guid>>(AlbumPhotoErrors.InvalidUploadSlot);
+        }
+
+        IReadOnlyDictionary<Guid, string>? cdnUrls =
+            await uploadSlotStore.RedeemManyAsync(slotIds, ct);
+
+        if (cdnUrls is null)
+        {
+            return Result.Failure<IReadOnlyList<Guid>>(AlbumPhotoErrors.InvalidUploadSlot);
+        }
+
+        PhotoStatus initialStatus = settings.ModerationMode == ModerationMode.Auto
+            ? PhotoStatus.Approved
+            : PhotoStatus.Pending;
+
+        DateTime now = dateTimeProvider.UtcNow;
+
+        var albumPhotos = new List<AlbumPhoto>();
+        foreach (PhotoRegistration registration in photos)
+        {
+            var slotGuid = Guid.Parse(registration.SlotId);
+            if (!cdnUrls.TryGetValue(slotGuid, out string? cdnUrl))
+            {
+                return Result.Failure<IReadOnlyList<Guid>>(AlbumPhotoErrors.InvalidUploadSlot);
+            }
+
+            Result<ImageUrl> srcUrlResult = ImageUrl.Create(cdnUrl);
+            if (srcUrlResult.IsFailure)
+            {
+                return Result.Failure<IReadOnlyList<Guid>>(srcUrlResult.Error);
+            }
+
+            PersonName? uploaderName = null;
+            if (!string.IsNullOrWhiteSpace(registration.DisplayName))
+            {
+                Result<PersonName> nameResult = PersonName.Create(registration.DisplayName);
+                if (nameResult.IsFailure)
+                {
+                    return Result.Failure<IReadOnlyList<Guid>>(nameResult.Error);
+                }
+                uploaderName = nameResult.Value;
+            }
+            else
+            {
+                uploaderName = defaultName;
+            }
+
+            albumPhotos.Add(AlbumPhoto.Create(
+                weddingId,
+                source,
+                guestId,
+                uploaderUserId,
+                uploaderName,
+                srcUrlResult.Value,
+                thumbnailUrl: null,
+                registration.WidthPx,
+                registration.HeightPx,
+                initialStatus,
+                now));
+        }
+
+        if (settings.UploadLimit is not null)
+        {
+            await photoRepository.InsertManyAndEnforceAsync(
+                albumPhotos, weddingId, settings.UploadLimit.Value, ct);
+        }
+        else
+        {
+            photoRepository.InsertMany(albumPhotos);
+            await unitOfWork.SaveChangesAsync(ct);
+        }
+
+        return Result.Success<IReadOnlyList<Guid>>(
+            albumPhotos.Select(p => p.Id.Value).ToList());
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/IAlbumUploadService.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/IAlbumUploadService.cs
new file mode 100644
index 0000000..0e1dd55
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/IAlbumUploadService.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Modules.Album.Domain.Photos;
+
+namespace Eternelle.Modules.Album.Application.Uploads;
+
+public record PhotoRegistration(
+    string SlotId,
+    string CdnUrl,
+    string? DisplayName,
+    int? WidthPx,
+    int? HeightPx);
+
+public record UploadSlotResponse(string SlotId, string PresignedUrl, DateTime ExpiresAt);
+
+public interface IAlbumUploadService
+{
+    Task<Result<IReadOnlyList<UploadSlotResponse>>> GenerateSlotsAsync(
+        Guid weddingId, int count, CancellationToken ct);
+
+    Task<Result<IReadOnlyList<Guid>>> RegisterAsync(
+        Guid weddingId,
+        PhotoSource source,
+        Guid? guestId,
+        Guid? uploaderUserId,
+        PersonName? defaultName,
+        IReadOnlyList<PhotoRegistration> photos,
+        CancellationToken ct);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/AlbumModule.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/AlbumModule.cs
index b2fb32f..25473a5 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/AlbumModule.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/AlbumModule.cs
@@ -4,6 +4,7 @@
 using Eternelle.Common.Presentation.Endpoints;
 using Eternelle.Modules.Album.Application.Abstractions.Data;
 using Eternelle.Modules.Album.Application.Abstractions.Storage;
+using Eternelle.Modules.Album.Application.Uploads;
 using Eternelle.Modules.Album.Domain.Invitees;
 using Eternelle.Modules.Album.Domain.Photos;
 using Eternelle.Modules.Album.Domain.Settings;
@@ -51,6 +52,8 @@ private static void AddApplication(IServiceCollection services)
 
         services.AddMediatR(cfg => cfg.RegisterServicesFromAssembly(Application.AssemblyReference.Assembly));
 
+        services.AddScoped<IAlbumUploadService, AlbumUploadService>();
+
         services.AddEndpoints(Presentation.AssemblyReference.Assembly);
     }
 

From 7c96c04845d7ffd377982b8d9bc0ebfadad5a93d Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:36:26 +0800
Subject: [PATCH 132/155] Eternelle-194 Add Album guest upload commands and
 context query

---
 .../DeleteOwnPhoto/DeleteOwnPhotoCommand.cs   |  7 ++
 .../DeleteOwnPhotoCommandHandler.cs           | 40 ++++++++++
 .../DeleteOwnPhotoCommandValidator.cs         | 12 +++
 .../GenerateGuestUploadSlotsCommand.cs        |  8 ++
 .../GenerateGuestUploadSlotsCommandHandler.cs | 29 +++++++
 ...enerateGuestUploadSlotsCommandValidator.cs | 12 +++
 .../GetUploadContext/GetUploadContextQuery.cs |  5 ++
 .../GetUploadContextQueryHandler.cs           | 79 +++++++++++++++++++
 .../GetUploadContextResponse.cs               | 15 ++++
 .../RegisterGuestPhotosCommand.cs             |  8 ++
 .../RegisterGuestPhotosCommandHandler.cs      | 41 ++++++++++
 .../RegisterGuestPhotosCommandValidator.cs    | 12 +++
 12 files changed, 268 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandValidator.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandValidator.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQuery.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextResponse.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommand.cs
new file mode 100644
index 0000000..f8b739e
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommand.cs
@@ -0,0 +1,7 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Invitees.DeleteOwnPhoto;
+
+public sealed record DeleteOwnPhotoCommand(
+    string LookupCode,
+    Guid PhotoId) : ICommand;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandHandler.cs
new file mode 100644
index 0000000..28791aa
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandHandler.cs
@@ -0,0 +1,40 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Photos;
+
+namespace Eternelle.Modules.Album.Application.Invitees.DeleteOwnPhoto;
+
+internal sealed class DeleteOwnPhotoCommandHandler(
+    IInviteeRepository inviteeRepository,
+    IAlbumPhotoRepository photoRepository,
+    IUnitOfWork unitOfWork)
+    : ICommandHandler<DeleteOwnPhotoCommand>
+{
+    public async Task<Result> Handle(DeleteOwnPhotoCommand command, CancellationToken cancellationToken)
+    {
+        string normalizedCode = command.LookupCode.Replace("-", string.Empty).Trim().ToUpperInvariant();
+
+        Invitee? invitee = await inviteeRepository.GetByLookupCodeAsync(normalizedCode, cancellationToken);
+        if (invitee is null)
+        {
+            return Result.Failure(AlbumPhotoErrors.NotFound(new AlbumPhotoId(command.PhotoId)));
+        }
+
+        AlbumPhoto? photo = await photoRepository.GetByIdAsync(new AlbumPhotoId(command.PhotoId), cancellationToken);
+
+        if (photo is null
+            || photo.WeddingId != invitee.WeddingId
+            || photo.Source != PhotoSource.GuestSelf
+            || photo.GuestId != invitee.GuestId)
+        {
+            return Result.Failure(AlbumPhotoErrors.NotFound(new AlbumPhotoId(command.PhotoId)));
+        }
+
+        photoRepository.Remove(photo);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandValidator.cs
new file mode 100644
index 0000000..ce449ea
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Invitees.DeleteOwnPhoto;
+
+internal sealed class DeleteOwnPhotoCommandValidator : AbstractValidator<DeleteOwnPhotoCommand>
+{
+    public DeleteOwnPhotoCommandValidator()
+    {
+        RuleFor(c => c.LookupCode).NotEmpty();
+        RuleFor(c => c.PhotoId).NotEmpty();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommand.cs
new file mode 100644
index 0000000..1c06505
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommand.cs
@@ -0,0 +1,8 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Album.Application.Uploads;
+
+namespace Eternelle.Modules.Album.Application.Invitees.GenerateGuestUploadSlots;
+
+public sealed record GenerateGuestUploadSlotsCommand(
+    string LookupCode,
+    int Count) : ICommand<IReadOnlyList<UploadSlotResponse>>;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandHandler.cs
new file mode 100644
index 0000000..260e678
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandHandler.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Uploads;
+using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Photos;
+
+namespace Eternelle.Modules.Album.Application.Invitees.GenerateGuestUploadSlots;
+
+internal sealed class GenerateGuestUploadSlotsCommandHandler(
+    IInviteeRepository inviteeRepository,
+    IAlbumUploadService uploadService)
+    : ICommandHandler<GenerateGuestUploadSlotsCommand, IReadOnlyList<UploadSlotResponse>>
+{
+    public async Task<Result<IReadOnlyList<UploadSlotResponse>>> Handle(
+        GenerateGuestUploadSlotsCommand command,
+        CancellationToken cancellationToken)
+    {
+        string normalizedCode = command.LookupCode.Replace("-", string.Empty).Trim().ToUpperInvariant();
+
+        Invitee? invitee = await inviteeRepository.GetByLookupCodeAsync(normalizedCode, cancellationToken);
+        if (invitee is null)
+        {
+            return Result.Failure<IReadOnlyList<UploadSlotResponse>>(
+                Error.NotFound("Album.NotFound", "Resource not found."));
+        }
+
+        return await uploadService.GenerateSlotsAsync(invitee.WeddingId, command.Count, cancellationToken);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandValidator.cs
new file mode 100644
index 0000000..30ee2bd
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Invitees.GenerateGuestUploadSlots;
+
+internal sealed class GenerateGuestUploadSlotsCommandValidator : AbstractValidator<GenerateGuestUploadSlotsCommand>
+{
+    public GenerateGuestUploadSlotsCommandValidator()
+    {
+        RuleFor(c => c.LookupCode).NotEmpty();
+        RuleFor(c => c.Count).InclusiveBetween(1, 30);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQuery.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQuery.cs
new file mode 100644
index 0000000..829aac2
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQuery.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Invitees.GetUploadContext;
+
+public sealed record GetUploadContextQuery(string LookupCode) : IQuery<UploadContextResponse>;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs
new file mode 100644
index 0000000..cf16750
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs
@@ -0,0 +1,79 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Settings;
+
+namespace Eternelle.Modules.Album.Application.Invitees.GetUploadContext;
+
+internal sealed class GetUploadContextQueryHandler(
+    IInviteeRepository inviteeRepository,
+    IAlbumSettingsRepository settingsRepository,
+    IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetUploadContextQuery, UploadContextResponse>
+{
+    public async Task<Result<UploadContextResponse>> Handle(
+        GetUploadContextQuery query,
+        CancellationToken cancellationToken)
+    {
+        string normalizedCode = query.LookupCode.Replace("-", string.Empty).Trim().ToUpperInvariant();
+
+        Invitee? invitee = await inviteeRepository.GetByLookupCodeAsync(normalizedCode, cancellationToken);
+        if (invitee is null)
+        {
+            return Result.Failure<UploadContextResponse>(
+                Error.NotFound("Album.NotFound", "Resource not found."));
+        }
+
+        AlbumSettings? settings = await settingsRepository.GetByWeddingIdAsync(invitee.WeddingId, cancellationToken);
+        if (settings is null)
+        {
+            return Result.Failure<UploadContextResponse>(
+                Error.NotFound("Album.NotFound", "Resource not found."));
+        }
+
+        int? remaining = null;
+        if (settings.UploadLimit is not null)
+        {
+            await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
+            const string countSql =
+                $"""
+                 SELECT COUNT(*)
+                 FROM album.photos
+                 WHERE wedding_id = @WeddingId
+                   AND status != 3
+                 """;
+            int activeCount = await connection.ExecuteScalarAsync<int>(
+                new CommandDefinition(countSql, new { invitee.WeddingId }, cancellationToken: cancellationToken));
+            remaining = Math.Max(0, settings.UploadLimit.Value - activeCount);
+        }
+
+        await using DbConnection conn = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
+        const string photosSql =
+            $"""
+             SELECT
+                 id          AS {nameof(GuestPhotoItem.PhotoId)},
+                 src_url     AS {nameof(GuestPhotoItem.SrcUrl)},
+                 status      AS {nameof(GuestPhotoItem.Status)},
+                 uploaded_at AS {nameof(GuestPhotoItem.UploadedAt)}
+             FROM album.photos
+             WHERE guest_id = @GuestId
+             ORDER BY uploaded_at DESC
+             """;
+
+        IEnumerable<GuestPhotoItem> photos = await conn.QueryAsync<GuestPhotoItem>(
+            new CommandDefinition(photosSql, new { invitee.GuestId }, cancellationToken: cancellationToken));
+
+        var response = new UploadContextResponse(
+            invitee.FirstName.Value,
+            invitee.LastName.Value,
+            settings.IsEnabled,
+            (int)settings.ModerationMode,
+            remaining,
+            [.. photos]);
+
+        return Result.Success(response);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextResponse.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextResponse.cs
new file mode 100644
index 0000000..22edd8e
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextResponse.cs
@@ -0,0 +1,15 @@
+namespace Eternelle.Modules.Album.Application.Invitees.GetUploadContext;
+
+public sealed record UploadContextResponse(
+    string FirstName,
+    string LastName,
+    bool IsEnabled,
+    int ModerationMode,
+    int? Remaining,
+    IReadOnlyList<GuestPhotoItem> Photos);
+
+public sealed record GuestPhotoItem(
+    Guid PhotoId,
+    string SrcUrl,
+    int Status,
+    DateTime UploadedAt);
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommand.cs
new file mode 100644
index 0000000..391f7ae
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommand.cs
@@ -0,0 +1,8 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Album.Application.Uploads;
+
+namespace Eternelle.Modules.Album.Application.Invitees.RegisterGuestPhotos;
+
+public sealed record RegisterGuestPhotosCommand(
+    string LookupCode,
+    IReadOnlyList<PhotoRegistration> Photos) : ICommand<IReadOnlyList<Guid>>;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
new file mode 100644
index 0000000..d166deb
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
@@ -0,0 +1,41 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Modules.Album.Application.Uploads;
+using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Photos;
+
+namespace Eternelle.Modules.Album.Application.Invitees.RegisterGuestPhotos;
+
+internal sealed class RegisterGuestPhotosCommandHandler(
+    IInviteeRepository inviteeRepository,
+    IAlbumUploadService uploadService)
+    : ICommandHandler<RegisterGuestPhotosCommand, IReadOnlyList<Guid>>
+{
+    public async Task<Result<IReadOnlyList<Guid>>> Handle(
+        RegisterGuestPhotosCommand command,
+        CancellationToken cancellationToken)
+    {
+        string normalizedCode = command.LookupCode.Replace("-", string.Empty).Trim().ToUpperInvariant();
+
+        Invitee? invitee = await inviteeRepository.GetByLookupCodeAsync(normalizedCode, cancellationToken);
+        if (invitee is null)
+        {
+            return Result.Failure<IReadOnlyList<Guid>>(
+                Error.NotFound("Album.NotFound", "Resource not found."));
+        }
+
+        string fullName = $"{invitee.FirstName.Value} {invitee.LastName.Value}";
+        Result<PersonName> defaultNameResult = PersonName.Create(fullName);
+        PersonName? defaultName = defaultNameResult.IsSuccess ? defaultNameResult.Value : null;
+
+        return await uploadService.RegisterAsync(
+            invitee.WeddingId,
+            PhotoSource.GuestSelf,
+            invitee.GuestId,
+            uploaderUserId: null,
+            defaultName,
+            command.Photos,
+            cancellationToken);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs
new file mode 100644
index 0000000..5779690
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Invitees.RegisterGuestPhotos;
+
+internal sealed class RegisterGuestPhotosCommandValidator : AbstractValidator<RegisterGuestPhotosCommand>
+{
+    public RegisterGuestPhotosCommandValidator()
+    {
+        RuleFor(c => c.LookupCode).NotEmpty();
+        RuleFor(c => c.Photos).NotEmpty();
+    }
+}

From 9ec65cb02ef3b2871565af8f55b9904a9e2bd1c4 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:38:25 +0800
Subject: [PATCH 133/155] Eternelle-194 Add Album host upload commands

---
 .../GenerateHostUploadSlotsCommand.cs         |  8 ++++
 .../GenerateHostUploadSlotsCommandHandler.cs  | 15 ++++++++
 ...GenerateHostUploadSlotsCommandValidator.cs | 12 ++++++
 .../RegisterHostPhotosCommand.cs              | 10 +++++
 .../RegisterHostPhotosCommandHandler.cs       | 37 +++++++++++++++++++
 .../RegisterHostPhotosCommandValidator.cs     | 13 +++++++
 6 files changed, 95 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandValidator.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommandValidator.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommand.cs
new file mode 100644
index 0000000..2776e15
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommand.cs
@@ -0,0 +1,8 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Album.Application.Uploads;
+
+namespace Eternelle.Modules.Album.Application.Photos.GenerateHostUploadSlots;
+
+public sealed record GenerateHostUploadSlotsCommand(
+    Guid WeddingId,
+    int Count) : ICommand<IReadOnlyList<UploadSlotResponse>>;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandHandler.cs
new file mode 100644
index 0000000..6f57f77
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandHandler.cs
@@ -0,0 +1,15 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Uploads;
+
+namespace Eternelle.Modules.Album.Application.Photos.GenerateHostUploadSlots;
+
+internal sealed class GenerateHostUploadSlotsCommandHandler(
+    IAlbumUploadService uploadService)
+    : ICommandHandler<GenerateHostUploadSlotsCommand, IReadOnlyList<UploadSlotResponse>>
+{
+    public Task<Result<IReadOnlyList<UploadSlotResponse>>> Handle(
+        GenerateHostUploadSlotsCommand command,
+        CancellationToken cancellationToken)
+        => uploadService.GenerateSlotsAsync(command.WeddingId, command.Count, cancellationToken);
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandValidator.cs
new file mode 100644
index 0000000..18ad6c4
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Photos.GenerateHostUploadSlots;
+
+internal sealed class GenerateHostUploadSlotsCommandValidator : AbstractValidator<GenerateHostUploadSlotsCommand>
+{
+    public GenerateHostUploadSlotsCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.Count).InclusiveBetween(1, 30);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommand.cs
new file mode 100644
index 0000000..d7fbed2
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommand.cs
@@ -0,0 +1,10 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Album.Application.Uploads;
+
+namespace Eternelle.Modules.Album.Application.Photos.RegisterHostPhotos;
+
+public sealed record RegisterHostPhotosCommand(
+    Guid WeddingId,
+    Guid UploaderUserId,
+    string? DisplayName,
+    IReadOnlyList<PhotoRegistration> Photos) : ICommand<IReadOnlyList<Guid>>;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommandHandler.cs
new file mode 100644
index 0000000..b0b506c
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommandHandler.cs
@@ -0,0 +1,37 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Modules.Album.Application.Uploads;
+using Eternelle.Modules.Album.Domain.Photos;
+
+namespace Eternelle.Modules.Album.Application.Photos.RegisterHostPhotos;
+
+internal sealed class RegisterHostPhotosCommandHandler(
+    IAlbumUploadService uploadService)
+    : ICommandHandler<RegisterHostPhotosCommand, IReadOnlyList<Guid>>
+{
+    public async Task<Result<IReadOnlyList<Guid>>> Handle(
+        RegisterHostPhotosCommand command,
+        CancellationToken cancellationToken)
+    {
+        PersonName? defaultName = null;
+        if (!string.IsNullOrWhiteSpace(command.DisplayName))
+        {
+            Result<PersonName> nameResult = PersonName.Create(command.DisplayName);
+            if (nameResult.IsFailure)
+            {
+                return Result.Failure<IReadOnlyList<Guid>>(nameResult.Error);
+            }
+            defaultName = nameResult.Value;
+        }
+
+        return await uploadService.RegisterAsync(
+            command.WeddingId,
+            PhotoSource.Host,
+            guestId: null,
+            command.UploaderUserId,
+            defaultName,
+            command.Photos,
+            cancellationToken);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommandValidator.cs
new file mode 100644
index 0000000..ea22c31
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RegisterHostPhotos/RegisterHostPhotosCommandValidator.cs
@@ -0,0 +1,13 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Photos.RegisterHostPhotos;
+
+internal sealed class RegisterHostPhotosCommandValidator : AbstractValidator<RegisterHostPhotosCommand>
+{
+    public RegisterHostPhotosCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.UploaderUserId).NotEmpty();
+        RuleFor(c => c.Photos).NotEmpty();
+    }
+}

From d86ffae5a8e72091cbf9736ba40999ab096a6120 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:42:08 +0800
Subject: [PATCH 134/155] Eternelle-194 Add Album moderation, feed and settings
 handlers

---
 .../ApprovePhoto/ApprovePhotoCommand.cs       |  7 +++
 .../ApprovePhotoCommandHandler.cs             | 34 ++++++++++++
 .../ApprovePhotoCommandValidator.cs           | 12 +++++
 .../BulkApprovePhotosCommand.cs               |  7 +++
 .../BulkApprovePhotosCommandHandler.cs        | 39 ++++++++++++++
 .../BulkApprovePhotosCommandValidator.cs      | 12 +++++
 .../BulkDeletePhotosCommand.cs                |  7 +++
 .../BulkDeletePhotosCommandHandler.cs         | 31 +++++++++++
 .../BulkDeletePhotosCommandValidator.cs       | 12 +++++
 .../BulkRejectPhotosCommand.cs                |  7 +++
 .../BulkRejectPhotosCommandHandler.cs         | 39 ++++++++++++++
 .../BulkRejectPhotosCommandValidator.cs       | 12 +++++
 .../Photos/DeletePhoto/DeletePhotoCommand.cs  |  7 +++
 .../DeletePhoto/DeletePhotoCommandHandler.cs  | 27 ++++++++++
 .../DeletePhotoCommandValidator.cs            | 12 +++++
 .../Photos/GetFeed/FeedItem.cs                | 10 ++++
 .../Photos/GetFeed/GetFeedQuery.cs            |  8 +++
 .../Photos/GetFeed/GetFeedQueryHandler.cs     | 48 +++++++++++++++++
 .../Photos/GetPhotos/GetPhotosQuery.cs        | 12 +++++
 .../Photos/GetPhotos/GetPhotosQueryHandler.cs | 53 +++++++++++++++++++
 .../Photos/GetPhotos/PhotoItem.cs             | 12 +++++
 .../Photos/RejectPhoto/RejectPhotoCommand.cs  |  7 +++
 .../RejectPhoto/RejectPhotoCommandHandler.cs  | 34 ++++++++++++
 .../RejectPhotoCommandValidator.cs            | 12 +++++
 .../GetSettings/AlbumSettingsResponse.cs      |  9 ++++
 .../Settings/GetSettings/GetSettingsQuery.cs  |  5 ++
 .../GetSettings/GetSettingsQueryHandler.cs    | 32 +++++++++++
 .../SeedAlbumSettingsCommand.cs               |  5 ++
 .../SeedAlbumSettingsCommandHandler.cs        | 31 +++++++++++
 .../UpdateSettings/UpdateSettingsCommand.cs   |  9 ++++
 .../UpdateSettingsCommandHandler.cs           | 31 +++++++++++
 .../UpdateSettingsCommandValidator.cs         | 11 ++++
 32 files changed, 594 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommandValidator.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommandValidator.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/FeedItem.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQuery.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/GetPhotosQuery.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/GetPhotosQueryHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/PhotoItem.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommandValidator.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/AlbumSettingsResponse.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQuery.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQueryHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandValidator.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommand.cs
new file mode 100644
index 0000000..85908eb
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommand.cs
@@ -0,0 +1,7 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Photos.ApprovePhoto;
+
+public sealed record ApprovePhotoCommand(
+    Guid WeddingId,
+    Guid PhotoId) : ICommand;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommandHandler.cs
new file mode 100644
index 0000000..3db296f
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommandHandler.cs
@@ -0,0 +1,34 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Photos;
+
+namespace Eternelle.Modules.Album.Application.Photos.ApprovePhoto;
+
+internal sealed class ApprovePhotoCommandHandler(
+    IAlbumPhotoRepository photoRepository,
+    IDateTimeProvider dateTimeProvider,
+    IUnitOfWork unitOfWork)
+    : ICommandHandler<ApprovePhotoCommand>
+{
+    public async Task<Result> Handle(ApprovePhotoCommand command, CancellationToken cancellationToken)
+    {
+        AlbumPhoto? photo = await photoRepository.GetByIdAsync(new AlbumPhotoId(command.PhotoId), cancellationToken);
+
+        if (photo is null || photo.WeddingId != command.WeddingId)
+        {
+            return Result.Failure(AlbumPhotoErrors.NotFound(new AlbumPhotoId(command.PhotoId)));
+        }
+
+        Result result = photo.Approve(dateTimeProvider.UtcNow);
+        if (result.IsFailure)
+        {
+            return result;
+        }
+
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommandValidator.cs
new file mode 100644
index 0000000..3ec64d4
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/ApprovePhoto/ApprovePhotoCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Photos.ApprovePhoto;
+
+internal sealed class ApprovePhotoCommandValidator : AbstractValidator<ApprovePhotoCommand>
+{
+    public ApprovePhotoCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.PhotoId).NotEmpty();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommand.cs
new file mode 100644
index 0000000..1bbba59
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommand.cs
@@ -0,0 +1,7 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Photos.BulkApprovePhotos;
+
+public sealed record BulkApprovePhotosCommand(
+    Guid WeddingId,
+    IReadOnlyList<Guid> PhotoIds) : ICommand;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandHandler.cs
new file mode 100644
index 0000000..db8d60d
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandHandler.cs
@@ -0,0 +1,39 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Photos;
+
+namespace Eternelle.Modules.Album.Application.Photos.BulkApprovePhotos;
+
+internal sealed class BulkApprovePhotosCommandHandler(
+    IAlbumPhotoRepository photoRepository,
+    IDateTimeProvider dateTimeProvider,
+    IUnitOfWork unitOfWork)
+    : ICommandHandler<BulkApprovePhotosCommand>
+{
+    public async Task<Result> Handle(BulkApprovePhotosCommand command, CancellationToken cancellationToken)
+    {
+        DateTime now = dateTimeProvider.UtcNow;
+
+        foreach (Guid photoId in command.PhotoIds)
+        {
+            AlbumPhoto? photo = await photoRepository.GetByIdAsync(new AlbumPhotoId(photoId), cancellationToken);
+
+            if (photo is null || photo.WeddingId != command.WeddingId)
+            {
+                return Result.Failure(AlbumPhotoErrors.NotFound(new AlbumPhotoId(photoId)));
+            }
+
+            Result result = photo.Approve(now);
+            if (result.IsFailure)
+            {
+                return result;
+            }
+        }
+
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
new file mode 100644
index 0000000..ae429c8
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Photos.BulkApprovePhotos;
+
+internal sealed class BulkApprovePhotosCommandValidator : AbstractValidator<BulkApprovePhotosCommand>
+{
+    public BulkApprovePhotosCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.PhotoIds).NotEmpty();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommand.cs
new file mode 100644
index 0000000..8a61cc5
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommand.cs
@@ -0,0 +1,7 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Photos.BulkDeletePhotos;
+
+public sealed record BulkDeletePhotosCommand(
+    Guid WeddingId,
+    IReadOnlyList<Guid> PhotoIds) : ICommand;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandHandler.cs
new file mode 100644
index 0000000..f02b68e
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandHandler.cs
@@ -0,0 +1,31 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Photos;
+
+namespace Eternelle.Modules.Album.Application.Photos.BulkDeletePhotos;
+
+internal sealed class BulkDeletePhotosCommandHandler(
+    IAlbumPhotoRepository photoRepository,
+    IUnitOfWork unitOfWork)
+    : ICommandHandler<BulkDeletePhotosCommand>
+{
+    public async Task<Result> Handle(BulkDeletePhotosCommand command, CancellationToken cancellationToken)
+    {
+        foreach (Guid photoId in command.PhotoIds)
+        {
+            AlbumPhoto? photo = await photoRepository.GetByIdAsync(new AlbumPhotoId(photoId), cancellationToken);
+
+            if (photo is null || photo.WeddingId != command.WeddingId)
+            {
+                return Result.Failure(AlbumPhotoErrors.NotFound(new AlbumPhotoId(photoId)));
+            }
+
+            photoRepository.Remove(photo);
+        }
+
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
new file mode 100644
index 0000000..5766749
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Photos.BulkDeletePhotos;
+
+internal sealed class BulkDeletePhotosCommandValidator : AbstractValidator<BulkDeletePhotosCommand>
+{
+    public BulkDeletePhotosCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.PhotoIds).NotEmpty();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommand.cs
new file mode 100644
index 0000000..02f96bc
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommand.cs
@@ -0,0 +1,7 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Photos.BulkRejectPhotos;
+
+public sealed record BulkRejectPhotosCommand(
+    Guid WeddingId,
+    IReadOnlyList<Guid> PhotoIds) : ICommand;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandHandler.cs
new file mode 100644
index 0000000..d8935b2
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandHandler.cs
@@ -0,0 +1,39 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Photos;
+
+namespace Eternelle.Modules.Album.Application.Photos.BulkRejectPhotos;
+
+internal sealed class BulkRejectPhotosCommandHandler(
+    IAlbumPhotoRepository photoRepository,
+    IDateTimeProvider dateTimeProvider,
+    IUnitOfWork unitOfWork)
+    : ICommandHandler<BulkRejectPhotosCommand>
+{
+    public async Task<Result> Handle(BulkRejectPhotosCommand command, CancellationToken cancellationToken)
+    {
+        DateTime now = dateTimeProvider.UtcNow;
+
+        foreach (Guid photoId in command.PhotoIds)
+        {
+            AlbumPhoto? photo = await photoRepository.GetByIdAsync(new AlbumPhotoId(photoId), cancellationToken);
+
+            if (photo is null || photo.WeddingId != command.WeddingId)
+            {
+                return Result.Failure(AlbumPhotoErrors.NotFound(new AlbumPhotoId(photoId)));
+            }
+
+            Result result = photo.Reject(now);
+            if (result.IsFailure)
+            {
+                return result;
+            }
+        }
+
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
new file mode 100644
index 0000000..3e338a4
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Photos.BulkRejectPhotos;
+
+internal sealed class BulkRejectPhotosCommandValidator : AbstractValidator<BulkRejectPhotosCommand>
+{
+    public BulkRejectPhotosCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.PhotoIds).NotEmpty();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommand.cs
new file mode 100644
index 0000000..f7a480b
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommand.cs
@@ -0,0 +1,7 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Photos.DeletePhoto;
+
+public sealed record DeletePhotoCommand(
+    Guid WeddingId,
+    Guid PhotoId) : ICommand;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommandHandler.cs
new file mode 100644
index 0000000..8229a11
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommandHandler.cs
@@ -0,0 +1,27 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Photos;
+
+namespace Eternelle.Modules.Album.Application.Photos.DeletePhoto;
+
+internal sealed class DeletePhotoCommandHandler(
+    IAlbumPhotoRepository photoRepository,
+    IUnitOfWork unitOfWork)
+    : ICommandHandler<DeletePhotoCommand>
+{
+    public async Task<Result> Handle(DeletePhotoCommand command, CancellationToken cancellationToken)
+    {
+        AlbumPhoto? photo = await photoRepository.GetByIdAsync(new AlbumPhotoId(command.PhotoId), cancellationToken);
+
+        if (photo is null || photo.WeddingId != command.WeddingId)
+        {
+            return Result.Failure(AlbumPhotoErrors.NotFound(new AlbumPhotoId(command.PhotoId)));
+        }
+
+        photoRepository.Remove(photo);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommandValidator.cs
new file mode 100644
index 0000000..15726df
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/DeletePhoto/DeletePhotoCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Photos.DeletePhoto;
+
+internal sealed class DeletePhotoCommandValidator : AbstractValidator<DeletePhotoCommand>
+{
+    public DeletePhotoCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.PhotoId).NotEmpty();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/FeedItem.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/FeedItem.cs
new file mode 100644
index 0000000..d0abd6c
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/FeedItem.cs
@@ -0,0 +1,10 @@
+namespace Eternelle.Modules.Album.Application.Photos.GetFeed;
+
+public sealed record FeedItem(
+    Guid PhotoId,
+    string SrcUrl,
+    string? ThumbnailUrl,
+    int? WidthPx,
+    int? HeightPx,
+    string? UploaderName,
+    DateTime UploadedAt);
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQuery.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQuery.cs
new file mode 100644
index 0000000..c881fa8
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQuery.cs
@@ -0,0 +1,8 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Photos.GetFeed;
+
+public sealed record GetFeedQuery(
+    Guid WeddingId,
+    int Page,
+    int PageSize) : IQuery<IReadOnlyList<FeedItem>>;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryHandler.cs
new file mode 100644
index 0000000..260c1fa
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryHandler.cs
@@ -0,0 +1,48 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Album.Application.Photos.GetFeed;
+
+internal sealed class GetFeedQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetFeedQuery, IReadOnlyList<FeedItem>>
+{
+    public async Task<Result<IReadOnlyList<FeedItem>>> Handle(
+        GetFeedQuery query,
+        CancellationToken cancellationToken)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
+
+        const string sql =
+            $"""
+             SELECT
+                 id            AS {nameof(FeedItem.PhotoId)},
+                 src_url       AS {nameof(FeedItem.SrcUrl)},
+                 thumbnail_url AS {nameof(FeedItem.ThumbnailUrl)},
+                 width_px      AS {nameof(FeedItem.WidthPx)},
+                 height_px     AS {nameof(FeedItem.HeightPx)},
+                 uploader_name AS {nameof(FeedItem.UploaderName)},
+                 uploaded_at   AS {nameof(FeedItem.UploadedAt)}
+             FROM album.photos
+             WHERE wedding_id = @WeddingId
+               AND status = 1
+             ORDER BY uploaded_at DESC
+             LIMIT @Take OFFSET @Skip
+             """;
+
+        IEnumerable<FeedItem> rows = await connection.QueryAsync<FeedItem>(
+            new CommandDefinition(
+                sql,
+                new
+                {
+                    query.WeddingId,
+                    Take = query.PageSize,
+                    Skip = (query.Page - 1) * query.PageSize
+                },
+                cancellationToken: cancellationToken));
+
+        return Result.Success<IReadOnlyList<FeedItem>>([.. rows]);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/GetPhotosQuery.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/GetPhotosQuery.cs
new file mode 100644
index 0000000..9805a35
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/GetPhotosQuery.cs
@@ -0,0 +1,12 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Album.Domain.Photos;
+using Eternelle.Modules.Album.Domain.Settings;
+
+namespace Eternelle.Modules.Album.Application.Photos.GetPhotos;
+
+public sealed record GetPhotosQuery(
+    Guid WeddingId,
+    PhotoStatus? Status,
+    PhotoSource? Source,
+    int Page,
+    int PageSize) : IQuery<IReadOnlyList<PhotoItem>>;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/GetPhotosQueryHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/GetPhotosQueryHandler.cs
new file mode 100644
index 0000000..e3eac1a
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/GetPhotosQueryHandler.cs
@@ -0,0 +1,53 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+
+namespace Eternelle.Modules.Album.Application.Photos.GetPhotos;
+
+internal sealed class GetPhotosQueryHandler(IDbConnectionFactory dbConnectionFactory)
+    : IQueryHandler<GetPhotosQuery, IReadOnlyList<PhotoItem>>
+{
+    public async Task<Result<IReadOnlyList<PhotoItem>>> Handle(
+        GetPhotosQuery query,
+        CancellationToken cancellationToken)
+    {
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
+
+        const string sql =
+            $"""
+             SELECT
+                 id            AS {nameof(PhotoItem.PhotoId)},
+                 src_url       AS {nameof(PhotoItem.SrcUrl)},
+                 thumbnail_url AS {nameof(PhotoItem.ThumbnailUrl)},
+                 width_px      AS {nameof(PhotoItem.WidthPx)},
+                 height_px     AS {nameof(PhotoItem.HeightPx)},
+                 uploader_name AS {nameof(PhotoItem.UploaderName)},
+                 status        AS {nameof(PhotoItem.Status)},
+                 source        AS {nameof(PhotoItem.Source)},
+                 uploaded_at   AS {nameof(PhotoItem.UploadedAt)}
+             FROM album.photos
+             WHERE wedding_id = @WeddingId
+               AND (@Status IS NULL OR status = @Status)
+               AND (@Source IS NULL OR source = @Source)
+             ORDER BY uploaded_at DESC
+             LIMIT @Take OFFSET @Skip
+             """;
+
+        IEnumerable<PhotoItem> rows = await connection.QueryAsync<PhotoItem>(
+            new CommandDefinition(
+                sql,
+                new
+                {
+                    query.WeddingId,
+                    Status = (int?)query.Status,
+                    Source = (int?)query.Source,
+                    Take = query.PageSize,
+                    Skip = (query.Page - 1) * query.PageSize
+                },
+                cancellationToken: cancellationToken));
+
+        return Result.Success<IReadOnlyList<PhotoItem>>([.. rows]);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/PhotoItem.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/PhotoItem.cs
new file mode 100644
index 0000000..83c6f75
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetPhotos/PhotoItem.cs
@@ -0,0 +1,12 @@
+namespace Eternelle.Modules.Album.Application.Photos.GetPhotos;
+
+public sealed record PhotoItem(
+    Guid PhotoId,
+    string SrcUrl,
+    string? ThumbnailUrl,
+    int? WidthPx,
+    int? HeightPx,
+    string? UploaderName,
+    int Status,
+    int Source,
+    DateTime UploadedAt);
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommand.cs
new file mode 100644
index 0000000..85a4ec4
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommand.cs
@@ -0,0 +1,7 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Photos.RejectPhoto;
+
+public sealed record RejectPhotoCommand(
+    Guid WeddingId,
+    Guid PhotoId) : ICommand;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommandHandler.cs
new file mode 100644
index 0000000..e33987c
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommandHandler.cs
@@ -0,0 +1,34 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Photos;
+
+namespace Eternelle.Modules.Album.Application.Photos.RejectPhoto;
+
+internal sealed class RejectPhotoCommandHandler(
+    IAlbumPhotoRepository photoRepository,
+    IDateTimeProvider dateTimeProvider,
+    IUnitOfWork unitOfWork)
+    : ICommandHandler<RejectPhotoCommand>
+{
+    public async Task<Result> Handle(RejectPhotoCommand command, CancellationToken cancellationToken)
+    {
+        AlbumPhoto? photo = await photoRepository.GetByIdAsync(new AlbumPhotoId(command.PhotoId), cancellationToken);
+
+        if (photo is null || photo.WeddingId != command.WeddingId)
+        {
+            return Result.Failure(AlbumPhotoErrors.NotFound(new AlbumPhotoId(command.PhotoId)));
+        }
+
+        Result result = photo.Reject(dateTimeProvider.UtcNow);
+        if (result.IsFailure)
+        {
+            return result;
+        }
+
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommandValidator.cs
new file mode 100644
index 0000000..baf3b12
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/RejectPhoto/RejectPhotoCommandValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Photos.RejectPhoto;
+
+internal sealed class RejectPhotoCommandValidator : AbstractValidator<RejectPhotoCommand>
+{
+    public RejectPhotoCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.PhotoId).NotEmpty();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/AlbumSettingsResponse.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/AlbumSettingsResponse.cs
new file mode 100644
index 0000000..418c223
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/AlbumSettingsResponse.cs
@@ -0,0 +1,9 @@
+namespace Eternelle.Modules.Album.Application.Settings.GetSettings;
+
+public sealed record AlbumSettingsResponse(
+    Guid WeddingId,
+    int ModerationMode,
+    bool IsEnabled,
+    bool IsClosed,
+    int? UploadLimit,
+    DateTime UpdatedAtUtc);
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQuery.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQuery.cs
new file mode 100644
index 0000000..2c8f53c
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQuery.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Settings.GetSettings;
+
+public sealed record GetSettingsQuery(Guid WeddingId) : IQuery<AlbumSettingsResponse>;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQueryHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQueryHandler.cs
new file mode 100644
index 0000000..3fe60c3
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQueryHandler.cs
@@ -0,0 +1,32 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Domain.Settings;
+
+namespace Eternelle.Modules.Album.Application.Settings.GetSettings;
+
+internal sealed class GetSettingsQueryHandler(IAlbumSettingsRepository settingsRepository)
+    : IQueryHandler<GetSettingsQuery, AlbumSettingsResponse>
+{
+    public async Task<Result<AlbumSettingsResponse>> Handle(
+        GetSettingsQuery query,
+        CancellationToken cancellationToken)
+    {
+        AlbumSettings? settings = await settingsRepository.GetByWeddingIdAsync(query.WeddingId, cancellationToken);
+
+        if (settings is null)
+        {
+            return Result.Failure<AlbumSettingsResponse>(
+                Error.NotFound("Album.Settings.NotFound", $"Album settings for wedding '{query.WeddingId}' were not found."));
+        }
+
+        var response = new AlbumSettingsResponse(
+            settings.WeddingId,
+            (int)settings.ModerationMode,
+            settings.IsEnabled,
+            settings.IsClosed,
+            settings.UploadLimit,
+            settings.UpdatedAtUtc);
+
+        return Result.Success(response);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommand.cs
new file mode 100644
index 0000000..1d9a261
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Settings.SeedAlbumSettings;
+
+public sealed record SeedAlbumSettingsCommand(Guid WeddingId) : ICommand;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommandHandler.cs
new file mode 100644
index 0000000..6a5fae9
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommandHandler.cs
@@ -0,0 +1,31 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Settings;
+
+namespace Eternelle.Modules.Album.Application.Settings.SeedAlbumSettings;
+
+internal sealed class SeedAlbumSettingsCommandHandler(
+    IAlbumSettingsRepository settingsRepository,
+    IDateTimeProvider dateTimeProvider,
+    IUnitOfWork unitOfWork)
+    : ICommandHandler<SeedAlbumSettingsCommand>
+{
+    public async Task<Result> Handle(SeedAlbumSettingsCommand command, CancellationToken cancellationToken)
+    {
+        AlbumSettings? existing = await settingsRepository.GetByWeddingIdAsync(command.WeddingId, cancellationToken);
+
+        if (existing is not null)
+        {
+            // Idempotent — settings already seeded for this wedding.
+            return Result.Success();
+        }
+
+        var settings = AlbumSettings.SeedFor(command.WeddingId, dateTimeProvider.UtcNow);
+        settingsRepository.Insert(settings);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommand.cs
new file mode 100644
index 0000000..a05ca81
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommand.cs
@@ -0,0 +1,9 @@
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Modules.Album.Domain.Settings;
+
+namespace Eternelle.Modules.Album.Application.Settings.UpdateSettings;
+
+public sealed record UpdateSettingsCommand(
+    Guid WeddingId,
+    ModerationMode ModerationMode,
+    bool IsEnabled) : ICommand;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandHandler.cs
new file mode 100644
index 0000000..9340b1d
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandHandler.cs
@@ -0,0 +1,31 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Settings;
+
+namespace Eternelle.Modules.Album.Application.Settings.UpdateSettings;
+
+internal sealed class UpdateSettingsCommandHandler(
+    IAlbumSettingsRepository settingsRepository,
+    IDateTimeProvider dateTimeProvider,
+    IUnitOfWork unitOfWork)
+    : ICommandHandler<UpdateSettingsCommand>
+{
+    public async Task<Result> Handle(UpdateSettingsCommand command, CancellationToken cancellationToken)
+    {
+        AlbumSettings? settings = await settingsRepository.GetByWeddingIdAsync(command.WeddingId, cancellationToken);
+
+        if (settings is null)
+        {
+            return Result.Failure(
+                Error.NotFound("Album.Settings.NotFound", $"Album settings for wedding '{command.WeddingId}' were not found."));
+        }
+
+        settings.Update(command.ModerationMode, command.IsEnabled, dateTimeProvider.UtcNow);
+
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandValidator.cs
new file mode 100644
index 0000000..44c7984
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandValidator.cs
@@ -0,0 +1,11 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Settings.UpdateSettings;
+
+internal sealed class UpdateSettingsCommandValidator : AbstractValidator<UpdateSettingsCommand>
+{
+    public UpdateSettingsCommandValidator()
+    {
+        RuleFor(c => c.WeddingId).NotEmpty();
+    }
+}

From 93c2dacf4ed1fc8ba3f78008598653b21f2cd1b7 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:49:55 +0800
Subject: [PATCH 135/155] Eternelle-194 Add Album tags and rate-limit policy
 names

---
 .../RateLimitingPolicies.cs                               | 8 ++++++++
 .../Album/Eternelle.Modules.Album.Presentation/Tags.cs    | 6 ++++++
 2 files changed, 14 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/RateLimitingPolicies.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Tags.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/RateLimitingPolicies.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/RateLimitingPolicies.cs
new file mode 100644
index 0000000..e98ac26
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/RateLimitingPolicies.cs
@@ -0,0 +1,8 @@
+namespace Eternelle.Modules.Album.Presentation;
+
+public static class RateLimitingPolicies
+{
+    public const string UploadContext = "album-upload-context";
+    public const string Presign = "album-presign";
+    public const string Register = "album-register";
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Tags.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Tags.cs
new file mode 100644
index 0000000..773b299
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Tags.cs
@@ -0,0 +1,6 @@
+namespace Eternelle.Modules.Album.Presentation;
+
+internal static class Tags
+{
+    internal const string Album = "Album";
+}

From 4e77f43fb220d63120322f5cb529d898848708b1 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:51:25 +0800
Subject: [PATCH 136/155] Eternelle-194 Add Album guest endpoints

---
 .../Public/DeleteOwnPhotoEndpoint.cs          | 30 ++++++++++++++++
 .../GenerateGuestUploadSlotsEndpoint.cs       | 34 ++++++++++++++++++
 .../Public/GetUploadContextEndpoint.cs        | 29 +++++++++++++++
 .../Public/RegisterGuestPhotosEndpoint.cs     | 36 +++++++++++++++++++
 4 files changed, 129 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/DeleteOwnPhotoEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/GenerateGuestUploadSlotsEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/GetUploadContextEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/RegisterGuestPhotosEndpoint.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/DeleteOwnPhotoEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/DeleteOwnPhotoEndpoint.cs
new file mode 100644
index 0000000..44fcc2b
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/DeleteOwnPhotoEndpoint.cs
@@ -0,0 +1,30 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Invitees.DeleteOwnPhoto;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Public;
+
+internal sealed class DeleteOwnPhotoEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapDelete("album/{lookupCode}/photos/{photoId:guid}", async (
+            string lookupCode,
+            Guid photoId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(new DeleteOwnPhotoCommand(lookupCode, photoId), ct);
+
+            return result.Match(() => Results.NoContent(), ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .AllowAnonymous()
+        .RequireRateLimiting(RateLimitingPolicies.Register);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/GenerateGuestUploadSlotsEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/GenerateGuestUploadSlotsEndpoint.cs
new file mode 100644
index 0000000..959424f
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/GenerateGuestUploadSlotsEndpoint.cs
@@ -0,0 +1,34 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Invitees.GenerateGuestUploadSlots;
+using Eternelle.Modules.Album.Application.Uploads;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Public;
+
+internal sealed class GenerateGuestUploadSlotsEndpoint : IEndpoint
+{
+    internal sealed record Request(int Count);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("album/{lookupCode}/presign", async (
+            string lookupCode,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result<IReadOnlyList<UploadSlotResponse>> result = await sender.Send(
+                new GenerateGuestUploadSlotsCommand(lookupCode, request.Count), ct);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .AllowAnonymous()
+        .RequireRateLimiting(RateLimitingPolicies.Presign);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/GetUploadContextEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/GetUploadContextEndpoint.cs
new file mode 100644
index 0000000..2a6ca59
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/GetUploadContextEndpoint.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Invitees.GetUploadContext;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Public;
+
+internal sealed class GetUploadContextEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("album/{lookupCode}", async (
+            string lookupCode,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result<UploadContextResponse> result = await sender.Send(new GetUploadContextQuery(lookupCode), ct);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .AllowAnonymous()
+        .RequireRateLimiting(RateLimitingPolicies.UploadContext);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/RegisterGuestPhotosEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/RegisterGuestPhotosEndpoint.cs
new file mode 100644
index 0000000..90200c8
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Public/RegisterGuestPhotosEndpoint.cs
@@ -0,0 +1,36 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Invitees.RegisterGuestPhotos;
+using Eternelle.Modules.Album.Application.Uploads;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Public;
+
+internal sealed class RegisterGuestPhotosEndpoint : IEndpoint
+{
+    internal sealed record Request(IReadOnlyList<PhotoRegistration> Photos);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("album/{lookupCode}/photos", async (
+            string lookupCode,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result<IReadOnlyList<Guid>> result = await sender.Send(
+                new RegisterGuestPhotosCommand(lookupCode, request.Photos), ct);
+
+            return result.Match(
+                ids => Results.Ok(new { photoIds = ids }),
+                ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .AllowAnonymous()
+        .RequireRateLimiting(RateLimitingPolicies.Register);
+    }
+}

From 56a7b8ab3d03ba6968813942fe07b2dac6c20a40 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:53:42 +0800
Subject: [PATCH 137/155] Eternelle-194 Add Album host, moderation, feed and
 settings endpoints

---
 .../Photos/ApprovePhotoEndpoint.cs            | 29 ++++++++++++++
 .../Photos/BulkApprovePhotosEndpoint.cs       | 31 +++++++++++++++
 .../Photos/BulkDeletePhotosEndpoint.cs        | 31 +++++++++++++++
 .../Photos/BulkRejectPhotosEndpoint.cs        | 31 +++++++++++++++
 .../Photos/DeletePhotoEndpoint.cs             | 29 ++++++++++++++
 .../Photos/GenerateHostUploadSlotsEndpoint.cs | 33 ++++++++++++++++
 .../Photos/GetFeedEndpoint.cs                 | 39 +++++++++++++++++++
 .../Photos/GetPhotosEndpoint.cs               | 34 ++++++++++++++++
 .../Photos/RegisterHostPhotosEndpoint.cs      | 39 +++++++++++++++++++
 .../Photos/RejectPhotoEndpoint.cs             | 29 ++++++++++++++
 .../Settings/GetSettingsEndpoint.cs           | 28 +++++++++++++
 .../Settings/UpdateSettingsEndpoint.cs        | 33 ++++++++++++++++
 12 files changed, 386 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/ApprovePhotoEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkApprovePhotosEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkDeletePhotosEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkRejectPhotosEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/DeletePhotoEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GenerateHostUploadSlotsEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GetFeedEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GetPhotosEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/RegisterHostPhotosEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/RejectPhotoEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Settings/GetSettingsEndpoint.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Settings/UpdateSettingsEndpoint.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/ApprovePhotoEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/ApprovePhotoEndpoint.cs
new file mode 100644
index 0000000..c8e94a1
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/ApprovePhotoEndpoint.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Photos.ApprovePhoto;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Photos;
+
+internal sealed class ApprovePhotoEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("weddings/{weddingId:guid}/album/photos/{photoId:guid}/approve", async (
+            Guid weddingId,
+            Guid photoId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(new ApprovePhotoCommand(weddingId, photoId), ct);
+
+            return result.Match(() => Results.Ok(), ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .RequireAuthorization("album:manage");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkApprovePhotosEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkApprovePhotosEndpoint.cs
new file mode 100644
index 0000000..fea7a65
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkApprovePhotosEndpoint.cs
@@ -0,0 +1,31 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Photos.BulkApprovePhotos;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Photos;
+
+internal sealed class BulkApprovePhotosEndpoint : IEndpoint
+{
+    internal sealed record Request(IReadOnlyList<Guid> PhotoIds);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("weddings/{weddingId:guid}/album/photos/approve-bulk", async (
+            Guid weddingId,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(new BulkApprovePhotosCommand(weddingId, request.PhotoIds), ct);
+
+            return result.Match(() => Results.Ok(), ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .RequireAuthorization("album:manage");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkDeletePhotosEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkDeletePhotosEndpoint.cs
new file mode 100644
index 0000000..b8aadf9
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkDeletePhotosEndpoint.cs
@@ -0,0 +1,31 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Photos.BulkDeletePhotos;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Photos;
+
+internal sealed class BulkDeletePhotosEndpoint : IEndpoint
+{
+    internal sealed record Request(IReadOnlyList<Guid> PhotoIds);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapDelete("weddings/{weddingId:guid}/album/photos/bulk", async (
+            Guid weddingId,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(new BulkDeletePhotosCommand(weddingId, request.PhotoIds), ct);
+
+            return result.Match(() => Results.NoContent(), ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .RequireAuthorization("album:manage");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkRejectPhotosEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkRejectPhotosEndpoint.cs
new file mode 100644
index 0000000..4207c50
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkRejectPhotosEndpoint.cs
@@ -0,0 +1,31 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Photos.BulkRejectPhotos;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Photos;
+
+internal sealed class BulkRejectPhotosEndpoint : IEndpoint
+{
+    internal sealed record Request(IReadOnlyList<Guid> PhotoIds);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("weddings/{weddingId:guid}/album/photos/reject-bulk", async (
+            Guid weddingId,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(new BulkRejectPhotosCommand(weddingId, request.PhotoIds), ct);
+
+            return result.Match(() => Results.Ok(), ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .RequireAuthorization("album:manage");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/DeletePhotoEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/DeletePhotoEndpoint.cs
new file mode 100644
index 0000000..4c13aa3
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/DeletePhotoEndpoint.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Photos.DeletePhoto;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Photos;
+
+internal sealed class DeletePhotoEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapDelete("weddings/{weddingId:guid}/album/photos/{photoId:guid}", async (
+            Guid weddingId,
+            Guid photoId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(new DeletePhotoCommand(weddingId, photoId), ct);
+
+            return result.Match(() => Results.NoContent(), ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .RequireAuthorization("album:manage");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GenerateHostUploadSlotsEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GenerateHostUploadSlotsEndpoint.cs
new file mode 100644
index 0000000..24a1d7e
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GenerateHostUploadSlotsEndpoint.cs
@@ -0,0 +1,33 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Photos.GenerateHostUploadSlots;
+using Eternelle.Modules.Album.Application.Uploads;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Photos;
+
+internal sealed class GenerateHostUploadSlotsEndpoint : IEndpoint
+{
+    internal sealed record Request(int Count);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("weddings/{weddingId:guid}/album/presign", async (
+            Guid weddingId,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result<IReadOnlyList<UploadSlotResponse>> result = await sender.Send(
+                new GenerateHostUploadSlotsCommand(weddingId, request.Count), ct);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .RequireAuthorization("album:manage");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GetFeedEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GetFeedEndpoint.cs
new file mode 100644
index 0000000..3fed62c
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GetFeedEndpoint.cs
@@ -0,0 +1,39 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Photos.GetFeed;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+using Microsoft.Net.Http.Headers;
+
+namespace Eternelle.Modules.Album.Presentation.Photos;
+
+internal sealed class GetFeedEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("weddings/{weddingId:guid}/album/feed", async (
+            Guid weddingId,
+            int page,
+            int pageSize,
+            ISender sender,
+            HttpContext httpContext,
+            CancellationToken ct) =>
+        {
+            Result<IReadOnlyList<FeedItem>> result = await sender.Send(
+                new GetFeedQuery(weddingId, page, pageSize), ct);
+
+            return result.Match(
+                feed =>
+                {
+                    httpContext.Response.Headers.CacheControl = "public, max-age=30";
+                    return Results.Ok(feed);
+                },
+                ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .AllowAnonymous();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GetPhotosEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GetPhotosEndpoint.cs
new file mode 100644
index 0000000..e366341
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/GetPhotosEndpoint.cs
@@ -0,0 +1,34 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Photos.GetPhotos;
+using Eternelle.Modules.Album.Domain.Photos;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Photos;
+
+internal sealed class GetPhotosEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("weddings/{weddingId:guid}/album/photos", async (
+            Guid weddingId,
+            PhotoStatus? status,
+            PhotoSource? source,
+            int page,
+            int pageSize,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result<IReadOnlyList<PhotoItem>> result = await sender.Send(
+                new GetPhotosQuery(weddingId, status, source, page, pageSize), ct);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .RequireAuthorization("album:manage");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/RegisterHostPhotosEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/RegisterHostPhotosEndpoint.cs
new file mode 100644
index 0000000..c01f1b7
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/RegisterHostPhotosEndpoint.cs
@@ -0,0 +1,39 @@
+using Eternelle.Common.Application.Authentication;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Photos.RegisterHostPhotos;
+using Eternelle.Modules.Album.Application.Uploads;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Photos;
+
+internal sealed class RegisterHostPhotosEndpoint : IEndpoint
+{
+    internal sealed record Request(string? DisplayName, IReadOnlyList<PhotoRegistration> Photos);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("weddings/{weddingId:guid}/album/photos", async (
+            Guid weddingId,
+            Request request,
+            ISender sender,
+            HttpContext httpContext,
+            CancellationToken ct) =>
+        {
+            Guid uploaderUserId = httpContext.User.GetUserId();
+
+            Result<IReadOnlyList<Guid>> result = await sender.Send(
+                new RegisterHostPhotosCommand(weddingId, uploaderUserId, request.DisplayName, request.Photos), ct);
+
+            return result.Match(
+                ids => Results.Ok(new { photoIds = ids }),
+                ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .RequireAuthorization("album:manage");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/RejectPhotoEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/RejectPhotoEndpoint.cs
new file mode 100644
index 0000000..8a48a15
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/RejectPhotoEndpoint.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Photos.RejectPhoto;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Photos;
+
+internal sealed class RejectPhotoEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("weddings/{weddingId:guid}/album/photos/{photoId:guid}/reject", async (
+            Guid weddingId,
+            Guid photoId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(new RejectPhotoCommand(weddingId, photoId), ct);
+
+            return result.Match(() => Results.Ok(), ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .RequireAuthorization("album:manage");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Settings/GetSettingsEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Settings/GetSettingsEndpoint.cs
new file mode 100644
index 0000000..42ca1c0
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Settings/GetSettingsEndpoint.cs
@@ -0,0 +1,28 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Settings.GetSettings;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Settings;
+
+internal sealed class GetSettingsEndpoint : IEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapGet("weddings/{weddingId:guid}/album/settings", async (
+            Guid weddingId,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result<AlbumSettingsResponse> result = await sender.Send(new GetSettingsQuery(weddingId), ct);
+
+            return result.Match(Results.Ok, ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .RequireAuthorization("album:manage");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Settings/UpdateSettingsEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Settings/UpdateSettingsEndpoint.cs
new file mode 100644
index 0000000..5f6a70f
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Settings/UpdateSettingsEndpoint.cs
@@ -0,0 +1,33 @@
+using Eternelle.Common.Domain;
+using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Common.Presentation.Results;
+using Eternelle.Modules.Album.Application.Settings.UpdateSettings;
+using Eternelle.Modules.Album.Domain.Settings;
+using MediatR;
+using Microsoft.AspNetCore.Builder;
+using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Routing;
+
+namespace Eternelle.Modules.Album.Presentation.Settings;
+
+internal sealed class UpdateSettingsEndpoint : IEndpoint
+{
+    internal sealed record Request(ModerationMode ModerationMode, bool IsEnabled);
+
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPut("weddings/{weddingId:guid}/album/settings", async (
+            Guid weddingId,
+            Request request,
+            ISender sender,
+            CancellationToken ct) =>
+        {
+            Result result = await sender.Send(
+                new UpdateSettingsCommand(weddingId, request.ModerationMode, request.IsEnabled), ct);
+
+            return result.Match(() => Results.Ok(), ApiResults.Problem);
+        })
+        .WithTags(Tags.Album)
+        .RequireAuthorization("album:manage");
+    }
+}

From bf51bfe58a581d25fadc86e875fd60c92b2af226 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 13:57:34 +0800
Subject: [PATCH 138/155] Eternelle-194 Consume wedding, tenant and RSVP guest
 events in Album

Store TenantId on AlbumSettings so the upload-limit changed event (which
carries TenantId) can locate the right settings row. Adds
GetByTenantIdAsync to IAlbumSettingsRepository and a new
UpdateUploadLimitCommand. Guest added/removed/lookup-code-regenerated
events mirror the invitee list directly via repository injection.
---
 .../SeedAlbumSettingsCommand.cs               |  2 +-
 .../SeedAlbumSettingsCommandHandler.cs        |  2 +-
 .../UpdateUploadLimitCommand.cs               |  5 ++
 .../UpdateUploadLimitCommandHandler.cs        | 30 +++++++++
 .../Settings/AlbumSettings.cs                 |  4 +-
 .../Settings/IAlbumSettingsRepository.cs      |  1 +
 .../Settings/AlbumSettingsConfiguration.cs    |  5 ++
 .../Settings/AlbumSettingsRepository.cs       |  3 +
 .../Rsvp/GuestAddedIntegrationEventHandler.cs | 63 +++++++++++++++++++
 ...pCodeRegeneratedIntegrationEventHandler.cs | 38 +++++++++++
 .../GuestRemovedIntegrationEventHandler.cs    | 29 +++++++++
 ...loadLimitChangedIntegrationEventHandler.cs | 19 ++++++
 .../WeddingCreatedIntegrationEventHandler.cs  | 19 ++++++
 13 files changed, 217 insertions(+), 3 deletions(-)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommand.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestAddedIntegrationEventHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestRemovedIntegrationEventHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Weddings/WeddingCreatedIntegrationEventHandler.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommand.cs
index 1d9a261..5c5e387 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommand.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommand.cs
@@ -2,4 +2,4 @@
 
 namespace Eternelle.Modules.Album.Application.Settings.SeedAlbumSettings;
 
-public sealed record SeedAlbumSettingsCommand(Guid WeddingId) : ICommand;
+public sealed record SeedAlbumSettingsCommand(Guid WeddingId, Guid TenantId) : ICommand;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommandHandler.cs
index 6a5fae9..e3ef00c 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommandHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/SeedAlbumSettings/SeedAlbumSettingsCommandHandler.cs
@@ -22,7 +22,7 @@ public async Task<Result> Handle(SeedAlbumSettingsCommand command, CancellationT
             return Result.Success();
         }
 
-        var settings = AlbumSettings.SeedFor(command.WeddingId, dateTimeProvider.UtcNow);
+        var settings = AlbumSettings.SeedFor(command.WeddingId, command.TenantId, dateTimeProvider.UtcNow);
         settingsRepository.Insert(settings);
         await unitOfWork.SaveChangesAsync(cancellationToken);
 
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommand.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommand.cs
new file mode 100644
index 0000000..72f6f67
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommand.cs
@@ -0,0 +1,5 @@
+using Eternelle.Common.Application.Messaging;
+
+namespace Eternelle.Modules.Album.Application.Settings.UpdateUploadLimit;
+
+public sealed record UpdateUploadLimitCommand(Guid TenantId, int? NewLimit) : ICommand;
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandHandler.cs
new file mode 100644
index 0000000..a42cd1d
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandHandler.cs
@@ -0,0 +1,30 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.Messaging;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Settings;
+
+namespace Eternelle.Modules.Album.Application.Settings.UpdateUploadLimit;
+
+internal sealed class UpdateUploadLimitCommandHandler(
+    IAlbumSettingsRepository settingsRepository,
+    IDateTimeProvider dateTimeProvider,
+    IUnitOfWork unitOfWork)
+    : ICommandHandler<UpdateUploadLimitCommand>
+{
+    public async Task<Result> Handle(UpdateUploadLimitCommand command, CancellationToken cancellationToken)
+    {
+        AlbumSettings? settings = await settingsRepository.GetByTenantIdAsync(command.TenantId, cancellationToken);
+
+        if (settings is null)
+        {
+            // WeddingCreated not yet processed — silently ignore.
+            return Result.Success();
+        }
+
+        settings.SetUploadLimit(command.NewLimit, dateTimeProvider.UtcNow);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+
+        return Result.Success();
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/AlbumSettings.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/AlbumSettings.cs
index be3fa90..16ceb57 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/AlbumSettings.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/AlbumSettings.cs
@@ -7,6 +7,7 @@ public sealed class AlbumSettings : Entity
     private AlbumSettings() { }
 
     public Guid WeddingId { get; private set; }
+    public Guid TenantId { get; private set; }
     public ModerationMode ModerationMode { get; private set; }
     public bool IsEnabled { get; private set; }
     public bool IsClosed { get; private set; }
@@ -14,9 +15,10 @@ private AlbumSettings() { }
     public DateTime CreatedAtUtc { get; private set; }
     public DateTime UpdatedAtUtc { get; private set; }
 
-    public static AlbumSettings SeedFor(Guid weddingId, DateTime utcNow) => new()
+    public static AlbumSettings SeedFor(Guid weddingId, Guid tenantId, DateTime utcNow) => new()
     {
         WeddingId = weddingId,
+        TenantId = tenantId,
         ModerationMode = ModerationMode.Auto,
         IsEnabled = true,
         IsClosed = false,
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs
index 7ea0ae2..fb0fc14 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs
@@ -3,5 +3,6 @@ namespace Eternelle.Modules.Album.Domain.Settings;
 public interface IAlbumSettingsRepository
 {
     Task<AlbumSettings?> GetByWeddingIdAsync(Guid weddingId, CancellationToken cancellationToken);
+    Task<AlbumSettings?> GetByTenantIdAsync(Guid tenantId, CancellationToken cancellationToken);
     void Insert(AlbumSettings settings);
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
index 66bfd30..c9a33e6 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
@@ -16,6 +16,11 @@ public void Configure(EntityTypeBuilder<AlbumSettings> builder)
             .HasColumnName("wedding_id")
             .IsRequired();
 
+        builder.Property(s => s.TenantId)
+            .HasColumnName("tenant_id")
+            .IsRequired();
+        builder.HasIndex(s => s.TenantId).IsUnique();
+
         builder.Property(s => s.ModerationMode)
             .HasConversion<int>()
             .HasColumnName("moderation_mode")
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs
index 3336afc..040d68b 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs
@@ -9,5 +9,8 @@ internal sealed class AlbumSettingsRepository(AlbumDbContext context) : IAlbumSe
     public Task<AlbumSettings?> GetByWeddingIdAsync(Guid weddingId, CancellationToken cancellationToken) =>
         context.AlbumSettings.SingleOrDefaultAsync(s => s.WeddingId == weddingId, cancellationToken);
 
+    public Task<AlbumSettings?> GetByTenantIdAsync(Guid tenantId, CancellationToken cancellationToken) =>
+        context.AlbumSettings.SingleOrDefaultAsync(s => s.TenantId == tenantId, cancellationToken);
+
     public void Insert(AlbumSettings settings) => context.AlbumSettings.Add(settings);
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestAddedIntegrationEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestAddedIntegrationEventHandler.cs
new file mode 100644
index 0000000..0f02684
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestAddedIntegrationEventHandler.cs
@@ -0,0 +1,63 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Domain;
+using Eternelle.Common.Domain.People;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Shared;
+using Eternelle.Modules.Rsvp.IntegrationEvents.Guests;
+
+namespace Eternelle.Modules.Album.Presentation.Rsvp;
+
+internal sealed class GuestAddedIntegrationEventHandler(
+    IInviteeRepository inviteeRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider dateTimeProvider)
+    : IntegrationEventHandler<GuestAddedIntegrationEvent>
+{
+    public override async Task Handle(
+        GuestAddedIntegrationEvent integrationEvent,
+        CancellationToken cancellationToken = default)
+    {
+        // Idempotency — skip if already inserted.
+        Invitee? existing = await inviteeRepository.GetByGuestIdAsync(integrationEvent.GuestId, cancellationToken);
+        if (existing is not null)
+        {
+            return;
+        }
+
+        Result<PersonFirstName> firstNameResult = PersonFirstName.Create(integrationEvent.FirstName);
+        Result<PersonLastName> lastNameResult = PersonLastName.Create(integrationEvent.LastName);
+        Result<LookupCode> lookupCodeResult = LookupCode.Create(integrationEvent.LookupCode);
+
+        // Data from RSVP has already been validated — failures indicate data corruption.
+        if (firstNameResult.IsFailure)
+        {
+            throw new InvalidOperationException(
+                $"Invalid first name in GuestAddedIntegrationEvent for guest {integrationEvent.GuestId}: {firstNameResult.Error.Description}");
+        }
+
+        if (lastNameResult.IsFailure)
+        {
+            throw new InvalidOperationException(
+                $"Invalid last name in GuestAddedIntegrationEvent for guest {integrationEvent.GuestId}: {lastNameResult.Error.Description}");
+        }
+
+        if (lookupCodeResult.IsFailure)
+        {
+            throw new InvalidOperationException(
+                $"Invalid lookup code in GuestAddedIntegrationEvent for guest {integrationEvent.GuestId}: {lookupCodeResult.Error.Description}");
+        }
+
+        var invitee = Invitee.Create(
+            integrationEvent.GuestId,
+            integrationEvent.WeddingId,
+            firstNameResult.Value,
+            lastNameResult.Value,
+            lookupCodeResult.Value,
+            dateTimeProvider.UtcNow);
+
+        inviteeRepository.Insert(invitee);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
new file mode 100644
index 0000000..ba5a052
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
@@ -0,0 +1,38 @@
+using Eternelle.Common.Application.Clock;
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Shared;
+using Eternelle.Modules.Rsvp.IntegrationEvents.Guests;
+
+namespace Eternelle.Modules.Album.Presentation.Rsvp;
+
+internal sealed class GuestLookupCodeRegeneratedIntegrationEventHandler(
+    IInviteeRepository inviteeRepository,
+    IUnitOfWork unitOfWork,
+    IDateTimeProvider dateTimeProvider)
+    : IntegrationEventHandler<GuestLookupCodeRegeneratedIntegrationEvent>
+{
+    public override async Task Handle(
+        GuestLookupCodeRegeneratedIntegrationEvent integrationEvent,
+        CancellationToken cancellationToken = default)
+    {
+        Invitee? invitee = await inviteeRepository.GetByGuestIdAsync(integrationEvent.GuestId, cancellationToken);
+        if (invitee is null)
+        {
+            // GuestAdded not yet processed — silently ignore.
+            return;
+        }
+
+        Result<LookupCode> codeResult = LookupCode.Create(integrationEvent.NewLookupCode);
+        if (codeResult.IsFailure)
+        {
+            throw new InvalidOperationException(
+                $"Invalid lookup code in GuestLookupCodeRegeneratedIntegrationEvent for guest {integrationEvent.GuestId}: {codeResult.Error.Description}");
+        }
+
+        invitee.ChangeLookupCode(codeResult.Value, dateTimeProvider.UtcNow);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestRemovedIntegrationEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestRemovedIntegrationEventHandler.cs
new file mode 100644
index 0000000..411091a
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestRemovedIntegrationEventHandler.cs
@@ -0,0 +1,29 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Modules.Album.Application.Abstractions.Data;
+using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Photos;
+using Eternelle.Modules.Rsvp.IntegrationEvents.Guests;
+
+namespace Eternelle.Modules.Album.Presentation.Rsvp;
+
+internal sealed class GuestRemovedIntegrationEventHandler(
+    IInviteeRepository inviteeRepository,
+    IAlbumPhotoRepository photoRepository,
+    IUnitOfWork unitOfWork)
+    : IntegrationEventHandler<GuestRemovedIntegrationEvent>
+{
+    public override async Task Handle(
+        GuestRemovedIntegrationEvent integrationEvent,
+        CancellationToken cancellationToken = default)
+    {
+        Invitee? invitee = await inviteeRepository.GetByGuestIdAsync(integrationEvent.GuestId, cancellationToken);
+        if (invitee is null)
+        {
+            return;
+        }
+
+        await photoRepository.NullifyGuestIdAsync(integrationEvent.GuestId, cancellationToken);
+        inviteeRepository.Remove(invitee);
+        await unitOfWork.SaveChangesAsync(cancellationToken);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs
new file mode 100644
index 0000000..af4abc5
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Tenancy/TenantUploadLimitChangedIntegrationEventHandler.cs
@@ -0,0 +1,19 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Modules.Album.Application.Settings.UpdateUploadLimit;
+using Eternelle.Modules.Tenancy.IntegrationEvents;
+using MediatR;
+
+namespace Eternelle.Modules.Album.Presentation.Tenancy;
+
+internal sealed class TenantUploadLimitChangedIntegrationEventHandler(ISender sender)
+    : IntegrationEventHandler<TenantUploadLimitChangedIntegrationEvent>
+{
+    public override async Task Handle(
+        TenantUploadLimitChangedIntegrationEvent integrationEvent,
+        CancellationToken cancellationToken = default)
+    {
+        await sender.Send(
+            new UpdateUploadLimitCommand(integrationEvent.TenantId, integrationEvent.UploadLimit),
+            cancellationToken);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Weddings/WeddingCreatedIntegrationEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Weddings/WeddingCreatedIntegrationEventHandler.cs
new file mode 100644
index 0000000..1165ae9
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Weddings/WeddingCreatedIntegrationEventHandler.cs
@@ -0,0 +1,19 @@
+using Eternelle.Common.Application.EventBus;
+using Eternelle.Modules.Album.Application.Settings.SeedAlbumSettings;
+using Eternelle.Modules.Weddings.IntegrationEvents.Weddings;
+using MediatR;
+
+namespace Eternelle.Modules.Album.Presentation.Weddings;
+
+internal sealed class WeddingCreatedIntegrationEventHandler(ISender sender)
+    : IntegrationEventHandler<WeddingCreatedIntegrationEvent>
+{
+    public override async Task Handle(
+        WeddingCreatedIntegrationEvent integrationEvent,
+        CancellationToken cancellationToken = default)
+    {
+        await sender.Send(
+            new SeedAlbumSettingsCommand(integrationEvent.WeddingId, integrationEvent.TenantId),
+            cancellationToken);
+    }
+}

From ff374da0ba5b44bfc3e542752f447fe81aa13e78 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 14:07:18 +0800
Subject: [PATCH 139/155] Eternelle-194 Register Album module in the API host

---
 src/API/Eternelle.Api/Eternelle.Api.csproj |  1 +
 src/API/Eternelle.Api/Program.cs           | 35 ++++++++++++++++++++--
 2 files changed, 33 insertions(+), 3 deletions(-)

diff --git a/src/API/Eternelle.Api/Eternelle.Api.csproj b/src/API/Eternelle.Api/Eternelle.Api.csproj
index 897ee40..b9d20a9 100644
--- a/src/API/Eternelle.Api/Eternelle.Api.csproj
+++ b/src/API/Eternelle.Api/Eternelle.Api.csproj
@@ -21,6 +21,7 @@
   </ItemGroup>
 
   <ItemGroup>
+    <ProjectReference Include="..\..\Modules\Album\Eternelle.Modules.Album.Infrastructure\Eternelle.Modules.Album.Infrastructure.csproj" />
     <ProjectReference Include="..\..\Modules\Catalog\Eternelle.Modules.Catalog.Infrastructure\Eternelle.Modules.Catalog.Infrastructure.csproj" />
     <ProjectReference Include="..\..\Modules\Tenancy\Eternelle.Modules.Tenancy.Infrastructure\Eternelle.Modules.Tenancy.Infrastructure.csproj" />
     <ProjectReference Include="..\..\Modules\Users\Eternelle.Modules.Users.Infrastructure\Eternelle.Modules.Users.Infrastructure.csproj" />
diff --git a/src/API/Eternelle.Api/Program.cs b/src/API/Eternelle.Api/Program.cs
index 7afe6f2..41bf30c 100644
--- a/src/API/Eternelle.Api/Program.cs
+++ b/src/API/Eternelle.Api/Program.cs
@@ -6,6 +6,7 @@
 using Eternelle.Common.Infrastructure;
 using Eternelle.Common.Infrastructure.Configuration;
 using Eternelle.Common.Presentation.Endpoints;
+using Eternelle.Modules.Album.Infrastructure;
 using Eternelle.Modules.Catalog.Infrastructure;
 using Eternelle.Modules.Rsvp.Infrastructure;
 using Eternelle.Modules.Tenancy.Infrastructure;
@@ -30,7 +31,8 @@
     Eternelle.Modules.Users.Application.AssemblyReference.Assembly,
     Eternelle.Modules.Catalog.Application.AssemblyReference.Assembly,
     Eternelle.Modules.Tenancy.Application.AssemblyReference.Assembly,
-    Eternelle.Modules.Rsvp.Application.AssemblyReference.Assembly
+    Eternelle.Modules.Rsvp.Application.AssemblyReference.Assembly,
+    Eternelle.Modules.Album.Application.AssemblyReference.Assembly
 ]);
 
 string databaseConnectionString = builder.Configuration.GetConnectionStringOrThrow("Database");
@@ -42,12 +44,13 @@
     [
         TenancyModule.ConfigureConsumers,
         WeddingsModule.ConfigureConsumers,
-        RsvpModule.ConfigureConsumers
+        RsvpModule.ConfigureConsumers,
+        AlbumModule.ConfigureConsumers
     ],
     databaseConnectionString: databaseConnectionString,
     redisConnectionString: redisConnectionString);
 
-builder.Configuration.AddModuleConfiguration(["weddings", "users", "catalog", "tenancy", "rsvp"]);
+builder.Configuration.AddModuleConfiguration(["weddings", "users", "catalog", "tenancy", "rsvp", "album"]);
 
 Uri keyCloakHealthUrl = builder.Configuration.GetKeyCloakHealthUrl();
 
@@ -66,6 +69,8 @@
 
 builder.Services.AddRsvpModule(builder.Configuration);
 
+builder.Services.AddAlbumModule(builder.Configuration);
+
 builder.Services.AddRateLimiter(options =>
 {
     options.AddPolicy(Eternelle.Modules.Rsvp.Presentation.RateLimitingPolicies.RsvpLookup, ctx =>
@@ -84,6 +89,30 @@
                 PermitLimit = 5, Window = TimeSpan.FromMinutes(1), QueueLimit = 0
             }));
 
+    options.AddPolicy(Eternelle.Modules.Album.Presentation.RateLimitingPolicies.UploadContext, ctx =>
+        RateLimitPartition.GetFixedWindowLimiter(
+            partitionKey: ctx.Connection.RemoteIpAddress?.ToString() ?? "unknown",
+            factory: _ => new FixedWindowRateLimiterOptions
+            {
+                PermitLimit = 30, Window = TimeSpan.FromSeconds(60), QueueLimit = 0
+            }));
+
+    options.AddPolicy(Eternelle.Modules.Album.Presentation.RateLimitingPolicies.Presign, ctx =>
+        RateLimitPartition.GetFixedWindowLimiter(
+            partitionKey: ctx.Connection.RemoteIpAddress?.ToString() ?? "unknown",
+            factory: _ => new FixedWindowRateLimiterOptions
+            {
+                PermitLimit = 10, Window = TimeSpan.FromSeconds(60), QueueLimit = 0
+            }));
+
+    options.AddPolicy(Eternelle.Modules.Album.Presentation.RateLimitingPolicies.Register, ctx =>
+        RateLimitPartition.GetFixedWindowLimiter(
+            partitionKey: ctx.Connection.RemoteIpAddress?.ToString() ?? "unknown",
+            factory: _ => new FixedWindowRateLimiterOptions
+            {
+                PermitLimit = 10, Window = TimeSpan.FromSeconds(60), QueueLimit = 0
+            }));
+
     options.RejectionStatusCode = StatusCodes.Status429TooManyRequests;
 });
 

From 93e273bc847d0976eb1ddc11ba6b0c2762115acc Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 14:13:39 +0800
Subject: [PATCH 140/155] Eternelle-194 Add Album module configuration

---
 src/API/Eternelle.Api/modules.album.Development.json | 11 +++++++++++
 src/API/Eternelle.Api/modules.album.json             | 12 ++++++++++++
 2 files changed, 23 insertions(+)
 create mode 100644 src/API/Eternelle.Api/modules.album.Development.json
 create mode 100644 src/API/Eternelle.Api/modules.album.json

diff --git a/src/API/Eternelle.Api/modules.album.Development.json b/src/API/Eternelle.Api/modules.album.Development.json
new file mode 100644
index 0000000..d9ca514
--- /dev/null
+++ b/src/API/Eternelle.Api/modules.album.Development.json
@@ -0,0 +1,11 @@
+{
+  "Album": {
+    "PhotoStorage": {
+      "ServiceUrl": "http://localhost:9000",
+      "PublicUrl": "http://localhost:9000",
+      "BucketName": "album",
+      "AccessKey": "minioadmin",
+      "SecretKey": "minioadmin"
+    }
+  }
+}
diff --git a/src/API/Eternelle.Api/modules.album.json b/src/API/Eternelle.Api/modules.album.json
new file mode 100644
index 0000000..9a75d57
--- /dev/null
+++ b/src/API/Eternelle.Api/modules.album.json
@@ -0,0 +1,12 @@
+{
+  "Album": {
+    "Outbox": {
+      "IntervalInSeconds": 10,
+      "BatchSize": 100
+    },
+    "Inbox": {
+      "IntervalInSeconds": 10,
+      "BatchSize": 100
+    }
+  }
+}

From e08c9df8fc2244add03214767e5285c060d98fa2 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 14:19:07 +0800
Subject: [PATCH 141/155] Eternelle-194 Add initial Album migration

---
 .../20260531061740_InitialAlbum.Designer.cs   | 306 ++++++++++++++++++
 .../Migrations/20260531061740_InitialAlbum.cs | 205 ++++++++++++
 .../Migrations/AlbumDbContextModelSnapshot.cs | 303 +++++++++++++++++
 3 files changed, 814 insertions(+)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.Designer.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/AlbumDbContextModelSnapshot.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.Designer.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.Designer.cs
new file mode 100644
index 0000000..042c8c8
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.Designer.cs
@@ -0,0 +1,306 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Album.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Album.Infrastructure.Migrations
+{
+    [DbContext(typeof(AlbumDbContext))]
+    [Migration("20260531061740_InitialAlbum")]
+    partial class InitialAlbum
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("album")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Album.Domain.Invitees.Invitee", b =>
+                {
+                    b.Property<Guid>("GuestId")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("guest_id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at_utc");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("first_name");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("last_name");
+
+                    b.Property<string>("LookupCode")
+                        .IsRequired()
+                        .HasMaxLength(8)
+                        .HasColumnType("character varying(8)")
+                        .HasColumnName("lookup_code");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at_utc");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("GuestId")
+                        .HasName("pk_invitees");
+
+                    b.HasIndex("LookupCode")
+                        .IsUnique()
+                        .HasDatabaseName("ix_invitees_lookup_code");
+
+                    b.HasIndex("WeddingId")
+                        .HasDatabaseName("ix_invitees_wedding_id");
+
+                    b.ToTable("invitees", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Album.Domain.Photos.AlbumPhoto", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<Guid?>("GuestId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("guest_id");
+
+                    b.Property<int?>("HeightPx")
+                        .HasColumnType("integer")
+                        .HasColumnName("height_px");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("reviewed_at");
+
+                    b.Property<int>("Source")
+                        .HasColumnType("integer")
+                        .HasColumnName("source");
+
+                    b.Property<string>("SrcUrl")
+                        .IsRequired()
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("src_url");
+
+                    b.Property<int>("Status")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasDefaultValue(0)
+                        .HasColumnName("status");
+
+                    b.Property<string>("ThumbnailUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("thumbnail_url");
+
+                    b.Property<DateTime>("UploadedAt")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("uploaded_at");
+
+                    b.Property<string>("UploaderName")
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("uploader_name");
+
+                    b.Property<Guid?>("UploaderUserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("uploader_user_id");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.Property<int?>("WidthPx")
+                        .HasColumnType("integer")
+                        .HasColumnName("width_px");
+
+                    b.HasKey("Id")
+                        .HasName("pk_photos");
+
+                    b.HasIndex("GuestId")
+                        .HasDatabaseName("idx_album_photos_guest_id")
+                        .HasFilter("guest_id IS NOT NULL");
+
+                    b.HasIndex("WeddingId", "Status", "UploadedAt")
+                        .IsDescending(false, false, true)
+                        .HasDatabaseName("idx_album_photos_wedding_status_uploaded");
+
+                    b.ToTable("photos", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Album.Domain.Settings.AlbumSettings", b =>
+                {
+                    b.Property<Guid>("WeddingId")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at_utc");
+
+                    b.Property<bool>("IsClosed")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_closed");
+
+                    b.Property<bool>("IsEnabled")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_enabled");
+
+                    b.Property<int>("ModerationMode")
+                        .HasColumnType("integer")
+                        .HasColumnName("moderation_mode");
+
+                    b.Property<Guid>("TenantId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("tenant_id");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at_utc");
+
+                    b.Property<int?>("UploadLimit")
+                        .HasColumnType("integer")
+                        .HasColumnName("upload_limit");
+
+                    b.HasKey("WeddingId")
+                        .HasName("pk_settings");
+
+                    b.HasIndex("TenantId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_settings_tenant_id");
+
+                    b.ToTable("settings", "album");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.cs
new file mode 100644
index 0000000..8e7d8be
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.cs
@@ -0,0 +1,205 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Eternelle.Modules.Album.Infrastructure.Migrations
+{
+    /// <inheritdoc />
+    public partial class InitialAlbum : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.EnsureSchema(
+                name: "album");
+
+            migrationBuilder.CreateTable(
+                name: "inbox_message_consumers",
+                schema: "album",
+                columns: table => new
+                {
+                    inbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_inbox_message_consumers", x => new { x.inbox_message_id, x.name });
+                });
+
+            migrationBuilder.CreateTable(
+                name: "inbox_messages",
+                schema: "album",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    type = table.Column<string>(type: "text", nullable: false),
+                    content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
+                    occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                    error = table.Column<string>(type: "text", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_inbox_messages", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "invitees",
+                schema: "album",
+                columns: table => new
+                {
+                    guest_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    wedding_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    first_name = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false),
+                    last_name = table.Column<string>(type: "character varying(100)", maxLength: 100, nullable: false),
+                    lookup_code = table.Column<string>(type: "character varying(8)", maxLength: 8, nullable: false),
+                    created_at_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    updated_at_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_invitees", x => x.guest_id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "outbox_message_consumers",
+                schema: "album",
+                columns: table => new
+                {
+                    outbox_message_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    name = table.Column<string>(type: "character varying(500)", maxLength: 500, nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_outbox_message_consumers", x => new { x.outbox_message_id, x.name });
+                });
+
+            migrationBuilder.CreateTable(
+                name: "outbox_messages",
+                schema: "album",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    type = table.Column<string>(type: "text", nullable: false),
+                    content = table.Column<string>(type: "jsonb", maxLength: 2000, nullable: false),
+                    occurred_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    processed_on_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: true),
+                    error = table.Column<string>(type: "text", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_outbox_messages", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "photos",
+                schema: "album",
+                columns: table => new
+                {
+                    id = table.Column<Guid>(type: "uuid", nullable: false),
+                    wedding_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    source = table.Column<int>(type: "integer", nullable: false),
+                    guest_id = table.Column<Guid>(type: "uuid", nullable: true),
+                    uploader_user_id = table.Column<Guid>(type: "uuid", nullable: true),
+                    uploader_name = table.Column<string>(type: "character varying(150)", maxLength: 150, nullable: true),
+                    src_url = table.Column<string>(type: "character varying(2048)", maxLength: 2048, nullable: false),
+                    thumbnail_url = table.Column<string>(type: "character varying(2048)", maxLength: 2048, nullable: true),
+                    width_px = table.Column<int>(type: "integer", nullable: true),
+                    height_px = table.Column<int>(type: "integer", nullable: true),
+                    status = table.Column<int>(type: "integer", nullable: false, defaultValue: 0),
+                    uploaded_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    reviewed_at = table.Column<DateTime>(type: "timestamp with time zone", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_photos", x => x.id);
+                });
+
+            migrationBuilder.CreateTable(
+                name: "settings",
+                schema: "album",
+                columns: table => new
+                {
+                    wedding_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    tenant_id = table.Column<Guid>(type: "uuid", nullable: false),
+                    moderation_mode = table.Column<int>(type: "integer", nullable: false),
+                    is_enabled = table.Column<bool>(type: "boolean", nullable: false),
+                    is_closed = table.Column<bool>(type: "boolean", nullable: false),
+                    upload_limit = table.Column<int>(type: "integer", nullable: true),
+                    created_at_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false),
+                    updated_at_utc = table.Column<DateTime>(type: "timestamp with time zone", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("pk_settings", x => x.wedding_id);
+                });
+
+            migrationBuilder.CreateIndex(
+                name: "ix_invitees_lookup_code",
+                schema: "album",
+                table: "invitees",
+                column: "lookup_code",
+                unique: true);
+
+            migrationBuilder.CreateIndex(
+                name: "ix_invitees_wedding_id",
+                schema: "album",
+                table: "invitees",
+                column: "wedding_id");
+
+            migrationBuilder.CreateIndex(
+                name: "idx_album_photos_guest_id",
+                schema: "album",
+                table: "photos",
+                column: "guest_id",
+                filter: "guest_id IS NOT NULL");
+
+            migrationBuilder.CreateIndex(
+                name: "idx_album_photos_wedding_status_uploaded",
+                schema: "album",
+                table: "photos",
+                columns: new[] { "wedding_id", "status", "uploaded_at" },
+                descending: new[] { false, false, true });
+
+            migrationBuilder.CreateIndex(
+                name: "ix_settings_tenant_id",
+                schema: "album",
+                table: "settings",
+                column: "tenant_id",
+                unique: true);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "inbox_message_consumers",
+                schema: "album");
+
+            migrationBuilder.DropTable(
+                name: "inbox_messages",
+                schema: "album");
+
+            migrationBuilder.DropTable(
+                name: "invitees",
+                schema: "album");
+
+            migrationBuilder.DropTable(
+                name: "outbox_message_consumers",
+                schema: "album");
+
+            migrationBuilder.DropTable(
+                name: "outbox_messages",
+                schema: "album");
+
+            migrationBuilder.DropTable(
+                name: "photos",
+                schema: "album");
+
+            migrationBuilder.DropTable(
+                name: "settings",
+                schema: "album");
+        }
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/AlbumDbContextModelSnapshot.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/AlbumDbContextModelSnapshot.cs
new file mode 100644
index 0000000..8711386
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/AlbumDbContextModelSnapshot.cs
@@ -0,0 +1,303 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Album.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Album.Infrastructure.Migrations
+{
+    [DbContext(typeof(AlbumDbContext))]
+    partial class AlbumDbContextModelSnapshot : ModelSnapshot
+    {
+        protected override void BuildModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("album")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Album.Domain.Invitees.Invitee", b =>
+                {
+                    b.Property<Guid>("GuestId")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("guest_id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at_utc");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("first_name");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("last_name");
+
+                    b.Property<string>("LookupCode")
+                        .IsRequired()
+                        .HasMaxLength(8)
+                        .HasColumnType("character varying(8)")
+                        .HasColumnName("lookup_code");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at_utc");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.HasKey("GuestId")
+                        .HasName("pk_invitees");
+
+                    b.HasIndex("LookupCode")
+                        .IsUnique()
+                        .HasDatabaseName("ix_invitees_lookup_code");
+
+                    b.HasIndex("WeddingId")
+                        .HasDatabaseName("ix_invitees_wedding_id");
+
+                    b.ToTable("invitees", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Album.Domain.Photos.AlbumPhoto", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<Guid?>("GuestId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("guest_id");
+
+                    b.Property<int?>("HeightPx")
+                        .HasColumnType("integer")
+                        .HasColumnName("height_px");
+
+                    b.Property<DateTime?>("ReviewedAt")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("reviewed_at");
+
+                    b.Property<int>("Source")
+                        .HasColumnType("integer")
+                        .HasColumnName("source");
+
+                    b.Property<string>("SrcUrl")
+                        .IsRequired()
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("src_url");
+
+                    b.Property<int>("Status")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("integer")
+                        .HasDefaultValue(0)
+                        .HasColumnName("status");
+
+                    b.Property<string>("ThumbnailUrl")
+                        .HasMaxLength(2048)
+                        .HasColumnType("character varying(2048)")
+                        .HasColumnName("thumbnail_url");
+
+                    b.Property<DateTime>("UploadedAt")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("uploaded_at");
+
+                    b.Property<string>("UploaderName")
+                        .HasMaxLength(150)
+                        .HasColumnType("character varying(150)")
+                        .HasColumnName("uploader_name");
+
+                    b.Property<Guid?>("UploaderUserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("uploader_user_id");
+
+                    b.Property<Guid>("WeddingId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.Property<int?>("WidthPx")
+                        .HasColumnType("integer")
+                        .HasColumnName("width_px");
+
+                    b.HasKey("Id")
+                        .HasName("pk_photos");
+
+                    b.HasIndex("GuestId")
+                        .HasDatabaseName("idx_album_photos_guest_id")
+                        .HasFilter("guest_id IS NOT NULL");
+
+                    b.HasIndex("WeddingId", "Status", "UploadedAt")
+                        .IsDescending(false, false, true)
+                        .HasDatabaseName("idx_album_photos_wedding_status_uploaded");
+
+                    b.ToTable("photos", "album");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Album.Domain.Settings.AlbumSettings", b =>
+                {
+                    b.Property<Guid>("WeddingId")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("wedding_id");
+
+                    b.Property<DateTime>("CreatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("created_at_utc");
+
+                    b.Property<bool>("IsClosed")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_closed");
+
+                    b.Property<bool>("IsEnabled")
+                        .HasColumnType("boolean")
+                        .HasColumnName("is_enabled");
+
+                    b.Property<int>("ModerationMode")
+                        .HasColumnType("integer")
+                        .HasColumnName("moderation_mode");
+
+                    b.Property<Guid>("TenantId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("tenant_id");
+
+                    b.Property<DateTime>("UpdatedAtUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("updated_at_utc");
+
+                    b.Property<int?>("UploadLimit")
+                        .HasColumnType("integer")
+                        .HasColumnName("upload_limit");
+
+                    b.HasKey("WeddingId")
+                        .HasName("pk_settings");
+
+                    b.HasIndex("TenantId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_settings_tenant_id");
+
+                    b.ToTable("settings", "album");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}

From d9874ac85edf6e8727782f230864efee1fa2ffb7 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 14:25:51 +0800
Subject: [PATCH 142/155] Eternelle-194 Seed album:manage permission for Couple
 and Admin

---
 .../Migrations/20260531061740_InitialAlbum.cs |   3 +-
 .../Permissions.cs                            |   5 +
 ...62359_AddAlbumManagePermission.Designer.cs | 334 ++++++++++++++++++
 ...20260531062359_AddAlbumManagePermission.cs |  32 ++
 4 files changed, 373 insertions(+), 1 deletion(-)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Presentation/Permissions.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260531062359_AddAlbumManagePermission.Designer.cs
 create mode 100644 src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260531062359_AddAlbumManagePermission.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.cs
index 8e7d8be..1bb9cef 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.cs
@@ -1,4 +1,5 @@
-using System;
+// <auto-generated />
+using System;
 using Microsoft.EntityFrameworkCore.Migrations;
 
 #nullable disable
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Permissions.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Permissions.cs
new file mode 100644
index 0000000..458df70
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Permissions.cs
@@ -0,0 +1,5 @@
+namespace Eternelle.Modules.Album.Presentation;
+internal static class Permissions
+{
+    internal const string ManageAlbum = "album:manage";
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260531062359_AddAlbumManagePermission.Designer.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260531062359_AddAlbumManagePermission.Designer.cs
new file mode 100644
index 0000000..ecdfba4
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260531062359_AddAlbumManagePermission.Designer.cs
@@ -0,0 +1,334 @@
+// <auto-generated />
+using System;
+using Eternelle.Modules.Users.Infrastructure.Database;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.EntityFrameworkCore.Infrastructure;
+using Microsoft.EntityFrameworkCore.Migrations;
+using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
+using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
+
+#nullable disable
+
+namespace Eternelle.Modules.Users.Infrastructure.Database.Migrations
+{
+    [DbContext(typeof(UsersDbContext))]
+    [Migration("20260531062359_AddAlbumManagePermission")]
+    partial class AddAlbumManagePermission
+    {
+        /// <inheritdoc />
+        protected override void BuildTargetModel(ModelBuilder modelBuilder)
+        {
+#pragma warning disable 612, 618
+            modelBuilder
+                .HasDefaultSchema("users")
+                .HasAnnotation("ProductVersion", "10.0.4")
+                .HasAnnotation("Relational:MaxIdentifierLength", 63);
+
+            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_inbox_messages");
+
+                    b.ToTable("inbox_messages", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Inbox.InboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("InboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("inbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("InboxMessageId", "Name")
+                        .HasName("pk_inbox_message_consumers");
+
+                    b.ToTable("inbox_message_consumers", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessage", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasMaxLength(2000)
+                        .HasColumnType("jsonb")
+                        .HasColumnName("content");
+
+                    b.Property<string>("Error")
+                        .HasColumnType("text")
+                        .HasColumnName("error");
+
+                    b.Property<DateTime>("OccurredOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("occurred_on_utc");
+
+                    b.Property<DateTime?>("ProcessedOnUtc")
+                        .HasColumnType("timestamp with time zone")
+                        .HasColumnName("processed_on_utc");
+
+                    b.Property<string>("Type")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("type");
+
+                    b.HasKey("Id")
+                        .HasName("pk_outbox_messages");
+
+                    b.ToTable("outbox_messages", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Common.Infrastructure.Outbox.OutboxMessageConsumer", b =>
+                {
+                    b.Property<Guid>("OutboxMessageId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("outbox_message_id");
+
+                    b.Property<string>("Name")
+                        .HasMaxLength(500)
+                        .HasColumnType("character varying(500)")
+                        .HasColumnName("name");
+
+                    b.HasKey("OutboxMessageId", "Name")
+                        .HasName("pk_outbox_message_consumers");
+
+                    b.ToTable("outbox_message_consumers", "users");
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.Permission", b =>
+                {
+                    b.Property<string>("Code")
+                        .HasMaxLength(100)
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("code");
+
+                    b.HasKey("Code")
+                        .HasName("pk_permissions");
+
+                    b.ToTable("permissions", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            Code = "users:read"
+                        },
+                        new
+                        {
+                            Code = "users:update"
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.Role", b =>
+                {
+                    b.Property<string>("Name")
+                        .HasMaxLength(50)
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("name");
+
+                    b.HasKey("Name")
+                        .HasName("pk_roles");
+
+                    b.ToTable("roles", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            Name = "Admin"
+                        },
+                        new
+                        {
+                            Name = "Couple"
+                        },
+                        new
+                        {
+                            Name = "Guest"
+                        });
+                });
+
+            modelBuilder.Entity("Eternelle.Modules.Users.Domain.Users.User", b =>
+                {
+                    b.Property<Guid>("Id")
+                        .HasColumnType("uuid")
+                        .HasColumnName("id");
+
+                    b.Property<string>("Email")
+                        .IsRequired()
+                        .HasMaxLength(300)
+                        .HasColumnType("character varying(300)")
+                        .HasColumnName("email");
+
+                    b.Property<string>("FirstName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("first_name");
+
+                    b.Property<string>("IdentityId")
+                        .IsRequired()
+                        .HasColumnType("text")
+                        .HasColumnName("identity_id");
+
+                    b.Property<string>("LastName")
+                        .IsRequired()
+                        .HasMaxLength(200)
+                        .HasColumnType("character varying(200)")
+                        .HasColumnName("last_name");
+
+                    b.Property<string>("PhoneNumber")
+                        .HasMaxLength(16)
+                        .HasColumnType("character varying(16)")
+                        .HasColumnName("phone_number");
+
+                    b.HasKey("Id")
+                        .HasName("pk_users");
+
+                    b.HasIndex("Email")
+                        .IsUnique()
+                        .HasDatabaseName("ix_users_email");
+
+                    b.HasIndex("IdentityId")
+                        .IsUnique()
+                        .HasDatabaseName("ix_users_identity_id");
+
+                    b.ToTable("users", "users");
+                });
+
+            modelBuilder.Entity("PermissionRole", b =>
+                {
+                    b.Property<string>("PermissionCode")
+                        .HasColumnType("character varying(100)")
+                        .HasColumnName("permission_code");
+
+                    b.Property<string>("RoleName")
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("role_name");
+
+                    b.HasKey("PermissionCode", "RoleName")
+                        .HasName("pk_role_permissions");
+
+                    b.HasIndex("RoleName")
+                        .HasDatabaseName("ix_role_permissions_role_name");
+
+                    b.ToTable("role_permissions", "users");
+
+                    b.HasData(
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Couple"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:update",
+                            RoleName = "Couple"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Admin"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:update",
+                            RoleName = "Admin"
+                        },
+                        new
+                        {
+                            PermissionCode = "users:read",
+                            RoleName = "Guest"
+                        });
+                });
+
+            modelBuilder.Entity("RoleUser", b =>
+                {
+                    b.Property<string>("RolesName")
+                        .HasColumnType("character varying(50)")
+                        .HasColumnName("role_name");
+
+                    b.Property<Guid>("UserId")
+                        .HasColumnType("uuid")
+                        .HasColumnName("user_id");
+
+                    b.HasKey("RolesName", "UserId")
+                        .HasName("pk_user_roles");
+
+                    b.HasIndex("UserId")
+                        .HasDatabaseName("ix_user_roles_user_id");
+
+                    b.ToTable("user_roles", "users");
+                });
+
+            modelBuilder.Entity("PermissionRole", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Permission", null)
+                        .WithMany()
+                        .HasForeignKey("PermissionCode")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_role_permissions_permissions_permission_code");
+
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RoleName")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_role_permissions_roles_role_name");
+                });
+
+            modelBuilder.Entity("RoleUser", b =>
+                {
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.Role", null)
+                        .WithMany()
+                        .HasForeignKey("RolesName")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_roles_roles_roles_name");
+
+                    b.HasOne("Eternelle.Modules.Users.Domain.Users.User", null)
+                        .WithMany()
+                        .HasForeignKey("UserId")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired()
+                        .HasConstraintName("fk_user_roles_users_user_id");
+                });
+#pragma warning restore 612, 618
+        }
+    }
+}
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260531062359_AddAlbumManagePermission.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260531062359_AddAlbumManagePermission.cs
new file mode 100644
index 0000000..8c1ba4a
--- /dev/null
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260531062359_AddAlbumManagePermission.cs
@@ -0,0 +1,32 @@
+// <auto-generated />
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Eternelle.Modules.Users.Infrastructure.Database.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddAlbumManagePermission : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.Sql(
+                """
+                INSERT INTO users.permissions (code) VALUES ('album:manage') ON CONFLICT DO NOTHING;
+                INSERT INTO users.role_permissions (permission_code, role_name)
+                VALUES ('album:manage', 'Couple'), ('album:manage', 'Admin') ON CONFLICT DO NOTHING;
+                """);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.Sql(
+                """
+                DELETE FROM users.role_permissions WHERE permission_code = 'album:manage';
+                DELETE FROM users.permissions WHERE code = 'album:manage';
+                """);
+        }
+    }
+}

From c133807de7cc15e046d78857f60b092fb3d90fec Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 20:04:22 +0800
Subject: [PATCH 143/155] Eternelle-194 Fix TenantId index uniqueness and
 multi-wedding upload limit update

Drop the IsUnique constraint on settings.tenant_id: a tenant can have multiple
weddings, each with its own AlbumSettings row, so a unique index would reject
the second seed. UpdateUploadLimitCommandHandler now updates all settings rows
for the tenant rather than expecting exactly one.
---
 .../UpdateUploadLimitCommandHandler.cs             | 14 +++++++++-----
 .../Settings/IAlbumSettingsRepository.cs           |  2 +-
 ....cs => 20260531065202_InitialAlbum.Designer.cs} |  3 +--
 ...tialAlbum.cs => 20260531065202_InitialAlbum.cs} |  6 ++----
 .../Migrations/AlbumDbContextModelSnapshot.cs      |  1 -
 .../Settings/AlbumSettingsConfiguration.cs         |  2 +-
 .../Settings/AlbumSettingsRepository.cs            |  4 ++--
 7 files changed, 16 insertions(+), 16 deletions(-)
 rename src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/{20260531061740_InitialAlbum.Designer.cs => 20260531065202_InitialAlbum.Designer.cs} (99%)
 rename src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/{20260531061740_InitialAlbum.cs => 20260531065202_InitialAlbum.cs} (98%)

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandHandler.cs
index a42cd1d..3ef1a9a 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandHandler.cs
@@ -14,17 +14,21 @@ internal sealed class UpdateUploadLimitCommandHandler(
 {
     public async Task<Result> Handle(UpdateUploadLimitCommand command, CancellationToken cancellationToken)
     {
-        AlbumSettings? settings = await settingsRepository.GetByTenantIdAsync(command.TenantId, cancellationToken);
+        IReadOnlyList<AlbumSettings> allSettings =
+            await settingsRepository.GetAllByTenantIdAsync(command.TenantId, cancellationToken);
 
-        if (settings is null)
+        if (allSettings.Count == 0)
         {
-            // WeddingCreated not yet processed — silently ignore.
             return Result.Success();
         }
 
-        settings.SetUploadLimit(command.NewLimit, dateTimeProvider.UtcNow);
-        await unitOfWork.SaveChangesAsync(cancellationToken);
+        DateTime utcNow = dateTimeProvider.UtcNow;
+        foreach (AlbumSettings settings in allSettings)
+        {
+            settings.SetUploadLimit(command.NewLimit, utcNow);
+        }
 
+        await unitOfWork.SaveChangesAsync(cancellationToken);
         return Result.Success();
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs
index fb0fc14..3ea1f34 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Settings/IAlbumSettingsRepository.cs
@@ -3,6 +3,6 @@ namespace Eternelle.Modules.Album.Domain.Settings;
 public interface IAlbumSettingsRepository
 {
     Task<AlbumSettings?> GetByWeddingIdAsync(Guid weddingId, CancellationToken cancellationToken);
-    Task<AlbumSettings?> GetByTenantIdAsync(Guid tenantId, CancellationToken cancellationToken);
+    Task<IReadOnlyList<AlbumSettings>> GetAllByTenantIdAsync(Guid tenantId, CancellationToken cancellationToken);
     void Insert(AlbumSettings settings);
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.Designer.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531065202_InitialAlbum.Designer.cs
similarity index 99%
rename from src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.Designer.cs
rename to src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531065202_InitialAlbum.Designer.cs
index 042c8c8..da29d5e 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.Designer.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531065202_InitialAlbum.Designer.cs
@@ -12,7 +12,7 @@
 namespace Eternelle.Modules.Album.Infrastructure.Migrations
 {
     [DbContext(typeof(AlbumDbContext))]
-    [Migration("20260531061740_InitialAlbum")]
+    [Migration("20260531065202_InitialAlbum")]
     partial class InitialAlbum
     {
         /// <inheritdoc />
@@ -295,7 +295,6 @@ protected override void BuildTargetModel(ModelBuilder modelBuilder)
                         .HasName("pk_settings");
 
                     b.HasIndex("TenantId")
-                        .IsUnique()
                         .HasDatabaseName("ix_settings_tenant_id");
 
                     b.ToTable("settings", "album");
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531065202_InitialAlbum.cs
similarity index 98%
rename from src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.cs
rename to src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531065202_InitialAlbum.cs
index 1bb9cef..077d71a 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531061740_InitialAlbum.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531065202_InitialAlbum.cs
@@ -1,5 +1,4 @@
-// <auto-generated />
-using System;
+using System;
 using Microsoft.EntityFrameworkCore.Migrations;
 
 #nullable disable
@@ -167,8 +166,7 @@ protected override void Up(MigrationBuilder migrationBuilder)
                 name: "ix_settings_tenant_id",
                 schema: "album",
                 table: "settings",
-                column: "tenant_id",
-                unique: true);
+                column: "tenant_id");
         }
 
         /// <inheritdoc />
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/AlbumDbContextModelSnapshot.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/AlbumDbContextModelSnapshot.cs
index 8711386..7e74d29 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/AlbumDbContextModelSnapshot.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/AlbumDbContextModelSnapshot.cs
@@ -292,7 +292,6 @@ protected override void BuildModel(ModelBuilder modelBuilder)
                         .HasName("pk_settings");
 
                     b.HasIndex("TenantId")
-                        .IsUnique()
                         .HasDatabaseName("ix_settings_tenant_id");
 
                     b.ToTable("settings", "album");
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
index c9a33e6..6a84215 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
@@ -19,7 +19,7 @@ public void Configure(EntityTypeBuilder<AlbumSettings> builder)
         builder.Property(s => s.TenantId)
             .HasColumnName("tenant_id")
             .IsRequired();
-        builder.HasIndex(s => s.TenantId).IsUnique();
+        builder.HasIndex(s => s.TenantId);
 
         builder.Property(s => s.ModerationMode)
             .HasConversion<int>()
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs
index 040d68b..daee8eb 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsRepository.cs
@@ -9,8 +9,8 @@ internal sealed class AlbumSettingsRepository(AlbumDbContext context) : IAlbumSe
     public Task<AlbumSettings?> GetByWeddingIdAsync(Guid weddingId, CancellationToken cancellationToken) =>
         context.AlbumSettings.SingleOrDefaultAsync(s => s.WeddingId == weddingId, cancellationToken);
 
-    public Task<AlbumSettings?> GetByTenantIdAsync(Guid tenantId, CancellationToken cancellationToken) =>
-        context.AlbumSettings.SingleOrDefaultAsync(s => s.TenantId == tenantId, cancellationToken);
+    public async Task<IReadOnlyList<AlbumSettings>> GetAllByTenantIdAsync(Guid tenantId, CancellationToken cancellationToken) =>
+        await context.AlbumSettings.Where(s => s.TenantId == tenantId).ToListAsync(cancellationToken);
 
     public void Insert(AlbumSettings settings) => context.AlbumSettings.Add(settings);
 }

From 8925dab6212694380c5221c3379721beccacca10 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 20:06:17 +0800
Subject: [PATCH 144/155] Eternelle-194 Suppress auto-generated analyzer
 warnings in Album migration

---
 .../Migrations/20260531065202_InitialAlbum.cs                | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531065202_InitialAlbum.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531065202_InitialAlbum.cs
index 077d71a..9c107ea 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531065202_InitialAlbum.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Migrations/20260531065202_InitialAlbum.cs
@@ -1,4 +1,5 @@
-using System;
+// <auto-generated />
+using System;
 using Microsoft.EntityFrameworkCore.Migrations;
 
 #nullable disable
@@ -155,12 +156,14 @@ protected override void Up(MigrationBuilder migrationBuilder)
                 column: "guest_id",
                 filter: "guest_id IS NOT NULL");
 
+#pragma warning disable CA1861
             migrationBuilder.CreateIndex(
                 name: "idx_album_photos_wedding_status_uploaded",
                 schema: "album",
                 table: "photos",
                 columns: new[] { "wedding_id", "status", "uploaded_at" },
                 descending: new[] { false, false, true });
+#pragma warning restore CA1861
 
             migrationBuilder.CreateIndex(
                 name: "ix_settings_tenant_id",

From bb6f72864f6ed587c82af4d2b709577f3e52f273 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 20:12:17 +0800
Subject: [PATCH 145/155] Eternelle-194 Rename UpdateSnapShareConfig to
 UpdateSocialShareConfig in Application and Presentation

Route changes from weddings/{id}/snap-share to weddings/{id}/social-share.
---
 .../UpdateSocialShareConfigCommand.cs}                    | 4 ++--
 .../UpdateSocialShareConfigCommandHandler.cs}             | 8 ++++----
 .../UpdateSocialShareConfigCommandValidator.cs}           | 6 +++---
 ...nfigEndpoint.cs => UpdateSocialShareConfigEndpoint.cs} | 8 ++++----
 4 files changed, 13 insertions(+), 13 deletions(-)
 rename src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/{UpdateSnapShareConfig/UpdateSnapShareConfigCommand.cs => UpdateSocialShareConfig/UpdateSocialShareConfigCommand.cs} (74%)
 rename src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/{UpdateSnapShareConfig/UpdateSnapShareConfigCommandHandler.cs => UpdateSocialShareConfig/UpdateSocialShareConfigCommandHandler.cs} (89%)
 rename src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/{UpdateSnapShareConfig/UpdateSnapShareConfigCommandValidator.cs => UpdateSocialShareConfig/UpdateSocialShareConfigCommandValidator.cs} (72%)
 rename src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/{UpdateSnapShareConfigEndpoint.cs => UpdateSocialShareConfigEndpoint.cs} (71%)

diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommand.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSocialShareConfig/UpdateSocialShareConfigCommand.cs
similarity index 74%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommand.cs
rename to src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSocialShareConfig/UpdateSocialShareConfigCommand.cs
index fe1be5a..29fe143 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommand.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSocialShareConfig/UpdateSocialShareConfigCommand.cs
@@ -1,8 +1,8 @@
 using Eternelle.Common.Application.Messaging;
 
-namespace Eternelle.Modules.Weddings.Application.Weddings.UpdateSnapShareConfig;
+namespace Eternelle.Modules.Weddings.Application.Weddings.UpdateSocialShareConfig;
 
-public sealed record UpdateSnapShareConfigCommand(
+public sealed record UpdateSocialShareConfigCommand(
     Guid WeddingId,
     string? InstagramHandle,
     string? CtaText,
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandHandler.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSocialShareConfig/UpdateSocialShareConfigCommandHandler.cs
similarity index 89%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandHandler.cs
rename to src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSocialShareConfig/UpdateSocialShareConfigCommandHandler.cs
index 07728b6..ea885a9 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandHandler.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSocialShareConfig/UpdateSocialShareConfigCommandHandler.cs
@@ -4,14 +4,14 @@
 using Eternelle.Modules.Weddings.Application.Abstractions.Data;
 using Eternelle.Modules.Weddings.Domain.Weddings;
 
-namespace Eternelle.Modules.Weddings.Application.Weddings.UpdateSnapShareConfig;
+namespace Eternelle.Modules.Weddings.Application.Weddings.UpdateSocialShareConfig;
 
-internal sealed class UpdateSnapShareConfigCommandHandler(
+internal sealed class UpdateSocialShareConfigCommandHandler(
     IWeddingRepository weddingRepository,
     IUnitOfWork unitOfWork,
-    IDateTimeProvider dateTimeProvider) : ICommandHandler<UpdateSnapShareConfigCommand>
+    IDateTimeProvider dateTimeProvider) : ICommandHandler<UpdateSocialShareConfigCommand>
 {
-    public async Task<Result> Handle(UpdateSnapShareConfigCommand command, CancellationToken cancellationToken)
+    public async Task<Result> Handle(UpdateSocialShareConfigCommand command, CancellationToken cancellationToken)
     {
         Wedding? wedding = await weddingRepository.GetAsync(
             new WeddingId(command.WeddingId),
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandValidator.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSocialShareConfig/UpdateSocialShareConfigCommandValidator.cs
similarity index 72%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandValidator.cs
rename to src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSocialShareConfig/UpdateSocialShareConfigCommandValidator.cs
index 21b3ae4..c2285de 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSnapShareConfig/UpdateSnapShareConfigCommandValidator.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Application/Weddings/UpdateSocialShareConfig/UpdateSocialShareConfigCommandValidator.cs
@@ -1,11 +1,11 @@
 using Eternelle.Modules.Weddings.Domain.Weddings;
 using FluentValidation;
 
-namespace Eternelle.Modules.Weddings.Application.Weddings.UpdateSnapShareConfig;
+namespace Eternelle.Modules.Weddings.Application.Weddings.UpdateSocialShareConfig;
 
-internal sealed class UpdateSnapShareConfigCommandValidator : AbstractValidator<UpdateSnapShareConfigCommand>
+internal sealed class UpdateSocialShareConfigCommandValidator : AbstractValidator<UpdateSocialShareConfigCommand>
 {
-    public UpdateSnapShareConfigCommandValidator()
+    public UpdateSocialShareConfigCommandValidator()
     {
         RuleFor(c => c.WeddingId)
             .NotEmpty();
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/UpdateSnapShareConfigEndpoint.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/UpdateSocialShareConfigEndpoint.cs
similarity index 71%
rename from src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/UpdateSnapShareConfigEndpoint.cs
rename to src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/UpdateSocialShareConfigEndpoint.cs
index b6927de..145c770 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/UpdateSnapShareConfigEndpoint.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Presentation/Weddings/UpdateSocialShareConfigEndpoint.cs
@@ -1,7 +1,7 @@
 using Eternelle.Common.Domain;
 using Eternelle.Common.Presentation.Endpoints;
 using Eternelle.Common.Presentation.Results;
-using Eternelle.Modules.Weddings.Application.Weddings.UpdateSnapShareConfig;
+using Eternelle.Modules.Weddings.Application.Weddings.UpdateSocialShareConfig;
 using MediatR;
 using Microsoft.AspNetCore.Builder;
 using Microsoft.AspNetCore.Http;
@@ -9,7 +9,7 @@
 
 namespace Eternelle.Modules.Weddings.Presentation.Weddings;
 
-internal sealed class UpdateSnapShareConfigEndpoint : IEndpoint
+internal sealed class UpdateSocialShareConfigEndpoint : IEndpoint
 {
     internal sealed record Request(
         string? InstagramHandle,
@@ -18,9 +18,9 @@ internal sealed record Request(
 
     public void MapEndpoint(IEndpointRouteBuilder app)
     {
-        app.MapPut("weddings/{weddingId}/snap-share", async (Guid weddingId, Request request, ISender sender, CancellationToken ct) =>
+        app.MapPut("weddings/{weddingId}/social-share", async (Guid weddingId, Request request, ISender sender, CancellationToken ct) =>
         {
-            var command = new UpdateSnapShareConfigCommand(
+            var command = new UpdateSocialShareConfigCommand(
                 weddingId,
                 request.InstagramHandle,
                 request.CtaText,

From cb8a2eea45a2c25c3842e53ac63d70a3e488e3c7 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 21:14:39 +0800
Subject: [PATCH 146/155] Eternelle-194 Refactor Album module: Dapper,
 validation, and cleanup

- Switch query handlers to Dapper with cancellation support
- Ensure bulk photo commands process only distinct IDs
- Add stricter validation for photo IDs in bulk commands
- Validate and deduplicate SlotIds before upload
- Set ReviewedAt for approved AlbumPhoto on creation
- Simplify AlbumSettings EF config, enforce required fields
- Pass cancellation tokens in all Dapper operations
- Log and drop invalid lookup codes in integration handler
- Remove unused GetByUploadTokenAsync from WeddingRepository
---
 .../GetUploadContextQueryHandler.cs           | 18 ++++++----
 .../BulkApprovePhotosCommandHandler.cs        |  2 +-
 .../BulkApprovePhotosCommandValidator.cs      |  1 +
 .../BulkDeletePhotosCommandHandler.cs         |  2 +-
 .../BulkDeletePhotosCommandValidator.cs       |  1 +
 .../BulkRejectPhotosCommandHandler.cs         |  2 +-
 .../BulkRejectPhotosCommandValidator.cs       |  1 +
 .../GetSettings/GetSettingsQueryHandler.cs    | 34 ++++++++++++-------
 .../Uploads/AlbumUploadService.cs             | 18 +++++++---
 .../Photos/AlbumPhoto.cs                      |  2 +-
 .../Inbox/IntegrationEventConsumer.cs         |  4 +--
 .../Outbox/IdempotentDomainEventHandler.cs    | 16 +++++----
 .../Settings/AlbumSettingsConfiguration.cs    | 28 ++++-----------
 ...pCodeRegeneratedIntegrationEventHandler.cs | 12 +++++--
 .../Weddings/IWeddingRepository.cs            |  6 ----
 .../Weddings/WeddingRepository.cs             |  9 -----
 16 files changed, 81 insertions(+), 75 deletions(-)

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs
index cf16750..c6334b2 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs
@@ -4,6 +4,7 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Photos;
 using Eternelle.Modules.Album.Domain.Settings;
 
 namespace Eternelle.Modules.Album.Application.Invitees.GetUploadContext;
@@ -39,14 +40,17 @@ public async Task<Result<UploadContextResponse>> Handle(
         {
             await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
             const string countSql =
-                $"""
-                 SELECT COUNT(*)
-                 FROM album.photos
-                 WHERE wedding_id = @WeddingId
-                   AND status != 3
-                 """;
+                """
+                SELECT COUNT(*)
+                FROM album.photos
+                WHERE wedding_id = @WeddingId
+                  AND status != @OverLimitStatus
+                """;
             int activeCount = await connection.ExecuteScalarAsync<int>(
-                new CommandDefinition(countSql, new { invitee.WeddingId }, cancellationToken: cancellationToken));
+                new CommandDefinition(
+                    countSql,
+                    new { invitee.WeddingId, OverLimitStatus = (int)PhotoStatus.OverLimit },
+                    cancellationToken: cancellationToken));
             remaining = Math.Max(0, settings.UploadLimit.Value - activeCount);
         }
 
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandHandler.cs
index db8d60d..62a645b 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandHandler.cs
@@ -16,7 +16,7 @@ public async Task<Result> Handle(BulkApprovePhotosCommand command, CancellationT
     {
         DateTime now = dateTimeProvider.UtcNow;
 
-        foreach (Guid photoId in command.PhotoIds)
+        foreach (Guid photoId in command.PhotoIds.Distinct())
         {
             AlbumPhoto? photo = await photoRepository.GetByIdAsync(new AlbumPhotoId(photoId), cancellationToken);
 
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
index ae429c8..531d1aa 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
@@ -8,5 +8,6 @@ public BulkApprovePhotosCommandValidator()
     {
         RuleFor(c => c.WeddingId).NotEmpty();
         RuleFor(c => c.PhotoIds).NotEmpty();
+        RuleForEach(c => c.PhotoIds).NotEqual(Guid.Empty);
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandHandler.cs
index f02b68e..bfd752d 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandHandler.cs
@@ -12,7 +12,7 @@ internal sealed class BulkDeletePhotosCommandHandler(
 {
     public async Task<Result> Handle(BulkDeletePhotosCommand command, CancellationToken cancellationToken)
     {
-        foreach (Guid photoId in command.PhotoIds)
+        foreach (Guid photoId in command.PhotoIds.Distinct())
         {
             AlbumPhoto? photo = await photoRepository.GetByIdAsync(new AlbumPhotoId(photoId), cancellationToken);
 
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
index 5766749..bd0c22f 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
@@ -8,5 +8,6 @@ public BulkDeletePhotosCommandValidator()
     {
         RuleFor(c => c.WeddingId).NotEmpty();
         RuleFor(c => c.PhotoIds).NotEmpty();
+        RuleForEach(c => c.PhotoIds).NotEqual(Guid.Empty);
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandHandler.cs
index d8935b2..1189fbc 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandHandler.cs
@@ -16,7 +16,7 @@ public async Task<Result> Handle(BulkRejectPhotosCommand command, CancellationTo
     {
         DateTime now = dateTimeProvider.UtcNow;
 
-        foreach (Guid photoId in command.PhotoIds)
+        foreach (Guid photoId in command.PhotoIds.Distinct())
         {
             AlbumPhoto? photo = await photoRepository.GetByIdAsync(new AlbumPhotoId(photoId), cancellationToken);
 
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
index 3e338a4..da3dca5 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
@@ -8,5 +8,6 @@ public BulkRejectPhotosCommandValidator()
     {
         RuleFor(c => c.WeddingId).NotEmpty();
         RuleFor(c => c.PhotoIds).NotEmpty();
+        RuleForEach(c => c.PhotoIds).NotEqual(Guid.Empty);
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQueryHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQueryHandler.cs
index 3fe60c3..a955725 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQueryHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/GetSettings/GetSettingsQueryHandler.cs
@@ -1,32 +1,42 @@
+using System.Data.Common;
+using Dapper;
+using Eternelle.Common.Application.Data;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
-using Eternelle.Modules.Album.Domain.Settings;
 
 namespace Eternelle.Modules.Album.Application.Settings.GetSettings;
 
-internal sealed class GetSettingsQueryHandler(IAlbumSettingsRepository settingsRepository)
+internal sealed class GetSettingsQueryHandler(IDbConnectionFactory dbConnectionFactory)
     : IQueryHandler<GetSettingsQuery, AlbumSettingsResponse>
 {
     public async Task<Result<AlbumSettingsResponse>> Handle(
         GetSettingsQuery query,
         CancellationToken cancellationToken)
     {
-        AlbumSettings? settings = await settingsRepository.GetByWeddingIdAsync(query.WeddingId, cancellationToken);
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(cancellationToken);
 
-        if (settings is null)
+        const string sql =
+            $"""
+             SELECT
+                 wedding_id      AS {nameof(AlbumSettingsResponse.WeddingId)},
+                 moderation_mode AS {nameof(AlbumSettingsResponse.ModerationMode)},
+                 is_enabled      AS {nameof(AlbumSettingsResponse.IsEnabled)},
+                 is_closed       AS {nameof(AlbumSettingsResponse.IsClosed)},
+                 upload_limit    AS {nameof(AlbumSettingsResponse.UploadLimit)},
+                 updated_at_utc  AS {nameof(AlbumSettingsResponse.UpdatedAtUtc)}
+             FROM album.settings
+             WHERE wedding_id = @WeddingId
+             """;
+
+        AlbumSettingsResponse? response = await connection.QuerySingleOrDefaultAsync<AlbumSettingsResponse>(
+            new CommandDefinition(sql, new { query.WeddingId }, cancellationToken: cancellationToken));
+
+        if (response is null)
         {
             return Result.Failure<AlbumSettingsResponse>(
                 Error.NotFound("Album.Settings.NotFound", $"Album settings for wedding '{query.WeddingId}' were not found."));
         }
 
-        var response = new AlbumSettingsResponse(
-            settings.WeddingId,
-            (int)settings.ModerationMode,
-            settings.IsEnabled,
-            settings.IsClosed,
-            settings.UploadLimit,
-            settings.UpdatedAtUtc);
-
         return Result.Success(response);
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/AlbumUploadService.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/AlbumUploadService.cs
index bc0a709..a66d816 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/AlbumUploadService.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/AlbumUploadService.cs
@@ -82,9 +82,18 @@ public async Task<Result<IReadOnlyList<Guid>>> RegisterAsync(
             }
         }
 
-        // Reject duplicate SlotIds before touching the store — a duplicate would map two
+        // Parse and validate all SlotIds upfront — Guid.Parse throws on malformed input.
+        // Also reject duplicates before touching the slot store to avoid mapping two
         // AlbumPhoto records to the same CDN upload.
-        var slotIds = photos.Select(p => Guid.Parse(p.SlotId)).ToList();
+        var slotIds = new List<Guid>(photos.Count);
+        foreach (PhotoRegistration p in photos)
+        {
+            if (!Guid.TryParse(p.SlotId, out Guid parsed))
+            {
+                return Result.Failure<IReadOnlyList<Guid>>(AlbumPhotoErrors.InvalidUploadSlot);
+            }
+            slotIds.Add(parsed);
+        }
         if (new HashSet<Guid>(slotIds).Count != slotIds.Count)
         {
             return Result.Failure<IReadOnlyList<Guid>>(AlbumPhotoErrors.InvalidUploadSlot);
@@ -105,9 +114,10 @@ public async Task<Result<IReadOnlyList<Guid>>> RegisterAsync(
         DateTime now = dateTimeProvider.UtcNow;
 
         var albumPhotos = new List<AlbumPhoto>();
-        foreach (PhotoRegistration registration in photos)
+        for (int i = 0; i < photos.Count; i++)
         {
-            var slotGuid = Guid.Parse(registration.SlotId);
+            PhotoRegistration registration = photos[i];
+            Guid slotGuid = slotIds[i];
             if (!cdnUrls.TryGetValue(slotGuid, out string? cdnUrl))
             {
                 return Result.Failure<IReadOnlyList<Guid>>(AlbumPhotoErrors.InvalidUploadSlot);
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhoto.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhoto.cs
index 10d3aca..b8612e6 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhoto.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Photos/AlbumPhoto.cs
@@ -41,7 +41,7 @@ public static AlbumPhoto Create(
             HeightPx = heightPx,
             Status = initialStatus,
             UploadedAt = utcNow,
-            ReviewedAt = null
+            ReviewedAt = initialStatus == PhotoStatus.Approved ? utcNow : null
         };
         photo.Raise(new AlbumPhotoUploadedDomainEvent(photo.Id, weddingId, source, initialStatus, utcNow));
         if (initialStatus == PhotoStatus.Approved)
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IntegrationEventConsumer.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IntegrationEventConsumer.cs
index 740704b..137f925 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IntegrationEventConsumer.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Inbox/IntegrationEventConsumer.cs
@@ -15,7 +15,7 @@ internal sealed class IntegrationEventConsumer<TIntegrationEvent>(IDbConnectionF
 {
     public async Task Consume(ConsumeContext<TIntegrationEvent> context)
     {
-        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
+        await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync(context.CancellationToken);
 
         TIntegrationEvent integrationEvent = context.Message;
 
@@ -34,6 +34,6 @@ INSERT INTO album.inbox_messages(id, type, content, occurred_on_utc)
             ON CONFLICT (id) DO NOTHING
             """;
 
-        await connection.ExecuteAsync(sql, inboxMessage);
+        await connection.ExecuteAsync(new CommandDefinition(sql, inboxMessage, cancellationToken: context.CancellationToken));
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/IdempotentDomainEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
index f93da78..a72321d 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Outbox/IdempotentDomainEventHandler.cs
@@ -19,19 +19,20 @@ public override async Task Handle(TDomainEvent domainEvent, CancellationToken ca
 
         var outboxMessageConsumer = new OutboxMessageConsumer(domainEvent.Id, decorated.GetType().Name);
 
-        if (await OutboxConsumerExistsAsync(connection, outboxMessageConsumer))
+        if (await OutboxConsumerExistsAsync(connection, outboxMessageConsumer, cancellationToken))
         {
             return;
         }
 
         await decorated.Handle(domainEvent, cancellationToken);
 
-        await InsertOutboxConsumerAsync(connection, outboxMessageConsumer);
+        await InsertOutboxConsumerAsync(connection, outboxMessageConsumer, cancellationToken);
     }
 
     private static async Task<bool> OutboxConsumerExistsAsync(
         DbConnection dbConnection,
-        OutboxMessageConsumer outboxMessageConsumer)
+        OutboxMessageConsumer outboxMessageConsumer,
+        CancellationToken cancellationToken)
     {
         const string sql =
             """
@@ -43,12 +44,14 @@ FROM album.outbox_message_consumers
             )
             """;
 
-        return await dbConnection.ExecuteScalarAsync<bool>(sql, outboxMessageConsumer);
+        return await dbConnection.ExecuteScalarAsync<bool>(
+            new CommandDefinition(sql, outboxMessageConsumer, cancellationToken: cancellationToken));
     }
 
     private static async Task InsertOutboxConsumerAsync(
         DbConnection dbConnection,
-        OutboxMessageConsumer outboxMessageConsumer)
+        OutboxMessageConsumer outboxMessageConsumer,
+        CancellationToken cancellationToken)
     {
         const string sql =
             """
@@ -56,6 +59,7 @@ INSERT INTO album.outbox_message_consumers(outbox_message_id, name)
             VALUES (@OutboxMessageId, @Name)
             """;
 
-        await dbConnection.ExecuteAsync(sql, outboxMessageConsumer);
+        await dbConnection.ExecuteAsync(
+            new CommandDefinition(sql, outboxMessageConsumer, cancellationToken: cancellationToken));
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
index 6a84215..34423cd 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Settings/AlbumSettingsConfiguration.cs
@@ -12,37 +12,21 @@ public void Configure(EntityTypeBuilder<AlbumSettings> builder)
 
         builder.HasKey(s => s.WeddingId);
 
-        builder.Property(s => s.WeddingId)
-            .HasColumnName("wedding_id")
-            .IsRequired();
+        builder.Property(s => s.WeddingId).IsRequired();
 
-        builder.Property(s => s.TenantId)
-            .HasColumnName("tenant_id")
-            .IsRequired();
+        builder.Property(s => s.TenantId).IsRequired();
         builder.HasIndex(s => s.TenantId);
 
         builder.Property(s => s.ModerationMode)
             .HasConversion<int>()
-            .HasColumnName("moderation_mode")
             .IsRequired();
 
-        builder.Property(s => s.IsEnabled)
-            .HasColumnName("is_enabled")
-            .IsRequired();
+        builder.Property(s => s.IsEnabled).IsRequired();
 
-        builder.Property(s => s.IsClosed)
-            .HasColumnName("is_closed")
-            .IsRequired();
+        builder.Property(s => s.IsClosed).IsRequired();
 
-        builder.Property(s => s.UploadLimit)
-            .HasColumnName("upload_limit");
+        builder.Property(s => s.CreatedAtUtc).IsRequired();
 
-        builder.Property(s => s.CreatedAtUtc)
-            .HasColumnName("created_at_utc")
-            .IsRequired();
-
-        builder.Property(s => s.UpdatedAtUtc)
-            .HasColumnName("updated_at_utc")
-            .IsRequired();
+        builder.Property(s => s.UpdatedAtUtc).IsRequired();
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
index ba5a052..9d00551 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
@@ -5,13 +5,15 @@
 using Eternelle.Modules.Album.Domain.Invitees;
 using Eternelle.Modules.Album.Domain.Shared;
 using Eternelle.Modules.Rsvp.IntegrationEvents.Guests;
+using Microsoft.Extensions.Logging;
 
 namespace Eternelle.Modules.Album.Presentation.Rsvp;
 
 internal sealed class GuestLookupCodeRegeneratedIntegrationEventHandler(
     IInviteeRepository inviteeRepository,
     IUnitOfWork unitOfWork,
-    IDateTimeProvider dateTimeProvider)
+    IDateTimeProvider dateTimeProvider,
+    ILogger<GuestLookupCodeRegeneratedIntegrationEventHandler> logger)
     : IntegrationEventHandler<GuestLookupCodeRegeneratedIntegrationEvent>
 {
     public override async Task Handle(
@@ -28,8 +30,12 @@ public override async Task Handle(
         Result<LookupCode> codeResult = LookupCode.Create(integrationEvent.NewLookupCode);
         if (codeResult.IsFailure)
         {
-            throw new InvalidOperationException(
-                $"Invalid lookup code in GuestLookupCodeRegeneratedIntegrationEvent for guest {integrationEvent.GuestId}: {codeResult.Error.Description}");
+            logger.LogError(
+                "Invalid lookup code '{NewLookupCode}' in GuestLookupCodeRegeneratedIntegrationEvent for guest {GuestId}: {Error}. Dropping message.",
+                integrationEvent.NewLookupCode,
+                integrationEvent.GuestId,
+                codeResult.Error.Description);
+            return;
         }
 
         invitee.ChangeLookupCode(codeResult.Value, dateTimeProvider.UtcNow);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/IWeddingRepository.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/IWeddingRepository.cs
index 90a0e74..f466320 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/IWeddingRepository.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Domain/Weddings/IWeddingRepository.cs
@@ -18,12 +18,6 @@ public interface IWeddingRepository
 
     Task<Wedding?> GetByTenantIdAsync(Guid tenantId, CancellationToken cancellationToken = default);
 
-    /// <summary>
-    /// Loads the Wedding aggregate (including SocialShare) whose SocialShare matches.
-    /// Returns null when no match is found.
-    /// </summary>
-    Task<Wedding?> GetByUploadTokenAsync(Guid uploadToken, CancellationToken cancellationToken = default);
-
     void Insert(Wedding wedding);
 
     void Update(Wedding wedding);
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingRepository.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingRepository.cs
index c5b5168..88e6144 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingRepository.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Weddings/WeddingRepository.cs
@@ -32,15 +32,6 @@ internal sealed class WeddingRepository(WeddingsDbContext context) : IWeddingRep
             .SingleOrDefaultAsync(w => w.TenantId == tenantId, cancellationToken);
     }
 
-    public async Task<Wedding?> GetByUploadTokenAsync(Guid uploadToken, CancellationToken cancellationToken = default)
-    {
-        return await context.Weddings
-            .Include(w => w.SocialShare)
-            .SingleOrDefaultAsync(
-                w => w.SocialShare != null,
-                cancellationToken);
-    }
-
     public void Insert(Wedding wedding)
     {
         context.Weddings.Add(wedding);

From e7a8395f73ad6f043e38af9274dcbd12fbcb654b Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Sun, 31 May 2026 23:49:39 +0800
Subject: [PATCH 147/155] Eternelle-194 Refactor Invitee config and simplify
 error logging

Removed explicit column names in InviteeConfiguration to use EF Core's default conventions. Simplified error logging in GuestLookupCodeRegeneratedIntegrationEventHandler by omitting the NewLookupCode value from log messages.
---
 .../Invitees/InviteeConfiguration.cs          | 25 ++++++-------------
 ...pCodeRegeneratedIntegrationEventHandler.cs |  3 +--
 2 files changed, 8 insertions(+), 20 deletions(-)

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeConfiguration.cs b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeConfiguration.cs
index a0fb1d6..3b4b050 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeConfiguration.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Infrastructure/Invitees/InviteeConfiguration.cs
@@ -14,40 +14,29 @@ public void Configure(EntityTypeBuilder<Invitee> builder)
 
         builder.HasKey(i => i.GuestId);
 
-        builder.Property(i => i.GuestId)
-            .HasColumnName("guest_id")
-            .IsRequired();
+        builder.Property(i => i.GuestId).IsRequired();
 
-        builder.Property(i => i.WeddingId)
-            .HasColumnName("wedding_id")
-            .IsRequired();
+        builder.Property(i => i.WeddingId).IsRequired();
         builder.HasIndex(i => i.WeddingId);
 
         builder.Property(i => i.FirstName)
             .HasConversion(v => v.Value, v => PersonFirstName.FromPersistence(v))
             .IsRequired()
-            .HasMaxLength(PersonFirstName.MaxLength)
-            .HasColumnName("first_name");
+            .HasMaxLength(PersonFirstName.MaxLength);
 
         builder.Property(i => i.LastName)
             .HasConversion(v => v.Value, v => PersonLastName.FromPersistence(v))
             .IsRequired()
-            .HasMaxLength(PersonLastName.MaxLength)
-            .HasColumnName("last_name");
+            .HasMaxLength(PersonLastName.MaxLength);
 
         builder.Property(i => i.LookupCode)
             .HasConversion(v => v.Value, v => LookupCode.FromPersistence(v))
             .IsRequired()
-            .HasMaxLength(LookupCode.MaxLength)
-            .HasColumnName("lookup_code");
+            .HasMaxLength(LookupCode.MaxLength);
         builder.HasIndex(i => i.LookupCode).IsUnique();
 
-        builder.Property(i => i.CreatedAtUtc)
-            .HasColumnName("created_at_utc")
-            .IsRequired();
+        builder.Property(i => i.CreatedAtUtc).IsRequired();
 
-        builder.Property(i => i.UpdatedAtUtc)
-            .HasColumnName("updated_at_utc")
-            .IsRequired();
+        builder.Property(i => i.UpdatedAtUtc).IsRequired();
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
index 9d00551..2de5ab5 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
@@ -31,8 +31,7 @@ public override async Task Handle(
         if (codeResult.IsFailure)
         {
             logger.LogError(
-                "Invalid lookup code '{NewLookupCode}' in GuestLookupCodeRegeneratedIntegrationEvent for guest {GuestId}: {Error}. Dropping message.",
-                integrationEvent.NewLookupCode,
+                "Invalid lookup code in GuestLookupCodeRegeneratedIntegrationEvent for guest {GuestId}: {Error}. Dropping message.",
                 integrationEvent.GuestId,
                 codeResult.Error.Description);
             return;

From 72083d12367b8222b2717b95acec6e5834f120ae Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Mon, 1 Jun 2026 05:37:21 +0800
Subject: [PATCH 148/155] Eternelle-193 Refactor caching, template, and user
 registration logic

CacheService now logs failures instead of throwing, using ILogger. Template repository and events use value objects for name and tier. Template section variants are trimmed before storing. Migration cleans up permissions on down. RegisterUser returns 201 Created with user ID.
---
 .../Caching/CacheService.cs                   | 48 +++++++++++++------
 .../CreateTemplateCommandHandler.cs           |  2 +-
 .../UpdateTemplateCommandHandler.cs           |  2 +-
 .../Templates/ITemplateRepository.cs          |  2 +-
 .../Templates/Template.cs                     |  8 ++--
 .../Templates/TemplateCreatedDomainEvent.cs   |  4 +-
 .../Templates/TemplateRepository.cs           |  4 +-
 ...260527101020_AddCatalogManagePermission.cs |  1 +
 .../Users/RegisterUser.cs                     |  4 +-
 9 files changed, 50 insertions(+), 25 deletions(-)

diff --git a/src/Common/Eternelle.Common.Infrastructure/Caching/CacheService.cs b/src/Common/Eternelle.Common.Infrastructure/Caching/CacheService.cs
index d5b73e5..07e4fea 100644
--- a/src/Common/Eternelle.Common.Infrastructure/Caching/CacheService.cs
+++ b/src/Common/Eternelle.Common.Infrastructure/Caching/CacheService.cs
@@ -1,38 +1,58 @@
-using System.Buffers;
+using System.Buffers;
 using System.Text.Json;
 using Eternelle.Common.Application.Caching;
 using Microsoft.Extensions.Caching.Distributed;
+using Microsoft.Extensions.Logging;
 
 namespace Eternelle.Common.Infrastructure.Caching;
 
-internal sealed class CacheService(IDistributedCache cache) : ICacheService
+internal sealed class CacheService(IDistributedCache cache, ILogger<CacheService> logger) : ICacheService
 {
     public async Task<T?> GetAsync<T>(string key, CancellationToken cancellationToken = default)
     {
-        byte[]? bytes = await cache.GetAsync(key, cancellationToken);
-
-        return bytes is null ? default : Deserialize<T>(bytes);
+        try
+        {
+            byte[]? bytes = await cache.GetAsync(key, cancellationToken);
+            return bytes is null ? default : Deserialize<T>(bytes);
+        }
+        catch (Exception ex)
+        {
+            logger.LogWarning(ex, "Cache read failed for key '{Key}'; treating as miss.", key);
+            return default;
+        }
     }
 
-    public Task SetAsync<T>(
+    public async Task SetAsync<T>(
         string key,
         T value,
         TimeSpan? expiration = null,
         CancellationToken cancellationToken = default)
     {
-        byte[] bytes = Serialize(value);
-
-        return cache.SetAsync(key, bytes, CacheOptions.Create(expiration), cancellationToken);
+        try
+        {
+            byte[] bytes = Serialize(value);
+            await cache.SetAsync(key, bytes, CacheOptions.Create(expiration), cancellationToken);
+        }
+        catch (Exception ex)
+        {
+            logger.LogWarning(ex, "Cache write failed for key '{Key}'.", key);
+        }
     }
 
-    public Task RemoveAsync(string key, CancellationToken cancellationToken = default) =>
-        cache.RemoveAsync(key, cancellationToken);
-
-    private static T Deserialize<T>(byte[] bytes)
+    public async Task RemoveAsync(string key, CancellationToken cancellationToken = default)
     {
-        return JsonSerializer.Deserialize<T>(bytes)!;
+        try
+        {
+            await cache.RemoveAsync(key, cancellationToken);
+        }
+        catch (Exception ex)
+        {
+            logger.LogWarning(ex, "Cache eviction failed for key '{Key}'.", key);
+        }
     }
 
+    private static T Deserialize<T>(byte[] bytes) => JsonSerializer.Deserialize<T>(bytes)!;
+
     private static byte[] Serialize<T>(T value)
     {
         var buffer = new ArrayBufferWriter<byte>();
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs
index 375f5fb..eebcdbb 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/CreateTemplate/CreateTemplateCommandHandler.cs
@@ -46,7 +46,7 @@ public async Task<Result<Guid>> Handle(CreateTemplateCommand command, Cancellati
             previewImageUrl = previewResult.Value;
         }
 
-        if (await templateRepository.NameExistsAsync(nameResult.Value.Value, cancellationToken))
+        if (await templateRepository.NameExistsAsync(nameResult.Value, cancellationToken))
         {
             return Result.Failure<Guid>(TemplateErrors.NameTaken);
         }
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandHandler.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandHandler.cs
index cdcebf3..c3f8523 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandHandler.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Application/Templates/UpdateTemplate/UpdateTemplateCommandHandler.cs
@@ -29,7 +29,7 @@ public async Task<Result> Handle(UpdateTemplateCommand command, CancellationToke
         }
 
         if (!string.Equals(nameResult.Value.Value, template.Name.Value, StringComparison.Ordinal) &&
-            await templateRepository.NameExistsAsync(nameResult.Value.Value, cancellationToken))
+            await templateRepository.NameExistsAsync(nameResult.Value, cancellationToken))
         {
             return Result.Failure(TemplateErrors.NameTaken);
         }
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ITemplateRepository.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ITemplateRepository.cs
index 0a589a7..f0bb1f5 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ITemplateRepository.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/ITemplateRepository.cs
@@ -4,7 +4,7 @@ public interface ITemplateRepository
 {
     Task<Template?> GetAsync(TemplateId id, CancellationToken cancellationToken = default);
 
-    Task<bool> NameExistsAsync(string name, CancellationToken cancellationToken = default);
+    Task<bool> NameExistsAsync(TemplateName name, CancellationToken cancellationToken = default);
 
     void Insert(Template template);
 
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs
index d7640b8..fc3bb6d 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/Template.cs
@@ -44,7 +44,7 @@ public static Result<Template> Create(
             UpdatedAtUtc = utcNow
         };
 
-        template.Raise(new TemplateCreatedDomainEvent(template.Id, name.Value, tier.ToString()));
+        template.Raise(new TemplateCreatedDomainEvent(template.Id, name.Value, tier));
         template.Raise(template.BuildManifestEvent());
 
         return Result.Success(template);
@@ -113,13 +113,15 @@ public Result AddSectionVariant(
         int? uploadLimit,
         DateTime utcNow)
     {
+        string normalizedVariant = variant.Trim();
+
         if (_supportedSections.All(s => s.SectionId != sectionId))
         {
             return Result.Failure(TemplateErrors.SectionNotSupported);
         }
 
         if (_sectionVariants.Any(v => v.SectionId == sectionId &&
-                                      string.Equals(v.Variant, variant, StringComparison.OrdinalIgnoreCase)))
+                                      string.Equals(v.Variant, normalizedVariant, StringComparison.OrdinalIgnoreCase)))
         {
             return Result.Failure(TemplateErrors.DuplicateVariant);
         }
@@ -129,7 +131,7 @@ public Result AddSectionVariant(
             return Result.Failure(TemplateErrors.DuplicateDefaultVariant);
         }
 
-        _sectionVariants.Add(TemplateSectionVariant.Create(Id, sectionId, variant, isDefault, priceClass, uploadLimit));
+        _sectionVariants.Add(TemplateSectionVariant.Create(Id, sectionId, normalizedVariant, isDefault, priceClass, uploadLimit));
         UpdatedAtUtc = utcNow;
 
         Raise(BuildManifestEvent());
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateCreatedDomainEvent.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateCreatedDomainEvent.cs
index f42b3e9..ead5c9c 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateCreatedDomainEvent.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Domain/Templates/TemplateCreatedDomainEvent.cs
@@ -5,9 +5,9 @@ namespace Eternelle.Modules.Catalog.Domain.Templates;
 public sealed class TemplateCreatedDomainEvent(
     TemplateId templateId,
     string name,
-    string tier) : DomainEvent
+    TemplateTier tier) : DomainEvent
 {
     public TemplateId TemplateId { get; init; } = templateId;
     public string Name { get; init; } = name;
-    public string Tier { get; init; } = tier;
+    public TemplateTier Tier { get; init; } = tier;
 }
diff --git a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateRepository.cs b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateRepository.cs
index 0aea752..667ffc8 100644
--- a/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateRepository.cs
+++ b/src/Modules/Catalog/Eternelle.Modules.Catalog.Infrastructure/Templates/TemplateRepository.cs
@@ -13,8 +13,8 @@ await context.Templates
             .Include(t => t.SectionVariants)
             .FirstOrDefaultAsync(t => t.Id == id, cancellationToken);
 
-    public async Task<bool> NameExistsAsync(string name, CancellationToken cancellationToken = default) =>
-        await context.Templates.AnyAsync(t => t.Name == TemplateName.FromPersistence(name), cancellationToken);
+    public async Task<bool> NameExistsAsync(TemplateName name, CancellationToken cancellationToken = default) =>
+        await context.Templates.AnyAsync(t => t.Name == name, cancellationToken);
 
     public void Insert(Template template) => context.Templates.Add(template);
 
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs
index 0aa869d..45ca74d 100644
--- a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Database/Migrations/20260527101020_AddCatalogManagePermission.cs
@@ -28,6 +28,7 @@ protected override void Down(MigrationBuilder migrationBuilder)
         migrationBuilder.Sql(
             """
             DELETE FROM users.role_permissions WHERE permission_code = 'catalog:manage' AND role_name = 'Admin';
+            DELETE FROM users.permissions WHERE code = 'catalog:manage';
             """);
     }
 }
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/RegisterUser.cs b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/RegisterUser.cs
index 0e8ba35..de80685 100644
--- a/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/RegisterUser.cs
+++ b/src/Modules/Users/Eternelle.Modules.Users.Presentation/Users/RegisterUser.cs
@@ -32,7 +32,9 @@ public void MapEndpoint(IEndpointRouteBuilder app)
                 firstName,
                 lastName));
 
-            return result.Match(Results.Ok, ApiResults.Problem);
+            return result.Match(
+                id => Results.Created($"/users/{id}", new { id }),
+                ApiResults.Problem);
         })
         .RequireAuthorization()
         .WithTags(Tags.Users);

From 84e3797a4360b2df2842195c628d27e6f0a79718 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Mon, 1 Jun 2026 05:53:16 +0800
Subject: [PATCH 149/155] Eternelle-193 Add cancellation support and improve
 validation

Updated Dapper calls to use CommandDefinition with CancellationToken in IntegrationEventConsumer and ProcessInboxJob for better cancellation handling. Enhanced ReorderSectionsCommandValidator to ensure section keys are not null or whitespace.
---
 .../Inbox/IntegrationEventConsumer.cs         |  2 +-
 .../ReorderSectionsCommandValidator.cs        |  1 +
 .../Inbox/IntegrationEventConsumer.cs         |  2 +-
 .../Inbox/ProcessInboxJob.cs                  | 21 ++++++++-----------
 .../Inbox/IntegrationEventConsumer.cs         |  2 +-
 .../Inbox/IntegrationEventConsumer.cs         |  2 +-
 6 files changed, 14 insertions(+), 16 deletions(-)

diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IntegrationEventConsumer.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IntegrationEventConsumer.cs
index a3c152c..96baeec 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IntegrationEventConsumer.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Inbox/IntegrationEventConsumer.cs
@@ -34,6 +34,6 @@ INSERT INTO rsvp.inbox_messages(id, type, content, occurred_on_utc)
             ON CONFLICT (id) DO NOTHING
             """;
 
-        await connection.ExecuteAsync(sql, inboxMessage);
+        await connection.ExecuteAsync(new CommandDefinition(sql, inboxMessage, cancellationToken: context.CancellationToken));
     }
 }
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandValidator.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandValidator.cs
index 008bd77..346b086 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandValidator.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Application/Tenants/ReorderSections/ReorderSectionsCommandValidator.cs
@@ -9,5 +9,6 @@ public ReorderSectionsCommandValidator()
         RuleFor(c => c.TenantId).NotEmpty();
         RuleFor(c => c.CallerUserId).NotEmpty();
         RuleFor(c => c.OrderedSectionKeys).NotEmpty();
+        RuleForEach(c => c.OrderedSectionKeys).Must(s => !string.IsNullOrWhiteSpace(s));
     }
 }
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IntegrationEventConsumer.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IntegrationEventConsumer.cs
index 357407b..03964e1 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IntegrationEventConsumer.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/IntegrationEventConsumer.cs
@@ -34,6 +34,6 @@ INSERT INTO tenancy.inbox_messages(id, type, content, occurred_on_utc)
             ON CONFLICT (id) DO NOTHING
             """;
 
-        await connection.ExecuteAsync(sql, inboxMessage);
+        await connection.ExecuteAsync(new CommandDefinition(sql, inboxMessage, cancellationToken: context.CancellationToken));
     }
 }
diff --git a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ProcessInboxJob.cs b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ProcessInboxJob.cs
index c4bfce9..b1db130 100644
--- a/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ProcessInboxJob.cs
+++ b/src/Modules/Tenancy/Eternelle.Modules.Tenancy.Infrastructure/Inbox/ProcessInboxJob.cs
@@ -31,7 +31,7 @@ public async Task Execute(IJobExecutionContext context)
         await using DbConnection connection = await dbConnectionFactory.OpenConnectionAsync();
         await using DbTransaction transaction = await connection.BeginTransactionAsync();
 
-        IReadOnlyList<InboxMessageResponse> inboxMessages = await GetInboxMessagesAsync(connection, transaction);
+        IReadOnlyList<InboxMessageResponse> inboxMessages = await GetInboxMessagesAsync(connection, transaction, context.CancellationToken);
 
         foreach (InboxMessageResponse inboxMessage in inboxMessages)
         {
@@ -62,7 +62,7 @@ public async Task Execute(IJobExecutionContext context)
                 exception = caughtException;
             }
 
-            await UpdateInboxMessageAsync(connection, transaction, inboxMessage, exception);
+            await UpdateInboxMessageAsync(connection, transaction, inboxMessage, exception, context.CancellationToken);
         }
 
         await transaction.CommitAsync();
@@ -72,7 +72,8 @@ public async Task Execute(IJobExecutionContext context)
 
     private async Task<IReadOnlyList<InboxMessageResponse>> GetInboxMessagesAsync(
         IDbConnection connection,
-        IDbTransaction transaction)
+        IDbTransaction transaction,
+        CancellationToken ct)
     {
         string sql =
             $"""
@@ -87,8 +88,7 @@ FOR UPDATE SKIP LOCKED
              """;
 
         IEnumerable<InboxMessageResponse> inboxMessages = await connection.QueryAsync<InboxMessageResponse>(
-            sql,
-            transaction: transaction);
+            new CommandDefinition(sql, transaction: transaction, cancellationToken: ct));
 
         return inboxMessages.AsList();
     }
@@ -97,7 +97,8 @@ private async Task UpdateInboxMessageAsync(
         IDbConnection connection,
         IDbTransaction transaction,
         InboxMessageResponse inboxMessage,
-        Exception? exception)
+        Exception? exception,
+        CancellationToken ct)
     {
         if (exception is null)
         {
@@ -110,9 +111,7 @@ UPDATE tenancy.inbox_messages
                 """;
 
             await connection.ExecuteAsync(
-                sql,
-                new { inboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow },
-                transaction: transaction);
+                new CommandDefinition(sql, new { inboxMessage.Id, ProcessedOnUtc = dateTimeProvider.UtcNow }, transaction: transaction, cancellationToken: ct));
         }
         else
         {
@@ -124,9 +123,7 @@ UPDATE tenancy.inbox_messages
                 """;
 
             await connection.ExecuteAsync(
-                sql,
-                new { inboxMessage.Id, Error = exception.ToString() },
-                transaction: transaction);
+                new CommandDefinition(sql, new { inboxMessage.Id, Error = exception.ToString() }, transaction: transaction, cancellationToken: ct));
         }
     }
 
diff --git a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IntegrationEventConsumer.cs b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IntegrationEventConsumer.cs
index 3abbf06..efd0517 100644
--- a/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IntegrationEventConsumer.cs
+++ b/src/Modules/Users/Eternelle.Modules.Users.Infrastructure/Inbox/IntegrationEventConsumer.cs
@@ -34,6 +34,6 @@ INSERT INTO users.inbox_messages(id, type, content, occurred_on_utc)
             ON CONFLICT (id) DO NOTHING
             """;
 
-        await connection.ExecuteAsync(sql, inboxMessage);
+        await connection.ExecuteAsync(new CommandDefinition(sql, inboxMessage, cancellationToken: context.CancellationToken));
     }
 }
diff --git a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IntegrationEventConsumer.cs b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IntegrationEventConsumer.cs
index 2c7f071..9be70d8 100644
--- a/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IntegrationEventConsumer.cs
+++ b/src/Modules/Weddings/Eternelle.Modules.Weddings.Infrastructure/Inbox/IntegrationEventConsumer.cs
@@ -34,6 +34,6 @@ INSERT INTO wedding.inbox_messages(id, type, content, occurred_on_utc)
             ON CONFLICT (id) DO NOTHING
             """;
 
-        await connection.ExecuteAsync(sql, inboxMessage);
+        await connection.ExecuteAsync(new CommandDefinition(sql, inboxMessage, cancellationToken: context.CancellationToken));
     }
 }

From 42a6923f80ab5ff267c200e4fa64127607d3108f Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Mon, 1 Jun 2026 06:12:17 +0800
Subject: [PATCH 150/155] Eternelle-193 Refactor RSVP lookup code logic, docs,
 and validation

- Rename ITokenGenerator to ILookupCodeGenerator and update usages
- Retry guest lookup code generation up to 5 times to avoid collisions
- Use LookupCode value object in GuestLookupCodeRegeneratedDomainEvent
- Improve validation for guest listing and RSVP deadline commands
- Update docs: add new modules, rename SnapShare to SocialShare, remove obsolete endpoints/plan limits
- Make RichDescriptionErrors public
- Fix RemoveGuestCommandHandler to use correct GuestId
---
 README.md                                     |  2 +-
 docs/modules/catalog.md                       |  2 ++
 docs/modules/weddings.md                      | 35 +++----------------
 .../Text/RichDescriptionErrors.cs             |  2 +-
 ...enGenerator.cs => ILookupCodeGenerator.cs} |  2 +-
 .../Guests/AddGuest/AddGuestCommandHandler.cs | 12 +++++--
 ...LookupCodeRegeneratedDomainEventHandler.cs |  2 +-
 .../ListGuests/ListGuestsQueryValidator.cs    | 10 ++++++
 .../RegenerateGuestTokenCommandHandler.cs     |  2 +-
 .../RemoveGuest/RemoveGuestCommandHandler.cs  |  2 +-
 .../SetRsvpDeadlineCommandValidator.cs        |  9 +++--
 .../Guests/Guest.cs                           |  2 +-
 .../GuestLookupCodeRegeneratedDomainEvent.cs  |  5 +--
 .../RsvpModule.cs                             |  2 +-
 .../Security/LookupCodeGenerator.cs           |  2 +-
 15 files changed, 44 insertions(+), 47 deletions(-)
 rename src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Security/{ITokenGenerator.cs => ILookupCodeGenerator.cs} (73%)

diff --git a/README.md b/README.md
index b52ebea..461421f 100644
--- a/README.md
+++ b/README.md
@@ -135,7 +135,7 @@ src/
       *.IntegrationEvents/       # Cross-module event contracts (only externally-referenceable project)
 ```
 
-Module-level configuration files (`modules.weddings.json`, `modules.users.json`, `modules.catalog.json`) are loaded by `AddModuleConfiguration(["weddings", "users", "catalog"])` and keep per-module settings out of the root `appsettings.json`.
+Module-level configuration files (`modules.weddings.json`, `modules.users.json`, `modules.catalog.json`, `modules.tenancy.json`, `modules.rsvp.json`, `modules.album.json`) are loaded by `AddModuleConfiguration(["weddings", "users", "catalog", "tenancy", "rsvp", "album"])` and keep per-module settings out of the root `appsettings.json`.
 
 ---
 
diff --git a/docs/modules/catalog.md b/docs/modules/catalog.md
index 8931768..0a66562 100644
--- a/docs/modules/catalog.md
+++ b/docs/modules/catalog.md
@@ -12,6 +12,7 @@
 ## Aggregate
 
 ### `Template` (aggregate root) — table `templates`
+
 | Property | Type | Notes |
 |---|---|---|
 | `Id` | `TemplateId` | `readonly record struct` over **`Guid`** (`TemplateId.New()`) — *not* a string slug |
@@ -31,6 +32,7 @@ Owned collections (all cascade-delete, accessed via backing fields):
 | `TemplateSectionVariant` | `template_section_variants` | `SectionId`, `variant`, `isDefault`, `PriceClass`, `uploadLimit?` |
 
 ### Invariants (enforced in the aggregate)
+
 - Duplicate `themeIndex` → `DuplicateThemeIndex`.
 - A section can be supported once → `SectionAlreadySupported`.
 - A variant may only be added for a supported section → `SectionNotSupported`.
diff --git a/docs/modules/weddings.md b/docs/modules/weddings.md
index 6ace03c..11688e6 100644
--- a/docs/modules/weddings.md
+++ b/docs/modules/weddings.md
@@ -17,14 +17,13 @@ This is the largest module. It is organised by aggregate; each aggregate root ha
 
 | Aggregate root | Owned children | Table | Notes |
 |---|---|---|---|
-| `Wedding` | `Partner` (≤ 2), `SnapShareConfig` (1:1) | `profiles` | Core profile; `TenantId` immutable; `Plan` (free/pro/plus) |
+| `Wedding` | `Partner` (≤ 2), `SocialShareConfig` (1:1) | `profiles` | Core profile; `TenantId` immutable |
 | `StoryMoment` | — | `story_moments` | Ordered timeline entries |
 | `EntourageGroup` | `EntourageMember`, `EntourageCouple` | `entourage_groups` | Couple pairings constrained by group type |
 | `DressCodeConfig` | `DressCodeColor`, `DressCodeImage` | `dress_code_configs` | 1:1 with wedding; palette + reference images |
 | `CeremonyAct` | — | `ceremony_acts` | Program-of-events entries (`act_time` clock time) |
 | `GalleryImage` | — | `gallery_images` | Curated photo gallery |
 | `GiftOption` | — | `gift_options` | Registry / monetary gift cards |
-| `GuestPhoto` | — | `guest_photos` | Guest-uploaded SnapShare photos (own lifecycle) |
 | `VendorCredit` | — | `vendor_credits` | Vendor attribution |
 | `Reminder` | — | `reminders` | Guest reminders |
 
@@ -35,8 +34,7 @@ All IDs are `readonly record struct` wrappers over `Guid` (`WeddingId`, `Partner
 - At most two partners (`PartnerNumber` 1 or 2); the pair is unique per wedding.
 - `TenantId` is a cross-module reference to `tenancy.tenants` — treated as opaque, never joined.
 - `SchemaVersion` starts at 1 and is bumped only by migration scripts, never by user edits.
-- `SnapShare` is null until `ConfigureSnapShare()` is first called.
-- `Plan` defaults to `Free`; changed only via `ChangePlan()` (driven by a future Subscriptions integration event, not user edits).
+- `SocialShare` is null until `ConfigureSocialShare()` is first called.
 
 ### EntourageGroup pairing rules
 
@@ -78,7 +76,6 @@ All persisted as **integers** via `HasConversion<int>()`.
 
 | Enum | Members |
 |---|---|
-| `WeddingPlan` | `Free = 0`, `Pro = 1`, `Plus = 2` |
 | `PartnerNumber` | `One = 1`, `Two = 2` (DB `CHECK (partner_number IN (1,2))`) |
 | `SnapShareModerationMode` | `Auto = 0`, `Manual = 1` |
 | `GuestPhotoStatus` | `Pending = 0`, `Approved = 1`, `Rejected = 2`, `OverLimit = 3` |
@@ -88,14 +85,6 @@ All persisted as **integers** via `HasConversion<int>()`.
 
 ---
 
-## Plan limits & guest-photo invariants
-
-- `WeddingPlanLimits.PhotoLimit(plan)` → Free 50, Pro 250, Plus `null` (unlimited).
-- Photos over the limit are **not deleted** — `EnforcePhotoLimitAsync` marks them `OverLimit` via raw SQL UPDATE.
-- Pre-upload quota checks use `CountActiveByWeddingIdAsync` (excludes `OverLimit`), never `CountByWeddingIdAsync`.
-- Upload slots are Redis-backed (15-min TTL, single-use; `GETDEL` for single, Lua script for batch). Batch redemption is all-or-nothing. Falls back to `StubUploadSlotStore` (in-memory) when Redis is unavailable.
-- Duplicate slot IDs in a batch are rejected before `RedeemManyAsync`.
-
 ---
 
 ## Endpoints
@@ -111,8 +100,7 @@ All under `/weddings`, tagged `Weddings`, `RequireAuthorization()` unless noted.
 | PUT | `weddings/{weddingId}/details` |
 | POST | `weddings/{weddingId}/partners` |
 | PUT | `weddings/{weddingId}/partners/{partnerId}` |
-| PUT | `weddings/{weddingId}/snap-share` |
-| POST | `weddings/{weddingId}/snap-share/regenerate-token` |
+| PUT | `weddings/{weddingId}/social-share` |
 
 ### Section CRUD (story-moments, ceremony-acts, gift-options, gallery, vendor-credits, reminders)
 
@@ -126,26 +114,11 @@ Each follows the same shape: `POST` create, `GET` list, `PUT {id}` update, `DELE
 
 `…/dress-code` (create/get/update), `…/dress-code/{id}/colors[/{colorId}]` (+ reorder), `…/dress-code/{id}/images[/{imageId}]` (+ reorder).
 
-### Guest photos (SnapShare)
-
-| Verb | Route | Auth |
-|---|---|---|
-| GET | `photos/upload` | anonymous (token context) |
-| POST | `photos/upload/presign` | anonymous + rate-limited |
-| POST | `photos/upload` | anonymous + `RequireRateLimiting(GuestPhotoUpload)` |
-| GET | `weddings/{weddingId}/photos/feed` | anonymous (public approved feed) |
-| GET | `weddings/{weddingId}/photos` | authorized |
-| PATCH | `weddings/{weddingId}/photos/{photoId}/approve` \| `/reject` | authorized |
-| DELETE | `weddings/{weddingId}/photos/{photoId}` | authorized |
-| POST | `weddings/{weddingId}/photos/bulk-approve` \| `bulk-reject` \| `bulk-delete` | authorized |
-
-The public upload endpoints are `AllowAnonymous` and paired with the IP-based `guest-photo-upload` fixed-window rate limiter (10/min) defined in `Program.cs`.
-
 ---
 
 ## Domain & integration events
 
-Domain events are raised inside aggregates and persisted to `wedding.outbox_messages` by `InsertOutboxMessagesInterceptor`, then dispatched by `ProcessOutboxJob`. Representative events: `WeddingCreated`, `WeddingDetailsUpdated`, `WeddingPartnerAdded/Updated`, `WeddingPlanChanged`, `WeddingSnapShareUpdated`, `GuestPhotoCreated/Approved/Rejected`, and `…Created` events for each section aggregate.
+Domain events are raised inside aggregates and persisted to `wedding.outbox_messages` by `InsertOutboxMessagesInterceptor`, then dispatched by `ProcessOutboxJob`. Representative events: `WeddingCreated`, `WeddingDetailsUpdated`, `WeddingPartnerAdded/Updated`, `WeddingSocialShareUpdated`, and `…Created` events for each section aggregate.
 
 **Published integration event:** `WeddingCreatedIntegrationEvent(weddingId, tenantId, weddingDate)` — emitted by `WeddingCreatedDomainEventHandler` directly from the domain-event payload (no repository reload). No other module consumes it yet (the Tenancy/RSVP/Guestbook consumers are not built).
 
diff --git a/src/Common/Eternelle.Common.Domain/Text/RichDescriptionErrors.cs b/src/Common/Eternelle.Common.Domain/Text/RichDescriptionErrors.cs
index 21a80a4..2577009 100644
--- a/src/Common/Eternelle.Common.Domain/Text/RichDescriptionErrors.cs
+++ b/src/Common/Eternelle.Common.Domain/Text/RichDescriptionErrors.cs
@@ -2,7 +2,7 @@
 
 namespace Eternelle.Common.Domain.Text;
 
-internal static class RichDescriptionErrors
+public static class RichDescriptionErrors
 {
     public static readonly Error Empty =
         Error.Problem("RichDescription.Empty", "Description must not be empty");
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Security/ITokenGenerator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Security/ILookupCodeGenerator.cs
similarity index 73%
rename from src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Security/ITokenGenerator.cs
rename to src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Security/ILookupCodeGenerator.cs
index c74ed7a..fcd2fb2 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Security/ITokenGenerator.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Abstractions/Security/ILookupCodeGenerator.cs
@@ -1,6 +1,6 @@
 namespace Eternelle.Modules.Rsvp.Application.Abstractions.Security;
 
-public interface ITokenGenerator
+public interface ILookupCodeGenerator
 {
     string GenerateLookupCode();
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs
index e003a81..e127624 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/AddGuest/AddGuestCommandHandler.cs
@@ -14,7 +14,7 @@ namespace Eternelle.Modules.Rsvp.Application.Guests.AddGuest;
 internal sealed class AddGuestCommandHandler(
     IGuestRepository guestRepository,
     IWeddingProjection weddings,
-    ITokenGenerator tokenGenerator,
+    ILookupCodeGenerator tokenGenerator,
     IUnitOfWork unitOfWork,
     IDateTimeProvider clock) : ICommandHandler<AddGuestCommand, Guid>
 {
@@ -72,8 +72,9 @@ public async Task<Result<Guid>> Handle(AddGuestCommand command, CancellationToke
             groupLabel = groupResult.Value;
         }
 
-        LookupCode lookupCode;
-        while (true)
+        const int maxAttempts = 5;
+        LookupCode? lookupCode = null;
+        for (int attempt = 0; attempt < maxAttempts; attempt++)
         {
             string raw = tokenGenerator.GenerateLookupCode();
             if (!await guestRepository.LookupCodeExistsAsync(raw, cancellationToken))
@@ -83,6 +84,11 @@ public async Task<Result<Guid>> Handle(AddGuestCommand command, CancellationToke
             }
         }
 
+        if (lookupCode is null)
+        {
+            return Result.Failure<Guid>(GuestErrors.LookupCodeAlreadyTaken);
+        }
+
         Result<Guest> guestResult = Guest.Create(
             weddingId, firstResult.Value, lastResult.Value, email, phone, lookupCode,
             command.AllowedCompanions, command.TableNumber, groupLabel, clock.UtcNow);
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestLookupCodeRegeneratedDomainEventHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestLookupCodeRegeneratedDomainEventHandler.cs
index dde0c58..394cfbe 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestLookupCodeRegeneratedDomainEventHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GuestLookupCodeRegeneratedDomainEventHandler.cs
@@ -15,6 +15,6 @@ public override Task Handle(GuestLookupCodeRegeneratedDomainEvent domainEvent, C
                 domainEvent.OccurredOnUtc,
                 domainEvent.GuestId.Value,
                 domainEvent.WeddingId.Value,
-                domainEvent.LookupCode),
+                domainEvent.LookupCode.Value),
             cancellationToken);
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs
index f00d4b4..cba7114 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs
@@ -1,12 +1,22 @@
+using Eternelle.Common.Domain.Text;
 using FluentValidation;
 
 namespace Eternelle.Modules.Rsvp.Application.Guests.ListGuests;
 
 internal sealed class ListGuestsQueryValidator : AbstractValidator<ListGuestsQuery>
 {
+    private static readonly string[] ValidAttendingStates = ["attending", "declined", "no_response"];
+
     public ListGuestsQueryValidator()
     {
         RuleFor(q => q.WeddingId).NotEmpty();
+        RuleFor(q => q.Skip).GreaterThanOrEqualTo(0).WithMessage("Skip must be 0 or greater.");
         RuleFor(q => q.Take).InclusiveBetween(1, 100).WithMessage("Take must be between 1 and 100.");
+        RuleFor(q => q.AttendingState)
+            .Must(s => s is null || ValidAttendingStates.Contains(s))
+            .WithMessage("AttendingState must be 'attending', 'declined', or 'no_response'.");
+        RuleFor(q => q.GroupName)
+            .MaximumLength(GroupLabel.MaxLength)
+            .When(q => q.GroupName is not null);
     }
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs
index 0f47730..57c6cf3 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RegenerateGuestToken/RegenerateGuestTokenCommandHandler.cs
@@ -11,7 +11,7 @@ namespace Eternelle.Modules.Rsvp.Application.Guests.RegenerateGuestToken;
 
 internal sealed class RegenerateGuestTokenCommandHandler(
     IGuestRepository guestRepository,
-    ITokenGenerator tokenGenerator,
+    ILookupCodeGenerator tokenGenerator,
     IUnitOfWork unitOfWork,
     IDateTimeProvider clock) : ICommandHandler<RegenerateGuestTokenCommand, string>
 {
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandHandler.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandHandler.cs
index 5cb20b2..8ef7bbe 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandHandler.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/RemoveGuest/RemoveGuestCommandHandler.cs
@@ -21,7 +21,7 @@ public async Task<Result> Handle(RemoveGuestCommand command, CancellationToken c
             return Result.Failure(GuestErrors.NotFound(guestId));
         }
 
-        await submissionRepository.NullifyGuestIdAsync(new GuestId(command.GuestId), cancellationToken);
+        await submissionRepository.NullifyGuestIdAsync(guestId, cancellationToken);
 
         guest.MarkRemoved();
 
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandValidator.cs
index c7bff7b..463296e 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandValidator.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Weddings/SetRsvpDeadline/SetRsvpDeadlineCommandValidator.cs
@@ -1,14 +1,19 @@
+using Eternelle.Common.Application.Clock;
 using FluentValidation;
 
 namespace Eternelle.Modules.Rsvp.Application.Weddings.SetRsvpDeadline;
 
 internal sealed class SetRsvpDeadlineCommandValidator : AbstractValidator<SetRsvpDeadlineCommand>
 {
-    public SetRsvpDeadlineCommandValidator()
+    private readonly IDateTimeProvider _dateTimeProvider;
+
+    public SetRsvpDeadlineCommandValidator(IDateTimeProvider dateTimeProvider)
     {
+        _dateTimeProvider = dateTimeProvider;
+
         RuleFor(c => c.WeddingId).NotEmpty();
         RuleFor(c => c.Deadline)
-            .Must(d => d >= DateOnly.FromDateTime(DateTime.UtcNow.Date))
+            .Must(d => d >= DateOnly.FromDateTime(_dateTimeProvider.UtcNow.Date))
             .WithMessage("Deadline must be today or in the future.");
     }
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
index 89c093e..de7d935 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/Guest.cs
@@ -132,7 +132,7 @@ public void RegenerateLookupCode(LookupCode newCode, DateTime utcNow)
     {
         LookupCode = newCode;
         UpdatedAtUtc = utcNow;
-        Raise(new GuestLookupCodeRegeneratedDomainEvent(Id, WeddingId, newCode.Value));
+        Raise(new GuestLookupCodeRegeneratedDomainEvent(Id, WeddingId, newCode));
     }
 
     public void MarkRemoved()
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLookupCodeRegeneratedDomainEvent.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLookupCodeRegeneratedDomainEvent.cs
index ed7eaf4..3acface 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLookupCodeRegeneratedDomainEvent.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Domain/Guests/GuestLookupCodeRegeneratedDomainEvent.cs
@@ -1,11 +1,12 @@
 using Eternelle.Common.Domain;
+using Eternelle.Modules.Rsvp.Domain.Shared;
 using Eternelle.Modules.Rsvp.Domain.Weddings;
 
 namespace Eternelle.Modules.Rsvp.Domain.Guests;
 
-public sealed class GuestLookupCodeRegeneratedDomainEvent(GuestId guestId, WeddingId weddingId, string lookupCode) : DomainEvent
+public sealed class GuestLookupCodeRegeneratedDomainEvent(GuestId guestId, WeddingId weddingId, LookupCode lookupCode) : DomainEvent
 {
     public GuestId GuestId { get; init; } = guestId;
     public WeddingId WeddingId { get; init; } = weddingId;
-    public string LookupCode { get; init; } = lookupCode;
+    public LookupCode LookupCode { get; init; } = lookupCode;
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/RsvpModule.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/RsvpModule.cs
index 65ced50..868ba43 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/RsvpModule.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/RsvpModule.cs
@@ -55,7 +55,7 @@ private static void AddInfrastructure(this IServiceCollection services, IConfigu
         services.AddScoped<IGuestRepository, GuestRepository>();
         services.AddScoped<IRsvpSubmissionRepository, RsvpSubmissionRepository>();
 
-        services.AddSingleton<ITokenGenerator, LookupCodeGenerator>();
+        services.AddSingleton<ILookupCodeGenerator, LookupCodeGenerator>();
 
         services.AddOptions<OutboxOptions>()
             .Bind(configuration.GetSection("Rsvp:Outbox"))
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs
index 1cfbd52..da66076 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs
@@ -4,7 +4,7 @@
 
 namespace Eternelle.Modules.Rsvp.Infrastructure.Security;
 
-internal sealed class LookupCodeGenerator : ITokenGenerator
+internal sealed class LookupCodeGenerator : ILookupCodeGenerator
 {
     public string GenerateLookupCode()
     {

From f74341ef2b253036525c9fdc123af7503917d6a4 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Mon, 1 Jun 2026 06:59:30 +0800
Subject: [PATCH 151/155] Eternelle-193 Refactor validation, normalization, and
 event handling

- Centralize LookupCode normalization logic in a static method
- Enforce max limits in bulk photo and upload slot validators
- Add/extend validators for feed, guest, and settings commands
- Use strongly-typed PhotoStatus in feed queries
- Improve event handling for guest/invitee lifecycle
- Annotate BulkDeletePhotosEndpoint request with [FromBody]
- Introduce constants and clean up magic numbers and usings
---
 .../DeleteOwnPhotoCommandHandler.cs               |  3 ++-
 .../GenerateGuestUploadSlotsCommandHandler.cs     |  3 ++-
 .../GenerateGuestUploadSlotsCommandValidator.cs   |  3 ++-
 .../GetUploadContextQueryHandler.cs               |  3 ++-
 .../RegisterGuestPhotosCommandHandler.cs          |  3 ++-
 .../BulkApprovePhotosCommandValidator.cs          |  7 ++++++-
 .../BulkDeletePhotosCommandValidator.cs           |  7 ++++++-
 .../BulkRejectPhotosCommandValidator.cs           |  7 ++++++-
 .../GenerateHostUploadSlotsCommandValidator.cs    |  3 ++-
 .../Photos/GetFeed/GetFeedQueryHandler.cs         |  4 +++-
 .../Photos/GetFeed/GetFeedQueryValidator.cs       | 15 +++++++++++++++
 .../UpdateSettingsCommandValidator.cs             |  1 +
 .../UpdateUploadLimitCommandValidator.cs          | 14 ++++++++++++++
 .../Uploads/IAlbumUploadService.cs                |  1 +
 .../Shared/LookupCode.cs                          |  5 ++++-
 .../Photos/BulkDeletePhotosEndpoint.cs            |  3 ++-
 ...ookupCodeRegeneratedIntegrationEventHandler.cs |  4 ++--
 .../Rsvp/GuestRemovedIntegrationEventHandler.cs   |  8 ++++----
 .../Guests/GetGuest/GetGuestQueryValidator.cs     | 12 ++++++++++++
 19 files changed, 88 insertions(+), 18 deletions(-)
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryValidator.cs
 create mode 100644 src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandValidator.cs
 create mode 100644 src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryValidator.cs

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandHandler.cs
index 28791aa..053c0ca 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/DeleteOwnPhoto/DeleteOwnPhotoCommandHandler.cs
@@ -3,6 +3,7 @@
 using Eternelle.Modules.Album.Application.Abstractions.Data;
 using Eternelle.Modules.Album.Domain.Invitees;
 using Eternelle.Modules.Album.Domain.Photos;
+using Eternelle.Modules.Album.Domain.Shared;
 
 namespace Eternelle.Modules.Album.Application.Invitees.DeleteOwnPhoto;
 
@@ -14,7 +15,7 @@ internal sealed class DeleteOwnPhotoCommandHandler(
 {
     public async Task<Result> Handle(DeleteOwnPhotoCommand command, CancellationToken cancellationToken)
     {
-        string normalizedCode = command.LookupCode.Replace("-", string.Empty).Trim().ToUpperInvariant();
+        string normalizedCode = LookupCode.Normalize(command.LookupCode);
 
         Invitee? invitee = await inviteeRepository.GetByLookupCodeAsync(normalizedCode, cancellationToken);
         if (invitee is null)
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandHandler.cs
index 260e678..5b9aafe 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandHandler.cs
@@ -3,6 +3,7 @@
 using Eternelle.Modules.Album.Application.Uploads;
 using Eternelle.Modules.Album.Domain.Invitees;
 using Eternelle.Modules.Album.Domain.Photos;
+using Eternelle.Modules.Album.Domain.Shared;
 
 namespace Eternelle.Modules.Album.Application.Invitees.GenerateGuestUploadSlots;
 
@@ -15,7 +16,7 @@ public async Task<Result<IReadOnlyList<UploadSlotResponse>>> Handle(
         GenerateGuestUploadSlotsCommand command,
         CancellationToken cancellationToken)
     {
-        string normalizedCode = command.LookupCode.Replace("-", string.Empty).Trim().ToUpperInvariant();
+        string normalizedCode = LookupCode.Normalize(command.LookupCode);
 
         Invitee? invitee = await inviteeRepository.GetByLookupCodeAsync(normalizedCode, cancellationToken);
         if (invitee is null)
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandValidator.cs
index 30ee2bd..41f1166 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GenerateGuestUploadSlots/GenerateGuestUploadSlotsCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Modules.Album.Application.Uploads;
 using FluentValidation;
 
 namespace Eternelle.Modules.Album.Application.Invitees.GenerateGuestUploadSlots;
@@ -7,6 +8,6 @@ internal sealed class GenerateGuestUploadSlotsCommandValidator : AbstractValidat
     public GenerateGuestUploadSlotsCommandValidator()
     {
         RuleFor(c => c.LookupCode).NotEmpty();
-        RuleFor(c => c.Count).InclusiveBetween(1, 30);
+        RuleFor(c => c.Count).InclusiveBetween(1, IAlbumUploadService.MaxSlotsPerRequest);
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs
index c6334b2..e6b92ef 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/GetUploadContext/GetUploadContextQueryHandler.cs
@@ -4,6 +4,7 @@
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
 using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Shared;
 using Eternelle.Modules.Album.Domain.Photos;
 using Eternelle.Modules.Album.Domain.Settings;
 
@@ -19,7 +20,7 @@ public async Task<Result<UploadContextResponse>> Handle(
         GetUploadContextQuery query,
         CancellationToken cancellationToken)
     {
-        string normalizedCode = query.LookupCode.Replace("-", string.Empty).Trim().ToUpperInvariant();
+        string normalizedCode = LookupCode.Normalize(query.LookupCode);
 
         Invitee? invitee = await inviteeRepository.GetByLookupCodeAsync(normalizedCode, cancellationToken);
         if (invitee is null)
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
index d166deb..d8f6700 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Invitees/RegisterGuestPhotos/RegisterGuestPhotosCommandHandler.cs
@@ -3,6 +3,7 @@
 using Eternelle.Common.Domain.People;
 using Eternelle.Modules.Album.Application.Uploads;
 using Eternelle.Modules.Album.Domain.Invitees;
+using Eternelle.Modules.Album.Domain.Shared;
 using Eternelle.Modules.Album.Domain.Photos;
 
 namespace Eternelle.Modules.Album.Application.Invitees.RegisterGuestPhotos;
@@ -16,7 +17,7 @@ public async Task<Result<IReadOnlyList<Guid>>> Handle(
         RegisterGuestPhotosCommand command,
         CancellationToken cancellationToken)
     {
-        string normalizedCode = command.LookupCode.Replace("-", string.Empty).Trim().ToUpperInvariant();
+        string normalizedCode = LookupCode.Normalize(command.LookupCode);
 
         Invitee? invitee = await inviteeRepository.GetByLookupCodeAsync(normalizedCode, cancellationToken);
         if (invitee is null)
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
index 531d1aa..8e523a7 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
@@ -4,10 +4,15 @@ namespace Eternelle.Modules.Album.Application.Photos.BulkApprovePhotos;
 
 internal sealed class BulkApprovePhotosCommandValidator : AbstractValidator<BulkApprovePhotosCommand>
 {
+    private const int MaxBulkPhotoIds = 100;
+
     public BulkApprovePhotosCommandValidator()
     {
         RuleFor(c => c.WeddingId).NotEmpty();
-        RuleFor(c => c.PhotoIds).NotEmpty();
+        RuleFor(c => c.PhotoIds)
+            .NotEmpty()
+            .Must(list => list.Count <= MaxBulkPhotoIds)
+            .WithMessage($"PhotoIds must not exceed {MaxBulkPhotoIds} items.");
         RuleForEach(c => c.PhotoIds).NotEqual(Guid.Empty);
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
index bd0c22f..4e6e602 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
@@ -4,10 +4,15 @@ namespace Eternelle.Modules.Album.Application.Photos.BulkDeletePhotos;
 
 internal sealed class BulkDeletePhotosCommandValidator : AbstractValidator<BulkDeletePhotosCommand>
 {
+    private const int MaxBulkPhotoIds = 100;
+
     public BulkDeletePhotosCommandValidator()
     {
         RuleFor(c => c.WeddingId).NotEmpty();
-        RuleFor(c => c.PhotoIds).NotEmpty();
+        RuleFor(c => c.PhotoIds)
+            .NotEmpty()
+            .Must(list => list.Count <= MaxBulkPhotoIds)
+            .WithMessage($"PhotoIds must not exceed {MaxBulkPhotoIds} items.");
         RuleForEach(c => c.PhotoIds).NotEqual(Guid.Empty);
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
index da3dca5..36272af 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
@@ -4,10 +4,15 @@ namespace Eternelle.Modules.Album.Application.Photos.BulkRejectPhotos;
 
 internal sealed class BulkRejectPhotosCommandValidator : AbstractValidator<BulkRejectPhotosCommand>
 {
+    private const int MaxBulkPhotoIds = 100;
+
     public BulkRejectPhotosCommandValidator()
     {
         RuleFor(c => c.WeddingId).NotEmpty();
-        RuleFor(c => c.PhotoIds).NotEmpty();
+        RuleFor(c => c.PhotoIds)
+            .NotEmpty()
+            .Must(list => list.Count <= MaxBulkPhotoIds)
+            .WithMessage($"PhotoIds must not exceed {MaxBulkPhotoIds} items.");
         RuleForEach(c => c.PhotoIds).NotEqual(Guid.Empty);
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandValidator.cs
index 18ad6c4..fa4cd92 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GenerateHostUploadSlots/GenerateHostUploadSlotsCommandValidator.cs
@@ -1,3 +1,4 @@
+using Eternelle.Modules.Album.Application.Uploads;
 using FluentValidation;
 
 namespace Eternelle.Modules.Album.Application.Photos.GenerateHostUploadSlots;
@@ -7,6 +8,6 @@ internal sealed class GenerateHostUploadSlotsCommandValidator : AbstractValidato
     public GenerateHostUploadSlotsCommandValidator()
     {
         RuleFor(c => c.WeddingId).NotEmpty();
-        RuleFor(c => c.Count).InclusiveBetween(1, 30);
+        RuleFor(c => c.Count).InclusiveBetween(1, IAlbumUploadService.MaxSlotsPerRequest);
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryHandler.cs
index 260c1fa..2a4f901 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryHandler.cs
@@ -3,6 +3,7 @@
 using Eternelle.Common.Application.Data;
 using Eternelle.Common.Application.Messaging;
 using Eternelle.Common.Domain;
+using Eternelle.Modules.Album.Domain.Photos;
 
 namespace Eternelle.Modules.Album.Application.Photos.GetFeed;
 
@@ -27,7 +28,7 @@ public async Task<Result<IReadOnlyList<FeedItem>>> Handle(
                  uploaded_at   AS {nameof(FeedItem.UploadedAt)}
              FROM album.photos
              WHERE wedding_id = @WeddingId
-               AND status = 1
+               AND status = @ApprovedStatus
              ORDER BY uploaded_at DESC
              LIMIT @Take OFFSET @Skip
              """;
@@ -38,6 +39,7 @@ LIMIT @Take OFFSET @Skip
                 new
                 {
                     query.WeddingId,
+                    ApprovedStatus = (int)PhotoStatus.Approved,
                     Take = query.PageSize,
                     Skip = (query.Page - 1) * query.PageSize
                 },
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryValidator.cs
new file mode 100644
index 0000000..c9f7dbf
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/GetFeed/GetFeedQueryValidator.cs
@@ -0,0 +1,15 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Photos.GetFeed;
+
+internal sealed class GetFeedQueryValidator : AbstractValidator<GetFeedQuery>
+{
+    private const int MaxPageSize = 50;
+
+    public GetFeedQueryValidator()
+    {
+        RuleFor(q => q.WeddingId).NotEmpty();
+        RuleFor(q => q.Page).GreaterThanOrEqualTo(1);
+        RuleFor(q => q.PageSize).InclusiveBetween(1, MaxPageSize).WithMessage($"PageSize must be between 1 and {MaxPageSize}.");
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandValidator.cs
index 44c7984..5e4aff9 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateSettings/UpdateSettingsCommandValidator.cs
@@ -7,5 +7,6 @@ internal sealed class UpdateSettingsCommandValidator : AbstractValidator<UpdateS
     public UpdateSettingsCommandValidator()
     {
         RuleFor(c => c.WeddingId).NotEmpty();
+        RuleFor(c => c.ModerationMode).IsInEnum();
     }
 }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandValidator.cs
new file mode 100644
index 0000000..071093e
--- /dev/null
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Settings/UpdateUploadLimit/UpdateUploadLimitCommandValidator.cs
@@ -0,0 +1,14 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Album.Application.Settings.UpdateUploadLimit;
+
+internal sealed class UpdateUploadLimitCommandValidator : AbstractValidator<UpdateUploadLimitCommand>
+{
+    public UpdateUploadLimitCommandValidator()
+    {
+        RuleFor(c => c.TenantId).NotEmpty();
+        RuleFor(c => c.NewLimit)
+            .GreaterThanOrEqualTo(0)
+            .When(c => c.NewLimit is not null);
+    }
+}
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/IAlbumUploadService.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/IAlbumUploadService.cs
index 0e1dd55..922b63f 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/IAlbumUploadService.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Uploads/IAlbumUploadService.cs
@@ -15,6 +15,7 @@ public record UploadSlotResponse(string SlotId, string PresignedUrl, DateTime Ex
 
 public interface IAlbumUploadService
 {
+    public const int MaxSlotsPerRequest = 30;
     Task<Result<IReadOnlyList<UploadSlotResponse>>> GenerateSlotsAsync(
         Guid weddingId, int count, CancellationToken ct);
 
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCode.cs b/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCode.cs
index c183714..4bc6c09 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCode.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Domain/Shared/LookupCode.cs
@@ -13,6 +13,9 @@ public sealed partial record LookupCode
     private LookupCode(string value) { Value = value; }
     public string Value { get; }
 
+    public static string Normalize(string? raw) =>
+        (raw ?? string.Empty).Replace("-", string.Empty).Trim().ToUpperInvariant();
+
     /// <summary>Validates and normalizes (uppercases, strips dashes/whitespace).</summary>
     public static Result<LookupCode> Create(string? raw)
     {
@@ -21,7 +24,7 @@ public static Result<LookupCode> Create(string? raw)
             return Result.Failure<LookupCode>(LookupCodeErrors.Empty);
         }
 
-        string normalized = raw.Replace("-", string.Empty).Trim().ToUpperInvariant();
+        string normalized = Normalize(raw);
         if (normalized.Length != MaxLength || !LookupCodeRegex().IsMatch(normalized))
         {
             return Result.Failure<LookupCode>(LookupCodeErrors.InvalidFormat);
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkDeletePhotosEndpoint.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkDeletePhotosEndpoint.cs
index b8aadf9..94bb043 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkDeletePhotosEndpoint.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Photos/BulkDeletePhotosEndpoint.cs
@@ -5,6 +5,7 @@
 using MediatR;
 using Microsoft.AspNetCore.Builder;
 using Microsoft.AspNetCore.Http;
+using Microsoft.AspNetCore.Mvc;
 using Microsoft.AspNetCore.Routing;
 
 namespace Eternelle.Modules.Album.Presentation.Photos;
@@ -17,7 +18,7 @@ public void MapEndpoint(IEndpointRouteBuilder app)
     {
         app.MapDelete("weddings/{weddingId:guid}/album/photos/bulk", async (
             Guid weddingId,
-            Request request,
+            [FromBody] Request request,
             ISender sender,
             CancellationToken ct) =>
         {
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
index 2de5ab5..99ba8a9 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestLookupCodeRegeneratedIntegrationEventHandler.cs
@@ -23,8 +23,8 @@ public override async Task Handle(
         Invitee? invitee = await inviteeRepository.GetByGuestIdAsync(integrationEvent.GuestId, cancellationToken);
         if (invitee is null)
         {
-            // GuestAdded not yet processed — silently ignore.
-            return;
+            throw new InvalidOperationException(
+                $"Invitee for guest {integrationEvent.GuestId} not found — GuestAdded may not yet be processed. Will retry.");
         }
 
         Result<LookupCode> codeResult = LookupCode.Create(integrationEvent.NewLookupCode);
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestRemovedIntegrationEventHandler.cs b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestRemovedIntegrationEventHandler.cs
index 411091a..b831f32 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestRemovedIntegrationEventHandler.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Presentation/Rsvp/GuestRemovedIntegrationEventHandler.cs
@@ -16,14 +16,14 @@ public override async Task Handle(
         GuestRemovedIntegrationEvent integrationEvent,
         CancellationToken cancellationToken = default)
     {
+        await photoRepository.NullifyGuestIdAsync(integrationEvent.GuestId, cancellationToken);
+
         Invitee? invitee = await inviteeRepository.GetByGuestIdAsync(integrationEvent.GuestId, cancellationToken);
-        if (invitee is null)
+        if (invitee is not null)
         {
-            return;
+            inviteeRepository.Remove(invitee);
         }
 
-        await photoRepository.NullifyGuestIdAsync(integrationEvent.GuestId, cancellationToken);
-        inviteeRepository.Remove(invitee);
         await unitOfWork.SaveChangesAsync(cancellationToken);
     }
 }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryValidator.cs
new file mode 100644
index 0000000..84c45f0
--- /dev/null
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/GetGuest/GetGuestQueryValidator.cs
@@ -0,0 +1,12 @@
+using FluentValidation;
+
+namespace Eternelle.Modules.Rsvp.Application.Guests.GetGuest;
+
+internal sealed class GetGuestQueryValidator : AbstractValidator<GetGuestQuery>
+{
+    public GetGuestQueryValidator()
+    {
+        RuleFor(q => q.WeddingId).NotEmpty();
+        RuleFor(q => q.GuestId).NotEmpty();
+    }
+}

From 3d16b4aba63c849b4ee5a675ed6cda6259a8d17b Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Mon, 1 Jun 2026 07:16:01 +0800
Subject: [PATCH 152/155] Eternelle-193 Refine cache exception handling and
 guest query validation

Updated CacheService to avoid logging on cancellation exceptions.
Improved AttendingState validation to only apply when not null.
---
 .../Eternelle.Common.Infrastructure/Caching/CacheService.cs | 6 +++---
 .../Guests/ListGuests/ListGuestsQueryValidator.cs           | 5 +++--
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/src/Common/Eternelle.Common.Infrastructure/Caching/CacheService.cs b/src/Common/Eternelle.Common.Infrastructure/Caching/CacheService.cs
index 07e4fea..1815626 100644
--- a/src/Common/Eternelle.Common.Infrastructure/Caching/CacheService.cs
+++ b/src/Common/Eternelle.Common.Infrastructure/Caching/CacheService.cs
@@ -15,7 +15,7 @@ internal sealed class CacheService(IDistributedCache cache, ILogger<CacheService
             byte[]? bytes = await cache.GetAsync(key, cancellationToken);
             return bytes is null ? default : Deserialize<T>(bytes);
         }
-        catch (Exception ex)
+        catch (Exception ex) when (ex is not OperationCanceledException and not TaskCanceledException)
         {
             logger.LogWarning(ex, "Cache read failed for key '{Key}'; treating as miss.", key);
             return default;
@@ -33,7 +33,7 @@ public async Task SetAsync<T>(
             byte[] bytes = Serialize(value);
             await cache.SetAsync(key, bytes, CacheOptions.Create(expiration), cancellationToken);
         }
-        catch (Exception ex)
+        catch (Exception ex) when (ex is not OperationCanceledException and not TaskCanceledException)
         {
             logger.LogWarning(ex, "Cache write failed for key '{Key}'.", key);
         }
@@ -45,7 +45,7 @@ public async Task RemoveAsync(string key, CancellationToken cancellationToken =
         {
             await cache.RemoveAsync(key, cancellationToken);
         }
-        catch (Exception ex)
+        catch (Exception ex) when (ex is not OperationCanceledException and not TaskCanceledException)
         {
             logger.LogWarning(ex, "Cache eviction failed for key '{Key}'.", key);
         }
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs
index cba7114..7bbb9c1 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Application/Guests/ListGuests/ListGuestsQueryValidator.cs
@@ -13,8 +13,9 @@ public ListGuestsQueryValidator()
         RuleFor(q => q.Skip).GreaterThanOrEqualTo(0).WithMessage("Skip must be 0 or greater.");
         RuleFor(q => q.Take).InclusiveBetween(1, 100).WithMessage("Take must be between 1 and 100.");
         RuleFor(q => q.AttendingState)
-            .Must(s => s is null || ValidAttendingStates.Contains(s))
-            .WithMessage("AttendingState must be 'attending', 'declined', or 'no_response'.");
+            .Must(s => ValidAttendingStates.Contains(s))
+            .WithMessage("AttendingState must be 'attending', 'declined', or 'no_response'.")
+            .When(q => q.AttendingState is not null);
         RuleFor(q => q.GroupName)
             .MaximumLength(GroupLabel.MaxLength)
             .When(q => q.GroupName is not null);

From 78eab1e626808bb42b15c5212e4c57da380e9246 Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Mon, 1 Jun 2026 07:21:47 +0800
Subject: [PATCH 153/155] Eternelle-193 Allow null PhotoIds in bulk photo
 command validators

Updated the .Must validation for PhotoIds in BulkApprovePhotosCommandValidator, BulkDeletePhotosCommandValidator, and BulkRejectPhotosCommandValidator to handle null values safely and prevent NullReferenceException. Now, PhotoIds can be null or have a count less than or equal to MaxBulkPhotoIds.
---
 .../BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs      | 2 +-
 .../Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs | 2 +-
 .../Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
index 8e523a7..edeb68e 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkApprovePhotos/BulkApprovePhotosCommandValidator.cs
@@ -11,7 +11,7 @@ public BulkApprovePhotosCommandValidator()
         RuleFor(c => c.WeddingId).NotEmpty();
         RuleFor(c => c.PhotoIds)
             .NotEmpty()
-            .Must(list => list.Count <= MaxBulkPhotoIds)
+            .Must(list => list is null || list.Count <= MaxBulkPhotoIds)
             .WithMessage($"PhotoIds must not exceed {MaxBulkPhotoIds} items.");
         RuleForEach(c => c.PhotoIds).NotEqual(Guid.Empty);
     }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
index 4e6e602..2c3ff9a 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkDeletePhotos/BulkDeletePhotosCommandValidator.cs
@@ -11,7 +11,7 @@ public BulkDeletePhotosCommandValidator()
         RuleFor(c => c.WeddingId).NotEmpty();
         RuleFor(c => c.PhotoIds)
             .NotEmpty()
-            .Must(list => list.Count <= MaxBulkPhotoIds)
+            .Must(list => list is null || list.Count <= MaxBulkPhotoIds)
             .WithMessage($"PhotoIds must not exceed {MaxBulkPhotoIds} items.");
         RuleForEach(c => c.PhotoIds).NotEqual(Guid.Empty);
     }
diff --git a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
index 36272af..1a13020 100644
--- a/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
+++ b/src/Modules/Album/Eternelle.Modules.Album.Application/Photos/BulkRejectPhotos/BulkRejectPhotosCommandValidator.cs
@@ -11,7 +11,7 @@ public BulkRejectPhotosCommandValidator()
         RuleFor(c => c.WeddingId).NotEmpty();
         RuleFor(c => c.PhotoIds)
             .NotEmpty()
-            .Must(list => list.Count <= MaxBulkPhotoIds)
+            .Must(list => list is null || list.Count <= MaxBulkPhotoIds)
             .WithMessage($"PhotoIds must not exceed {MaxBulkPhotoIds} items.");
         RuleForEach(c => c.PhotoIds).NotEqual(Guid.Empty);
     }

From 9781ba000f5ff255745d9e424f090879c30a04aa Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Mon, 1 Jun 2026 08:03:50 +0800
Subject: [PATCH 154/155] Eternelle-193 Add RSVP and Album modules; update docs
 and migrations

Updated README to reflect RSVP and Album modules as complete, adjusted planned module to Guestbook, and revised module tables. Added AlbumDbContext to migration handling. Refactored LookupCodeGenerator to use RandomNumberGenerator.GetInt32 for code generation.
---
 README.md                                          | 14 ++++++++------
 docs/modules/README.md                             |  3 ++-
 .../Extensions/MigrationExtensions.cs              |  2 ++
 .../Security/LookupCodeGenerator.cs                |  6 ++----
 4 files changed, 14 insertions(+), 11 deletions(-)

diff --git a/README.md b/README.md
index 461421f..ef4153e 100644
--- a/README.md
+++ b/README.md
@@ -13,8 +13,9 @@ Backend for **Eternelle** — a Philippine wedding platform that lets couples bu
 └───────────────────────┬────────────────────────────────────────┘
                         │ references only Infrastructure
           ┌─────────────▼─────────────┐
-          │ Modules/{Weddings,Users,  │  (4 built; RSVP/Guestbook planned)
-          │       Catalog,Tenancy}    │
+          │ Modules/{Weddings,Users,  │  (6 built; Guestbook planned)
+          │  Catalog,Tenancy,Rsvp,   │
+          │       Album}             │
           │  .Presentation            │  Minimal API endpoints (IEndpoint)
           │       │                   │
           │  .Application             │  Commands, queries, validators (MediatR)
@@ -41,15 +42,16 @@ Backend for **Eternelle** — a Philippine wedding platform that lets couples bu
 
 ## Modules
 
-Four modules are implemented; two are planned. Each is a five-project vertical slice and owns its own PostgreSQL schema. See [`docs/modules/`](docs/modules/) for per-module reference docs and [`docs/architecture.md`](docs/architecture.md) for the system architecture and cross-module data model.
+Six modules are implemented; one is planned. Each is a five-project vertical slice and owns its own PostgreSQL schema. See [`docs/modules/`](docs/modules/) for per-module reference docs and [`docs/architecture.md`](docs/architecture.md) for the system architecture and cross-module data model.
 
 | Module | Schema | Status | Summary |
 |---|---|---|---|
-| [Weddings](docs/modules/weddings.md) | `wedding` | ✅ | All couple/wedding content (profile, entourage, gallery, gifts, dress code, ceremony, guest photos, …) |
+| [Weddings](docs/modules/weddings.md) | `wedding` | ✅ | All couple/wedding content (profile, entourage, gallery, gifts, dress code, ceremony, …) |
 | [Users](docs/modules/users.md) | `users` | ✅ | Shadow user profile (Keycloak owns credentials) + RBAC |
 | [Catalog](docs/modules/catalog.md) | `catalog` | ✅ | Website template registry: themes, supported sections, section variants |
 | [Tenancy](docs/modules/tenancy.md) | `tenancy` | ✅ | Tenant lifecycle, template + section assignment; drives Wedding creation via integration events |
-| RSVP | `rsvp` | ❌ | Guest list, RSVP submissions, check-in |
+| RSVP | `rsvp` | ✅ | Guest list, RSVP submissions, lookup-code check-in |
+| Album | `album` | ✅ | Guest photo album: upload slots, photo moderation, host and guest-facing endpoints |
 | Guestbook | `guestbook` | ❌ | Public guest messages |
 
 The **Weddings** module owns these aggregate roots: `Wedding` (owns `Partner` ≤ 2, `SnapShareConfig`), `StoryMoment`, `EntourageGroup` (owns `EntourageMember`, `EntourageCouple`), `DressCodeConfig` (owns `DressCodeColor`, `DressCodeImage`), `CeremonyAct`, `GalleryImage`, `GiftOption`, `GuestPhoto`, `VendorCredit`, `Reminder`. See [docs/modules/weddings.md](docs/modules/weddings.md) for the full inventory.
@@ -154,4 +156,4 @@ Module-level configuration files (`modules.weddings.json`, `modules.users.json`,
 3. Register a `IDesignTimeDbContextFactory` in Infrastructure for EF Core tooling.
 4. Add health checks for any new external dependencies.
 
-The next planned module is **RSVP** (`rsvp` schema). See [`docs/module-conventions.md`](docs/module-conventions.md) and `CONTRIBUTING.md` for layer-by-layer rules.
+The next planned module is **Guestbook** (`guestbook` schema). See [`docs/module-conventions.md`](docs/module-conventions.md) and `CONTRIBUTING.md` for layer-by-layer rules.
diff --git a/docs/modules/README.md b/docs/modules/README.md
index 0cf1f9d..8d23449 100644
--- a/docs/modules/README.md
+++ b/docs/modules/README.md
@@ -8,7 +8,8 @@ Per-module reference documentation. For the conventions every module follows, se
 | Users | `users` | ✅ Complete | [users.md](users.md) |
 | Catalog | `catalog` | ✅ Complete | [catalog.md](catalog.md) |
 | Tenancy | `tenancy` | ✅ Complete | [tenancy.md](tenancy.md) |
-| RSVP | `rsvp` | ❌ Planned | — |
+| RSVP | `rsvp` | ✅ Complete | — |
+| Album | `album` | ✅ Complete | — |
 | Guestbook | `guestbook` | ❌ Planned | — |
 
 Each module is a five-project vertical slice (`Domain`, `Application`, `Infrastructure`, `Presentation`, `IntegrationEvents`). Only a module's `IntegrationEvents` project may be referenced from outside the module.
diff --git a/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs b/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
index 00ec843..ad8dcee 100644
--- a/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
+++ b/src/API/Eternelle.Api/Extensions/MigrationExtensions.cs
@@ -1,3 +1,4 @@
+using Eternelle.Modules.Album.Infrastructure.Database;
 using Eternelle.Modules.Catalog.Infrastructure.Database;
 using Eternelle.Modules.Rsvp.Infrastructure.Database;
 using Eternelle.Modules.Tenancy.Infrastructure.Database;
@@ -18,6 +19,7 @@ public static void ApplyMigrations(this IApplicationBuilder app)
         ApplyMigration<CatalogDbContext>(scope);
         ApplyMigration<TenancyDbContext>(scope);
         ApplyMigration<RsvpDbContext>(scope);
+        ApplyMigration<AlbumDbContext>(scope);
     }
 
     private static void ApplyMigration<TDbContext>(IServiceScope scope)
diff --git a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs
index da66076..e9c512d 100644
--- a/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs
+++ b/src/Modules/Rsvp/Eternelle.Modules.Rsvp.Infrastructure/Security/LookupCodeGenerator.cs
@@ -10,13 +10,11 @@ public string GenerateLookupCode()
     {
         const int length = LookupCode.MaxLength;
         Span<char> buffer = stackalloc char[length];
-        Span<byte> entropy = stackalloc byte[length];
-        RandomNumberGenerator.Fill(entropy);
-
         ReadOnlySpan<char> alphabet = LookupCode.Alphabet;
+
         for (int i = 0; i < length; i++)
         {
-            buffer[i] = alphabet[entropy[i] % alphabet.Length];
+            buffer[i] = alphabet[RandomNumberGenerator.GetInt32(alphabet.Length)];
         }
 
         return new string(buffer);

From 711023eafea48501a1774ef50518bce7a252953f Mon Sep 17 00:00:00 2001
From: Carl Marion <carlmarion.develops@gmail.com>
Date: Mon, 1 Jun 2026 08:18:10 +0800
Subject: [PATCH 155/155] Eternelle-193 Add Album and RSVP module documentation

Added detailed per-module docs for Album and RSVP in /docs/modules (album.md, rsvp.md). Updated solution and README to reference new documentation. Docs cover aggregates, commands, queries, endpoints, integration events, and persistence for each module.
---
 Eternelle.slnx         |   2 +
 docs/modules/README.md |   4 +-
 docs/modules/album.md  | 200 +++++++++++++++++++++++++++++++++++++++++
 docs/modules/rsvp.md   | 200 +++++++++++++++++++++++++++++++++++++++++
 4 files changed, 404 insertions(+), 2 deletions(-)
 create mode 100644 docs/modules/album.md
 create mode 100644 docs/modules/rsvp.md

diff --git a/Eternelle.slnx b/Eternelle.slnx
index c4efb9b..30da634 100644
--- a/Eternelle.slnx
+++ b/Eternelle.slnx
@@ -6,8 +6,10 @@
     <File Path="docs/module-conventions.md" />
   </Folder>
   <Folder Name="/docs/modules/">
+    <File Path="docs/modules/album.md" />
     <File Path="docs/modules/catalog.md" />
     <File Path="docs/modules/README.md" />
+    <File Path="docs/modules/rsvp.md" />
     <File Path="docs/modules/users.md" />
     <File Path="docs/modules/weddings.md" />
   </Folder>
diff --git a/docs/modules/README.md b/docs/modules/README.md
index 8d23449..2214219 100644
--- a/docs/modules/README.md
+++ b/docs/modules/README.md
@@ -8,8 +8,8 @@ Per-module reference documentation. For the conventions every module follows, se
 | Users | `users` | ✅ Complete | [users.md](users.md) |
 | Catalog | `catalog` | ✅ Complete | [catalog.md](catalog.md) |
 | Tenancy | `tenancy` | ✅ Complete | [tenancy.md](tenancy.md) |
-| RSVP | `rsvp` | ✅ Complete | — |
-| Album | `album` | ✅ Complete | — |
+| RSVP | `rsvp` | ✅ Complete | [rsvp.md](rsvp.md) |
+| Album | `album` | ✅ Complete | [album.md](album.md) |
 | Guestbook | `guestbook` | ❌ Planned | — |
 
 Each module is a five-project vertical slice (`Domain`, `Application`, `Infrastructure`, `Presentation`, `IntegrationEvents`). Only a module's `IntegrationEvents` project may be referenced from outside the module.
diff --git a/docs/modules/album.md b/docs/modules/album.md
new file mode 100644
index 0000000..f752831
--- /dev/null
+++ b/docs/modules/album.md
@@ -0,0 +1,200 @@
+# Album Module
+
+`Eternelle.Modules.Album` — guest photo album: presigned upload slots, photo registration, moderation (auto or manual), host and guest-facing endpoints. Supersedes the `GuestPhoto` aggregate that previously lived in the Weddings module.
+
+- **Schema:** `album`
+- **DbContext:** `AlbumDbContext`
+- **Registration:** `AlbumModule.AddAlbumModule(services, configuration)`
+- **Status:** ✅ Domain · ✅ Application · ✅ Infrastructure · ✅ Presentation · ✅ IntegrationEvents
+
+---
+
+## Aggregates
+
+### `AlbumPhoto` (aggregate root) — table `album.photos`
+
+| Property | Type | Notes |
+|---|---|---|
+| `Id` | `AlbumPhotoId` | `readonly record struct` over `Guid` (UUIDv7) |
+| `WeddingId` | `Guid` | Cross-module ref; index `idx_album_photos_wedding_status_uploaded` |
+| `Source` | `PhotoSource` enum | `int` column |
+| `GuestId` | `Guid?` | Cross-module ref; partial index `idx_album_photos_guest_id` (`WHERE guest_id IS NOT NULL`) |
+| `UploaderUserId` | `Guid?` | Authenticated host user; nullable |
+| `UploaderName` | `PersonName?` VO | Max 150; display name; nullable |
+| `SrcUrl` | `ImageUrl` VO | Max 2048 |
+| `ThumbnailUrl` | `ImageUrl?` VO | Max 2048; nullable |
+| `WidthPx` / `HeightPx` | `int?` | Nullable |
+| `Status` | `PhotoStatus` enum | `int` column; default `Pending` |
+| `UploadedAt` | `DateTime` | UTC |
+| `ReviewedAt` | `DateTime?` | Set on `Approve()` or `Reject()` |
+
+**Invariants:**
+
+- `Approve()` — only callable when `Status = Pending`; raises `AlbumPhotoApprovedDomainEvent`. Returns `AlbumPhotoErrors.AlreadyReviewed` otherwise.
+- `Reject()` — only callable when `Status = Pending`; raises `AlbumPhotoRejectedDomainEvent`. Returns `AlbumPhotoErrors.AlreadyReviewed` otherwise.
+- `MarkOverLimit()` — sets `Status = OverLimit`; called internally by `AlbumPhotoRepository` during upload enforcement. Over-limit photos are NOT deleted.
+
+---
+
+### `AlbumSettings` (aggregate root) — table `album.settings`
+
+Primary key is `WeddingId` (one settings row per wedding).
+
+| Property | Type | Notes |
+|---|---|---|
+| `WeddingId` | `Guid` | PK; cross-module ref |
+| `TenantId` | `Guid` | Index `ix_settings_tenant_id`; used to fan-out upload-limit changes from Tenancy |
+| `ModerationMode` | `ModerationMode` enum | `int` column |
+| `IsEnabled` | `bool` | Whether the album is open for uploads |
+| `IsClosed` | `bool` | Permanently closed; set by `Close()` |
+| `UploadLimit` | `int?` | Per-wedding total limit; `null` = unlimited |
+| `CreatedAtUtc` / `UpdatedAtUtc` | `DateTime` | |
+
+**Methods:** `Update(mode, enabled)`, `SetUploadLimit(limit)`, `Close()`, and factory `SeedFor(weddingId, tenantId)` (defaults: Auto, enabled, no limit).
+
+---
+
+## Invitee local copy
+
+`Invitee` in `Domain/Invitees/` is a local read-model (table `album.invitees`) that stores each guest's name and lookup code without querying the RSVP schema. It is populated and maintained entirely via integration events from the RSVP module:
+
+| Event | Action |
+|---|---|
+| `GuestAddedIntegrationEvent` | Upserts `Invitee` (idempotent) |
+| `GuestRemovedIntegrationEvent` | Deletes `Invitee`; nullifies `guest_id` on all photos |
+| `GuestLookupCodeRegeneratedIntegrationEvent` | Updates `Invitee.LookupCode` |
+
+Public endpoints resolve a guest by calling `IInviteeRepository.GetByLookupCodeAsync()` against this local table.
+
+---
+
+## Value objects
+
+| VO | Constraints |
+|---|---|
+| `ImageUrl` | 1–2048 chars; must be a valid URI |
+| `LookupCode` | Exactly 8 chars; alphabet `23456789ABCDEFGHJKMNPQRSTUVWXYZ`; input uppercased and stripped of dashes/whitespace before validation |
+
+Shared VOs: `PersonName` (max 150), `PersonFirstName` (max 100), `PersonLastName` (max 100).
+
+---
+
+## Enums (persisted as `int`)
+
+| Enum | Members |
+|---|---|
+| `PhotoSource` | `GuestSelf = 0`, `Host = 1` |
+| `PhotoStatus` | `Pending = 0`, `Approved = 1`, `Rejected = 2`, `OverLimit = 3` |
+| `ModerationMode` | `Auto = 0`, `Manual = 1` |
+
+---
+
+## Domain events
+
+| Event | Raised by | Payload |
+|---|---|---|
+| `AlbumPhotoUploadedDomainEvent` | `AlbumPhoto.Create` | `PhotoId`, `WeddingId`, `Source`, `Status`, `UploadedAt` |
+| `AlbumPhotoApprovedDomainEvent` | `AlbumPhoto.Approve` (and `Create` when initial status = Approved) | `PhotoId`, `WeddingId`, `ApprovedAt` |
+| `AlbumPhotoRejectedDomainEvent` | `AlbumPhoto.Reject` | `PhotoId`, `WeddingId`, `RejectedAt` |
+
+`AlbumPhotoRejectedDomainEvent` is handled internally only — no integration event is published for rejections.
+
+---
+
+## Commands & queries
+
+**Host photo commands:**
+- `GenerateHostUploadSlotsCommand(WeddingId, Count)` → `IReadOnlyList<UploadSlotResponse>`
+- `RegisterHostPhotosCommand(WeddingId, UploaderUserId, DisplayName?, Photos)` → `IReadOnlyList<Guid>` (photo IDs)
+
+**Host moderation commands:**
+- `ApprovePhotoCommand(WeddingId, PhotoId)`
+- `RejectPhotoCommand(WeddingId, PhotoId)`
+- `DeletePhotoCommand(WeddingId, PhotoId)`
+- `BulkApprovePhotosCommand(WeddingId, PhotoIds)`
+- `BulkRejectPhotosCommand(WeddingId, PhotoIds)`
+- `BulkDeletePhotosCommand(WeddingId, PhotoIds)`
+
+**Guest commands:**
+- `GenerateGuestUploadSlotsCommand(LookupCode, Count)` → `IReadOnlyList<UploadSlotResponse>`
+- `RegisterGuestPhotosCommand(LookupCode, Photos)` → `IReadOnlyList<Guid>`
+- `DeleteOwnPhotoCommand(LookupCode, PhotoId)`
+
+**Settings commands:**
+- `SeedAlbumSettingsCommand(WeddingId, TenantId)` — called by `WeddingCreatedIntegrationEventHandler`
+- `UpdateSettingsCommand(WeddingId, ModerationMode, IsEnabled)`
+- `UpdateUploadLimitCommand(TenantId, NewLimit?)` — called by `TenantUploadLimitChangedIntegrationEventHandler`; fans out to all weddings under the tenant
+
+**Queries:**
+- `GetPhotosQuery(WeddingId, Status?, Source?, Page, PageSize)` → `IReadOnlyList<PhotoItem>` (Dapper)
+- `GetFeedQuery(WeddingId, Page, PageSize)` → `IReadOnlyList<FeedItem>` — approved only (Dapper)
+- `GetSettingsQuery(WeddingId)` → `AlbumSettingsResponse` (Dapper)
+- `GetUploadContextQuery(LookupCode)` → `UploadContextResponse` (guest name, remaining quota, own photos)
+
+---
+
+## Upload flow
+
+1. Client calls a `presign` endpoint → handler validates album state, checks quota, generates Redis-backed slots (15-minute TTL via `IUploadSlotStore`).
+2. Client uploads directly to S3 using the presigned URL.
+3. Client calls the `register` endpoint with the slot ID(s) and photo metadata.
+4. Handler redeems slot(s) atomically (all-or-nothing via Lua script for batch); creates `AlbumPhoto` with initial status determined by `ModerationMode`: Auto → `Approved`, Manual → `Pending`.
+5. Photos that push the total over `UploadLimit` are marked `OverLimit` rather than rejected.
+
+`IUploadSlotStore` falls back to an in-memory `ConcurrentDictionary` (`StubUploadSlotStore`) when Redis is unavailable.
+
+---
+
+## Endpoints
+
+| Verb | Route | Auth |
+|---|---|---|
+| GET | `weddings/{weddingId:guid}/album/photos` | `album:manage` |
+| POST | `weddings/{weddingId:guid}/album/presign` | `album:manage` |
+| POST | `weddings/{weddingId:guid}/album/photos` | `album:manage` |
+| POST | `weddings/{weddingId:guid}/album/photos/{photoId:guid}/approve` | `album:manage` |
+| POST | `weddings/{weddingId:guid}/album/photos/{photoId:guid}/reject` | `album:manage` |
+| DELETE | `weddings/{weddingId:guid}/album/photos/{photoId:guid}` | `album:manage` |
+| POST | `weddings/{weddingId:guid}/album/photos/approve-bulk` | `album:manage` |
+| POST | `weddings/{weddingId:guid}/album/photos/reject-bulk` | `album:manage` |
+| DELETE | `weddings/{weddingId:guid}/album/photos/bulk` | `album:manage` |
+| GET | `weddings/{weddingId:guid}/album/settings` | `album:manage` |
+| PUT | `weddings/{weddingId:guid}/album/settings` | `album:manage` |
+| GET | `weddings/{weddingId:guid}/album/feed` | `AllowAnonymous` · `Cache-Control: public, max-age=30` |
+| GET | `album/{lookupCode}` | `AllowAnonymous` · rate limit `album-upload-context` |
+| POST | `album/{lookupCode}/presign` | `AllowAnonymous` · rate limit `album-presign` |
+| POST | `album/{lookupCode}/photos` | `AllowAnonymous` · rate limit `album-register` |
+| DELETE | `album/{lookupCode}/photos/{photoId:guid}` | `AllowAnonymous` · rate limit `album-register` |
+
+Tag: `Album`.
+
+Rate limit policies (defined in `Program.cs`): `album-upload-context`, `album-presign`, `album-register`.
+
+---
+
+## Integration events
+
+**Published** (via `Eternelle.Modules.Album.IntegrationEvents`):
+- `AlbumPhotoUploadedIntegrationEvent(photoId, weddingId, source, status, uploadedAt)` — raised on every photo registration.
+- `AlbumPhotoApprovedIntegrationEvent(photoId, weddingId, approvedAt)` — raised when a photo is approved (manually or automatically).
+
+**Consumed:**
+- `WeddingCreatedIntegrationEvent` (Weddings) — `WeddingCreatedIntegrationEventHandler` calls `SeedAlbumSettingsCommand` to create the initial settings row.
+- `GuestAddedIntegrationEvent` (RSVP) — upserts the local `Invitee`.
+- `GuestRemovedIntegrationEvent` (RSVP) — deletes `Invitee`; nullifies `guest_id` on photos.
+- `GuestLookupCodeRegeneratedIntegrationEvent` (RSVP) — updates `Invitee.LookupCode`.
+- `TenantUploadLimitChangedIntegrationEvent` (Tenancy) — fans out new limit to all `AlbumSettings` rows for the tenant via `UpdateUploadLimitCommand`.
+
+---
+
+## Persistence
+
+Tables (schema `album`): `photos`, `settings`, `invitees`, plus `outbox_messages`, `outbox_message_consumers`, `inbox_messages`, `inbox_message_consumers`.
+
+Notable EF config: `AlbumPhotoId` value converter; `ImageUrl`, `LookupCode`, `PersonFirstName`, `PersonLastName`, `PersonName` value converters; `PhotoStatus`, `PhotoSource`, `ModerationMode` stored as `int`; partial index on `photos.guest_id`.
+
+### Migrations
+
+- `20260531065202_InitialAlbum` — schema, all tables, indexes (`idx_album_photos_wedding_status_uploaded`, `idx_album_photos_guest_id`, `ix_settings_tenant_id`, `ix_invitees_wedding_id`, `ix_invitees_lookup_code`), outbox/inbox plumbing.
+
+The `album:manage` permission is seeded in the **Users** module migration.
diff --git a/docs/modules/rsvp.md b/docs/modules/rsvp.md
new file mode 100644
index 0000000..ebdc759
--- /dev/null
+++ b/docs/modules/rsvp.md
@@ -0,0 +1,200 @@
+# RSVP Module
+
+`Eternelle.Modules.Rsvp` — guest list management and RSVP submission processing: adding guests, generating lookup codes, accepting public submissions, tracking headcount, and providing couple-side reporting.
+
+- **Schema:** `rsvp`
+- **DbContext:** `RsvpDbContext`
+- **Registration:** `RsvpModule.AddRsvpModule(services, configuration)`
+- **Status:** ✅ Domain · ✅ Application · ✅ Infrastructure · ✅ Presentation · ✅ IntegrationEvents
+
+---
+
+## Aggregates
+
+### `Guest` (aggregate root) — table `rsvp.guests`
+
+| Property | Type | Notes |
+|---|---|---|
+| `Id` | `GuestId` | `readonly record struct` over `Guid` (UUIDv7) |
+| `WeddingId` | `WeddingId` | Index `ix_guests_wedding_id` |
+| `FirstName` | `PersonFirstName` VO | Max 100 |
+| `LastName` | `PersonLastName` VO | Max 100 |
+| `Email` | `EmailAddress?` VO | Max 254; nullable |
+| `MobileNumber` | `PhoneNumber?` VO | Max 30; nullable |
+| `LookupCode` | `LookupCode` VO | Max 8; unique index `ix_guests_lookup_code` |
+| `AllowedCompanions` | `int` | Check constraint `>= 0` |
+| `TableNumber` | `int?` | Nullable |
+| `GroupName` | `GroupLabel?` VO | Max 150; nullable |
+| `IsLocked` | `bool` | Default `false` |
+| `LockedAtUtc` | `DateTime?` | Set on `Lock()` |
+| `CreatedAtUtc` / `UpdatedAtUtc` | `DateTime` | |
+
+**Invariants:**
+
+- `ChangeAllowedCompanions()` — validates new value `>= 0`; raises `GuestAllowanceChangedDomainEvent`.
+- `Lock()` — returns `GuestErrors.AlreadyLocked` if already locked.
+- `Unlock()` — returns `GuestErrors.NotLocked` if not locked.
+- `RegenerateLookupCode()` — replaces lookup code; raises `GuestLookupCodeRegeneratedDomainEvent`.
+- `MarkRemoved()` — soft-delete; raises `GuestRemovedDomainEvent`. Guests are never physically deleted.
+
+---
+
+### `RsvpSubmission` (aggregate root) — table `rsvp.submissions`
+
+| Property | Type | Notes |
+|---|---|---|
+| `Id` | `SubmissionId` | `readonly record struct` over `Guid` (UUIDv7) |
+| `WeddingId` | `WeddingId` | Composite index with `SubmittedAtUtc` |
+| `GuestId` | `GuestId?` | Nullable; composite index with `SubmittedAtUtc` |
+| `NameSnapshot` | `PersonName` VO | Max 150; snapshot at submission time |
+| `EmailSnapshot` | `EmailAddress?` VO | Max 254; nullable |
+| `MobileSnapshot` | `PhoneNumber?` VO | Max 30; nullable |
+| `Attending` | `bool` | |
+| `DietaryNote` | `DietaryNote?` VO | Max 300; nullable |
+| `Message` | `RichDescription?` VO | Max 2000; nullable |
+| `ConfirmationId` | `Guid` | Unique index `ix_submissions_confirmation_id` |
+| `IpAddress` | `IPAddress?` | Max 45 (IPv6); nullable |
+| `Source` | `RsvpSource` enum | `int` column |
+| `InternalNote` | `InternalNote?` VO | Max 500; nullable; required when `Source = CoupleOnBehalf` |
+| `SubmittedAtUtc` | `DateTime` | |
+
+Owned collection:
+
+| Child | Table | Key fields |
+|---|---|---|
+| `SubmissionCompanion` | `rsvp.submission_companions` | `Name` (PersonName), `Attending` (bool), `DietaryNote?`, `DisplayOrder` (int); indexed on `(SubmissionId, DisplayOrder)` |
+
+**Invariants:**
+
+- `Source = CoupleOnBehalf` requires a non-empty `InternalNote` → `RsvpSubmissionErrors.InternalNoteRequiredOnBehalf`.
+- `Attending = false` → companions list must be empty → `RsvpSubmissionErrors.CompanionsOnDecline`.
+- Companion count may not exceed `Guest.AllowedCompanions` → `RsvpSubmissionErrors.TooManyCompanions`.
+
+---
+
+## Wedding projection
+
+`Wedding` in `Domain/Weddings/` is a local read-model populated by `WeddingCreatedIntegrationEventHandler`. Handlers use it to validate that a wedding exists before adding guests and to call `IsAcceptingSubmissions(today)` — which returns `true` when `!IsClosed && (RsvpDeadline is null || today <= RsvpDeadline)`. The couple can call `SetRsvpDeadline` / `ClearRsvpDeadline` to update the projection directly.
+
+---
+
+## Value objects
+
+| VO | Constraints |
+|---|---|
+| `LookupCode` | Exactly 8 chars; alphabet `23456789ABCDEFGHJKMNPQRSTUVWXYZ` (no ambiguous chars); input uppercased and stripped of dashes/whitespace before validation |
+| `DietaryNote` | 1–300 chars; trimmed |
+| `InternalNote` | 1–500 chars; trimmed |
+| `GroupLabel` | 1–150 chars; trimmed |
+
+Shared VOs used from `Eternelle.Common.Domain` (or cross-module): `PersonName` (max 150), `PersonFirstName` (max 100), `PersonLastName` (max 100), `EmailAddress` (max 254), `PhoneNumber` (max 30), `RichDescription` (max 2000).
+
+---
+
+## Enums (persisted as `int`)
+
+| Enum | Members |
+|---|---|
+| `RsvpSource` | `GuestSelf = 0`, `CoupleOnBehalf = 1` |
+
+---
+
+## Domain events
+
+| Event | Raised by | Payload |
+|---|---|---|
+| `GuestAddedDomainEvent` | `Guest.Create` | `GuestId`, `WeddingId`, `FirstName`, `LastName`, `LookupCode`, `AllowedCompanions` |
+| `GuestAllowanceChangedDomainEvent` | `Guest.ChangeAllowedCompanions` | `GuestId`, `WeddingId`, `AllowedCompanions` |
+| `GuestContactUpdatedDomainEvent` | `Guest.UpdateContact` | `GuestId`, `WeddingId` |
+| `GuestPlacementUpdatedDomainEvent` | `Guest.UpdatePlacement` | `GuestId`, `WeddingId` |
+| `GuestLockedDomainEvent` | `Guest.Lock` | `GuestId`, `WeddingId`, `LockedAtUtc` |
+| `GuestUnlockedDomainEvent` | `Guest.Unlock` | `GuestId`, `WeddingId` |
+| `GuestLookupCodeRegeneratedDomainEvent` | `Guest.RegenerateLookupCode` | `GuestId`, `WeddingId`, `LookupCode` |
+| `GuestRemovedDomainEvent` | `Guest.MarkRemoved` | `GuestId`, `WeddingId` |
+| `RsvpSubmittedDomainEvent` | `RsvpSubmission.Create` | `SubmissionId`, `WeddingId`, `GuestId?`, `Attending`, `CompanionCount`, `SubmittedAtUtc` |
+
+---
+
+## Commands & queries
+
+**Guest commands:**
+- `AddGuestCommand(WeddingId, FirstName, LastName, Email?, MobileNumber?, AllowedCompanions, TableNumber?, GroupName?)` → `Guid`
+- `UpdateGuestContactCommand(WeddingId, GuestId, FirstName, LastName, Email?, MobileNumber?)`
+- `UpdateGuestPlacementCommand(WeddingId, GuestId, TableNumber?, GroupName?)`
+- `ChangeGuestAllowanceCommand(WeddingId, GuestId, AllowedCompanions)`
+- `LockGuestCommand(WeddingId, GuestId)`
+- `UnlockGuestCommand(WeddingId, GuestId)`
+- `RegenerateGuestTokenCommand(WeddingId, GuestId)` → `string` (new lookup code)
+- `RemoveGuestCommand(WeddingId, GuestId)`
+
+**Guest queries:**
+- `GetGuestQuery(WeddingId, GuestId)` → `GuestResponse` (includes latest submission)
+- `ListGuestsQuery(WeddingId, GroupName?, AttendingState?, IsLocked?, Skip, Take)` → `IReadOnlyList<GuestSummaryResponse>`
+
+**Submission commands:**
+- `SubmitRsvpCommand(LookupCode, Attending, DietaryNote?, Message?, Companions, IpAddress?)` → `Guid` (confirmation ID); source = `GuestSelf`
+- `SubmitOnBehalfCommand(WeddingId, GuestId, Attending, DietaryNote?, Message?, Companions, InternalNote)` → `Guid`; source = `CoupleOnBehalf`
+
+**Submission queries:**
+- `GetInvitationQuery(LookupCode)` → `InvitationResponse` (guest name, wedding date, deadline, prior submission)
+- `GetSubmissionQuery(WeddingId, SubmissionId)` → `SubmissionResponse`
+- `ListSubmissionsQuery(WeddingId, Attending?, Source?, Skip, Take)` → `IReadOnlyList<SubmissionSummaryResponse>`
+- `GetHeadcountQuery(WeddingId)` → `HeadcountResponse` (attending/declined/no-response counts and breakdown by group)
+
+**Wedding commands:**
+- `SetRsvpDeadlineCommand(WeddingId, Deadline)` — sets deadline on the local Wedding projection
+- `ClearRsvpDeadlineCommand(WeddingId)` — clears deadline (null = indefinite)
+
+All guest mutation commands thread `WeddingId` to an opaque IDOR guard; the handler returns `GuestErrors.NotFound` for any mismatch.
+
+---
+
+## Endpoints
+
+| Verb | Route | Auth |
+|---|---|---|
+| POST | `weddings/{weddingId:guid}/guests` | `RequireAuthorization()` |
+| GET | `weddings/{weddingId:guid}/guests` | `RequireAuthorization()` |
+| GET | `weddings/{weddingId:guid}/guests/{guestId:guid}` | `RequireAuthorization()` |
+| PUT | `weddings/{weddingId:guid}/guests/{guestId:guid}` | `RequireAuthorization()` |
+| PUT | `weddings/{weddingId:guid}/guests/{guestId:guid}/allowance` | `RequireAuthorization()` |
+| PUT | `weddings/{weddingId:guid}/guests/{guestId:guid}/placement` | `RequireAuthorization()` |
+| POST | `weddings/{weddingId:guid}/guests/{guestId:guid}/lock` | `RequireAuthorization()` |
+| POST | `weddings/{weddingId:guid}/guests/{guestId:guid}/unlock` | `RequireAuthorization()` |
+| POST | `weddings/{weddingId:guid}/guests/{guestId:guid}/regenerate-token` | `RequireAuthorization()` |
+| DELETE | `weddings/{weddingId:guid}/guests/{guestId:guid}` | `RequireAuthorization()` |
+| GET | `weddings/{weddingId:guid}/submissions` | `RequireAuthorization()` |
+| GET | `weddings/{weddingId:guid}/submissions/{submissionId:guid}` | `RequireAuthorization()` |
+| GET | `weddings/{weddingId:guid}/headcount` | `RequireAuthorization()` |
+| POST | `weddings/{weddingId:guid}/guests/{guestId:guid}/submissions` | `RequireAuthorization()` |
+| PUT | `weddings/{weddingId:guid}/rsvp/deadline` | `RequireAuthorization()` |
+| DELETE | `weddings/{weddingId:guid}/rsvp/deadline` | `RequireAuthorization()` |
+| GET | `rsvp/{lookupCode}` | `AllowAnonymous` · rate limit `rsvp-lookup` (30/60 s) |
+| POST | `rsvp/{lookupCode}` | `AllowAnonymous` · rate limit `rsvp-submit` (5/60 s) |
+
+Tags: `Rsvp` (administrative), `Rsvp.Public` (anonymous).
+
+---
+
+## Integration events
+
+**Published** (via `Eternelle.Modules.Rsvp.IntegrationEvents`):
+- `GuestAddedIntegrationEvent(guestId, weddingId, firstName, lastName, lookupCode, allowedCompanions)` — consumed by **Album** to seed the `Invitee` read-model.
+- `GuestRemovedIntegrationEvent(guestId, weddingId)` — consumed by **Album** to delete the `Invitee` and nullify `guest_id` on photos.
+- `GuestLookupCodeRegeneratedIntegrationEvent(guestId, weddingId, newLookupCode)` — consumed by **Album** to update `Invitee.LookupCode`.
+- `RsvpSubmittedIntegrationEvent(submissionId, weddingId, guestId?, attending, companionCount, submittedAtUtc)`.
+
+**Consumed:**
+- `WeddingCreatedIntegrationEvent` — handled by `WeddingCreatedIntegrationEventHandler` in Presentation; upserts the local `Wedding` projection.
+
+---
+
+## Persistence
+
+Tables (schema `rsvp`): `guests`, `submissions`, `submission_companions`, `weddings`, plus `outbox_messages`, `outbox_message_consumers`, `inbox_messages`, `inbox_message_consumers`.
+
+Notable EF config: `LookupCode` value converter; `IPAddress` stored as `varchar(45)` via `ToString()`/`IPAddress.Parse()`; `RsvpSource` stored as `int`; `SubmissionCompanion` as `OwnsMany` with cascade delete.
+
+### Migrations
+
+- `20260529094037_InitialRsvp` — schema, all tables, indexes (`ix_guests_lookup_code`, `ix_guests_wedding_id`, `ix_submissions_wedding_id_submitted_at_utc`, `ix_submissions_guest_id_submitted_at_utc`, `ix_submissions_confirmation_id`), check constraint on `allowed_companions`, outbox/inbox plumbing.