Gik Architectural Blueprint
“Your World. Your Gik.” — Engineered for progressive scalability, zero secret exposure, and authentic social interaction with modular multi-phase evolution.
Release Phases & Production Scope
- ✓Authentication: Secure email, password, and Google authentication via
window.genmb.auth. - ✓User Profiles & Timeline: Editable bio, avatar, banner, followers, friends count, and custom status.
- ✓Feed & Rich Posts: Formatted text, image uploads via file storage SDK, tags, and audience visibility controls.
- ✓Reactions & Comments: 6 custom reaction types (Like, Love, Gik Spark, Haha, Wow, Insight) + comment threading.
- ✓Ephemeral Stories: Interactive full-screen story viewer with progress bars and story creation.
- ✓Explore & Search: Real-time search across hashtags (#TechNow, #GikSpotlight), authors, and content.
- ✓Communities & Marketplace: Interest groups and local marketplace buy/sell listings.
- ✓Safety & Admin Console: Content reporting modal, audit queue, user blocking, and review actions.
- ○Voice & Video Calls: WebRTC peer-to-peer signaling via backend function + TURN relay server.
- ○Creator Wallets & Payouts: Integrated Stripe Connect or external escrow for subscriptions and tipping.
- ○Short Video Feeds: Vertical swipe media player with adaptive bitrate HLS transcoder.
- ○Automated Stories Expiry: Scheduled cron worker removing ephemeral media at the 24-hour mark.
- ○Ad Auction Engine: Real-time CPM/CPC bidding engine with advertiser analytics.
Database & Storage Architecture
In accordance with platform guidelines and plan capabilities:
Current Implementation: GenMB KV Store
Currently, data is securely persisted in the built-in GenMB Key-Value Store (window.genmb.kv) with namespaced collections (gik:feed_posts, gik:reports_queue, gik:current_user_profile). This provides zero-config, low-latency client persistence.
Relational Database Options (Pro / Supabase)
A managed PostgreSQL database is a Pro feature. App owners have two practical paths: upgrade to Pro for a managed platform database, or connect their own Supabase project for free directly from the editor's Database panel.
Security, Authentication & Secrets Policy
Strict Zero Secret Keys in Client Bundle
No private API keys, payment secret tokens, or administrative master passwords reside in the frontend code. All elevated actions and user identity verification are resolved server-side through session tokens.
Honest Payment & Simulation Rules
Real transactions require an authorized payment processor (e.g. Stripe webhook handler in functions/). The application never fabricates fake payment completions or misleads users into thinking mock transactions are real.