I want you to use Google AI Studio to generate the core components of this app to save time and cost, but I need you to manually handle the GCP Infrastructure and Security Glue to ensure the platform is production-ready. Scope of Work: Native Google Cloud AI SaaS 1. Project Overview The freelancer will develop a full-stack SaaS platform utilizing Google Cloud native infrastructure. The app will enable users to generate websites (hosted on Google Cloud Storage) and automate social media posts, with all logic and content orchestrated by Gemini (Google AI Studio). 2. Infrastructure & Hosting (Strictly Google Cloud) User Website Hosting: Websites generated by Gemini will be stored in Google Cloud Storage (GCS) buckets. Custom Domain Mapping: Use Google Cloud Load Balancing (GCLB) to map user domains to GCS buckets, including the provisioning of Google-managed SSL certificates for HTTPS. Main App Deployment: The SaaS application (Frontend & Backend) must be deployed on Google Cloud Run (containerized) for serverless scalability. Database: Use Cloud SQL (Postgres or MySQL) for user accounts, metadata, and post schedules. Authentication: Use Google Cloud Identity Platform for secure user login and management. 3. Core Functional Requirements A. AI Website Generation Gemini Engine: Integrate Google AI Studio API to generate production-ready HTML, CSS, and JavaScript. Automated Deployment: A backend worker will create a new GCS bucket for each user site, upload the Gemini-generated files, and configure the bucket for static website hosting. On-Page Preview: A secure iframe or sandbox environment to preview the generated site before "Publishing" to the live GCS bucket. B. Social Media Automation Official Integration: Connect to Meta, LinkedIn, and X via their official developer APIs. AI Content Lab: Gemini will generate captions, hashtags, and DALL-E/Imagen prompts based on the user's website content. Task Scheduling: Use Cloud Scheduler and Cloud Tasks to trigger automated posts. C. Gemini-Powered Emails Dynamic Templates: Use Gemini to generate the actual HTML and copy for every system email (Welcome, Password Reset, Post Confirmations) in real-time to match the user's business tone. Relay: Send these via Google Cloud SMTP relay or a verified third-party API (SendGrid/Postmark) as configured in the GCP console. 4. Subscription & "Cost-Plus" Billing Logic The billing system must be tied to actual Google Cloud consumption. Payment Gateway: Stripe integration for on-page checkout. Profit Margin Implementation: * The backend must pull usage metrics from the Cloud Billing API. Formula: Total Charge = GCP Cost + (GCP Cost * X%) The Admin must have a field to set X (the profit margin percentage) globally or per user tier. Token System: Users purchase a "Token Balance" in USD. As they use Gemini (Google AI Studio) or GCS storage, their balance is deducted based on the (Cost + Margin) logic. 5. Admin Control Panel Feature Management: Enable/Disable AI Website Builder or Social Automation for specific users. Cost Monitoring: View a real-time table of "Actual GCP Cost" vs. "Revenue Collected" to verify the X% profit margin is accurate. Global Prompting: A section to update the "System Instructions" for Gemini that dictate how it builds websites or writes social posts. 6. Security & Compliance IAM Roles: Use Principle of Least Privilege for the service accounts running the app. Gemini Safety Filters: Configure AI Studio safety settings to "Block Most" for hate speech, harassment, and sexually explicit content to protect the platform's reputation. Milestone Breakdown Phase 1: GCP Project Setup + Cloud Run deployment + Identity Platform Auth. Phase 2: GCS Static Hosting Automation + Cloud Load Balancing logic. Phase 3: Gemini API (Google AI Studio) integration for site and email generation. Phase 4: Social Media API integration (OAuth flow) and Cloud Tasks scheduling. Phase 5: Stripe Integration + Cloud Billing API logic for the X% margin.