backend phase 8

dev/shared-working-context/backend/STATUS.md

@@ -12,6 +12,34 @@ One block per completed backend phase. Newest at the top. Backend lane writes he
 - **Notes for frontend:** <anything load-bearing>
 -->
 
+## backend-phase-8 — Booking requests (pre-payment intent) — 2026-07-06
+- **Shipped:** the money-free request lifecycle via one additive migration — new **`booking`** schema,
+  **1 table** `BookingRequests`. The customer-side (`CreateBookingRequest` — tenancy invariant
+  patient+address∈customer & variant∈nurse, bookability + **same-gender** match, response deadline frozen from
+  `nurse_response_deadline_hours`; `CancelBookingRequest`), the nurse-side (`AcceptBookingRequest` — freezes
+  `payment_deadline_at` from `booking_payment_deadline_minutes`=30, self-guards the response deadline;
+  `RejectBookingRequest` — reason required), the reads (`ListBookingRequests` role-scoped inbox +
+  `GetBookingRequest` party/admin, **nurse view masks the full address, exposes only `customer_notes`**), and
+  the **forward-only status guard** (`BookingRequestTransitions`) + the idempotent, paginated
+  `ExpireBookingRequests` sweep behind a recurring `BackgroundService` (`BookingRequestExpiryHostedService`,
+  reuses the b1 `IJobScheduler` seam) + an admin manual trigger. **2 controllers:** `BookingRequestsController`
+  (customer/nurse) + `AdminBookingRequestsController` (`POST admin_booking_requests/expire`). Inbox/expiry
+  covering indexes `(nurse_id,status)`/`(customer_id,status)`/`(status,response_deadline)`/`(status,payment_deadline)`.
+  **No money column, no `bookings` row, no snapshot, no price** anywhere.
+- **Contracts:** dev/contracts/domains/booking-requests.md + openapi snapshot refreshed (yes — the 7 booking
+  paths + `BookingRequestDto`/`BookingRequestListItemDto`/`ExpireBookingRequestsResult`).
+- **Mocked:** **nothing new** — reuses `IPlatformConfig`/`INotificationDispatcher`/`IJobScheduler`/
+  `IDateTimeProvider`/`ICurrentUser`. **No new `mocks-registry.md` row** (the `IJobScheduler` row was updated to
+  note the second hosted job).
+- **Gate:** build clean (0 new code warnings) / tests green (215 pass: +20 booking = 14 handler-unit + the
+  transition machine + 4 DB-backed SQLite + 5 API integration). Migration applied to the dev DB; API boots with
+  all booking paths in Swagger; the expiry sweep runs on startup (verified against SQL Server).
+- **Handoff:** backend/handoff/after-backend-phase-8.md
+- **Notes for frontend:** f7-b8 = the request form (C4 → `booking_requests/create`), the status tracker (C5 →
+  `booking_requests/get/{id}` + customer inbox with the response + 30-min payment countdowns + `cancel`), and
+  the nurse inbox (`booking_requests/list?role=nurse` + `accept`/`reject`). Gender required (`male`/`female`/
+  `any`); deadlines are server-frozen UTC timestamps; the nurse sees only `customer_notes` + a masked address.
+
 ## backend-phase-7 — Search & matching (nurse search index) — 2026-07-05
 - **Shipped:** the discovery layer via one additive migration — new **`search`** schema, **1 table**
   `NurseSearchIndices` (the denormalized `nurse_search_index`): **one flat row per (bookable variant ×