hamid
64 lines
4.5 KiB
Markdown
64 lines
4.5 KiB
Markdown
# Handoff — after backend phase 15 (Messaging, partner centers & admin backoffice)
|
|
|
|
**This is the final backend phase. The backend chain is complete.** Every domain the admin backoffice acts on
|
|
now exists and is wired together.
|
|
|
|
## What is now live (frontend can build against it)
|
|
|
|
### Tickets — the post-booking channel (f14 messaging)
|
|
- `POST /api/v1/tickets` — open a ticket (`category` ∈ `support|coordination|refund|emergency`; optional
|
|
`bookingId`/`refundId`; body optional). Opener is auto-added as the first participant. Returns
|
|
`{ ticketId, referenceCode, status, category }`.
|
|
- `POST /api/v1/tickets/{id}/messages` — post a message. **`isInternal` is staff-only**; a non-staff caller
|
|
sending `true` → `403`; posting to a closed ticket as non-staff → `403`.
|
|
- `POST /api/v1/tickets/{id}/participants` (add) / `DELETE …/participants/{userId}` (soft-remove) — staff or
|
|
ticket owner. A **duplicate add is `409`** (backed by `UNIQUE(ticket_id, user_id)`), never a 500.
|
|
- `POST /api/v1/tickets/{id}/close` · `/reopen` — participant or staff (idempotent).
|
|
- `POST /api/v1/tickets/emergency` — assigned nurse (or staff) logs an emergency (+ optional support alert).
|
|
- `GET /api/v1/tickets` — my tickets (paginated, filter `status`, search `referenceCode`).
|
|
- `GET /api/v1/tickets/{id}` — **user thread view: internal notes are stripped** in the projection.
|
|
- `GET /api/v1/admin/tickets` + `GET /api/v1/admin/tickets/{id}` — admin queue + **admin thread view: internal
|
|
notes included** (`support`/`admin`).
|
|
|
|
**The rule f14 must respect:** never build a direct nurse↔customer channel, never surface a phone number, and
|
|
never rely on the UI to hide internal notes — the backend already strips them from the user payload. The
|
|
coordination ticket for a booking is auto-created on confirmation (you don't create it).
|
|
|
|
### Partner centers + merchant-of-record (f15 admin + partner consoles)
|
|
- `POST /api/v1/admin/partner-centers` (create, inactive) · `PATCH …/{id}` (update) ·
|
|
`POST …/{id}/verify` (activate) · `POST …/{id}/sponsor-nurse` · `GET …` (list) · `GET …/{id}` (detail) —
|
|
`admin`/`super_admin`. **`settlementIbanMasked` (last 4) is the only IBAN ever returned** — never plaintext.
|
|
`commissionRate ∈ [0,1)`; a merchant-of-record center requires a `settlementIban`.
|
|
- `GET /api/v1/centers/{id}/dashboard` — the center's own account (or staff): sponsored nurses + booking/invoice
|
|
counts + masked settlement summary.
|
|
- `GET /api/v1/internal/bookings/{bookingId}/center` — the issuer/settlement resolver
|
|
(`platform` | `partner_center`).
|
|
|
|
### Admin backoffice (surfaced, not rebuilt)
|
|
- Support-alert worklist: `GET support_alerts/get_support_alerts`, `POST …/assign_support_alert`,
|
|
`POST …/resolve_support_alert` (built b1). Audit viewer: `GET audit/get_audit_trail` (built b1). Both
|
|
`DynamicPermission`. Verification queue / refunds / payout dashboard / moderation queue are their own phases'
|
|
routes — surface them under the admin console with the right RBAC scope.
|
|
|
|
## RBAC the frontend must respect (per route)
|
|
- Authenticated (own) ticket routes: any logged-in user; participation is enforced server-side.
|
|
- Admin ticket queue + admin thread: `support`/`admin`. Partner centers: `admin`/`super_admin`. Center
|
|
dashboard: the center's `adminUserId` (or staff). Support alerts: `support`/`admin`. Audit: `super_admin`/`admin`.
|
|
- The admin role passes every `DynamicPermission` check; narrower staff scopes (`support`/`finance`/`moderation`)
|
|
are granted via seeded role claims.
|
|
|
|
## What's mocked
|
|
- **`ILicenseVerificationService`** (eNamad / MoH establishment-permit) — `MockLicenseVerificationService`,
|
|
manual-approve at MVP (`NeedsManualReview`); `VerifyPartnerCenter` records the human decision. Config
|
|
`Seams:LicenseVerification:AutoApprove` forces `Valid`. See the mock registry (🟡). There is **no** telephony
|
|
seam — the emergency call is an out-of-platform `tel:` link by design.
|
|
|
|
## Contracts
|
|
- `dev/contracts/domains/messaging-notifications-admin.md` (this phase). `swagger.v1.json` refreshed (now includes
|
|
`/tickets`, `/admin/tickets`, `/admin/partner-centers`, `/centers`, `/internal/bookings/{id}/center`).
|
|
|
|
## Types / wire notes
|
|
- Envelope unchanged (camelCase body, snake_case URL tokens where `[action]`-based; the new controllers use
|
|
explicit REST routes). Pagination `page`/`pageSize` (default 50, max 100). `sentAt`/`closedAt`/`verifiedAt` are
|
|
UTC ISO-8601; ids are numbers; the settlement IBAN is a masked string (`"••••0001"`).
|