Home / Documentation / Backend Developer Tasks

KODA Backend Developer Tasks

Complete Task Breakdown & Specifications

Created: October 31, 2025
Team: Backend Development
Total Hours: 2,680
Total Tasks: 150

Table of Contents

Overview

The Backend team is responsible for building the KODA Backend API (Laravel) and KODA AI engine. The backend serves all applications: KODA Mobile App, KODA Team, KODA Website, and KODA CORE.

Key Technologies

  • PHP 8.2+
  • Laravel 12
  • MySQL (Multi-tenant architecture)
  • Redis (Caching)
  • RoadRunner/Octane (Performance)
  • Google AI Studio (for KODA AI)

Important Notes

  • Follow multi-tenant architecture principles
  • All code must be PSR-12 compliant
  • Comprehensive testing required (PHPUnit)

Phase 1 Tasks

102 Tasks 1,880 Hours 70% of Total

Package 1.3: Authentication & Multi-Tenant Foundation

120H
Milestone: M3 Total Tasks: 9
BE-M3-001 16H Critical

Project Setup & Architecture Foundation

  • Initialize new Laravel 12 project
  • Configure multi-tenant database architecture
  • Setup main database connection + dynamic sub-app connections
  • Configure Redis for caching
  • Setup Sanctum for API authentication
  • Configure CORS
  • Setup activity logging (Spatie)
  • Configure environment files (.env.example)
  • Setup Git repository structure
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: DV-M1-001 (Infrastructure setup)
BE-M3-002 24H Critical

Multi-Tenant Core Architecture

  • Create SubApplication model and migration (main DB)
  • Create ApiKey model and migration with SHA-256 hashing
  • Create SubApplicationDbCredential model (encrypted credentials)
  • Implement ValidateApiKeyMiddleware with Redis caching
  • Create ApiKeyCacheService (cache TTL: 1 hour, <2ms lookup)
  • Implement RequestContextService (singleton for app_id, api_key_id)
  • Create dynamic database connection manager
  • Add app_id and api_key_id to activity logs
  • Write comprehensive tests for multi-tenant isolation
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-001
BE-M3-003 20H Critical

User Registration with Deduplication

  • Create users table migration (sub-app DB) with global_id
  • Create users table in main DB (global registry)
  • Create User model with multi-language name support
  • Implement UserMatchingService (match by 4-part name + verified phone)
  • Implement UserSyncService (sync verification between main & sub-app)
  • Implement MultiTenantUserService for registration
  • Create POST /api/v1/register endpoint with validation
  • Handle deduplication logic (prevent duplicates across sub-apps)
  • Auto-generate temporary password option (for staff registration)
  • Comprehensive tests including multi-tenant scenarios
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-002
BE-M3-004 18H Critical

Phone Verification System (OTP)

  • Create user_phones table migration (sub-app DB) with global_phone_id
  • Create phone_verification_otps table migration (main DB)
  • Create UserPhone model
  • Create PhoneVerificationOtp model
  • Implement OTPGenerationService (6-digit codes, 5-minute expiry)
  • Implement OTPMessageService (format SMS messages)
  • Implement OTPRateLimitService (prevent abuse)
  • Implement OTPService (main orchestration)
  • Create POST /api/v1/phone-verification/send-otp endpoint
  • Create POST /api/v1/phone-verification/verify-otp endpoint
  • Phone verification sync between main & sub-app DBs
  • Tests for OTP generation, expiry, rate limiting
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-003
BE-M3-005 16H High

SMS Providers Integration

  • Create sms_providers table (main DB)
  • Create registered_sms_providers table (sub-app DB)
  • Create sms_logs table (sub-app DB)
  • Implement SMSProviderFactory
  • Implement provider interfaces: Twilio, Vonage, MassJo, UmniahSMS, SMSMobileAPI
  • Implement SMSService (send SMS with provider selection)
  • Configuration management per sub-app
  • Retry logic for failed SMS
  • Comprehensive logging
  • Tests for all providers (with mocking)
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-004
BE-M3-006 12H Critical

User Authentication (Login/Logout)

  • Implement UserAuthenticationService
  • Create POST /api/v1/login endpoint (phone + password)
  • Sanctum token generation (multi-tenant aware)
  • Activity logging for login attempts (success/failure)
  • Create POST /api/v1/logout endpoint
  • Token revocation
  • Remember me functionality
  • Failed login tracking (security)
  • Tests for auth flows
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-003
BE-M3-007 10H Medium

Password Management

  • Create password_reset_tokens table (main DB)
  • Implement password reset flow with OTP
  • Create POST /api/v1/password/forgot endpoint
  • Create POST /api/v1/password/reset endpoint
  • Create PUT /api/v1/password/change endpoint (authenticated)
  • Password strength validation
  • Activity logging for password changes
  • Tests for password reset flows
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-006
BE-M3-008 14H High

Permissions System

  • Create permissions table (main DB)
  • Create permission_categories table (main DB)
  • Create permission_category_permissions table (main DB)
  • Create user_permission_categories table (main DB with app_id)
  • Create permission_checks_log table (main DB with app_id)
  • Create Permission model and relationships
  • Implement PermissionService (check permissions)
  • Create CheckPermission middleware
  • Permission caching with Redis
  • Cache invalidation on permission changes
  • Tests for permission checks across sub-apps
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-006
BE-M3-009 10H Medium

Core Admin & Identity Verification

  • Create core_admins table (main DB)
  • Create user_identity_documents table (main DB)
  • Create nationalities table (main DB)
  • Create CoreAdmin model
  • Create UserIdentityDocument model
  • Implement identity verification endpoints (Core Admin only)
  • POST /api/v1/core-admin/verify-identity/{userId}
  • Identity verification sync (main → sub-app)
  • Name fields become read-only after verification
  • Tests for identity verification and restrictions
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-008

Package 1.4: User Management APIs

60H
Milestone: M3 Total Tasks: 6
BE-M3-010 12H Medium

User Profile APIs

  • Create GET /api/v1/profile endpoint (authenticated user)
  • Create PUT /api/v1/profile/update endpoint
  • Validate identity-verified restrictions (read-only name fields)
  • Profile photo upload: POST /api/v1/profile/photo/upload
  • Handle multi-language names (AR/EN)
  • Activity logging for profile updates
  • Tests for profile operations and restrictions
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-009
BE-M3-011 14H Medium

Phone Number Management APIs

  • GET /api/v1/profile/phones (list user phones)
  • POST /api/v1/profile/phones/add (add phone with OTP verification)
  • DELETE /api/v1/profile/phones/{id} (remove phone, prevent if primary)
  • PUT /api/v1/profile/phones/{id}/set-primary (set primary for calls/messages/WhatsApp)
  • Maximum phones limit enforcement
  • Automatic phone cleanup for unverified phones (scheduled command)
  • Sync phone verification between main & sub-app
  • Tests for phone management
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-010
BE-M3-012 10H Medium

Address Management APIs

  • Create user_addresses table (sub-app DB)
  • Create UserAddress model
  • GET /api/v1/profile/addresses (list addresses)
  • POST /api/v1/profile/addresses (add address)
  • PUT /api/v1/profile/addresses/{id} (update address)
  • DELETE /api/v1/profile/addresses/{id} (delete address)
  • PUT /api/v1/profile/addresses/{id}/set-default
  • Tests for address management
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-011
BE-M3-013 8H Medium

User Acquisition Source Tracking

  • Create referral_sources table (sub-app DB)
  • Create marketing_codes table (sub-app DB)
  • Create user_acquisition_sources table (sub-app DB)
  • Implement tracking on registration
  • GET /api/v1/referral-sources (list for dropdowns)
  • GET /api/v1/marketing-codes/validate/{code}
  • Analytics endpoints for admin
  • Tests for acquisition tracking
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-010
BE-M3-014 10H Medium

User Notes & Documents APIs

  • Create user_notes table (sub-app DB)
  • Create user_documents table (sub-app DB)
  • GET /api/v1/users/{id}/notes (admin/staff only)
  • POST /api/v1/users/{id}/notes (add note)
  • PUT /api/v1/users/{id}/notes/{noteId} (edit note)
  • DELETE /api/v1/users/{id}/notes/{noteId}
  • POST /api/v1/users/{id}/documents/upload
  • GET /api/v1/users/{id}/documents
  • DELETE /api/v1/users/{id}/documents/{docId}
  • File storage management (S3 or local)
  • Tests for notes and documents
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-013
BE-M3-015 6H Medium

User Tags & Blacklist APIs

  • Create tags table (sub-app DB)
  • Create user_tags pivot table
  • Create user_blacklist table (sub-app DB)
  • GET /api/v1/tags (list available tags)
  • POST /api/v1/users/{id}/tags/{tagId} (assign tag)
  • DELETE /api/v1/users/{id}/tags/{tagId} (remove tag)
  • POST /api/v1/users/{id}/blacklist (add to blacklist)
  • DELETE /api/v1/users/{id}/blacklist (remove from blacklist)
  • Tests for tags and blacklist
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-014

Package 1.5: Services & Catalog APIs

100H
Milestone: M6 Total Tasks: 7
BE-M6-001 12H Medium

Service Categories & Departments

  • Create service_departments table (sub-app DB)
  • Create service_categories table (sub-app DB)
  • Create Department model
  • Create ServiceCategory model
  • GET /api/v1/public/service-categories (public, cached)
  • GET /api/v1/admin/service-categories (full details for admin)
  • POST /api/v1/admin/service-categories (create)
  • PUT /api/v1/admin/service-categories/{id} (update)
  • DELETE /api/v1/admin/service-categories/{id}
  • Multi-language support (AR/EN)
  • Tests for categories management
Milestone: M6 - Backend API Completion Blocked by: BE-M3-009
BE-M6-002 24H High

Services CRUD & Configuration

  • Create services table (sub-app DB) - comprehensive fields
  • Create Service model with relationships
  • GET /api/v1/public/services (public catalog)
  • GET /api/v1/public/services/{id} (service detail)
  • GET /api/v1/admin/services (admin list with filters)
  • POST /api/v1/admin/services (create service)
  • PUT /api/v1/admin/services/{id} (update)
  • DELETE /api/v1/admin/services/{id}
  • Multi-language descriptions
  • Service images handling
  • Activity logging for service changes
  • Tests for service management
Milestone: M6 - Backend API Completion Blocked by: BE-M6-001
BE-M6-003 14H Medium

Price Groups & Dynamic Pricing

  • Create price_groups table (sub-app DB)
  • Create service_price_groups pivot table
  • Implement dynamic pricing logic
  • GET /api/v1/admin/price-groups
  • POST /api/v1/admin/price-groups (create)
  • PUT /api/v1/admin/price-groups/{id}
  • POST /api/v1/admin/services/{id}/pricing (set prices per group)
  • Calculate final price based on user's price group
  • Tests for price calculations
Milestone: M6 - Backend API Completion Blocked by: BE-M6-002
BE-M6-004 18H High

Service Availability Management

  • Create service_availability table
  • Create branch_service_availability table
  • Implement availability checking algorithm
  • GET /api/v1/services/{id}/availability?date=X&branch=Y
  • Consider: staff schedules, room availability, equipment availability
  • Block unavailable time slots
  • Buffer time between sessions
  • Tests for availability logic
Milestone: M6 - Backend API Completion Blocked by: BE-M6-002
BE-M6-005 12H Medium

Branches & Locations APIs

  • Create branches table (sub-app DB)
  • Create Branch model
  • GET /api/v1/public/branches (list for customers)
  • GET /api/v1/branches/{id} (detail with hours, services, contact)
  • GET /api/v1/admin/branches (full management)
  • POST /api/v1/admin/branches (create)
  • PUT /api/v1/admin/branches/{id} (update)
  • DELETE /api/v1/admin/branches/{id}
  • Working hours management
  • Tests for branch management
Milestone: M6 - Backend API Completion Blocked by: BE-M6-001
BE-M6-006 10H Medium

Staff Assignment to Services

  • Create staff_services pivot table
  • Assign staff to services they can perform
  • GET /api/v1/services/{id}/staff (available staff for service)
  • POST /api/v1/admin/staff/{id}/services (assign services)
  • DELETE /api/v1/admin/staff/{id}/services/{serviceId}
  • Filter availability by staff skills
  • Tests for staff-service relationships

Package 1.6: Booking & Reservations APIs

140H
Milestone: M6 Total Tasks: 8
BE-M6-008 28H Critical Path

Booking Availability Engine

  • Implement complex availability checking algorithm
  • Consider multiple factors: Staff availability (schedules, breaks, existing bookings)
  • Room availability (capacity, equipment)
  • Service duration
  • Buffer time between sessions
  • Branch working hours
  • GET /api/v1/bookings/availability endpoint with query params
  • Return available time slots for date range
  • Color-code availability (green, orange, grey)
  • Cache availability for performance
  • Comprehensive tests for edge cases
Milestone: M6 - Backend API Completion Blocked by: BE-M6-004, BE-M6-007
BE-M6-009 22H High

Booking Creation & Management

  • Create bookings table (sub-app DB)
  • Create Booking model with relationships
  • POST /api/v1/bookings/create endpoint
  • Validate availability before booking
  • Auto-assign staff/room if not specified
  • Send confirmation SMS/email
  • Create activity log entry
  • Support "hold" (unpaid) vs "confirmed" (paid) bookings
  • Tests for booking creation
Milestone: M6 - Backend API Completion Blocked by: BE-M6-008
BE-M6-010 18H High

Booking Update & Reschedule

  • PUT /api/v1/bookings/{id}/reschedule endpoint
  • Check new slot availability
  • Apply rescheduling policy (fees, time limits)
  • Update booking
  • Send notification to customer
  • Activity logging
  • Staff notification (WebSocket placeholder)
  • Tests for rescheduling rules
Milestone: M6 - Backend API Completion Blocked by: BE-M6-009
BE-M6-011 16H High

Booking Cancellation & Refunds

  • DELETE /api/v1/bookings/{id}/cancel endpoint
  • Apply cancellation policy (refund rules)
  • Calculate refund amount
  • Process refund (integrate with payment system)
  • Update booking status
  • Free up time slot
  • Send notification
  • Activity logging
  • Tests for cancellation and refund scenarios
Milestone: M6 - Backend API Completion Blocked by: BE-M6-009
BE-M6-012 24H High

Golden Opportunities System

  • Create golden_opportunities table
  • Implement system to convert available slots to golden opportunities
  • Manual conversion: POST /api/v1/admin/golden-opportunities/create
  • Automatic conversion based on rules (scheduled job)
  • GET /api/v1/golden-opportunities (list available, real-time)
  • GET /api/v1/golden-opportunities/{id} (detail)
  • POST /api/v1/golden-opportunities/{id}/book (requires immediate payment)
  • Limit per day (scarcity)
  • Expire opportunities automatically
  • WebSocket publish on new/removed opportunities
  • Activity logging
  • Comprehensive tests
Milestone: M6 - Backend API Completion Blocked by: BE-M6-008
BE-M6-013 14H Medium

Check-in & Session Status Management

  • PUT /api/v1/staff/bookings/{id}/check-in endpoint
  • QR code validation: GET /api/v1/staff/bookings/verify-qr?code=X
  • Status transitions: Pending → Checked-in → In Progress → Completed
  • PUT /api/v1/staff/bookings/{id}/status (change status)
  • Mark no-show
  • Session timer tracking
  • Activity logging for all status changes
  • WebSocket notifications (placeholder)
  • Tests for status workflows
Milestone: M6 - Backend API Completion Blocked by: BE-M6-009
BE-M6-014 12H Medium

Waiting List Management

  • Create waiting_list table
  • POST /api/v1/waiting-list (add customer to waiting list)
  • GET /api/v1/waiting-list (list with filters)
  • PUT /api/v1/waiting-list/{id}/notify (notify customer of availability)
  • DELETE /api/v1/waiting-list/{id} (remove from list)
  • Auto-expire waiting list entries
  • Tests for waiting list operations
Milestone: M6 - Backend API Completion Blocked by: BE-M6-008
BE-M6-015 14H Medium

Booking History & Calendar APIs

  • GET /api/v1/bookings/my-bookings endpoint (for customers)
  • Filter by status: upcoming, completed, cancelled
  • GET /api/v1/bookings/{id} (booking detail with QR code)
  • GET /api/v1/admin/bookings/calendar (calendar view for staff)
  • Filter by: date, branch, staff, room, service, status
  • Support drag-and-drop rescheduling
  • Booking statistics for dashboard
  • Tests for calendar and history

Package 1.7: Payment Processing

140H
Milestone: M6 Total Tasks: 8
BE-M6-016 32H Critical Path

Payment Gateway Integration (Stripe/Local)

  • Integrate payment gateway (Stripe or local gateway)
  • Create payments table
  • Create payment_methods table (saved cards)
  • POST /api/v1/payments/process endpoint
  • Support payment types: Credit card, Apple Pay, Google Pay
  • Handle payment success/failure callbacks
  • Generate payment reference
  • Secure card data handling (tokenization)
  • PCI compliance considerations
  • Activity logging
  • Comprehensive tests (with gateway mocking)
Milestone: M6 - Backend API Completion Blocked by: BE-M3-009
BE-M6-017 14H High

Payment Methods Management

  • GET /api/v1/profile/payment-methods (list saved cards)
  • POST /api/v1/profile/payment-methods (add card - tokenization)
  • DELETE /api/v1/profile/payment-methods/{id} (remove card)
  • PUT /api/v1/profile/payment-methods/{id}/set-default
  • Card masking for display (show last 4 digits only)
  • Security: Never store full card numbers
  • Tests for payment methods
Milestone: M6 - Backend API Completion Blocked by: BE-M6-016
BE-M6-018 20H High

Customer Balance & Wallet System

  • Create customer_balance table
  • Create balance_transactions table (ledger)
  • Customer wallet system (can add money, use for payments)
  • POST /api/v1/wallet/add-funds
  • POST /api/v1/wallet/pay (use wallet balance for payment)
  • GET /api/v1/wallet/balance (current balance)
  • GET /api/v1/wallet/transactions (transaction history)
  • Prevent negative balance
  • Activity logging for all wallet operations
  • Tests for wallet operations
Milestone: M6 - Backend API Completion Blocked by: BE-M6-016
BE-M6-019 18H High

Refund Processing System

  • Create refunds table
  • POST /api/v1/admin/refunds/process endpoint
  • Support refund types: Full refund (back to payment method)
  • Partial refund
  • Wallet credit (instead of payment method)
  • Calculate refund amount based on cancellation policy
  • Process gateway refund
  • Update booking/transaction status
  • Send refund confirmation
  • Activity logging
  • Tests for refund scenarios
Milestone: M6 - Backend API Completion Blocked by: BE-M6-016
BE-M6-020 16H Medium

CliQ Integration (Jordan Payment System)

  • Create cliq_accounts table
  • Integrate with CliQ API (if available)
  • POST /api/v1/profile/cliq/link (link CliQ account)
  • DELETE /api/v1/profile/cliq/{id} (unlink)
  • POST /api/v1/payments/cliq (pay via CliQ)
  • Handle CliQ callbacks
  • Activity logging
  • Tests for CliQ integration
Milestone: M6 - Backend API Completion Blocked by: BE-M6-016
BE-M6-021 14H Medium

Payment History & Receipts

  • GET /api/v1/payments/history (customer payment history)
  • GET /api/v1/admin/payments/{id} (payment details for admin)
  • Receipt generation (PDF)
  • GET /api/v1/payments/{id}/receipt (download receipt)
  • POST /api/v1/payments/{id}/receipt/send (email/SMS receipt)
  • Payment statistics for dashboard
  • Tests for payment history and receipts
Milestone: M6 - Backend API Completion Blocked by: BE-M6-016
BE-M6-022 20H High

Apple Pay & Google Pay Integration

  • Integrate Apple Pay SDK
  • Integrate Google Pay SDK
  • POST /api/v1/payments/apple-pay
  • POST /api/v1/payments/google-pay
  • Handle platform-specific token validation
  • Process payments via gateway
  • Activity logging
  • Platform-specific testing
Milestone: M6 - Backend API Completion Blocked by: BE-M6-016
BE-M6-023 6H Medium

Payment Reverse & Cancellation

  • POST /api/v1/admin/payments/{id}/reverse (admin only)
  • Reverse payment transaction
  • Update ledger
  • Activity logging
  • Require manager approval
  • Tests for payment reversal
Milestone: M6 - Backend API Completion

Package 1.8: POS APIs

100H
Milestone: M6 Total Tasks: 7
BE-M6-024 14H Medium

POS Catalog & Pricing

  • GET /api/v1/staff/pos/catalog endpoint
  • Return services + products for POS
  • Include pricing per customer's price group
  • Include stock availability for products
  • Cache catalog for performance
  • Support search/filter
  • Tests for catalog retrieval
Milestone: M6 - Backend API Completion Blocked by: BE-M6-002
BE-M6-025 20H High

POS Transaction Creation

  • Create pos_transactions table
  • Create pos_transaction_items table
  • POST /api/v1/staff/pos/transactions/create
  • Support mixed items (services + products)
  • Calculate totals (subtotal, tax, discounts)
  • Validate stock availability
  • Hold transaction (for later completion)
  • Activity logging
  • Tests for transaction creation
Milestone: M6 - Backend API Completion Blocked by: BE-M6-024
BE-M6-026 18H High

Discount Application & Approval Workflow

  • Create discount_requests table
  • POST /api/v1/staff/pos/discounts/request (cashier requests discount)
  • Notification to manager (WebSocket placeholder)
  • GET /api/v1/manager/discount-requests (pending queue)
  • POST /api/v1/manager/discount-requests/{id}/approve
  • POST /api/v1/manager/discount-requests/{id}/reject
  • Apply discount to transaction after approval
  • Activity logging
  • Tests for approval workflow
Milestone: M6 - Backend API Completion Blocked by: BE-M6-025
BE-M6-027 10H Medium

Held Transactions Management

  • POST /api/v1/staff/pos/transactions/hold (save transaction temporarily)
  • GET /api/v1/staff/pos/held-transactions (list held transactions)
  • PUT /api/v1/staff/pos/held-transactions/{id}/resume
  • DELETE /api/v1/staff/pos/held-transactions/{id}/cancel
  • Auto-expire held transactions after X hours
  • Tests for held transactions
Milestone: M6 - Backend API Completion Blocked by: BE-M6-025
BE-M6-028 16H High

Cash Drawer Management APIs

  • Create cash_drawers table
  • Create cash_drawer_transactions table
  • POST /api/v1/staff/pos/cash-drawer/open (start of day)
  • GET /api/v1/staff/pos/cash-drawer/expected-balance
  • POST /api/v1/staff/pos/cash-drawer/count (end of day count)
  • Calculate variance
  • Manager approval if variance exceeds threshold
  • POST /api/v1/staff/pos/cash-drawer/close
  • Cash movement logs
  • Tests for cash drawer operations
Milestone: M6 - Backend API Completion Blocked by: BE-M6-025
BE-M6-029 12H Medium

Receipt Printing & Generation

  • Receipt template design (HTML/PDF)
  • POST /api/v1/staff/pos/receipts/print (trigger print job)
  • GET /api/v1/staff/pos/receipts/{id} (get receipt HTML/PDF)
  • POST /api/v1/staff/pos/receipts/{id}/send (email/SMS receipt)
  • Receipt data includes: Items, prices, payment method, cashier, timestamp
  • Tests for receipt generation
Milestone: M6 - Backend API Completion Blocked by: BE-M6-025
BE-M6-030 10H Medium

POS Payment Processing

  • POST /api/v1/staff/pos/payments/process
  • Support payment types: Cash, Card, Customer Balance, Customer Package (deduct session), Points
  • Support split payments (multiple methods in one transaction)
  • Process each payment method
  • Update customer balance/package if applicable
  • Generate receipt
  • Activity logging
  • Tests for POS payment methods
Milestone: M6 - Backend API Completion Blocked by: BE-M6-016, BE-M6-025

Package 1.9: Staff & HR APIs (Basic)

80H
Milestone: M6 Total Tasks: 6
BE-M6-031 12H Medium

Staff Authentication & Profile

  • Create staff table (sub-app DB)
  • Staff model with relationships
  • POST /api/v1/staff/login (staff authentication)
  • Different token type (staff vs customer)
  • GET /api/v1/staff/profile
  • PUT /api/v1/staff/profile/update (limited fields)
  • PUT /api/v1/staff/password/change
  • Activity logging for staff actions
  • Tests for staff authentication
Milestone: M6 - Backend API Completion Blocked by: BE-M3-006
BE-M6-032 14H Medium

Staff CRUD (Admin Management)

  • GET /api/v1/admin/staff (list with filters)
  • POST /api/v1/admin/staff (create staff member)
  • PUT /api/v1/admin/staff/{id} (update)
  • DELETE /api/v1/admin/staff/{id} (deactivate)
  • Assign job title (determines permissions)
  • Assign to branches
  • Activity logging
  • Tests for staff management
Milestone: M6 - Backend API Completion Blocked by: BE-M6-031
BE-M6-033 18H High

Staff Scheduling APIs

  • Create staff_schedules table
  • Create shifts table
  • POST /api/v1/admin/shifts (define shifts)
  • POST /api/v1/admin/staff/{id}/schedule (assign shift)
  • GET /api/v1/staff/my-schedule (staff view their schedule)
  • GET /api/v1/admin/schedules (calendar view for admin)
  • Conflict detection (double booking)
  • Tests for scheduling
Milestone: M6 - Backend API Completion Blocked by: BE-M6-032
BE-M6-034 14H Medium

Attendance Tracking (Basic)

  • Create attendance_logs table
  • POST /api/v1/staff/attendance/check-in (clock in)
  • POST /api/v1/staff/attendance/check-out (clock out)
  • GET /api/v1/staff/attendance/my-logs
  • GET /api/v1/admin/attendance (view all, filters)
  • POST /api/v1/admin/attendance/manual (manual entry)
  • Calculate work hours
  • Tests for attendance
Milestone: M6 - Backend API Completion Blocked by: BE-M6-032
BE-M6-035 12H Medium

Leave Requests (Basic)

  • Create leave_requests table
  • POST /api/v1/staff/leave-requests (submit leave request)
  • GET /api/v1/staff/leave-requests (my requests)
  • GET /api/v1/admin/leave-requests (pending queue)
  • PUT /api/v1/admin/leave-requests/{id}/status (approve/reject)
  • Leave balance tracking
  • Activity logging
  • Tests for leave requests
Milestone: M6 - Backend API Completion Blocked by: BE-M6-032
BE-M6-036 10H Medium

Job Titles & Permissions Management

  • Create job_titles table

    • Package 1.10: Notifications

    60H
    Milestone: M6 Total Tasks: 5
    BE-M6-037 12H Medium

    Email Sending Service

    • Configure mail service (SMTP/SendGrid/SES)
    • Create email templates (Blade)
    • Implement email queue system
    • POST /api/v1/notifications/email/send (internal use)
    • Email logging (sent, failed)
    • Retry logic for failed emails
    • Tests for email sending
    Milestone: M6 - Backend API Completion Blocked by: BE-M3-009
    BE-M6-038 16H High

    Push Notifications (FCM) Setup

    • Integrate Firebase Cloud Messaging (FCM)
    • Create device_tokens table (store FCM tokens)
    • POST /api/v1/profile/fcm-token (register device)
    • DELETE /api/v1/profile/fcm-token/{id} (unregister)
    • POST /api/v1/notifications/push/send (internal use)
    • Handle notification payload
    • Badge count management
    • Tests for push notifications (with FCM mocking)
    Milestone: M6 - Backend API Completion Blocked by: BE-M6-037
    BE-M6-039 8H Medium

    Notification Preferences Management

    • Create notification_preferences table
    • GET /api/v1/profile/notification-preferences
    • PUT /api/v1/profile/notification-preferences (update settings)
    • Preference types: Push, SMS, Email
    • Notification categories: Bookings, Promotions, Golden Opportunities, etc.
    • Respect user preferences when sending notifications
    • Tests for preferences
    Milestone: M6 - Backend API Completion Blocked by: BE-M6-038
    BE-M6-040 10H Medium

    Notification History & Inbox

    • Create notifications table (inbox for users)
    • GET /api/v1/notifications (user's notification list)
    • PUT /api/v1/notifications/mark-as-read (single or bulk)
    • DELETE /api/v1/notifications/{id}
    • Notification types: Info, Reminder, Promotion, Alert
    • Tests for notification inbox
    Milestone: M6 - Backend API Completion Blocked by: BE-M6-039
    BE-M6-041 14H Medium

    Notification Templates Management

    • Create notification_templates table
    • GET /api/v1/admin/notification-templates
    • POST /api/v1/admin/notification-templates (create)
    • PUT /api/v1/admin/notification-templates/{id}
    • Support variables (e.g., {customer_name}, {appointment_date})
    • Template rendering engine
    • Multi-language templates
    • Tests for template rendering
    Milestone: M6 - Backend API Completion Blocked by: BE-M6-037
  • GET /api/v1/admin/job-titles
  • POST /api/v1/admin/job-titles (create)
  • PUT /api/v1/admin/job-titles/{id}/permissions (assign permissions)
  • Permissions matrix management
  • Tests for job titles and permissions
Milestone: M6 - Backend API Completion Blocked by: BE-M3-008

Package 1.11: Admin Panel APIs (Phase 1 - Essential)

200H
Milestone: M6 Total Tasks: 10
BE-M6-042 20H High

Dashboard Statistics APIs

  • GET /api/v1/admin/dashboard/stats endpoint
  • Return KPIs: Today's revenue
  • Today's appointments count
  • Active customers in clinic
  • Pending approvals count
  • Monthly revenue trend (last 6 months)
  • Weekly appointments trend
  • Top 5 services
  • Occupancy rate
  • Cached for performance (refresh every 5 minutes)
  • Tests for dashboard statistics
Milestone: M6 - Backend API Completion Blocked by: BE-M6-015, BE-M6-021
BE-M6-043 16H High

Advanced Customer Search & Filters

  • GET /api/v1/admin/customers endpoint with advanced filters
  • Filter by: Name, phone, ID
  • Gender, age range
  • Tier (VIP, Regular, etc.)
  • Tags, Referral source
  • Registration date range, Last visit date range
  • Total spent range, Balance range
  • Status (verified, blacklisted, etc.)
  • Pagination, Sorting options
  • Export to Excel/PDF
  • Tests for complex queries
Milestone: M6 - Backend API Completion Blocked by: BE-M3-015
BE-M6-044 48H High

Customer Profile Comprehensive APIs (15+ Tabs)

  • GET /api/v1/admin/customers/{id}/profile (basic info)
  • GET /api/v1/admin/customers/{id}/phones
  • GET /api/v1/admin/customers/{id}/addresses
  • GET /api/v1/admin/customers/{id}/emails (multiple emails support)
  • GET /api/v1/admin/customers/{id}/balance (account statement)
  • POST /api/v1/admin/customers/{id}/payments/add (manual payment)
  • POST /api/v1/admin/customers/{id}/payments/{paymentId}/refund
  • POST /api/v1/admin/customers/{id}/payments/{paymentId}/reverse
  • POST /api/v1/admin/customers/{id}/payments/{paymentId}/cancel
  • GET /api/v1/admin/customers/{id}/packages (active packages)
  • POST /api/v1/admin/customers/{id}/packages (add package)
  • PUT /api/v1/admin/customers/{id}/packages/{packageId}/sessions (adjust sessions)
  • POST /api/v1/admin/customers/{id}/packages/{packageId}/cancel
  • PUT /api/v1/admin/customers/{id}/packages/{packageId}/expiry (change expiry)
  • POST /api/v1/admin/customers/{id}/packages/{packageId}/transfer (transfer to another customer)
  • GET /api/v1/admin/customers/{id}/package-freezes
  • POST /api/v1/admin/customers/{id}/package-freezes (freeze package)
  • DELETE /api/v1/admin/customers/{id}/package-freezes/{id} (end freeze)
  • GET /api/v1/admin/customers/{id}/bookings
  • GET /api/v1/admin/customers/{id}/waiting-list
  • GET /api/v1/admin/customers/{id}/points (points history)
  • POST /api/v1/admin/customers/{id}/points/adjust (add/deduct points manually)
  • GET /api/v1/admin/customers/{id}/notes, tags, documents, forms
  • POST /api/v1/admin/customers/{id}/forms/send (send form for signature)
  • GET /api/v1/admin/customers/{id}/blacklist-status, cliq-accounts, preferred-contact-times, visit-history
  • Comprehensive tests for all customer profile operations
Milestone: M6 - Backend API Completion Blocked by: Multiple previous packages
BE-M6-045 16H Medium

Bulk Customer Operations

  • POST /api/v1/admin/customers/bulk-actions endpoint
  • Supported actions: Assign tag to multiple customers
  • Remove tag from multiple customers
  • Add to blacklist
  • Remove from blacklist
  • Export selected customers
  • Send bulk message/campaign
  • Queue bulk operations for performance
  • Progress tracking
  • Tests for bulk operations
Milestone: M6 - Backend API Completion Blocked by: BE-M6-043
BE-M6-046 20H Medium

Customer Transfer & Merge APIs

  • POST /api/v1/admin/customers/{id}/transfer (transfer to different sales rep)
  • POST /api/v1/admin/customers/merge (merge duplicate customers)
  • Merge wizard: Find potential duplicates (by phone, name)
  • Preview merge (side-by-side comparison)
  • Select which data to keep
  • Execute merge (irreversible)
  • Transfer customer history, bookings, packages, balance
  • Activity logging
  • Tests for transfer and merge
Milestone: M6 - Backend API Completion Blocked by: BE-M6-044
BE-M6-047 18H High

Calendar View API for Admin

  • GET /api/v1/admin/reservations/calendar endpoint
  • Query parameters: date, view (day/week), groupBy (staff/room/service)
  • Return structured data for calendar rendering
  • Each slot: time, customer, service, duration, status, staff, room
  • Support for drag-and-drop updates (PUT with new time/staff/room)
  • Real-time availability check on drag
  • Tests for calendar API
Milestone: M6 - Backend API Completion Blocked by: BE-M6-015
BE-M6-048 12H Medium

Bulk Appointment Confirmation

  • GET /api/v1/admin/reservations/pending-confirmation (today/tomorrow)
  • POST /api/v1/admin/reservations/confirm-bulk
  • Send SMS confirmation to multiple customers
  • Track confirmation status
  • Activity logging
  • Tests for bulk confirmation
Milestone: M6 - Backend API Completion Blocked by: BE-M6-047
BE-M6-049 12H Medium

POS Transaction Management APIs (Admin)

  • GET /api/v1/admin/pos/transactions (list with filters)
  • GET /api/v1/admin/pos/transactions/{id} (transaction detail)
  • POST /api/v1/admin/pos/transactions/{id}/void (void transaction)
  • GET /api/v1/admin/pos/reports (quick POS analytics)
  • Tests for admin POS management
Milestone: M6 - Backend API Completion Blocked by: BE-M6-030
BE-M6-050 24H High

Top 5 Essential Reports APIs

  • POST /api/v1/admin/reports/generate endpoint (generic report generator)
  • Implement 5 essential reports:
  • 1. Daily sales report (services, products, total)
  • 2. Customer report (new customers, active, inactive)
  • 3. Appointment report (completed, cancelled, no-shows)
  • 4. Cash drawer report (opening, closing, variance)
  • 5. Top services report (most booked services)
  • Export to Excel (PHPSpreadsheet)
  • Export to PDF (DomPDF)
  • Report scheduling (email delivery) - placeholder
  • Tests for all reports
Milestone: M6 - Backend API Completion Blocked by: BE-M6-042
BE-M6-051 14H Medium

Settings APIs - Services Configuration

  • All CRUD endpoints for service configuration (already done in Package 1.5)
  • Additional settings: Service images upload
  • Preparation instructions
  • Post-care instructions
  • Points earned per service
  • Required consumables
  • Required equipment
  • Tests for service configuration
Milestone: M6 - Backend API Completion Blocked by: BE-M6-002
Blocked by: BE-M6-019
Milestone: M6 - Backend API Completion Blocked by: BE-M6-013
Milestone: M6 - Backend API Completion Blocked by: BE-M6-002
BE-M6-007 10H Medium

Equipment & Room Management APIs

  • Create equipment table
  • Create rooms table
  • Create service_equipment pivot (required equipment per service)
  • GET /api/v1/admin/equipment
  • POST /api/v1/admin/equipment (create)
  • GET /api/v1/admin/rooms
  • POST /api/v1/admin/rooms (create)
  • Room availability for bookings
  • Equipment availability for bookings
  • Tests for equipment and room management
Milestone: M6 - Backend API Completion Blocked by: BE-M6-005
Milestone: M3 - Authentication & Multi-tenant Backend Blocked by: BE-M3-014

Summary

Total Hours by Phase

Phase Hours Percentage
Phase 1 1,880 70%
Phase 2 240 9%
Phase 3 560 21%
TOTAL 2,680 100%

Total Tasks

Package 1.12: Data Migration Scripts

100H
Milestone: M11 Total Tasks: 6
BE-M11-001 24H Critical Path

Legacy Database Analysis & Mapping

  • Analyze legacy database structure (55,000+ customer records)
  • Document table schemas
  • Map old structure to new structure
  • Identify data inconsistencies
  • Create data dictionary
  • Plan migration strategy
  • Deliverable: Migration mapping document
Milestone: M11 - Data Migration Complete Blocked by: BE-M3-009
BE-M11-002 20H Critical Path

Customer Data Migration Script

  • Create Artisan command: `php artisan migrate:customers`
  • Read from legacy DB
  • Transform data (name splitting, phone formatting, etc.)
  • Insert into new structure:
  • - Main DB: global user record
  • - Sub-app DB: local user record with global_id
  • Handle duplicates (merge logic)
  • Progress tracking
  • Error logging
  • Tests with sample data
Milestone: M11 - Data Migration Complete Blocked by: BE-M11-001
BE-M11-003 12H Medium

Phone Numbers Migration Script

  • Create Artisan command: `php artisan migrate:phones`
  • Migrate phone numbers to new structure
  • Normalize phone numbers
  • Set primary flags (calls, messages, WhatsApp)
  • Link to migrated users (global_phone_id)
  • Tests with sample data
Milestone: M11 - Data Migration Complete Blocked by: BE-M11-002
BE-M11-004 16H Medium

Booking History Migration (If Needed)

  • Analyze if booking history should be migrated
  • If yes, create: `php artisan migrate:bookings`
  • Transform old booking records
  • Link to migrated customers
  • Link to services (map old service IDs to new)
  • Tests with sample data
Milestone: M11 - Data Migration Complete Blocked by: BE-M11-002
BE-M11-005 12H Medium

Service & Package Data Migration

  • Create: `php artisan migrate:services`
  • Migrate service definitions
  • Migrate pricing information
  • Migrate package definitions
  • Tests with sample data
Milestone: M11 - Data Migration Complete Blocked by: BE-M11-001
BE-M11-006 16H High

Data Validation & Quality Check

  • Create validation scripts
  • Check data integrity:
  • - All users have global_id
  • - All phones have global_phone_id
  • - Foreign keys valid
  • - No orphaned records
  • Generate validation report
  • Fix identified issues
  • Deliverable: Validation report

    • Phase 2: Advanced Features

    Loyalty, Passport, and Packages Systems

    Package 2.1: Loyalty System

    80H
    Milestone: M13 Total Tasks: 7
    BE-M13-001 10H Medium

    Loyalty Database Schema & Models

    • Create loyalty_tiers table (main DB)
    • Create loyalty_points_transactions table (sub-app DB)
    • Create points_earning_rules table (main DB)
    • Create points_redemption_options table (main DB)
    • Create LoyaltyTier, PointsTransaction, EarningRule models
    • Tests for relationships
    Milestone: M13 - Loyalty System Backend Blocked by: Phase 1 Complete
    BE-M13-002 16H High

    Points Calculation Engine

    • Implement PointsCalculationService
    • Rules:
    • - 1 point per 1 JOD spent on laser services
    • - 2 points per 1 JOD spent on high-margin services (cross-sell)
    • - Bonus points for completing packages
    • - Bonus points for referrals
    • - Bonus points for social sharing
    • Automatic point crediting after payment
    • Activity logging
    • Tests for all earning scenarios
    Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-001
    BE-M13-003 10H Medium

    Points History & Balance APIs

    • GET /api/v1/loyalty/points/balance
    • GET /api/v1/loyalty/points/history (earned/spent)
    • Filter by date range
    • Pagination
    • Tests for points queries
    Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-002
    BE-M13-004 14H High

    Tier System & Progression

    • Define tier thresholds:
    • - Insider: 0-749 points
    • - Ambassador: 750-1999 points
    • - Royal: 2000+ points
    • GET /api/v1/loyalty/tiers (list all tiers)
    • GET /api/v1/loyalty/tiers/my-progress
    • Auto-upgrade users when reaching threshold
    • Notification on tier upgrade
    • Tier benefits management
    • Tests for tier progression
    Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-001
    BE-M13-005 16H High

    Points Redemption System

    • GET /api/v1/loyalty/redemption-options (what can be redeemed)
    • POST /api/v1/loyalty/redeem endpoint
    • Redemption types:
    • - Discount on next booking
    • - Free service
    • - Passport benefit (Phase 2)
    • Validate sufficient points
    • Deduct points
    • Create redemption record
    • Activity logging
    • Tests for redemption scenarios
    Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-003, BE-M13-004
    BE-M13-006 10H Medium

    Points Expiration Management

    • Points expiry policy: Expire if no activity for 6 months
    • Scheduled job to expire points
    • Warning notifications before expiry
    • GET /api/v1/loyalty/points/expiring-soon
    • Tests for expiration logic
    Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-003
    BE-M13-007 4H Medium

    Manual Points Adjustment (Admin)

    • POST /api/v1/admin/customers/{id}/points/adjust (add/deduct points manually)
    • Reason required
    • Activity logging
    • Tests for manual adjustments
    Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-002
Milestone: M11 - Data Migration Complete Blocked by: BE-M11-002, BE-M11-003, BE-M11-004, BE-M11-005

Team Structure & Resource Allocation

Backend Team (From Official Budget & WBS)

Package 2.2: Passport System

60H
Milestone: M14 Total Tasks: 5
BE-M14-001 16H High

Partner Management System

  • Create partners table (main DB)
  • Create partner_categories table (main DB)
  • Create partner_benefits table (main DB)
  • Create Partner, PartnerCategory models
  • GET /api/v1/admin/partners
  • POST /api/v1/admin/partners (create partner)
  • PUT /api/v1/admin/partners/{id}
  • DELETE /api/v1/admin/partners/{id}
  • Partner contract management
  • Tests for partner management
Milestone: M14 - Passport System Backend Blocked by: Phase 1 Complete
BE-M14-002 10H Medium

Partner Categories & Benefits

  • Define partner categories (Dining, Fitness, Fashion, Entertainment)
  • GET /api/v1/passport/partners (list for customers)
  • GET /api/v1/passport/partners/category/{id}
  • GET /api/v1/passport/partners/{id} (partner detail)
  • Filter by location, category
  • Cache partner list
  • Tests for partner queries
Milestone: M14 - Passport System Backend Blocked by: BE-M14-001
BE-M14-003 18H High

Benefit Activation & QR Code System

  • Create passport_benefit_activations table
  • POST /api/v1/passport/partners/{id}/activate endpoint
  • Generate time-limited QR code (5-minute expiry)
  • QR code contains: user_id, partner_id, benefit_id, timestamp, signature
  • POST /api/v1/passport/partners/verify-qr (partner validates QR)
  • Mark benefit as used
  • Limit: 1 use per month per partner (configurable)
  • Activity logging
  • Tests for QR generation and validation
Milestone: M14 - Passport System Backend Blocked by: BE-M14-002
BE-M14-004 10H Medium

Passport Usage Tracking & Analytics

  • GET /api/v1/passport/my-activity (customer's usage history)
  • GET /api/v1/admin/passport/analytics (admin dashboard)
  • Partner-specific analytics
  • Most popular partners
  • Usage trends
  • Tests for analytics queries
Milestone: M14 - Passport System Backend Blocked by: BE-M14-003
BE-M14-005 6H Medium

Partner PromoCode System

  • Partners can have unique PromoCode for Golden Opportunities
  • POST /api/v1/admin/partners/{id}/promo-code (assign code to partner)
  • Partners can give this code to their VIP customers
  • Usage tracking per partner's code
  • Tests for partner promo codes
Milestone: M14 - Passport System Backend Blocked by: BE-M14-001

Package 2.3: Packages System

100H
Milestone: M13 Total Tasks: 8
BE-M13-008 12H Medium

Packages Database Schema

  • Create packages table (sub-app DB)
  • Create package_services table (package includes multiple services)
  • Create customer_packages table (purchased packages)
  • Create customer_package_sessions table (session tracking)
  • Create Package, CustomerPackage models
  • Relationships setup
  • Tests for relationships
Milestone: M13 - Loyalty System Backend Blocked by: Phase 1 Complete
BE-M13-009 16H High

Package Configuration APIs (Admin)

  • GET /api/v1/admin/packages
  • POST /api/v1/admin/packages (create package)
  • PUT /api/v1/admin/packages/{id}
  • DELETE /api/v1/admin/packages/{id}
  • Package includes:
  • - Name, description
  • - Services (multiple)
  • - Sessions per service
  • - Total price
  • - Validity period
  • - Payment plans (full/installments)
  • Tests for package management
Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-008
BE-M13-010 20H High

Package Purchase & Payment Plans

  • GET /api/v1/packages/available (list for customers)
  • GET /api/v1/packages/{id} (package detail)
  • POST /api/v1/packages/{id}/purchase
  • Support payment plans:
  • - Full payment upfront
  • - Installments (3, 6, 12 months)
  • Create customer_package record
  • Payment processing
  • Activity logging
  • Tests for package purchase
Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-009
BE-M13-011 16H High

Package Session Tracking & Usage

  • GET /api/v1/packages/my-packages (customer's active packages)
  • GET /api/v1/packages/{id}/details (sessions remaining, used, total)
  • GET /api/v1/packages/{id}/usage-history
  • Deduct session when booking with package
  • POST /api/v1/bookings/create-with-package
  • Prevent booking if no sessions remaining
  • Tests for session tracking
Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-010
BE-M13-012 12H Medium

Package Freezing System

  • Create package_freezes table
  • POST /api/v1/packages/{id}/freeze (freeze package, pause expiry)
  • Freeze policy: Max 2 weeks per freeze, max 2 freezes per package
  • DELETE /api/v1/packages/{id}/freeze/{freezeId} (end freeze)
  • GET /api/v1/packages/{id}/freezes (freeze history)
  • Adjust expiry date after unfreeze
  • Tests for freezing logic
Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-011
BE-M13-013 14H Medium

Package Transfer System

    \n

    Phase 3: KODA AI Features

    AI-Powered Intelligence, Social Media, Voice, and Real-Time Integration

    \n

    Package 3.1: KODA AI - Foundation

    200H
    Milestone: M18 Total Tasks: 8
    BE-M18-001 16H High

    KODA AI Application Setup

    • Create new Laravel application (KODA AI)
    • Separate from KODA Backend (different codebase)
    • Connect to KODA Backend database (read-only)
    • Setup Google AI Studio SDK
    • Environment configuration
    • Basic API structure
    • Tests setup
    Milestone: M18 - KODA AI Foundation Blocked by: Phase 2 Complete
    BE-M18-002 20H High

    Google AI Studio Integration

    • Integrate Google AI Studio (Gemini) SDK
    • Configure API keys
    • Implement AI request service
    • Rate limiting
    • Error handling
    • Retry logic
    • Cost tracking
    • Tests with AI SDK (mocked)
    Milestone: M18 - KODA AI Foundation Blocked by: BE-M18-001
    BE-M18-003 32H High

    AI Knowledge Base System

    • Create knowledge_base_documents table
    • Document upload system (PDF, DOCX, TXT)
    • Text extraction from documents
    • Vector embeddings generation (via Google AI)
    • Vector storage (PostgreSQL with pgvector or separate vector DB)
    • Semantic search functionality
    • GET /api/v1/ai/knowledge-base/documents
    • POST /api/v1/ai/knowledge-base/documents/upload
    • DELETE /api/v1/ai/knowledge-base/documents/{id}
    • Tests for knowledge base
    Milestone: M18 - KODA AI Foundation Blocked by: BE-M18-002
    BE-M18-004 28H High

    Retrieval-Augmented Generation (RAG)

    • Implement RAG system
    • Query → Vector search → Retrieve relevant documents → Include in AI prompt
    • Improve AI accuracy with KODA-specific knowledge
    • Context window management
    • Tests for RAG
    Milestone: M18 - KODA AI Foundation Blocked by: BE-M18-003
    BE-M18-005 40H High

    AI Report Generation

    • POST /api/v1/ai/reports/generate endpoint
    • Report types:
    • 1. Monthly business summary
    • 2. Customer behavior analysis
    • 3. Service performance analysis
    • 4. Revenue trends with insights
    • 5. Predictive analytics (churn risk, etc.)
    • Query KODA Backend database
    • Analyze data with AI
    • Generate narrative report (natural language)
    • Export to PDF
    • Chart generation (optional)
    • Tests for report generation
    Milestone: M18 - KODA AI Foundation Blocked by: BE-M18-004
    BE-M18-006 24H Medium

    AI Admin Dashboard

    • GET /api/v1/ai/dashboard/stats
    • Conversation logs (count, types)
    • Response accuracy metrics
    • Handoff rate (AI → human)
    • Customer satisfaction scores
    • Cost tracking (API usage)
    • GET /api/v1/ai/conversations (list conversations)
    • GET /api/v1/ai/conversations/{id} (conversation detail)
    • Tests for dashboard
    Milestone: M18 - KODA AI Foundation Blocked by: BE-M18-002
    BE-M18-007 16H Medium

    AI Settings & Configuration

    • GET /api/v1/ai/settings
    • PUT /api/v1/ai/settings
    • Configurable settings:
    • - AI model selection (Gemini models)
    • - Temperature (creativity level)
    • - Max tokens
    • - Response tone (formal, friendly, etc.)
    • - Language preference
    • - Handoff triggers (when to escalate to human)
    • Tests for settings management
    Milestone: M18 - KODA AI Foundation Blocked by: BE-M18-006
    BE-M18-008 24H High

    AI API for Other KODA Apps

    • RESTful API to expose AI capabilities
    • POST /api/v1/ai/chat (chat with AI)
    • POST /api/v1/ai/analyze (analyze text/data)
    • POST /api/v1/ai/recommend (get AI recommendations)
    • Authentication (API key from main system)
    • Rate limiting
    • API documentation (OpenAPI)
    • Tests for AI API
    Milestone: M18 - KODA AI Foundation Blocked by: BE-M18-007
  • POST /api/v1/admin/packages/{id}/transfer (transfer package to another customer)
  • Validation: Both customers must exist, consent required
  • Transfer all remaining sessions
  • Update ownership
  • Activity logging for both customers
  • Tests for transfer
Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-011
BE-M13-014 10H Medium

Package 3.2: KODA AI - Social Media Integration

200H
Milestone: M19 Total Tasks: 9
BE-M19-001 32H High

WhatsApp Business API Integration

  • Integrate WhatsApp Business API (official or provider like Twilio)
  • Webhook setup (receive messages)
  • POST webhook endpoint: /api/v1/ai/whatsapp/webhook
  • Message validation
  • Message parsing
  • Send message API
  • Media handling (images, documents)
  • Conversation threading
  • Tests with WhatsApp API (mocked)
Milestone: M19 - Social Media Integration Blocked by: BE-M18-008
BE-M19-002 28H High

WhatsApp AI Responder

  • Natural language understanding for WhatsApp messages
  • Intent detection:
  • - Booking inquiry
  • - Service information request
  • - Pricing question
  • - General question
  • - Complaint/issue
  • Auto-response generation (using AI)
  • Handoff logic (escalate to human if complex/urgent)
  • Conversation state management
  • Tests for intent detection and responses
Milestone: M19 - Social Media Integration Blocked by: BE-M19-001
BE-M19-003 24H Medium

Instagram API Integration

  • Integrate Instagram API (Graph API)
  • Webhook setup for DMs and comments
  • POST /api/v1/ai/instagram/webhook
  • Message parsing
  • Send DM API
  • Comment reply API
  • Tests with Instagram API (mocked)
Milestone: M19 - Social Media Integration Blocked by: BE-M18-008
BE-M19-004 24H Medium

Instagram AI Responder

  • Intent detection for Instagram messages/comments
  • Auto-response generation
  • Handoff logic
  • Conversation management
  • Tests for Instagram AI
Milestone: M19 - Social Media Integration Blocked by: BE-M19-003
BE-M19-005 24H Medium

Facebook Messenger Integration

  • Integrate Facebook Messenger API
  • Webhook setup
  • POST /api/v1/ai/facebook/webhook
  • Message parsing
  • Send message API
  • Tests with Facebook API (mocked)
Milestone: M19 - Social Media Integration Blocked by: BE-M18-008
BE-M19-006 24H Medium

Facebook AI Responder

  • Intent detection for Facebook Messenger
  • Auto-response generation
  • Handoff logic
  • Conversation management
  • Page comments monitoring (optional)
  • Tests for Facebook AI
Milestone: M19 - Social Media Integration Blocked by: BE-M19-005
BE-M19-007 20H Medium

Conversation Logs & Analytics

  • Create conversations table (all channels)
  • Store full conversation history
  • GET /api/v1/ai/conversations (admin view)
  • Analytics:
  • - Response time
  • - Resolution rate
  • - Handoff rate
  • - Customer satisfaction (if feedback collected)
  • - Most common intents
  • Tests for conversation logging
Milestone: M19 - Social Media Integration Blocked by: BE-M19-002, BE-M19-004, BE-M19-006
BE-M19-008 16H Medium

Lead Capture from Social Media

  • Identify potential leads from conversations
  • Extract contact information (phone, name)
  • POST /api/v1/ai/leads/capture
  • Store in KODA Backend CRM
  • Assign to sales rep
  • Notification to sales team
  • Tests for lead capture
Milestone: M19 - Social Media Integration Blocked by: BE-M19-007
BE-M19-009 8H Medium

Handoff to Human Agent System

  • Implement handoff triggers:
  • - Customer explicitly requests human
  • - AI confidence low
  • - Complex/sensitive issue
  • - VIP customer
  • Notification to human agent (via KODA CORE)
  • Conversation transfer
  • Tests for handoff logic
Milestone: M19 - Social Media Integration Blocked by: BE-M19-007

Package Expiry & Notifications

  • Scheduled job to check expiring packages
  • Send notifications 30 days, 7 days, 1 day before expiry
  • Auto-expire packages
  • GET /api/v1/packages/expiring-soon
  • Tests for expiry logic
Milestone: M13 - Loyalty System Backend Blocked by: BE-M13-011

Package 3.3: KODA AI - Voice Integration

160H
Milestone: M20 Total Tasks: 8
BE-M20-001 32H High

SIP Protocol Integration

  • Integrate SIP client library (PHP)
  • Connect to SIP server/provider
  • Handle incoming calls
  • Handle outgoing calls
  • Call state management (ringing, answered, ended)
  • Tests for SIP integration (with provider mocking)
Milestone: M20 - Voice Calls Integration Blocked by: BE-M18-008
BE-M20-002 24H High

Speech-to-Text Integration (Google AI)

  • Integrate Google Speech-to-Text API
  • Receive audio stream from call
  • Convert speech to text (real-time or batch)
  • Support Arabic and English
  • Streaming vs file-based transcription
  • Tests for speech-to-text
Milestone: M20 - Voice Calls Integration Blocked by: BE-M20-001
BE-M20-003 20H Medium

Voice Intent Detection

  • Analyze transcribed text with AI
  • Intent detection (same intents as chat)
  • Context extraction (customer name, service requested, etc.)
  • Generate appropriate response
  • Tests for voice intent detection
Milestone: M20 - Voice Calls Integration Blocked by: BE-M20-002
BE-M20-004 24H High

Text-to-Speech Integration (Google AI)

  • Integrate Google Text-to-Speech API
  • Convert AI response text to speech audio
  • Support Arabic and English voices
  • Natural-sounding voice selection
  • Streaming audio back to call
  • Tests for text-to-speech
Milestone: M20 - Voice Calls Integration Blocked by: BE-M20-003
BE-M20-005 28H High

Call Flow Management

  • Implement conversational call flow
  • IVR menu (initial greeting, options)
  • Multi-turn conversation handling
  • Interrupt handling (customer speaks while AI speaking)
  • Silence detection (prompt customer to speak)
  • Call routing:
  • - AI handles simple queries
  • - Transfer to human for complex issues
  • Tests for call flows
Milestone: M20 - Voice Calls Integration Blocked by: BE-M20-004
BE-M20-006 16H Medium

Call Recording & Transcription Storage

  • Record all calls (audio)
  • Store recordings
  • Store full transcriptions
  • Link to customer record
  • GET /api/v1/ai/calls/{id}/recording
  • GET /api/v1/ai/calls/{id}/transcript
  • Privacy compliance (customer consent)
  • Tests for call recording
Milestone: M20 - Voice Calls Integration Blocked by: BE-M20-002
BE-M20-007 12H Medium

Call Analytics & Reporting

  • GET /api/v1/ai/calls/analytics
  • Metrics:
  • - Total calls handled by AI
  • - Average call duration
  • - Resolution rate
  • - Transfer rate (AI → human)
  • - Customer satisfaction (if collected)
  • - Most common call reasons
  • Tests for call analytics
Milestone: M20 - Voice Calls Integration

Package 3.4: WebSocket Integration (Backend Side)

40H
Milestone: M21 Total Tasks: 4
BE-M21-001 12H High

MQTT Client Integration in Laravel

  • Integrate PHP MQTT client (phpMQTT or similar)
  • Connect to EMQX broker
  • Publish messages to topics
  • Test MQTT connection
Milestone: M21 - WebSocket Full Integration Blocked by: DV-M21-001 (EMQX setup)
BE-M21-002 16H High

Event Listeners for Real-Time Updates

  • Create Laravel event listeners
  • Events to publish:
  • - New golden opportunity created
  • - Golden opportunity removed
  • - Booking created/updated/cancelled
  • - Customer checked in
  • - Queue updated
  • - Discount request created
  • - Payment completed
  • - Notification sent
  • Publish to appropriate MQTT topics
  • Tests for event publishing
Milestone: M21 - WebSocket Full Integration Blocked by: BE-M21-001
BE-M21-003 8H Medium

WebSocket API Documentation

  • Document all WebSocket topics
  • Document message formats
  • Document client connection instructions
  • Integration examples
  • Deliverable: WebSocket API documentation
Milestone: M21 - WebSocket Full Integration Blocked by: BE-M21-002
BE-M21-004 4H Medium

WebSocket Testing & Monitoring

  • Test all event publications
  • Monitor EMQX broker health
  • Setup alerts for connection issues
  • Tests for WebSocket events
Milestone: M21 - WebSocket Full Integration Blocked by: BE-M21-003
Blocked by: BE-M20-006
BE-M20-008 4H High

Emergency Call Handling

  • Detect emergency keywords
  • Immediate transfer to human
  • Priority escalation
  • Tests for emergency detection
Milestone: M20 - Voice Calls Integration Blocked by: BE-M20-005
Team Member Duration Total Hours Monthly Cost Total Cost
Backend Lead (Senior) 8.4 months 1,608h (60% of 2,680h) 2,200 JOD 18,480 JOD
Backend Developer (Mid-level) 8.4 months 1,072h (40% of 2,680h) 1,400 JOD 11,760 JOD
Backend Team Total 8.4 months 2,680 hours 3,600 JOD/mo 30,240 JOD

Note: These 150 backend tasks (2,680 hours) will be completed by the 2-person backend team working in parallel over 8.4 months.

Work Distribution by Phase

Phase Duration Backend Lead Backend Dev Total Hours Phase Cost
Phase 1 4 months 1,128h 752h 1,880h 14,400 JOD
Phase 2 2 months 144h 96h 240h 7,200 JOD
Phase 3 2.4 months 336h 224h 560h 8,640 JOD
TOTAL 8.4 months 1,608h 1,072h 2,680h 30,240 JOD

Task Assignment Strategy

Recommended Task Distribution

Backend Lead (Senior - 60% workload):

  • Multi-tenant architecture & core setup
  • Complex authentication systems
  • Payment gateway integrations
  • Booking availability engine
  • KODA AI engine development
  • Code reviews & architecture decisions

Backend Developer (Mid-level - 40% workload):

  • User management APIs
  • Services catalog APIs
  • Notifications system
  • Staff & HR basic APIs
  • Data migration scripts
  • Testing & documentation

Critical Path Tasks

Critical Dependencies

The following tasks must be completed in sequence (cannot be parallelized):

  1. BE-M3-001 → BE-M3-002 → BE-M3-003 (Foundation - blocks ALL subsequent backend work)
  2. BE-M6-008 (Availability Engine - blocks booking features)
  3. BE-M6-016 (Payment Gateway - blocks payment features)
  4. BE-M11-001 → BE-M11-002 (Data Migration - blocks production launch)

Parallelization Strategy: Once foundation tasks complete, both developers work on different modules simultaneously to achieve 8.4-month timeline instead of 16+ months sequential.

Back to Index Next: ReactJS Developer Tasks