01 — BACKEND BRAIN

Context pack cho task backend (Booking). Snapshot + trỏ canonical. Không copy. Trạng thái toàn cục: OMS 02.

Là gì

Backend Booking = Module #1 đã build & LIVE staging. Monorepo ~/bng-booking-demo:

• packages/platform-domain — DDD thuần (Reservation aggregate, Money VND BigInt), 0 dep hạ tầng, 42 test.
• packages/platform-infrastructure — Prisma/Postgres adapters, HTTP API (node:http), auth, outbox, ops, ~135 test (best-known; số authoritative = output backend:rc/test:all, chưa re-verify).

Architecture

• Layering: HTTP controller (mỏng) → use case (BookingService, transaction boundary) → domain thuần → repo (Prisma). Dependency hướng vào trong. Canonical: travel-os/02, backend/BOOKING-API.
• Đường nâng cấp qua seam (interface/adapter), không rewrite.

Auth → chi tiết 07-SECURITY

• API key (server-to-server) + JWT access + DB session (composite TenantResolver). backend/AUTH-GATEWAY.

RLS → chi tiết 07-SECURITY

• 4 lớp isolation; RLS ON staging (P2C). Request path 100% qua withTenant/runInTx. backend/RLS-READINESS, RLS-COVERAGE.

Outbox / events

• Transactional outbox (write cùng tx aggregate), at-least-once, dead-letter + replay. Dispatcher chạy bằng maintenance role (BYPASSRLS). backend/OUTBOX-HANDLERS, travel-os/04-EVENT-CATALOG.

API

• Booking: availability · create (Idempotency-Key) · lifecycle (confirm/cancel/check-in/out/no-show) · list (cursor keyset, email mask). Contract v1 frozen. Cross-tenant → 404. backend/API-CONTRACT-V1.

Registry (metadata) → 02-PLATFORM

• Backend context được mô tả trong platform-core (Module/Entity registry) — không nhầm với runtime backend.

Deployment → 06-DEPLOYMENT

• Staging: staging-api.booking.bngagency.vn (PM2 bng-booking-api-staging:3020, Postgres bng_booking_staging). VPS ssh kqxs.

Gate (luôn chạy trước khi xong)

npm run backend:rc = lint + typecheck:all + test:all (domain 42 + infra ~135 + core 66; con số authoritative = output runner, chưa re-verify) + build. backend/DB-SAFETY (chỉ migrate deploy, pg_dump trước migration).

Current state · risks · next

• State: LIVE staging, RLS on. OMS 02.
• Risks: RLS production chưa bật · notification console-only · CI chưa có. OMS 05.
• Next: theo 08-ROADMAP. Phase 4 = Payment/Partner/Customer (design → build).

Canonical để mở khi cần

backend/BACKEND-STATUS · BOOKING-API · AUTH-GATEWAY · OPS-CLI · SECURITY-CHECKLIST · BACKEND-MATURITY.