A complete booking platform with 360° tours, flexibility tiers, self-service booking modifications, Stripe refund queues, EN+AR Day 1, and zero-trust audits each phase. Production — not a demo.
Google Street View embeds for destination photo-tours, custom panorama gallery for hotel/resort views, CSP path-gated frame-src so iframes work without weakening security headers elsewhere. Public Street View deep-links as a key-less fallback when the embed API hits its quota.
Price-freeze with deterministic 4-state machine (active → redeemed | expired | cancelled), lazy-expire via SELECT FOR UPDATE inside transactions (no cron worker needed), three flex-ticket tiers with explicit upgrade-percent and cancellation-window basis points, virtual-interlining segments with row-level CHECK constraints.
Customers cancel and modify their bookings without contacting support. Computed cancellation quote, contact-detail edits, change-log table for full audit trail, refund queue auto-fed when refundCents > 0, Stripe refund drainer worker via systemd timer.
Every page ships EN + AR Day 1 — no English-only beta, no "Arabic translations coming Q3". Proper RTL CSS, locale-aware date / currency / number formatting, hreflang per page, Arabic content drift audit script that flags any English-only key.
DR replica with hourly schema-drift probe, blue-green deploy via Docker compose, backup verification harness that loads dumps into a throwaway Postgres and counts schema_migrations rows for parity, k6 load tests against staging.
Each phase shipped with a re-runnable shell harness. No phase counted as "done" until N/N assertions passed.
We discuss scope and milestones in a single contact step.
Start the conversation