# 04 — MVP Phases

Each phase ends in a shippable, working build with QA gates green.

## Phase 1 — Foundation (4–6 weeks)

**Goal:** running platform skeleton with auth, content, and a browseable mobile shell.

- Monorepo, CI/CD, env scaffolding.
- Shared packages (`types`, `validators`, `config`, `ui`).
- API: NestJS bootstrap, Prisma, `auth`, `users`, `roles`, `permissions`, `audit`, `i18n`, `health`, `destinations` (read), `categories` (read).
- Mobile: splash, onboarding (3 steps), login, signup, forgot, OTP, tabs (Home/Discover/Bookings/Saved/Profile), language toggle EN/AR, RTL-ready, design tokens.
- Dashboard: login, overview, users (read), audit logs (read), settings.
- Website: home, tourists, partners, destinations, contact, privacy, terms; SEO basics.
- All apps boot, all gates pass.

## Phase 2 — Discovery & Booking (6–8 weeks)

**Goal:** travelers can discover and book stays/activities; partners can manage their listings.

- API: `businesses`, `memberships`, `listings` (stays/activities/restaurants), `rooms`, `bookings` (no real payment), `saved`, `reviews` (read-only first).
- Mobile: home content tiles, discover feed, listing detail, room select, booking confirmation (mock pay), saved items, profile editing, image translator (mock provider), emergency numbers, taxi pickup form (mock map).
- Dashboard: businesses, listings CRUD, bookings list, content manager, partner approvals.
- Provider abstractions established with mock implementations.
- Real map provider integrated for city/destination map (read-only).

## Phase 3 — Commerce & Trip Planner (6–8 weeks)

**Goal:** real money, real trip plans, real partner integrations.

- Payment provider integrated (one PSP). Refunds. Payouts engine.
- Orders for food/pharmacy/grocery; SIM purchase + delivery.
- AI trip planner (provider-abstracted) end-to-end (4 steps → itinerary).
- Reviews moderation. Premium tier. Push notifications. Promotions.
- Webhook intake + retries. Idempotency keys.

## Phase 4 — Scale & Expansion (ongoing)

- Multi-country (KSA, Oman, Egypt). Multi-currency display.
- Partner self-service analytics dashboards.
- Finance reports (revenue, GMV, take rate, refunds).
- B2B partner API + API keys + scopes.
- Advanced support tooling, knowledge base.
- Compliance hardening: SOC2, PDPL DSR endpoints, data residency.
- Growth experiments: A/B framework, promo engine.

## Phase exit gates

All four apps: typecheck, lint, build, test, e2e smoke. New permissions and audit entries added for every new mutation. `.env.example` updated. README and CHANGELOG updated.