@topy-ai/maggie 0.7.38 → 0.7.41

package/bundled-references/maggiedash-booking/EXECUTION-BOARD.json

@@ -0,0 +1,2387 @@
+{
+  "schemaVersion": "maggiedash-booking-execution-board.v1",
+  "product": "MaggieDash Booking",
+  "workspace": "_maggie/booking",
+  "sourceOfTruth": "MaggieDash owns implementation; ai-cmo-skills/docs owns the delivery board and progress record.",
+  "workflow": ["task", "plan", "implement", "test", "update-docs", "record-progress"],
+  "tasks": [
+    {
+      "id": "BK-017",
+      "epic": "delivery-control",
+      "title": "Create an executable Booking delivery board",
+      "repository": "both",
+      "dependsOn": ["BK-010"],
+      "status": "passed",
+      "plan": ["Convert the product documents into leaf tasks", "Give every task a concrete gate and evidence file", "Expose read-only task inspection through Maggie CLI"],
+      "implementation": ["docs/maggiedash-booking/EXECUTION-BOARD.json", "tools/clis/maggie_booking.py tasks"],
+      "tests": ["python3 tools/clis/maggie_booking.py tasks validate", "python3 tools/clis/maggie_booking.py tasks list"],
+      "docs": ["docs/maggiedash-booking/TASKS.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["All tasks have dependencies, plan, implementation, tests, docs, and acceptance evidence", "No task is marked done without a passing gate"]
+    },
+    {
+      "id": "BK-018",
+      "epic": "contract",
+      "title": "Reconcile host adapter routes with UI and host documentation",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-017"],
+      "status": "passed",
+      "plan": ["Inventory every UI request and documented endpoint", "Add missing customer/detail and configuration mutation routes", "Choose one canonical refund and health route", "Generate a contract fixture from the same endpoint inventory"],
+      "implementation": ["contracts/booking-host-adapter-v1.json", "backend/booking-adapter-contract.d.ts", "fixtures/booking-host-contract.v1.json"],
+      "tests": ["npm test", "node scripts/validate-booking-host-contract.mjs"],
+      "docs": ["docs/maggiedash-booking/HOST-ADAPTER.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["The UI, JSON contract, TypeScript contract, and docs expose the same route IDs", "All mutations declare idempotency and authorization", "Contract fixture validates required response fields"]
+    },
+    {
+      "id": "BK-019",
+      "epic": "reference-host",
+      "title": "Build a deterministic reference host adapter",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-018"],
+      "status": "passed",
+      "plan": ["Create a secret-free in-memory host state", "Implement authenticated JSON routes for every Booking endpoint", "Use the real domain functions for holds, availability, lifecycle, and idempotency", "Expose a local server only for tests and browser development"],
+      "implementation": ["fixtures/booking-host-state.v1.json", "backend/booking/reference-host.mjs", "scripts/validate-booking-reference-host.mjs", "scripts/run-booking-reference-host.mjs"],
+      "tests": ["node scripts/validate-booking-reference-host.mjs", "node scripts/run-booking-reference-host.mjs --self-test", "HTTP GET /api/maggie/booking/overview.json with fixture session"],
+      "docs": ["backend/booking/README.md", "adapters/astro/README.md", "docs/maggiedash-booking/HOST-ADAPTER.md"],
+      "acceptance": ["Protected routes reject missing session", "Tenant and role scope are checked", "Same idempotency key returns the original mutation result", "No provider secret or raw payload is present"]
+    },
+    {
+      "id": "BK-020",
+      "epic": "data-foundation",
+      "title": "Harden PostgreSQL migration and migration evidence",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-018"],
+      "status": "passed",
+      "plan": ["Compare SQL tables with DATA-MODEL.md", "Add missing tenant/location/policy fields or document intentional simplifications", "Run migration twice and inspect constraints/indexes", "Add rollback and backup evidence instructions"],
+      "implementation": ["schema/maggie-booking-install.sql", "scripts/validate-booking-schema.mjs"],
+      "tests": ["npm run booking:schema:validate", "node scripts/validate-booking-schema.mjs --database-url <disposable-db> --confirm", "temporary PostgreSQL migration twice", "rolled-back overlapping allocation regression"],
+      "docs": ["docs/maggiedash-booking/DATA-MODEL.md", "docs/maggiedash-booking/CURRENT-STATE.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["Migration is repeatable", "Tenant scope and active allocation overlap constraints are enforced", "Schema evidence is sanitized and reproducible"]
+    },
+    {
+      "id": "BK-021",
+      "epic": "booking-domain",
+      "title": "Complete availability, timezone, hold, and booking lifecycle rules",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-019", "BK-020"],
+      "status": "passed",
+      "plan": ["Add local-time to UTC conversion with DST gap/fold rules", "Add hold create/release/convert and reschedule commands", "Add multi-segment allocation validation", "Return exclusion diagnostics without leaking tenant data"],
+      "implementation": ["backend/booking/domain.mjs", "backend/booking/commands.mjs", "backend/booking/time.mjs"],
+      "tests": ["npm run booking:domain:test", "DST gap/fold fixtures", "idempotency and overlap fixtures", "multi-segment allocation fixtures", "cross-project rejection fixtures"],
+      "docs": ["docs/maggiedash-booking/DATA-FLOW.md", "docs/maggiedash-booking/DATA-MODEL.md", "docs/maggiedash-booking/USER-JOURNEYS.md"],
+      "acceptance": ["No double allocation is possible at the command boundary", "DST nonexistent and ambiguous times are explicit", "Every mutation produces event and audit intent"]
+    },
+    {
+      "id": "BK-022",
+      "epic": "host-api",
+      "title": "Implement host adapter service boundaries and safe DTOs",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-019", "BK-021"],
+      "status": "passed",
+      "plan": ["Define request validation and safe error mapping", "Implement read DTO builders", "Implement mutation command dispatch with transaction hooks", "Keep host database/credentials injected"],
+      "implementation": ["backend/booking/service.mjs", "backend/booking/dto.mjs", "backend/booking/request.mjs", "backend/booking/route-handler.mjs"],
+      "tests": ["reference host endpoint conformance", "booking service validator including canonical list-object responses", "booking route-handler validator across all 47 routes", "safe error and redaction tests", "project authorization fixtures"],
+      "docs": ["docs/maggiedash-booking/HOST-ADAPTER.md", "backend/README.md"],
+      "acceptance": ["Host routes return canonical DTOs", "No SQL/provider/raw credentials cross the boundary", "All failures use the versioned safe error shape"]
+    },
+    {
+      "id": "BK-023",
+      "epic": "configuration",
+      "title": "Implement catalog, staff, resource, schedule, and policy configuration",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-020", "BK-022"],
+      "status": "passed",
+      "plan": ["Add validated configuration commands", "Add draft-first writes and audit reasons", "Make configuration changes invalidate availability safely", "Return readiness checks to the UI"],
+      "implementation": ["backend/booking/configuration.mjs", "contracts/booking-configuration-v1.json"],
+      "tests": ["npm run booking:configuration:test", "configuration contract tests", "resource/staff eligibility tests", "schedule/DST tests", "idempotent update tests"],
+      "docs": ["docs/maggiedash-booking/DATA-MODEL.md", "docs/maggiedash-booking/PRD.md"],
+      "acceptance": ["A service cannot be bookable without valid duration, price, location, and policy", "Staff/resource eligibility is enforced", "Every configuration mutation is audited"]
+    },
+    {
+      "id": "BK-024",
+      "epic": "payments",
+      "title": "Implement provider-neutral payment orchestration and fake gateway",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-021", "BK-022"],
+      "status": "passed",
+      "plan": ["Freeze PaymentGateway input/output types", "Create fake gateway for action-required, delayed, success, failure, and refund flows", "Separate attempts, transactions, refunds, and webhook events", "Make provider health and capability checks explicit"],
+      "implementation": ["backend/booking/payment-gateway.mjs", "backend/booking/fake-payment-gateway.mjs", "fixtures/payment-gateway.v1.json"],
+      "tests": ["npm run booking:payment:test", "payment contract suite", "duplicate/out-of-order event tests", "refund upper-bound tests", "capability-disabled tests"],
+      "docs": ["docs/maggiedash-booking/PAYMENT-GATEWAY.md", "docs/maggiedash-booking/QA-TEST-PLAN.md"],
+      "acceptance": ["Payment and booking states remain independent", "No redirect can mark a payment paid", "Refund totals cannot exceed captured totals"]
+    },
+    {
+      "id": "BK-025",
+      "epic": "stripe",
+      "title": "Implement a host-owned Stripe adapter against the current contract",
+      "repository": "host-owned with MaggieDash contract",
+      "dependsOn": ["BK-024"],
+      "status": "passed",
+      "plan": ["Use official Stripe SDK only in the host", "Pin account/API version and inject secrets server-side", "Implement Checkout Sessions, PaymentIntents, SetupIntents, Refunds, and webhook verification", "Run sandbox conformance before enabling live capture"],
+      "implementation": ["host adapter implementation", "contracts/stripe-booking-capabilities-v1.json", "backend/booking/stripe.mjs"],
+      "tests": ["npm run booking:stripe-adapter:test", "Stripe test/sandbox seam", "signature/replay tests", "delayed payment/refund tests", "redaction scan"],
+      "docs": ["docs/maggiedash-booking/STRIPE-INTEGRATION.md", "docs/maggiedash-booking/PAYMENT-GATEWAY.md"],
+      "acceptance": ["MaggieDash has no live secret dependency", "Every enabled Stripe capability has conformance evidence", "Unknown events fail safe"]
+    },
+    {
+      "id": "BK-026",
+      "epic": "notifications",
+      "title": "Complete outbox notifications and recovery",
+      "repository": "both",
+      "dependsOn": ["BK-021", "BK-022"],
+      "status": "passed",
+      "plan": ["Define notification templates and recipient redaction", "Persist outbox and notification state transactionally", "Implement lease, retry, backoff, dead-letter, and replay commands", "Make provider delivery injectable"],
+      "implementation": ["backend/booking/notifications.mjs", "backend/booking/notification-adapter.d.ts"],
+      "tests": ["npm run booking:notifications:test", "lease race tests", "retry/dead-letter tests", "idempotent dispatch tests", "safe recipient tests"],
+      "docs": ["docs/maggiedash-booking/RUNTIME-OPERATIONS.md", "docs/maggiedash-booking/USER-JOURNEYS.md"],
+      "acceptance": ["A delivery failure cannot roll back booking truth", "A retry cannot send the same notification twice", "Operator can inspect and replay a safe failed notification"]
+    },
+    {
+      "id": "BK-027",
+      "epic": "workspace-ui",
+      "title": "Finish Booking UI data loading, navigation, forms, and action feedback",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-018", "BK-022", "BK-023"],
+      "status": "passed",
+      "plan": ["Replace generic collection placeholders with typed screen models", "Add URL filter state and pagination", "Add accessible action dialogs and pending/error feedback", "Add real forms for catalog/staff/resource/schedule settings"],
+      "implementation": ["booking/src/booking.tsx", "booking/src/http.ts", "scripts/validate-booking-ui.mjs", "contracts/booking-ui-v1.json"],
+      "tests": ["npm run booking:ui:test", "esbuild parse", "reference-host Chrome smoke at 390/768/1440", "keyboard/focus checks"],
+      "docs": ["booking/README.md", "docs/maggiedash-booking/HOST-ADAPTER.md"],
+      "acceptance": ["Every screen is backed by a typed endpoint", "Mutations show pending/success/failure states", "No native browser dialogs or unsafe action defaults"]
+    },
+    {
+      "id": "BK-028",
+      "epic": "workspace-ui",
+      "title": "Finish manager daily operations journeys",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-021", "BK-023", "BK-027"],
+      "status": "passed",
+      "plan": ["Implement calendar day/week/filter views", "Implement booking detail, reschedule, cancel, no-show, check-in, complete", "Implement payment/reconciliation/refund actions", "Implement audit/event operational views"],
+      "implementation": ["booking/src/booking.tsx", "contracts/booking-browser-evidence-v1.json"],
+      "tests": ["reference-host Chrome lifecycle/reschedule/payment smoke", "permission/capability UI tests", "responsive screenshots"],
+      "docs": ["docs/maggiedash-booking/USER-JOURNEYS.md", "docs/maggiedash-booking/QA-TEST-PLAN.md"],
+      "acceptance": ["A manager can operate a normal day from Booking without leaving the workspace", "Pending payment and provider outage are explicit", "Audit trail is visible for material actions"]
+    },
+    {
+      "id": "BK-029",
+      "epic": "access-control",
+      "title": "Verify authentication, tenancy, roles, and privacy boundaries",
+      "repository": "both",
+      "dependsOn": ["BK-019", "BK-022", "BK-027"],
+      "status": "passed",
+      "plan": ["Use host email/password session only", "Test owner/manager/staff/finance permission matrix", "Test cross-project IDs, location scope, and public/admin route separation", "Scan HTML, props, logs, fixtures, and evidence for secrets/PII"],
+      "implementation": ["backend/booking/request.mjs", "backend/booking/reference-host.mjs", "backend/booking/route-handler.mjs", "scripts/validate-booking-security.mjs", "contracts/booking-host-adapter-v1.json"],
+      "tests": ["npm run booking:security:test", "authorization matrix including staff lifecycle scope", "cross-tenant hostile ID tests", "secret/PII scan", "noindex/auth redirect test"],
+      "docs": ["docs/maggiedash-booking/SECURITY-COMPLIANCE.md", "docs/maggiedash-booking/HOST-ADAPTER.md"],
+      "acceptance": ["Unauthorized users cannot render manager UI", "Staff cannot perform finance actions", "No provider secrets or raw payment data reach the browser"]
+    },
+    {
+      "id": "BK-030",
+      "epic": "runtime",
+      "title": "Wire the production worker and operational controls",
+      "repository": "both",
+      "dependsOn": ["BK-020", "BK-021", "BK-024", "BK-026"],
+      "status": "needs-evidence",
+      "plan": ["Implement PostgreSQL host worker adapter", "Acquire advisory/distributed lock", "Run availability, holds, payments, and notification jobs", "Emit safe metrics and alerts with rollback controls"],
+      "implementation": ["backend/booking/worker-contract.d.ts", "backend/booking/postgres-worker-adapter.mjs", "backend/booking/postgres-worker-repository.mjs", "backend/booking/health.mjs", "backend/booking/runtime.mjs", "backend/booking/run-booking-jobs.mjs", "contracts/booking-ops-evidence-v1.json", "scripts/validate-booking-ops-evidence.mjs", ".github/workflows/booking-ops-evidence.yml", "schema/maggie-booking-install.sql", "ops/systemd/*", "ops/cron/*", "tools/clis/maggie_booking.py"],
+      "tests": ["npm run booking:worker-adapter:test", "npm run booking:postgres-repository:test", "npm run booking:health:test", "npm run booking:ops:evidence:test", "npm run booking:ops:evidence:regression:test", "python3 -m unittest tools.tests.test_maggie_booking", "maggie booking worker-schedule --project <host> --scheduler systemd --confirm", "maggie booking ops-validate --evidence <sanitized-ops-evidence>", "maggie booking ops-validate --require-host --evidence <host-ops-evidence>", "npm run booking:schema:validate -- --database-url <disposable-db> --confirm", "npm run booking:postgres-repository:integration -- --database-url <disposable-or-staging-url> --confirm", "npm run booking:postgres-backup-restore:integration -- --source-database-url <source> --restore-database-url <empty-target> --pg-bin-dir <matching-postgres-bin-dir> --confirm", "reference-host rollback write-guard test", "worker dry-run with correlation ID and health report", "production fixture-store guard", "host alert routing integration pending", "lock/retry/dead-letter tests"],
+      "docs": ["docs/maggiedash-booking/RUNTIME-OPERATIONS.md", "ops/README.md"],
+      "acceptance": ["Workers never point production at fixture JSON", "Jobs are idempotent and observable", "Rollback disables new writes without deleting history"]
+    },
+    {
+      "id": "BK-031",
+      "epic": "evidence",
+      "title": "Capture real host conformance and browser evidence",
+      "repository": "both",
+      "dependsOn": ["BK-019", "BK-022", "BK-028", "BK-029", "BK-030"],
+      "status": "needs-evidence",
+      "plan": ["Run all host endpoints against a dedicated test tenant", "Capture sanitized runtime evidence", "Run Playwright at mobile/tablet/desktop widths", "Fix every console/network/layout failure before release"],
+      "implementation": ["scripts/capture-booking-runtime-evidence.mjs", "scripts/validate-booking-runtime-plan.mjs", "scripts/validate-booking-runtime-evidence.mjs", "scripts/capture-booking-browser-evidence.mjs", "scripts/validate-booking-browser-evidence.mjs", ".github/workflows/booking-runtime-evidence.yml", ".github/workflows/booking-browser-evidence.yml"],
+      "tests": ["maggie booking runtime-validate", "npm run booking:runtime:plan:test", "runtime evidence validator", "browser evidence validator including console/request/layoutErrors", "real host runtime plan run", "real host Playwright run"],
+      "docs": ["docs/maggiedash-booking/QA-TEST-PLAN.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["All 47 manager endpoints have 2xx evidence", "All 15 manager screens pass at 3 viewports", "No console errors, failed requests, overflow, or login leakage"]
+    },
+    {
+      "id": "BK-032",
+      "epic": "release",
+      "title": "Run release gate, canary, documentation, and feedback closure",
+      "repository": "both",
+      "dependsOn": ["BK-025", "BK-030", "BK-031", "BK-033", "BK-034", "BK-035", "BK-036", "BK-037", "BK-038"],
+      "status": "needs-evidence",
+      "plan": ["Run full repository and installed-project gates", "Run migration backup/restore and canary checks", "Update README, contracts, docs, and progress with evidence", "Create regression tests for every discovered defect"],
+      "implementation": ["tools/clis/maggie_booking.py release-gate", "tools/tests/test_maggie_booking.py", "README files", "docs/maggiedash-booking/PROGRESS.md"],
+      "tests": ["npm test", "python skill/link tests", "release gate with required runtime, browser, ops, and board evidence", "release gate missing-artifact structured blocked regression", "browser artifact parity and layoutErrors rejection", "canary and rollback rehearsal"],
+      "docs": ["docs/maggiedash-booking/README.md", "docs/maggiedash-booking/CURRENT-STATE.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["No required task remains planned/blocked", "Release evidence comes from the real host boundary", "Docs describe the shipped behavior and remaining explicit limitations"]
+    },
+    {
+      "id": "BK-033",
+      "epic": "customer-surface",
+      "title": "Freeze and validate the public customer booking boundary",
+      "repository": "both",
+      "dependsOn": ["BK-021", "BK-024", "BK-026"],
+      "status": "passed",
+      "plan": ["Separate public customer traffic from manager session routes", "Define redacted catalogue, availability, hold, checkout, payment-return, and cancellation DTOs", "Define allowlisted notification intents and fail-closed tenant binding", "Document host-owned origin, rate-limit, bot, persistence, and provider responsibilities"],
+      "implementation": ["contracts/booking-customer-surface-v1.json", "backend/booking/customer-flow.mjs", "backend/booking/customer-route-handler.mjs", "fixtures/booking-customer-flow.v1.json", "scripts/validate-booking-customer-flow.mjs"],
+      "tests": ["npm run booking:customer-flow:test", "npm test", "public DTO redaction", "noindex/no-store headers", "mutation idempotency", "missing tenant rejection"],
+      "docs": ["docs/maggiedash-booking/PRD.md", "docs/maggiedash-booking/CURRENT-STATE.md", "docs/maggiedash-booking/HOST-ADAPTER.md", "docs/maggiedash-booking/PROGRESS.md", "MaggieDash/README.md", "MaggieDash/backend/README.md"],
+      "acceptance": ["Public customer routes have a versioned contract separate from manager routes", "Customer DTOs exclude tenant, customer, provider, and credential internals", "A payment redirect cannot advance payment truth", "Host tenant binding and public request controls fail closed"]
+    },
+    {
+      "id": "BK-034",
+      "epic": "customer-surface",
+      "title": "Ship the public customer booking page and pending-payment recovery UI",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-033"],
+      "status": "passed",
+      "plan": ["Add a public page source inside the Booking workspace", "Load catalog and date-scoped availability through the public API", "Create an idempotent hold before checkout and show bounded pending/error states", "Add a payment-return page that never treats a redirect as proof"],
+      "implementation": ["booking/src/customer.tsx", "adapters/astro/customer-booking-page.astro", "scripts/validate-booking-customer-ui.mjs", "maggiedash.json"],
+      "tests": ["npm run booking:customer-ui:test", "customer-flow validator", "manifest/install validation", "TSX bundle parse with esbuild", "public credentials-omit and noindex source scan"],
+      "docs": ["booking/README.md", "adapters/astro/README.md", "README.md", "docs/maggiedash-booking/USER-JOURNEYS.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["A host can mount a public customer route from the installed projection", "The page covers catalog, availability, hold, checkout, and payment-return pending states", "Public requests omit manager credentials and mutations carry idempotency keys", "No browser redirect is rendered as payment confirmation"]
+    },
+    {
+      "id": "BK-035",
+      "epic": "customer-surface",
+      "title": "Exercise the public customer flow against the reference host",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-034"],
+      "status": "passed",
+      "plan": ["Wrap the existing manager reference state with a public customer host", "Exercise catalog, date-scoped availability, hold, checkout, payment return, and token-bound cancellation", "Prove public routes do not inherit manager session access", "Ship the validator through the install manifest"],
+      "implementation": ["backend/booking/customer-reference-host.mjs", "scripts/validate-booking-customer-reference-host.mjs", "maggiedash.json", "package.json"],
+      "tests": ["npm run booking:customer-reference-host:test", "npm test", "installed projection validator", "manager session isolation", "notification intent assertions"],
+      "docs": ["docs/maggiedash-booking/HOST-ADAPTER.md", "docs/maggiedash-booking/SKILLS-AND-CLI.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["Public customer journey passes against a deterministic reference host", "Hold replay is idempotent and checkout yields bounded pending state", "Cancellation requires an opaque booking token", "The reference host remains explicitly non-production"]
+    },
+    {
+      "id": "BK-036",
+      "epic": "customer-surface",
+      "title": "Harden customer input validation and mutation replay",
+      "repository": "both",
+      "dependsOn": ["BK-035"],
+      "status": "passed",
+      "plan": ["Define bounded customer email validation and mandatory booking-update consent", "Preserve stable validation error ordering and safe error fields", "Use customer-scoped idempotency storage for checkout and cancellation replay", "Add regression assertions before changing the public contract"],
+      "implementation": ["backend/booking/customer-flow.mjs", "backend/booking/customer-reference-host.mjs", "scripts/validate-booking-customer-flow.mjs", "scripts/validate-booking-customer-reference-host.mjs"],
+      "tests": ["npm run booking:customer-flow:test", "npm run booking:customer-reference-host:test", "npm test", "invalid email rejection", "missing consent rejection", "cancel replay without duplicate notification"],
+      "docs": ["README.md", "backend/README.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["Invalid email and missing consent fail with validation_failed", "Existing empty-payload validation ordering remains stable", "Repeated customer checkout/cancel keys return the original result without duplicate side effects"]
+    },
+    {
+      "id": "BK-037",
+      "epic": "customer-surface",
+      "title": "Reject public idempotency-key payload mismatches",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-036"],
+      "status": "passed",
+      "plan": ["Hash normalized public mutation input without retaining customer payloads", "Replay only when the same key carries the same request", "Return a safe conflict for key reuse with a different payload", "Exercise hold, checkout, and cancellation paths"],
+      "implementation": ["backend/booking/customer-reference-host.mjs", "scripts/validate-booking-customer-reference-host.mjs"],
+      "tests": ["node scripts/validate-booking-customer-reference-host.mjs", "node --check backend/booking/customer-reference-host.mjs", "npm test"],
+      "docs": ["docs/maggiedash-booking/PROGRESS.md", "contracts/maggiedash/booking-customer-surface-v1.json"],
+      "acceptance": ["Same-key same-payload retries replay the original result", "Same-key different-payload retries return HTTP 409 conflict", "No raw customer payload is retained in the idempotency record"]
+    },
+    {
+      "id": "BK-038",
+      "epic": "ci",
+      "title": "Run all public customer gates in the runtime workflow",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-037"],
+      "status": "passed",
+      "plan": ["Inspect the installed/source runtime workflow for customer coverage", "Add customer flow, reference-host, UI, and syntax checks", "Add a static workflow regression so future edits cannot silently remove them"],
+      "implementation": [".github/workflows/booking-runtime.yml", "scripts/validate-booking.mjs"],
+      "tests": ["npm test", "workflow marker validation", "installed projection inspect", "customer flow/reference-host/UI validators"],
+      "docs": ["docs/maggiedash-booking/PROGRESS.md", "docs/maggiedash-booking/TASKS.md"],
+      "acceptance": ["Source and installed runtime workflows execute all public customer validators", "Customer backend syntax is checked in CI", "The manifest includes the workflow and validators"]
+    },
+    {
+      "id": "BK-039",
+      "epic": "host-adapter",
+      "title": "Freeze the complete manager and customer service adapter surface",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-022", "BK-033", "BK-038"],
+      "status": "passed",
+      "plan": ["Map every versioned manager endpoint to its injected service method", "Type every repository method consumed by the transaction-injected service", "Type the six public customer methods without exposing provider or tenant internals", "Add an installable drift validator and run it in the repository gate"],
+      "implementation": ["backend/booking-adapter-contract.d.ts", "contracts/booking-host-adapter-v1.json", "scripts/validate-booking-service-contract.mjs", "maggiedash.json", "backend/README.md", "docs/BOOKING-HOST-ADAPTER.md"],
+      "tests": ["npm run booking:service-contract:test", "npm test", "manifest/install validation", "endpoint-to-service mapping check", "repository/service/customer method surface check"],
+      "docs": ["backend/README.md", "docs/BOOKING-HOST-ADAPTER.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["Every manager endpoint has one explicit serviceMethod mapping", "Host implementers can type-check all repository methods required by createBookingService", "Public customer service methods are separately typed", "The contract validator is included in the installed projection"]
+    },
+    {
+      "id": "BK-040",
+      "epic": "host-adapter",
+      "title": "Expose the service contract through the Booking CLI gates",
+      "repository": "ai-cmo-skills",
+      "dependsOn": ["BK-039"],
+      "status": "passed",
+      "plan": ["Mirror service and customer method declarations in the compact ai-cmo contract", "Make inspect and release-gate require the installed type contract and validator", "Add Python regression coverage and document the stable command"],
+      "implementation": ["contracts/maggiedash/booking-host-adapter-v1.json", "tools/clis/maggie_booking.py", "tools/tests/test_maggie_booking.py", "docs/maggiedash-booking/SKILLS-AND-CLI.md"],
+      "tests": ["python3 -m unittest tools.tests.test_maggie_booking -v", "maggie booking contract", "maggie booking tasks validate", "maggie booking inspect --project <installed-projection>", "python3 -m py_compile"],
+      "docs": ["docs/maggiedash-booking/SKILLS-AND-CLI.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["The compact contract maps all 47 manager endpoints and eleven customer methods", "Installed inspect fails when service types or validator are missing", "Release gate includes the service contract checks", "A regression test prevents service surface drift"]
+    },
+    {
+      "id": "BK-041",
+      "epic": "customer-surface",
+      "title": "Complete the public customer cancellation journey",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-035", "BK-040"],
+      "status": "passed",
+      "plan": ["Add token-bound cancellation action to the payment-return page", "Send public cancellation with credentials omitted and an idempotency key", "Show bounded pending, success, and error states without native dialogs", "Extend the source/install UI gate and customer documentation"],
+      "implementation": ["booking/src/customer.tsx", "scripts/validate-booking-customer-ui.mjs", "README.md"],
+      "tests": ["npm run booking:customer-ui:test", "customer UI marker gate", "node --check scripts/validate-booking-customer-ui.mjs", "MaggieDash npm test", "installed customer UI validator"],
+      "docs": ["README.md", "docs/maggiedash-booking/USER-JOURNEYS.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["A customer can cancel from the opaque payment-return flow", "Cancellation carries an idempotency key and never uses manager credentials", "Success and failure states are accessible and bounded", "The UI validator protects the cancellation endpoint marker"]
+    },
+    {
+      "id": "BK-042",
+      "epic": "persistence",
+      "title": "Implement the tenant-scoped PostgreSQL manager core repository",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-020", "BK-021", "BK-022", "BK-039"],
+      "status": "passed",
+      "plan": ["Add an additive settings table for persisted booking configuration", "Implement host-injected parameterized reads for catalogue, availability, bookings, customers, audit, events, and runtime", "Implement transactional booking/hold/lifecycle writes with row locking, event/audit records, and idempotency replay", "Add a fake-executor regression gate that verifies tenant scope, same-client transactions, typed SQL parameters, and persistence calls"],
+      "implementation": ["schema/maggie-booking-install.sql", "backend/booking/postgres-core-repository.mjs", "backend/booking-adapter-contract.d.ts", "scripts/validate-booking-postgres-core-repository.mjs", "tools/clis/maggie_booking.py", "skills/maggie-booking/SKILL.md", "maggiedash.json", "README.md", "backend/README.md", "docs/BOOKING-HOST-ADAPTER.md"],
+      "tests": ["npm run booking:postgres-core-repository:test", "npm run booking:postgres-core-repository:integration -- --database-url <disposable-db> --confirm", "npm test", "node --check backend/booking/postgres-core-repository.mjs", "schema validator", "same-key replay test", "cross-tenant rejection test", "fresh install projection"],
+      "docs": ["README.md", "backend/README.md", "docs/BOOKING-HOST-ADAPTER.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["A host can compose a tenant-scoped PostgreSQL core repository without importing pg or reading secrets", "Core reads and booking/hold/lifecycle writes use a same-client transaction seam", "Idempotency, event, audit, overlap, and tenant scope are persisted through parameterized SQL", "Provider payment and public checkout boundaries remain explicit rather than being silently faked"]
+    },
+    {
+      "id": "BK-043",
+      "epic": "persistence",
+      "title": "Complete PostgreSQL manager configuration and operational reads",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-042"],
+      "status": "passed",
+      "plan": ["Persist catalog, staff, resource, schedule, closure, and settings mutations without deleting referenced booking data", "Expose tenant-scoped staff, resource, schedule, payment, health, and payment-health reads", "Add an explicit manager-method regression gate while keeping payment provider and webhook methods injected", "Exercise the configuration writes, idempotent audit/event records, and cleanup through real PostgreSQL"],
+      "implementation": ["schema/maggie-booking-install.sql", "backend/booking/postgres-core-repository.mjs", "backend/booking-adapter-contract.d.ts", "scripts/validate-booking-postgres-manager-methods.mjs", "scripts/validate-booking-postgres-core-repository.integration.mjs", "maggiedash.json", "scripts/validate-booking.mjs", "package.json", "README.md", "backend/README.md", "docs/BOOKING-HOST-ADAPTER.md"],
+      "tests": ["npm run booking:postgres-manager-methods:test", "npm run booking:postgres-core-repository:integration -- --database-url <disposable-db> --confirm", "npm test", "schema validator", "fresh install projection"],
+      "docs": ["README.md", "backend/README.md", "docs/BOOKING-HOST-ADAPTER.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["Configuration writes are tenant-scoped, idempotent, audited, and preserve variants referenced by existing bookings", "Schedule closures and operational reads are persisted through the same transaction seam", "The shipped manager repository exposes 29 database-backed methods", "Payment SDK operations and webhook verification remain explicit injected boundaries"]
+    },
+    {
+      "id": "BK-044",
+      "epic": "payments",
+      "title": "Persist provider-injected payment operations through PostgreSQL",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-024", "BK-025", "BK-043"],
+      "status": "passed",
+      "plan": ["Add a provider-neutral PostgreSQL payment adapter for start, reconcile, and refund operations", "Keep provider SDK calls outside database transactions and persist only normalized payment truth", "Make the service bypass long manager transactions for provider calls while preserving safe DTOs", "Exercise fake-gateway and real disposable PostgreSQL payment start/reconcile/refund cycles"],
+      "implementation": ["backend/booking/postgres-payment-adapter.mjs", "backend/booking/service.mjs", "backend/booking-adapter-contract.d.ts", "scripts/validate-booking-postgres-payment-adapter.mjs", "scripts/validate-booking-postgres-core-repository.integration.mjs", "maggiedash.json", "package.json", "README.md", "backend/README.md", "docs/BOOKING-HOST-ADAPTER.md"],
+      "tests": ["npm run booking:postgres-payment-adapter:test", "npm run booking:service:test", "npm run booking:postgres-core-repository:integration -- --database-url <disposable-db> --confirm", "npm test", "fresh install projection"],
+      "docs": ["README.md", "backend/README.md", "docs/BOOKING-HOST-ADAPTER.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["Payment start, reconciliation, and refund persistence require an injected provider gateway", "Provider calls do not execute while the manager core transaction is held", "Payment idempotency, booking payment status, event/audit, refund, and transaction records are persisted", "Raw provider payloads and credentials never cross the repository or DTO boundary"]
+    },
+    {
+      "id": "BK-045",
+      "epic": "customer",
+      "title": "Persist the public customer Booking journey",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-033", "BK-034", "BK-041", "BK-044"],
+      "status": "passed",
+      "plan": ["Add a customer token table storing only token hashes and host-sealed ciphertext", "Compose public catalog, availability, hold, checkout, payment-return, and cancellation methods with manager/payment adapters", "Require an injected token codec, namespaced idempotency replay, and manager transaction seam while keeping public DTOs free of customer/project/provider internals", "Exercise the six public methods through the adapter gate and real disposable PostgreSQL replay coverage while keeping real-host security controls explicit"],
+      "implementation": ["schema/maggie-booking-install.sql", "backend/booking/postgres-customer-adapter.mjs", "backend/booking-adapter-contract.d.ts", "scripts/validate-booking-postgres-customer-adapter.mjs", "maggiedash.json", "package.json", "README.md", "backend/README.md", "docs/BOOKING-HOST-ADAPTER.md"],
+      "tests": ["npm run booking:postgres-customer-adapter:test", "npm run booking:customer-flow:test", "npm run booking:customer-reference-host:test", "npm run booking:postgres-core-repository:integration -- --database-url <disposable-db> --confirm", "npm test", "schema validator", "fresh install projection"],
+      "docs": ["README.md", "backend/README.md", "docs/BOOKING-HOST-ADAPTER.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["Public holds and checkout are tenant-bound and idempotent", "Return and cancellation require a short-lived token whose raw value is never persisted", "Customer responses use the public DTO boundary and never expose provider/customer internals", "The host still owns origin/CSRF, abuse, notification, token-key, and real browser/runtime evidence"]
+    },
+    {
+      "id": "BK-046",
+      "epic": "customer",
+      "title": "Recover customer checkout after provider failure",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-044", "BK-045"],
+      "status": "passed",
+      "plan": ["Reproduce the crash window where hold conversion succeeds but the provider call fails", "Keep the manager conversion idempotency key namespaced to the customer checkout", "Reuse a valid sealed token and provider idempotency key when retrying the pending booking", "Reject genuinely expired holds while allowing an already-converted checkout to recover"],
+      "implementation": ["backend/booking/postgres-customer-adapter.mjs", "scripts/validate-booking-postgres-customer-adapter.mjs", "package.json"],
+      "tests": ["npm run booking:postgres-customer-adapter:test", "npm run booking:postgres-core-repository:integration -- --database-url <disposable-db> --confirm", "node --check backend/booking/postgres-customer-adapter.mjs", "npm test"],
+      "docs": ["README.md", "backend/README.md", "docs/BOOKING-HOST-ADAPTER.md", "docs/maggiedash-booking/TASKS.md", "docs/maggiedash-booking/PROGRESS.md", "docs/maggiedash-booking/PRD.md"],
+      "acceptance": ["A provider failure after hold conversion leaves one pending booking that can be retried", "A retry replays the conversion and does not create another booking or token when a valid token exists", "Payment retry uses a stable provider idempotency key", "Active expired holds still fail closed and no public manager/provider internals are exposed"]
+    },
+    {
+      "id": "BK-047",
+      "epic": "operations",
+      "title": "Fail closed on a non-empty backup restore target",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-030"],
+      "status": "passed",
+      "plan": ["Inspect the restore public schema before any restore command", "Refuse a non-empty target before creating or applying the dump", "Preflight PostgreSQL server/client major-version compatibility and support an explicit client directory", "Prove the pre-existing target row remains unchanged after refusal", "Re-run the empty-target backup/restore parity path with matching client binaries"],
+      "implementation": ["scripts/validate-booking-postgres-backup-restore.integration.mjs", "README.md", "ops/README.md", "docs/BOOKING-HOST-ADAPTER.md"],
+      "tests": ["disposable backup/restore integration with an empty target and --pg-bin-dir <matching-postgres-bin-dir>", "disposable backup/restore integration with a non-empty target", "default PATH version-mismatch failure names --pg-bin-dir", "node --check scripts/validate-booking-postgres-backup-restore.integration.mjs", "npm test"],
+      "docs": ["docs/maggiedash-booking/TASKS.md", "docs/maggiedash-booking/PROGRESS.md", "ops/README.md", "docs/BOOKING-HOST-ADAPTER.md"],
+      "acceptance": ["A target with public application tables is rejected before pg_restore", "The command does not delete, truncate, or modify the rejected target", "Matching PostgreSQL client binaries can be selected explicitly and incompatible defaults fail with remediation", "An empty target still produces custom-format restore and protected-table row-count parity", "The result exposes the empty-target preflight and client selection as named checks"]
+    },
+    {
+      "id": "BK-048",
+      "epic": "reporting",
+      "title": "Add tenant-scoped manager reporting",
+      "repository": "both",
+      "dependsOn": ["BK-043", "BK-027"],
+      "status": "passed",
+      "plan": ["Add a read-only reports route to the manager contract", "Aggregate totals and day/service/staff/location breakdowns inside the tenant and staff scope", "Add the Reports screen with date filters and permission handling", "Verify reference-host, route, repository, and installed-host projections"],
+      "implementation": ["contracts/booking-host-adapter-v1.json", "backend/booking/postgres-core-repository.mjs", "backend/booking/route-handler.mjs", "booking/src/booking.tsx", "scripts/validate-booking-postgres-core-repository.mjs", "scripts/validate-booking-route-handler.mjs", "docs/maggiedash-booking/README.md"],
+      "tests": ["npm run booking:postgres-core-repository:test", "npm run booking:reference-host:test", "npm run booking:ui:test", "npm test", "maggie booking inspect --project <host>"],
+      "docs": ["docs/BOOKING-HOST-ADAPTER.md", "docs/maggiedash-booking/README.md", "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["Reports are tenant-scoped and staff assignment scoped", "Date range validation rejects invalid and overlong ranges", "The screen renders totals and four breakdown tables with permission/error states", "The route count and installed host projection remain synchronized"]
+    },
+    {
+      "id": "BK-049",
+      "epic": "notifications",
+      "title": "Automate 24-hour booking reminders",
+      "repository": "both",
+      "dependsOn": ["BK-026"],
+      "status": "passed",
+      "plan": ["Select future confirmed bookings in the next 24 hours", "Queue one email reminder per booking with a stable tenant-scoped idempotency key", "Persist new outbox rows through the PostgreSQL worker transaction", "Keep recipient resolution server-side and document the production scheduler"],
+      "implementation": ["backend/booking/notifications.mjs", "backend/booking/runtime.mjs", "backend/booking/postgres-worker-repository.mjs", "contracts/booking-runtime-v1.json", "backend/booking/worker-contract.d.ts", "deploy/ora-maggie-booking-worker.service", "deploy/ora-maggie-booking-worker.timer"],
+      "tests": ["npm run booking:runtime:test", "npm run booking:postgres-worker-repository:test", "node --check backend/booking/runtime.mjs", "ORA Astro build", "reminder replay regression"],
+      "docs": ["docs/maggiedash-booking/README.md", "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md", "docs/maggiedash-booking/PROGRESS.md", "docs/maggie-booking-integration.md"],
+      "acceptance": ["A confirmed booking inside the 24-hour window queues exactly one booking.reminder", "A repeated worker cycle queues zero duplicates", "The PostgreSQL worker persists the new notification without raw customer email", "The host dispatcher can send the reminder through the existing Resend path"]
+    },
+    {
+      "id": "BK-050",
+      "epic": "payments",
+      "title": "Implement payment policies, deposits, and outstanding balances",
+      "repository": "both",
+      "dependsOn": ["BK-024", "BK-044", "BK-045", "BK-049"],
+      "status": "passed",
+      "plan": ["Normalize full, deposit, pay-later, and no-payment service policies", "Label attempts by deposit, balance, full, or adjustment purpose", "Project captured attempts and refunds into paid and balance-due fields", "Expose due amounts and payment purpose in checkout and manager screens", "Keep payment replay idempotent before mutable balance validation"],
+      "implementation": ["backend/booking/payment-gateway.mjs", "backend/booking/postgres-payment-adapter.mjs", "backend/booking/runtime.mjs", "schema/maggie-booking-install.sql", "booking/src/booking.tsx", "backend/booking/postgres-worker-repository.mjs"],
+      "tests": ["npm run booking:payment:test", "npm run booking:runtime:test", "npm run booking:postgres-payment-adapter:test", "npm run booking:reference-host:test", "npm test", "ORA Astro build"],
+      "docs": ["docs/maggiedash-booking/PAYMENT-GATEWAY.md", "docs/maggiedash-booking/DATA-MODEL.md", "docs/maggiedash-booking/PROGRESS.md", "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md"],
+      "acceptance": ["A deposit capture confirms the booking while leaving a balance due", "A later balance payment can never exceed the current balance", "Captured and refundable totals are aggregated rather than inferred from only the latest attempt", "A repeated payment command returns its original result even after the balance changes", "Host staging still requires migration and real Stripe evidence"]
+    },
+    {
+      "id": "BK-051",
+      "epic": "customer-operations",
+      "title": "Add manager customer history workspace",
+      "repository": "both",
+      "dependsOn": ["BK-039", "BK-045"],
+      "status": "passed",
+      "plan": ["Add a searchable customer directory without exposing raw provider or token fields", "Load one selected customer through the existing tenant-scoped detail route", "Show consent state and appointment history with bounded loading, empty, and error states", "Keep the installed ORA host projection aligned with the MaggieDash source"],
+      "implementation": ["booking/src/booking.tsx", "scripts/validate-booking-ui.mjs", "_maggie/booking/booking.tsx"],
+      "tests": ["npm run booking:ui:test", "npm test", "maggie booking inspect --project <host>", "ORA Astro build"],
+      "docs": ["docs/maggiedash-booking/README.md", "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md", "docs/maggiedash-booking/PROGRESS.md", "docs/maggie-booking-integration.md"],
+      "acceptance": ["The Customers screen searches the tenant-scoped directory", "Selecting a customer loads only that customer's safe details and booking history", "The screen exposes consent, loading, empty, retry, and error states", "The installed host projection and source UI retain the customer-history markers"]
+    },
+    {
+      "id": "BK-052",
+      "epic": "availability",
+      "title": "Complete schedule rule management without destructive UI writes",
+      "repository": "both",
+      "dependsOn": ["BK-023", "BK-027"],
+      "status": "passed",
+      "plan": ["Read the nested schedule response shape consistently", "Preserve all existing working hours, shifts, time-off rows, and closures when adding one rule", "Expose four rule types from the Schedule screen with validation for owner and time range", "Keep the installed ORA projection aligned with the MaggieDash UI"],
+      "implementation": ["booking/src/booking.tsx", "_maggie/booking/booking.tsx", "scripts/validate-booking-ui.mjs"],
+      "tests": ["npm run booking:ui:test", "npm test", "ORA Astro build"],
+      "docs": ["docs/maggiedash-booking/README.md", "docs/maggiedash-booking/PROGRESS.md", "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md"],
+      "acceptance": ["Adding one schedule rule does not delete unrelated schedule rows", "Working hours, shifts, time off, and closures use the existing audited schedule endpoint", "Invalid owner and interval inputs fail with bounded UI feedback", "The schedule screen renders the API's nested schedule response"]
+    },
+    {
+      "id": "BK-053",
+      "epic": "installation",
+      "title": "Merge Maggie rewrites into existing Astro middleware during install",
+      "repository": "ai-cmo-skills + MaggieDash",
+      "dependsOn": ["BK-006", "BK-008"],
+      "status": "passed",
+      "plan": ["Detect an existing conventional Astro defineMiddleware callback", "Insert an idempotent Booking/login/register/reset rewrite block without replacing host auth logic", "Record updated files and unsupported middleware warnings in install state", "Make Booking inspect fail when Astro middleware integration remains unresolved"],
+      "implementation": ["tools/clis/maggie_dash.py", "tools/clis/maggie_booking.py", "tools/tests/test_maggie_dash_install.py", "adapters/astro/host/src/middleware.ts"],
+      "tests": ["python3 -m unittest tools.tests.test_maggie_dash_install -v", "maggie booking inspect --project <host>", "git diff --check"],
+      "docs": ["docs/maggiedash-booking/SKILLS-AND-CLI.md", "docs/maggiedash-booking/PROGRESS.md", "adapters/astro/README.md"],
+      "acceptance": ["A conventional existing middleware receives the rewrites automatically", "Repeating install does not duplicate the block", "A non-conventional middleware is preserved and reported as needs-attention", "The installer never writes secrets or replaces host-owned auth/redirect logic"]
+    },
+    {
+      "id": "BK-054",
+      "epic": "catalogue",
+      "title": "Add editable service and treatment catalogue management",
+      "repository": "both",
+      "dependsOn": ["BK-023", "BK-027"],
+      "status": "passed",
+      "plan": ["Add a specialized catalogue view with service and variant rows", "Keep stable service and variant IDs when editing an existing service", "Expose duration, price, currency, payment policy, and active/inactive controls", "Keep the installed ORA projection aligned with the MaggieDash UI"],
+      "implementation": ["booking/src/booking.tsx", "_maggie/booking/booking.tsx", "scripts/validate-booking-ui.mjs", "scripts/validate-booking-configuration.mjs"],
+      "tests": ["npm run booking:ui:test", "npm test", "ORA Astro build"],
+      "docs": ["docs/maggiedash-booking/TASKS.md", "docs/maggiedash-booking/README.md", "docs/maggiedash-booking/PROGRESS.md", "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md"],
+      "acceptance": ["Managers can select a service and edit its existing variant instead of creating a new record", "Changing active status updates the service and variant while preserving their IDs", "Payment policy and treatment pricing are written through the existing audited idempotent endpoint", "The source UI and installed ORA host pass their UI/configuration/build gates"]
+    },
+    {
+      "id": "BK-055",
+      "epic": "team-and-resources",
+      "title": "Add editable staff and resource management",
+      "repository": "both",
+      "dependsOn": ["BK-023", "BK-027"],
+      "status": "passed",
+      "plan": ["Add dedicated staff and resource views with search and stable selection", "Keep existing staff/resource IDs when editing profile, assignment, capacity, or status", "Expose staff active/bookable state and resource active state through the existing audited endpoints", "Keep the installed ORA projection aligned with the MaggieDash UI"],
+      "implementation": ["booking/src/booking.tsx", "_maggie/booking/booking.tsx", "scripts/validate-booking-ui.mjs", "scripts/validate-booking-configuration.mjs"],
+      "tests": ["npm run booking:ui:test", "npm run booking:configuration:test", "npm test", "ORA Astro build"],
+      "docs": ["docs/maggiedash-booking/TASKS.md", "docs/maggiedash-booking/README.md", "docs/maggiedash-booking/PROGRESS.md", "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md"],
+      "acceptance": ["Managers can select and edit an existing staff profile without creating a replacement ID", "Staff location/service assignments, active state, and bookable state are editable", "Managers can select and edit an existing resource name, type, location, capacity, and active state", "The source UI and installed ORA host pass their UI/configuration/build gates"]
+    },
+    {
+      "id": "BK-056",
+      "epic": "availability",
+      "title": "Add editable schedule-rule management",
+      "repository": "both",
+      "dependsOn": ["BK-023", "BK-027", "BK-052"],
+      "status": "passed",
+      "plan": ["Flatten working hours, shifts, time off, and closures into a searchable rule list", "Keep stable rule IDs when editing and allow safe rule-type changes", "Preserve unrelated schedule rows in every write", "Keep the installed ORA projection aligned with the MaggieDash UI"],
+      "implementation": ["booking/src/booking.tsx", "_maggie/booking/booking.tsx", "scripts/validate-booking-ui.mjs"],
+      "tests": ["npm run booking:ui:test", "npm test", "ORA Astro build"],
+      "docs": ["docs/maggiedash-booking/TASKS.md", "docs/maggiedash-booking/README.md", "docs/maggiedash-booking/PROGRESS.md", "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md"],
+      "acceptance": ["Managers can search and select each schedule rule type", "Editing a rule preserves its ID and does not remove unrelated rows", "Working-hours and interval validation fails with bounded UI feedback", "The source UI and installed ORA host pass their UI/configuration/build gates"]
+    },
+    {
+      "id": "BK-057",
+      "epic": "manager-operations",
+      "title": "Make manager booking creation use live configuration",
+      "repository": "both",
+      "dependsOn": ["BK-023", "BK-027", "BK-028"],
+      "status": "passed",
+      "plan": ["Load catalogue, staff, and resource data for the manager booking form", "Replace manual service/location IDs with live selectors", "Require a staff or resource allocation before submitting a manager booking", "Keep the installed ORA projection aligned with the MaggieDash UI"],
+      "implementation": ["booking/src/booking.tsx", "_maggie/booking/booking.tsx", "scripts/validate-booking-reference-host.mjs", "scripts/validate-booking-ui.mjs"],
+      "tests": ["npm run booking:ui:test", "npm run booking:reference-host:test", "npm test", "ORA Astro build"],
+      "docs": ["docs/maggiedash-booking/TASKS.md", "docs/maggiedash-booking/README.md", "docs/maggiedash-booking/PROGRESS.md", "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md"],
+      "acceptance": ["Manager booking creation selects active service variants from the live catalogue", "Location, staff, and resource choices come from the tenant-scoped host", "Submission includes a staffId or resourceId and fails with bounded feedback when neither is selected", "The source UI and installed ORA host pass their UI/reference-host/build gates"]
+    },
+    {
+      "id": "BK-058",
+      "epic": "installation",
+      "title": "Add safe first-run Booking setup checklist",
+      "repository": "ai-cmo-skills",
+      "dependsOn": ["BK-006", "BK-008"],
+      "status": "passed",
+      "plan": ["Inspect installation artifacts and Astro middleware integration", "Check only the presence of required environment keys without printing values", "Report schema, owner-registration, Stripe webhook, and worker next steps", "Keep the command read-only and preserve host-owned migration and deployment decisions"],
+      "implementation": ["tools/clis/maggie_booking.py", "packages/maggie-cli/bin/maggie.js", "tools/tests/test_maggie_booking.py"],
+      "tests": ["python3 -m unittest tools.tests.test_maggie_booking -v", "maggie booking setup --project <host>", "maggie booking inspect --project <host>", "git diff --check"],
+      "docs": ["skills/maggie-booking/SKILL.md", "docs/maggiedash-booking/SKILLS-AND-CLI.md", "docs/maggiedash-booking/TASKS.md", "docs/maggiedash-booking/PROGRESS.md", "docs/maggiedash-booking/README.md"],
+      "acceptance": ["A fresh install receives actionable setup status and next steps", "Reports never contain DATABASE_URL, Resend, Stripe, or other secret values", "The checklist does not connect to PostgreSQL, apply schema, create an owner, send email, configure Stripe, or deploy", "Escaped Astro regex path markers are recognized by both setup and inspect"]
+    },
+    {
+      "id": "BK-059",
+      "epic": "installation",
+      "title": "Add explicit one-command host bootstrap",
+      "repository": "ai-cmo-skills",
+      "dependsOn": ["BK-058"],
+      "status": "passed",
+      "plan": ["Add an explicit bootstrap flag to the Booking installer", "Run only the installed host schema script with the existing project environment", "Reject bootstrap with dry-run/diff and preserve the default read-only migration behavior", "Document the backup and owner-registration boundaries"],
+      "implementation": ["tools/clis/maggie_booking.py", "tools/tests/test_maggie_booking.py", "skills/maggie-booking/SKILL.md"],
+      "tests": ["python3 -m unittest tools.tests.test_maggie_booking -v", "npm pack --dry-run", "maggie booking setup --project <host>", "git diff --check"],
+      "docs": ["README.md", "packages/maggie-cli/README.md", "docs/maggiedash-booking/SKILLS-AND-CLI.md", "docs/maggiedash-booking/TASKS.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["A reviewed new Astro host can install and apply the idempotent schema with one explicit `--bootstrap` command", "Default install remains non-migrating", "Bootstrap never creates an owner, sends email, configures Stripe, or deploys", "A failed or incompatible bootstrap returns a non-zero status without hiding the host script error"]
+    },
+    {
+      "id": "BK-060",
+      "epic": "customer experience",
+      "title": "Add token-bound customer self-service rescheduling",
+      "repository": "MaggieDash + ai-cmo-skills",
+      "dependsOn": ["BK-033", "BK-041", "BK-059"],
+      "status": "passed",
+      "plan": ["Extend the public customer contract with a reschedule endpoint", "Validate token, future time, booking status, tenant scope, conflict, and idempotency", "Expose available slots and reschedule controls on the payment-return page", "Queue the existing Resend rescheduled notification and mirror the host adapter"],
+      "implementation": ["backend/booking/customer-flow.mjs", "backend/booking/customer-route-handler.mjs", "backend/booking/postgres-customer-adapter.mjs", "backend/booking/customer-reference-host.mjs", "booking/src/customer.tsx", "adapters/astro/host/src/lib/maggie/booking.ts"],
+      "tests": ["npm run booking:customer-flow:test", "npm run booking:customer-reference-host:test", "npm run booking:postgres-customer-adapter:test", "npm run booking:customer-ui:test", "npm test", "git diff --check"],
+      "docs": ["docs/maggiedash-booking/HOST-ADAPTER.md", "docs/maggiedash-booking/USER-JOURNEYS.md", "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["A customer with a valid booking token can choose a future available slot and move the booking", "Wrong/expired tokens, terminal booking states, past times, conflicts, and cross-tenant requests fail closed", "Repeated requests with the same idempotency key replay the original result", "A booking.rescheduled email is queued through the host Resend outbox", "Manager rescheduling remains available and the public DTO contains only safe slot-selection fields"]
+    },
+    {
+      "id": "BK-061",
+      "epic": "customer experience",
+      "title": "Add Resend customer-manage links with separate token lifetimes",
+      "repository": "MaggieDash + ai-cmo-skills",
+      "dependsOn": ["BK-026", "BK-033", "BK-060"],
+      "status": "passed",
+      "plan": ["Separate short-lived payment-return tokens from long-lived customer-manage tokens", "Persist token purpose with a backwards-compatible schema migration and lookup index", "Create or reuse a 30-day sealed manage token for checkout and manager-created booking notifications", "Include the manage link in the Astro/ORA Resend worker without exposing raw tokens in the outbox"],
+      "implementation": ["schema/maggie-booking-install.sql", "backend/booking/postgres-customer-adapter.mjs", "adapters/astro/host/scripts/maggie-booking-worker.mjs", "scripts/maggie-booking-worker.mjs", "scripts/validate-booking-schema.mjs", "scripts/validate-booking-postgres-customer-adapter.mjs"],
+      "tests": ["npm run booking:postgres-customer-adapter:test", "npm run booking:schema:validate", "npm test", "ORA customer adapter validator", "ORA Astro build"],
+      "docs": ["docs/maggiedash-booking/README.md", "docs/maggiedash-booking/HOST-ADAPTER.md", "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md", "docs/maggiedash-booking/PROGRESS.md"],
+      "acceptance": ["Payment-return tokens remain short-lived and manage tokens are separately identified", "Resend workers include a safe customer-manage link for booking notifications", "Expired, revoked, or malformed tokens fail closed", "The migration is idempotent and existing payment tokens remain compatible"]
+    },
+    {
+      "id": "BK-062",
+      "epic": "customer experience",
+      "title": "Add tenant-scoped waitlist and Resend availability notification",
+      "repository": "MaggieDash + ai-cmo-skills",
+      "dependsOn": ["BK-033", "BK-043", "BK-054", "BK-061"],
+      "status": "passed",
+      "plan": [
+        "Add an idempotent tenant-scoped waitlist table with service, location, staff, preferred time, priority, and status fields",
+        "Expose a public noindex join route that returns only safe waitlist data",
+        "Add manager queue filtering and audited notify, convert, cancel, and priority actions with staff scope",
+        "Queue a Resend availability notification through the existing host outbox and worker"
+      ],
+      "implementation": [
+        "schema/maggie-booking-install.sql",
+        "backend/booking/customer-flow.mjs",
+        "backend/booking/customer-route-handler.mjs",
+        "backend/booking/postgres-customer-adapter.mjs",
+        "backend/booking/postgres-core-repository.mjs",
+        "backend/booking/notifications.mjs",
+        "backend/booking/postgres-worker-repository.mjs",
+        "backend/booking/route-handler.mjs",
+        "booking/src/booking.tsx",
+        "booking/src/customer.tsx",
+        "adapters/astro/host/scripts/maggie-booking-worker.mjs",
+        "adapters/astro/host/src/lib/maggie/booking.ts"
+      ],
+      "tests": [
+        "npm test",
+        "npm run booking:customer-flow:test",
+        "npm run booking:schema:validate",
+        "ORA service/route/customer/schema/UI/host validators",
+        "ORA Astro build"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/HOST-ADAPTER.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "skills/maggie-booking/SKILL.md"
+      ],
+      "acceptance": [
+        "A customer can join a tenant-scoped waitlist when no suitable slot is available and repeated idempotency keys replay safely",
+        "Managers can filter the queue and notify, convert, cancel, or reprioritize entries within their staff scope",
+        "Waitlist changes are audited and notification intents never expose bearer tokens in the outbox",
+        "The host worker can send a safe availability email through Resend; real delivery and scheduler evidence remain host release gates"
+      ]
+    },
+    {
+      "id": "BK-063",
+      "epic": "customer experience",
+      "title": "Make waitlist conversion create and link a real booking",
+      "repository": "MaggieDash + ai-cmo-skills",
+      "dependsOn": ["BK-062"],
+      "status": "passed",
+      "plan": [
+        "Add an additive converted-booking link to the waitlist schema",
+        "Create the booking, segment, allocation, payment-policy projection, event, and audit record in the same transaction as the queue update",
+        "Recheck tenant, staff/resource eligibility, availability conflicts, and idempotency before conversion",
+        "Expose a manager conversion form and queue the normal confirmation email when the created booking is confirmed"
+      ],
+      "implementation": [
+        "schema/maggie-booking-install.sql",
+        "backend/booking/postgres-core-repository.mjs",
+        "backend/booking/reference-host.mjs",
+        "booking/src/booking.tsx",
+        "adapters/astro/host/src/lib/maggie/booking.ts",
+        "scripts/validate-booking-postgres-core-repository.mjs",
+        "scripts/validate-booking-reference-host.mjs"
+      ],
+      "tests": [
+        "npm test",
+        "npm run booking:postgres-core-repository:test",
+        "npm run booking:reference-host:test",
+        "ORA reference-host/host validators",
+        "ORA Astro build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/HOST-ADAPTER.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "skills/maggie-booking/SKILL.md"
+      ],
+      "acceptance": [
+        "A manager conversion creates exactly one booking and links convertedBookingId to it",
+        "The server rejects missing times, unavailable allocations, invalid staff/resources, cross-tenant data, and repeat conversion with a different idempotency key",
+        "The waitlist and booking changes share one transaction and produce auditable event records",
+        "Confirmed conversions use the existing host Resend confirmation path; real email delivery remains a host release gate"
+      ]
+    },
+    {
+      "id": "BK-064",
+      "epic": "onboarding and operations",
+      "title": "Expose first-run payment readiness in the Booking overview",
+      "repository": "MaggieDash + ai-cmo-skills",
+      "dependsOn": ["BK-058", "BK-059", "BK-063"],
+      "status": "passed",
+      "plan": [
+        "Read the existing payment-health contract without exposing Stripe secrets",
+        "Add an overview setup panel with Stripe status, test/live mode, and the exact webhook URL",
+        "Allow the operator to copy the webhook URL and link to Booking settings",
+        "Mirror the component into the ORA host and document the remaining host-owned configuration"
+      ],
+      "implementation": [
+        "booking/src/booking.tsx",
+        "_maggie/booking/booking.tsx",
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "skills/maggie-booking/SKILL.md"
+      ],
+      "tests": [
+        "npm test",
+        "booking UI validator",
+        "ORA Astro build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "skills/maggie-booking/SKILL.md"
+      ],
+  "acceptance": [
+    "The manager overview shows Stripe connection status without rendering secret values",
+    "The operator can copy the current host webhook URL and see test/live mode",
+    "An unconfigured Stripe account gets actionable secret-store and webhook guidance",
+    "Secret presence reports pending until server-side verification explicitly confirms Stripe charges and payouts",
+    "A verified account remains connected across requests only while the server-secret fingerprint is unchanged",
+    "Central and ORA Booking UI builds remain valid"
+  ]
+    },
+    {
+      "id": "BK-065",
+      "epic": "onboarding and operations",
+      "title": "Fail the Booking setup checklist on invalid secrets",
+      "repository": "ai-cmo-skills",
+      "dependsOn": ["BK-058", "BK-064"],
+      "status": "passed",
+      "plan": [
+        "Read environment values only in memory for length/pair validation",
+        "Mark short BOOKING_TOKEN_SECRET values invalid and partially configured Stripe values degraded",
+        "Add actionable next steps without serializing any secret values",
+        "Add regression coverage for invalid configuration and preserve the read-only contract"
+      ],
+      "implementation": [
+        "tools/clis/maggie_booking.py",
+        "tools/tests/test_maggie_booking.py",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "skills/maggie-booking/SKILL.md"
+      ],
+      "tests": [
+        "python3 -m unittest tools.tests.test_maggie_booking -q",
+        "maggie booking tasks validate",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "skills/maggie-booking/SKILL.md"
+      ],
+  "acceptance": [
+    "A short token is reported as invalid and causes setup to require configuration",
+    "Only one Stripe key is reported as degraded with a paired-key next step",
+    "Secret values never appear in the JSON result or test output",
+    "Replacing a Stripe secret invalidates the previous connected state"
+  ]
+    },
+    {
+      "id": "BK-066",
+      "epic": "onboarding and operations",
+      "title": "Make installed Booking UI validators resolve the installed workspace",
+      "repository": "MaggieDash + ORA host",
+      "dependsOn": ["BK-064", "BK-065"],
+      "status": "passed",
+      "plan": [
+        "Detect the source workspace when running inside MaggieDash",
+        "Fall back to the installed sibling _maggie/booking workspace on a host project",
+        "Keep the failure message explicit when neither workspace exists",
+        "Run central and ORA UI/customer validators after the path correction"
+      ],
+      "implementation": [
+        "scripts/validate-booking-ui.mjs",
+        "maggiedash/scripts/validate-booking-ui.mjs",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "MaggieDash booking:ui:test",
+        "ORA validate-booking-ui.mjs",
+        "ORA validate-booking-customer-ui.mjs",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md"
+      ],
+      "acceptance": [
+        "Central validators read booking/src",
+        "Installed host validators read _maggie/booking",
+        "Missing workspaces fail with a bounded diagnostic instead of an ENOENT stack"
+      ]
+    },
+    {
+      "id": "BK-067",
+      "epic": "waitlist and notifications",
+      "title": "Automatically match newly available slots to the waitlist",
+      "repository": "MaggieDash + ORA host",
+      "dependsOn": ["BK-062", "BK-063", "BK-066"],
+      "status": "passed",
+      "plan": [
+        "Add a provider-neutral worker matcher ordered by priority then FIFO",
+        "Require explicit service/location scope and preserve staff/time preferences",
+        "Queue one idempotent booking.waitlist.available Resend notification per offered slot",
+        "Persist notified and offered-slot state without auto-reserving or auto-creating a booking"
+      ],
+      "implementation": [
+        "backend/booking/waitlist.mjs",
+        "backend/booking/runtime.mjs",
+        "backend/booking/postgres-worker-repository.mjs",
+        "schema/maggie-booking-install.sql",
+        "adapters/astro/host/scripts/maggie-booking-worker.mjs",
+        "maggiedash/backend/booking/waitlist.mjs",
+        "maggiedash/backend/booking/postgres-worker-repository.mjs",
+        "maggiedash/schema/maggie-booking-install.sql",
+        "scripts/maggie-booking-worker.mjs"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "waitlist priority/FIFO and idempotent replay regression",
+        "ORA worker/runtime/UI validators",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "skills/maggie-booking/SKILL.md"
+      ],
+      "acceptance": [
+        "Only waiting entries matching service, location, staff, and preferred time receive an offer",
+        "Priority is descending with FIFO tie-break",
+        "The same offered slot is not repeatedly sent to the next customer on every worker tick",
+        "A notification only enters the Resend outbox; the customer must claim the live slot"
+      ]
+    },
+    {
+      "id": "BK-068",
+      "epic": "customer self-service",
+      "title": "Add customer self-service booking history",
+      "repository": "MaggieDash + ORA host",
+      "dependsOn": ["BK-061", "BK-066"],
+      "status": "passed",
+      "plan": [
+        "Add a GET manage endpoint authenticated by the existing 30-day manage token",
+        "Resolve the token's tenant/customer scope and return only safe booking DTOs",
+        "Render current and historical appointments on the optional customer page",
+        "Cover fixture, PostgreSQL adapter, route, UI, and installed-host regressions"
+      ],
+      "implementation": [
+        "backend/booking/customer-flow.mjs",
+        "backend/booking/customer-route-handler.mjs",
+        "backend/booking/postgres-customer-adapter.mjs",
+        "backend/booking/customer-reference-host.mjs",
+        "booking/src/customer.tsx",
+        "contracts/booking-customer-surface-v1.json",
+        "maggiedash/backend/booking/customer-flow.mjs",
+        "maggiedash/backend/booking/postgres-customer-adapter.mjs",
+        "_maggie/booking/customer.tsx"
+      ],
+      "tests": [
+        "MaggieDash customer-flow/reference-host/PostgreSQL/UI validators",
+        "ORA customer-flow/reference-host/PostgreSQL/UI validators",
+        "MaggieDash npm test",
+        "ORA npm run build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "skills/maggie-booking/SKILL.md"
+      ],
+      "acceptance": [
+        "A valid, unexpired manage token returns current and historical bookings for one tenant/customer",
+        "Payment tokens and invalid/revoked/expired tokens cannot read customer history",
+        "Public history DTOs omit customer identity, project, and token fields",
+        "The customer page shows appointment history without requiring manager credentials"
+      ]
+    },
+    {
+      "id": "BK-069",
+      "epic": "installation and first-run setup",
+      "title": "Make reviewed Booking bootstrap provision its implementation secret",
+      "repository": "ai-cmo-skills",
+      "dependsOn": ["BK-058", "BK-059", "BK-065"],
+      "status": "passed",
+      "plan": [
+        "Generate a cryptographically random public-booking secret only during explicit bootstrap",
+        "Preserve valid existing values and fail closed on short configured values",
+        "Keep the secret out of command output, reports, tests, and documentation values",
+        "Document the local .env and external secret-store boundaries"
+      ],
+      "implementation": [
+        "tools/clis/maggie_booking.py",
+        "packages/maggie-cli/README.md",
+        "skills/maggie-booking/SKILL.md",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md",
+        "tools/tests/test_maggie_booking.py"
+      ],
+      "tests": [
+        "python3 -m unittest tools.tests.test_maggie_booking -v",
+        "generated secret is at least 32 characters and idempotent",
+        "short configured secret is rejected without replacement",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "packages/maggie-cli/README.md",
+        "skills/maggie-booking/SKILL.md",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md"
+      ],
+      "acceptance": [
+        "A reviewed bootstrap creates BOOKING_TOKEN_SECRET in the local host .env when absent",
+        "A valid existing secret remains byte-for-byte unchanged",
+        "A short existing secret returns a bounded failure instead of being overwritten",
+        "No CLI output or serialized checklist contains the generated secret"
+      ]
+    },
+    {
+      "id": "BK-070",
+      "epic": "installation and first-run setup",
+      "title": "Add transactional Booking schema dry-run",
+      "repository": "MaggieDash + ORA host",
+      "dependsOn": ["BK-059", "BK-069"],
+      "status": "passed",
+      "plan": [
+        "Add --dry-run to the installed host schema command",
+        "Run all core, host-extension, and Booking SQL in one transaction",
+        "Rollback after successful validation and rollback on errors",
+        "Document the preflight and preserve explicit --apply --confirm semantics"
+      ],
+      "implementation": [
+        "adapters/astro/host/scripts/maggie-booking-schema.mjs",
+        "scripts/maggie-booking-schema.mjs",
+        "docs/maggie-booking-integration.md",
+        "skills/maggie-booking/SKILL.md",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md"
+      ],
+      "tests": [
+        "node --check adapters/astro/host/scripts/maggie-booking-schema.mjs",
+        "node --check scripts/maggie-booking-schema.mjs",
+        "ORA live migration dry-run passed and rolled back",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md"
+      ],
+      "acceptance": [
+        "--dry-run validates all three migration files against the host PostgreSQL server",
+        "A successful dry-run leaves the database schema unchanged",
+        "--dry-run and --apply cannot be combined",
+        "Only --apply --confirm commits the migration"
+      ]
+    },
+    {
+      "id": "BK-071",
+      "epic": "email delivery and host compatibility",
+      "title": "Accept the existing Resend sender-key convention in the generic host",
+      "repository": "MaggieDash + ORA host",
+      "dependsOn": ["BK-026", "BK-058"],
+      "status": "passed",
+      "plan": [
+        "Resolve EMAIL_FROM first and RESEND_FROM_EMAIL as the compatible fallback",
+        "Use the same sender resolution for account invitations and worker delivery",
+        "Keep the secret-safe setup/readiness contract aligned with both names",
+        "Add source validator coverage and verify the ORA mirror build"
+      ],
+      "implementation": [
+        "adapters/astro/host/src/lib/maggie/auth.ts",
+        "adapters/astro/host/scripts/maggie-booking-worker.mjs",
+        "scripts/validate-astro-host-bootstrap.mjs",
+        "src/lib/maggie/booking.ts"
+      ],
+      "tests": [
+        "MaggieDash booking:host-bootstrap:test",
+        "ORA npm run build",
+        "node --check adapters/astro/host/scripts/maggie-booking-worker.mjs",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md"
+      ],
+      "acceptance": [
+        "Hosts with only RESEND_FROM_EMAIL pass account-email and worker sender configuration",
+        "EMAIL_FROM remains the first-choice override",
+        "No Resend API key or sender value is exposed in a DTO or readiness report"
+      ]
+    },
+    {
+      "id": "BK-072",
+      "epic": "manager booking operations",
+      "title": "Add multi-treatment manager appointments",
+      "repository": "MaggieDash + ORA host",
+      "dependsOn": ["BK-021", "BK-027", "BK-057", "BK-071"],
+      "status": "passed",
+      "plan": [
+        "Accept a bounded segments array while preserving the single-treatment request shape",
+        "Validate exact duration, same location/currency, allocation eligibility, availability, and internal overlap",
+        "Persist one booking with segment rows and per-segment allocations in the existing idempotent transaction",
+        "Expose add/remove treatment controls in the manager form and mirror the host implementation in ORA"
+      ],
+      "implementation": [
+        "backend/booking/postgres-core-repository.mjs",
+        "backend/booking/reference-host.mjs",
+        "booking/src/booking.tsx",
+        "scripts/validate-booking-reference-host.mjs",
+        "scripts/validate-booking-ui.mjs",
+        "_maggie/booking/booking.tsx"
+      ],
+      "tests": [
+        "npm test",
+        "node scripts/validate-booking-reference-host.mjs",
+        "ORA node scripts/validate-booking-reference-host.mjs",
+        "ORA npm run build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "skills/maggie-booking/SKILL.md",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md"
+      ],
+      "acceptance": [
+        "A manager can create a booking with up to 12 treatment segments from the live catalogue",
+        "Every segment has a server-validated time range, price/currency, and staff/resource allocation",
+        "Segments share one location and currency and cannot overlap on the same staff member or resource",
+        "Booking, segments, allocations, event, and audit writes replay safely under one idempotency key",
+        "The central and ORA reference-host regressions and host build pass"
+      ]
+    },
+    {
+      "id": "BK-073",
+      "epic": "public customer booking",
+      "title": "Add public multi-treatment booking",
+      "repository": "MaggieDash + ORA host",
+      "dependsOn": ["BK-033", "BK-034", "BK-045", "BK-072"],
+      "status": "passed",
+      "plan": [
+        "Accept a bounded public segments array while preserving the single-treatment request shape",
+        "Expose combined-duration availability for a selected treatment sequence",
+        "Persist segment metadata on the customer hold and convert every segment into booking rows and allocations",
+        "Add a public treatment picker, total estimate, and contiguous segment construction to the customer page"
+      ],
+      "implementation": [
+        "backend/booking/customer-flow.mjs",
+        "backend/booking/customer-route-handler.mjs",
+        "backend/booking/postgres-core-repository.mjs",
+        "backend/booking/postgres-customer-adapter.mjs",
+        "backend/booking/customer-reference-host.mjs",
+        "backend/booking/reference-host.mjs",
+        "schema/maggie-booking-install.sql",
+        "booking/src/customer.tsx",
+        "_maggie/booking/customer.tsx"
+      ],
+      "tests": [
+        "npm test",
+        "npm run booking:customer-reference-host:test",
+        "npm run booking:postgres-customer-adapter:test",
+        "ORA customer-flow/reference-host/UI validators",
+        "ORA npm run build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "skills/maggie-booking/SKILL.md",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md"
+      ],
+      "acceptance": [
+        "A public customer can select multiple active treatments and see a combined-duration availability result",
+        "The public hold validates ordered segments, one location/currency/payment policy, exact durations, assignments, and conflicts",
+        "Checkout returns one booking containing every segment with the summed price and token-bound customer controls",
+        "Single-treatment requests remain backward compatible and central/ORA reference-host plus host build gates pass"
+      ]
+    },
+    {
+      "id": "BK-074",
+      "epic": "booking lifecycle",
+      "title": "Make multi-treatment rescheduling segment-safe",
+      "repository": "MaggieDash + ORA host",
+      "dependsOn": ["BK-072", "BK-073"],
+      "status": "passed",
+      "plan": [
+        "Preserve segment-to-allocation identity when creating manager and converted customer bookings",
+        "Shift every treatment segment and its allocation by the same reschedule delta",
+        "Check conflicts independently for every staff/resource segment and preserve single-treatment compatibility",
+        "Exercise customer and PostgreSQL repository multi-treatment rescheduling in central and ORA validators"
+      ],
+      "implementation": [
+        "backend/booking/postgres-core-repository.mjs",
+        "backend/booking/customer-reference-host.mjs",
+        "scripts/validate-booking-postgres-core-repository.mjs",
+        "scripts/validate-booking-customer-reference-host.mjs"
+      ],
+      "tests": [
+        "npm run booking:postgres-core-repository:test",
+        "npm run booking:customer-reference-host:test",
+        "ORA customer reference-host validator",
+        "ORA npm run build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "skills/maggie-booking/SKILL.md",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md",
+        "docs/maggiedash-booking/README.md"
+      ],
+      "acceptance": [
+        "New manager and customer-converted bookings link each allocation to its segment",
+        "Rescheduling a multi-treatment booking shifts all segment and allocation intervals without collapsing them into one resource",
+        "Each target segment is conflict-checked and the original total duration is preserved",
+        "Single-treatment rescheduling remains compatible and central/ORA lifecycle validators pass"
+      ]
+    },
+    {
+      "id": "BK-075",
+      "epic": "installation and configuration",
+      "title": "Remove install-time hardcoded Booking IDs",
+      "repository": "MaggieDash + ORA host",
+      "dependsOn": ["BK-054", "BK-055", "BK-056", "BK-057"],
+      "status": "passed",
+      "plan": [
+        "Return tenant-scoped locations from catalog and schedule reads",
+        "Default new booking, staff, resource, and schedule forms from live bootstrap data",
+        "Persist resource service assignments and reject fixture ID regressions"
+      ],
+      "implementation": [
+        "backend/booking/postgres-core-repository.mjs",
+        "backend/booking/reference-host.mjs",
+        "booking/src/booking.tsx",
+        "scripts/validate-booking-ui.mjs",
+        "ORA _maggie/booking mirror"
+      ],
+      "tests": [
+        "npm run booking:ui:test",
+        "npm run booking:reference-host:test",
+        "npm run booking:postgres-core-repository:test",
+        "npm run booking:configuration:test",
+        "ORA syntax checks and npm run build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/README.md"
+      ],
+      "acceptance": [
+        "A fresh bootstrap location is selectable without knowing a fixture ID",
+        "Staff and resource forms default from tenant catalog data",
+        "Resource writes include service assignments and central/ORA validators plus host build pass"
+      ]
+    },
+    {
+      "id": "BK-076",
+      "epic": "installation and configuration",
+      "title": "Add install-time location management",
+      "repository": "MaggieDash + ORA host",
+      "dependsOn": ["BK-023", "BK-054", "BK-055", "BK-075"],
+      "status": "passed",
+      "plan": [
+        "Add tenant-scoped location validation and audited idempotent writes",
+        "Expose location list/update methods in the manager service, repository, route handler, and host contract",
+        "Add a Locations screen so a blank project can create its first venue before configuring dependent booking data",
+        "Mirror the source and validators into ORA's installed Booking workspace"
+      ],
+      "implementation": [
+        "backend/booking/configuration.mjs",
+        "backend/booking/service.mjs",
+        "backend/booking/route-handler.mjs",
+        "backend/booking/reference-host.mjs",
+        "backend/booking/postgres-core-repository.mjs",
+        "contracts/booking-host-adapter-v1.json",
+        "booking/src/booking.tsx",
+        "ORA installed Booking mirror"
+      ],
+      "tests": [
+        "npm run booking:service-contract:test",
+        "npm run booking:route-handler:test",
+        "npm run booking:configuration:test",
+        "npm run booking:reference-host:test",
+        "npm run booking:ui:test",
+        "ORA matching validators",
+        "ORA npm run build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "skills/maggie-booking/SKILL.md",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md"
+      ],
+      "acceptance": [
+        "A blank host can create its first location without a fixture ID",
+        "Location writes validate timezone, scope, permission, uniqueness, and idempotent replay",
+        "The central and ORA location screen, 47-route contract, reference host, and configuration gates pass"
+      ]
+    },
+    {
+      "id": "BK-077",
+      "epic": "installation and contract integrity",
+      "title": "Synchronize the install-time Booking contract",
+      "repository": "ai-cmo-skills + MaggieDash",
+      "dependsOn": ["BK-076"],
+      "status": "passed",
+      "plan": [
+        "Add the location capability and two location endpoint IDs to the public installer contract",
+        "Align service-method mappings and the CLI detailed-contract count with MaggieDash's 47-route contract",
+        "Add regression coverage so future route additions cannot leave the installer contract stale"
+      ],
+      "implementation": [
+        "contracts/maggiedash/booking-host-adapter-v1.json",
+        "tools/clis/maggie_booking.py",
+        "tools/tests/test_maggie_booking.py"
+      ],
+      "tests": [
+        "python3 tools/clis/maggie.py booking contract",
+        "python3 -m unittest tools.tests.test_maggie_booking -v",
+        "MaggieDash npm run booking:contract:validate",
+        "python3 tools/clis/maggie_booking.py tasks validate",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/README.md"
+      ],
+      "acceptance": [
+        "The ai-cmo-skills installer contract declares all 47 manager endpoints",
+        "The location capability and list/update service methods are present",
+        "The public CLI and MaggieDash contract validators agree without host secrets or database access"
+      ]
+    },
+    {
+      "id": "BK-078",
+      "epic": "release and installation",
+      "title": "Verify and release the public MaggieDash install source",
+      "repository": "MaggieDash + release owner",
+      "dependsOn": ["BK-077"],
+      "status": "passed",
+      "plan": [
+        "Commit and publish the local MaggieDash manifest hostBootstrap declaration and Booking source changes",
+        "Run the default GitHub-source installer against a disposable Astro project",
+        "Compare the public-source projection with the local-source projection and record the release commit/tag"
+      ],
+      "implementation": [
+        "MaggieDash/maggiedash.json",
+        "MaggieDash/adapters/astro/host",
+        "MaggieDash/booking",
+        "MaggieDash/contracts",
+        "MaggieDash/schema"
+      ],
+      "tests": [
+        "maggie booking install --project <disposable> --host astro --dry-run",
+        "maggie booking install --project <disposable> --source <released-MaggieDash> --host astro --dry-run",
+        "MaggieDash host bootstrap validator",
+        "MaggieDash npm test",
+        "release commit/tag evidence"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md"
+      ],
+      "acceptance": [
+        "The default public source declares an Astro host bootstrap under hostBootstrap.astro",
+        "A fresh Astro project can install Booking without a local MaggieDash checkout",
+        "The released source contains the same 47-route contract and worker/schema artifacts as the validated local source"
+      ]
+    },
+    {
+      "id": "BK-079",
+      "epic": "installation and package integrity",
+      "title": "Fix npm CLI Booking contract paths",
+      "repository": "ai-cmo-skills",
+      "dependsOn": ["BK-077"],
+      "status": "passed",
+      "plan": [
+        "Resolve Booking contract paths from source checkout contracts or npm bundled-contracts",
+        "Package the Booking execution board alongside bundled contracts",
+        "Exercise the actual package wrapper for contract, Stripe, task, and setup commands"
+      ],
+      "implementation": [
+        "tools/clis/maggie_booking.py",
+        "scripts/package-cli.mjs",
+        "packages/maggie-cli/bundled-contracts/maggiedash"
+      ],
+      "tests": [
+        "node packages/maggie-cli/bin/maggie.js booking contract",
+        "node packages/maggie-cli/bin/maggie.js booking stripe-audit",
+        "node packages/maggie-cli/bin/maggie.js booking tasks validate",
+        "node packages/maggie-cli/bin/maggie.js booking setup --project <host>",
+        "package Node/Python syntax checks",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "The npm CLI validates the current 47-route Booking contract from bundled-contracts",
+        "The npm CLI can validate Stripe and the packaged 87-task execution board",
+        "Source-checkout and npm-package path layouts both remain supported"
+      ]
+    },
+    {
+      "id": "BK-080",
+      "epic": "notifications",
+      "title": "Add tenant-scoped notification delivery management",
+      "repository": "both",
+      "dependsOn": ["BK-026", "BK-077"],
+      "status": "passed",
+      "plan": [
+        "Expose a redacted tenant-scoped notification list for delivery-state inspection",
+        "Allow owner/manager-only dead-letter replay with a required reason and idempotency key",
+        "Record replay event/audit evidence and keep recipient/provider secrets out of the dashboard",
+        "Synchronize the central source, ORA installation, contract, validators, and package docs"
+      ],
+      "implementation": [
+        "MaggieDash/backend/booking/postgres-core-repository.mjs",
+        "MaggieDash/backend/booking/route-handler.mjs",
+        "MaggieDash/booking/src/booking.tsx",
+        "ai-cmo-skills/contracts/maggiedash/booking-host-adapter-v1.json",
+        "ORA installed Booking workspace"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "ai-cmo-skills Booking CLI contract and Python tests",
+        "ORA Booking validators",
+        "ORA npm run build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md",
+        "docs/maggiedash-booking/HOST-ADAPTER.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "packages/maggie-cli/README.md"
+      ],
+      "acceptance": [
+        "Notification list results are tenant-scoped and omit raw recipient email/provider payloads",
+        "Only an authorized owner/manager can replay a dead-letter notification",
+        "Replay requires reason and idempotency, resets delivery state, and records event plus audit evidence",
+        "Central, installer contract, package bundle, ORA mirror, and build evidence agree on 47 manager routes"
+      ]
+    },
+    {
+      "id": "BK-081",
+      "epic": "authentication and bootstrap safety",
+      "title": "Harden first-owner registration",
+      "repository": "both",
+      "dependsOn": ["BK-058", "BK-071"],
+      "status": "passed",
+      "plan": [
+        "Serialize first-owner registration per project with a PostgreSQL transaction lock",
+        "Require the existing account password before granting an existing email the first owner role",
+        "Prevent registration from overwriting a password or re-enabling a disabled account",
+        "Synchronize the generic Astro host, ORA installation, validator, and integration docs"
+      ],
+      "implementation": [
+        "MaggieDash/adapters/astro/host/src/pages/api/maggie/auth/register.json.ts",
+        "MaggieDash/scripts/validate-astro-host-bootstrap.mjs",
+        "ORA src/pages/api/maggie/auth/register.json.ts"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "MaggieDash Astro host bootstrap validator",
+        "ORA npm run contract:check",
+        "ORA npm run build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/PROGRESS.md",
+        "ORA docs/maggie-booking-integration.md"
+      ],
+      "acceptance": [
+        "The owner count and membership write run in one transaction under a project-scoped advisory lock",
+        "Existing passwords are verified but never replaced by first-run registration",
+        "Disabled accounts cannot be silently re-enabled",
+        "The generic installer source and ORA host build contain the same safety boundary"
+      ]
+    },
+    {
+      "id": "BK-082",
+      "epic": "authentication and bootstrap safety",
+      "title": "Harden Booking access defaults and disabled-account boundary",
+      "repository": "both",
+      "dependsOn": ["BK-026", "BK-081"],
+      "status": "passed",
+      "plan": [
+        "Give invited staff and finance accounts safe role defaults while preserving explicit capability overrides",
+        "Reject disabled existing accounts during Booking access creation",
+        "Prevent the access endpoint from clearing disabled_at as a side effect",
+        "Synchronize the generic host, ORA endpoint, and Booking integration evidence"
+      ],
+      "implementation": [
+        "MaggieDash/adapters/astro/host/src/pages/api/maggie/booking/access.json.ts",
+        "ORA src/pages/api/maggie/booking/access.json.ts"
+      ],
+      "tests": [
+        "MaggieDash Astro host bootstrap validator",
+        "MaggieDash npm test",
+        "ORA npm run contract:check",
+        "ORA npm run build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/PROGRESS.md",
+        "ORA docs/maggie-booking-integration.md"
+      ],
+      "acceptance": [
+        "New staff and finance invitations persist their role defaults instead of an empty permission object",
+        "Explicit permission changes remain tenant-scoped and server-enforced",
+        "Disabled existing accounts are rejected and their disabled_at value is never cleared by access creation"
+      ]
+    },
+    {
+      "id": "BK-083",
+      "epic": "runtime and operations",
+      "title": "Add worker migration preflight",
+      "repository": "both",
+      "dependsOn": ["BK-030", "BK-070"],
+      "status": "passed",
+      "plan": [
+        "Check core, Booking, and access table presence before worker lock or repository reads",
+        "Return a bounded needs-migration report with a non-zero exit code",
+        "Keep the preflight read-only and free of secrets or raw database stack traces",
+        "Synchronize generic Astro and ORA worker entrypoints and operations docs"
+      ],
+      "implementation": [
+        "MaggieDash/adapters/astro/host/scripts/maggie-booking-worker.mjs",
+        "ORA scripts/maggie-booking-worker.mjs",
+        "MaggieDash/scripts/validate-astro-host-bootstrap.mjs"
+      ],
+      "tests": [
+        "node --check for both worker entrypoints",
+        "MaggieDash Astro bootstrap validator",
+        "ORA worker run against an unmigrated database",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/RUNTIME-OPERATIONS.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "ORA docs/maggie-booking-integration.md"
+      ],
+      "acceptance": [
+        "Missing core, Booking, or access tables produce status needs-migration and exit code 1",
+        "The worker does not acquire a lock, load state, or write business rows when migration is missing",
+        "The report contains no DATABASE_URL, provider secret, recipient, or raw stack trace"
+      ]
+    },
+    {
+      "id": "BK-084",
+      "epic": "quality and release evidence",
+      "title": "Synchronize browser evidence with the complete manager workspace",
+      "repository": "both",
+      "dependsOn": ["BK-080", "BK-083"],
+      "status": "passed",
+      "plan": [
+        "Compare the current manager navigation and screens with the browser evidence route inventory",
+        "Expand contract, capture, validator, and installed-host coverage to every current manager route",
+        "Add UI regression markers so new operational screens cannot silently disappear from the installed workspace"
+      ],
+      "implementation": [
+        "MaggieDash/contracts/booking-browser-evidence-v1.json",
+        "MaggieDash/scripts/capture-booking-browser-evidence.mjs",
+        "MaggieDash/scripts/validate-booking-browser-evidence.mjs",
+        "MaggieDash/scripts/validate-booking-ui.mjs",
+        "ORA installed maggiedash browser evidence and UI validators",
+        "ai-cmo-skills/tools/clis/maggie_booking.py"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "ORA npm run contract:check",
+        "ORA npm run build",
+        "ai-cmo-skills Booking Python tests",
+        "packaged Booking task validation",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "The browser contract requires all 15 current manager routes at mobile, tablet, and desktop viewports",
+        "Capture and validation both require 45 route/viewport screens with no console, request, or layout errors",
+        "Installed UI validation covers waitlist, notification, location, and report screen markers",
+        "A fresh authenticated host capture remains a separate production evidence requirement"
+      ]
+    },
+    {
+      "id": "BK-085",
+      "epic": "customer lifecycle and policy",
+      "title": "Make cancellation and refund policy tenant-configurable and booking-scoped",
+      "repository": "both",
+      "dependsOn": [
+        "BK-064",
+        "BK-084"
+      ],
+      "status": "passed",
+      "plan": [
+        "Add a normalized cancellation policy to catalogue configuration with deterministic defaults and validation",
+        "Copy the policy into every manager, customer, and waitlist-created booking so later edits cannot change historical intent",
+        "Enforce the configured customer cancellation cutoff in both the PostgreSQL and reference customer boundaries",
+        "Expose the policy controls in the installed manager catalogue screen and keep refund execution provider-neutral"
+      ],
+      "implementation": [
+        "MaggieDash/backend/booking/payment-gateway.mjs",
+        "MaggieDash/backend/booking/configuration.mjs",
+        "MaggieDash/backend/booking/postgres-core-repository.mjs",
+        "MaggieDash/backend/booking/postgres-customer-adapter.mjs",
+        "MaggieDash/backend/booking/reference-host.mjs",
+        "MaggieDash/backend/booking/customer-reference-host.mjs",
+        "MaggieDash/schema/maggie-booking-install.sql",
+        "MaggieDash/booking/src/booking.tsx",
+        "ORA installed Booking mirror and contract"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "ORA npm run contract:check",
+        "ORA npm run build",
+        "ORA Booking policy, customer, schema, and UI validators",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/PRD.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "Catalog configuration normalizes free, cutoff-window, and non-refundable modes with refund outcome and no-show fee fields",
+        "The normalized policy snapshot is persisted on manager, customer, and waitlist-converted bookings",
+        "Customer cancellation is rejected inside the configured cutoff in PostgreSQL and reference-host flows with an actionable conflict response",
+        "Provider refund execution remains an explicit Stripe/host operation; this task does not claim automatic refunds or live payment evidence",
+        "Migration, authenticated browser capture, worker scheduling, and live Resend/Stripe delivery remain separate host release gates"
+      ]
+    },
+    {
+      "id": "BK-086",
+      "epic": "calendar and availability operations",
+      "title": "Make calendar day and week views honor their requested venue-local range",
+      "repository": "both",
+      "dependsOn": [
+        "BK-084",
+        "BK-085"
+      ],
+      "status": "passed",
+      "plan": [
+        "Trace the manager Day/Week query through the route handler, PostgreSQL repository, reference host, and installed UI",
+        "Use a venue-timezone half-open range for day and Monday-to-Sunday week queries while preserving staff data scope",
+        "Filter reference-host fixtures by the same range and show an accurate period label in the manager calendar",
+        "Add regression coverage for day exclusion, week inclusion, and cross-day appointment boundaries"
+      ],
+      "implementation": [
+        "MaggieDash/backend/booking/postgres-core-repository.mjs",
+        "MaggieDash/backend/booking/reference-host.mjs",
+        "MaggieDash/booking/src/booking.tsx",
+        "MaggieDash/scripts/validate-booking-reference-host.mjs",
+        "MaggieDash/scripts/validate-booking-postgres-core-repository.mjs",
+        "ORA installed Booking mirror and validators"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "MaggieDash reference-host and PostgreSQL repository validators",
+        "ORA reference-host and PostgreSQL repository validators",
+        "ORA npm run contract:check",
+        "ORA npm run build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "Day view excludes appointments outside the selected venue-local calendar date",
+        "Week view returns the Monday-to-Sunday range containing the selected date and does not fall back to a single-day query",
+        "Staff sessions remain scoped to their assigned staff profile in both calendar modes",
+        "Reference and installed UI evidence cover the corrected response shape without weakening the production host evidence gate"
+      ]
+    },
+    {
+      "id": "BK-087",
+      "epic": "customer lifecycle and payment settlement",
+      "title": "Execute cancellation refunds through the provider boundary and Resend outbox",
+      "repository": "both",
+      "dependsOn": [
+        "BK-080",
+        "BK-085",
+        "BK-086"
+      ],
+      "status": "passed",
+      "plan": [
+        "Calculate a bounded refund settlement from the booking-scoped cancellation policy, captured attempts, and prior refunds",
+        "Run provider refunds after the lifecycle transaction with per-attempt idempotency and a manual_required fallback",
+        "Return a redacted settlement result to customer flows and queue payment.refunded only when a provider refund was accepted or is pending",
+        "Keep no-show fee calculation provider-neutral without enabling unsafe automatic off-session charging"
+      ],
+      "implementation": [
+        "MaggieDash/backend/booking/payment-gateway.mjs",
+        "MaggieDash/backend/booking/postgres-cancellation-settlement.mjs",
+        "MaggieDash/backend/booking/postgres-payment-adapter.mjs",
+        "MaggieDash/backend/booking/postgres-customer-adapter.mjs",
+        "MaggieDash/adapters/astro/host/src/lib/maggie/booking.ts",
+        "MaggieDash/adapters/astro/host/scripts/maggie-booking-worker.mjs",
+        "MaggieDash/scripts/validate-astro-host-bootstrap.mjs",
+        "ORA installed Booking mirror and Resend outbox wrapper"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "cancellation policy allocation and no-show fee regression",
+        "PostgreSQL customer cancellation refund settlement regression",
+        "ORA npm run contract:check",
+        "ORA npm run build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/PRD.md",
+        "docs/maggiedash-booking/PAYMENT-GATEWAY.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "Full and deposit refund policies allocate only the still-refundable captured amount and cannot exceed policy or payment limits",
+        "A cancelled booking remains cancelled if the provider is unavailable; the result is manual_required and does not claim a successful refund",
+        "Provider refund calls use booking/payment-attempt idempotency and customer retries do not create duplicate refunds",
+        "Accepted or pending refund outcomes queue one redacted payment.refunded email through the existing tenant-scoped Resend outbox",
+        "Generic Astro and ORA workers use a dedicated refund subject and abort hung Resend requests after the delivery timeout",
+        "No-show fee is reported as a bounded amount only; automatic off-session charging remains a separate provider-consent task",
+        "Database migration, live Stripe keys, authenticated browser capture, worker scheduling, and live Resend delivery remain host release gates"
+      ]
+    },
+    {
+      "id": "BK-088",
+      "epic": "manager exception handling",
+      "title": "Expose no-show fee review without automatic charging",
+      "repository": "both",
+      "dependsOn": [
+        "BK-087"
+      ],
+      "status": "passed",
+      "plan": [
+        "Return a redacted no-show settlement preview from the manager lifecycle transition",
+        "Mark the outcome review_required with a bounded policy-derived fee and no refund items",
+        "Keep the provider refund boundary completely unused for no-show transitions",
+        "Show the review state in the manager booking detail and mirror it in ORA"
+      ],
+      "implementation": [
+        "MaggieDash/backend/booking/postgres-cancellation-settlement.mjs",
+        "MaggieDash/backend/booking/service.mjs",
+        "MaggieDash/backend/booking/reference-host.mjs",
+        "MaggieDash/adapters/astro/host/src/lib/maggie/booking.ts",
+        "MaggieDash/booking/src/booking.tsx",
+        "MaggieDash/scripts/validate-booking-no-show-review.mjs",
+        "ORA installed Booking mirror and validators"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "no-show review validator",
+        "reference-host no-show transition regression",
+        "Astro/ORA TypeScript and build checks",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/PRD.md",
+        "docs/maggiedash-booking/PAYMENT-GATEWAY.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "A no-show transition returns review_required and the policy-derived noShowFeeMinor",
+        "No-show settlement returns zero refund amount and no refund items even when payment was captured",
+        "The injected refund provider is never called for a no-show transition",
+        "Manager UI visibly states that no automatic charge or refund was made",
+        "The behavior is covered by central and ORA validators without weakening production release gates"
+      ]
+    },
+    {
+      "id": "BK-089",
+      "epic": "access-control",
+      "title": "Make Booking team access an installable and verifiable contract",
+      "repository": "both",
+      "dependsOn": ["BK-082", "BK-084"],
+      "status": "passed",
+      "plan": [
+        "Define a versioned administrator access contract for email/password staff accounts, roles, permissions, invitations, password reset, and revocation",
+        "Include the access contract and validator in the MaggieDash distribution manifest and ai-cmo-skills package",
+        "Validate the generic Astro access route, Booking schema, Team access UI, Resend invitation seam, and disabled-account policy together",
+        "Expose a stable CLI access-contract check and include the capability in install and release gates"
+      ],
+      "implementation": [
+        "MaggieDash/contracts/booking-access-v1.json",
+        "MaggieDash/scripts/validate-booking-access.mjs",
+        "MaggieDash/maggiedash.json",
+        "MaggieDash/adapters/astro/host/src/pages/api/maggie/booking/access.json.ts",
+        "MaggieDash/booking/src/booking.tsx",
+        "contracts/maggiedash/booking-access-v1.json",
+        "tools/clis/maggie_booking.py"
+      ],
+      "tests": [
+        "npm run booking:access:test",
+        "MaggieDash npm test",
+        "maggie booking access-contract",
+        "maggie booking inspect --project <installed-project>",
+        "Python Booking CLI tests and packaged-contract validation"
+      ],
+      "docs": [
+        "MaggieDash/docs/BOOKING-HOST-ADAPTER.md",
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "A fresh Astro installation contains the access contract, access schema, generic access route, and Team access UI",
+        "Only an owner or administrator can create, update, reset, invite, or revoke Booking access",
+        "Roles manager/staff/finance and granular permissions are tenant-scoped and audited",
+        "Resend invitations use the host email/password flow and disabled accounts are never silently reactivated",
+        "The installed CLI can validate access independently before a real database or provider run"
+      ]
+    },
+    {
+      "id": "BK-090",
+      "epic": "access-control",
+      "title": "Make the reference host exercise Team access CRUD and role denial",
+      "repository": "MaggieDash",
+      "dependsOn": ["BK-089"],
+      "status": "passed",
+      "plan": [
+        "Add a deterministic in-memory access user fixture without passwords, raw tokens, or email payloads",
+        "Expose owner-only GET/POST/PATCH/DELETE access behavior to the reference host",
+        "Exercise invitation intent, permission update, revocation, audit, and staff denial in the reference-host validator",
+        "Keep the provider-neutral access fixture separate from the production PostgreSQL/Resend implementation"
+      ],
+      "implementation": [
+        "MaggieDash/backend/booking/reference-host.mjs",
+        "MaggieDash/scripts/validate-booking-reference-host.mjs",
+        "MaggieDash/fixtures/booking-host-state.v1.json"
+      ],
+      "tests": [
+        "node scripts/validate-booking-reference-host.mjs",
+        "MaggieDash npm test",
+        "secret/PII fixture scan"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "Owner fixture access can read, invite, update, and revoke a staff account",
+        "Staff fixture sessions receive 403 for access management",
+        "Invitation is represented only as a safe intent and never includes a password or raw token",
+        "Access mutations are audited and idempotent",
+        "The test remains independent from PostgreSQL, Stripe, and Resend network calls"
+      ]
+    },
+    {
+      "id": "BK-091",
+      "epic": "installation",
+      "title": "Make fresh Astro Booking installation dependency-complete",
+      "repository": "ai-cmo-skills",
+      "dependsOn": ["BK-078", "BK-089"],
+      "status": "passed",
+      "plan": [
+        "Detect the host project's existing npm, pnpm, yarn, or bun lockfile",
+        "Add only missing React, Phosphor, Tailwind, PostgreSQL, Stripe, and SSR adapter packages through the selected package manager",
+        "Keep dependency installation explicit and incompatible with read-only install modes",
+        "Cover idempotency, package-manager selection, and failure-safe output in the CLI tests"
+      ],
+      "implementation": [
+        "tools/clis/maggie_booking.py",
+        "tools/tests/test_maggie_booking.py",
+        "skills/maggie-booking/SKILL.md",
+        "docs/maggiedash-booking/SKILLS-AND-CLI.md"
+      ],
+      "tests": [
+        "python3 -m unittest tools.tests.test_maggie_booking -q",
+        "maggie booking tasks validate",
+        "packaged CLI install help and task validation",
+        "git diff --check"
+      ],
+      "docs": [
+        "README.md",
+        "packages/maggie-cli/README.md",
+        "packages/maggie-cli/README-zh-TW.md",
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "A fresh Astro host can opt into one-command dependency completion without replacing existing versions",
+        "A blank Astro host receives a server-rendered Node adapter/config while an existing deployment adapter remains host-owned",
+        "The selected package manager and missing package names are visible without printing secrets",
+        "No package install occurs during --dry-run or --diff",
+        "A project with all required packages is unchanged and no package-manager process runs"
+      ]
+    },
+    {
+      "id": "BK-092",
+      "epic": "notifications",
+      "title": "Add tenant-scoped Booking email template management",
+      "repository": "both",
+      "dependsOn": ["BK-080", "BK-091"],
+      "status": "passed",
+      "plan": [
+        "Define a versioned event-to-template contract for confirmation, reminder, reschedule, cancellation, refund, payment-action, and waitlist emails",
+        "Support safe tenant-scoped template overrides with an allowlisted variable renderer and the current generic fallback",
+        "Expose owner/manager template edit, preview, publish, and rollback actions without exposing recipients or provider secrets",
+        "Let the Resend worker resolve the published template and retain outbox idempotency, retries, and dead-letter behavior"
+      ],
+      "implementation": [
+        "MaggieDash/contracts/booking-email-templates-v1.json",
+        "MaggieDash/schema/maggie-booking-install.sql",
+        "MaggieDash/backend/booking/email-templates.mjs",
+        "MaggieDash/adapters/astro/host/src/pages/api/maggie/booking/email-templates.json.ts",
+        "MaggieDash/backend/booking/reference-host.mjs",
+    "MaggieDash/booking/src/booking.tsx",
+    "MaggieDash/adapters/astro/host/scripts/maggie-booking-worker.mjs",
+    "MaggieDash/backend/booking/postgres-worker-repository.mjs",
+    "MaggieDash/adapters/astro/host/src/lib/maggie/booking.ts",
+    "MaggieDash/schema/maggie-booking-install.sql",
+    "ai-cmo-skills/tools/clis/maggie_booking.py"
+      ],
+      "tests": [
+        "template contract validator",
+        "variable allowlist and HTML escaping tests",
+        "tenant/publish/rollback permission tests",
+    "Resend worker fallback and published-template tests",
+    "PostgreSQL notification-variable persistence regression",
+        "reference-host and ORA build regressions"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "Each supported Booking event has a published tenant template or an explicit generic fallback",
+        "Only allowlisted booking variables can be rendered and all user-controlled values are escaped",
+        "Template mutations are tenant-scoped, permission-checked, audited, idempotent, and reversible",
+        "Resend delivery continues to use the existing secret-safe outbox and dead-letter recovery path",
+        "Preview and provider send paths never expose API keys, recipient email addresses, or raw customer tokens"
+      ]
+    },
+    {
+      "id": "BK-093",
+      "epic": "configuration",
+      "title": "Expose complete Booking defaults in manager Settings",
+      "repository": "both",
+      "dependsOn": ["BK-023", "BK-092"],
+      "status": "passed",
+      "plan": [
+        "Reuse the existing audited settings endpoint rather than introducing a second configuration store",
+        "Expose venue currency, booking-enabled state, and payment capture policy alongside timezone",
+        "Keep provider credentials and Stripe/Resend secrets outside the dashboard and browser bundle",
+        "Synchronize the central workspace, ORA installed mirror, and UI regression markers"
+      ],
+      "implementation": [
+        "MaggieDash/booking/src/booking.tsx",
+        "MaggieDash/scripts/validate-booking-ui.mjs",
+        "ORA/_maggie/booking/booking.tsx",
+        "ORA/maggiedash/scripts/validate-booking-ui.mjs"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "central and ORA Booking UI validators",
+        "central and ORA reference-host settings regression validators",
+        "ORA contract check and Astro build",
+        "git diff --check"
+      ],
+      "docs": [
+        "MaggieDash/README.md",
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "Settings loads existing currency, booking-enabled, and capture-policy values",
+        "Saving settings sends all four supported defaults through the existing idempotent audited endpoint",
+        "Disabling new bookings keeps history readable while the backend rejects new holds and bookings",
+        "No provider credentials are accepted or rendered by the new controls",
+        "Central and ORA installed workspace validators enforce the new settings surface"
+      ]
+    },
+    {
+      "id": "BK-094",
+      "epic": "catalogue and monetization",
+      "title": "Add tenant-scoped treatment package catalogue",
+      "repository": "both",
+      "dependsOn": ["BK-023", "BK-093"],
+      "status": "passed",
+      "plan": [
+        "Add tenant-scoped package and package-item tables with price, currency, optional expiry, active state, and included service-variant quantities",
+        "Expose idempotent/audited manager read and write routes and reject cross-tenant or inactive service-variant references",
+        "Add the Packages manager screen and deterministic reference-host fixture without exposing customer balances or payment secrets",
+        "Synchronize central MaggieDash, the ORA installed mirror, the detailed/compact contracts, validators, and booking docs"
+      ],
+      "implementation": [
+        "MaggieDash/schema/maggie-booking-install.sql",
+        "MaggieDash/backend/booking/postgres-core-repository.mjs",
+        "MaggieDash/backend/booking/service.mjs",
+        "MaggieDash/backend/booking/route-handler.mjs",
+        "MaggieDash/backend/booking/reference-host.mjs",
+        "MaggieDash/booking/src/booking.tsx",
+        "MaggieDash/contracts/booking-host-adapter-v1.json",
+        "MaggieDash/contracts/booking-access-v1.json",
+        "ai-cmo-skills/contracts/maggiedash/booking-host-adapter-v1.json",
+        "ORA installed Booking mirror"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "central and ORA schema, service, route, reference-host, and UI validators",
+        "central and ORA contract checks and Astro build",
+        "ai-cmo-skills Booking Python tests and bundled contract validation",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/HOST-ADAPTER.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "A manager can list and idempotently create/update a package within the current tenant",
+        "Package items can reference only active service variants in the same tenant and quantities are positive integers",
+        "All package mutations emit an audit event and the UI supports search plus edit without provider credentials",
+        "Central and ORA mirrors plus compact/detailed contracts agree on the two package endpoints",
+        "The docs explicitly keep Stripe package purchase and package refund settlement outside this catalogue task"
+      ]
+    },
+    {
+      "id": "BK-095",
+      "epic": "catalogue and monetization",
+      "title": "Add customer package balances and redemption",
+      "repository": "both",
+      "dependsOn": ["BK-094", "BK-087"],
+      "status": "passed",
+      "plan": [
+        "Add tenant-scoped customer package entitlement, per-variant balance, and redemption-ledger tables",
+        "Expose idempotent audited manager grant and balance-read routes with customer and tenant scope",
+        "Lock entitlement rows during manager booking creation, redeem matching treatment visits atomically, enforce expiry/exhaustion, and return the package settlement",
+        "Add the Packages balance panel, reference-host regression, synchronized ORA mirror, compact/detailed contracts, validators, and docs"
+      ],
+      "implementation": [
+        "MaggieDash/schema/maggie-booking-install.sql",
+        "MaggieDash/backend/booking/postgres-core-repository.mjs",
+        "MaggieDash/backend/booking/service.mjs",
+        "MaggieDash/backend/booking/route-handler.mjs",
+        "MaggieDash/backend/booking/reference-host.mjs",
+        "MaggieDash/booking/src/booking.tsx",
+        "MaggieDash/contracts/booking-host-adapter-v1.json",
+        "ai-cmo-skills/contracts/maggiedash/booking-host-adapter-v1.json",
+        "ORA installed Booking mirror"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "reference-host grant, balance, expiry, and redemption regression",
+        "central and ORA schema, service, route, contract, and UI validators",
+        "ai-cmo-skills Booking Python tests and bundled contract validation"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/HOST-ADAPTER.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md"
+      ],
+      "acceptance": [
+        "A manager can grant an active package to an existing customer within the current tenant and read remaining quantities",
+        "Expired and exhausted entitlements cannot be redeemed",
+        "Manager booking creation locks and decrements matching package quantities in the same transaction, records a redemption, and zero-prices covered segments",
+        "Reference host, central/ORA mirrors, and compact/detailed contracts agree on the two entitlement routes",
+        "The docs distinguish implemented manual entitlement/redemption from future Stripe package purchase and refund settlement"
+      ]
+    },
+    {
+      "id": "BK-096",
+      "epic": "catalogue and monetization",
+      "title": "Add customer package checkout and refund settlement",
+      "repository": "both",
+      "dependsOn": [
+        "BK-095",
+        "BK-087"
+      ],
+      "status": "passed",
+      "plan": [
+        "Add a separate package purchase and refund aggregate with idempotency, provider references, and entitlement linkage",
+        "Expose public package checkout and payment-return routes with safe DTOs and a customer purchase form",
+        "Reconcile package provider status through Stripe metadata/webhooks and transactionally fulfill customer package balances",
+        "Expose manager package purchase listing and guarded refund actions, blocking refunds after redeemed visits",
+        "Synchronize central/ORA sources, compact/detailed/bundled contracts, validators, docs, and regression fixtures"
+      ],
+      "implementation": [
+        "MaggieDash/schema/maggie-booking-install.sql",
+        "MaggieDash/backend/booking/postgres-payment-adapter.mjs",
+        "MaggieDash/backend/booking/payment-webhook.mjs",
+        "MaggieDash/backend/booking/customer-flow.mjs",
+        "MaggieDash/backend/booking/customer-route-handler.mjs",
+        "MaggieDash/backend/booking/customer-reference-host.mjs",
+        "MaggieDash/backend/booking/reference-host.mjs",
+        "MaggieDash/backend/booking/route-handler.mjs",
+        "MaggieDash/booking/src/customer.tsx",
+        "MaggieDash/booking/src/booking.tsx",
+        "MaggieDash/adapters/astro/host/src/lib/maggie/booking.ts",
+        "ai-cmo-skills/contracts/maggiedash/booking-host-adapter-v1.json",
+        "ORA installed Booking mirror"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "central and ORA package checkout, payment-return, schema, webhook, reference-host, and UI validators",
+        "ai-cmo-skills Booking Python tests and bundled contract validation",
+        "ORA contract check and Astro build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/HOST-ADAPTER.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md",
+        "docs/maggiedash-booking/EXECUTION-BOARD.json"
+      ],
+      "acceptance": [
+        "A public customer can start an idempotent package checkout and recover its pending or confirmed state with a token-bound return URL",
+        "A verified Stripe package event updates the separate purchase aggregate and creates one customer entitlement with the package balances",
+        "A manager can list package purchases and request a provider refund while a redeemed purchase is rejected",
+        "Central, ORA, and ai-cmo-skills contracts agree on 47 manager endpoints and 11 public customer methods",
+        "Local regression gates pass; real database migration, Stripe webhook, Resend delivery, and authenticated staging evidence remain explicit host gates"
+      ]
+    },
+    {
+      "id": "BK-097",
+      "epic": "notifications and monetization",
+      "title": "Add package lifecycle Resend notifications",
+      "repository": "both",
+      "dependsOn": [
+        "BK-096",
+        "BK-092"
+      ],
+      "status": "passed",
+      "plan": [
+        "Add package purchase confirmation and refund events to the allowlisted email-template contract",
+        "Queue idempotent tenant-scoped notifications linked to package purchases after verified Stripe state transitions",
+        "Resolve package recipient, name, amount, and expiry at worker delivery time without booking-only manage links",
+        "Synchronize the PostgreSQL schema, repositories, generic host worker, ORA worker, validators, and docs"
+      ],
+      "implementation": [
+        "MaggieDash/schema/maggie-booking-install.sql",
+        "MaggieDash/backend/booking/email-templates.mjs",
+        "MaggieDash/backend/booking/notifications.mjs",
+        "MaggieDash/backend/booking/postgres-worker-repository.mjs",
+        "MaggieDash/adapters/astro/host/src/lib/maggie/booking.ts",
+        "MaggieDash/adapters/astro/host/scripts/maggie-booking-worker.mjs",
+        "ORA installed Booking mirror"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "package template render and notification outbox regression",
+        "ORA contract check and Astro build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/DATA-MODEL.md",
+        "docs/maggiedash-booking/ORAWELLNESS-INTEGRATION-AUDIT.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md"
+      ],
+      "acceptance": [
+        "A verified succeeded package purchase queues one confirmation notification with package_purchase_id",
+        "A verified package refund queues one refund notification and remains idempotent on replay",
+        "Stored notifications contain only recipient_hash, never the recipient address",
+        "Generic and ORA workers can render package events without appointment manage links",
+        "Real Stripe webhook, Resend delivery, and authenticated staging evidence remain explicit host gates"
+      ]
+    },
+    {
+      "id": "BK-098",
+      "epic": "customer-surface and monetization",
+      "title": "Add public customer package redemption",
+      "repository": "both",
+      "dependsOn": ["BK-095", "BK-096"],
+      "status": "passed",
+      "plan": [
+        "Carry a confirmed package entitlement into the public booking page without exposing customer credentials",
+        "Bind the entitlement to the tenant customer record and persist it on the booking hold",
+        "Lock the entitlement and item balances while converting the hold, writing the redemption ledger, and updating exhausted status",
+        "Expose a safe package summary and a deterministic reference-host regression across central and ORA mirrors"
+      ],
+      "implementation": [
+        "MaggieDash/schema/maggie-booking-install.sql",
+        "MaggieDash/backend/booking/customer-flow.mjs",
+        "MaggieDash/backend/booking/postgres-customer-adapter.mjs",
+        "MaggieDash/backend/booking/postgres-core-repository.mjs",
+        "MaggieDash/backend/booking/customer-reference-host.mjs",
+        "MaggieDash/backend/booking/reference-host.mjs",
+        "MaggieDash/booking/src/customer.tsx",
+        "ORA installed Booking mirror"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "public reference-host package hold/checkout regression",
+        "customer DTO/UI and PostgreSQL adapter syntax gates",
+        "ORA contract check and Astro build",
+        "git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/DATA-FLOW.md",
+        "docs/maggiedash-booking/DATA-MODEL.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md"
+      ],
+      "acceptance": [
+        "A confirmed package return can open the public booking page with an opaque entitlement identifier",
+        "The server rejects cross-customer, expired, inactive, currency-mismatched, and insufficient-credit redemption",
+        "A fully covered public booking is confirmed at zero price and has one auditable redemption per treatment",
+        "Hold and checkout idempotency remain safe and central/ORA mirrors stay synchronized",
+        "Memberships, gift cards, recurring appointments, and automatic no-show charging remain explicitly out of scope"
+      ]
+    },
+    {
+      "id": "BK-099",
+      "epic": "customer-surface and monetization",
+      "title": "Restore package credits on cancellation",
+      "repository": "both",
+      "dependsOn": ["BK-095", "BK-098"],
+      "status": "passed",
+      "plan": [
+        "Add an additive package-redemption reversal state without deleting the original ledger row",
+        "Restore each active per-variant credit in the same transaction as a successful cancellation",
+        "Keep completed and no-show package visits consumed and leave an audit/event trail",
+        "Synchronize the deterministic manager/customer hosts, ORA mirror, schema, and docs"
+      ],
+      "implementation": [
+        "MaggieDash/schema/maggie-booking-install.sql",
+        "MaggieDash/backend/booking/postgres-core-repository.mjs",
+        "MaggieDash/backend/booking/reference-host.mjs",
+        "MaggieDash/backend/booking/customer-reference-host.mjs",
+        "ORA installed Booking mirror"
+      ],
+  "tests": [
+    "MaggieDash npm test",
+    "manager and public customer reference-host cancellation-credit regressions",
+    "disposable PostgreSQL integration including package-credit restoration",
+    "schema validation and PostgreSQL query syntax checks",
+        "ORA contract check and Astro build",
+        "ai-cmo task validation and git diff --check"
+      ],
+      "docs": [
+        "docs/maggiedash-booking/README.md",
+        "docs/maggiedash-booking/DATA-FLOW.md",
+        "docs/maggiedash-booking/DATA-MODEL.md",
+        "docs/maggiedash-booking/USER-JOURNEYS.md",
+        "docs/maggiedash-booking/PROGRESS.md",
+        "docs/maggiedash-booking/TASKS.md"
+      ],
+      "acceptance": [
+        "An eligible manager or customer cancellation restores each active package redemption exactly once",
+        "The redemption row is marked reversed with reason/time/actor and the entitlement status is recalculated safely",
+        "Inconsistent balances fail closed and the transaction cannot partially restore credit",
+        "Completed and no-show bookings do not restore credits",
+        "Real database migration and authenticated staging evidence remain explicit host gates"
+      ]
+    },
+    {
+      "id": "BK-100",
+      "epic": "payments and first-run setup",
+      "title": "Allow secure dashboard-managed Stripe connection",
+      "repository": "both",
+      "dependsOn": ["BK-064", "BK-065"],
+      "status": "passed",
+      "plan": [
+        "Accept a Stripe secret key and webhook secret only from an owner or manager over the authenticated Booking endpoint",
+        "Verify the credentials with Stripe before persistence and retain deployment secret precedence",
+        "Seal dashboard-managed credentials with AES-256-GCM using a key derived from BOOKING_TOKEN_SECRET",
+        "Synchronize the generic Astro host, ORA mirror, schema, UI, CLI checklist, and integration documentation"
+      ],
+      "implementation": [
+        "MaggieDash/adapters/astro/host/src/lib/maggie/booking.ts",
+        "MaggieDash/schema/maggie-booking-install.sql",
+        "MaggieDash/booking/src/booking.tsx",
+        "ORA src/lib/maggie/booking.ts and _maggie/booking/booking.tsx",
+        "ORA maggiedash schema mirrors",
+        "ai-cmo-skills/tools/clis/maggie_booking.py"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "MaggieDash Astro host bootstrap and schema validators",
+        "ORA contract check and Astro build",
+        "ai-cmo-skills Booking unit tests, packaged inspect/setup, and task validation",
+        "git diff --check"
+      ],
+      "docs": [
+        "MaggieDash/docs/STRIPE-INTEGRATION.md",
+        "MaggieDash/backend/booking/README.md",
+        "ai-cmo-skills/docs/maggiedash-booking/README.md",
+        "ai-cmo-skills/docs/maggiedash-booking/HOST-ADAPTER.md",
+        "ai-cmo-skills/docs/maggiedash-booking/SKILLS-AND-CLI.md",
+        "ai-cmo-skills/docs/maggiedash-booking/PROGRESS.md",
+        "ORA docs/maggie-booking-integration.md"
+      ],
+      "acceptance": [
+        "A signed-in owner or manager can submit both Stripe credentials from Booking Overview and receive only a redacted verification result",
+        "Invalid credentials are rejected before storage and finance/staff cannot add provider credentials",
+        "Dashboard credentials are encrypted at rest, never returned or logged, and are loaded by payments/webhooks/workers after restart",
+        "Deployment STRIPE_SECRET_KEY remains authoritative and rejects dashboard override attempts",
+        "Production migration, live Stripe verification, and scheduler enablement remain explicit host evidence gates"
+      ]
+    },
+    {
+      "id": "BK-101",
+      "epic": "access-control",
+      "title": "Complete server-enforced Booking capability permissions",
+      "repository": "both",
+      "dependsOn": ["BK-089", "BK-100"],
+      "status": "passed",
+      "plan": [
+        "Reconcile the access permission registry with every manager route capability",
+        "Allow explicitly granted staff capabilities while retaining safe role defaults for legacy rows",
+        "Synchronize generic Astro, ORA, reference-host, contract, CLI, and documentation surfaces",
+        "Add regression coverage for scoped customer, location, waitlist, and notification reads"
+      ],
+      "implementation": [
+        "MaggieDash/backend/booking/route-handler.mjs",
+        "MaggieDash/adapters/astro/host/src/pages/api/maggie/booking/access.json.ts",
+        "MaggieDash/backend/booking/reference-host.mjs",
+        "MaggieDash/contracts/booking-access-v1.json",
+        "ORA installed Booking mirror",
+        "ai-cmo-skills/tools/clis/maggie_booking.py"
+      ],
+      "tests": [
+        "MaggieDash npm test",
+        "Booking access contract validator",
+        "scoped staff route-handler regression",
+        "ORA contract check and Astro build",
+        "git diff --check"
+      ],
+      "docs": [
+        "MaggieDash/docs/BOOKING-HOST-ADAPTER.md",
+        "ai-cmo-skills/docs/maggiedash-booking/HOST-ADAPTER.md",
+        "ai-cmo-skills/docs/maggiedash-booking/PROGRESS.md",
+        "ORA docs/maggie-booking-integration.md"
+      ],
+      "acceptance": [
+        "The administrator permission list exactly matches the route capability registry",
+        "A staff or finance account without permissions receives only its safe role defaults",
+        "An explicitly granted staff capability is honored by the server for the corresponding read route",
+        "Central and ORA mirrors return the same permission registry",
+        "Production migration and authenticated staging evidence remain explicit host gates"
+      ]
+    },
+    {
+      "id": "BK-102",
+      "epic": "payments",
+      "title": "Persist provider customer identity for real Stripe payments",
+      "repository": "both",
+      "dependsOn": ["BK-025", "BK-100"],
+      "status": "passed",
+      "plan": [
+        "Add a tenant-scoped provider customer reference to the Booking customer schema",
+        "Resolve or idempotently create Stripe Customer objects at the host boundary",
+        "Use the resolved provider ID for Checkout, PaymentIntent, and SetupIntent requests",
+        "Mirror the adapter, schema, validator, and docs in ORA without exposing credentials"
+      ],
+      "implementation": [
+        "MaggieDash/backend/booking/stripe-adapter.mjs",
+        "MaggieDash/adapters/astro/host/src/lib/maggie/booking.ts",
+        "MaggieDash/schema/maggie-booking-install.sql",
+        "ORA installed Booking mirror",
+        "MaggieDash/scripts/validate-stripe-adapter.mjs"
+      ],
+      "tests": [
+        "MaggieDash Stripe adapter validator",
+        "ORA Stripe adapter validator",
+        "MaggieDash npm test",
+        "ORA contract check and Astro build",
+        "git diff --check"
+      ],
+      "docs": [
+        "MaggieDash/docs/STRIPE-INTEGRATION.md",
+        "ai-cmo-skills/docs/maggiedash-booking/PROGRESS.md",
+        "ORA docs/maggie-booking-integration.md"
+      ],
+      "acceptance": [
+        "A local Booking customer UUID is never sent to Stripe as a cus_* reference",
+        "Concurrent retries use a stable Stripe idempotency key and persist the returned provider customer ID",
+        "Provider customer references remain tenant-scoped and are not exposed in public DTOs",
+        "Central and ORA adapter/schema/validator surfaces remain behaviorally aligned",
+        "Live Stripe verification and production migration remain explicit host evidence gates"
+      ]
+    },
+    {
+      "id": "BK-103",
+      "epic": "payments",
+      "title": "Add consented Stripe no-show fee charging",
+      "repository": "both",
+      "dependsOn": ["BK-088", "BK-102"],
+      "status": "passed",
+      "plan": [
+        "Use a policy-derived fee and require explicit manager or finance confirmation",
+        "Charge only through Stripe off-session PaymentIntent with a saved consented payment method",
+        "Persist an adjustment payment attempt, audit/event evidence, and idempotent replay state",
+        "Notify the customer through the existing Resend outbox and mirror the flow in ORA"
+      ],
+      "implementation": [
+        "MaggieDash/backend/booking/postgres-payment-adapter.mjs",
+        "MaggieDash/backend/booking/stripe-adapter.mjs",
+        "MaggieDash/backend/booking/route-handler.mjs",
+        "MaggieDash/adapters/astro/host/src/lib/maggie/booking.ts",
+        "MaggieDash/booking/src/booking.tsx",
+        "MaggieDash/booking/src/customer.tsx",
+        "ORA installed Booking mirror",
+        "ai-cmo-skills/contracts/maggiedash/booking-host-adapter-v1.json"
+      ],
+      "tests": [
+        "Stripe adapter saved-payment and off-session conformance",
+        "manager route/reference-host contract coverage",
+        "MaggieDash npm test",
+        "ORA contract check and Astro build",
+        "git diff --check"
+      ],
+      "docs": [
+        "MaggieDash/docs/STRIPE-INTEGRATION.md",
+        "MaggieDash/docs/BOOKING-HOST-ADAPTER.md",
+        "ai-cmo-skills/docs/maggiedash-booking/HOST-ADAPTER.md",
+        "ai-cmo-skills/docs/maggiedash-booking/PROGRESS.md",
+        "ORA docs/maggie-booking-integration.md"
+      ],
+      "acceptance": [
+        "No-show transition remains review-only until a separate explicit charge action is confirmed",
+        "The charge is rejected without a saved provider payment method, customer consent, or verified off-session capability",
+        "Successful/pending/failed provider outcomes are persisted as adjustment attempts with idempotent replay and audit evidence",
+        "Resend notification is queued only after a successful no-show fee charge",
+        "Production schema migration, Stripe verification, webhook setup, and worker scheduling remain explicit host gates"
+      ]
+    }
+  ]
+}