Full Development Plan

                          ┌─────────── CLOUDFLARE ───────────┐
                          │  DNS · CDN · WAF · DDoS         │
                          └──────────────┬──────────────────┘
                                         │
              ┌──────────────────────────┼──────────────────────────┐
              ▼                          ▼                          ▼
   ┌──────────────────┐  ┌──────────────────┐  ┌──────────────────┐
   │  ANGULAR SPA     │  │  NODE.JS API     │  │  ADMIN PANEL     │
   │  (ao-web)        │  │  (ao-api)        │  │  (ao-admin)      │
   │  Azure Static    │  │  Azure App Svc   │  │  Azure Static    │
   │  Angular 19      │  │  Express.js      │  │  Angular 19      │
   │  Material + SCSS │  │  TypeScript      │  │  PrimeNG Tables  │
   │  NgRx Signals    │  │  Mongoose        │  │  Material        │
   └──────────────────┘  └────────┬─────────┘  └──────────────────┘
                                         │
                    ┌────────────────────┼────────────────────┐
                    ▼                    ▼                    ▼
         ┌──────────────┐  ┌──────────────┐  ┌──────────────────┐
         │  MongoDB     │  │  Azure Blob  │  │  Azure Comms     │
         │  Atlas /     │  │  Storage     │  │  Services        │
         │  Cosmos DB   │  │  (files)     │  │ (Email,SMS,WA)   │
         └──────────────┘  └──────────────┘  └──────────────────┘

/                                   → Home
├── /trips                          → All Trips (Listing + Search + Filter)
│   ├── /trips/fixed-departures     → Fixed Departures
│   ├── /trips/road-trips-india     → Road Trips in India
│   ├── /trips/supercar-drives      → Supercar Drives
│   ├── /trips/ao-experiences       → AO Experiences
│   └── /trips/:slug               → Trip Detail (#overview #itinerary #faq #enquire)
├── /about                          → About Us
│   ├── /about/our-story            → Our Story
│   ├── /about/our-team             → Team
│   ├── /about/testimonials         → Testimonials
│   └── /about/careers              → Careers
├── /resources
│   ├── /resources/blog             → Blog listing
│   ├── /resources/blog/:slug       → Blog post
│   ├── /resources/in-the-news      → Press / Media
│   ├── /resources/travel-guides    → Travel Guides
│   └── /resources/faq              → Global FAQ
├── /book/:tripSlug                 → Booking Flow (multi-step)
├── /account                        → User Account (auth guard)
│   ├── /account/bookings           → My Bookings
│   ├── /account/wishlist           → Saved Trips
│   └── /account/profile            → Profile Settings
├── /auth                           → Login / Register / Password Reset
├── /legal                          → Privacy · Terms · Cancellation
│
│   ADMIN (admin.adventuresoverland.com)
└── /admin                          → Dashboard · Trips · Bookings · Enquiries · ...

core/
  auth/           auth.service · auth.guard · auth.interceptor
  api/            trip.service · booking.service · enquiry.service · content.service
  error.interceptor · seo.service · breakpoint.service

shared/
  components/     header · footer · mobile-nav · image-carousel · trip-card
                    category-tabs · date-chips · cta-section · testimonial-card
                    breadcrumbs · search-autocomplete · gallery-lightbox
                    icon-info-row · accordion-group · lead-capture-dialog
                    sticky-price-bar · loading-skeleton · brand-value-card
  pipes/          currency · truncate · date-range
  directives/     lazy-image · scroll-spy · click-outside

store/            auth.store · trip-filter.store · wishlist.store · booking.store · ui.store

features/         (all lazy-loaded)
  home/           Home page
  trips/          trip-listing · category-landing · trip-detail · filter-panel
  booking/        booking-wizard · step-date · step-travelers · step-addons · step-review
  account/        my-bookings · wishlist · profile
  auth/           login · register · forgot-password
  about/          About Us pages
  resources/      blog-listing · blog-detail
  contact/        Contact page
  legal/          Privacy · Terms · Cancellation

config/         db · cloudinary · azure-blob · passport · razorpay · env (Zod)

models/         user · trip · booking · enquiry · testimonial · blog-post · faq · newsletter · team · coupon

routes/         trip · booking · payment · enquiry · auth · user · wishlist · search · content · upload · newsletter
  admin/        admin-trip · admin-booking · admin-enquiry · admin-content · admin-user · admin-analytics

controllers/    Route handlers (mirrors routes structure)

services/       trip · booking · payment · pricing · email · sms · whatsapp · search · upload · analytics

middleware/     auth · admin · validate (Zod) · rate-limit · error

validators/     Zod schemas: trip · booking · enquiry · auth · common

jobs/           trip-reminder (7-day) · slot-status (auto-update) · report (weekly summary)

utils/          jwt · password (bcrypt) · slug · pagination · booking-number (AO-2026-00001)

types/          trip.types · booking.types · user.types · api.types

{
  slug: String,               // unique, indexed — "ladakh-expedition"
  name: String,               // "Ladakh Expedition"
  category: "world_series" | "road_trips_india" | "supercar_drives" | "ao_experiences",
  badge: String,              // "Trending", "Limited seats"
  heroImages: [String],       // Cloudinary URLs
  duration: { nights: Number, days: Number },
  cost: { amount: Number, currency: "INR", emiAvailable: Boolean },
  tripType: "adventure" | "leisure" | "short_trip",
  experienceLevel: "beginner" | "intermediate" | "experienced",
  driveType: "self_drive" | "assisted",

  // Embedded subdocuments
  dates: [{ startDate, endDate, slotsTotal, slotsBooked, status: "open" | "filling_fast" | "sold_out" }],
  itinerary: [{ dayNumber, title, description, images, activities, distance }],
  faqs: [{ question, answer, sortOrder }],
  seo: { metaTitle, metaDesc, ogImage }
}

{
  bookingNumber: "AO-2026-00001",
  userId: ObjectId,  tripId: ObjectId,  tripDateId: ObjectId,
  tripSnapshot: { name, slug, startDate, endDate, heroImage },
  travelers: [{ name, age, idType: "passport" | "aadhar", idNumber }],
  addOns: [{ name, price }],
  pricing: { basePerPerson, travelerCount, addOnsTotal, subtotal, gst, tcs, couponDiscount, total },
  status: "pending" | "confirmed" | "cancelled" | "completed",
  payment: { razorpayOrderId, razorpayPaymentId, method, paidAt }
}

── PUBLIC (no auth) ──────────────────────────────────────────
GET    /v1/trips                     → List trips (filter, sort, paginate, search)
GET    /v1/trips/categories          → Categories with counts
GET    /v1/trips/:slug               → Trip detail (full + itinerary + FAQs)
GET    /v1/trips/:slug/dates         → Available dates with slot availability
GET    /v1/trips/:slug/related       → Related trips
GET    /v1/search?q=ladakh           → Full-text search (trips, blog)
GET    /v1/content/testimonials      → Testimonials (paginated)
GET    /v1/content/blog              → Blog posts (by tag)
GET    /v1/content/blog/:slug        → Single blog post
POST   /v1/enquiries                 → Submit enquiry
POST   /v1/leads/brochure            → Brochure lead capture
POST   /v1/newsletter                → Newsletter signup

── AUTH ──────────────────────────────────────────────────────
POST   /v1/auth/register             → Create account
POST   /v1/auth/login                → Login (returns JWT)
POST   /v1/auth/google               → Google OAuth
POST   /v1/auth/forgot-password      → Send reset email
POST   /v1/auth/refresh              → Refresh JWT

── PROTECTED (JWT required) ─────────────────────────────────
GET    /v1/users/profile             → Get / update profile
POST   /v1/wishlist/:tripId          → Add / remove wishlist
POST   /v1/bookings                  → Create booking
GET    /v1/bookings                  → User's bookings
POST   /v1/payments/verify           → Verify Razorpay signature

── ADMIN (JWT + role=ADMIN) ─────────────────────────────────
GET    /v1/admin/dashboard           → Stats + charts
CRUD   /v1/admin/trips               → Trip management
CRUD   /v1/admin/bookings            → Booking management + CSV export
CRUD   /v1/admin/enquiries           → Enquiry management
CRUD   /v1/admin/testimonials|blog|faq|team|users

Angular SPA ──(credentials)──→ Node.js API ──(verify)──→ MongoDB
                                      │
                                      ├── Issue JWT (access + refresh)
                                      │
Angular SPA ←──(JWT in response)──←──┘
     │
     ├── Store access token in memory (AuthStore)
     ├── Store refresh token in httpOnly cookie (Set-Cookie by API)
     └── Attach access token via HttpInterceptor on every API call

Angular SPA                    Node.js API                  Razorpay
    │                                │                              │
    │──POST /v1/bookings──────────→  │──Create booking (pending)──→ │
    │                                │──Create Razorpay order─────→ │
    │  ←──orderId + amount────────── │  ←──order_id──────────────── │
    │                                │                              │
    │──Open Razorpay checkout────────────────────────────────────→  │
    │  ←──paymentId + signature──────────────────────────────────── │
    │                                │                              │
    │──POST /v1/payments/verify───→  │──Verify HMAC signature──→   │
    │                                │──Update booking → confirmed  │
    │  ←──Booking confirmed──────    │──Send confirmation (email+WA+SMS) │

Base Price     trip.cost.amount (per person, in paise)
× Travelers    count
+ Add-ons      sum of selected add-on prices
= Subtotal
+ GST          5% of subtotal
+ TCS          5% (domestic) or 20% (international, above ₹7L)
= Gross Total
− Coupon       percentage or fixed discount (capped at maxDiscount)
= Payable

Resource Group: rg-adventures-overland-prod
├── Static Web App:     ao-web-prod           (Angular SPA + Universal SSR)
├── Static Web App:     ao-admin-prod         (Admin Angular SPA)
├── App Service:        ao-api-prod           (Node.js API, Linux, B2)
├── App Service Plan:   asp-ao-prod           (B2 tier, auto-scale 1–4)
├── Blob Storage:       aofilesprod           (brochures, uploads)
├── Key Vault:          kv-ao-prod            (JWT_SECRET, DB_URI, RAZORPAY_KEY)
├── Communication Svc:  acs-ao-prod           (email + SMS)
├── WhatsApp API:       Meta Cloud API        (WhatsApp Business messaging)
└── App Insights:      ai-ao-prod            (APM, logging, metrics)

External Services:
├── MongoDB Atlas      ao-production cluster  (M10+, Azure East US)
├── Cloudinary         ao-prod account       (image CDN)
├── Cloudflare         adventuresoverland.com (DNS, CDN, WAF, SSL)
├── Razorpay           production account    (payments)
└── Sentry             ao-prod project       (error tracking)