ZoomCab — Production-Grade Taxi Hailing Platform

Three apps. One backend. Realtime end-to-end.

ZoomCab is a complete ride-hailing template built the way a real launch needs it: Laravel 11 + Filament v3 admin, a Flutter rider app, a Flutter driver app, hardened authentication, KYC, transactional email, live chat, payments, and a paranoid security review pass already done.

No half-finished screens. No stubs marked TODO. No placeholder Stripe button. The platform boots, the migrations seed, the apps build, the admin panel signs you in, and a rider can request a ride that a driver actually receives over Pusher.

---

What's in the box

backend/ — Laravel 11 + Filament v3

• REST API at /api/v1, admin panel at /admin
• Strict Eloquent mode in non-prod (lazy-load violations throw, never silently work)
• Pusher Channels for realtime (ride offered, accepted, started, completed, chat, location)
• Stripe payments with webhook signature verification
• Filament resources for users, drivers, rides, fares, promos, service types
• Atomic ride-accept service (DispatchService::accept) — row-locked, first-driver-wins
• Wallet service with balance-after snapshot per transaction
• Soft-deletes throughout, audit-friendly

user_app/ — Flutter rider app

• Book a ride with map-based pickup/dropoff selection
• Live tracking of the assigned driver via Pusher
• Wallet, saved cards, ride history, ratings, emergency contacts, in-ride chat
• Forgot-password, MFA-aware login flow
• Live support powered by Supoora

rider_app/ — Flutter driver app

• Online/offline toggle with location streaming
• Ride offers via Pusher private channel; first-tap-wins accept
• Active-ride flow: en-route → arrived → started → completed
• Earnings dashboard, document upload, vehicle management
• Full KYC pipeline (document scan → selfie → liveness → location → verdict) via Zauthy
• Live support powered by Supoora

Three external services, fully wired

• Zauthy is the source of truth for auth + KYC. Local users mirror by Zauthy UUID; refresh-token rotation; MFA; OAuth-mobile; webhook-driven cache invalidation.
• PostaLynk powers transactional email via a custom Symfony Mailer transport — every existing Mail::send() flows through it without code changes.
• Supoora drops a live-chat widget into both Flutter apps and the Filament admin panel. Single embed key, multi-workspace ready.

---

What you save vs. building from scratch

• Auth/KYC: 4–6 weeks of glue between provider and your local user model — done.
• Realtime ride matching: Pusher channel naming, auth, broadcast events, dispatch race conditions — done and audited.
• Mail transport: custom transport, retries, signature verification of mail webhook, idempotency — done.
• Driver onboarding: OCR, MRZ validation, face match, liveness, sanctions screening, admin override — wired through Zauthy with policy-driven gating.
• Admin panel: a real Filament panel with the resources you'd build anyway — included.

Deploy in days, not quarters.

---

What you're NOT getting (set expectations)

• iOS/Android app store submission (you publish under your own developer accounts)
• A pre-existing pool of riders or drivers (you bring the demand and supply)
• Compliance certifications (PCI-DSS for Stripe is provider-managed; GDPR/CCPA workflows are templated, not certified)
• White-label re-branding service (separately available — see customization)