@hyperscale0/hsx 1.0.130 → 1.0.134

package/dist/src/std-bundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"std-bundle.js","sourceRoot":"","sources":["../../src/std-bundle.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,MAAM,CAAC,MAAM,iBAAiB,GAAgC,IAAI,GAAG,CAAiB;IACpF,CAAC,aAAa,EAAE,soLAAsoL,CAAC;IACvpL,CAAC,WAAW,EAAE,63KAA63K,CAAC;IAC54K,CAAC,iBAAiB,EAAE,2sNAA2sN,CAAC;IAChuN,CAAC,YAAY,EAAE,60LAA60L,CAAC;IAC71L,CAAC,eAAe,EAAE,8v2EAA8v2E,CAAC;IACjx2E,CAAC,eAAe,EAAE,uxLAAuxL,CAAC;IAC1yL,CAAC,aAAa,EAAE,qwTAAqwT,CAAC;IACtxT,CAAC,iBAAiB,EAAE,mpTAAmpT,CAAC;IACxqT,CAAC,WAAW,EAAE,+1VAA+1V,CAAC;IAC92V,CAAC,eAAe,EAAE,+q2BAA+q2B,CAAC;IACls2B,CAAC,aAAa,EAAE,85JAA85J,CAAC;IAC/6J,CAAC,YAAY,EAAE,s2HAAs2H,CAAC;CACv3H,CAAC,CAAC"}
+{"version":3,"file":"std-bundle.js","sourceRoot":"","sources":["../../src/std-bundle.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,MAAM,CAAC,MAAM,iBAAiB,GAAgC,IAAI,GAAG,CAAiB;IACpF,CAAC,aAAa,EAAE,soLAAsoL,CAAC;IACvpL,CAAC,WAAW,EAAE,6wMAA6wM,CAAC;IAC5xM,CAAC,iBAAiB,EAAE,2sNAA2sN,CAAC;IAChuN,CAAC,YAAY,EAAE,yjQAAyjQ,CAAC;IACzkQ,CAAC,eAAe,EAAE,6nrFAA6nrF,CAAC;IAChprF,CAAC,eAAe,EAAE,41LAA41L,CAAC;IAC/2L,CAAC,aAAa,EAAE,03UAA03U,CAAC;IAC34U,CAAC,iBAAiB,EAAE,syTAAsyT,CAAC;IAC3zT,CAAC,WAAW,EAAE,4zYAA4zY,CAAC;IAC30Y,CAAC,eAAe,EAAE,+q2BAA+q2B,CAAC;IACls2B,CAAC,aAAa,EAAE,ohKAAohK,CAAC;IACriK,CAAC,YAAY,EAAE,2zIAA2zI,CAAC;CAC50I,CAAC,CAAC"}

package/docs/README.md

@@ -147,6 +147,19 @@ Creation accepts `{}`. Every normalized field, including adapter requirements,
 is optional at creation. Only a named action requires its subject metadata.
 Use `attach` inside the object block to configure its financial instruments.
 
+A required instrument field with no fixed value is a local creation value by
+default. It becomes create `input` on that agreement and never an object field,
+so two agreements on one object keep separate amounts and a wallet spend never
+prefills a later fee. Only a rename such as `rename { dueAt: dueAt }` shares
+it as record metadata: the value then comes from the object field as a create
+subject requirement. An authored object field of the same name does not share
+it; write `rename { price: price }` when the agreement should read that field.
+Later actions still read `self.amount` from the agreement either way. An
+attachment whose create needs input must expose `create`, or compilation fails,
+because a public action on a fresh attachment creates it first with no input.
+A rename binds only fields of the attached instrument itself; renaming a record
+field such as `insurance.cover`'s slice `premium` reports `subject_field_unknown`.
+
 ## Headers and tunables
 
 The header defines the available policies. The company chooses percentages, amounts, durations,
@@ -266,7 +279,9 @@ maxAge 1d` requires a recent completed provider check.
 `moves post self.receipt` posts it and `moves void self.receipt` releases it.
 `moves amount from payer shares shares` expands a declared split. Optional `fee`,
 `capture`, `key` and `boundary` modifiers describe a move. `boundary` applies
-only to reservations. Fees settle with create moves, never reservations. Repeated clauses keep
+only to reservations. Fees settle with create moves, never reservations. A fee move
+also derives `<action>_<move>_debit`, the payer's whole debit: amount plus fee and
+tax when the buyer pays, the amount alone when the seller pays. Repeated clauses keep
 their declaration order. The JSON-like clause form remains accepted and lowers
 to the same [UDL clauses](https://github.com/hyperscale0/hyperscale-udl/blob/main/spec/README.md).
 Use `economics { purpose: earning, sourceParty: merchant }` on a move to
@@ -407,21 +422,21 @@ Read the instrument's states, time gates and moves before promising a money
 outcome. A compiler pass does not prove that required actions are exposed,
 adapters are bound, participants have funds, or the flow can finish.
 
-| Instrument                                 | Behavior                                                                                                                                                                                                                                                                                                          |
-| ------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `financing.installments`                   | `share` allocates collected profit to a cash payable owned by `capital`. It does not itself pay operator income.                                                                                                                                                                                                  |
-| `financing.limits`                         | `per_borrower` caps outstanding principal. Both borrower and portfolio limits must be approved before disbursement; attaching them does not approve them.                                                                                                                                                         |
-| `lending.round`                            | The target is the linked plan's principal. Closing requires commitments and held funds to equal that amount.                                                                                                                                                                                                      |
-| `lending.distribution`                     | Cash distribution needs an eligible recorded settlement, `prepare_cash`, one share record per funded commitment, then `distribute_cash`. Attaching it moves nothing.                                                                                                                                              |
-| `insurance.cover.slice`                    | `collect` credits premium net of commission to the insurer account. The tenant retains commission. `refund` returns both portions; claims reserve insurer funds. External settlement uses the boundary protocol.                                                                                                  |
-| `financing.installments`, `savings.circle` | Supply explicit date lists when creating agreements. A term count does not generate a monthly calendar. Savings supports at most 60 distinct member seats.                                                                                                                                                        |
-| `escrow.hold`                              | `fund` takes the whole price. Financing into pending escrow collects the remaining down payment and adds capital principal at disbursement; `fund` is not a down-payment checkout.                                                                                                                                |
-| `escrow.hold`                              | Acceptance timeout enters `disputed` without paying the seller. Delivery and return verification belong to `payee`; rebinding it also changes who receives accepted funds.                                                                                                                                        |
-| `escrow.hold`                              | `deliver_within` (default `14d`) starts at funding. After it passes without delivery, an exposed `refund_undelivered` lets the payer take the whole held price back. Nothing runs it automatically.                                                                                                               |
-| `wallet.balance`                           | `topup_fee` (default `0%`) takes a floored percentage of each top-up for the Company. At `1%`, a 100.00 top-up credits 99.00 and earns 1.00.                                                                                                                                                                      |
-| `booking.reservation`                      | The balance is payable only from `deposit_paid`, so a cancelled booking never takes it. `middle_forfeit` and `late_forfeit` default to `0%`, so every cancellation returns all held money until the author sets them. At departure the clock completes a paid booking and lapses an unpaid one on `late_forfeit`. |
-| `financing.late_charge`                    | `fine` is a fixed money amount, not a percentage of overdue principal.                                                                                                                                                                                                                                            |
-| `cards.card`                               | `spend_limit` is a per-authorization ceiling, not a monthly aggregate.                                                                                                                                                                                                                                            |
+| Instrument                                 | Behavior                                                                                                                                                                                                                                                                                                                                 |
+| ------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `financing.installments`                   | `share` allocates collected profit to a cash payable owned by `capital`. It does not itself pay operator income.                                                                                                                                                                                                                         |
+| `financing.limits`                         | `per_borrower` caps outstanding principal. Both borrower and portfolio limits must be approved before disbursement; attaching them does not approve them.                                                                                                                                                                                |
+| `lending.round`                            | The target is the linked plan's principal. Closing requires commitments and held funds to equal that amount.                                                                                                                                                                                                                             |
+| `lending.distribution`                     | Cash distribution needs an eligible recorded settlement, `prepare_cash`, one share record per funded commitment, then `distribute_cash`. Attaching it moves nothing.                                                                                                                                                                     |
+| `insurance.cover.slice`                    | `collect` credits premium net of commission to the insurer account. The tenant retains commission. `refund` returns both portions; claims reserve insurer funds. External settlement uses the boundary protocol.                                                                                                                         |
+| `financing.installments`, `savings.circle` | Supply explicit date lists when creating agreements. A term count does not generate a monthly calendar. Savings supports at most 60 distinct member seats.                                                                                                                                                                               |
+| `escrow.hold`                              | `fund` takes the whole price. Financing into pending escrow collects the remaining down payment and adds capital principal at disbursement; `fund` is not a down-payment checkout.                                                                                                                                                       |
+| `escrow.hold`                              | Acceptance timeout enters `disputed` without paying the seller. Delivery and return verification belong to `payee`; rebinding it also changes who receives accepted funds.                                                                                                                                                               |
+| `escrow.hold`                              | `deliver_within` (default `14d`) starts at funding. After it passes without delivery, an exposed `refund_undelivered` lets the payer take the whole held price back. Nothing runs it automatically.                                                                                                                                      |
+| `wallet.balance`                           | `topup_fee` (default `0%`) takes a floored percentage of each top-up for the Company. At `1%`, a 100.00 top-up credits 99.00 and earns 1.00.                                                                                                                                                                                             |
+| `booking.reservation`                      | The balance is payable only from `deposit_paid`, so a cancelled booking never takes it. `middle_forfeit` and `late_forfeit` default to `0%`, so every cancellation returns all held money until the author sets them. At departure the clock completes a paid booking and lapses an unpaid one on `late_forfeit`.                        |
+| `financing.late_charge`                    | `fine` is a fixed money amount, not a percentage of overdue principal.                                                                                                                                                                                                                                                                   |
+| `cards.card`                               | `spend_limit` is a per-authorization ceiling, not a monthly aggregate. Bind `person` to the cardholder's `holder`, such as `person: actor`; create refuses any other party. The person freezes, unfreezes and cancels; the issuer uses `issuer_freeze`, `issuer_unfreeze` and `issuer_cancel`, and only `issuer_unfreeze` lifts a block. |
 
 A seller-owned marketplace object can declare `entryActions: [create_order]`
 when `create_order` exposes an attachment's create action with its buyer bound
@@ -432,6 +447,14 @@ Without entry actions, the company runs a two-customer sale from its Product
 key: create the record with `onBehalfOf` naming the seller, then run the buyer's
 steps with `onBehalfOf` naming the buyer.
 
+The same rule admits the other std creates whose starting party can be a
+customer: `financing.limits` and `financing.installments` (borrower),
+`insurance.cover` (holder), `wallet.balance` (holder) and `savings.membership`
+(member). Several customers can each start one on the same record. A plan,
+commitment or other reference resolves the sibling that binds the same
+accounts to the parties both share, so each customer's plan finds its own
+escrow and each investor's commitment finds their own wallet.
+
 `financing.limits` and `financing.portfolio_limit` declare `scope: product`.
 Create and approve the portfolio limit once per Product and the borrower limit
 once per borrower. Plans on later records resolve those shared references.
@@ -443,8 +466,10 @@ The account primitive creates it automatically and shares it across the Product.
 Zero-tax escrow releases need no additional party setup.
 
 The financing, collections and lending samples expose payment creation, payment,
-refund and payoff quotes through the object's existing action routes. A child
-alias names the full attachment path, for example:
+refund and payoff quotes through the object's existing action routes. Record
+actions are private: the parent still runs them, but a caller sees one only
+after the program exposes it. A child alias names the full attachment path, for
+example:
 
 ```hsx
 expose enrolment.tuition.payment.create as create_payment
@@ -466,9 +491,10 @@ allocation order and payoff rebate; aliases do not change those terms.
 
 The [lending sample](../examples/lending.hsx) also exposes share creation. Callers
 still need dates, agreement inputs, funded wallets and eligible settlements.
-References without an explicit creation input require one matching agreement on
-the object. In particular, lending distributions with multiple settlements or
-commitments need authored selectors before callers can choose among them.
+Every agreement reference is an optional creation input on an exposed create.
+With one matching agreement on the object the engine picks it; with several,
+such as a plan's slices or a lending round's settlements, the caller passes the
+chosen instance ID under the reference's name.
 Insurance needs premium-slice records and actions. Savings needs dated
 contribution records. Read each header's creation and lifecycle requirements.
 
@@ -531,7 +557,7 @@ An attachment can declare the purpose of an imported action's money:
 
 ```hsx
 attach visit = wallet.spend {
-  wallet: balance, payee: operator
+  wallet: balance, payee: operator, holder: owner
   economics pay { purpose: earning, sourceParty: owner }
   expose pay as charge_visit
 }

package/examples/cards.hsx

@@ -18,10 +18,12 @@ object employee "Employee card" {
   }
   attach card = cards.card {
     expose create as create_card
-    holder: holder, spend_limit: 5000 SAR
+    holder: holder, person: owner, spend_limit: 5000 SAR
     expose activate as activate_card
     expose freeze as freeze_card
     expose unfreeze as unfreeze_card
+    expose issuer_freeze as block_card
+    expose issuer_unfreeze as unblock_card
   }
   attach payment = cards.authorization {
     expose create as create_payment

package/examples/marketplace.hsx

@@ -7,14 +7,16 @@ object project "Project" {
   fields { brief: text, deliverable: text, price: money }
   columns: [brief, deliverable, price]
   attach offer = marketplace.listing {
+    rename { price: price }
     expose create as create_offer
     seller: owner
     expose publish as publish_offer
     expose withdraw as withdraw_offer
   }
   attach order = marketplace.order {
+    rename { price: price }
     expose create as create_order
-    listing: offer, buyer: actor
+    listing: offer, buyer: actor, fulfiller: owner
     expose commit as place_order
     expose fulfill as finish_order
   }

package/examples/rental-deposit.hsx

@@ -45,6 +45,8 @@ object rental "Equipment rental" {
   fields { equipment: text }
   columns: [equipment, dueAt]
   attach security = deposit {
+    // dueAt is a column, so it stays shared object metadata.
+    rename { dueAt: dueAt }
     expose create as agree_rental
     expose fund as pay_deposit
     expose return_on_time as return_equipment

package/examples/wallet.hsx

@@ -15,7 +15,7 @@ object membership "Membership" {
   }
   attach visit = wallet.spend {
     expose create as create_visit
-    wallet: balance, payee: operator
+    wallet: balance, payee: operator, holder: owner
     economics pay { purpose: earning, sourceParty: owner }
     expose reserve as reserve_visit
     expose pay as charge_visit

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hyperscale0/hsx",
-  "version": "1.0.130",
+  "version": "1.0.134",
   "description": "The strictly typed HSX language: compile total financial programs into canonical UDL.",
   "keywords": [
     "hsx",
@@ -84,8 +84,8 @@
     "examples:bundle": "bun scripts/bundle-examples.ts"
   },
   "dependencies": {
-    "@hyperscale0/adl": "1.0.130",
-    "@hyperscale0/udl": "1.0.130",
+    "@hyperscale0/adl": "1.0.134",
+    "@hyperscale0/udl": "1.0.134",
     "fast-sha256": "1.3.0"
   },
   "devDependencies": {
@@ -97,5 +97,5 @@
     "Amir Ayub",
     "Sara AlBakaawi"
   ],
-  "gitHead": "3d768e3b8dd85648cb01257a02fef3b1e0b1ff57"
+  "gitHead": "3449c1fe1ea4ee1ae40edc3775ab7bebf890e91b"
 }

package/src/compile.ts

@@ -457,6 +457,9 @@ export function compile(
       UdlSubjectRequirement,
       { source: string; span: Span; message: string }
     >();
+    // Instruments that lost a std action to an empty all() parent. Their
+    // lifecycles drop the states only that action reached.
+    const trimmed = new Set<string>();
     const used = new Set<string>();
     for (const use of program.decls.filter((d) => d.kind === "use")) {
       if (used.has(use.name))
@@ -551,6 +554,15 @@ export function compile(
     const assignments = new Map<string, AssignmentDecl>();
     const attachmentSubjects = new Map<string, string>();
     const names = new Set<string>();
+    // A record's create turns public only through a program-level expose,
+    // which applies after lowering, so creation input needs the list first.
+    const exposedCreates = new Set(
+      program.decls.flatMap((decl) =>
+        decl.kind === "expose" && decl.target.endsWith(".create")
+          ? [decl.target.split(".").slice(0, -1).join("_")]
+          : [],
+      ),
+    );
     for (const decl of program.decls) {
       if (decl.kind === "expose" || decl.kind === "hide" || decl.kind === "use")
         continue;
@@ -2832,6 +2844,15 @@ export function compile(
                       } as Omit<UdlCalculation, "target">)
                     : undefined;
                   const charges = vat ? [charge, vat] : [charge];
+                  // A payer's limit reads this: a buyer pays the charges on
+                  // top, a seller pays them out of the amount.
+                  derived("debit", "Payer debit", {
+                    op: "sum",
+                    values:
+                      paidBy === "buyer"
+                        ? [transfer.amount, ...charges]
+                        : [transfer.amount],
+                  } as Omit<UdlCalculation, "target">);
                   const net =
                     paidBy === "seller"
                       ? derived("net", "Amount after fee", {
@@ -2908,7 +2929,7 @@ export function compile(
         }
         if (actionFeeCalculations.length)
           a.calculate = [...(a.calculate ?? []), ...actionFeeCalculations];
-        if (attachmentInfo && !attachmentInfo.child) {
+        if (attachmentInfo) {
           if (attachmentInfo.exposed.has(name)) {
             if (automatic(a.actor))
               fail(
@@ -2975,6 +2996,13 @@ export function compile(
             message: `${id}.${name}.subject.${requirement.field.name}`,
           });
         }
+        // A parent list may name a list parameter such as `[parent, on]`.
+        if (
+          typeof a.actor === "object" &&
+          "parent" in a.actor &&
+          Array.isArray(a.actor.parent)
+        )
+          a.actor.parent = a.actor.parent.flat();
         // A parent actor over an empty all() names no instrument that could
         // invoke the action. A std action then does not exist in this program;
         // in user code the all() is a mistake.
@@ -2993,6 +3021,7 @@ export function compile(
             );
           }
           delete lifecycle.transitions[name];
+          trimmed.add(id);
           continue;
         }
         inst.actions[name] = a;
@@ -3282,8 +3311,7 @@ export function compile(
           .slice(firstAttachedInstrument)
           .filter(
             (instrument) =>
-              instrument.id === instId ||
-              instrument.actions.create?.publicAction,
+              instrument.id === instId || exposedCreates.has(instrument.id),
           )) {
           if (!createdInst.actions.create) continue;
           const owned = new Set(
@@ -3296,9 +3324,15 @@ export function compile(
           }
           const create = createdInst.actions.create;
           for (const field of createdInst.fields) {
+            // The engine resolves a lone candidate itself; with several (a
+            // plan's slices) the caller names one, as late_charge does.
+            if (field.type === "ref" && field.targetKind === "instrument") {
+              if (!create.input.some((input) => input.name === field.name))
+                create.input.push({ ...field, optional: true });
+              continue;
+            }
             if (
               field.type === "account" ||
-              (field.type === "ref" && field.targetKind === "instrument") ||
               (field.type === "list" &&
                 field.item === "ref" &&
                 field.targetKind === "instrument") ||
@@ -3308,8 +3342,7 @@ export function compile(
               create.input.some((input) => input.name === field.name)
             )
               continue;
-            create.subject ??= { requirements: [], adapters: [] };
-            const existing = create.subject.requirements.find(
+            const existing = create.subject?.requirements.find(
               (item) => item.field.name === field.name,
             );
             if (existing) {
@@ -3322,11 +3355,16 @@ export function compile(
                 );
               continue;
             }
+            // A creation value belongs to this agreement. Only a rename shares
+            // it as object metadata; a matching authored field name does not,
+            // so two agreements never read each other's amount.
             const objectField = renames.get(field.name);
-            const requirement = {
-              field,
-              ...(objectField ? { objectField } : {}),
-            };
+            if (!objectField) {
+              create.input.push({ ...field });
+              continue;
+            }
+            const requirement = { field, objectField };
+            create.subject ??= { requirements: [], adapters: [] };
             create.subject.requirements.push(requirement);
             requirementOrigins.set(requirement, {
               source: declarationSources.get(template) ?? "program",
@@ -3345,6 +3383,20 @@ export function compile(
             );
           if (!found) {
             const renameEntry = renameEntries.get(oldName) ?? entry;
+            const record = document.instruments
+              .slice(firstAttachedInstrument)
+              .find(
+                (instrument) =>
+                  instrument.id.startsWith(`${instId}_`) &&
+                  instrument.fields.some((field) => field.name === oldName),
+              );
+            if (record)
+              failWithCode(
+                renameEntry,
+                "subject_field_unknown",
+                `rename source '${oldName}' belongs to the ${record.id.slice(instId.length + 1)} record of ${targetTemplate}; rename binds only fields of ${targetTemplate} itself`,
+                `remove this rename; supply ${oldName} as input when the record is created, or set it as a tunable where the header offers one`,
+              );
             const declared = attachedInst
               ? Object.values(attachedInst.actions).flatMap(
                   (action) =>
@@ -3889,9 +3941,21 @@ export function compile(
             targets.some((target) => kin(target, candidate)),
         );
       });
-    // A count over no matchable member is zero.
+    // A count over no matchable member is zero, in a requirement or a calculation.
     for (const inst of document.instruments)
-      for (const action of Object.values(inst.actions))
+      for (const action of Object.values(inst.actions)) {
+        if (action.calculate)
+          action.calculate = action.calculate.map((calculation) =>
+            calculation.op === "aggregate" &&
+            calculation.measure === "count" &&
+            !matchable(calculation.selection, inst, action).length
+              ? {
+                  target: calculation.target,
+                  op: "sum",
+                  values: [{ literal: 0 }],
+                }
+              : calculation,
+          );
         action.requires = action.requires.map((requirement) =>
           requirement.kind === "aggregate" &&
           requirement.measure === "count" &&
@@ -3904,6 +3968,7 @@ export function compile(
               }
             : requirement,
         );
+      }
     const checkSelection = (
       selection: UdlSelection,
       at: Located,
@@ -4076,7 +4141,7 @@ export function compile(
         )
       )
         continue;
-      let specialized = false;
+      let specialized = trimmed.has(inst.id);
       for (const [key, action] of Object.entries(inst.actions)) {
         const constant = (value: import("@hyperscale0/udl").UdlValue) => {
           if ("literal" in value) return value.literal;
@@ -4194,6 +4259,28 @@ export function compile(
           "give each exposed action a distinct public name",
         );
     }
+    // A public action on a fresh attachment creates it first with no input
+    // (in the engine executor), so creation that needs input must be public.
+    for (const kind of document.objects)
+      for (const attachment of kind.attachments) {
+        if (attachment.parent) continue;
+        const instrument = byId.get(attachment.instrument)!;
+        const create = instrument.actions.create;
+        const needed = create?.input.filter((field) => !field.optional) ?? [];
+        const entry = Object.values(instrument.actions).find(
+          (action) => action.publicAction,
+        );
+        if (!needed.length || create!.publicAction || !entry) continue;
+        fail(
+          objects
+            .get(kind.id)!
+            .body.entries.find((row) =>
+              new RegExp(`^attach\\s+${attachment.name}\\s*=`).test(row.key),
+            ) ?? objects.get(kind.id)!,
+          `${attachment.name} starts from ${entry.publicAction}, but its create needs ${needed.map((field) => field.name).join(", ")} and is not exposed`,
+          `expose create on ${attachment.name} so the caller supplies ${needed.length === 1 ? "it" : "them"}, or rename { ${needed[0]!.name}: ${needed[0]!.name} } to read object metadata`,
+        );
+      }
     for (const kind of document.objects) {
       for (const name of kind.entryActions ?? []) {
         const eligible = kind.attachments.some((attachment) => {

package/src/examples-bundle.ts

@@ -1,19 +1,19 @@
 // Generated by open/hsx/scripts/bundle-examples.ts. Do not edit by hand.
 import type { HsxExample } from "./examples.ts";
 export const examples: HsxExample[] = [
-  {"id":"cards","title":"Team expense cards","summary":"A company issues expense cards to employees and reserves each supplier payment before capture.","headers":["cards"],"source":"// A company issues expense cards to employees and reserves each supplier payment before capture.\nprogram team_expense_cards \"Team expense cards\"\nuse cards\n// supplier is a business this program declares, so plan needs {\"partyBindings\":{\"supplier\":\"<partyId>\"}}.\n// That partyId is an organization customer's: create the Product from this source without the payment\n// and receipt attachments, add the customer with customer.create, activate its access, open its\n// customer_balance account, then compose this source with the binding.\nparty supplier: business\n\nobject employee \"Employee card\" {\n  fields { employeeName: text, department: text }\n  columns: [employeeName, department]\n  attach holder = cards.cardholder {\n    expose create as create_holder\n    holder: owner\n    expose activate as activate_employee\n    expose suspend as suspend_employee\n  }\n  attach card = cards.card {\n    expose create as create_card\n    holder: holder, spend_limit: 5000 SAR\n    expose activate as activate_card\n    expose freeze as freeze_card\n    expose unfreeze as unfreeze_card\n  }\n  attach payment = cards.authorization {\n    expose create as create_payment\n    card: card, merchant: supplier\n    expose approve as approve_payment\n    expose capture as capture_payment\n    expose reverse as reverse_payment\n  }\n  attach receipt = cards.transaction {\n    expose create as create_receipt\n    authorization: payment\n    expose refund as refund_payment\n  }\n}\n"},
+  {"id":"cards","title":"Team expense cards","summary":"A company issues expense cards to employees and reserves each supplier payment before capture.","headers":["cards"],"source":"// A company issues expense cards to employees and reserves each supplier payment before capture.\nprogram team_expense_cards \"Team expense cards\"\nuse cards\n// supplier is a business this program declares, so plan needs {\"partyBindings\":{\"supplier\":\"<partyId>\"}}.\n// That partyId is an organization customer's: create the Product from this source without the payment\n// and receipt attachments, add the customer with customer.create, activate its access, open its\n// customer_balance account, then compose this source with the binding.\nparty supplier: business\n\nobject employee \"Employee card\" {\n  fields { employeeName: text, department: text }\n  columns: [employeeName, department]\n  attach holder = cards.cardholder {\n    expose create as create_holder\n    holder: owner\n    expose activate as activate_employee\n    expose suspend as suspend_employee\n  }\n  attach card = cards.card {\n    expose create as create_card\n    holder: holder, person: owner, spend_limit: 5000 SAR\n    expose activate as activate_card\n    expose freeze as freeze_card\n    expose unfreeze as unfreeze_card\n    expose issuer_freeze as block_card\n    expose issuer_unfreeze as unblock_card\n  }\n  attach payment = cards.authorization {\n    expose create as create_payment\n    card: card, merchant: supplier\n    expose approve as approve_payment\n    expose capture as capture_payment\n    expose reverse as reverse_payment\n  }\n  attach receipt = cards.transaction {\n    expose create as create_receipt\n    authorization: payment\n    expose refund as refund_payment\n  }\n}\n"},
   {"id":"collections","title":"Small business collections","summary":"A business lender refers overdue instalments to an agency with limits on collection contacts.","headers":["collections","financing"],"source":"// A business lender refers overdue instalments to an agency with limits on collection contacts.\nprogram business_collections \"Small business collections\"\nuse collections\nuse financing\n// agency is a business this program declares, so plan needs {\"partyBindings\":{\"agency\":\"<partyId>\"}}.\n// That partyId is an organization customer's: create the Product from this source without the recovery\n// and contact attachments, add the customer with customer.create, activate its access, open its\n// customer_balance account, then compose this source with the binding.\nparty agency: business\n\nobject facility \"Business loan\" {\n  fields { businessName: text, purpose: text, price: money }\n  columns: [businessName, purpose, price]\n  attach allowance = financing.limits { expose create as create_allowance, expose approve as approve_borrower, borrower: owner, per_borrower: 100000 SAR }\n  attach budget = financing.portfolio_limit { expose create as create_budget, expose approve as approve_budget, limit: 2000000 SAR }\n  attach loan = financing.installments {\n    expose create as create_loan\n    borrower: owner, capital: operator\n    months: 12, pricing: amortizing, profit_rate: 6%, disburse_to: borrower\n    limits: allowance, portfolio: budget\n    expose sign as sign_loan\n    expose disburse as release_loan\n    expose payoff as repay_early\n  }\n  attach recovery = collections.case {\n    expose create as create_recovery\n    on: loan, agency: agency\n    expose assign as assign_case\n    expose recover as recover_payment\n    expose recall as recall_case\n  }\n  attach contact = collections.contact {\n    expose create as create_contact\n    case: recovery, agency: agency\n  }\n}\n\nexpose facility.loan.payment.create as create_payment\nexpose facility.loan.payment.pay as pay_instalment\nexpose facility.loan.payment.refund as refund_payment\nexpose facility.loan.payoff_quote.create as request_payoff_quote\n"},
   {"id":"escrow","title":"Used device sales","summary":"Buyers fund a used device purchase, then accept delivery or raise a dispute before release.","headers":["escrow"],"source":"// Buyers fund a used device purchase, then accept delivery or raise a dispute before release.\nprogram used_device_sales \"Used device sales\"\nuse escrow\n\nobject device \"Device\" {\n  fields {\n    model: text\n    condition: text\n    serialNumber: text\n    price: money\n  }\n  columns: [model, condition, price]\n  attach sale = escrow.hold {\n    expose create as create_sale\n    payer: actor, payee: owner\n    expose fund as pay_for_device\n    expose deliver as confirm_delivery\n    expose accept as accept_device\n    expose dispute as report_problem\n    expose verify_return as verify_return\n    expose refund as refund_buyer\n    expose cancel as cancel_sale\n  }\n}\n"},
   {"id":"financing","title":"Tuition instalments","summary":"A tuition lender funds a student's fees over three interest-free instalments with borrowing limits.","headers":["financing"],"source":"// A tuition lender funds a student's fees over three interest-free instalments with borrowing limits.\nprogram tuition_instalments \"Tuition instalments\"\nuse financing\n\nobject enrolment \"Enrolment\" {\n  fields { student: text, course: text, price: money }\n  columns: [student, course, price]\n  attach allowance = financing.limits {\n    expose create as create_allowance\n    borrower: owner, per_borrower: 12000 SAR\n    expose approve as approve_student\n  }\n  attach budget = financing.portfolio_limit {\n    expose create as create_budget\n    limit: 500000 SAR\n    expose approve as approve_budget\n  }\n  attach tuition = financing.installments {\n    expose create as create_tuition\n    borrower: owner, capital: operator\n    months: 3, pricing: flat_total, profit_rate: 0%, disburse_to: borrower\n    limits: allowance, portfolio: budget\n    expose sign as sign_tuition_plan\n    expose disburse as fund_tuition\n    expose payoff as repay_early\n  }\n}\n\nexpose enrolment.tuition.payment.create as create_payment\nexpose enrolment.tuition.payment.pay as pay_instalment\nexpose enrolment.tuition.payment.refund as refund_payment\nexpose enrolment.tuition.payoff_quote.create as request_payoff_quote\n"},
   {"id":"insurance","title":"Device insurance","summary":"A device retailer collects the purchase price and attaches cover with a claim review process.","headers":["insurance","money"],"source":"// A device retailer collects the purchase price and attaches cover with a claim review process.\nprogram device_insurance \"Device insurance\"\nuse insurance\nuse money\n\nobject device \"Insured device\" {\n  fields { model: text, serialNumber: text, purchaseDate: date }\n  columns: [model, serialNumber, purchaseDate]\n  attach purchase = money.transfer {\n    expose create as create_purchase\n    payer: owner, payee: operator\n    economics pay { purpose: earning, sourceParty: owner }\n    expose pay as pay_for_device\n  }\n  // conformance_boundary is the sandbox insurer adapter; swap in the insurer's registered adapter to go live.\n  // Premiums net of commission go to its account. The default broker is the retailer, which keeps the commission.\n  // claim_limit is the sum insured, set per cover at creation.\n  attach protection = insurance.cover {\n    expose create as create_protection\n    holder: owner, adapter: \"conformance_boundary\", commission: 10%, covers: purchase\n    expose activate as activate_cover\n    expose cancel as cancel_cover\n  }\n  attach claim = insurance.claim {\n    expose create as create_claim\n    cover: protection, inspector: operator\n    expose approve as approve_claim\n    expose deny as deny_claim\n    expose pay as pay_claim\n  }\n}\n"},
   {"id":"lending","title":"Community business lending","summary":"A lending composition with limit approvals, wallet commitments and cash distribution transitions.","headers":["lending","financing","wallet"],"source":"// A lending composition with limit approvals, wallet commitments and cash distribution transitions.\nprogram community_business_lending \"Community business lending\"\nuse lending\nuse financing\nuse wallet\n\nobject business \"Business funding\" {\n  fields { businessName: text, purpose: text, price: money }\n  columns: [businessName, purpose, price]\n  attach allowance = financing.limits {\n    expose create as create_allowance\n    borrower: owner, per_borrower: 100000 SAR\n    expose approve as approve_borrower\n  }\n  attach budget = financing.portfolio_limit {\n    expose create as create_budget\n    limit: 2000000 SAR\n    expose approve as approve_budget\n  }\n  attach loan = financing.installments {\n    expose create as create_loan\n    borrower: owner, capital: operator\n    months: 12, pricing: amortizing, profit_rate: 6%, disburse_to: borrower\n    limits: allowance, portfolio: budget\n    expose sign as sign_loan\n    expose disburse as release_loan\n    expose payoff as repay_early\n  }\n  attach investor_balance = wallet.balance {\n    expose create as create_investor_balance\n    holder: actor\n    expose activate as open_wallet\n    expose topup as add_funds\n  }\n  attach funding = lending.round {\n    borrower: owner, plan: loan\n    expose create as open_funding\n    expose close as close_funding\n  }\n  attach investment = lending.commitment {\n    round: funding, wallet: investor_balance, investor: actor\n    expose create as invest\n    expose withdraw as withdraw_investment\n  }\n  attach returns = lending.distribution {\n    expose create as create_returns\n    round: funding, receipt: loan.settlement\n    expose prepare_cash as prepare_returns\n    expose distribute_cash as distribute_returns\n  }\n}\n\nexpose business.loan.payment.create as create_payment\nexpose business.loan.payment.pay as pay_instalment\nexpose business.loan.payment.refund as refund_payment\nexpose business.loan.payoff_quote.create as request_payoff_quote\nexpose business.returns.share.create as create_return_share\n"},
   {"id":"library","title":"Financed car sales","summary":"A minimal financed car sale connects escrow to a three-instalment plan and lending limits.","headers":["escrow","financing"],"source":"// A minimal financed car sale connects escrow to a three-instalment plan and lending limits.\nprogram cars \"Financed car sales\"\nuse escrow\nuse financing\nobject car \"Cars\" {\n fields { make: text, model: text, year: integer }\n attach sale = escrow.hold { expose create as create_sale, payer: actor, payee: owner, expose fund as sell }\n attach limits = financing.limits { expose create as create_limits, borrower: actor, per_borrower: 60000 SAR }\n attach ceiling = financing.portfolio_limit { expose create as create_ceiling, limit: 1500000 SAR }\n attach plan = financing.installments {\n  borrower: actor, capital: operator, share: 25%\n  months: 3, pricing: flat_total, profit_rate: 2.5%, funds: sale, limits: limits, portfolio: ceiling\n  expose create as finance\n }\n}\n"},
-  {"id":"marketplace","title":"Freelance marketplace","summary":"Freelancers publish offers and clients place orders with funds held until work is accepted.","headers":["marketplace","escrow"],"source":"// Freelancers publish offers and clients place orders with funds held until work is accepted.\nprogram freelance_marketplace \"Freelance marketplace\"\nuse marketplace\nuse escrow\n\nobject project \"Project\" {\n  fields { brief: text, deliverable: text, price: money }\n  columns: [brief, deliverable, price]\n  attach offer = marketplace.listing {\n    expose create as create_offer\n    seller: owner\n    expose publish as publish_offer\n    expose withdraw as withdraw_offer\n  }\n  attach order = marketplace.order {\n    expose create as create_order\n    listing: offer, buyer: actor\n    expose commit as place_order\n    expose fulfill as finish_order\n  }\n  attach payment = escrow.hold {\n    expose create as create_payment\n    payer: actor, payee: owner\n    expose fund as fund_project\n    expose deliver as submit_work\n    expose accept as accept_work\n    expose dispute as dispute_work\n    expose verify_return as verify_return\n    expose refund as refund_client\n    expose cancel as cancel_payment\n  }\n}\n"},
+  {"id":"marketplace","title":"Freelance marketplace","summary":"Freelancers publish offers and clients place orders with funds held until work is accepted.","headers":["marketplace","escrow"],"source":"// Freelancers publish offers and clients place orders with funds held until work is accepted.\nprogram freelance_marketplace \"Freelance marketplace\"\nuse marketplace\nuse escrow\n\nobject project \"Project\" {\n  fields { brief: text, deliverable: text, price: money }\n  columns: [brief, deliverable, price]\n  attach offer = marketplace.listing {\n    rename { price: price }\n    expose create as create_offer\n    seller: owner\n    expose publish as publish_offer\n    expose withdraw as withdraw_offer\n  }\n  attach order = marketplace.order {\n    rename { price: price }\n    expose create as create_order\n    listing: offer, buyer: actor, fulfiller: owner\n    expose commit as place_order\n    expose fulfill as finish_order\n  }\n  attach payment = escrow.hold {\n    expose create as create_payment\n    payer: actor, payee: owner\n    expose fund as fund_project\n    expose deliver as submit_work\n    expose accept as accept_work\n    expose dispute as dispute_work\n    expose verify_return as verify_return\n    expose refund as refund_client\n    expose cancel as cancel_payment\n  }\n}\n"},
   {"id":"money","title":"Tutoring studio","summary":"A tutoring studio collects a fixed fee for each lesson and can cancel unpaid bookings.","headers":["money"],"source":"// A tutoring studio collects a fixed fee for each lesson and can cancel unpaid bookings.\nprogram tutoring_studio \"Tutoring studio\"\nuse money\n\nobject lesson \"Lesson\" {\n  fields {\n    student: text\n    tutor: text\n    startsAt: date\n  }\n  columns: [student, tutor, startsAt]\n  attach payment = money.transfer {\n    expose create as create_payment\n    payer: actor, payee: operator, amount: 150 SAR\n    economics pay { purpose: earning, sourceParty: actor }\n    expose pay as pay_for_lesson\n    expose cancel as cancel_payment\n  }\n}\n"},
-  {"id":"rental-deposit","title":"Equipment rental","summary":"A business rents equipment with a 1000 SAR deposit and a single 50 SAR late fee. On-time return refunds 1000 SAR; late return pays the operator 50 SAR and refunds 950 SAR.","headers":[],"source":"// A business rents equipment with a 1000 SAR deposit and a single 50 SAR late fee.\n// On-time return refunds 1000 SAR; late return pays the operator 50 SAR and refunds 950 SAR.\nprogram equipment_rental \"Equipment rental\"\nparty renter: business\n\n// The renter is one declared business, so this instrument takes no parameters.\ninstrument deposit {\n  summary: \"Hold a rental deposit, then return it less any fixed late fee.\"\n  fields {\n    renter: account of renter\n    held: account of self\n    amount: money = 1000 SAR\n    lateFee: money = 50 SAR\n    dueAt: date\n    refund: money?\n  }\n  lifecycle { states: [pending, funded, returned, cancelled], initial: pending }\n  action create {\n    actor: { party: renter }\n    requires self.dueAt > self.now\n  }\n  action fund {\n    from: pending, to: funded, actor: { party: renter }\n    deadline: { at: self.dueAt }\n    moves self.amount from self.renter to self.held\n  }\n  action return_on_time {\n    from: funded, to: returned, actor: { party: programOperator }\n    deadline: { at: self.dueAt }\n    subject { returnReference: text }\n    moves self.held.balance from self.held to self.renter\n  }\n  action return_late {\n    from: funded, to: returned, actor: { party: programOperator }\n    due: { at: self.dueAt }\n    subject { returnReference: text }\n    calculate: [{ target: refund, op: subtract, base: { field: self.held.balance }, subtract: [{ field: self.lateFee }] }]\n    moves self.lateFee from self.held to programOperator\n    moves self.refund from self.held to self.renter\n  }\n  action cancel { from: pending, to: cancelled, actor: { party: renter } }\n}\n\nobject rental \"Equipment rental\" {\n  fields { equipment: text }\n  columns: [equipment, dueAt]\n  attach security = deposit {\n    expose create as agree_rental\n    expose fund as pay_deposit\n    expose return_on_time as return_equipment\n    expose return_late as return_equipment_late\n    expose cancel as cancel_rental\n  }\n}\n\nhide deposit.create\nhide deposit.fund\nhide deposit.return_on_time\nhide deposit.return_late\nhide deposit.cancel\n"},
+  {"id":"rental-deposit","title":"Equipment rental","summary":"A business rents equipment with a 1000 SAR deposit and a single 50 SAR late fee. On-time return refunds 1000 SAR; late return pays the operator 50 SAR and refunds 950 SAR.","headers":[],"source":"// A business rents equipment with a 1000 SAR deposit and a single 50 SAR late fee.\n// On-time return refunds 1000 SAR; late return pays the operator 50 SAR and refunds 950 SAR.\nprogram equipment_rental \"Equipment rental\"\nparty renter: business\n\n// The renter is one declared business, so this instrument takes no parameters.\ninstrument deposit {\n  summary: \"Hold a rental deposit, then return it less any fixed late fee.\"\n  fields {\n    renter: account of renter\n    held: account of self\n    amount: money = 1000 SAR\n    lateFee: money = 50 SAR\n    dueAt: date\n    refund: money?\n  }\n  lifecycle { states: [pending, funded, returned, cancelled], initial: pending }\n  action create {\n    actor: { party: renter }\n    requires self.dueAt > self.now\n  }\n  action fund {\n    from: pending, to: funded, actor: { party: renter }\n    deadline: { at: self.dueAt }\n    moves self.amount from self.renter to self.held\n  }\n  action return_on_time {\n    from: funded, to: returned, actor: { party: programOperator }\n    deadline: { at: self.dueAt }\n    subject { returnReference: text }\n    moves self.held.balance from self.held to self.renter\n  }\n  action return_late {\n    from: funded, to: returned, actor: { party: programOperator }\n    due: { at: self.dueAt }\n    subject { returnReference: text }\n    calculate: [{ target: refund, op: subtract, base: { field: self.held.balance }, subtract: [{ field: self.lateFee }] }]\n    moves self.lateFee from self.held to programOperator\n    moves self.refund from self.held to self.renter\n  }\n  action cancel { from: pending, to: cancelled, actor: { party: renter } }\n}\n\nobject rental \"Equipment rental\" {\n  fields { equipment: text }\n  columns: [equipment, dueAt]\n  attach security = deposit {\n    // dueAt is a column, so it stays shared object metadata.\n    rename { dueAt: dueAt }\n    expose create as agree_rental\n    expose fund as pay_deposit\n    expose return_on_time as return_equipment\n    expose return_late as return_equipment_late\n    expose cancel as cancel_rental\n  }\n}\n\nhide deposit.create\nhide deposit.fund\nhide deposit.return_on_time\nhide deposit.return_late\nhide deposit.cancel\n"},
   {"id":"repair-approval","title":"Repair approvals","summary":"A repair shop records inspection and approval evidence before it can complete a job.","headers":[],"source":"// A repair shop records inspection and approval evidence before it can complete a job.\nprogram repair_shop \"Repair approvals\"\n\ninstrument assessment {\n  summary: \"Inspect the repair, collect approval, then record completion.\"\n  fields { inspectedAt: date?, approvedAt: date? }\n  lifecycle { states: [submitted, inspected, approved, completed, rejected], initial: submitted }\n  action create {}\n  action inspect {\n    from: submitted, to: inspected, actor: { party: programOperator }\n    subject { inspectionNotes: text }\n    set: { inspectedAt: { field: self.now } }\n  }\n  action approve {\n    from: inspected, to: approved, actor: { party: programOperator }\n    subject { approvalReference: text }\n    set: { approvedAt: { field: self.now } }\n  }\n  action reject {\n    from: inspected, to: rejected, actor: { party: programOperator }\n  }\n  action complete {\n    from: approved, to: completed, actor: { party: programOperator }\n    subject { completionNotes: text }\n  }\n}\n\nobject repair \"Repair\" {\n  fields { item: text, problem: text }\n  columns: [item, problem]\n  attach review = assessment {\n    expose create as create_review\n    expose inspect as inspect_repair\n    expose approve as approve_repair\n    expose reject as reject_repair\n    expose complete as complete_repair\n  }\n}\n\nhide assessment.create\nhide assessment.inspect\nhide assessment.approve\nhide assessment.reject\nhide assessment.complete\n"},
   {"id":"reporting","title":"Equipment loan reports","summary":"An equipment lender keeps an ageing report over its financed purchases and recorded repayments.","headers":["reporting","financing"],"source":"// An equipment lender keeps an ageing report over its financed purchases and recorded repayments.\nprogram equipment_loan_reports \"Equipment loan reports\"\nuse reporting\nuse financing\n\nobject purchase \"Equipment loan\" {\n  fields { businessName: text, equipment: text, price: money }\n  columns: [businessName, equipment, price]\n  attach allowance = financing.limits {\n    expose create as create_allowance\n    borrower: owner, per_borrower: 200000 SAR\n    expose approve as approve_business\n  }\n  attach budget = financing.portfolio_limit {\n    expose create as create_budget\n    limit: 5000000 SAR\n    expose approve as approve_budget\n  }\n  attach loan = financing.installments {\n    expose create as create_loan\n    borrower: owner, capital: operator\n    months: 12, pricing: amortizing, profit_rate: 6%, disburse_to: borrower\n    limits: allowance, portfolio: budget\n    expose sign as sign_purchase_loan\n    expose disburse as fund_purchase\n  }\n  attach reports = reporting.portfolio { expose create as create_reports, on: loan }\n}\n"},
   {"id":"savings","title":"Savings circle","summary":"Six members contribute to a shared pot and receive it in their agreed calendar order.","headers":["savings"],"source":"// Six members contribute to a shared pot and receive it in their agreed calendar order.\nprogram neighbourhood_savings \"Savings circle\"\nuse savings\n\nobject group \"Savings group\" {\n  fields { groupName: text, purpose: text }\n  columns: [groupName, purpose]\n  attach circle = savings.circle {\n    expose create as create_circle\n    contribution: 500 SAR, members: 6, starts: 2027-01-01\n    expose disband as disband_circle\n    expose close as close_circle\n  }\n  attach membership = savings.membership {\n    expose create as create_membership\n    circle: circle, member: actor\n    expose activate as confirm_membership\n    expose withdraw as leave_circle\n  }\n  // Contributions and each member's payout follow the declared calendar.\n}\n"},
   {"id":"serviced","title":"Car financing","summary":"A car finance company services loans with late charges, payment reminders and early repayment.","headers":["escrow","financing","collections"],"source":"// A car finance company services loans with late charges, payment reminders and early repayment.\nprogram car_financing \"Car financing\"\nuse escrow\nuse financing\nuse collections\nobject car \"Car\" {\n fields { make: text, model: text, year: integer, vin: text, price: money }\n columns: [make, model, year, vin, price]\n attach sale = escrow.hold { expose create as create_sale, payer: actor, payee: operator, expose fund as purchase }\n attach limits = financing.limits { expose create as create_limits, borrower: actor, per_borrower: 250000 SAR }\n attach ceiling = financing.portfolio_limit { expose create as create_ceiling, limit: 10000000 SAR }\n attach plan = financing.installments {\n  borrower: actor, capital: operator\n  months: 36, pricing: flat_total, profit_rate: 8.5%, down_payment: 10%\n  apply: fines_profit_principal, payoff_rebate: 100%, write_off_after: 90d\n  funds: sale, limits: limits, portfolio: ceiling\n  expose create as finance, expose sign as sign_contract, expose payoff as payoff\n }\n attach late = financing.late_charge {\n   expose create as create_late\n  on: plan, grace: 3d, fine: 50 SAR, cap: 25 SAR\n  fines_to: operator, costs_to: operator, borrower: actor\n }\n attach reminders = collections.reminder { expose create as create_reminders, on: plan, operator: operator, before_days: 3, overdue_days: 1 }\n}\n"},
-  {"id":"wallet","title":"Workshop credits","summary":"Members prepay for workshop visits and the studio reserves each spend before charging it.","headers":["wallet"],"source":"// Members prepay for workshop visits and the studio reserves each spend before charging it.\nprogram workshop_credits \"Workshop credits\"\nuse wallet\n\nobject membership \"Membership\" {\n  fields { memberName: text, membershipNumber: text }\n  columns: [memberName, membershipNumber]\n  attach balance = wallet.balance {\n    expose create as create_balance\n    holder: owner\n    expose activate as open_balance\n    expose topup as add_credit\n    expose withdraw as withdraw_credit\n    expose close as close_balance\n  }\n  attach visit = wallet.spend {\n    expose create as create_visit\n    wallet: balance, payee: operator\n    economics pay { purpose: earning, sourceParty: owner }\n    expose reserve as reserve_visit\n    expose pay as charge_visit\n    expose cancel as cancel_visit\n  }\n}\n"},
+  {"id":"wallet","title":"Workshop credits","summary":"Members prepay for workshop visits and the studio reserves each spend before charging it.","headers":["wallet"],"source":"// Members prepay for workshop visits and the studio reserves each spend before charging it.\nprogram workshop_credits \"Workshop credits\"\nuse wallet\n\nobject membership \"Membership\" {\n  fields { memberName: text, membershipNumber: text }\n  columns: [memberName, membershipNumber]\n  attach balance = wallet.balance {\n    expose create as create_balance\n    holder: owner\n    expose activate as open_balance\n    expose topup as add_credit\n    expose withdraw as withdraw_credit\n    expose close as close_balance\n  }\n  attach visit = wallet.spend {\n    expose create as create_visit\n    wallet: balance, payee: operator, holder: owner\n    economics pay { purpose: earning, sourceParty: owner }\n    expose reserve as reserve_visit\n    expose pay as charge_visit\n    expose cancel as cancel_visit\n  }\n}\n"},
 ];