@substrat-run/engine-booking 0.5.2 → 0.6.0

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { type Money } from '@substrat-run/contracts';
+import { type ListPage, type Page } from '@substrat-run/contracts';
 /**
  * The conflict reasons this engine raises — its own vocabulary, narrowing the platform's
  * `conflict` code (#113). Exported so a vertical can branch on WHY a refusal happened
@@ -11,8 +11,12 @@ import { type Money } from '@substrat-run/contracts';
  */
 export declare const BOOKING_CONFLICT_REASONS: readonly ['already_joined', 'already_left', 'capacity_below_joined', 'hold_expired', "invalid_transition", 'not_yet_expired', 'reservation_full', 'resource_inactive'];
 export type BookingConflictReason = (typeof BOOKING_CONFLICT_REASONS)[number];
+export { availabilityInput, cancelReservationInput, createResourceInput, freeInterval, holdReservationInput, instantIn, joinReservationInput, leaveReservationInput, listReservationsInput, listResourcesInput, moveReservationInput, openReservationInput, participant, reservation, reservationAtInput, reservationIdIn, reservationState, resource, setResourceActiveInput, toInstant, type CreateResourceInput, type FreeInterval, type HoldReservationInput, type JoinReservationInput, type MoveReservationInput, type Participant, type Reservation, type ReservationState, type Resource, type SetResourceActiveInput, } from './schemas.js';
+export { bookingOperations, BOOKING_PERMISSIONS } from './operations.js';
+export { bookingLifecycles } from './lifecycle.js';
+import { type CreateResourceInput, type FreeInterval, type HoldReservationInput, type JoinReservationInput, type MoveReservationInput, type Participant, type Reservation, type ReservationState, type Resource } from './schemas.js';
 export { bookingEntities, reservationRow, resourceRow } from './entities.js';
-import { type ModuleRegistration, type OperationContext } from '@substrat-run/kernel';
+import { type ModuleRegistration, type OperationContext, type PageParams } from '@substrat-run/kernel';
 export declare const PERM: {
     create: string & z.$brand<"PermissionKey">;
     read: string & z.$brand<"PermissionKey">;
@@ -138,103 +142,6 @@ export declare class SlotUnavailable extends Error {
     readonly code = "SLOT_UNAVAILABLE";
     constructor(resourceId: string, startsAt: string, endsAt: string);
 }
-/**
- * The reservation's states — **taken from the entity registry, not restated**.
- *
- * These seven values used to be written out twice: here, and as the `state`
- * column's `z.enum` in `entities.ts`. Two descriptions of one fact, agreeing
- * only by everyone remembering to change both (#844). Reading the column's own
- * schema makes storage and domain unable to disagree, the same way
- * `engine-workorder` takes its published `status` from the registry.
- */
-export declare const reservationState: z.ZodEnum<{
-    cancelled: "cancelled";
-    completed: "completed";
-    confirmed: "confirmed";
-    expired: "expired";
-    held: "held";
-    in_service: "in_service";
-    no_show: "no_show";
-}>;
-export type ReservationState = z.infer<typeof reservationState>;
-export declare const createResourceInput: z.ZodObject<{
-    kind: z.ZodString;
-    name: z.ZodString;
-    capacity: z.ZodOptional<z.ZodNumber>;
-}, z.core.$strip>;
-export type CreateResourceInput = z.infer<typeof createResourceInput>;
-export declare const holdReservationInput: z.ZodObject<{
-    resourceId: z.ZodString;
-    startsAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
-    endsAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
-    expiresAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
-    quantity: z.ZodOptional<z.ZodNumber>;
-    fillTarget: z.ZodOptional<z.ZodNumber>;
-    note: z.ZodOptional<z.ZodString>;
-    now: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-export type HoldReservationInput = z.infer<typeof holdReservationInput>;
-export declare const joinReservationInput: z.ZodObject<{
-    reservationId: z.ZodString;
-    partyRef: z.core.$ZodBranded<z.ZodString, "DataSubjectId", "out">;
-    share: z.ZodOptional<z.ZodObject<{
-        amount: z.core.$ZodBranded<z.ZodString, "MoneyAmount", "out">;
-        currency: z.core.$ZodBranded<z.ZodString, "CurrencyCode", "out">;
-    }, z.core.$strip>>;
-    now: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-export type JoinReservationInput = z.infer<typeof joinReservationInput>;
-export declare const moveReservationInput: z.ZodObject<{
-    reservationId: z.ZodString;
-    resourceId: z.ZodOptional<z.ZodString>;
-    startsAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
-    endsAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
-    now: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-export type MoveReservationInput = z.infer<typeof moveReservationInput>;
-export interface Resource {
-    id: string;
-    kind: string;
-    name: string;
-    capacity: number;
-    active: boolean;
-    createdAt: string;
-}
-export interface Participant {
-    id: string;
-    partyRef: string;
-    share: Money | null;
-    joinedAt: string;
-    leftAt: string | null;
-}
-export interface Reservation {
-    id: string;
-    resourceId: string;
-    startsAt: string;
-    endsAt: string;
-    /** The state as stored. A `held` row keeps saying `held` until someone sweeps it. */
-    state: ReservationState;
-    /**
-     * What the row actually means *now* — `expired` once a hold's deadline has passed,
-     * whether or not anyone has swept it.
-     *
-     * Expiry is lazy, so `state` alone would render a dead hold as a live one: the
-     * console calendar would show a HELD cell counting down past 0:00 forever. Read
-     * paths render this; the transition guards use the stored `state`.
-     */
-    effectiveState: ReservationState;
-    quantity: number;
-    expiresAt: string | null;
-    fillTarget: number | null;
-    note: string | null;
-    createdBy: string;
-    createdAt: string;
-}
-export interface FreeInterval {
-    startsAt: string;
-    endsAt: string;
-    available: number;
-}
 /** The one definition of "a hold past its deadline is expired". */
 export declare function effectiveStateOf(state: ReservationState, expiresAt: string | null, now: string): ReservationState;
 export declare function createResource(ctx: OperationContext, rawInput: CreateResourceInput): Resource;
@@ -242,6 +149,20 @@ export declare function setResourceActive(ctx: OperationContext, input: {
     resourceId: string;
     active: boolean;
 }): Resource;
+/**
+ * The same resources, as a PAGE — what `booking/list-resources` answers (#811).
+ *
+ * Kernel-composed: the `WHERE`, the `ORDER BY`, the keyset tie-break, the
+ * `LIMIT` and the indexes behind them are all composed from this operation's
+ * declared `paged.over` vocabulary. What stays here is the projection, which is
+ * why `mapPage` exists — it re-shapes the entries and leaves the walk alone.
+ *
+ * `listResources` below is NOT replaced by it. That one is an in-scope fold a
+ * vertical calls inside its own transaction, where the bound is the vertical's
+ * (a club has eight courts, not eight thousand). The unbounded read #811 was
+ * filed against is the invocable ENDPOINT, and that is this one.
+ */
+export declare function listResourcesPage(ctx: OperationContext, page: PageParams): Page<Resource>;
 export declare function listResources(ctx: OperationContext, kind?: string): Resource[];
 /**
  * Place a tentative hold. Throws {@link SlotUnavailable} if the interval would
@@ -339,6 +260,27 @@ export declare function getReservation(ctx: OperationContext, reservationId: str
     reservation: Reservation;
     participants: Participant[];
 };
+/**
+ * Reservations overlapping a window, as a PAGE — what `booking/list` answers.
+ *
+ * Handler-composed rather than kernel-composed, and the cursor is `id`. The
+ * window is an OVERLAP test (`starts_at < to AND ends_at > from`), which the
+ * kernel's equality-only filter vocabulary cannot express — deliberately, since
+ * a range vocabulary is where a filter becomes a query language. So this read
+ * owns its own `WHERE`.
+ *
+ * The cursor has to be UNIQUE. This list shipped `ORDER BY starts_at, id`, and a
+ * keyset cursor on `starts_at` skips and repeats rows wherever two reservations
+ * share a start — which on a court schedule is every hour. Ids are ULIDs, so
+ * `id` is unique and still roughly chronological by creation; a caller rendering
+ * a calendar sorts the page it got by `startsAt` itself.
+ */
+export declare function listReservationsPage(ctx: OperationContext, input: {
+    resourceId?: string;
+    from?: string;
+    to?: string;
+    now?: string;
+} & ListPage): Page<Reservation>;
 export declare function listReservations(ctx: OperationContext, input: {
     resourceId?: string;
     from?: string;
@@ -356,6 +298,24 @@ export declare function listReservations(ctx: OperationContext, input: {
  * because capacity may exceed 1 (fungible pools), where "free" is a number and not
  * a boolean.
  */
+/**
+ * The same free intervals, as a PAGE — what `booking/availability` answers.
+ *
+ * A computed fold rather than a table walk, so the whole fold runs and the page
+ * is taken off the end of it. That is not the waste it looks like: the segments
+ * are derived by merging every live reservation in the window, so there is no
+ * partial computation to push into SQL.
+ *
+ * The segments are DISJOINT and returned in order, so `startsAt` is unique among
+ * them — which is what makes it a sound cursor here where it would not be over
+ * reservation rows.
+ */
+export declare function availabilityPage(ctx: OperationContext, input: {
+    resourceId: string;
+    from: string;
+    to: string;
+    now?: string;
+} & ListPage): Page<FreeInterval>;
 export declare function availability(ctx: OperationContext, input: {
     resourceId: string;
     from: string;
@@ -363,87 +323,4 @@ export declare function availability(ctx: OperationContext, input: {
     now?: string;
 }): FreeInterval[];
 export declare const bookingModule: ModuleRegistration;
-/**
- * The reservation's state machine, declared (#844).
- *
- * ## `on` versus `allow` — the distinction this engine forced
- *
- * Three of the nine guards gate operations that move NOTHING. `booking/move`
- * changes a reservation's times, `booking/open` its fill target, `booking/join`
- * adds a participant — each legal only in `held` or `confirmed`, and none of
- * them a transition. Declaring them as edges would have put three self-loops on
- * the diagram that no code performs.
- *
- * ## Why `booking/join` is `allow` even though joining can confirm
- *
- * A join that fills the last place calls `confirmReservation` — so a join CAN
- * end with a confirmed reservation. It is still not an edge. The move is
- * `booking/confirm`'s, performed by the in-scope function join composes, and it
- * goes through this same check on the way. Declaring `join: 'confirmed'` would
- * claim every join confirms, which is false for all but the last one.
- *
- * That is the composition rule holding: an engine composed BY CALL gets its
- * invariant from the callee, so the machine describes what each verb does
- * itself, not what its callees might do next.
- *
- * ## Lazy expiry is not an edge either
- *
- * `held → expired` IS declared — `booking/expire` performs it. What is not
- * declared is the lapse: a hold past its deadline reads as `expired` through
- * `effectiveStateOf` without any transition occurring, which is a projection for
- * display and allocation. The condition on the edge (`not_yet_expired`) stays in
- * the handler, where a lifecycle deliberately cannot reach.
- *
- * ## No `extensible` states
- *
- * Every state here carries an allocation or capacity consequence, and the four
- * terminal ones release capacity. Refining any of them is not a vertical's to do
- * yet, and the absence says so rather than leaving it to be inferred.
- */
-export declare const bookingLifecycles: {
-    readonly reservation: {
-        readonly field: "state";
-        readonly initial: "held";
-        readonly states: {
-            /** A deadline-bearing claim on capacity. */
-            readonly held: {
-                readonly on: {
-                    readonly 'booking/confirm': "confirmed";
-                    readonly 'booking/expire': "expired";
-                    readonly 'booking/cancel': "cancelled";
-                };
-                readonly allow: readonly ["booking/join", "booking/open", "booking/move"];
-            };
-            /** Capacity is committed. `complete` may skip `in_service` — starting is optional. */
-            readonly confirmed: {
-                readonly on: {
-                    readonly 'booking/start': "in_service";
-                    readonly 'booking/complete': "completed";
-                    readonly 'booking/no-show': "no_show";
-                    readonly 'booking/cancel': "cancelled";
-                };
-                readonly allow: readonly ["booking/join", "booking/open", "booking/move"];
-            };
-            /** Under way. No longer cancellable, and no longer re-timeable. */
-            readonly in_service: {
-                readonly on: {
-                    readonly 'booking/complete': "completed";
-                    readonly 'booking/no-show': "no_show";
-                };
-            };
-            readonly expired: {
-                readonly terminal: true;
-            };
-            readonly cancelled: {
-                readonly terminal: true;
-            };
-            readonly completed: {
-                readonly terminal: true;
-            };
-            readonly no_show: {
-                readonly terminal: true;
-            };
-        };
-    };
-};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EASL,KAAK,KAAK,EAEX,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,YACnC,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,cAAc,wBAId,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,CACX,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAU9E,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EAEtB,MAAM,sBAAsB,CAAC;AAY9B,eAAO,MAAM,IAAI;IACf,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,MAAM;IACN,IAAI;IACJ,QAAQ;IACR,eAAe;CAChB,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2C1B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;GA2C7B,CAAC;AAsCF,6EAA6E;AAC7E,qBAAa,eAAgB,SAAQ,KAAK;IAGtC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAJzB,QAAQ,CAAC,IAAI,sBAAsB;IACnC,YACW,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAIxB;CACF;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;EAAiD,CAAC;AAC/E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAKhE,eAAO,MAAM,mBAAmB;;;;iBAI9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;;;;;;;iBAS/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,eAAO,MAAM,oBAAoB;;;;;;;;iBAU/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,eAAO,MAAM,oBAAoB;;;;;;iBAS/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAmCxE,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,KAAK,EAAE,gBAAgB,CAAC;IACxB;;;;;;;OAOG;IACH,cAAc,EAAE,gBAAgB,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAWD,mEAAmE;AACnE,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,GAAG,EAAE,MAAM,GACV,gBAAgB,CAElB;AA2ID,wBAAgB,cAAc,CAAC,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,mBAAmB,GAAG,QAAQ,CAiB7F;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC7C,QAAQ,CAOV;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE,CAQ9E;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,oBAAoB,GAC7B,WAAW,CAuDb;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAiCb;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAsBb;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,oBAAoB,GAC7B;IAAE,WAAW,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE,CAgDxD;AAED,sFAAsF;AACtF;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACxE,WAAW,CA4Bb;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACpE,WAAW,CA0Bb;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D,WAAW,CAmBb;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,oBAAoB,GAC7B,WAAW,CAkDb;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAYb;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAoBb;AAED,wBAAgB,UAAU,CACxB,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAkBb;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,gBAAgB,EACrB,aAAa,EAAE,MAAM,EACrB,GAAG,CAAC,EAAE,MAAM,GACX;IAAE,WAAW,EAAE,WAAW,CAAC;IAAC,YAAY,EAAE,WAAW,EAAE,CAAA;CAAE,CAK3D;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACvE,WAAW,EAAE,CAuBf;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACpE,YAAY,EAAE,CAyChB;AA4JD,eAAO,MAAM,aAAa,EAAE,kBAI3B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,eAAO,MAAM,iBAAiB;;;;;YAQxB,4CAA4C;;;;;;;;;YAS5C,sFAAsF;;;;;;;;;;YAUtF,mEAAmE;;;;;;;;;;;;;;;;;;;;;CAavE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAaL,KAAK,QAAQ,EAEb,KAAK,IAAI,EAGV,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,YACnC,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,cAAc,wBAId,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,CACX,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAY9E,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,SAAS,EACT,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,sBAAsB,EACtB,SAAS,EACT,KAAK,mBAAmB,EACxB,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACb,KAAK,sBAAsB,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGnD,OAAO,EAML,KAAK,mBAAmB,EACxB,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACd,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EAErB,KAAK,UAAU,EAChB,MAAM,sBAAsB,CAAC;AAY9B,eAAO,MAAM,IAAI;IACf,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,MAAM;IACN,IAAI;IACJ,QAAQ;IACR,eAAe;CAChB,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+C1B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;GA2C7B,CAAC;AAiBF,6EAA6E;AAC7E,qBAAa,eAAgB,SAAQ,KAAK;IAGtC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAJzB,QAAQ,CAAC,IAAI,sBAAsB;IACnC,YACW,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EAIxB;CACF;AAmDD,mEAAmE;AACnE,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,GAAG,EAAE,MAAM,GACV,gBAAgB,CAElB;AA2ID,wBAAgB,cAAc,CAAC,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,mBAAmB,GAAG,QAAQ,CAiB7F;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC7C,QAAQ,CAOV;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,CAEzF;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE,CAQ9E;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,oBAAoB,GAC7B,WAAW,CAuDb;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAiCb;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAsBb;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,oBAAoB,GAC7B;IAAE,WAAW,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE,CAgDxD;AAED,sFAAsF;AACtF;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACxE,WAAW,CA4Bb;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACpE,WAAW,CA0Bb;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D,WAAW,CAmBb;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,oBAAoB,GAC7B,WAAW,CAkDb;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAYb;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAoBb;AAED,wBAAgB,UAAU,CACxB,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C,WAAW,CAkBb;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,gBAAgB,EACrB,aAAa,EAAE,MAAM,EACrB,GAAG,CAAC,EAAE,MAAM,GACX;IAAE,WAAW,EAAE,WAAW,CAAC;IAAC,YAAY,EAAE,WAAW,EAAE,CAAA;CAAE,CAK3D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,QAAQ,GAClF,IAAI,CAAC,WAAW,CAAC,CA+BnB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACvE,WAAW,EAAE,CAuBf;AAED;;;;;;;;;;GAUG;AACH;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,QAAQ,GAC/E,IAAI,CAAC,YAAY,CAAC,CAOpB;AAED,wBAAgB,YAAY,CAC1B,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACpE,YAAY,EAAE,CAyChB;AA4JD,eAAO,MAAM,aAAa,EAAE,kBAU3B,CAAC"}

package/dist/index.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { assertTransition, dataSubjectId, defineLifecycles, INVALID_TRANSITION, moduleManifest, money, permissionKey, substratError, } from '@substrat-run/contracts';
+import { assertTransition, dataSubjectId, INVALID_TRANSITION, LIST_PAGE_DEFAULT, LIST_PAGE_MAX, listsDeclaredBy, mapPage, moduleManifest, money, pageOf, permissionKey, substratError, operationInputsOf, } from '@substrat-run/contracts';
 /**
  * The conflict reasons this engine raises — its own vocabulary, narrowing the platform's
  * `conflict` code (#113). Exported so a vertical can branch on WHY a refusal happened
@@ -27,6 +27,14 @@ const conflict = (reason, message) => substratError('conflict', message, { reaso
 // entity-type constants its relation edges name, and the row schema to declare
 // an operation's output against without retyping this engine's shape.
 import { bookingEntities } from './entities.js';
+// The schemas are PUBLIC and re-exported unchanged: they were declared here as
+// interfaces until `defineOperations` needed them as schemas (see schemas.ts).
+export { availabilityInput, cancelReservationInput, createResourceInput, freeInterval, holdReservationInput, instantIn, joinReservationInput, leaveReservationInput, listReservationsInput, listResourcesInput, moveReservationInput, openReservationInput, participant, reservation, reservationAtInput, reservationIdIn, reservationState, resource, setResourceActiveInput, toInstant, } from './schemas.js';
+export { bookingOperations, BOOKING_PERMISSIONS } from './operations.js';
+import { bookingOperations } from './operations.js';
+export { bookingLifecycles } from './lifecycle.js';
+import { bookingLifecycles } from './lifecycle.js';
+import { createResourceInput, holdReservationInput, joinReservationInput, moveReservationInput, toInstant, } from './schemas.js';
 export { bookingEntities, reservationRow, resourceRow } from './entities.js';
 import { assertAllowed, ulid, } from '@substrat-run/kernel';
 // ============================================================================
@@ -82,6 +90,10 @@ export const bookingManifest = moduleManifest.parse({
     migrations: { journalDir: './migrations', compatibleFrom: '0.0.1' },
     attachmentTargets: [{ entityType: 'reservation', readPermission: 'booking:read' }],
     entityRelations: [{ entityType: 'reservation', parentType: 'resource' }],
+    // #811: DERIVED from the operations' own `paged.over`, never written twice —
+    // the index the kernel provisions and the vocabulary the operation offers are
+    // one fact. `table` and `idColumn` come from the entity registry.
+    lists: listsDeclaredBy(bookingOperations, bookingEntities),
     entitlementKey: 'booking',
     ui: {
         routes: [
@@ -139,26 +151,6 @@ export const bookingMigrations = [
 // ---------------------------------------------------------------------------
 // Instants
 // ---------------------------------------------------------------------------
-/**
- * Canonicalise to UTC before storing or comparing.
- *
- * This is load-bearing, not hygiene. The overlap check compares instants as
- * **strings** in SQL, and `contracts.instant` permits any offset — so
- * `2026-07-18T19:00:00+02:00` and `2026-07-18T17:00:00Z` are the same moment but
- * sort differently as text. Normalising every instant to `…Z` on the way in makes
- * lexicographic comparison equal chronological comparison, which is the only
- * reason the SQL in `allocatedOver` is correct.
- */
-function toInstant(value) {
-    const ms = Date.parse(value);
-    if (Number.isNaN(ms))
-        throw substratError('validation_failed', `invalid instant: ${value}`);
-    return new Date(ms).toISOString();
-}
-const instantIn = z
-    .string()
-    .refine((s) => !Number.isNaN(Date.parse(s)), { message: 'invalid instant' })
-    .transform(toInstant);
 /**
  * `now` is injectable so hold expiry is testable and replayable; absent, it is the
  * operation's instant (#812) rather than a fresh wall-clock reading, so every
@@ -185,54 +177,8 @@ export class SlotUnavailable extends Error {
 // ---------------------------------------------------------------------------
 // Schemas & shapes
 // ---------------------------------------------------------------------------
-/**
- * The reservation's states — **taken from the entity registry, not restated**.
- *
- * These seven values used to be written out twice: here, and as the `state`
- * column's `z.enum` in `entities.ts`. Two descriptions of one fact, agreeing
- * only by everyone remembering to change both (#844). Reading the column's own
- * schema makes storage and domain unable to disagree, the same way
- * `engine-workorder` takes its published `status` from the registry.
- */
-export const reservationState = bookingEntities.reservation.fields.shape.state;
 /** States that consume capacity. `held` additionally requires an unexpired `expires_at`. */
 const LIVE_STATES = ['held', 'confirmed', 'in_service'];
-export const createResourceInput = z.object({
-    kind: z.string().min(1),
-    name: z.string().min(1),
-    capacity: z.number().int().min(1).optional(),
-});
-export const holdReservationInput = z.object({
-    resourceId: z.string().min(1),
-    startsAt: instantIn,
-    endsAt: instantIn,
-    expiresAt: instantIn,
-    quantity: z.number().int().min(1).optional(),
-    fillTarget: z.number().int().min(1).optional(),
-    note: z.string().optional(),
-    now: z.string().optional(),
-});
-export const joinReservationInput = z.object({
-    reservationId: z.string().min(1),
-    /**
-     * The participant, as an opaque **data-subject** id — never a `PrincipalId`.
-     * A participant is a person, so this must be shreddable: it keys the erasure
-     * of the `participant-joined` / `participant-left` events below.
-     */
-    partyRef: dataSubjectId,
-    share: money.optional(),
-    now: z.string().optional(),
-});
-export const moveReservationInput = z.object({
-    reservationId: z.string().min(1),
-    /** Target resource. Omitted = stay on the current one. */
-    resourceId: z.string().min(1).optional(),
-    /** New start. Given alone, the booking is *shifted* — its duration is preserved. */
-    startsAt: instantIn.optional(),
-    /** New end. Given alone, the booking is re-sized from its existing start. */
-    endsAt: instantIn.optional(),
-    now: z.string().optional(),
-});
 const toResource = (r) => ({
     id: r.id,
     kind: r.kind,
@@ -303,7 +249,7 @@ function getRow(ctx, id) {
  * `entities.ts`, once as `reservationState` above (now derived from it) — and
  * the EDGES between them a third time, as the states each of these nine call
  * sites happened to pass. The
- * machine now lives in `bookingLifecycles` (bottom of this file), where the
+ * machine now lives in `bookingLifecycles` (`lifecycle.ts`), where the
  * compiler holds it to that enum.
  *
  * **Gated on the STORED state, not the effective one, and that is deliberate.**
@@ -379,6 +325,22 @@ export function setResourceActive(ctx, input) {
     ]);
     return toResource(getResourceRow(ctx, row.id));
 }
+/**
+ * The same resources, as a PAGE — what `booking/list-resources` answers (#811).
+ *
+ * Kernel-composed: the `WHERE`, the `ORDER BY`, the keyset tie-break, the
+ * `LIMIT` and the indexes behind them are all composed from this operation's
+ * declared `paged.over` vocabulary. What stays here is the projection, which is
+ * why `mapPage` exists — it re-shapes the entries and leaves the walk alone.
+ *
+ * `listResources` below is NOT replaced by it. That one is an in-scope fold a
+ * vertical calls inside its own transaction, where the bound is the vertical's
+ * (a club has eight courts, not eight thousand). The unbounded read #811 was
+ * filed against is the invocable ENDPOINT, and that is this one.
+ */
+export function listResourcesPage(ctx, page) {
+    return mapPage(ctx.page('resource', page), toResource);
+}
 export function listResources(ctx, kind) {
     const rows = kind
         ? ctx.sql.query('SELECT * FROM booking_resources WHERE kind = ? ORDER BY name', [kind])
@@ -757,6 +719,46 @@ export function getReservation(ctx, reservationId, now) {
         participants: allParticipants(ctx, reservationId),
     };
 }
+/**
+ * Reservations overlapping a window, as a PAGE — what `booking/list` answers.
+ *
+ * Handler-composed rather than kernel-composed, and the cursor is `id`. The
+ * window is an OVERLAP test (`starts_at < to AND ends_at > from`), which the
+ * kernel's equality-only filter vocabulary cannot express — deliberately, since
+ * a range vocabulary is where a filter becomes a query language. So this read
+ * owns its own `WHERE`.
+ *
+ * The cursor has to be UNIQUE. This list shipped `ORDER BY starts_at, id`, and a
+ * keyset cursor on `starts_at` skips and repeats rows wherever two reservations
+ * share a start — which on a court schedule is every hour. Ids are ULIDs, so
+ * `id` is unique and still roughly chronological by creation; a caller rendering
+ * a calendar sorts the page it got by `startsAt` itself.
+ */
+export function listReservationsPage(ctx, input) {
+    const clauses = [];
+    const params = [];
+    if (input.resourceId) {
+        clauses.push('resource_id = ?');
+        params.push(input.resourceId);
+    }
+    if (input.to) {
+        clauses.push('starts_at < ?');
+        params.push(toInstant(input.to));
+    }
+    if (input.from) {
+        clauses.push('ends_at > ?');
+        params.push(toInstant(input.from));
+    }
+    if (input.cursor) {
+        clauses.push('id > ?');
+        params.push(input.cursor);
+    }
+    const where = clauses.length ? ` WHERE ${clauses.join(' AND ')}` : '';
+    const limit = Math.min(input.limit ?? LIST_PAGE_DEFAULT, LIST_PAGE_MAX);
+    const now = nowOr(ctx, input.now);
+    const rows = ctx.sql.query(`SELECT * FROM booking_reservations${where} ORDER BY id LIMIT ?`, [...params, limit]);
+    return pageOf(rows.map((r) => toReservation(r, now)), limit, (e) => e.id);
+}
 export function listReservations(ctx, input) {
     const clauses = [];
     const params = [];
@@ -789,6 +791,26 @@ export function listReservations(ctx, input) {
  * because capacity may exceed 1 (fungible pools), where "free" is a number and not
  * a boolean.
  */
+/**
+ * The same free intervals, as a PAGE — what `booking/availability` answers.
+ *
+ * A computed fold rather than a table walk, so the whole fold runs and the page
+ * is taken off the end of it. That is not the waste it looks like: the segments
+ * are derived by merging every live reservation in the window, so there is no
+ * partial computation to push into SQL.
+ *
+ * The segments are DISJOINT and returned in order, so `startsAt` is unique among
+ * them — which is what makes it a sound cursor here where it would not be over
+ * reservation rows.
+ */
+export function availabilityPage(ctx, input) {
+    const all = availability(ctx, input);
+    const limit = Math.min(input.limit ?? LIST_PAGE_DEFAULT, LIST_PAGE_MAX);
+    const cursor = input.cursor;
+    const at = cursor === undefined ? 0 : all.findIndex((s) => s.startsAt > cursor);
+    const start = at < 0 ? all.length : at;
+    return pageOf(all.slice(start, start + limit), limit, (e) => e.startsAt);
+}
 export function availability(ctx, input) {
     const from = toInstant(input.from);
     const to = toInstant(input.to);
@@ -844,7 +866,8 @@ const setResourceActiveOp = async (ctx, input) => {
 };
 const listResourcesOp = async (ctx, input) => {
     assertAllowed(await ctx.check(PERM.read));
-    return listResources(ctx, input?.kind);
+    // `input` is genuinely absent when invoked with no body at all (`inputOptional`).
+    return listResourcesPage(ctx, { ...input, filters: { kind: input?.kind } });
 };
 const holdOp = async (ctx, input) => {
     assertAllowed(await ctx.check(PERM.hold));
@@ -897,22 +920,21 @@ const getOp = async (ctx, input) => {
 };
 const listOp = async (ctx, input) => {
     assertAllowed(await ctx.check(PERM.read));
-    return listReservations(ctx, input ?? {});
+    return listReservationsPage(ctx, input ?? {});
 };
 const availabilityOp = async (ctx, input) => {
     assertAllowed(await ctx.check(PERM.read));
-    return availability(ctx, input);
+    return availabilityPage(ctx, input);
 };
 /**
- * The registered handlers, extracted so the lifecycle below can be checked
- * against them.
+ * The registered handlers — the implementation half of `bookingOperations`.
  *
- * This is why booking's lifecycle lives at the bottom of `index.ts` rather than
- * in its own `lifecycle.ts` the way workorder's does: booking has not adopted
- * `defineOperations`, so the only description of its operation surface is this
- * map — and a separate file importing it would close a cycle. Declaring an
- * operation-name list beside it instead would be exactly the second description
- * this change exists to delete.
+ * This map used to be the only description of booking's operation surface, and
+ * the lifecycle had to live at the bottom of this file because of it: a
+ * `lifecycle.ts` importing the map would have closed a cycle. `operations.ts`
+ * ended that — a DECLARATION reaches only `entities.ts` and `schemas.ts`, so the
+ * lifecycle now checks itself against the declared registry from its own file,
+ * the way workorder's always has.
  */
 const OPERATIONS = {
     'booking/create-resource': createResourceOp,
@@ -937,80 +959,11 @@ export const bookingModule = {
     manifest: bookingManifest,
     migrations: bookingMigrations,
     operations: OPERATIONS,
+    /**
+     * #893: the host parses each operation's declared `input` before the guards
+     * and the handler see it. Derived from the same declaration that produces the
+     * manifest and the routes — the schema is written once, in `operations.ts`.
+     */
+    operationInputs: operationInputsOf(bookingOperations),
 };
-/**
- * The reservation's state machine, declared (#844).
- *
- * ## `on` versus `allow` — the distinction this engine forced
- *
- * Three of the nine guards gate operations that move NOTHING. `booking/move`
- * changes a reservation's times, `booking/open` its fill target, `booking/join`
- * adds a participant — each legal only in `held` or `confirmed`, and none of
- * them a transition. Declaring them as edges would have put three self-loops on
- * the diagram that no code performs.
- *
- * ## Why `booking/join` is `allow` even though joining can confirm
- *
- * A join that fills the last place calls `confirmReservation` — so a join CAN
- * end with a confirmed reservation. It is still not an edge. The move is
- * `booking/confirm`'s, performed by the in-scope function join composes, and it
- * goes through this same check on the way. Declaring `join: 'confirmed'` would
- * claim every join confirms, which is false for all but the last one.
- *
- * That is the composition rule holding: an engine composed BY CALL gets its
- * invariant from the callee, so the machine describes what each verb does
- * itself, not what its callees might do next.
- *
- * ## Lazy expiry is not an edge either
- *
- * `held → expired` IS declared — `booking/expire` performs it. What is not
- * declared is the lapse: a hold past its deadline reads as `expired` through
- * `effectiveStateOf` without any transition occurring, which is a projection for
- * display and allocation. The condition on the edge (`not_yet_expired`) stays in
- * the handler, where a lifecycle deliberately cannot reach.
- *
- * ## No `extensible` states
- *
- * Every state here carries an allocation or capacity consequence, and the four
- * terminal ones release capacity. Refining any of them is not a vertical's to do
- * yet, and the absence says so rather than leaving it to be inferred.
- */
-export const bookingLifecycles = defineLifecycles(bookingEntities, OPERATIONS)({
-    reservation: {
-        field: 'state',
-        initial: 'held',
-        states: {
-            /** A deadline-bearing claim on capacity. */
-            held: {
-                on: {
-                    'booking/confirm': 'confirmed',
-                    'booking/expire': 'expired',
-                    'booking/cancel': 'cancelled',
-                },
-                allow: ['booking/join', 'booking/open', 'booking/move'],
-            },
-            /** Capacity is committed. `complete` may skip `in_service` — starting is optional. */
-            confirmed: {
-                on: {
-                    'booking/start': 'in_service',
-                    'booking/complete': 'completed',
-                    'booking/no-show': 'no_show',
-                    'booking/cancel': 'cancelled',
-                },
-                allow: ['booking/join', 'booking/open', 'booking/move'],
-            },
-            /** Under way. No longer cancellable, and no longer re-timeable. */
-            in_service: {
-                on: {
-                    'booking/complete': 'completed',
-                    'booking/no-show': 'no_show',
-                },
-            },
-            expired: { terminal: true },
-            cancelled: { terminal: true },
-            completed: { terminal: true },
-            no_show: { terminal: true },
-        },
-    },
-});
 //# sourceMappingURL=index.js.map