@voyant-travel/catalog 0.118.0 → 0.119.0

package/dist/booking-engine/index.d.ts

@@ -24,6 +24,7 @@ export { type AccommodationSubStep, type AddonGroup, type AddonOffer, type Booki
 export { bookingDraftsTable, type InsertBookingDraft, type SelectBookingDraft, } from "./drafts-schema.js";
 export { createBookingDraft, DEFAULT_DRAFT_TTL_MS, deleteBookingDraft, findExpiredDrafts, getBookingDraft, markDraftConsumed, type UpdateDraftPatch, type UpsertDraftInput, updateBookingDraft, } from "./drafts-service.js";
 export { BookingEngineError, type BookingEngineErrorCode, NO_ADAPTER_REGISTERED, NO_HANDLER_REGISTERED, NoAdapterRegisteredError, NoOwnedHandlerRegisteredError, ORDER_ALREADY_CANCELLED, ORDER_NOT_FOUND, QUOTE_EXPIRED, QUOTE_MISMATCH, QUOTE_NOT_FOUND, QuoteExpiredError, QuoteMismatchError, RESERVE_FAILED, ReserveFailedError, SNAPSHOT_CONTENT_UNAVAILABLE, SnapshotContentUnavailableError, } from "./errors.js";
+export { type CatalogBookingRouteModuleOptions, type CatalogOwnedProductSummary, type CatalogProductContentReadContext, type CatalogProductContentScope, type CatalogResolvedDeparture, type CatalogResolvedProductContent, createCatalogBookingOrdersRoutes, mountCatalogBookingRoutes, type SlotRow, } from "./operator-routes.js";
 export { getOrderById, type ListOrdersQuery, type ListOrdersResult, listOrders, } from "./orders.js";
 export { type CommitOwnedRequest, type CommitOwnedResult, type ComputeQuoteRequest, type ComputeQuoteResult, createOwnedBookingHandlerRegistry, type HoldRequest, type HoldResult, OWNED_SOURCE_KIND, type OwnedBookingHandler, type OwnedBookingHandlerRegistry, type OwnedHandlerContext, type OwnedQuoteScope, } from "./owned-handler.js";
 export type { AppliedOffer, CodeStatus, PromotionEvaluationInput, PromotionEvaluationOutput, } from "./promotions-contract.js";

package/dist/booking-engine/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/booking-engine/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,UAAU,GACX,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,YAAY,GACb,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,mBAAmB,EACnB,cAAc,EACd,yBAAyB,EACzB,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,KAAK,eAAe,EACpB,eAAe,EACf,0BAA0B,GAC3B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,wBAAwB,GAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,kBAAkB,EAClB,KAAK,sBAAsB,EAC3B,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,EACvB,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,UAAU,GACX,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,iCAAiC,EACjC,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,mBAAmB,EACxB,KAAK,eAAe,GACrB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,YAAY,EACZ,UAAU,EACV,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,oBAAoB,EACpB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,WAAW,GACZ,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,2BAA2B,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,KAAK,iCAAiC,EACtC,KAAK,sBAAsB,EAC3B,KAAK,gCAAgC,EACrC,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EACpC,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,6BAA6B,EAClC,KAAK,uBAAuB,EAC5B,KAAK,iCAAiC,EACtC,KAAK,2BAA2B,EAChC,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,KAAK,sBAAsB,EAC3B,8BAA8B,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,uBAAuB,GAC7B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,WAAW,GACZ,MAAM,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/booking-engine/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,UAAU,GACX,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,YAAY,GACb,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,mBAAmB,EACnB,cAAc,EACd,yBAAyB,EACzB,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,KAAK,eAAe,EACpB,eAAe,EACf,0BAA0B,GAC3B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,wBAAwB,GAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,kBAAkB,EAClB,KAAK,sBAAsB,EAC3B,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,EACvB,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,4BAA4B,EAC5B,+BAA+B,GAChC,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,6BAA6B,EAClC,gCAAgC,EAChC,yBAAyB,EACzB,KAAK,OAAO,GACb,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,UAAU,GACX,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,iCAAiC,EACjC,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,mBAAmB,EACxB,KAAK,eAAe,GACrB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,YAAY,EACZ,UAAU,EACV,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,oBAAoB,EACpB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,WAAW,GACZ,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,2BAA2B,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,KAAK,iCAAiC,EACtC,KAAK,sBAAsB,EAC3B,KAAK,gCAAgC,EACrC,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EACpC,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,EACrC,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,6BAA6B,EAClC,KAAK,uBAAuB,EAC5B,KAAK,iCAAiC,EACtC,KAAK,2BAA2B,EAChC,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,KAAK,sBAAsB,EAC3B,8BAA8B,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,uBAAuB,GAC7B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,WAAW,GACZ,MAAM,WAAW,CAAA"}

package/dist/booking-engine/index.js

@@ -24,6 +24,7 @@ export { DEFAULT_PAX_BANDS, DEFAULT_PAX_TOTAL, defaultBookingFields, defaultDraf
 export { bookingDraftsTable, } from "./drafts-schema.js";
 export { createBookingDraft, DEFAULT_DRAFT_TTL_MS, deleteBookingDraft, findExpiredDrafts, getBookingDraft, markDraftConsumed, updateBookingDraft, } from "./drafts-service.js";
 export { BookingEngineError, NO_ADAPTER_REGISTERED, NO_HANDLER_REGISTERED, NoAdapterRegisteredError, NoOwnedHandlerRegisteredError, ORDER_ALREADY_CANCELLED, ORDER_NOT_FOUND, QUOTE_EXPIRED, QUOTE_MISMATCH, QUOTE_NOT_FOUND, QuoteExpiredError, QuoteMismatchError, RESERVE_FAILED, ReserveFailedError, SNAPSHOT_CONTENT_UNAVAILABLE, SnapshotContentUnavailableError, } from "./errors.js";
+export { createCatalogBookingOrdersRoutes, mountCatalogBookingRoutes, } from "./operator-routes.js";
 export { getOrderById, listOrders, } from "./orders.js";
 export { createOwnedBookingHandlerRegistry, OWNED_SOURCE_KIND, } from "./owned-handler.js";
 export { DEFAULT_QUOTE_TTL_MS, quoteEntity, } from "./quote.js";

package/dist/booking-engine/operator-routes.d.ts

@@ -0,0 +1,154 @@
+/**
+ * Catalog booking-engine route module — the full admin + public booking
+ * surface, owned by `@voyant-travel/catalog`.
+ *
+ * A deployment composes this and supplies two structural options:
+ *   - `booking` — the `CatalogBookingRoutesOptions` (db / registries /
+ *     hold-ttl / promotions / tax hooks) it already builds today, and
+ *   - `resolveRegistry(c)` — pulls the process-local `SourceAdapterRegistry`
+ *     off the request context (cancel needs it to dispatch to adapters).
+ *
+ * The module mounts the shared lifecycle from `./routes.js` on **two**
+ * surfaces and adds the admin-only order-management endpoints:
+ *
+ *   POST   /v1/{admin,public}/catalog/quote          → quoteEntity
+ *   POST   /v1/{admin,public}/catalog/book           → bookEntity
+ *   PUT    /v1/{admin,public}/catalog/drafts/:id      → upsert booking draft
+ *   GET    /v1/{admin,public}/catalog/drafts/:id      → read booking draft
+ *   DELETE /v1/{admin,public}/catalog/drafts/:id      → delete booking draft
+ *   POST   /v1/{admin,public}/catalog/holds/place     → place hold
+ *   POST   /v1/{admin,public}/catalog/holds/release   → release hold
+ *   GET    /v1/admin/catalog/orders                   → listOrders
+ *   GET    /v1/admin/catalog/orders/:id               → getOrderById
+ *   POST   /v1/admin/catalog/orders/:id/cancel        → cancelEntity
+ *   GET    /v1/{admin,public}/catalog/slots           → availability slots
+ *   GET    /v1/admin/bookings/:id/catalog-snapshot    → frozen catalog snapshot
+ *
+ * Auth posture comes from the deployment's `createApp` middleware chain —
+ * `/v1/admin/...` requires staff, `/v1/public/...` accepts the configured
+ * public actors. Per booking-journey-architecture §10 Phase B.
+ *
+ * The slots + catalog-snapshot handlers read across module boundaries
+ * (`@voyant-travel/inventory` / `@voyant-travel/operations`), both of which
+ * already depend on `@voyant-travel/catalog`. Statically importing them here
+ * would create an import cycle, so the cross-package reads are supplied by the
+ * deployment as INJECTED option functions — the package never imports those
+ * modules, it only calls the readers the deployment hands it.
+ */
+import type { AnyDrizzleDb } from "@voyant-travel/db";
+import { type Context, Hono } from "hono";
+import type { SourceAdapterRegistry } from "./registry.js";
+import { type CatalogBookingRoutesOptions } from "./routes.js";
+/**
+ * A single resolved departure/slot as projected by `getProductContent`.
+ * Structural mirror of `@voyant-travel/inventory`'s `ProductDeparture` so the
+ * package needn't import inventory — only the fields the slots handler maps.
+ */
+export interface CatalogResolvedDeparture {
+    id: string;
+    starts_at: string;
+    ends_at?: string | null;
+    status?: string | null;
+    capacity?: number | null;
+    remaining?: number | null;
+}
+/**
+ * Structural result of the injected `getProductContent` reader. Mirrors
+ * `@voyant-travel/inventory/service-content`'s `ResolvedProductContent`, but
+ * narrowed to the only field the slots handler reads (`content.departures`).
+ */
+export interface CatalogResolvedProductContent {
+    content: {
+        departures?: ReadonlyArray<CatalogResolvedDeparture>;
+    };
+}
+/** Locale scope passed to the injected `getProductContent` reader. */
+export interface CatalogProductContentScope {
+    preferredLocales: ReadonlyArray<string>;
+}
+/** Adapter/runtime context passed to the injected `getProductContent` reader. */
+export interface CatalogProductContentReadContext {
+    registry: SourceAdapterRegistry;
+    forceFresh?: boolean;
+}
+/**
+ * Owned-product summary returned by the injected `getOwnedProductById` reader.
+ * Structural mirror of the inventory `productsService.getProductById` result,
+ * narrowed to the two fields the snapshot fallback reads.
+ */
+export interface CatalogOwnedProductSummary {
+    name: string | null;
+    description: string | null;
+}
+/**
+ * Deployment-supplied options for the catalog booking-engine route module.
+ * Structural only — no deployment imports, no platform bindings. The three
+ * cross-package readers (`getProductContent`, `listAvailabilitySlots`,
+ * `getOwnedProductById`) are INJECTED so the package can host the slots +
+ * snapshot handlers without statically importing `@voyant-travel/inventory`
+ * or `@voyant-travel/operations` (both of which depend on catalog).
+ */
+export interface CatalogBookingRouteModuleOptions {
+    /**
+     * The booking-engine lifecycle options (db, source/owned registries,
+     * hold-ttl, promotions, tax transforms). The deployment already builds
+     * these for `createCatalogBookingRoutes`.
+     */
+    booking: CatalogBookingRoutesOptions;
+    /**
+     * Resolve the process-local source-adapter registry for a request. Used by
+     * the order-cancel handler to dispatch to the registered adapter.
+     */
+    resolveRegistry(c: Context): SourceAdapterRegistry;
+    /**
+     * Read the resolved product content for a sourced product (slots path).
+     * Modelled on `@voyant-travel/inventory/service-content`'s
+     * `getProductContent`; structural so catalog doesn't import inventory.
+     */
+    getProductContent(db: AnyDrizzleDb, productId: string, scope: CatalogProductContentScope, ctx: CatalogProductContentReadContext): Promise<CatalogResolvedProductContent | null>;
+    /**
+     * Read the owned `availability_slots` rows for a product (owned slots path).
+     * The deployment owns the drizzle query against
+     * `@voyant-travel/operations`; this returns the already-mapped rows.
+     */
+    listAvailabilitySlots(db: AnyDrizzleDb, productId: string, todayIso: string): Promise<SlotRow[]>;
+    /**
+     * Read an owned product by id for the snapshot fallback. Structural mirror
+     * of inventory `productsService.getProductById`; returns `{ name,
+     * description } | null`.
+     */
+    getOwnedProductById(db: AnyDrizzleDb, productId: string): Promise<CatalogOwnedProductSummary | null>;
+}
+/**
+ * The slot row shape returned by both the sourced and owned slots paths.
+ * Date-bearing fields accept `Date | string` because the owned path forwards
+ * raw drizzle timestamp columns (serialized to ISO strings by `c.json`),
+ * while the sourced path projects ISO strings directly.
+ */
+export interface SlotRow {
+    id: string;
+    dateLocal: string;
+    startsAt: string | Date;
+    endsAt: string | Date | null;
+    timezone: string;
+    status: string;
+    unlimited: boolean;
+    remainingPax: number | null;
+    initialPax: number | null;
+    nights: number | null;
+    days: number | null;
+}
+/**
+ * Admin-only order-management routes (relative paths; mount at
+ * `/v1/admin/catalog`). Surfaces snapshot rows cross-vertically and routes
+ * cancels back through the registered source adapter.
+ */
+export declare function createCatalogBookingOrdersRoutes(options: CatalogBookingRouteModuleOptions): Hono;
+/**
+ * Mount the full catalog booking-engine surface (both surfaces + admin
+ * orders) onto an absolute-path Hono app. Mirrors the operator's previous
+ * `mountCatalogBookingRoutes`, minus the cross-package snapshot/slots
+ * handlers that have to stay in the deployment (cycle).
+ */
+export declare function mountCatalogBookingRoutes(hono: Hono, options: CatalogBookingRouteModuleOptions): void;
+//# sourceMappingURL=operator-routes.d.ts.map

package/dist/booking-engine/operator-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-routes.d.ts","sourceRoot":"","sources":["../../src/booking-engine/operator-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAGrD,OAAO,EAAE,KAAK,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAiBzC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAC1D,OAAO,EAAE,KAAK,2BAA2B,EAA8B,MAAM,aAAa,CAAA;AAE1F;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE;QAAE,UAAU,CAAC,EAAE,aAAa,CAAC,wBAAwB,CAAC,CAAA;KAAE,CAAA;CAClE;AAED,sEAAsE;AACtE,MAAM,WAAW,0BAA0B;IACzC,gBAAgB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CACxC;AAED,iFAAiF;AACjF,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,qBAAqB,CAAA;IAC/B,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gCAAgC;IAC/C;;;;OAIG;IACH,OAAO,EAAE,2BAA2B,CAAA;IACpC;;;OAGG;IACH,eAAe,CAAC,CAAC,EAAE,OAAO,GAAG,qBAAqB,CAAA;IAClD;;;;OAIG;IACH,iBAAiB,CACf,EAAE,EAAE,YAAY,EAChB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,0BAA0B,EACjC,GAAG,EAAE,gCAAgC,GACpC,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAA;IAChD;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAChG;;;;OAIG;IACH,mBAAmB,CACjB,EAAE,EAAE,YAAY,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAA;CAC9C;AAED;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB;AAaD;;;;GAIG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,gCAAgC,GAAG,IAAI,CAQhG;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,gCAAgC,GACxC,IAAI,CAwBN"}

package/dist/booking-engine/operator-routes.js

@@ -0,0 +1,363 @@
+/**
+ * Catalog booking-engine route module — the full admin + public booking
+ * surface, owned by `@voyant-travel/catalog`.
+ *
+ * A deployment composes this and supplies two structural options:
+ *   - `booking` — the `CatalogBookingRoutesOptions` (db / registries /
+ *     hold-ttl / promotions / tax hooks) it already builds today, and
+ *   - `resolveRegistry(c)` — pulls the process-local `SourceAdapterRegistry`
+ *     off the request context (cancel needs it to dispatch to adapters).
+ *
+ * The module mounts the shared lifecycle from `./routes.js` on **two**
+ * surfaces and adds the admin-only order-management endpoints:
+ *
+ *   POST   /v1/{admin,public}/catalog/quote          → quoteEntity
+ *   POST   /v1/{admin,public}/catalog/book           → bookEntity
+ *   PUT    /v1/{admin,public}/catalog/drafts/:id      → upsert booking draft
+ *   GET    /v1/{admin,public}/catalog/drafts/:id      → read booking draft
+ *   DELETE /v1/{admin,public}/catalog/drafts/:id      → delete booking draft
+ *   POST   /v1/{admin,public}/catalog/holds/place     → place hold
+ *   POST   /v1/{admin,public}/catalog/holds/release   → release hold
+ *   GET    /v1/admin/catalog/orders                   → listOrders
+ *   GET    /v1/admin/catalog/orders/:id               → getOrderById
+ *   POST   /v1/admin/catalog/orders/:id/cancel        → cancelEntity
+ *   GET    /v1/{admin,public}/catalog/slots           → availability slots
+ *   GET    /v1/admin/bookings/:id/catalog-snapshot    → frozen catalog snapshot
+ *
+ * Auth posture comes from the deployment's `createApp` middleware chain —
+ * `/v1/admin/...` requires staff, `/v1/public/...` accepts the configured
+ * public actors. Per booking-journey-architecture §10 Phase B.
+ *
+ * The slots + catalog-snapshot handlers read across module boundaries
+ * (`@voyant-travel/inventory` / `@voyant-travel/operations`), both of which
+ * already depend on `@voyant-travel/catalog`. Statically importing them here
+ * would create an import cycle, so the cross-package reads are supplied by the
+ * deployment as INJECTED option functions — the package never imports those
+ * modules, it only calls the readers the deployment hands it.
+ */
+import { and, eq } from "drizzle-orm";
+import { Hono } from "hono";
+import { bookingCatalogSnapshotTable, catalogSourcedEntriesTable } from "../schema.js";
+import { readSourcedEntry } from "../services/sourced-entry-service.js";
+import { cancelEntity } from "./cancel.js";
+import { BookingEngineError, NO_ADAPTER_REGISTERED, NO_HANDLER_REGISTERED, ORDER_ALREADY_CANCELLED, ORDER_NOT_FOUND, QUOTE_EXPIRED, QUOTE_MISMATCH, QUOTE_NOT_FOUND, RESERVE_FAILED, } from "./errors.js";
+import { getOrderById, listOrders } from "./orders.js";
+import { createCatalogBookingRoutes } from "./routes.js";
+function getDb(options, c) {
+    return options.booking.resolveDb(c);
+}
+/**
+ * Admin-only order-management routes (relative paths; mount at
+ * `/v1/admin/catalog`). Surfaces snapshot rows cross-vertically and routes
+ * cancels back through the registered source adapter.
+ */
+export function createCatalogBookingOrdersRoutes(options) {
+    const hono = new Hono();
+    hono.get("/orders", async (c) => handleListOrders(c, options));
+    hono.get("/orders/:id", async (c) => handleGetOrder(c, options));
+    hono.post("/orders/:id/cancel", async (c) => handleCancel(c, options));
+    return hono;
+}
+/**
+ * Mount the full catalog booking-engine surface (both surfaces + admin
+ * orders) onto an absolute-path Hono app. Mirrors the operator's previous
+ * `mountCatalogBookingRoutes`, minus the cross-package snapshot/slots
+ * handlers that have to stay in the deployment (cycle).
+ */
+export function mountCatalogBookingRoutes(hono, options) {
+    for (const prefix of ["/v1/admin/catalog", "/v1/public/catalog"]) {
+        hono.route(prefix, createCatalogBookingRoutes(options.booking));
+    }
+    // Admin-only — order management (list / get / cancel).
+    hono.route("/v1/admin/catalog", createCatalogBookingOrdersRoutes(options));
+    // List available departures / slots for a product. Drives the
+    // storefront's departure-select on the product detail page —
+    // customers pick from real available options, not a free-form
+    // calendar (per booking-journey-architecture §10).
+    for (const prefix of ["/v1/admin/catalog", "/v1/public/catalog"]) {
+        hono.get(`${prefix}/slots`, async (c) => handleListSlots(c, options));
+    }
+    // Admin-only — read the catalog snapshot tied to a booking.
+    // Backs the BookingCatalogSourceCard on the booking detail page;
+    // surfaces the frozen entity reference + pricing + (optionally) the
+    // captured content payload so operators can see exactly what the
+    // customer was quoted at booking time.
+    hono.get("/v1/admin/bookings/:id/catalog-snapshot", async (c) => handleGetBookingSnapshot(c, options));
+}
+// ─────────────────────────────────────────────────────────────────
+// Handlers
+// ─────────────────────────────────────────────────────────────────
+async function handleListOrders(c, options) {
+    const db = getDb(options, c);
+    const url = new URL(c.req.url);
+    const bookingId = url.searchParams.get("bookingId") ?? undefined;
+    const entityModule = url.searchParams.get("entityModule") ?? undefined;
+    const sourceKindsParam = url.searchParams.get("sourceKinds");
+    const sourceKinds = sourceKindsParam ? sourceKindsParam.split(",") : undefined;
+    const limit = Number.parseInt(url.searchParams.get("limit") ?? "50", 10);
+    const offset = Number.parseInt(url.searchParams.get("offset") ?? "0", 10);
+    const result = await listOrders(db, {
+        bookingId,
+        entityModule,
+        sourceKinds,
+        limit: Number.isFinite(limit) ? limit : 50,
+        offset: Number.isFinite(offset) ? offset : 0,
+    });
+    return c.json({ rows: result.rows });
+}
+async function handleGetOrder(c, options) {
+    const db = getDb(options, c);
+    const id = c.req.param("id");
+    if (!id)
+        return c.json({ error: "id is required" }, 400);
+    const row = await getOrderById(db, id);
+    if (!row)
+        return c.json({ error: "order not found" }, 404);
+    return c.json(row);
+}
+async function handleCancel(c, options) {
+    let body;
+    try {
+        body = await c.req.json();
+    }
+    catch {
+        body = {};
+    }
+    if (!body.bookingId || !body.entityModule || !body.entityId) {
+        return c.json({ error: "bookingId, entityModule, and entityId are required in the body" }, 400);
+    }
+    const db = getDb(options, c);
+    const registry = options.resolveRegistry(c);
+    const correlationId = c.req.header("x-request-id") ?? cryptoRandom();
+    try {
+        const result = await cancelEntity(db, { registry }, {
+            bookingId: body.bookingId,
+            entityModule: body.entityModule,
+            entityId: body.entityId,
+            reason: body.reason,
+            adapterContext: { connection_id: "engine", correlation_id: correlationId },
+        });
+        return c.json(result);
+    }
+    catch (err) {
+        return errorResponse(c, err);
+    }
+}
+async function handleListSlots(c, options) {
+    const url = new URL(c.req.url);
+    const entityModule = url.searchParams.get("entityModule");
+    const entityId = url.searchParams.get("entityId");
+    if (!entityModule || !entityId) {
+        return c.json({ error: "entityModule and entityId are required" }, 400);
+    }
+    // Cruises + accommodations have vertical-specific scheduling
+    // (sailings, rate plans) surfaced by the detail page directly off
+    // their content payloads. This endpoint only serves products.
+    if (entityModule !== "products") {
+        return c.json({ rows: [] });
+    }
+    const db = getDb(options, c);
+    // Sourced products carry their schedule in the sourced-content
+    // payload — the upstream's `getContent` is the source of truth, not
+    // any owned `availability_slots` row. Owned products keep using the
+    // owned table since `buildOwnedProductContent` doesn't project
+    // availability_slots into ProductContent.departures.
+    const sourcedEntry = await readSourcedEntry(db, "products", entityId);
+    if (sourcedEntry) {
+        const registry = options.resolveRegistry(c);
+        const acceptHeader = c.req.header("accept-language") ?? "";
+        const preferredLocales = acceptHeader
+            .split(",")
+            .map((s) => s.split(";")[0]?.trim())
+            .filter((s) => Boolean(s));
+        const resolved = await options.getProductContent(db, entityId, { preferredLocales: preferredLocales.length > 0 ? preferredLocales : ["en-GB"] }, { registry, forceFresh: true });
+        const today = new Date().toISOString().slice(0, 10);
+        const rows = (resolved?.content.departures ?? [])
+            .filter((d) => {
+            if (d.status === "sold_out" || d.status === "closed")
+                return false;
+            return d.starts_at.slice(0, 10) >= today;
+        })
+            .slice(0, 60)
+            .map((d) => ({
+            id: d.id,
+            dateLocal: d.starts_at.slice(0, 10),
+            startsAt: d.starts_at,
+            endsAt: d.ends_at ?? null,
+            timezone: "UTC",
+            status: d.status ?? "open",
+            unlimited: d.capacity == null && d.remaining == null,
+            remainingPax: d.remaining ?? null,
+            initialPax: d.capacity ?? null,
+            nights: null,
+            days: null,
+        }));
+        return c.json({ rows });
+    }
+    const today = new Date().toISOString().slice(0, 10);
+    const rows = await options.listAvailabilitySlots(db, entityId, today);
+    return c.json({ rows });
+}
+/**
+ * GET /v1/admin/bookings/:id/catalog-snapshot
+ *
+ * Returns the `booking_catalog_snapshot` row for this booking — the
+ * frozen view of what the customer actually purchased: which entity
+ * (product / cruise / accommodations), which source (owned / Bokun / Mews),
+ * the quoted pricing breakdown, and the captured content payload.
+ *
+ * The response is **enriched server-side** with operator-friendly
+ * resolved fields so the admin UI doesn't have to chase ids:
+ *   - `resolved.entity.title`       — human title from the sourced
+ *     projection (`name`/`title`) or the owned product's `name`.
+ *   - `resolved.entity.description` — short description when present.
+ *   - `resolved.entity.supplierName` — supplier label when present.
+ *   - `resolved.source.label`       — friendly source name.
+ *
+ * Used by the booking detail page's "Catalog source" card so
+ * operators see "Demo · Reykjavík Northern Lights Hunt" instead of
+ * `cdmi_01kqp28138f69btmp1n15yjj7r`. Returns 404 when no snapshot
+ * exists (legacy bookings).
+ */
+async function handleGetBookingSnapshot(c, options) {
+    const bookingId = c.req.param("id");
+    if (!bookingId)
+        return c.json({ error: "id is required" }, 400);
+    const db = getDb(options, c);
+    const [snapshot] = await db
+        .select()
+        .from(bookingCatalogSnapshotTable)
+        .where(eq(bookingCatalogSnapshotTable.booking_id, bookingId))
+        .limit(1);
+    if (!snapshot) {
+        return c.json({ error: "snapshot_not_found" }, 404);
+    }
+    const resolved = await resolveSnapshotForAdmin(db, options, {
+        entity_module: snapshot.entity_module,
+        entity_id: snapshot.entity_id,
+        source_kind: snapshot.source_kind,
+        source_provider: snapshot.source_provider,
+        frozen_payload: (snapshot.frozen_payload ?? {}),
+    });
+    return c.json({ data: { ...snapshot, resolved } });
+}
+/**
+ * Resolve admin-friendly labels for a booking_catalog_snapshot row.
+ * Tries the sourced-entry projection first (covers demo, Bokun, etc.),
+ * falls back to owned products. Returns null fields rather than
+ * throwing when sources are missing — the admin UI treats nulls as
+ * "fall back to id".
+ */
+async function resolveSnapshotForAdmin(db, options, snapshot) {
+    const entity = {
+        title: null,
+        description: null,
+        supplierName: null,
+        imageUrl: null,
+    };
+    // Attempt 1: sourced_entries projection. Covers demo + every
+    // upstream provider that registers via the sourced-entry write path.
+    try {
+        const [sourced] = await db
+            .select({ projection: catalogSourcedEntriesTable.projection })
+            .from(catalogSourcedEntriesTable)
+            .where(and(eq(catalogSourcedEntriesTable.entity_module, snapshot.entity_module), eq(catalogSourcedEntriesTable.entity_id, snapshot.entity_id)))
+            .limit(1);
+        if (sourced?.projection) {
+            const p = sourced.projection;
+            entity.title = pickString(p.name, p.title);
+            entity.description = pickString(p.description, p.summary);
+            entity.supplierName = pickString(p.supplierId, p.supplier_name, p.supplierName);
+            entity.imageUrl = pickString(p.heroImageUrl, p.image_url, p.imageUrl);
+        }
+    }
+    catch {
+        // ignore, fall through
+    }
+    // Attempt 2: owned products row.
+    if (!entity.title && snapshot.entity_module === "products") {
+        try {
+            const product = await options.getOwnedProductById(db, snapshot.entity_id);
+            if (product) {
+                entity.title = product.name;
+                entity.description = product.description;
+            }
+        }
+        catch {
+            // ignore
+        }
+    }
+    // Attempt 3: pull from the snapshot's frozen upstream payload as
+    // last resort (sourced quotes capture the upstream object inline).
+    if (!entity.title) {
+        const upstream = snapshot.frozen_payload?.quote
+            ?.upstream_payload;
+        if (upstream) {
+            entity.title = pickString(upstream.name, upstream.title);
+            entity.description = pickString(upstream.description, upstream.summary);
+        }
+    }
+    const source = {
+        label: friendlySourceLabel(snapshot.source_kind),
+        providerLabel: snapshot.source_provider,
+    };
+    return { entity, source };
+}
+function pickString(...candidates) {
+    for (const c of candidates) {
+        if (typeof c === "string" && c.trim().length > 0)
+            return c;
+    }
+    return null;
+}
+/**
+ * Map raw `source_kind` strings to the labels operators recognise.
+ * "demo" → "Demo Catalog", "owned" → "Owned (this operator)", etc.
+ * Anything we don't recognise comes back title-cased.
+ */
+function friendlySourceLabel(sourceKind) {
+    const map = {
+        demo: "Demo Catalog",
+        owned: "Owned (this operator)",
+        bokun: "Bókun",
+        mews: "Mews",
+        fareharbor: "FareHarbor",
+        rezdy: "Rezdy",
+    };
+    return map[sourceKind] ?? sourceKind.replace(/^./, (c) => c.toUpperCase());
+}
+// ─────────────────────────────────────────────────────────────────
+// Helpers
+// ─────────────────────────────────────────────────────────────────
+function errorResponse(c, err) {
+    if (err instanceof BookingEngineError) {
+        const status = statusForCode(err.code);
+        return c.json({ error: err.message, code: err.code, context: err.context }, status);
+    }
+    const message = err instanceof Error ? err.message : String(err);
+    return c.json({ error: message }, 500);
+}
+function statusForCode(code) {
+    switch (code) {
+        case NO_ADAPTER_REGISTERED:
+        case NO_HANDLER_REGISTERED:
+            return 503;
+        case QUOTE_NOT_FOUND:
+        case ORDER_NOT_FOUND:
+            return 404;
+        case QUOTE_EXPIRED:
+        case QUOTE_MISMATCH:
+        case ORDER_ALREADY_CANCELLED:
+            return 409;
+        case RESERVE_FAILED:
+            return 502;
+        default:
+            return 500;
+    }
+}
+function cryptoRandom() {
+    if (typeof globalThis.crypto !== "undefined" && globalThis.crypto.randomUUID) {
+        return globalThis.crypto.randomUUID();
+    }
+    return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+}

package/dist/booking-engine/operator-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=operator-routes.test.d.ts.map

package/dist/booking-engine/operator-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-routes.test.d.ts","sourceRoot":"","sources":["../../src/booking-engine/operator-routes.test.ts"],"names":[],"mappings":""}