@voyant-travel/finance 0.194.0 → 0.194.1

package/README.md

@@ -5,9 +5,13 @@ Finance module for Voyant. Invoices, payments, credit notes, supplier payments,
 ## Composed agent commands
 
 `create_booking` is owned by the Finance booking-create extension because that package
-already owns the atomic composer spanning product conversion, travelers, room/item
+already owns the composer spanning product conversion, travelers, room/item
 lines, payment schedules, optional credits and group membership, invoices, ledger
 records, and post-commit events. The Tool is a structural adapter over that service.
+Its selected action policy is handler-owned: the service records the canonical booking
+id in the authoritative `booking.create` ledger entry, while the generic pre-dispatch
+gate cannot know that id safely. The booking transaction commits before some finance
+and document stages, so this command is not yet an exact-replay boundary.
 
 `issue_invoice_from_booking` creates and issues either an invoice or proforma through
 the same package-owned composer used by the HTTP route. Agent execution requires an

package/dist/tools.js

@@ -177,7 +177,7 @@ export const createBookingTool = defineTool({
     capabilityVersion: "v1",
     name: "create_booking",
     aliases: ["bookings_create"],
-    description: "Atomically create a booking from a product or slot with travelers, room/item lines, payment schedules, optional credit, group membership, and invoice documents.",
+    description: "Create a booking from a product or slot with travelers, room/item lines, payment schedules, optional credit, group membership, and invoice documents.",
     inputSchema: createBookingToolInputSchema,
     outputSchema: bookingCreateSummarySchema,
     requiredScopes: ["bookings:write", "finance:write"],
@@ -190,6 +190,11 @@ export const createBookingTool = defineTool({
         confirmationRequired: true,
         sideEffects: ["data-write", "external-booking", "payment"],
     },
+    // Finance records the authoritative booking.create action with the generated
+    // booking id inside the booking transaction. The generic gate cannot know
+    // that id before dispatch and would create a second, caller-invented ledger
+    // timeline.
+    actionPolicyEnforcement: "handler",
     async handler({ booking }, ctx) {
         const outcome = await finance(ctx).createBooking(booking);
         if (outcome.status !== "ok") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voyant-travel/finance",
-  "version": "0.194.0",
+  "version": "0.194.1",
   "license": "Apache-2.0",
   "type": "module",
   "exports": {
@@ -157,18 +157,18 @@
     "hono": "^4.12.27",
     "zod": "^4.4.3",
     "@voyant-travel/action-ledger": "^0.111.14",
-    "@voyant-travel/bookings": "^0.194.0",
+    "@voyant-travel/bookings": "^0.194.1",
     "@voyant-travel/core": "^0.132.1",
-    "@voyant-travel/db": "^0.118.1",
     "@voyant-travel/types": "^0.109.9",
     "@voyant-travel/finance-contracts": "^0.107.2",
+    "@voyant-travel/payments": "^0.6.1",
     "@voyant-travel/hono": "^0.134.1",
     "@voyant-travel/public-document-delivery": "^0.4.12",
-    "@voyant-travel/payments": "^0.6.1",
     "@voyant-travel/reporting-contracts": "^0.3.2",
     "@voyant-travel/storage": "^0.113.3",
+    "@voyant-travel/tools": "^0.3.0",
     "@voyant-travel/utils": "^0.109.0",
-    "@voyant-travel/tools": "^0.3.0"
+    "@voyant-travel/db": "^0.118.1"
   },
   "devDependencies": {
     "drizzle-kit": "^0.31.10",