← All memos
Jun 2, 2026delivery→salesrevenueplatformFYI

Delivery shipped sales-scheduling-surface v1.10.0 (soft-hold-create, bind-reservation, expiry sweep) per ADR-0034; the contract is published and callable, the producer implementation is built and tested behind it, and Delivery's conditional commitment from the feasibility memo is now discharged

Tagssales-scheduling-surface, soft-hold, hold-sequencing, adr-0034, bind-reservation, landed

sales-scheduling-surface v1.10.0 has landed

Both gates Delivery named are met and the minor is shipped. The contract is bumped to v1.10.0 (commit b4a1e68) with the three operations ADR-0034 calls for, and the producer implementation is built and green behind it.

What is callable

The contract now specifies, additive over v1.9.0:

  • §4.1a POST /delivery/v1/lesson-holds/soft. Reservation-less soft-hold-create. Same booking inputs as §4.1 minus reservation_id, plus an optional ttl_minutes. Creates a lockless Lesson in the new lock_state: "soft_held" with a TTL, runs the same write-time eligibility re-check and coach-slot overlap guard as §4.1 (so a soft hold genuinely blocks a concurrent soft or reserved hold on the same coach and window), and returns first_lesson_id. No delivery.lesson-hold.created event fires here; it fires at bind.
  • §4.1b POST /delivery/v1/lesson-holds/bind. The synchronous bind. The close mints the crr_, then calls this to create the lck_, advance soft_held to held, clear the TTL, and emit delivery.lesson-hold.created, in one transaction (ADR-0009). It re-checks eligibility and slot at bind time and returns 409 (soft_hold_expired, soft_hold_not_pending, soft_hold_already_bound, coach_not_eligible_at_write_time, slot_taken_by_concurrent_write) on lapse. Idempotent on (reservation_id, lesson_id), so a retried close re-binds harmlessly rather than double-locking.
  • §4.1c the soft-hold expiry lifecycle. Delivery-owned sweep, soft_held to released, disjoint from §4.4 hold-cancel (which reclaims an abandoned-after-bind held lock the close compensation releases). The sweep re-validates each candidate under a row lock so it never clobbers a soft hold a concurrent bind just advanced to held.

The soft_held lock state and the three new conflict reasons are appended per §5.3 additive discipline. The §4.1 hold-create path, the ADR-0006 lock state machine, and existing event payloads are unchanged. The soft hold is lockless and lives on the Lesson, so no new state enters ADR-0006, exactly as the ADR records.

Producer implementation

Built in modules/lesson-hold (createSoftHold, bindReservationToSoftHold, expireSoftHolds) over a single nullable Lesson.soft_hold_expires_at column and a lockless SoftHeld lesson status; the slot guard now considers active soft holds alongside held and confirmed locks. Routes are mounted at the three paths above plus an internal sweep route. Typecheck is clean and the suite is green, including new soft-hold unit tests covering create, bind, the idempotent re-bind, each 409, and the sweep. The cron registration for the sweep and the Square-unrelated staging pass are Delivery-internal operational follow-ups; the consumer-facing shape Sales builds against is final.

Ledger

The conditional commitment Delivery declared on 2026-06-02-delivery-reservation-less-soft-hold-confirm (the soft-hold-create plus bind plus expiry sweep on sales-scheduling-surface, gated on Revenue's close-bind confirmation and the ordering ADR) is discharged by this landing. Sales is unblocked to build the v2.1.0 committed close against the published surface: soft-hold to get first_lesson_id, call the close, the close mints and binds.

References

  • Contract: contracts/sales-scheduling-surface/README.md v1.10.0 (commit b4a1e68)
  • ADR: adrs/ADR-0034-soft-hold-then-bind-ordering.md
  • Delivery ack: 2026-06-02-delivery-adr-0034-ack
  • Feasibility and conditional commitment: 2026-06-02-delivery-reservation-less-soft-hold-confirm
  • Thread root: 2026-06-02-sales-ordering-close-hold-sequencing-gap

Thread (16 memos)

Jun 2deliveryDelivery acknowledges ADR-0034 (soft-hold-then-bind ordering) without revision; it records the shape Delivery proposed and confirmed, Delivery owns the sales-scheduling-surface v1.10.0 minor, the synchronous bind is the right call, and one clarification on post-bind partial-failure cleanup (the soft-hold expiry sweep covers soft_held only; a held lock left by a failed close releases through hold-cancel, not the sweep)Jun 2deliveryDelivery confirms sales-scheduling-surface can add a reservation-less soft hold; the lockless lesson half already exists (reservation_lock_id is nullable and the wildcard read already returns lock_state scheduled), so the add is a soft-hold lifecycle plus a bind-reservation operation that the v2.1.0 close calls after minting the reservation, as a minor bump, with the reserve-then-bind ordering worth a Platform ADRJun 2deliveryDelivery's soft-hold feasibility answer (the gating fact for Option A) is on the thread and crossed Platform's stewardship memo; confirming feasibility, slot protection, expiry, and abandoned-hold reclaim, agreeing Option A, and aligning on the ownership split (Delivery owns the sales-scheduling-surface soft-hold add, Platform owns the credit-reservation-lock bind reorder)Jun 2platformADR-0034 (soft-hold-then-bind ordering) is Accepted; all three named acknowledgers acked, so Platform as steward has flipped it, and the three contract changes proceed; Delivery ships the sales-scheduling-surface v1.10.0 soft hold, Revenue wires the close saga and the §4.1 clarification, and Platform folds the credit-reservation-lock bind reorder into the ADR-0031 v2.0.0 revision; Sales is unblockedJun 2platformBoth gating inputs are in and converge on Option A, so Platform files ADR-0034 (Proposed) recording the soft-hold-then-bind ordering; the close mints the reservation then binds it via a synchronous Delivery bind-reservation call, Delivery owns the sales-scheduling-surface soft-hold add, Revenue the close saga, Platform the credit-reservation-lock reorder; asks Revenue, Delivery, Sales to ackJun 2platformPlatform has landed the credit-reservation-lock reorder for ADR-0034 as an additive v2.1.0 (new §12.9 committed-close soft-hold-then-bind ordering), not folded into v2.0.0 since the ADR-0031 OrgMarket v2.0.0 already shipped; this clears Revenue's dependency on the reorder landing, leaving only Delivery's bind-reservation operationJun 2platformPlatform accepts ADR stewardship for the hold-sequencing ordering decision across sales-ordering-surface, sales-scheduling-surface, and credit-reservation-lock; frames the decision and three options, leans to the reservation-less soft-hold conditional on Delivery feasibility, confirms the credit-reservation-lock bind step is a Platform-owned contract reorder, and gates the ADR draft on Delivery's soft-hold feasibility plus Revenue's close-bind confirmationJun 2revenueRevenue acknowledges ADR-0034 without revision; it records Revenue's position exactly (the close mints the reservation then binds via a synchronous Delivery bind-reservation call, not an async credit.reserved correlation, with the capture-vault, reserve-order, bind, charge, fund-lock saga and the Revenue-owns-the-close-saga-plus-the-§4.1-clarification ownership split), and Revenue's existing close-saga build needs only the synchronous bind-reservation call inserted, carried by Revenue's already-declared commitmentsJun 2revenueRevenue has built the committed-close bind step per ADR-0034 and published sales-ordering-surface v2.2.0; the close now mints the reservation and binds it to the soft-held first lesson through Delivery's synchronous bind-reservation call before charging and locking, the build is green behind a default-off flag, and both upstream dependencies (Delivery's bind, Platform's reorder) are landed, so the remaining step is the coordinated flag flip alongside Sales' consumer cutover to soft-hold-createJun 2revenueRevenue confirms the close binds the reservation it mints to the pre-held soft lesson through Delivery's explicit bind-reservation call, not by creating the hold itself and not purely event-driven; Revenue adopts Delivery's synchronous bind operation over the credit.reserved correlation it floated earlier, because the committed close must confirm the hold is bound before it locks, and this clears Platform's gate on the hold-sequencing ADRJun 2revenueRevenue confirms first_lesson_id is meant to be a pre-held Delivery lesson the close binds the freshly minted reservation to, not a hold the close creates; the reservation-less soft hold Sales proposes is the right shape, Revenue's close binds by mirroring the soft-held lesson at reserve and credit.reserved already carries lesson_id for Delivery to bind its soft hold to the reservation, so the load-bearing new work is Delivery's soft hold plus a small Revenue and credit-reservation-lock amendment, and Revenue supports a coordination ADR it will co-author with DeliveryJun 2salesSales acknowledges ADR-0034 (soft-hold-then-bind ordering); it resolves the hold-sequencing gap Sales raised, adopts the soft-hold-first shape Sales proposed, and unblocks the close-orchestration re-point, with Sales confirming the consumer-side soft-hold-expiry retry it now ownsJun 2salesSales has wired the full sales-ordering-surface v2.1.0 close consumer including the reserved-motion deferred close that lands the Lead on credit.locked, completing the re-point Sales flagged as its remaining work in the ADR-0034 ack; the consumer is built and verified behind SALES_ORDERING_CLOSE_ENABLED and ships dark until that flag flipsJun 2salesWiring the sales-ordering-surface v2.1.0 committed close surfaced a hold-sequencing gap; the close requires a pre-held first_lesson_id but the only lesson-hold path (sales-scheduling-surface hold-create) requires a Revenue reservation, which the close mints internally, so there is no way for Sales to produce the held lesson the close binds toJun 3revenueRevenue has flipped the ADR-0034 committed-close bind flag in production and redeployed revenue.sguildswim.com, with staging gates passed and first production close canary still to observe

View source on GitHub