## The short version

A vendor portal blueprint for hospitality built with Laravel on Ample. Domain schema:

- **room_types** (sku, name, capacity, base_rate, amenities): room and package catalog;  
- **inventory_movements** (sku, date, delta, reason): availability per date as stock movements;  
- **bookings** (booking_no, check_in, check_out, status): bookings with status transitions;  
- **booking_lines** (booking_no, sku, nights, rate): booking contents;  
- **document_access** (document_id, principal_reference, role, granted_at): who may read which document.

Public information: room types, amenities and rates from property location and policies, events and dining. Kept out of scope until handling is reviewed: guest identity documents, payment details, stay history. Guest identity documents are sensitive; only availability and booking status are modeled here. Technical basis verified on Laravel: a role-to-document access model with negative tests (401 without identity, 403 for the wrong role) and a private-bucket round-trip for the allowed role (private=ok).

## What it needs

- [Compute](/content/discover/primitive/compute/index.html): verified (Apps run in isolated x86_64 Firecracker microVMs; sizes are the priced VM sizes.)  
- [Postgres](/content/discover/primitive/postgres/index.html): verified (Managed PostgreSQL 16 runs in its own microVM and is auto-provisioned when an app needs a database and no DATABASE_URL is supplied.)  
- [S3-compatible object storage](/content/discover/primitive/s3-compatible-object-storage/index.html): verified (Buckets are S3-compatible with issued credentials; PutObject and GetObject are verified by canary. Other S3 operations are not verified.)

## Before you start

- A Laravel project (composer install --no-dev from composer.lock, then FrankenPHP serving public/ (php-server with the index.php fallback) reading PORT on the php-8.5 template)  
- A PostgreSQL driver reading DATABASE_URL (auto-provisioned when omitted)  
- Bucket credentials from `ample bucket create` passed as encrypted S3_* environment variables  
- A review of which hospitality data classes may be handled at all; this blueprint models public information only

## How to do it

1.  Model the hospitality domain
   
   Create the tables room_types, inventory_movements, bookings, booking_lines, document_access. Room and package catalog lives in room_types; keep the sensitive classes (guest identity documents, payment details, stay history) out of this schema.

2.  Model vendors scoped to the agency with roles.

3.  Authorize document access by vendor and role (401, 403 negative tests).

4.  Store vendor documents in the private bucket.

5.  Deploy and verify the negative tests and an authorized download.

6.  Run the synchronous deploy once and read the result. Re-running with no change is a no-op.

```
   ample deploy . --name <app-name> --public --env S3_ENDPOINT=... --env S3_REGION=... --env S3_BUCKET=... --env S3_ACCESS_KEY_ID=... --env S3_SECRET_ACCESS_KEY=...
   ```

7.  Run the pattern self-test(s) from the example (/p/private-document-library) and your own acceptance checks for the hospitality workflow.

```
   ample logs <deployment_id> --kind build
   ```

## Tested examples

- **Laravel pattern fixture** (`tests/deploy-canaries/laravel-patterns`): Verified private document library basis for this blueprint.

## How to know it worked

- app responds on its public URL (`/` on the live URL, expect ample canary laravel patterns)  
- private-document-library self-test from the example (`/p/private-document-library` on the live URL, expect see the pattern fixture checks)

## Cost estimate

Estimated 10.00 USD per month (size prices from pricing.toml at build revision ca0b484a7a9957c573a88d3a32dc603c3c10135a).

- app server x1 `s-1vcpu-1gb`: 5.00 USD  
- managed PostgreSQL database x1 `s-1vcpu-1gb`: 5.00 USD

Upper-bound monthly price of the tested sizes. Buckets are allocation-priced per quota and not included.

## Verification evidence

- canary_run on 2026-09-20T20:36:21Z at revision `118ad1c6d7d23d4c2ce069254bab9ec9d37cd57b (CLI 118ad1c)`: Laravel pattern fixture deployed on Ample (composer install --no-dev from composer.lock, then FrankenPHP serving public/ (php-server with the index.php fallback) reading PORT on the php-8.5 template); the private document library checks passed: a role-to-document access model with negative tests (401 without identity, 403 for the wrong role) and a private-bucket round-trip for the allowed role (private=ok). The blueprint's Hospitality schema and workflow below build on that verified basis and were not separately executed. (expires 2027-03-19T20:36:21Z)

## Execution binding

MCP tool `ample_deploy` (registry `mcp:ample_deploy`), schema hash `876465fce906da0c` observed 2026-09-22T00:31:22.774679+00:00 at revision `e6446ceea69b`. Binding state at export: schema_changed. Required scopes: servers:write, databases:read, buckets:read.

## Typed next actions

- Browse the catalog index (`GET /v1/catalog` on the api origin; authentication not required, approval not required)  
- Search published recipes by intent, stack and constraints (`POST /v1/catalog/search` on the api origin; authentication not required, approval not required)  
- Prepare a side-effect-free deployment plan for an authorized project (`POST /v1/catalog/plan` on the api origin; authentication required, approval not required)  
- Read the existing agent authentication setup (`GET /mcp/setup` on the api origin; authentication not required, approval not required)  
- Browse Hospitality (`GET /v1/catalog/nodes/industry%3Ahospitality` on the api origin; authentication not required, approval not required)  
- Browse Vendor portal (`GET /v1/catalog/nodes/workload%3Avendor-portal` on the api origin; authentication not required, approval not required)  
- Browse Laravel (`GET /v1/catalog/nodes/stack%3Aframework-laravel` on the api origin; authentication not required, approval not required)  
- Browse Deploy web app (`GET /v1/catalog/nodes/intent%3Adeploy-web-app` on the api origin; authentication not required, approval not required)

## Identifiers and status

Recipe `page:blueprints:hospitality:vendor-portal:laravel`. Revision r1.

release **published** support **verified** execution **blocked (schema_changed: live tool schema differs from the recorded binding)**