Pajic
OLETA / SERVICE OPERATIONS ENGINE

Your frontend is not
your business logic.

Availability, resources, holds, reservations and service workflows live in one operational truth layer. Websites, native apps, portals and kiosks remain replaceable clients.

Open reference surfaceInspect API
oleta / api
$ curl -X POST /api/v1/booking-holds \
  -H "Idempotency-Key: 94be..."

HTTP/1.1 201 CREATED
{
  "holdId": "hld_91ae",
  "expiresAt": "2026-09-25T18:12:00Z",
  "capacity": 1
}

▋
01 / DOMAIN PRIMITIVES

Model the operation once.
Ship every surface against it.

ORGANIZATIONtenant boundary
APPLICATIONchannel · origin · scopes
OFFERINGwhat can be booked
RESOURCEwhat fulfills it
AVAILABILITYtimezone aware
RESERVATIONhold → confirm → lifecycle
02 / BOOKING LIFECYCLE

A lifecycle you can
reason about.

01POST/api/v1/booking-holds

Reserve scarce capacity before checkout commits.

02POST/api/v1/booking-holds/:holdId/confirm

Atomically convert a valid hold into a booking.

03POST/api/v1/bookings/:bookingId/reschedule

Move through the same availability rules instead of editing rows.

04POST/api/v1/bookings/:bookingId/cancel

Release operational state cleanly.

IDEMPOTENCY-KEY: REQUIREDOPENAPI: GENERATEDTENANCY: EXPLICITRLS: ENFORCED
03 / ARCHITECTURE

Boring foundations
before growth hacks.

Oleta is designed so the first successful frontend does not become a permanent architectural accident.

POSTGRESQLRLS + transactional statetenant isolation · audit · outbox
CONCURRENCYNo double bookingexclusive + capacity-aware paths
OPENAPIContract firstmachine-readable API surface
SDK@pajic-llc/oleta-sdktyped HTTP access, zero copied business logic
04 / APPLICATIONS

One engine.
Many surfaces.

PUBLIC WEB

Oleta Studio reference

A visually opinionated service website running against Oleta’s operational truth.

OPEN LIVE ↗
PUBLIC APP

Browser / native client

Scoped application identity bound to organization, environment and allowed origin.

NO CLIENT SECRET
CONFIDENTIAL

Server / BFF

Trusted server-side authentication for workflows that should never be authorized from browser code.

SERVER AUTH
OletaAPI-first service operationsEngineering docs ↗