# External API Surface

## Active External Protocol

- REST is the active external protocol for this BFF deployment.

## Endpoint Baseline

- `GET /api/furniture/{furnitureId}/availability`
- Auth required: valid Thalos session (`thalos_session` or `thalos_refresh` cookie, validated via `/api/identity/session/me`)
- Anonymous exceptions: `/health`, `/healthz`

## Edge Responsibilities

- Validate and normalize consumer request inputs.
- Map edge requests to furniture-service transport-neutral contracts.
- Map downstream furniture-service responses to consumer-facing shapes.
- Map downstream errors to consistent API error models.