aimeat 2.0.0 → 2.2.0

package/dist/src/services/entitlement-money.js

@@ -0,0 +1,68 @@
+import { listPaymentHandlers, MORSEL_HANDLER_ID } from '../commerce/payment-handlers.js';
+import { TEST_MONEY_HANDLER_ID } from '../commerce/test-money-handler.js';
+import { percentFee } from '../commerce/money.js';
+import { recordMoneyPlatformFee } from '../commerce/session-service.js';
+/** The invoice/receivable rail that accrues real money without a live per-call PSP charge (prod EE). */
+const ACCRUAL_HANDLER_ID = 'io.aimeat.invoice';
+/** Pick the money handler to accrue against for a currency: prefer the invoice receivable rail, then the
+ *  OSS test double, then any other non-morsel handler. Null when no money handler is registered. */
+export function resolveAccrualHandler(currency) {
+    const money = listPaymentHandlers().filter(h => h.id !== MORSEL_HANDLER_ID && h.currencies.includes(currency));
+    return money.find(h => h.id === ACCRUAL_HANDLER_ID)
+        ?? money.find(h => h.id === TEST_MONEY_HANDLER_ID)
+        ?? money[0]
+        ?? null;
+}
+const ownerOf = (ghii) => ghii.split('@')[0].split('#').pop() ?? ghii;
+/**
+ * Settle ONE metered call in real money: collect the price from the consumer, pay the provider its net
+ * (price − rake), and account the operator's rake — all through the resolved money handler (accrual).
+ * Returns the tracking code so a post-payment script throw can refund. Never throws — a handler failure
+ * comes back as `{ ok:false }` so the gateway denies the call cleanly (no partial settlement).
+ */
+export async function settleEntitlementMoney(storage, config, args) {
+    const handler = resolveAccrualHandler(args.currency);
+    if (!handler)
+        return { ok: false, reason: 'no_money_handler' };
+    const price = Math.max(0, Math.floor(args.priceMicros));
+    const fee = percentFee(price, args.feePct);
+    const net = price - fee;
+    const ctx = { config, storage };
+    const seller = { ghii: args.providerGhii, owner: ownerOf(args.providerGhii) };
+    try {
+        const collected = await handler.collect(ctx, {
+            buyerGhii: args.consumerGhii, amount: price, currency: args.currency, reference: args.reference, fee, seller,
+        });
+        if (net > 0) {
+            await handler.payout(ctx, {
+                toGhii: args.providerGhii, amount: net, currency: args.currency,
+                buyerGhii: args.consumerGhii, trackingCode: collected.trackingCode, reference: args.reference,
+            });
+        }
+        if (fee > 0) {
+            await recordMoneyPlatformFee(storage, config, {
+                fee, currency: args.currency, sellerGhii: args.providerGhii, buyerGhii: args.consumerGhii,
+                trackingCode: collected.trackingCode, handler: handler.id,
+            });
+        }
+        return { ok: true, handler: handler.id, trackingCode: collected.trackingCode, fee, net };
+    }
+    catch {
+        return { ok: false, reason: 'settlement_failed' };
+    }
+}
+/** Best-effort reverse of a money accrual (post-payment script throw), mirroring the handler's refund leg. */
+export async function refundEntitlementMoney(storage, config, args) {
+    const handler = resolveAccrualHandler(args.currency);
+    if (!handler)
+        return;
+    const ctx = { config, storage };
+    try {
+        await handler.refund(ctx, {
+            buyerGhii: args.consumerGhii, amount: Math.max(0, Math.floor(args.priceMicros)), trackingCode: args.trackingCode,
+            seller: { ghii: args.providerGhii, owner: ownerOf(args.providerGhii) },
+        });
+    }
+    catch { /* refund is best-effort; the handler contract says it must not throw, but guard anyway */ }
+}
+//# sourceMappingURL=entitlement-money.js.map

package/dist/src/services/entitlement-money.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlement-money.js","sourceRoot":"","sources":["../../../src/services/entitlement-money.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE,wGAAwG;AACxG,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAE/C;oGACoG;AACpG,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,iBAAiB,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/G,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,kBAAkB,CAAC;WAC9C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,qBAAqB,CAAC;WAC/C,KAAK,CAAC,CAAC,CAAC;WACR,IAAI,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAgB,EAChB,MAAoB,EACpB,IAA8H;IAE9H,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC;IACxB,MAAM,GAAG,GAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;YAC3C,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM;SAC7G,CAAC,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;gBACxB,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBAC/D,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;aAC9F,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,MAAM,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE;gBAC5C,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY;gBACzF,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAgB,EAChB,MAAoB,EACpB,IAAiH;IAEjH,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,GAAG,GAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;YACxB,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;YAChH,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC,CAAC,0FAA0F,CAAC,CAAC;AACxG,CAAC"}

package/dist/src/services/exchange-market.d.ts

@@ -0,0 +1,280 @@
+import type { Storage } from '../storage/interface.js';
+import { type EntitlementUnit, type PricingSpec, type AppToolSurface, type AgentWorkSurface, type SellableSurface } from './metered-entitlements.js';
+import type { Provenance, OdpsExtras } from '../models/odps-schemas.js';
+export type { AppToolSurface, AgentWorkSurface, SellableSurface };
+/** The action `commercial` block an offering/contract prices against. */
+export interface ActionCommercial {
+    payMorsels?: number;
+    payMoney?: {
+        amount: number;
+        currency: string;
+    };
+    plans?: OfferingPlan[];
+}
+/**
+ * Resolve the AUTHORITATIVE unit + per-call price + (optional plan) pricing spec from a provider action's
+ * commercial block — the single source of truth shared by the acceptance route AND bid-accept, so a
+ * consumer can never undercut the provider. Money (payMoney) takes precedence over morsels.
+ */
+export declare function resolveActionPricing(comm: ActionCommercial | undefined, planId: string | null): {
+    ok: true;
+    unit: EntitlementUnit;
+    pricePerCall: number;
+    currency: string | null;
+    pricing: PricingSpec | null;
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+/** A provider pricing plan surfaced on an offering (mirrors the action's commercial.plans). */
+export type OfferingPlan = {
+    id: string;
+    model: 'per_call';
+} | {
+    id: string;
+    model: 'bundle';
+    blockSize: number;
+    blockPrice: number;
+} | {
+    id: string;
+    model: 'subscription';
+    periodSeconds: number;
+    periodPrice: number;
+    callsPerWindow: number;
+    windowSeconds: number;
+};
+/**
+ * Provenance attestation + the ODPS authoring block. Both are defined (and validated) in
+ * `models/odps-schemas.ts` and re-exported here so the offering record stays the single import site.
+ * A PROMISE by the provider, not a platform guarantee — but structured, attributed and projectable
+ * into the ODPS v4.1 document served at `/v1/exchange/offerings/{id}/odps.yaml`.
+ */
+export type { Provenance, OdpsExtras };
+/**
+ * How a consumer may use the delivered data — the consent-forward half of provenance. A provider PROMISE
+ * surfaced to the consumer BEFORE they contract, so "may I refine and resell this downstream?" is answered
+ * up front (it is not enforced by the node — it is the stated licence the contract is accepted under).
+ */
+export interface UsageTerms {
+    derivatives: boolean;
+    resale: boolean;
+    attribution: boolean;
+    note?: string;
+}
+/**
+ * The interface a requesting app is WAITING to call — what makes a NEED an emergent, machine-matchable
+ * data-API request rather than a wish. The app declares the exact shape it will SEND and the shape it EXPECTS
+ * back; a provider builds a matching app-tool (or extension) whose I/O satisfies it. `inputSchema`/`outputSchema`
+ * are the precise contract (like an offering's); `requiredFields`/`format`/`sample` are the light human hints.
+ */
+export interface NeedSpec {
+    requiredFields: string[];
+    format?: string;
+    sample?: string;
+    notes?: string;
+    inputSchema?: Record<string, unknown>;
+    outputSchema?: Record<string, unknown>;
+}
+/** A public supply listing. `kind` distinguishes a raw extension action (the original surface) from an
+ *  app-tool (a method a provider app sells cross-app). For BOTH, `ext`/`action` hold the metered COORDINATE
+ *  (app-tool uses `apptool:{owner}/{appId}` + the tool name) so the entitlement + stats machinery is shared. */
+export interface Offering {
+    offeringId: string;
+    providerGhii: string;
+    providerOwner: string;
+    kind: 'ext-action' | 'app-tool' | 'agent-work';
+    ext: string;
+    action: string;
+    surface: SellableSurface | null;
+    title: string;
+    description: string;
+    unit: EntitlementUnit;
+    basePrice: number;
+    currency: string | null;
+    plans: OfferingPlan[];
+    /** For kind==='agent-work': the task interface (what the consumer sends / the agent delivers). */
+    taskSpec?: {
+        inputSchema: Record<string, unknown>;
+        outputSchema: Record<string, unknown>;
+    } | null;
+    provenance: Provenance | null;
+    /**
+     * Morsels burned per call on top of whatever this offering is paid in — the provider's own pacing.
+     * Projected from the source and captured into the contract at accept, so changing it later governs
+     * new contracts while existing ones keep the terms they were signed at.
+     */
+    tollMorsels?: number | null;
+    usageTerms: UsageTerms | null;
+    /**
+     * The provider's ODPS authoring block — the Open Data Product Specification fields the node cannot derive
+     * (value proposition, categories, standards, use cases, sample, SLA + data-quality COMMITMENTS, the legal
+     * data holder, jurisdiction/exit terms). Optional: without it the listing still projects a valid, thinner
+     * ODPS v4.1 document at `/v1/exchange/offerings/{id}/odps.yaml`.
+     */
+    odps?: OdpsExtras | null;
+    tags: string[];
+    state: 'listed' | 'delisted';
+    /**
+     * TARGET-050 — this listing is a PROJECTION of its source (the app-tool manifest, the extension action
+     * or the agent's offer), not a hand-authored snapshot: the source's `exchange` flag put it here and the
+     * source's price/labels flow into it. `sourceHash` is the content identity of that source at the last
+     * reconcile, so a change is detectable without re-writing every listing. A CONTRACT is never a
+     * projection — it stays pinned to the interface version and price it was signed at.
+     */
+    auto?: boolean;
+    sourceHash?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/** The metered coordinate for an app-tool surface — the (ext, action) pair the entitlement + gate key on. */
+export declare function appToolCoordinate(ownerName: string, appId: string, tool: string): {
+    ext: string;
+    action: string;
+};
+/** The metered coordinate for an agent-work surface (a provider agent's task type; settled per delivered task). */
+export declare function agentWorkCoordinate(ownerName: string, agentName: string, taskType: string): {
+    ext: string;
+    action: string;
+};
+/** Build an ActionCommercial from an offering's stored price/plans, so the shared pricing resolver
+ *  (resolveActionPricing) works for app-tool offerings too — the offering's listing IS the authoritative price. */
+export declare function offeringToCommercial(o: Offering): ActionCommercial;
+/**
+ * Resolve the authoritative pricing + metered coordinate to mint a contract from an offering — shared by the
+ * REST and MCP accept flows, for BOTH kinds. For app-tool the price comes from the offering's own listing;
+ * for ext-action it comes LIVE from the provider's extension action (so the provider's current price wins).
+ */
+export declare function resolveOfferingPricing(storage: Storage, o: Offering, planId: string | null): Promise<{
+    ok: true;
+    unit: EntitlementUnit;
+    pricePerCall: number;
+    currency: string | null;
+    pricing: PricingSpec | null;
+    providerGhii: string;
+    ext: string;
+    action: string;
+    capabilityLabel: string;
+    surface: SellableSurface | null;
+    tollMorsels: number | null;
+} | {
+    ok: false;
+    status: number;
+    code: string;
+    message: string;
+}>;
+/** A public demand posting. */
+export interface Need {
+    needId: string;
+    requesterGaii: string;
+    requesterOwner: string;
+    appId: string | null;
+    ext: string | null;
+    action: string | null;
+    description: string;
+    spec: NeedSpec | null;
+    usageIntent: string | null;
+    budgetUnit: EntitlementUnit | null;
+    budgetCap: number | null;
+    autonomy: 'supervised' | 'auto';
+    state: 'open' | 'matched' | 'closed';
+    createdAt: string;
+    updatedAt: string;
+}
+/** A need enriched with the requesting app's identity + purpose, so a provider knows WHO/WHAT they'd serve. */
+export interface NeedWithContext extends Need {
+    appContext: {
+        app: string;
+        name: string;
+        description: string;
+    } | null;
+}
+/**
+ * Attach app context to needs: when a need names a requesting app (`appId` = "owner/filename" or a bare
+ * filename under the requester), resolve that app's published name + description so a provider can judge the
+ * consumer before offering (per "do I even want to serve an app that misuses the data?"). Best-effort — a
+ * need without a resolvable app gets `appContext: null` and is grouped under its requester instead.
+ */
+export declare function enrichNeeds(storage: Storage, needs: Need[]): Promise<NeedWithContext[]>;
+/** A provider's bid against a NEED. */
+export interface Bid {
+    bidId: string;
+    needId: string;
+    bidderGhii: string;
+    bidderOwner: string;
+    offeringId: string | null;
+    ext: string;
+    action: string;
+    planId: string | null;
+    note: string;
+    state: 'open' | 'accepted' | 'withdrawn';
+    createdAt: string;
+}
+export declare function newOfferingId(): string;
+export declare function putOffering(storage: Storage, o: Offering): Promise<Offering>;
+export declare function getOffering(storage: Storage, id: string): Promise<Offering | null>;
+export declare function listOfferings(storage: Storage): Promise<Offering[]>;
+/** Every offering including delisted ones — the reconcile needs to revive a listing rather than duplicate it. */
+export declare function listAllOfferings(storage: Storage): Promise<Offering[]>;
+export declare function deleteOffering(storage: Storage, id: string): Promise<boolean>;
+/** Rank listed offerings that satisfy a capability. Match = exact (ext,action) when given, else a text
+ *  contains over title/description/tags. Cheapest base price first (a proxy; agents refine with plans/trust). */
+export declare function matchOfferings(storage: Storage, q: {
+    ext?: string | null;
+    action?: string | null;
+    text?: string | null;
+}): Promise<Offering[]>;
+export declare function newNeedId(): string;
+export declare function putNeed(storage: Storage, n: Need): Promise<Need>;
+export declare function getNeed(storage: Storage, id: string): Promise<Need | null>;
+export declare function listNeeds(storage: Storage, opts?: {
+    openOnly?: boolean;
+    owner?: string;
+}): Promise<Need[]>;
+export declare function newBidId(): string;
+export declare function putBid(storage: Storage, b: Bid): Promise<Bid>;
+export declare function listBids(storage: Storage, needId: string): Promise<Bid[]>;
+export declare function getBid(storage: Storage, needId: string, bidId: string): Promise<Bid | null>;
+/**
+ * Usage/reputation for an offering — the "is this API actually used, and successful?" signal that was in
+ * the original measurability spec. Derived entirely from the entitlements against it (each carries its own
+ * call + spend counters), so it needs no separate metrics table: a real, tamper-resistant record of demand.
+ */
+export interface OfferingStats {
+    activeContracts: number;
+    totalContracts: number;
+    totalCalls: number;
+    totalSettledUnits: number;
+    consumers: number;
+    listedAt: string;
+    lastUsedAt: string | null;
+    /** Observed delivery time, so a service commitment can be proposed from evidence rather than guessed.
+     *  Null until the capability has actually served calls (call-timing.ts). */
+    timing: {
+        count: number;
+        p50Ms: number;
+        p95Ms: number;
+        maxMs: number;
+    } | null;
+}
+/** Compute an offering's usage stats from the entitlements minted against its (provider, ext, action). */
+export declare function offeringStats(storage: Storage, o: Offering): Promise<OfferingStats>;
+/**
+ * The provider's DATA-LINEAGE view: who holds a contract against this offering, how much they have consumed,
+ * and when they last used it — answering "where is my data used, by whom, and how much?". One row per live
+ * or historical contract. Provider-only (the route authorises); the consuming identity is shown so the
+ * provider can see (and, via the off-switch, react to) each relationship.
+ */
+export interface ConsumerRow {
+    consumerGaii: string;
+    appId: string | null;
+    contractRef: string;
+    unit: EntitlementUnit;
+    calls: number;
+    settledUnits: number;
+    state: string;
+    lastUsedAt: string;
+}
+/** List the consumers holding contracts against an offering (provider lineage/consumption log). */
+export declare function offeringConsumers(storage: Storage, o: Offering): Promise<ConsumerRow[]>;
+//# sourceMappingURL=exchange-market.d.ts.map

package/dist/src/services/exchange-market.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange-market.d.ts","sourceRoot":"","sources":["../../../src/services/exchange-market.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAA8B,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjL,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGxE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;AAElE,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,gBAAgB,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GACxD;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAAA;CAAE,GAC9G;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAsB/C;AAED,+FAA+F;AAC/F,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACjC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC;AAErI;;;;;GAKG;AACH,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAEvC;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED;;gHAEgH;AAChH,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,YAAY,GAAG,UAAU,GAAG,YAAY,CAAC;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,kGAAkG;IAClG,QAAQ,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;IAClG,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,UAAU,GAAG,IAAI,CAAC;IAC9B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC7B;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,6GAA6G;AAC7G,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAEjH;AAED,mHAAmH;AACnH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAE3H;AAED;mHACmH;AACnH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,QAAQ,GAAG,gBAAgB,CAMlE;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GACnD,OAAO,CACN;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5G,YAAY,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IAC5G,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAC/D,CA0BA;AAED,+BAA+B;AAC/B,MAAM,WAAW,IAAI;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,eAAe,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,YAAY,GAAG,MAAM,CAAC;IAChC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+GAA+G;AAC/G,MAAM,WAAW,eAAgB,SAAQ,IAAI;IAC3C,UAAU,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACvE;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAsB7F;AAED,uCAAuC;AACvC,MAAM,WAAW,GAAG;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB;AAYD,wBAAgB,aAAa,IAAI,MAAM,CAA+C;AAEtF,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAGlF;AACD,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAIxF;AACD,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAGzE;AACD,iHAAiH;AACjH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAG5E;AACD,wBAAsB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMnF;AAED;iHACiH;AACjH,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACzF,OAAO,CAAC,QAAQ,EAAE,CAAC,CASrB;AAGD,wBAAgB,SAAS,IAAI,MAAM,CAAgD;AAEnF,wBAAsB,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtE;AACD,wBAAsB,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAIhF;AACD,wBAAsB,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAMhH;AAGD,wBAAgB,QAAQ,IAAI,MAAM,CAA+C;AAEjF,wBAAsB,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAGnE;AACD,wBAAsB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAG/E;AACD,wBAAsB,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAGjG;AAGD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;gFAC4E;IAC5E,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC/E;AAED,0GAA0G;AAC1G,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAkBzF;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,mGAAmG;AACnG,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAQ7F"}

package/dist/src/services/exchange-market.js

@@ -0,0 +1,276 @@
+/**
+ * @file src/services/exchange-market.ts
+ * @description The two-sided EXCHANGE marketplace records (TARGET-045 Phase C) — the DEMAND + SUPPLY sides
+ *   that sit above the metered entitlement (the contract). Three public, memory-backed record types the
+ *   marketplace app + agents read/write; matching + negotiation live in the app/agent layer (this service
+ *   is the generic store + a simple capability match, per "node holds refined data, not orchestration"):
+ *     - OFFERING — a provider's public supply listing: a capability (ext/action) + pricing (base + plans) +
+ *       provenance + an optional ODPS authoring block. Discoverable by any consumer, and projectable into
+ *       a full ODPS v4.1 document (services/exchange-odps.ts).
+ *     - NEED — a consumer/app's open demand: a wanted capability + budget + autonomy. Providers browse open
+ *       needs and BID.
+ *     - BID — a provider's offer against a NEED (links an OFFERING + proposed terms). The requester accepts
+ *       one → the acceptance flow mints the entitlement.
+ *   Keys: `exchange.offering.{id}` / `exchange.need.{id}` / `exchange.bid.{needId}.{id}` — public so the
+ *   marketplace is browsable; ownership is the record's provider/requester GHII (authorised by the routes).
+ * @structure Offering·Need·Bid types · UsageTerms·NeedSpec · put/get/list/delete for each · matchOfferings ·
+ *   offeringStats (reputation) · offeringConsumers (provider data-lineage)
+ * @usage import { putOffering, listOfferings, matchOfferings, putNeed, listOpenNeeds, putBid } from './exchange-market.js';
+ * @version-history
+ *   v1.7.0 — 2026-07-25 — Pacing is per capability: Offering carries `tollMorsels` and the pricing
+ *     resolver hands it to the contract, so a provider — not only the node — sets the brake.
+ *   v1.6.0 — 2026-07-25 — ODPS v4.1 adoption (TARGET-045 §4 / addendum Q2+Q3): Provenance (now with
+ *     transformations + SHA-256 snapshot hash + lineage) and the new `odps` authoring block move to
+ *     models/odps-schemas.ts as validated schemas; Offering gains `odps`.
+ *   v1.5.0 — 2026-07-21 — Agent-work surface (Gap 2): Offering.kind gains 'agent-work' + AgentWorkSurface +
+ *     agentWorkCoordinate + Offering.taskSpec; resolveOfferingPricing covers agent-work (DATA/SERVICES/AGENT WORK).
+ *   v1.4.0 — 2026-07-21 — Demand side as an emergent interface request: NeedSpec gains input/outputSchema
+ *     (the shape the app sends/expects — a provider builds a matching app-tool). A need is app-bound.
+ *   v1.3.0 — 2026-07-21 — Needs app-context: Need.usageIntent + enrichNeeds (resolve the requesting app's
+ *     name/description so a provider can judge who they'd serve before offering).
+ *   v1.2.0 — 2026-07-21 — Cross-app selling (Gap 1): Offering.kind ('ext-action'|'app-tool') + AppToolSurface
+ *     (pinned interface); appToolCoordinate + offeringToCommercial + resolveOfferingPricing (shared mint path).
+ *   v1.1.0 — 2026-07-20 — Legibility layer: UsageTerms + NeedSpec on records; offeringStats (usage/reputation)
+ *     + offeringConsumers (provider lineage) derived from entitlements (no metrics table).
+ *   v1.0.0 — 2026-07-20 — Initial marketplace records (offering/need/bid) + capability matching (Phase C).
+ */
+import { randomUUID } from 'node:crypto';
+import { listEntitlementsByProvider } from './metered-entitlements.js';
+import { readCallTiming } from './call-timing.js';
+/**
+ * Resolve the AUTHORITATIVE unit + per-call price + (optional plan) pricing spec from a provider action's
+ * commercial block — the single source of truth shared by the acceptance route AND bid-accept, so a
+ * consumer can never undercut the provider. Money (payMoney) takes precedence over morsels.
+ */
+export function resolveActionPricing(comm, planId) {
+    const money = comm?.payMoney;
+    let unit;
+    let pricePerCall;
+    let currency = null;
+    if (money && typeof money.amount === 'number' && Number.isInteger(money.amount) && money.amount > 0) {
+        unit = 'money';
+        pricePerCall = money.amount;
+        currency = money.currency;
+    }
+    else if (typeof comm?.payMorsels === 'number' && Number.isInteger(comm.payMorsels) && comm.payMorsels > 0) {
+        unit = 'morsels';
+        pricePerCall = comm.payMorsels;
+    }
+    else {
+        return { ok: false, code: 'NOT_PRICED', message: 'Action has no price; only priced actions are contractable' };
+    }
+    let pricing = null;
+    if (planId) {
+        const plan = (comm?.plans ?? []).find(p => p.id === planId);
+        if (!plan)
+            return { ok: false, code: 'PLAN_NOT_FOUND', message: `No plan "${planId}" on this action` };
+        if (plan.model === 'bundle') {
+            pricing = { model: 'bundle', blockSize: plan.blockSize, blockPrice: plan.blockPrice, callsRemaining: 0 };
+        }
+        else if (plan.model === 'subscription') {
+            const epoch = new Date(0).toISOString();
+            pricing = { model: 'subscription', periodSeconds: plan.periodSeconds, periodPrice: plan.periodPrice, callsPerWindow: plan.callsPerWindow, windowSeconds: plan.windowSeconds, validUntil: epoch, windowStart: epoch, windowCount: 0 };
+        }
+    }
+    return { ok: true, unit, pricePerCall, currency, pricing };
+}
+/** The metered coordinate for an app-tool surface — the (ext, action) pair the entitlement + gate key on. */
+export function appToolCoordinate(ownerName, appId, tool) {
+    return { ext: `apptool:${ownerName}/${appId}`, action: tool };
+}
+/** The metered coordinate for an agent-work surface (a provider agent's task type; settled per delivered task). */
+export function agentWorkCoordinate(ownerName, agentName, taskType) {
+    return { ext: `agentwork:${ownerName}/${agentName}`, action: taskType };
+}
+/** Build an ActionCommercial from an offering's stored price/plans, so the shared pricing resolver
+ *  (resolveActionPricing) works for app-tool offerings too — the offering's listing IS the authoritative price. */
+export function offeringToCommercial(o) {
+    return {
+        payMorsels: o.unit === 'morsels' ? o.basePrice : undefined,
+        payMoney: o.unit === 'money' ? { amount: o.basePrice, currency: o.currency ?? 'EUR' } : undefined,
+        plans: o.plans,
+    };
+}
+/**
+ * Resolve the authoritative pricing + metered coordinate to mint a contract from an offering — shared by the
+ * REST and MCP accept flows, for BOTH kinds. For app-tool the price comes from the offering's own listing;
+ * for ext-action it comes LIVE from the provider's extension action (so the provider's current price wins).
+ */
+export async function resolveOfferingPricing(storage, o, planId) {
+    // app-tool + agent-work both price from the offering's own listing (the provider authored it).
+    if ((o.kind === 'app-tool' || o.kind === 'agent-work') && o.surface) {
+        const priced = resolveActionPricing(offeringToCommercial(o), planId);
+        if (!priced.ok)
+            return { ok: false, status: 400, code: priced.code, message: priced.message };
+        const label = o.surface.kind === 'app-tool'
+            ? `${o.surface.appId}/${o.surface.tool} v${o.surface.ifaceVersion}`
+            : `${o.surface.agentName}:${o.surface.taskType}`;
+        return {
+            ok: true, unit: priced.unit, pricePerCall: priced.pricePerCall, currency: priced.currency, pricing: priced.pricing,
+            providerGhii: o.providerGhii, ext: o.ext, action: o.action, capabilityLabel: label, surface: o.surface,
+            tollMorsels: o.tollMorsels ?? null,
+        };
+    }
+    // ext-action: authoritative LIVE price from the provider's extension action.
+    const extRec = await storage.getExtension(o.ext);
+    const act = extRec?.actions.find(a => a.id === o.action);
+    if (!extRec || !act)
+        return { ok: false, status: 404, code: 'NOT_FOUND', message: 'Offering capability no longer exists' };
+    const priced = resolveActionPricing(act.commercial, planId);
+    if (!priced.ok)
+        return { ok: false, status: 400, code: priced.code, message: priced.message };
+    return {
+        ok: true, unit: priced.unit, pricePerCall: priced.pricePerCall, currency: priced.currency, pricing: priced.pricing,
+        providerGhii: o.providerGhii, ext: o.ext, action: o.action, capabilityLabel: `${o.ext}/${o.action}`, surface: null,
+        // The action is the live source for a raw ext offering — its declared toll, not the listing's copy.
+        tollMorsels: act.tollMorsels ?? null,
+    };
+}
+/**
+ * Attach app context to needs: when a need names a requesting app (`appId` = "owner/filename" or a bare
+ * filename under the requester), resolve that app's published name + description so a provider can judge the
+ * consumer before offering (per "do I even want to serve an app that misuses the data?"). Best-effort — a
+ * need without a resolvable app gets `appContext: null` and is grouped under its requester instead.
+ */
+export async function enrichNeeds(storage, needs) {
+    const cache = new Map();
+    const out = [];
+    for (const n of needs) {
+        let appContext = null;
+        if (n.appId) {
+            const ref = n.appId.includes('/') ? n.appId : `${n.requesterOwner}/${n.appId}`;
+            if (cache.has(ref)) {
+                appContext = cache.get(ref) ?? null;
+            }
+            else {
+                const [owner, filename] = ref.split('/');
+                let resolved = null;
+                try {
+                    const rec = owner && filename ? await storage.getAppByOwnerName(owner, filename) : null;
+                    const m = (rec?.manifest ?? {});
+                    if (rec)
+                        resolved = { app: ref, name: m.name || filename, description: m.description || '' };
+                }
+                catch { /* unresolved app → null context */ }
+                cache.set(ref, resolved);
+                appContext = resolved;
+            }
+        }
+        out.push({ ...n, appContext });
+    }
+    return out;
+}
+const OFFERING_PREFIX = 'exchange.offering.';
+const NEED_PREFIX = 'exchange.need.';
+const bidPrefix = (needId) => `exchange.bid.${needId}.`;
+async function putPublic(storage, ownerGhii, key, value, tag) {
+    const now = new Date().toISOString();
+    await storage.setMemory({ key, ownerGaii: ownerGhii, value, visibility: 'public', tags: [tag], ttlHours: null, version: 1, createdAt: now, updatedAt: now });
+}
+// ── OFFERING ────────────────────────────────────────────────────────────────
+export function newOfferingId() { return `off-${randomUUID().slice(0, 12)}`; }
+export async function putOffering(storage, o) {
+    await putPublic(storage, o.providerGhii, OFFERING_PREFIX + o.offeringId, o, 'exchange-offering');
+    return o;
+}
+export async function getOffering(storage, id) {
+    const { items } = await storage.listAllMemory({ prefix: OFFERING_PREFIX + id, limit: 2 });
+    const rec = items.find(r => r.key === OFFERING_PREFIX + id);
+    return rec ? rec.value : null;
+}
+export async function listOfferings(storage) {
+    const { items } = await storage.listAllMemory({ prefix: OFFERING_PREFIX, limit: 5000 });
+    return items.map(r => r.value).filter(v => v && v.offeringId && v.state === 'listed');
+}
+/** Every offering including delisted ones — the reconcile needs to revive a listing rather than duplicate it. */
+export async function listAllOfferings(storage) {
+    const { items } = await storage.listAllMemory({ prefix: OFFERING_PREFIX, limit: 5000 });
+    return items.map(r => r.value).filter(v => v && v.offeringId);
+}
+export async function deleteOffering(storage, id) {
+    const o = await getOffering(storage, id);
+    if (!o)
+        return false;
+    o.state = 'delisted';
+    o.updatedAt = new Date().toISOString();
+    await putOffering(storage, o);
+    return true;
+}
+/** Rank listed offerings that satisfy a capability. Match = exact (ext,action) when given, else a text
+ *  contains over title/description/tags. Cheapest base price first (a proxy; agents refine with plans/trust). */
+export async function matchOfferings(storage, q) {
+    const all = await listOfferings(storage);
+    const text = (q.text || '').trim().toLowerCase();
+    const hits = all.filter(o => {
+        if (q.ext && q.action)
+            return o.ext === q.ext && o.action === q.action;
+        if (!text)
+            return true;
+        return [o.title, o.description, o.ext, o.action, ...(o.tags || [])].join(' ').toLowerCase().includes(text);
+    });
+    return hits.sort((a, b) => a.basePrice - b.basePrice);
+}
+// ── NEED ────────────────────────────────────────────────────────────────────
+export function newNeedId() { return `need-${randomUUID().slice(0, 12)}`; }
+export async function putNeed(storage, n) {
+    await putPublic(storage, n.requesterGaii, NEED_PREFIX + n.needId, n, 'exchange-need');
+    return n;
+}
+export async function getNeed(storage, id) {
+    const { items } = await storage.listAllMemory({ prefix: NEED_PREFIX + id, limit: 2 });
+    const rec = items.find(r => r.key === NEED_PREFIX + id);
+    return rec ? rec.value : null;
+}
+export async function listNeeds(storage, opts) {
+    const { items } = await storage.listAllMemory({ prefix: NEED_PREFIX, limit: 5000 });
+    return items.map(r => r.value).filter(v => v && v.needId &&
+        (!opts?.openOnly || v.state === 'open') &&
+        (!opts?.owner || v.requesterOwner === opts.owner));
+}
+// ── BID ─────────────────────────────────────────────────────────────────────
+export function newBidId() { return `bid-${randomUUID().slice(0, 12)}`; }
+export async function putBid(storage, b) {
+    await putPublic(storage, b.bidderGhii, bidPrefix(b.needId) + b.bidId, b, 'exchange-bid');
+    return b;
+}
+export async function listBids(storage, needId) {
+    const { items } = await storage.listAllMemory({ prefix: bidPrefix(needId), limit: 2000 });
+    return items.map(r => r.value).filter(v => v && v.bidId);
+}
+export async function getBid(storage, needId, bidId) {
+    const rec = (await storage.listAllMemory({ prefix: bidPrefix(needId) + bidId, limit: 2 })).items.find(r => r.key === bidPrefix(needId) + bidId);
+    return rec ? rec.value : null;
+}
+/** Compute an offering's usage stats from the entitlements minted against its (provider, ext, action). */
+export async function offeringStats(storage, o) {
+    const ents = (await listEntitlementsByProvider(storage, o.providerGhii)).filter(e => e.ext === o.ext && e.action === o.action);
+    const consumers = new Set(ents.map(e => e.consumerGaii));
+    let totalCalls = 0, totalSettledUnits = 0, activeContracts = 0, lastUsedAt = null;
+    for (const e of ents) {
+        totalCalls += e.budget.calls;
+        totalSettledUnits += e.budget.spentUnits;
+        if (e.state === 'active')
+            activeContracts += 1;
+        if (e.budget.calls > 0 && (!lastUsedAt || e.updatedAt > lastUsedAt))
+            lastUsedAt = e.updatedAt;
+    }
+    // Observed delivery time comes from the timing record, not from the entitlements: a contract knows what
+    // it paid, only the call itself knows how long it took.
+    const t = await readCallTiming(storage, o.providerGhii, o.ext, o.action);
+    return {
+        activeContracts, totalContracts: ents.length, totalCalls, totalSettledUnits,
+        consumers: consumers.size, listedAt: o.createdAt, lastUsedAt,
+        timing: t ? { count: t.count, p50Ms: t.p50Ms, p95Ms: t.p95Ms, maxMs: t.maxMs } : null,
+    };
+}
+/** List the consumers holding contracts against an offering (provider lineage/consumption log). */
+export async function offeringConsumers(storage, o) {
+    const ents = (await listEntitlementsByProvider(storage, o.providerGhii)).filter(e => e.ext === o.ext && e.action === o.action);
+    return ents
+        .map(e => ({
+        consumerGaii: e.consumerGaii, appId: e.appId, contractRef: e.contractRef, unit: e.unit,
+        calls: e.budget.calls, settledUnits: e.budget.spentUnits, state: e.state, lastUsedAt: e.updatedAt,
+    }))
+        .sort((a, b) => b.calls - a.calls);
+}
+//# sourceMappingURL=exchange-market.js.map