aimeat 2.1.0 → 2.2.0

package/dist/src/routes/commerce.js

@@ -19,13 +19,14 @@
  */
 import { Router } from 'express';
 import { z } from 'zod';
-import { requireAuth } from '../auth/middleware.js';
+import { requireAuth, requireRole } from '../auth/middleware.js';
 import { success, error } from '../middleware/envelope.js';
 import { resolveIdentity } from '../utils/gaii.js';
+import { isEvmAddressShape, toChecksumAddress, checksumIsWrong, settlementAssetMatch, probeIsContract } from '../commerce/evm-address.js';
 import { createSession, getSession, updateSessionItems, cancelSession, completeSession, CommerceError, listSessions, listOrders, } from '../commerce/session-service.js';
 import { PaymentError } from '../commerce/payment-handlers.js';
 import { paymentChallenge, x402ExactAccepts } from '../commerce/x402.js';
-import { decodeXPayment } from '../commerce/x402-facilitator.js';
+import { decodeXPayment, getX402Network, getX402Asset, x402SettlementCurrencies } from '../commerce/x402-facilitator.js';
 import { X402_HANDLER_ID } from '../commerce/x402-handler.js';
 const ItemsSchema = z.array(z.object({
     kind: z.enum(['offer', 'org-offering', 'app-tool', 'ext-call']).optional(),
@@ -69,6 +70,21 @@ function sendCommerceError(res, config, err, extraAccepts = []) {
     const e = err;
     res.status(500).json(error(config.nodeId, 'COMMERCE_ERROR', e.message ?? 'Unexpected commerce error'));
 }
+/** The seller's opaque payment-settings record. Holds the Stripe credentials AND the x402 payout
+ *  address side by side, so every write MERGES: one rail's settings must never delete the other's. */
+const PSP_KEY = 'commerce.psp';
+/** An EVM account address — the only shape an x402 stablecoin settlement can pay out to. */
+const EVM_ADDRESS = /^0x[a-fA-F0-9]{40}$/;
+/** Read the seller's payment settings record (private, owner-scoped). */
+async function readPsp(storage, ownerGhii) {
+    const rec = await storage.getMemory(ownerGhii, PSP_KEY);
+    return rec?.value ?? {};
+}
+/** The x402 payout address in any of the shapes the facilitator accepts (extractPayTo mirrors this). */
+function payToOf(psp) {
+    const candidate = psp.payTo ?? psp.address ?? psp.x402?.address ?? psp.x402?.payTo;
+    return typeof candidate === 'string' && EVM_ADDRESS.test(candidate.trim()) ? candidate.trim() : null;
+}
 export function commerceRouter(config, storage) {
     const router = Router();
     // Kill-switch: AIMEAT_COMMERCE_ENABLED=false turns the whole surface off (503, machine-readable).
@@ -89,6 +105,110 @@ export function commerceRouter(config, storage) {
         return session;
     }
     // POST /v1/commerce/checkout-sessions — open a session against one seller's offers.
+    /* ── Seller payout settings ────────────────────────────────────────────────────────────────────
+     * Which rails can actually pay this seller, and the one setting the seller owns for each. The two
+     * rails are deliberately reported apart: Stripe moves fiat (EUR/USD) to a connected account, x402
+     * moves a stablecoin on-chain to an address the seller controls. Reading tells you which of your money
+     * listings can settle at all — an x402 sale without an address fails with SELLER_NO_X402_ADDRESS. */
+    router.get('/v1/commerce/payout', requireAuth(), requireRole('owner'), async (req, res) => {
+        const ownerGhii = resolveIdentity(req.auth, config.nodeId);
+        const psp = await readPsp(storage, ownerGhii);
+        const address = payToOf(psp);
+        // What the stablecoin rail can settle is READ FROM THE NETWORK REGISTRY, never hardcoded: the
+        // seller is told the real currency list for the network this node runs on, and which token each
+        // one settles in. One address receives them all, so a new currency asks for no new setting.
+        const network = getX402Network(config.x402Network);
+        const assets = x402SettlementCurrencies(network).map((currency) => {
+            const asset = getX402Asset(network, currency);
+            return { currency, symbol: asset.symbol, address: asset.address, decimals: asset.decimals };
+        });
+        return res.json(success(config.nodeId, {
+            x402: {
+                enabled: config.x402Enabled,
+                network: config.x402Network,
+                testnet: config.x402Network !== 'base',
+                configured: !!address,
+                address,
+                currencies: assets.map((a) => a.currency),
+                assets,
+                note: config.x402Enabled
+                    ? `Stablecoin settlement: the buyer signs a payment in the token matching the price (${assets.map((a) => `${a.currency} → ${a.symbol}`).join(', ')}) and the facilitator settles it straight to this address. No key is held by the node.`
+                    : 'The node operator has not enabled x402 on this node (AIMEAT_X402_ENABLED).',
+            },
+            stripe: {
+                configured: !!psp.secretKey,
+                provider: psp.provider ?? null,
+                currencies: ['EUR', 'USD'],
+                note: 'Card and invoice settlement in real currency, paid out to your connected account.',
+            },
+        }));
+    });
+    /**
+     * Set the x402 payout address. Guarded, because this is the one hand-typed value in the whole
+     * stablecoin flow and a settlement to the wrong target is irreversible: the shape, then the EIP-55
+     * checksum (catches a typo the eye cannot), then a check that it is not one of our own settlement
+     * TOKEN contracts (the address most likely to be on a seller's clipboard while setting this up),
+     * then — when the operator configured an RPC — whether the chain says it holds contract code.
+     * Merges into the record, so the Stripe credentials survive.
+     */
+    router.put('/v1/commerce/payout/x402', requireAuth(), requireRole('owner'), async (req, res) => {
+        const raw = (req.body ?? {});
+        const address = typeof raw.address === 'string' ? raw.address.trim() : '';
+        if (!isEvmAddressShape(address)) {
+            return res.status(400).json(error(config.nodeId, 'INVALID_ADDRESS', 'address must be an EVM account address: 0x followed by 40 hex characters'));
+        }
+        if (checksumIsWrong(address)) {
+            return res.status(400).json(error(config.nodeId, 'ADDRESS_CHECKSUM', 'This address fails its EIP-55 checksum, which almost always means a character was mistyped or lost in copying. '
+                + 'Paste it again from your wallet, or send it in all lowercase if your wallet does not use mixed case.'));
+        }
+        const token = settlementAssetMatch(address);
+        if (token) {
+            return res.status(400).json(error(config.nodeId, 'ADDRESS_IS_TOKEN_CONTRACT', `That is the ${token.currency === 'EUR' ? 'EURC' : 'USDC'} token contract on ${token.network}, not a wallet. `
+                + 'Funds settled there cannot be recovered. Use the address of an account you hold the key for.'));
+        }
+        const isContract = await probeIsContract(config.x402RpcUrl, address);
+        if (isContract === true) {
+            return res.status(400).json(error(config.nodeId, 'ADDRESS_IS_CONTRACT', 'The chain reports contract code at this address, so it is not a wallet you hold a key for. '
+                + 'If this is a smart-contract wallet you control, ask the operator to allow it.'));
+        }
+        // Store the canonical EIP-55 form: mixed case is what a wallet shows, so the seller can compare.
+        const canonical = toChecksumAddress(address);
+        const ownerGhii = resolveIdentity(req.auth, config.nodeId);
+        const psp = await readPsp(storage, ownerGhii);
+        const now = new Date().toISOString();
+        await storage.setMemory({
+            key: PSP_KEY, ownerGaii: ownerGhii, value: { ...psp, payTo: canonical },
+            visibility: 'private', tags: ['commerce'], ttlHours: null, version: 1, createdAt: now, updatedAt: now,
+        });
+        return res.json(success(config.nodeId, {
+            configured: true, address: canonical, network: config.x402Network,
+            // One address receives every settlement asset this network carries — report them all, so the
+            // seller sees that the same setting covers both a USD sale and a EUR one.
+            currencies: x402SettlementCurrencies(getX402Network(config.x402Network)),
+            enabled: config.x402Enabled,
+            checked: { shape: true, checksum: true, notTokenContract: true, onChain: isContract === null ? 'skipped' : 'account' },
+        }));
+    });
+    /** Remove the payout address only — Stripe credentials in the same record are untouched. */
+    router.delete('/v1/commerce/payout/x402', requireAuth(), requireRole('owner'), async (req, res) => {
+        const ownerGhii = resolveIdentity(req.auth, config.nodeId);
+        const psp = await readPsp(storage, ownerGhii);
+        const next = { ...psp };
+        delete next.payTo;
+        delete next.address;
+        if (next.x402) {
+            const x = { ...next.x402 };
+            delete x.address;
+            delete x.payTo;
+            next.x402 = x;
+        }
+        const now = new Date().toISOString();
+        await storage.setMemory({
+            key: PSP_KEY, ownerGaii: ownerGhii, value: next,
+            visibility: 'private', tags: ['commerce'], ttlHours: null, version: 1, createdAt: now, updatedAt: now,
+        });
+        return res.json(success(config.nodeId, { configured: false, note: 'Stablecoin sales now fail until an address is set again. Card/invoice settlement is unaffected.' }));
+    });
     router.post('/v1/commerce/checkout-sessions', requireAuth(), async (req, res) => {
         const parsed = CreateSchema.safeParse(req.body);
         if (!parsed.success) {

package/dist/src/routes/commerce.js.map

@@ -1 +1 @@
-{"version":3,"file":"commerce.js","sourceRoot":"","sources":["../../../src/routes/commerce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,aAAa,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAC5F,YAAY,EAAE,UAAU,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,iGAAiG;IACjG,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACnC,+DAA+D;IAC/D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC1C,0FAA0F;IAC1F,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC,CAAC;KACnH,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAElB,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;AAExG,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACvC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,SAAS,iBAAiB,CAAC,GAAa,EAAE,MAAoB,EAAE,GAAY,EAAE,eAA+C,EAAE;IAC7H,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;QAChE,+FAA+F;QAC/F,oFAAoF;QACpF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YAC9B,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC;YAC9C,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,CAAC,GAAG,GAA2B,CAAC;IACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,IAAI,2BAA2B,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,OAAgB;IACnE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,kGAAkG;IAClG,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC7C,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,4EAA4E,CAAC,CAAC,CAAC;YAC7I,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,gHAAgH;IAChH,KAAK,UAAU,cAAc,CAAC,GAAY;QACxC,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,GAAG,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;QACrG,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,oFAAoF;IACpF,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9E,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtH,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE;gBACnD,UAAU,EAAE,GAAG,CAAC,IAAK,CAAC,KAAe;gBACrC,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,IAAK,EAAE,MAAM,CAAC,MAAM,CAAC;gBACxD,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;gBACtB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE;gBACvD,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,kCAAkC,OAAO,CAAC,EAAE,WAAW,EAAE;gBAClH,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,kCAAkC,OAAO,CAAC,EAAE,EAAE,EAAE;aACtG,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,uFAAuF;IACvF,MAAM,CAAC,GAAG,CAAC,gCAAgC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7E,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,6FAA6F;IAC7F,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClE,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,4FAA4F;IAC5F,MAAM,CAAC,GAAG,CAAC,oCAAoC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnF,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtH,IAAI,CAAC;YACH,IAAI,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YACxC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI;gBACnC,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC;gBACvC,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAM,CAAC,CAAC;YAC3E,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3F,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtH,IAAI,OAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC3E,gGAAgG;YAChG,oGAAoG;YACpG,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,CAAC;YACtE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC3F,MAAM,UAAU,GAAG,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;YAC/D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YACpG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;gBACtD,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;aACpE,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mGAAmG;YACnG,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"commerce.js","sourceRoot":"","sources":["../../../src/routes/commerce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC1I,OAAO,EACL,aAAa,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAC5F,YAAY,EAAE,UAAU,GACzB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AACzH,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,iGAAiG;IACjG,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACnC,+DAA+D;IAC/D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC1C,0FAA0F;IAC1F,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC,CAAC;KACnH,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAElB,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;AAExG,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACvC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,SAAS,iBAAiB,CAAC,GAAa,EAAE,MAAoB,EAAE,GAAY,EAAE,eAA+C,EAAE;IAC7H,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;QAChE,+FAA+F;QAC/F,oFAAoF;QACpF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YAC9B,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC;YAC9C,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,CAAC,GAAG,GAA2B,CAAC;IACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,IAAI,2BAA2B,CAAC,CAAC,CAAC;AACzG,CAAC;AAED;sGACsG;AACtG,MAAM,OAAO,GAAG,cAAc,CAAC;AAC/B,4FAA4F;AAC5F,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAI1C,yEAAyE;AACzE,KAAK,UAAU,OAAO,CAAC,OAAgB,EAAE,SAAiB;IACxD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACxD,OAAQ,GAAG,EAAE,KAA+B,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,wGAAwG;AACxG,SAAS,OAAO,CAAC,GAAc;IAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC;IACnF,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,OAAgB;IACnE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,kGAAkG;IAClG,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC7C,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,4EAA4E,CAAC,CAAC,CAAC;YAC7I,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,gHAAgH;IAChH,KAAK,UAAU,cAAc,CAAC,GAAY;QACxC,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,GAAG,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;QACrG,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,oFAAoF;IACpF;;;;yGAIqG;IACrG,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxF,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,IAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,8FAA8F;QAC9F,gGAAgG;QAChG,4FAA4F;QAC5F,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;YAChE,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAE,CAAC;YAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9F,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YACrC,IAAI,EAAE;gBACJ,OAAO,EAAE,MAAM,CAAC,WAAW;gBAC3B,OAAO,EAAE,MAAM,CAAC,WAAW;gBAC3B,OAAO,EAAE,MAAM,CAAC,WAAW,KAAK,MAAM;gBACtC,UAAU,EAAE,CAAC,CAAC,OAAO;gBACrB,OAAO;gBACP,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACzC,MAAM;gBACN,IAAI,EAAE,MAAM,CAAC,WAAW;oBACtB,CAAC,CAAC,qFAAqF,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wFAAwF;oBAC1O,CAAC,CAAC,4EAA4E;aACjF;YACD,MAAM,EAAE;gBACN,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS;gBAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;gBAC9B,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;gBAC1B,IAAI,EAAE,mFAAmF;aAC1F;SACF,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH;;;;;;;OAOG;IACH,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7F,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA0B,CAAC;QACtD,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAChE,0EAA0E,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EACjE,iHAAiH;kBAC/G,sGAAsG,CAAC,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,2BAA2B,EAC1E,eAAe,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,sBAAsB,KAAK,CAAC,OAAO,kBAAkB;kBAC5G,8FAA8F,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,EACpE,6FAA6F;kBAC3F,+EAA+E,CAAC,CAAC,CAAC;QACxF,CAAC;QACD,iGAAiG;QACjG,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,IAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,CAAC,SAAS,CAAC;YACtB,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE;YACvE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;SACtG,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YACrC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW;YACjE,6FAA6F;YAC7F,0EAA0E;YAC1E,UAAU,EAAE,wBAAwB,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxE,OAAO,EAAE,MAAM,CAAC,WAAW;YAC3B,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE;SACvH,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,4FAA4F;IAC5F,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChG,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,IAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAc,EAAE,GAAG,GAAG,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC;QAAC,OAAO,IAAI,CAAC,OAAO,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YAAC,OAAO,CAAC,CAAC,KAAK,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAAC,CAAC;QAC/F,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,CAAC,SAAS,CAAC;YACtB,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI;YAC/C,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;SACtG,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,iGAAiG,EAAE,CAAC,CAAC,CAAC;IAC1K,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9E,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtH,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE;gBACnD,UAAU,EAAE,GAAG,CAAC,IAAK,CAAC,KAAe;gBACrC,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,IAAK,EAAE,MAAM,CAAC,MAAM,CAAC;gBACxD,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;gBACtB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE;gBACvD,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,kCAAkC,OAAO,CAAC,EAAE,WAAW,EAAE;gBAClH,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,kCAAkC,OAAO,CAAC,EAAE,EAAE,EAAE;aACtG,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,uFAAuF;IACvF,MAAM,CAAC,GAAG,CAAC,gCAAgC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7E,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,6FAA6F;IAC7F,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClE,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,4FAA4F;IAC5F,MAAM,CAAC,GAAG,CAAC,oCAAoC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnF,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtH,IAAI,CAAC;YACH,IAAI,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YACxC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI;gBACnC,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC;gBACvC,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAM,CAAC,CAAC;YAC3E,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3F,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtH,IAAI,OAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC3E,gGAAgG;YAChG,oGAAoG;YACpG,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,CAAC;YACtE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC3F,MAAM,UAAU,GAAG,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;YAC/D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YACpG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;gBACtD,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;aACpE,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mGAAmG;YACnG,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/routes/exchange-market.d.ts

@@ -7,10 +7,14 @@
  *   direct acceptance route). Records are public (browsable); writes are owner-authorised. The heavy
  *   orchestration (agent negotiation, composite assembly) lives in the marketplace app/agent — this router
  *   is the generic store + capability match.
- * @structure exchangeMarketRouter — offerings (POST/GET/GET :id detail/GET :id/consumers/DELETE) ·
- *   needs (POST/GET/close) · bids (POST/GET/accept)
+ * @structure exchangeMarketRouter — offerings (POST/GET/GET :id detail/GET :id/odps(.yaml)/GET :id/consumers/
+ *   DELETE) · needs (POST/GET/close) · bids (POST/GET/accept) · offeringContext (shared detail/ODPS builder)
  * @usage import { exchangeMarketRouter } from './routes/exchange-market.js'; app.use(exchangeMarketRouter(config, storage));
  * @version-history
+ *   v1.5.0 — 2026-07-25 — ODPS v4.1 (TARGET-045 §4): GET /v1/exchange/offerings/{id}/odps(.yaml) projects the
+ *     listing as an Open Data Product Specification document; `provenance` is now VALIDATED (400
+ *     INVALID_PROVENANCE) instead of cast, and a new `odps` authoring block carries the standard fields the
+ *     node cannot derive (400 INVALID_ODPS). Detail + ODPS share one context builder.
  *   v1.4.0 — 2026-07-21 — Needs are app-bound (app_id required → 400 NEED_APP_REQUIRED) + carry an I/O
  *     interface spec (inputSchema/outputSchema) — the emergent app-to-app data-API request.
  *   v1.3.0 — 2026-07-21 — Cross-app selling (Gap 1): `kind: 'app-tool'` listing branch (a provider app sells a

package/dist/src/routes/exchange-market.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exchange-market.d.ts","sourceRoot":"","sources":["../../../src/routes/exchange-market.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAgDvD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAyXnF"}
+{"version":3,"file":"exchange-market.d.ts","sourceRoot":"","sources":["../../../src/routes/exchange-market.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AA0EvD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAgenF"}

package/dist/src/routes/exchange-market.js

@@ -7,10 +7,14 @@
  *   direct acceptance route). Records are public (browsable); writes are owner-authorised. The heavy
  *   orchestration (agent negotiation, composite assembly) lives in the marketplace app/agent — this router
  *   is the generic store + capability match.
- * @structure exchangeMarketRouter — offerings (POST/GET/GET :id detail/GET :id/consumers/DELETE) ·
- *   needs (POST/GET/close) · bids (POST/GET/accept)
+ * @structure exchangeMarketRouter — offerings (POST/GET/GET :id detail/GET :id/odps(.yaml)/GET :id/consumers/
+ *   DELETE) · needs (POST/GET/close) · bids (POST/GET/accept) · offeringContext (shared detail/ODPS builder)
  * @usage import { exchangeMarketRouter } from './routes/exchange-market.js'; app.use(exchangeMarketRouter(config, storage));
  * @version-history
+ *   v1.5.0 — 2026-07-25 — ODPS v4.1 (TARGET-045 §4): GET /v1/exchange/offerings/{id}/odps(.yaml) projects the
+ *     listing as an Open Data Product Specification document; `provenance` is now VALIDATED (400
+ *     INVALID_PROVENANCE) instead of cast, and a new `odps` authoring block carries the standard fields the
+ *     node cannot derive (400 INVALID_ODPS). Detail + ODPS share one context builder.
  *   v1.4.0 — 2026-07-21 — Needs are app-bound (app_id required → 400 NEED_APP_REQUIRED) + carry an I/O
  *     interface spec (inputSchema/outputSchema) — the emergent app-to-app data-API request.
  *   v1.3.0 — 2026-07-21 — Cross-app selling (Gap 1): `kind: 'app-tool'` listing branch (a provider app sells a
@@ -25,11 +29,15 @@ import { Router } from 'express';
 import { requireAuth } from '../auth/middleware.js';
 import { success, error } from '../middleware/envelope.js';
 import { resolveIdentity } from '../utils/gaii.js';
+import { resolvePacingToll } from './extensions/pacing.js';
 import { commerceFeePercent } from '../services/marketplace-fee.js';
 import { createEntitlement, readEntitlementForCall } from '../services/metered-entitlements.js';
 import { resolveActionPricing, newOfferingId, newNeedId, newBidId, appToolCoordinate, agentWorkCoordinate, putOffering, getOffering, listOfferings, deleteOffering, matchOfferings, putNeed, getNeed, listNeeds, putBid, listBids, getBid, offeringStats, offeringConsumers, enrichNeeds, } from '../services/exchange-market.js';
+import { ProvenanceSchema, OdpsExtrasSchema } from '../models/odps-schemas.js';
+import { offeringToOdps, odpsToYaml, ODPS_VERSION } from '../services/exchange-odps.js';
 import { AppToolsDocSchema, appToolsKey } from '../models/app-tool-schemas.js';
 import { ensureInterfaceVersion, getInterfaceVersion } from '../services/app-tool-interfaces.js';
+import { reconcileOwnerOfferings, reconcileOwnerOfferingsThrottled, migrateLegacyOfferings } from '../services/exchange-projection.js';
 const str = (v) => (typeof v === 'string' ? v : '');
 const posOrNull = (v) => (typeof v === 'number' && Number.isFinite(v) && v >= 0 ? Math.floor(v) : null);
 /** A publishable schema is a non-empty object (an empty `{}` counts as "not published"). */
@@ -46,6 +54,31 @@ function parseUsageTerms(v) {
         note: typeof o.note === 'string' ? o.note : undefined,
     };
 }
+/**
+ * Parse the provider's provenance attestation. Validated (not cast) because it lands in a PUBLIC record and
+ * is republished as ODPS: an unchecked object here would let a provider write arbitrary keys into the market.
+ * The node stamps `odpsVersion` so the descriptor always says which ODPS version it follows.
+ */
+function parseProvenance(v) {
+    if (v === undefined || v === null)
+        return { ok: true, value: null };
+    const parsed = ProvenanceSchema.safeParse(v);
+    if (!parsed.success)
+        return { ok: false, message: parsed.error.issues.map(i => `${i.path.join('.') || 'provenance'}: ${i.message}`).join('; ') };
+    const value = parsed.data;
+    if (!Object.keys(value).length)
+        return { ok: true, value: null };
+    return { ok: true, value: { ...value, odpsVersion: value.odpsVersion ?? ODPS_VERSION } };
+}
+/** Parse the provider's ODPS authoring block (the standard fields the node cannot derive). */
+function parseOdpsExtras(v) {
+    if (v === undefined || v === null)
+        return { ok: true, value: null };
+    const parsed = OdpsExtrasSchema.safeParse(v);
+    if (!parsed.success)
+        return { ok: false, message: parsed.error.issues.map(i => `${i.path.join('.') || 'odps'}: ${i.message}`).join('; ') };
+    return { ok: true, value: Object.keys(parsed.data).length ? parsed.data : null };
+}
 /** Parse a need's interface-spec (the shape it sends/expects + light hints) from a request body. */
 function parseNeedSpec(v) {
     if (!v || typeof v !== 'object')
@@ -85,6 +118,14 @@ export function exchangeMarketRouter(config, storage) {
     router.post('/v1/exchange/offerings', requireAuth(), async (req, res) => {
         const owner = req.auth.owner;
         const b = (req.body ?? {});
+        // Provenance + the ODPS authoring block are validated once, before any kind branch: both are provider
+        // promises that get republished as an ODPS document, so a malformed one fails the listing loudly (400).
+        const prov = parseProvenance(b.provenance);
+        if (!prov.ok)
+            return res.status(400).json(error(config.nodeId, 'INVALID_PROVENANCE', `provenance is malformed — ${prov.message}`));
+        const odps = parseOdpsExtras(b.odps);
+        if (!odps.ok)
+            return res.status(400).json(error(config.nodeId, 'INVALID_ODPS', `odps is malformed — ${odps.message}`));
         // ── kind: app-tool — a provider app sells one of its tools (cross-app selling, Gap 1) ──
         if (b.kind === 'app-tool') {
             const appId = str(b.app_id), toolName = str(b.tool);
@@ -134,7 +175,7 @@ export function exchangeMarketRouter(config, storage) {
                 description: str(b.description) || tool.description || '',
                 unit: priced.unit, basePrice: priced.pricePerCall, currency: priced.currency,
                 plans: commercial.plans ?? [],
-                provenance: (b.provenance && typeof b.provenance === 'object') ? b.provenance : null,
+                provenance: prov.value, odps: odps.value,
                 usageTerms,
                 tags: Array.isArray(b.tags) ? b.tags.filter(t => typeof t === 'string') : [],
                 state: 'listed', createdAt: now, updatedAt: now,
@@ -181,7 +222,7 @@ export function exchangeMarketRouter(config, storage) {
                 unit: priced.unit, basePrice: priced.pricePerCall, currency: priced.currency,
                 plans: commercial.plans ?? [],
                 taskSpec: { inputSchema: inSchema, outputSchema: outSchema },
-                provenance: (b.provenance && typeof b.provenance === 'object') ? b.provenance : null,
+                provenance: prov.value, odps: odps.value,
                 usageTerms,
                 tags: Array.isArray(b.tags) ? b.tags.filter(t => typeof t === 'string') : [],
                 state: 'listed', createdAt: now, updatedAt: now,
@@ -225,7 +266,7 @@ export function exchangeMarketRouter(config, storage) {
             description: str(b.description),
             unit: priced.unit, basePrice: priced.pricePerCall, currency: priced.currency,
             plans: act.commercial?.plans ?? [],
-            provenance: (b.provenance && typeof b.provenance === 'object') ? b.provenance : null,
+            provenance: prov.value, odps: odps.value,
             usageTerms,
             tags: Array.isArray(b.tags) ? b.tags.filter(t => typeof t === 'string') : [],
             state: 'listed', createdAt: now, updatedAt: now,
@@ -234,72 +275,120 @@ export function exchangeMarketRouter(config, storage) {
         return res.status(201).json(success(config.nodeId, { offering }));
     });
     /**
-     * Offering DETAIL (public) — everything a human or agent needs to decide + integrate: the I/O SCHEMA of
-     * the underlying action, the CALL RECIPE (the contract IS the access — you call as yourself, no API key),
-     * usage terms, provenance, and usage STATS (reputation). One call, so the app/agent needn't stitch it.
+     * The full decision + integration context for one offering: the capability's I/O SCHEMA, the CALL RECIPE
+     * (the contract IS the access — you call as yourself, no API key) and the usage STATS. Shared by the JSON
+     * detail route and the ODPS projection, so the two can never describe the same offering differently.
      */
-    router.get('/v1/exchange/offerings/:id', async (req, res) => {
-        const o = await getOffering(storage, str(req.params.id));
-        if (!o)
-            return res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No such offering'));
+    async function offeringContext(o) {
         const stats = await offeringStats(storage, o);
+        // The listing is the source for app-tool and agent-work (the provider authored it there); a raw ext
+        // action is read live from the extension below, the same way its price is.
+        const tollMorsels = o.tollMorsels ?? null;
         // app-tool: the capability schema is the PINNED interface snapshot; the call goes to the WebMCP invoke
         // endpoint (the accepted contract meters it). This is the freeze made visible — the version is explicit.
         if (o.kind === 'app-tool' && o.surface && o.surface.kind === 'app-tool') {
             const s = o.surface;
             const iface = await getInterfaceVersion(storage, o.providerGhii, s.appId, s.tool, s.ifaceVersion);
-            return res.json(success(config.nodeId, {
-                offering: o,
+            return {
                 capability: iface ? {
                     kind: 'app-tool', app: `${s.ownerName}/${s.appId}`, tool: s.tool, iface_version: s.ifaceVersion,
                     input_schema: iface.inputSchema, output_schema: iface.outputSchema,
                 } : null,
-                call_recipe: {
+                iface: iface ? { inputSchema: iface.inputSchema, outputSchema: iface.outputSchema } : null,
+                callRecipe: {
                     method: 'POST',
                     url: `/v1/apps/${encodeURIComponent(s.ownerName)}/${encodeURIComponent(s.appId)}/webmcp/tools/${encodeURIComponent(s.tool)}`,
                     auth: 'Your own AIMEAT token — the accepted contract (metered entitlement) authorises the call; no separate API key is issued.',
                     note: `Each call is metered + charged to your budget at the provider price. The contract is pinned to interface v${s.ifaceVersion}; the provider may ship newer app versions without breaking your integration.`,
                     body: '{ "input": { … } }',
                 },
-                stats,
-            }));
+                stats, tollMorsels,
+            };
         }
         // agent-work: the "capability" is the task interface; the call recipe is "start work → agent delivers".
         if (o.kind === 'agent-work' && o.surface && o.surface.kind === 'agent-work') {
             const s = o.surface;
-            return res.json(success(config.nodeId, {
-                offering: o,
+            return {
                 capability: o.taskSpec ? { kind: 'agent-work', agent: `${s.ownerName}/${s.agentName}`, task_type: s.taskType,
                     input_schema: o.taskSpec.inputSchema, output_schema: o.taskSpec.outputSchema } : null,
-                call_recipe: {
+                iface: o.taskSpec ? { inputSchema: o.taskSpec.inputSchema, outputSchema: o.taskSpec.outputSchema } : null,
+                callRecipe: {
                     method: 'POST', url: '/v1/exchange/work',
                     body: `{ "offering_id": "${o.offeringId}", "input": { … } }`,
                     auth: 'Your own AIMEAT token — the accepted contract authorises starting work; no separate API key.',
                     note: `Async: you START a task, the provider agent (${s.agentName}) DELIVERS, and you are charged the per-task price ON DELIVERY (metered + rake against your budget).`,
                 },
-                stats,
-            }));
+                stats, tollMorsels,
+            };
         }
         // ext-action: schema comes live from the provider's extension action.
         const extRec = await storage.getExtension(o.ext);
         const act = extRec?.actions.find(a => a.id === o.action);
-        return res.json(success(config.nodeId, {
-            offering: o,
+        return {
             capability: act ? {
                 input_schema: act.inputSchema ?? {},
                 output_schema: act.outputSchema ?? {},
                 toll_morsels: act.tollMorsels ?? 0,
             } : null,
-            call_recipe: {
+            iface: act ? { inputSchema: (act.inputSchema ?? {}), outputSchema: (act.outputSchema ?? {}) } : null,
+            callRecipe: {
                 method: 'POST',
                 url: `/v1/ext/${o.ext}/${o.action}`,
                 auth: 'Your own AIMEAT token — the accepted contract (metered entitlement) authorises the call; no separate API key is issued.',
                 note: 'Each call is metered + charged to your budget at the provider price; the provider’s own upstream keys stay server-side.',
                 mcp: `aimeat_extension_invoke { "name": "${o.ext}", "action": "${o.action}", "input": { … } }`,
             },
-            stats,
+            stats, tollMorsels: act?.tollMorsels ?? null,
+        };
+    }
+    /**
+     * Offering DETAIL (public) — everything a human or agent needs to decide + integrate: the I/O SCHEMA of
+     * the underlying action, the CALL RECIPE (the contract IS the access — you call as yourself, no API key),
+     * usage terms, provenance, and usage STATS (reputation). One call, so the app/agent needn't stitch it.
+     */
+    router.get('/v1/exchange/offerings/:id', async (req, res) => {
+        const o = await getOffering(storage, str(req.params.id));
+        if (!o)
+            return res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No such offering'));
+        const ctx = await offeringContext(o);
+        return res.json(success(config.nodeId, {
+            offering: o, capability: ctx.capability, call_recipe: ctx.callRecipe, stats: ctx.stats,
+            // Stated before the contract is signed, because it changes what a call costs the CONSUMER even
+            // though it moves nothing to the provider. `source` says who set it: the seller, or the node.
+            pacing: {
+                toll_morsels: resolvePacingToll(config, ctx.tollMorsels),
+                source: typeof ctx.tollMorsels === 'number' && ctx.tollMorsels >= 0 ? 'capability' : 'node',
+                note: 'Morsels burned per call to bound consumption rate. A burn, not revenue: nobody is credited it, '
+                    + 'and calling your own capability is free.',
+            },
+            odps: { version: ODPS_VERSION, url: `/v1/exchange/offerings/${o.offeringId}/odps.yaml` },
         }));
     });
+    /**
+     * The offering as an **Open Data Product Specification v4.1** document (opendataproducts.org, Linux
+     * Foundation) — the interoperable descriptor an outside catalogue or a negotiating agent can read without
+     * knowing anything about AIMEAT. Public, like the listing itself. Derived on read (never stored in ODPS
+     * form), so it cannot drift from the offering it describes. `.yaml` serves the spec's native format;
+     * `/odps` serves the same document as JSON inside the standard AIMEAT envelope (`?format=yaml` for raw).
+     * AIMEAT-specific truth (metered coordinate, pinned interface, provenance, observed usage) travels under
+     * `product.x-aimeat`, which keeps the document valid against the official schema.
+     */
+    async function serveOdps(req, res, format) {
+        const o = await getOffering(storage, str(req.params.id));
+        if (!o)
+            return res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No such offering'));
+        const ctx = await offeringContext(o);
+        const doc = offeringToOdps({
+            offering: o, iface: ctx.iface, callRecipe: ctx.callRecipe, stats: ctx.stats,
+            rakePercent: commerceFeePercent(config), baseUrl: config.baseUrl, nodeId: config.nodeId,
+        });
+        if (format === 'json')
+            return res.json(success(config.nodeId, { odps_version: ODPS_VERSION, odps: doc }));
+        res.type('text/yaml; charset=utf-8');
+        return res.send(odpsToYaml(doc));
+    }
+    router.get('/v1/exchange/offerings/:id/odps.yaml', (req, res) => serveOdps(req, res, 'yaml'));
+    router.get('/v1/exchange/offerings/:id/odps', (req, res) => serveOdps(req, res, str(req.query.format) === 'yaml' ? 'yaml' : 'json'));
     /**
      * Offering CONSUMERS (provider lineage) — who holds a contract against my offering, how much they consumed,
      * when they last used it. Provider-only: "where is my data used, by whom?".
@@ -313,6 +402,12 @@ export function exchangeMarketRouter(config, storage) {
     });
     /** Browse listed offerings (matching a capability or free text). Public. `?stats=1` folds in usage/reputation. */
     router.get('/v1/exchange/offerings', async (req, res) => {
+        // Safety net for the source-of-truth model: bring the CALLER's own projections up to date before
+        // they read the market (bounded to one owner — a browse never reconciles the whole node).
+        if (req.auth) {
+            await reconcileOwnerOfferingsThrottled(storage, resolveIdentity(req.auth, config.nodeId))
+                .catch(() => { });
+        }
         const ext = str(req.query.ext), action = str(req.query.action), q = str(req.query.q);
         const offerings = (ext && action) || q
             ? await matchOfferings(storage, { ext: ext || null, action: action || null, text: q || null })
@@ -323,14 +418,44 @@ export function exchangeMarketRouter(config, storage) {
         }
         return res.json(success(config.nodeId, { offerings, count: offerings.length }));
     });
-    /** Delist an offering (owner only). */
+    /**
+     * Delist an offering (owner only). A PROJECTED listing (`auto`) exists because its source says so, so
+     * delisting it by hand would come straight back on the next reconcile — the honest answer is to turn the
+     * source's `exchange` flag off, and that is what this reports (409) instead of lying about the outcome.
+     */
     router.delete('/v1/exchange/offerings/:id', requireAuth(), async (req, res) => {
         const o = await getOffering(storage, str(req.params.id));
         if (!o || o.providerOwner !== req.auth.owner)
             return res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No such offering of yours'));
+        if (o.auto && str(req.query.force) !== '1') {
+            return res.status(409).json(error(config.nodeId, 'SOURCE_MANAGED', `This listing is projected from its source (${o.ext}/${o.action}). Turn "exchange" off there (app-catalog → app details → app tools, the extension action, or the agent offer) and it is removed. Pass ?force=1 to delist until the next reconcile.`));
+        }
         await deleteOffering(storage, o.offeringId);
         return res.json(success(config.nodeId, { offeringId: o.offeringId, state: 'delisted' }));
     });
+    /**
+     * Reconcile the caller's own listings against their sources (TARGET-050). Normally automatic — writing a
+     * tool manifest, an extension or an offer projects it — this is the explicit handle: a `dry_run` report
+     * before anything changes, and `migrate` to adopt hand-authored listings into the projection model
+     * (flag their source, keep their offeringId so existing contracts keep resolving).
+     */
+    router.post('/v1/exchange/reconcile', requireAuth(), async (req, res) => {
+        const b = (req.body ?? {});
+        const dryRun = b.dry_run === true || str(req.query.dry_run) === '1';
+        const migrate = b.migrate === true || str(req.query.migrate) === '1';
+        const ownerGhii = resolveIdentity(req.auth, config.nodeId);
+        const report = migrate
+            ? await migrateLegacyOfferings(storage, ownerGhii, { dryRun })
+            : await reconcileOwnerOfferings(storage, ownerGhii, {
+                dryRun,
+                ...(str(b.app_id) ? { appId: str(b.app_id) } : {}),
+                ...(str(b.ext) ? { extName: str(b.ext) } : {}),
+                ...(str(b.agent) ? { agentName: str(b.agent) } : {}),
+            });
+        return res.json(success(config.nodeId, report, [
+            { description: 'Browse the marketplace', method: 'GET', url: '/v1/exchange/offerings' },
+        ]));
+    });
     // ── NEEDS (demand) ──────────────────────────────────────────────────────────
     /** Post an open need. Providers browse open needs and bid. */
     router.post('/v1/exchange/needs', requireAuth(), async (req, res) => {
@@ -437,7 +562,8 @@ export function exchangeMarketRouter(config, storage) {
             consumerGaii, appId: n.appId, providerGhii: `${extRec.installedBy}@${config.nodeId}`,
             ext: bid.ext, action: bid.action, capabilityLabel: `${bid.ext}/${bid.action}`,
             unit: priced.unit, pricePerCall: priced.pricePerCall, currency: priced.currency, pricing: priced.pricing,
-            capUnits: capCap, contractRef: `bid:${bid.bidId}`, createdBy: owner, carrySpend: existing,
+            capUnits: capCap, contractRef: `bid:${bid.bidId}`, tollMorsels: act.tollMorsels ?? null,
+            createdBy: owner, carrySpend: existing,
         });
         // Mark the bid accepted + the need matched (append updates; other bids stay for the record).
         bid.state = 'accepted';