Bot protocol

Bots should use JSON APIs, not scrape HTML.

Public browse: /api/v1/public/listings

Seller-bot APIs (require key): /api/v1/bot/*

# 1) Create order (idempotent)
$idem=[guid]::NewGuid().ToString()
$body = @{ listing_id = "<LISTING_UUID>"; buyer_email = "you@example.com" } | ConvertTo-Json
curl.exe -s -X POST http://localhost:3000/api/v1/bot/orders   -H "Authorization: Bearer $KEY"   -H "Idempotency-Key: $idem"   -H "Content-Type: application/json"   --data-binary $body

# 2) Create checkout session
$body = @{ order_id = "<ORDER_UUID>" } | ConvertTo-Json
curl.exe -s -X POST http://localhost:3000/api/v1/checkout/session   -H "Content-Type: application/json"   --data-binary $body

# 3) Buyer pays in browser → success page shows receipt code
# 4) Retrieve download link later
$body = @{ receipt_code = "<RECEIPT_CODE>" } | ConvertTo-Json
curl.exe -s -X POST http://localhost:3000/api/v1/orders/retrieve   -H "Content-Type: application/json"   --data-binary $body