{
  "service": "@machinefi/runtime production application",
  "authentication": "Solana wallet message challenge + HttpOnly session + CSRF",
  "endpoints": {
    "POST /api/auth/challenge": "issue a single-use domain-bound wallet challenge",
    "POST /api/auth/verify": "verify Ed25519 signature and establish an opaque session",
    "GET /api/auth/session": "inspect the authenticated session",
    "POST /api/auth/logout": "revoke the current session",
    "GET /api/production/network": "read the startup-verified Solana cluster and genesis identity",
    "GET|POST /api/machines": "list or register wallet-owned machines",
    "GET|POST /api/machines/:id/credentials": "list metadata or provision a revocable telemetry:write machine credential",
    "POST /api/machine-credentials/:id/revoke": "revoke an owned machine credential",
    "GET|POST /api/machines/:id/capabilities": "read or replace owned machine capabilities",
    "GET|POST /api/machines/:id/telemetry": "read owned or ingest credential-authenticated telemetry",
    "GET|POST /api/runtime/sessions": "list or create durable runtime sessions",
    "POST /api/runtime/sessions/:id/end": "end an owned active runtime session",
    "GET|POST /api/work-orders": "list or create durable machine work orders",
    "GET /api/telemetry": "bounded owner-scoped telemetry history or latest-per-machine reconciliation",
    "GET /api/telemetry/stream": "ownership-filtered live SSE telemetry",
    "GET /api/marketplace/providers": "discover available providers using resource, rail, and price filters",
    "GET|POST /api/marketplace/capabilities": "persistent provider capability registry",
    "GET|PATCH /api/marketplace/capabilities/:id": "read or owner-safely update a provider capability",
    "GET|POST /api/marketplace/requests": "owned persistent resource requests",
    "GET /api/marketplace/provider/requests": "provider-authorized request inbox",
    "GET /api/marketplace/requests/:id": "authorized request, quote, grant, and receipt detail",
    "POST /api/marketplace/requests/:id/cancel": "requester cancellation of a pending or quoted request",
    "POST /api/marketplace/requests/:id/reject": "selected-provider rejection of a targeted request",
    "GET /api/marketplace/requests/:id/compatible-providers": "discover compatible available providers",
    "POST /api/marketplace/requests/:id/select-provider": "select a compatible provider capability",
    "GET|POST /api/marketplace/requests/:id/quotes": "list authorized quotes or create a provider quote",
    "POST /api/marketplace/quotes/:id/withdraw": "provider withdrawal of an offered quote",
    "POST /api/marketplace/requests/:id/quotes/:quoteId/accept": "accept a selected persisted quote",
    "GET|POST /api/marketplace/requests/:id/grant": "read or create a provider access grant",
    "POST /api/marketplace/grants/:id/:action": "activate, revoke, or expire a provider grant",
    "GET|POST /api/marketplace/requests/:id/receipt": "read or record a resource receipt",
    "POST /api/marketplace/receipts/:id/:action": "requester verification or rejection of a receipt",
    "GET|POST /api/settlements": "list settlements or derive/resume one from an accepted persisted quote",
    "GET /api/settlements/:id": "read an owned settlement state",
    "POST /api/settlements/:id/prepare": "construct an unsigned Solana transaction",
    "POST /api/settlements/:id/submit": "validate and submit a caller-wallet signed transaction",
    "POST /api/settlements/:id/confirm": "separately verify confirmation or on-chain failure",
    "POST /api/settlements/:id/cancel": "cancel an unsubmitted wallet signing flow"
  }
}