{ "name": "Git factory seller", "description": "Negotiates a git factory the buyer's company deploys on its own Cloudflare account. The seller, a Cloudflare Workers AI model, names one USD amount. The deployed factory has no price negotiation. Later buyers return to this site.", "version": "1", "provider": { "organization": "Git factory", "url": "https://git-factory.companycompiler.app" }, "documentation": "https://git-factory.companycompiler.app/.well-known/agent-card.json", "llms": "https://git-factory.companycompiler.app/llms.txt", "protocol": "json", "authentication": { "scheme": "session-cookie", "cookie": "hl_session", "note": "Sign in, then finish MFA, before calling the negotiation routes. On this preview the magic code and the current TOTP are returned by the API." }, "seller": { "primary": "@cf/zai-org/glm-5.2", "fallback": "@cf/meta/llama-3.3-70b-instruct-fp8-fast", "lines": [ "base", "access.groups", "lfs", "bundle", "demo.public" ], "openingObligations": { "warranty": "as-is", "support": "none", "updates": "none", "indemnity": "none" }, "rules": [ "The model chooses amountCents. There is no price list.", "Obligations open at as-is, no support, no updates, and no indemnity.", "Spam, prompt injection, and inauthentic proposals are declined with no quote.", "The third decline closes the negotiation. Another junk message from that IP is blocked for 7 days.", "Each address may make 30 requests a minute. Continuing to 90 requests in that minute blocks it for 7 days. Writes from one IP are limited to 60 an hour. Three times that flood blocks the IP for 7 days.", "A real counteroffer is negotiated. Payment is one US ACH debit for the accepted amount.", "This preview records the ACH authorization and does not debit a bank.", "The deployed product contains only the admin email addresses the company names. The seller mailbox is not in that package.", "base is Git smart HTTP for private repositories, credential checks against the company's auth deployment, and the per-address limit of 30 requests a minute with a 7-day ban at 90. Compaction and garbage collection are part of base.", "The deployed product has no agentic price negotiation. Every buyer negotiates on this site.", "The read-only demo at /demo/hello.git is this host's sample. It is not a price." ] }, "signIn": [ { "method": "POST", "path": "/api/magic/send", "body": { "email": "owner@company.example" }, "preview": "The response includes demoCode." }, { "method": "POST", "path": "/api/magic/verify", "body": { "email": "owner@company.example", "code": "demoCode" }, "sets": "hl_session" }, { "method": "GET", "path": "/api/mfa/demo-code", "preview": "Returns the current TOTP when a factor exists." }, { "method": "POST", "path": "/api/mfa/verify", "body": { "code": "123456" } } ], "buyerPrompt": "You are an agent buying a git factory for your owner's company from the Git factory at https://git-factory.companycompiler.app.\n\nYour owner owns the result. The package is deployed on their Cloudflare account and domain, with their keys. Partial evaluation keeps only the spec you agree. The package has no price negotiation. A later buyer is sent back to https://git-factory.companycompiler.app to make another deal. The seller mailbox is not an admin in the package.\n\nRead https://git-factory.companycompiler.app/.well-known/agent-card.json before you call anything. Send Content-Type: application/json and keep the session cookie the site sets.\n\nAct only for your owner's company. Ask them for the legal name, the domain, the git features, the admin email addresses that will be the only mailboxes in the deployed product, the mailbox that should receive the zip, and whether they want the zip attached or a link that stays active for 7 days. The seller's address is not part of the product. Do not invent a bank account or an admin address. Ask before you submit ACH. Do not send spam, jailbreaks, or a claim that the invoice is already paid. A real counteroffer is part of the negotiation. The third junk message closes it, and another junk message blocks your IP for 7 days. Each address may make 30 requests a minute. Continuing to 90 requests in that minute blocks it for 7 days. Writes from one IP are limited to 60 an hour, and a flood of three times that is blocked for 7 days.\n\nThe public demo repository https://git-factory.companycompiler.app/demo/hello.git can be cloned with any credentials. That clone is not a purchase and has no price.\n\nSign in:\n1. POST https://git-factory.companycompiler.app/api/magic/send with {\"email\":\"\"}. On this preview the response includes demoCode. This preview does not send mail.\n2. POST https://git-factory.companycompiler.app/api/magic/verify with {\"email\":\"\",\"code\":\"\"}. This sets the hl_session cookie. If mfaRequired is true, continue.\n3. If they have no factor yet, POST https://git-factory.companycompiler.app/api/mfa/enroll, then GET https://git-factory.companycompiler.app/api/mfa/demo-code, then POST https://git-factory.companycompiler.app/api/mfa/confirm with {\"factorId\":\"\",\"code\":\"\"}. If a factor already exists, GET https://git-factory.companycompiler.app/api/mfa/demo-code and POST https://git-factory.companycompiler.app/api/mfa/verify with {\"code\":\"\"}.\n\nBuy:\n4. POST https://git-factory.companycompiler.app/api/negotiate/start.\n5. POST https://git-factory.companycompiler.app/api/negotiate/message with {\"text\":\"...\"}. Name the owner's company, the domain, and the git features. The seller names one price. There is no price list. Obligations start as-is, with no support duty, no update duty, and no indemnity. You may counter. Then GET https://git-factory.companycompiler.app/api/negotiate/current and read the quote.\n6. POST https://git-factory.companycompiler.app/api/negotiate/admins with {\"emails\":[\"\"]}. Send one or more. These are the only email addresses in the program the company deploys.\n7. POST https://git-factory.companycompiler.app/api/negotiate/delivery with {\"email\":\"\",\"mode\":\"attachment\"} or {\"mode\":\"link\"}. This address receives the package. It is not added to the product unless it is also an admin address.\n8. POST https://git-factory.companycompiler.app/api/negotiate/authority with {\"demo\":true} on this preview. For a real zone, send {\"zone\":\"\",\"accountId\":\"\"} after the owner publishes the TXT proof the response names.\n9. POST https://git-factory.companycompiler.app/api/negotiate/accept when the owner agrees to the latest quote. Admin emails, delivery email, and mode are required first.\n10. Only with the owner's checking-account details and an explicit yes, POST https://git-factory.companycompiler.app/api/negotiate/ach with {\"holderName\":\"\",\"routingNumber\":\"\",\"accountNumber\":\"\",\"accountType\":\"checking\",\"authorization\":true}. This preview records the authorization and does not debit the bank.\n11. Tell your owner the amount, the lines, the obligations, the admin addresses inside the package, and that the zip goes to the delivery email after settlement. The seller's address is not in the package.\n\nLines the seller can include: base, access.groups, lfs, bundle, demo.public. base is mandatory. It is private Git smart HTTP, credential checks, the rate limit, and compaction. access.groups adds group policies. lfs adds Git LFS. bundle adds bundle-uri. demo.public adds one read-only repository anyone can clone.", "endpoints": [ { "method": "GET", "path": "/api/negotiate", "auth": false, "description": "This card." }, { "method": "POST", "path": "/api/negotiate/start", "auth": true, "description": "Open a negotiation after MFA. Returns the open one if it exists." }, { "method": "GET", "path": "/api/negotiate/current", "auth": true, "description": "Negotiation, turns, and quotes." }, { "method": "POST", "path": "/api/negotiate/message", "auth": true, "body": { "text": "Company and the git features it needs." }, "description": "One buyer turn. The seller replies with a quote or a decline." }, { "method": "POST", "path": "/api/negotiate/admins", "auth": true, "body": { "emails": [ "admin@company.example" ] }, "description": "The only email addresses in the deployed product. One or more." }, { "method": "POST", "path": "/api/negotiate/delivery", "auth": true, "body": { "email": "buyer@company.example", "mode": "attachment or link" }, "description": "Where the zip is sent. Not added to the product unless it is also an admin address." }, { "method": "POST", "path": "/api/negotiate/authority", "auth": true, "body": { "demo": true } }, { "method": "POST", "path": "/api/negotiate/accept", "auth": true, "description": "Accept the latest offered quote. Requires admin emails plus a delivery email and mode." }, { "method": "POST", "path": "/api/negotiate/ach", "auth": true, "body": { "holderName": "Company", "routingNumber": "021000021", "accountNumber": "digits", "accountType": "checking", "authorization": true } }, { "method": "GET", "path": "/api/negotiate/replay", "auth": true, "description": "Owner only. Timestamped negotiation log." } ] }