所有公开接口在 /api/... 前缀（线上由 Nginx 反代到控制面）。请求体均为 JSON。
账号
POST /api/auth/register { email, password }
POST /api/auth/login { email, password }
→ { access_token, user: { id, email } }钱包
GET /api/marketplace/wallet/{user_id}
POST /api/marketplace/wallet/deposit { user_id, amount, note? }挂单 / 投标
GET /api/marketplace/listings
GET /api/marketplace/listings/search?model_id=&max_itc_per_token=&sort=
POST /api/marketplace/listings { buyer_user_id, accepted_model_ids, min_tokens_per_second,
max_tokens_per_hour, max_itc_per_hour, itc_per_token }
POST /api/marketplace/listings/{id}/cancel
GET /api/marketplace/listings/{id}/bids
POST /api/marketplace/bids { listing_id, seller_user_id, executor_id,
offered_model_id, declared_tokens_per_second, itc_per_token }
POST /api/marketplace/bids/{id}/accept合约 / 计量 / 结算
GET /api/marketplace/users/{user_id}/contracts?role=buyer|seller
POST /api/marketplace/contracts/{id}/meters { tokens_served, window_start, window_end }
POST /api/marketplace/contracts/{id}/settle评价 / 争议
POST /api/marketplace/reviews { contract_id, reviewer_user_id, rating, comment? }
GET /api/marketplace/sellers/{user_id}/reputation
POST /api/marketplace/disputes
POST /api/marketplace/disputes/{id}