# The Coloring Collection

Original printable coloring books. Merchant: Dream Hatch Labs LLC.

- Live catalog: /api/agent/catalog
- Purchase API: /agent-api.json
- Buyer instructions: /agents/
- Purchase terms: /terms
- Privacy: /privacy
- Claim a purchase into a Google account: /claim/

The catalog is the authority for current purchase availability. Do not offer checkout if available=false. PDFs cost USD 4.99 before applicable tax; A4 and US Letter contain the same 40 designs. Personal-use license only. No physical shipment for PDFs.

Amazon paperbacks are separate offers: only use a non-null verified paperback.url. Never invent an ASIN, price, availability, or Amazon fulfillment capability.

## Authorized PDF purchase (MPP, Stripe SPT card method)
1. Get the buyer's specific authorization for the book and maximum total. Present the catalog's exact consent_text to the buyer and obtain their explicit acknowledgment; never accept it automatically. Obtain their explicit acceptance of the current terms_version, request for immediate delivery, and acknowledgement that applicable withdrawal rights are lost when digital supply begins; mandatory rights for defects remain. Never infer this consent from a generic browsing request.
2. Generate a cryptographically random 32-byte token as 64 lowercase hex characters. Retain it privately as X-Order-Token. Reuse it when retrying order creation; never use it for a different purchase. Do not put it in a URL, analytics event, or public log.
3. POST /api/agent/orders with X-Order-Token and JSON {book, max_total (USD cents), billing_address:{country,postal_code,state,city,line1,line2}, terms_version (from catalog), authorized_by_buyer:true, immediate_delivery:true, withdrawal_acknowledged:true}. Provide only buyer-authorized billing details. Read the returned total; do not exceed the buyer's limit.
4. POST the returned pay_url with X-Order-Token. A 402 response contains the MPP challenge. Use an MPP-compatible wallet to authorize it and retry the exact URL with both the Payment Authorization header and X-Order-Token. Preserve the challenge and credential for safe retries. Never supply raw card data or a merchant Stripe secret.
5. If a request times out, GET /api/agent/orders/{id} with the same token. Retry the same order/credential, not a new purchase. 409 means reconcile/retry the same order, not buy again. An unpaid order expires after 30 minutes. Do not start another purchase after an ambiguous payment without resolving the first.
6. Payment confirmation returns a Payment-Receipt header and an order receipt with download URLs. A4 and Letter downloads are included in the one payment. Download links expire after 7 days; the private order token retrieves fresh links. Never pay again to refresh a link. Refunded/disputed orders cannot download.
7. Deliver the receipt, the exact consent text/version/acceptance time returned with the order, the order ID and private order token securely to the buyer. They can sign into /claim/ to attach the order to their library. Never claim the order into your own or another person's account.

Availability in a protocol does not imply automatic listing in every AI shopping platform. This service supports MPP card/SPT payments, not ACP/UCP or crypto checkout. Do not send these orders to the browser Checkout Sessions API.

## Free sample
The mandalas-botanical product has a sample object with 3 designs, price 0, personal-use license, authentication_required=false and A4/Letter download URLs. Follow redirects to retrieve the PDF. Free samples remain available when paid checkout is unavailable. Do not initiate payment or request sign-in for a sample. Share /free-coloring-pages/; do not redistribute or sell the files. The sample designs are included in the paid book's 40 designs. Other products have sample=null.