教程：构建 Agent

from cryptography.hazmat.primitives.asymmetric import ec
from cryptography.hazmat.primitives import serialization
import json

# 生成密钥对
private_key = ec.generate_private_key(ec.SECP256R1())

# 保存私钥（务必保密！）
pem = private_key.private_bytes(
    serialization.Encoding.PEM,
    serialization.PrivateFormat.PKCS8,
    serialization.NoEncryption(),
)
with open("agent-private.pem", "wb") as f:
    f.write(pem)

# PEM 字符串就是你传给 SDK 的内容
pem_str = pem.decode()
print("Private key saved to agent-private.pem")

# 生成私钥
openssl ecparam -genkey -name prime256v1 -noout -out agent-private.pem

# 提取公钥（用于身份文档）
openssl ec -in agent-private.pem -pubout -out agent-public.pem

pip install ath-sdk cryptography

from ath import ATHGatewayClient

# 加载私钥
with open("agent-private.pem") as f:
    pem = f.read()

with ATHGatewayClient(
    url="https://your-gateway.com",
    agent_id="https://your-agent.com/.well-known/agent.json",
    private_key=pem,
    key_id="default",
) as client:

    # 1. 发现
    discovery = client.discover()
    for p in discovery.supported_providers:
        print(f"  {p.provider_id}: {p.available_scopes}")

    # 2. 注册——SDK 自动签署认证 JWT
    reg = client.register(
        developer={"name": "My Company", "id": "my-company"},
        providers=[{"provider_id": "my-provider", "scopes": ["read", "write"]}],
        purpose="AI shopping assistant",
    )
    print(f"Agent status: {reg.agent_status}")

    # 3. 授权——获取用户授权 URL
    auth = client.authorize("my-provider", ["read", "write"])
    print(f"Send user to: {auth.authorization_url}")
    print(f"Session ID: {auth.ath_session_id}")

    # ⏳ 等待用户在浏览器中批准（10 分钟超时）

    # 4. 令牌
    token = client.exchange_token("auth-code", auth.ath_session_id)
    print(f"Granted scopes: {token.effective_scopes}")

    # 5. 使用 API
    products = client.proxy("my-provider", "GET", "/products")
    print(f"Products: {products}")

    client.proxy("my-provider", "POST", "/cart/add", {
        "productId": "prod-123", "quantity": 2,
    })

    # 6. 撤销
    client.revoke()

    # 保存凭据用于下次会话（避免重新注册）
    client.save_credentials("my-agent-creds.json")

npm install -g athx

# 配置（一次性）
athx config init
athx config set-gateway my-gw https://your-gateway.com
athx config set agent-id https://your-agent.com/.well-known/agent.json
athx config set key-path ./agent-private.pem  # 你的 ES256 私钥

GATEWAY="my-gw"

# 1. 发现
athx discover -g $GATEWAY

# 2. 注册
athx register -g $GATEWAY --provider my-provider --scopes "read,write"

# 3. 授权——打印一个 URL 供用户访问
athx authorize -g $GATEWAY --provider my-provider --scopes "read,write"
# 输出：
#   Session: ath_sess_abc123
#   Please visit: https://...
# → 在浏览器中打开该 URL，登录，点击批准

# 4. 令牌——用户批准后
athx token -g $GATEWAY --code AUTH_CODE --session ath_sess_abc123

# 5. 使用 API
athx proxy my-provider GET /products -g $GATEWAY
athx proxy my-provider POST /cart/add -g $GATEWAY \
  --body '{"productId":"prod-123","quantity":2}'

# 6. 撤销
athx revoke -g $GATEWAY --provider my-provider