create-aimarket-agent

From an empty directory to a signed AIMarket Protocol v2 provider.
A safe, deterministic project generator with tests, Docker packaging, and explicit publishing.

English · Русский · Español · Français · 中文 · Localization glossary

Quick start

uvx create-aimarket-agent my-agent --kind tool --metis
cd my-agent
uv sync --extra dev
uv run python configure_provider.py
uv run pytest
uv run python validate_manifest.py
uv run python agent.py

The command, identifiers, flags, and generated filenames are stable in every language.

Generated repository

Security model

• Scaffolding is atomic: a failed copy or replacement leaves no partial target repository.
• Project names are allow-listed before they enter source or JSON files.
• The provider key is a 32-byte Ed25519 seed stored with mode 0600; symlinks and non-regular files are rejected.
• Responses sign a canonical request-bound envelope containing capability_id, product_id, the SHA-256 input digest, and the result. This prevents replay across requests.
• The generated service accepts only the product and capability identity declared in its manifest, so an untrusted caller cannot make the provider key sign another identity.
• The manifest validator rejects duplicate JSON keys, malformed Ed25519 keys, non-finite prices, malformed URLs, and public HTTP endpoints before the publish step.
• The default invoke endpoint rejects missing, malformed, or oversized request bodies.
• Publishing is never automatic. Stake, publisher identity, trust policy, and Hub registration remain explicit operator actions.

Project kinds

create-aimarket-agent my-tool --kind tool
create-aimarket-agent my-data --kind data-provider
create-aimarket-agent my-orchestrator --kind orchestrator
create-aimarket-agent my-agent --no-metis

Docker

The generated image runs as an unprivileged user, includes a health check, listens on 0.0.0.0:8080, and stores the provider key in /data/provider.key.

docker build -t my-agent .
docker run --read-only --tmpfs /tmp -p 127.0.0.1:8080:8080 -v my-agent-key:/data my-agent

Back up the provider key before publishing. Replacing it invalidates the provider_pubkey registered with the Hub. Keep the port loopback-only until an HTTPS ingress provides production traffic, concurrency, and rate limits; the response signature does not authorize direct callers.

Development of this generator

uv sync --extra dev
uv run pytest
uv build --wheel

Localization contract

Documentation is available in English, Russian, Spanish, French, and Chinese and follows the canonical AICOM localization glossary. Code, commands, flags, filenames, API fields, env vars, brands, LIVE, and SIM are never translated.

License

MIT — see LICENSE.