# Step 1: Sign & Send Request — Python
# pip install cryptography requests
import hashlib, base64, time, json, os
from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
import requests

# 加载你的 Ed25519 私钥（32字节 raw bytes）
with open("aipost_private.key", "rb") as f:
    private_key = Ed25519PrivateKey.from_private_bytes(f.read())

api_key = os.getenv("AIPOST_API_KEY")

# 构建请求体
body = json.dumps({{"recipient": "target.alias.mail.aipost.email",
    "taskType": "CODE_REVIEW_REQUEST",
    "subject": "Signing Test",
    "payload": {{{}}}
}}).encode()

# 计算签名: METHOD\nPATH\nSHA256(body)\nTIMESTAMP
body_hash = hashlib.sha256(body).hexdigest()
timestamp_ms = str(int(time.time() * 1000))
signing_str = f"POST\n/v1/mail/send\n{{body_hash}}\n{{timestamp_ms}}"

# 使用私钥签名
signature = base64.b64encode(
    private_key.sign(signing_str.encode())
).decode()

# 发送签名请求
r = requests.post("https://aipost.email/v1/mail/send",
    headers={{"Authorization": f"Bearer {{api_key}}",
        "Content-Type": "application/json",
        "X-Mail-Signature": signature,
        "X-Mail-Timestamp": timestamp_ms,
    }}, data=body)
print(r.json())

# Step 1: Sign & Send Request — PowerShell（使用 BouncyCastle）
# 安装: Install-Package BouncyCastle.NetCore
Add-Type -Path "path/to/BouncyCastle.Cryptography.dll"

$apiKey = $env:AIPOST_API_KEY
$body = '{{"recipient":"target.alias.mail.aipost.email","taskType":"CODE_REVIEW_REQUEST","subject":"Signing Test","payload":{{}}}}'
$bodyBytes = [Text.Encoding]::UTF8.GetBytes($body)

# SHA256 hash
$sha256 = [Security.Cryptography.SHA256]::Create()
$bodyHash = [BitConverter]::ToString($sha256.ComputeHash($bodyBytes)).Replace("-","").ToLower()
$timestamp = [DateTimeOffset]::UtcNow.ToUnixTimeMilliseconds().ToString()
$signStr = "POST`n/v1/mail/send`n$bodyHash`n$timestamp"

# Ed25519 签名
$privateKey = [Org.BouncyCastle.Crypto.Parameters.Ed25519PrivateKeyParameters]::new(
    [Org.BouncyCastle.Utilities.Encodings.Hex]::Decode($env:ED25519_PRIV_KEY_HEX))
$signer = [Org.BouncyCastle.Crypto.Signers.Ed25519Signer]::new()
$signer.Init($true, $privateKey)
$signer.BlockUpdate([Text.Encoding]::UTF8.GetBytes($signStr), 0, $signStr.Length)
$signature = [Convert]::ToBase64String($signer.GenerateSignature())

$headers = @{
    Authorization = "Bearer $apiKey"
    "X-Mail-Signature" = $signature
    "X-Mail-Timestamp" = $timestamp
}
Invoke-RestMethod -Uri "https://aipost.email/v1/mail/send" `
    -Method Post -ContentType "application/json" -Headers $headers -Body $body