Add OHS endpoints

examples/hosted-agents/auth/main.go

@@ -0,0 +1,71 @@
+package main
+
+import (
+	"context"
+	"fmt"
+	"net/url"
+	"os"
+	"time"
+
+	"github.com/digitalocean/godo"
+)
+
+func main() {
+	provider := os.Getenv("HOSTED_AGENT_PROVIDER")
+	if provider == "" {
+		provider = "github"
+	}
+
+	client := mustClient()
+	ctx := context.Background()
+
+	start, _, err := client.HostedAgents.StartProviderAuth(ctx, provider)
+	if err != nil {
+		die(err)
+	}
+
+	if start.Status == "success" {
+		fmt.Printf("%s is already connected for your team\n", provider)
+		return
+	}
+
+	fmt.Printf("To connect %s, open this URL and authorize access:\n\n  %s\n\n", provider, start.ConnectURL)
+	if start.VerificationCode != "" {
+		fmt.Printf("Verify the page shows code: %s\n\n", start.VerificationCode)
+	}
+
+	fmt.Println("Waiting for authorization to complete...")
+	for {
+		poll, _, err := client.HostedAgents.PollProviderAuth(ctx, provider, start.PollURL)
+		if err != nil {
+			die(err)
+		}
+		if poll.Status == "success" {
+			fmt.Printf("%s connected successfully\n", provider)
+			return
+		}
+		time.Sleep(2 * time.Second)
+	}
+}
+
+func mustClient() *godo.Client {
+	token := os.Getenv("DIGITALOCEAN_TOKEN")
+	if token == "" {
+		fmt.Fprintln(os.Stderr, "DIGITALOCEAN_TOKEN is required")
+		os.Exit(2)
+	}
+	client := godo.NewFromToken(token)
+	if baseURL := os.Getenv("DIGITALOCEAN_API_URL"); baseURL != "" {
+		u, err := url.Parse(baseURL)
+		if err != nil {
+			panic(err)
+		}
+		client.BaseURL = u
+	}
+	return client
+}
+
+func die(err error) {
+	fmt.Fprintln(os.Stderr, err)
+	os.Exit(1)
+}

examples/hosted-agents/create-session/main.go

@@ -0,0 +1,66 @@
+package main
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"net/url"
+	"os"
+
+	"github.com/digitalocean/godo"
+)
+
+func main() {
+	token := os.Getenv("DIGITALOCEAN_TOKEN")
+	if token == "" {
+		fmt.Fprintln(os.Stderr, "DIGITALOCEAN_TOKEN is required")
+		os.Exit(2)
+	}
+
+	client := godo.NewFromToken(token)
+	if baseURL := os.Getenv("DIGITALOCEAN_API_URL"); baseURL != "" {
+		u, err := url.Parse(baseURL)
+		if err != nil {
+			panic(err)
+		}
+		client.BaseURL = u
+	}
+
+	agentKind := godo.HostedAgentKindClaudeCode
+	if v := os.Getenv("HOSTED_AGENT_KIND"); v != "" {
+		agentKind = godo.HostedAgentKind(v)
+	}
+
+	ctx := context.Background()
+
+	if client.HostedAgents == nil {
+		fmt.Fprintln(os.Stderr, "HostedAgents service is not initialized on this godo client")
+		os.Exit(1)
+	}
+
+	session, resp, err := client.HostedAgents.CreateSession(ctx, &godo.HostedAgentSessionCreateRequest{
+		AgentKind: agentKind,
+		RepoHint:  os.Getenv("REPO_HINT"),
+	})
+	if err != nil {
+		var apiErr *godo.ErrorResponse
+		if errors.As(err, &apiErr) {
+			fmt.Fprintf(os.Stderr, "API error (HTTP %d): %s\n", apiErr.Response.StatusCode, apiErr.Message)
+			os.Exit(1)
+		}
+		fmt.Fprintln(os.Stderr, err)
+		os.Exit(1)
+	}
+
+	fmt.Printf("HTTP %d\n", resp.StatusCode)
+	if session == nil {
+		fmt.Fprintln(os.Stderr, "API returned no session")
+		os.Exit(1)
+	}
+	fmt.Printf("session_id:  %s\n", session.SessionID)
+	fmt.Printf("status:      %s\n", session.Status)
+	fmt.Printf("agent_kind:  %s\n", session.AgentKind)
+	if session.RepoHint != "" {
+		fmt.Printf("repo_hint:   %s\n", session.RepoHint)
+	}
+}

examples/hosted-agents/destroy-session/main.go

@@ -0,0 +1,56 @@
+package main
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"net/url"
+	"os"
+
+	"github.com/digitalocean/godo"
+)
+
+func main() {
+	sessionID := os.Getenv("HOSTED_AGENT_SESSION_ID")
+	if sessionID == "" {
+		fmt.Fprintln(os.Stderr, "HOSTED_AGENT_SESSION_ID is required")
+		os.Exit(2)
+	}
+
+	client := mustClient()
+	ctx := context.Background()
+
+	resp, err := client.HostedAgents.DestroySession(ctx, sessionID)
+	if err != nil {
+		die(err)
+	}
+
+	fmt.Printf("HTTP %d — session %s destroyed\n", resp.StatusCode, sessionID)
+}
+
+func mustClient() *godo.Client {
+	token := os.Getenv("DIGITALOCEAN_TOKEN")
+	if token == "" {
+		fmt.Fprintln(os.Stderr, "DIGITALOCEAN_TOKEN is required")
+		os.Exit(2)
+	}
+	client := godo.NewFromToken(token)
+	if baseURL := os.Getenv("DIGITALOCEAN_API_URL"); baseURL != "" {
+		u, err := url.Parse(baseURL)
+		if err != nil {
+			panic(err)
+		}
+		client.BaseURL = u
+	}
+	return client
+}
+
+func die(err error) {
+	var apiErr *godo.ErrorResponse
+	if errors.As(err, &apiErr) {
+		fmt.Fprintf(os.Stderr, "API error (HTTP %d): %s\n", apiErr.Response.StatusCode, apiErr.Message)
+	} else {
+		fmt.Fprintln(os.Stderr, err)
+	}
+	os.Exit(1)
+}

examples/hosted-agents/download-workspace/main.go

@@ -0,0 +1,106 @@
+package main
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"io"
+	"net/url"
+	"os"
+
+	"github.com/digitalocean/godo"
+)
+
+// download-workspace streams a file (or tar archive) out of a session's sandbox
+// workspace and writes it to disk.
+//
+// The download is chunked and ends with a fixed 73-byte integrity footer
+// (DOWSSHA1 + SHA-256 hex + newline). The godo client strips that footer and
+// verifies the payload checksum for you: you MUST read the body to EOF
+// (io.Copy below) and then Close it. A missing, invalid, or mismatched footer
+// surfaces as an error — when that happens the partial output must be discarded.
+//
+// Required env:
+//   - DIGITALOCEAN_TOKEN
+//   - HOSTED_AGENT_SESSION_ID
+//   - WORKSPACE_PATH          source path inside /workspace
+//   - LOCAL_FILE              local destination path
+//
+// Optional env:
+//   - AS_ARCHIVE=true         tar-stream the directory at WORKSPACE_PATH
+func main() {
+	sessionID := mustEnv("HOSTED_AGENT_SESSION_ID")
+	workspacePath := mustEnv("WORKSPACE_PATH")
+	localFile := mustEnv("LOCAL_FILE")
+
+	client := mustClient()
+	ctx := context.Background()
+
+	dl, resp, err := client.HostedAgents.DownloadWorkspace(ctx, sessionID, &godo.HostedAgentWorkspaceDownloadRequest{
+		Path:      workspacePath,
+		AsArchive: os.Getenv("AS_ARCHIVE") == "true",
+	})
+	if err != nil {
+		die(err)
+	}
+	defer dl.Body.Close()
+
+	fmt.Printf("HTTP %d\n", resp.StatusCode)
+	fmt.Printf("is_archive: %t\n", dl.IsArchive)
+	if dl.SizeBytes > 0 {
+		fmt.Printf("size hint:  %d bytes\n", dl.SizeBytes)
+	}
+
+	out, err := os.Create(localFile)
+	if err != nil {
+		die(err)
+	}
+
+	// Read to EOF. The final Read verifies the integrity footer, so an error
+	// here means the transfer was truncated or corrupted.
+	n, copyErr := io.Copy(out, dl.Body)
+	closeErr := out.Close()
+
+	if copyErr != nil {
+		os.Remove(localFile) // discard corrupted output
+		die(fmt.Errorf("download failed after %d bytes (output discarded): %w", n, copyErr))
+	}
+	if closeErr != nil {
+		die(closeErr)
+	}
+
+	fmt.Printf("wrote:      %d bytes to %s\n", n, localFile)
+	fmt.Println("checksum:   verified")
+}
+
+func mustEnv(key string) string {
+	v := os.Getenv(key)
+	if v == "" {
+		fmt.Fprintf(os.Stderr, "%s is required\n", key)
+		os.Exit(2)
+	}
+	return v
+}
+
+func mustClient() *godo.Client {
+	token := mustEnv("DIGITALOCEAN_TOKEN")
+	client := godo.NewFromToken(token)
+	if baseURL := os.Getenv("DIGITALOCEAN_API_URL"); baseURL != "" {
+		u, err := url.Parse(baseURL)
+		if err != nil {
+			panic(err)
+		}
+		client.BaseURL = u
+	}
+	return client
+}
+
+func die(err error) {
+	var apiErr *godo.ErrorResponse
+	if errors.As(err, &apiErr) {
+		fmt.Fprintf(os.Stderr, "API error (HTTP %d): %s\n", apiErr.Response.StatusCode, apiErr.Message)
+	} else {
+		fmt.Fprintln(os.Stderr, err)
+	}
+	os.Exit(1)
+}

examples/hosted-agents/exec-in-sandbox/main.go

@@ -0,0 +1,86 @@
+package main
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"net/url"
+	"os"
+	"strings"
+
+	"github.com/digitalocean/godo"
+)
+
+func main() {
+	sessionID := os.Getenv("HOSTED_AGENT_SESSION_ID")
+	if sessionID == "" {
+		fmt.Fprintln(os.Stderr, "HOSTED_AGENT_SESSION_ID is required")
+		os.Exit(2)
+	}
+
+	raw := envOr("EXEC_COMMAND", "echo,hello from sandbox")
+	argv := strings.Split(raw, ",")
+	for i := range argv {
+		argv[i] = strings.TrimSpace(argv[i])
+	}
+
+	client := mustClient()
+	ctx := context.Background()
+
+	out, resp, err := client.HostedAgents.ExecInSandbox(ctx, sessionID, &godo.HostedAgentSandboxExecRequest{
+		Argv:           argv,
+		Workdir:        os.Getenv("EXEC_WORKDIR"),
+		TimeoutSeconds: 30,
+	})
+	if err != nil {
+		var apiErr *godo.ErrorResponse
+		if errors.As(err, &apiErr) && apiErr.Response.StatusCode == 501 {
+			fmt.Fprintf(os.Stderr, "HTTP 501 — ExecInSandbox is not implemented on this server yet\n")
+			os.Exit(1)
+		}
+		die(err)
+	}
+
+	fmt.Printf("HTTP %d\n", resp.StatusCode)
+	fmt.Printf("exit_code: %d\n", out.ExitCode)
+	if out.Stdout != "" {
+		fmt.Printf("stdout:\n%s\n", out.Stdout)
+	}
+	if out.Stderr != "" {
+		fmt.Printf("stderr:\n%s\n", out.Stderr)
+	}
+}
+
+func envOr(key, fallback string) string {
+	if v := os.Getenv(key); v != "" {
+		return v
+	}
+	return fallback
+}
+
+func mustClient() *godo.Client {
+	token := os.Getenv("DIGITALOCEAN_TOKEN")
+	if token == "" {
+		fmt.Fprintln(os.Stderr, "DIGITALOCEAN_TOKEN is required")
+		os.Exit(2)
+	}
+	client := godo.NewFromToken(token)
+	if baseURL := os.Getenv("DIGITALOCEAN_API_URL"); baseURL != "" {
+		u, err := url.Parse(baseURL)
+		if err != nil {
+			panic(err)
+		}
+		client.BaseURL = u
+	}
+	return client
+}
+
+func die(err error) {
+	var apiErr *godo.ErrorResponse
+	if errors.As(err, &apiErr) {
+		fmt.Fprintf(os.Stderr, "API error (HTTP %d): %s\n", apiErr.Response.StatusCode, apiErr.Message)
+	} else {
+		fmt.Fprintln(os.Stderr, err)
+	}
+	os.Exit(1)
+}